From 933c8e71bdcfa421e3daa179faaecdc09914a86e Mon Sep 17 00:00:00 2001 From: GUARDiA Date: Sat, 4 Jul 2026 08:32:22 +0900 Subject: [PATCH] =?UTF-8?q?feat(auth):=20OTP=202FA=20=EB=B0=B1+=ED=94=84?= =?UTF-8?q?=EB=A1=A0=ED=8A=B8?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- backend/pom.xml | 3 + .../zioinfo/hrm/admin/AdminController.java | 25 ++ .../com/zioinfo/hrm/admin/AdminMapper.java | 2 + .../com/zioinfo/hrm/auth/AuthController.java | 68 ++++- .../com/zioinfo/hrm/auth/AuthService.java | 34 ++- .../java/com/zioinfo/hrm/auth/HrmUser.java | 3 + .../hrm/auth/dto/ChangePasswordRequest.java | 10 + .../hrm/auth/dto/OtpConfirmRequest.java | 7 + .../hrm/auth/dto/OtpSetupResponse.java | 13 + .../hrm/auth/dto/OtpVerifyRequest.java | 10 + .../zioinfo/hrm/auth/mapper/UserMapper.java | 22 ++ .../hrm/config/AdminPasswordSeeder.java | 130 +++++++++ .../zioinfo/hrm/uiws/auth/OtpAuthService.java | 185 +++++++++++++ .../zioinfo/hrm/uiws/auth/TotpService.java | 81 ++++++ .../hrm/uiws/common/UiwsErrorCode.java | 4 + .../hrm/uiws/config/UiwsProperties.java | 5 + backend/src/main/resources/application.yml | 5 +- backend/src/main/resources/db/93_auth_otp.sql | 11 + .../main/resources/db/ops_otp_reset_all.sql | 16 ++ .../src/main/resources/mapper/AdminMapper.xml | 4 + .../src/main/resources/mapper/UserMapper.xml | 3 +- .../static/assets/index-Bcwr7v00.css | 1 - .../static/assets/index-QZl_9xgd.css | 1 + .../resources/static/assets/index-cExOrMDr.js | 255 +++++++++++++++++ .../resources/static/assets/index-fwjGAGOv.js | 229 --------------- backend/src/main/resources/static/favicon.ico | Bin 0 -> 17542 bytes backend/src/main/resources/static/index.html | 6 +- frontend/index.html | 2 +- frontend/public/favicon.ico | Bin 0 -> 17542 bytes frontend/src/App.tsx | 14 +- frontend/src/api/client.ts | 16 ++ frontend/src/api/uiws.ts | 4 + frontend/src/pages/AdminPage.tsx | 31 ++- frontend/src/pages/LoginPage.tsx | 67 ++++- frontend/src/pages/MyPage.tsx | 261 ++++++++++++++++++ 35 files changed, 1265 insertions(+), 263 deletions(-) create mode 100644 backend/src/main/java/com/zioinfo/hrm/auth/dto/ChangePasswordRequest.java create mode 100644 backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpConfirmRequest.java create mode 100644 backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpSetupResponse.java create mode 100644 backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpVerifyRequest.java create mode 100644 backend/src/main/java/com/zioinfo/hrm/config/AdminPasswordSeeder.java create mode 100644 backend/src/main/java/com/zioinfo/hrm/uiws/auth/OtpAuthService.java create mode 100644 backend/src/main/java/com/zioinfo/hrm/uiws/auth/TotpService.java create mode 100644 backend/src/main/resources/db/93_auth_otp.sql create mode 100644 backend/src/main/resources/db/ops_otp_reset_all.sql delete mode 100644 backend/src/main/resources/static/assets/index-Bcwr7v00.css create mode 100644 backend/src/main/resources/static/assets/index-QZl_9xgd.css create mode 100644 backend/src/main/resources/static/assets/index-cExOrMDr.js delete mode 100644 backend/src/main/resources/static/assets/index-fwjGAGOv.js create mode 100644 backend/src/main/resources/static/favicon.ico create mode 100644 frontend/public/favicon.ico create mode 100644 frontend/src/pages/MyPage.tsx diff --git a/backend/pom.xml b/backend/pom.xml index eab92c0..808494f 100644 --- a/backend/pom.xml +++ b/backend/pom.xml @@ -50,6 +50,9 @@ io.jsonwebtokenjjwt-impl${jjwt.version}runtime io.jsonwebtokenjjwt-jackson${jjwt.version}runtime + + dev.samstevens.totptotp1.7.1 + org.springdoc diff --git a/backend/src/main/java/com/zioinfo/hrm/admin/AdminController.java b/backend/src/main/java/com/zioinfo/hrm/admin/AdminController.java index ca94dea..60e4e71 100644 --- a/backend/src/main/java/com/zioinfo/hrm/admin/AdminController.java +++ b/backend/src/main/java/com/zioinfo/hrm/admin/AdminController.java @@ -51,6 +51,31 @@ public class AdminController { return ApiResponse.ok(null); } + /** + * 관리자 OTP 초기화(SUPERADMIN). 대상 사용자의 OTP 시크릿을 폐기하고 등록을 해제한다. + * 사용자는 다음 로그인 시 OTP_SETUP(QR 재등록) 플로우를 탄다. 시크릿은 응답/로그에 노출하지 않는다. + */ + @PostMapping("/users/{id}/otp-reset") + public ApiResponse resetOtp(@PathVariable Long id, Authentication auth) { + HrmUser user = adminMapper.findUserById(id); + if (user == null) { + throw new RuntimeException("ERR-HRM-404: 대상 사용자를 찾을 수 없습니다"); + } + adminMapper.clearOtp(id); + + Map log = new HashMap<>(); + log.put("actor", AuthSupport.actor(auth)); + log.put("action", "USER_OTP_RESET"); + log.put("targetType", "auth.otp"); + log.put("targetId", user.getUsername()); + log.put("detail", "OTP 초기화(다음 로그인 재등록)"); + log.put("ipAddr", null); + adminMapper.insertAuditLog(log); + + user.setPasswordHash(null); // 비밀번호 해시 미노출 + return ApiResponse.ok(user); + } + @GetMapping("/audit") public ApiResponse> audit( @RequestParam(required = false) String actor, diff --git a/backend/src/main/java/com/zioinfo/hrm/admin/AdminMapper.java b/backend/src/main/java/com/zioinfo/hrm/admin/AdminMapper.java index e69d8a8..1c2c54e 100644 --- a/backend/src/main/java/com/zioinfo/hrm/admin/AdminMapper.java +++ b/backend/src/main/java/com/zioinfo/hrm/admin/AdminMapper.java @@ -14,6 +14,8 @@ public interface AdminMapper { int insertUser(HrmUser user); int updateUser(HrmUser user); int updateUserActive(@Param("id") Long id, @Param("active") boolean active); + /** 관리자 OTP 초기화: 시크릿 폐기 + otp_enabled=false(다음 로그인 시 재등록 유도). 시크릿 미노출. */ + int clearOtp(@Param("id") Long id); List> findAuditLogs(@Param("actor") String actor, @Param("action") String action, @Param("offset") int offset, diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/AuthController.java b/backend/src/main/java/com/zioinfo/hrm/auth/AuthController.java index 2bd30d7..a32e872 100644 --- a/backend/src/main/java/com/zioinfo/hrm/auth/AuthController.java +++ b/backend/src/main/java/com/zioinfo/hrm/auth/AuthController.java @@ -1,7 +1,15 @@ package com.zioinfo.hrm.auth; +import com.zioinfo.hrm.auth.dto.ChangePasswordRequest; +import com.zioinfo.hrm.auth.dto.OtpConfirmRequest; +import com.zioinfo.hrm.auth.dto.OtpSetupResponse; +import com.zioinfo.hrm.auth.dto.OtpVerifyRequest; import com.zioinfo.hrm.common.ApiResponse; +import com.zioinfo.hrm.uiws.auth.OtpAuthService; import com.zioinfo.hrm.uiws.auth.TwoFactorService; +import com.zioinfo.hrm.uiws.common.UiwsApiException; +import com.zioinfo.hrm.uiws.common.UiwsErrorCode; +import jakarta.validation.Valid; import lombok.RequiredArgsConstructor; import org.springframework.web.bind.annotation.*; @@ -9,8 +17,11 @@ import java.util.Map; /** * HRM 인증 컨트롤러. - * - /login: 2FA off 면 { token, type, twofa:"false" }, 2FA on 이면 { twofa:"true", verifyToken, step, maskedEmail }. - * - /verify: (UIWS 2FA 이식) verify-token + 인증코드 → access/refresh 발급. + * - /login: 2FA off 면 { token, type, twofa:"false" }. + * OTP on 이면 { twofa:"true", verifyToken, verifyMethod:(OTP|OTP_SETUP), secret?, otpAuthUri?, qrImage? }. + * 이메일 2FA on 이면 { twofa:"true", verifyToken, step, maskedEmail }. + * - /verify-otp: (UIMS 방식) verify-token + 6자리 → access/refresh(최초 로그인이면 등록 확정). + * - /verify: (이메일 2FA) verify-token + 인증코드 → access/refresh. * 기존 클라이언트(2FA off)는 응답에 token 보존 → 회귀 0. */ @RestController @@ -20,24 +31,75 @@ public class AuthController { private final AuthService authService; private final TwoFactorService twoFactorService; + private final OtpAuthService otpAuthService; + private final JwtUtil jwtUtil; @PostMapping("/login") public ApiResponse> login(@RequestBody LoginRequest req) { return ApiResponse.ok(authService.login(req.username(), req.password())); } - /** UIWS 2FA 이식: 2차 인증 코드 검증 → access/refresh 발급. */ + /** 이메일 2FA 이식: 2차 인증 코드 검증 → access/refresh 발급. */ @PostMapping("/verify") public ApiResponse> verify(@RequestBody VerifyRequest req) { return ApiResponse.ok(twoFactorService.verify(req.verifyToken(), req.code())); } + /** TOTP 이식: 로그인 2단계 6자리 검증 → access/refresh 발급(최초 로그인이면 등록 확정). */ + @PostMapping("/verify-otp") + public ApiResponse> verifyOtp(@Valid @RequestBody OtpVerifyRequest req) { + return ApiResponse.ok(otpAuthService.verifyOtp(req.verifyToken(), req.code())); + } + @GetMapping("/me") public ApiResponse> me(@RequestHeader("Authorization") String header) { String token = header.replace("Bearer ", ""); return ApiResponse.ok(authService.me(token)); } + // ── 마이페이지: OTP 등록/재설정/해제 + 비밀번호 변경 (본인, access 토큰 필요) ────────── + + /** 마이페이지 OTP 등록/재설정 시작 → { secret, otpAuthUri, qrImage }(이 응답에서만 시크릿/QR 노출). */ + @PostMapping("/otp/setup") + public ApiResponse otpSetup(@RequestHeader("Authorization") String header) { + return ApiResponse.ok(otpAuthService.setup(requireUser(header))); + } + + /** 마이페이지 OTP 확인·활성화(앱 6자리 코드). */ + @PostMapping("/otp/confirm") + public ApiResponse> otpConfirm(@RequestHeader("Authorization") String header, + @Valid @RequestBody OtpConfirmRequest req) { + otpAuthService.confirm(requireUser(header), req.code()); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** 마이페이지 OTP 해제. */ + @PostMapping("/otp/disable") + public ApiResponse> otpDisable(@RequestHeader("Authorization") String header) { + otpAuthService.disable(requireUser(header)); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** 마이페이지 비밀번호 변경(현재 비번 검증 + BCrypt). 새 비번은 응답/로그 미포함. */ + @PostMapping("/change-password") + public ApiResponse> changePassword(@RequestHeader("Authorization") String header, + @Valid @RequestBody ChangePasswordRequest req) { + authService.changePassword(requireUser(header), req); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** + * Authorization 헤더에서 인증 사용자를 해석한다. verify-token(2fa 단계용)은 거부. + * (/api/hrm/auth/** 는 permitAll 이라 필터 인증이 없으므로 여기서 access 토큰을 명시 검증.) + */ + private String requireUser(String header) { + String token = header == null ? "" : header.replace("Bearer ", "").trim(); + if (token.isEmpty() || jwtUtil.isVerifyToken(token) || !jwtUtil.isValid(token)) { + throw new UiwsApiException(UiwsErrorCode.UNAUTHORIZED); + } + return jwtUtil.getUsername(token); + } + record LoginRequest(String username, String password) {} record VerifyRequest(String verifyToken, String code) {} diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/AuthService.java b/backend/src/main/java/com/zioinfo/hrm/auth/AuthService.java index f3105c4..14043d6 100644 --- a/backend/src/main/java/com/zioinfo/hrm/auth/AuthService.java +++ b/backend/src/main/java/com/zioinfo/hrm/auth/AuthService.java @@ -5,7 +5,9 @@ import com.zioinfo.hrm.auth.dto.FindIdResponse; import com.zioinfo.hrm.auth.dto.ResetPwRequest; import com.zioinfo.hrm.auth.dto.SignupRequest; import com.zioinfo.hrm.auth.dto.SignupResponse; +import com.zioinfo.hrm.auth.dto.ChangePasswordRequest; import com.zioinfo.hrm.auth.mapper.UserMapper; +import com.zioinfo.hrm.uiws.auth.OtpAuthService; import com.zioinfo.hrm.uiws.auth.TwoFactorService; import com.zioinfo.hrm.uiws.common.UiwsApiException; import com.zioinfo.hrm.uiws.common.UiwsErrorCode; @@ -36,6 +38,7 @@ public class AuthService { private final PasswordEncoder passwordEncoder; private final JwtUtil jwtUtil; private final TwoFactorService twoFactorService; + private final OtpAuthService otpAuthService; private final MailSender mailSender; private static final SecureRandom RANDOM = new SecureRandom(); @@ -65,8 +68,8 @@ public class AuthService { throw new RuntimeException("ERR-AUTH-003: 승인 대기 중인 계정입니다. 관리자 승인 후 로그인하세요."); } if (!passwordEncoder.matches(password, user.getPasswordHash())) { - // 2FA 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지. - if (twoFactorService.isEnabled()) { + // 2FA(OTP 또는 이메일) 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지. + if (otpAuthService.isEnabled() || twoFactorService.isEnabled()) { twoFactorService.recordLoginFailure(username); HrmUser after = userMapper.findByUsername(username); if (after != null && Boolean.TRUE.equals(after.getLocked())) { @@ -76,7 +79,11 @@ public class AuthService { throw new RuntimeException("ERR-AUTH-002: 비밀번호 불일치"); } - // 비밀번호 검증 통과 + // 비밀번호 검증 통과 — 2단계 우선순위: OTP > 이메일코드 > 단일 로그인 + if (otpAuthService.isEnabled()) { + // { twofa:true, verifyToken, verifyMethod:(OTP|OTP_SETUP), secret?, otpAuthUri?, qrImage? } + return otpAuthService.beginOtp(user); + } if (twoFactorService.isEnabled()) { Map step1 = twoFactorService.beginTwoFactor(user); return Map.of( @@ -103,6 +110,27 @@ public class AuthService { return m; } + /** + * 마이페이지 비밀번호 변경(현재 비밀번호 검증 + BCrypt 저장). UIMS changePassword 미러. + * 현재 비번 불일치 → PASSWORD_MISMATCH, 기존과 동일 → PASSWORD_SAME_AS_OLD. + * 새 비밀번호 평문은 로그/응답/감사에 절대 기록하지 않는다(보안 불변규칙). + */ + @Transactional + public void changePassword(String username, ChangePasswordRequest req) { + HrmUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + if (!passwordEncoder.matches(req.currentPassword(), user.getPasswordHash())) { + throw new UiwsApiException(UiwsErrorCode.PASSWORD_MISMATCH); + } + if (passwordEncoder.matches(req.newPassword(), user.getPasswordHash())) { + throw new UiwsApiException(UiwsErrorCode.PASSWORD_SAME_AS_OLD); + } + userMapper.updatePasswordByUsername(username, passwordEncoder.encode(req.newPassword())); + log.info("[auth] password changed: username={}", username); + } + // ── 로그인 보조 3종 (UIWS auth 패턴 이식) ──────────────────────────────────── /** diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/HrmUser.java b/backend/src/main/java/com/zioinfo/hrm/auth/HrmUser.java index f577bf4..ef06201 100644 --- a/backend/src/main/java/com/zioinfo/hrm/auth/HrmUser.java +++ b/backend/src/main/java/com/zioinfo/hrm/auth/HrmUser.java @@ -23,7 +23,10 @@ public class HrmUser { private LocalDateTime emailVerifyExpire; private Integer loginFailCount; private Boolean locked; + /** TOTP 시크릿(보류/확정 공용). API 응답·로그에 절대 미노출. (db/91_uiws_port.sql ALTER) */ private String otpSecret; + /** OTP 등록 확정 여부(기본 false). 최초 로그인 verify 성공 시 true 로 확정(멱등). (db/93_auth_otp.sql ALTER) */ + private Boolean otpEnabled; // UIWS 로그인 보조기능 이식 컬럼 (멱등 ALTER — db/91_uiws_port.sql). // approved: 가입 신청자는 false(관리자 승인 전 로그인 차단), 기존 계정은 true 보정. diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/dto/ChangePasswordRequest.java b/backend/src/main/java/com/zioinfo/hrm/auth/dto/ChangePasswordRequest.java new file mode 100644 index 0000000..d72ed46 --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/auth/dto/ChangePasswordRequest.java @@ -0,0 +1,10 @@ +package com.zioinfo.hrm.auth.dto; + +import jakarta.validation.constraints.NotBlank; + +/** 마이페이지 비밀번호 변경 요청 — 현재 비번 검증 + 새 비번(BCrypt 저장). 평문은 응답/로그 미노출. */ +public record ChangePasswordRequest( + @NotBlank(message = "현재 비밀번호는 필수입니다.") String currentPassword, + @NotBlank(message = "새 비밀번호는 필수입니다.") String newPassword +) { +} diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpConfirmRequest.java b/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpConfirmRequest.java new file mode 100644 index 0000000..44e9c8f --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpConfirmRequest.java @@ -0,0 +1,7 @@ +package com.zioinfo.hrm.auth.dto; + +import jakarta.validation.constraints.NotBlank; + +/** Authenticator(TOTP) 등록 확인 요청 — 앱에 표시된 6자리 코드. */ +public record OtpConfirmRequest(@NotBlank String code) { +} diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpSetupResponse.java b/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpSetupResponse.java new file mode 100644 index 0000000..2d8c838 --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpSetupResponse.java @@ -0,0 +1,13 @@ +package com.zioinfo.hrm.auth.dto; + +/** + * Authenticator(TOTP) 등록 셋업 응답 — UIWS OtpSetupResponse 미러. + *
    + *
  • secret : Base32 TOTP 시크릿(수동 입력용)
    • + *
  • otpAuthUri : otpauth://totp/... (Authenticator 앱 직접 등록용 URI)
    • + *
  • qrImage : data:image/png;base64,... (QR 이미지, <img src> 로 표시)
    • + *
+ * 보안 불변: 이 응답(등록 순간)에서만 시크릿/QR 노출. 조회/목록/재조회 응답에 재노출 금지. + */ +public record OtpSetupResponse(String secret, String otpAuthUri, String qrImage) { +} diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpVerifyRequest.java b/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpVerifyRequest.java new file mode 100644 index 0000000..3ebd29a --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/auth/dto/OtpVerifyRequest.java @@ -0,0 +1,10 @@ +package com.zioinfo.hrm.auth.dto; + +import jakarta.validation.constraints.NotBlank; + +/** 로그인 2단계 TOTP 검증 요청 — { verifyToken, code }. */ +public record OtpVerifyRequest( + @NotBlank(message = "verifyToken은 필수입니다.") String verifyToken, + @NotBlank(message = "code는 필수입니다.") String code +) { +} diff --git a/backend/src/main/java/com/zioinfo/hrm/auth/mapper/UserMapper.java b/backend/src/main/java/com/zioinfo/hrm/auth/mapper/UserMapper.java index bd409f4..ecb7c17 100644 --- a/backend/src/main/java/com/zioinfo/hrm/auth/mapper/UserMapper.java +++ b/backend/src/main/java/com/zioinfo/hrm/auth/mapper/UserMapper.java @@ -100,4 +100,26 @@ public interface UserMapper { /** 관리자 잠금 해제(실패 카운트/잠금 초기화). */ @Update("UPDATE hrm_users SET locked = false, login_fail_count = 0 WHERE username = #{username}") int unlock(@Param("username") String username); + + /** + * BCrypt 비밀번호 해시 갱신(username 기준). 평문은 절대 저장하지 않는다. + * 마이페이지 비밀번호 변경 + AdminPasswordSeeder(env 재시드) 공용. + */ + @Update("UPDATE hrm_users SET password_hash = #{passwordHash} WHERE username = #{username}") + int updatePasswordByUsername(@Param("username") String username, + @Param("passwordHash") String passwordHash); + + // ── TOTP(OTP 2차 인증) 이식 (멱등 UPDATE) ──────────────────────────────────── + + /** 보류 시크릿 저장(등록 확정 전). otp_enabled 은 건드리지 않는다(verify/confirm 에서 확정). */ + @Update("UPDATE hrm_users SET otp_secret = #{secret} WHERE username = #{username}") + int updateOtpSecret(@Param("username") String username, @Param("secret") String secret); + + /** 등록 확정: otp_enabled=true (시크릿은 유지). */ + @Update("UPDATE hrm_users SET otp_enabled = true WHERE username = #{username}") + int enableOtp(@Param("username") String username); + + /** 마이페이지 해제: 시크릿 폐기 + otp_enabled=false. */ + @Update("UPDATE hrm_users SET otp_secret = NULL, otp_enabled = false WHERE username = #{username}") + int disableOtp(@Param("username") String username); } diff --git a/backend/src/main/java/com/zioinfo/hrm/config/AdminPasswordSeeder.java b/backend/src/main/java/com/zioinfo/hrm/config/AdminPasswordSeeder.java new file mode 100644 index 0000000..0569d18 --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/config/AdminPasswordSeeder.java @@ -0,0 +1,130 @@ +package com.zioinfo.hrm.config; + +import com.zioinfo.hrm.auth.mapper.UserMapper; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.boot.ApplicationArguments; +import org.springframework.boot.ApplicationRunner; +import org.springframework.core.annotation.Order; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Component; + +import javax.crypto.Cipher; +import javax.crypto.spec.GCMParameterSpec; +import javax.crypto.spec.SecretKeySpec; +import java.nio.charset.StandardCharsets; +import java.nio.file.Files; +import java.nio.file.Path; +import java.util.Arrays; +import java.util.Base64; + +/** + * admin 비밀번호 암호화 재시드(UIMS 방식 + 암호화 저장). + * + *

기동 시 멱등 재시드: + * 

+ *   ADMIN_KEY_FILE(hex 32바이트 키 파일) 로드 → ADMIN_PASSWORD_ENC(base64(nonce12 + ct + tag), AES-256-GCM) 복호
+ *   → admin 계정 BCrypt 해시 갱신(하드코딩 admin123 시드를 env 값으로 덮어씀).
+ *
+ * + *

안전 규칙: + *

    + *
  • env 미설정 / 키 로드 실패 / 복호 실패 시 재시드 스킵(기동 계속). WARN 로그에 값(평문/키/시크릿) 미기록.
    • + *
  • 새 admin 비밀번호 값은 서버 env 에만 존재 — 코드/DB/로그/응답에 평문 미기재(보안 불변규칙).
    • + *
  • 키 값은 별도 파일(root 600)에만 — env/코드/git 에 키 미기재. 여기서는 파일 경로만 읽는다.
    • + *
+ * + *

스키마 init(schema.sql: admin/admin123 시드) 이후 실행되어 기존 해시를 덮어쓴다(멱등: 매 기동 동일 결과). + */ +@Slf4j +@Component +@Order(Integer.MIN_VALUE + 10) +@RequiredArgsConstructor +public class AdminPasswordSeeder implements ApplicationRunner { + + private static final String ADMIN_USERNAME = "admin"; + private static final int GCM_TAG_BITS = 128; + private static final int NONCE_LEN = 12; + + @Value("${ADMIN_PASSWORD_ENC:}") + private String adminPasswordEnc; + + @Value("${ADMIN_KEY_FILE:}") + private String adminKeyFile; + + private final UserMapper userMapper; + private final PasswordEncoder passwordEncoder; + + @Override + public void run(ApplicationArguments args) { + if (isBlank(adminPasswordEnc) || isBlank(adminKeyFile)) { + log.info("[admin-reseed] ADMIN_PASSWORD_ENC/ADMIN_KEY_FILE 미설정 — 재시드 스킵(기동 계속)"); + return; + } + char[] plain = null; + byte[] key = null; + try { + key = loadHexKey(adminKeyFile); // hex 32바이트 → 32B (AES-256) + plain = decrypt(adminPasswordEnc, key); // base64(nonce12+ct+tag) → 평문 + String hash = passwordEncoder.encode(new String(plain)); + int updated = userMapper.updatePasswordByUsername(ADMIN_USERNAME, hash); + if (updated > 0) { + log.info("[admin-reseed] admin 비밀번호 env 값으로 재시드 완료(멱등)"); + } else { + log.warn("[admin-reseed] admin 계정 미존재 — 재시드 스킵"); + } + } catch (Exception e) { + // 값 미기록: 예외 클래스명만(메시지에 평문/키가 섞일 여지 차단) + log.warn("[admin-reseed] 복호/재시드 실패 — 스킵(기동 계속). cause={}", e.getClass().getSimpleName()); + } finally { + if (plain != null) Arrays.fill(plain, '\0'); + if (key != null) Arrays.fill(key, (byte) 0); + } + } + + /** 키 파일(hex 문자열, 공백/개행 무시)을 32바이트 키로 로드. 32바이트가 아니면 예외. */ + private static byte[] loadHexKey(String path) throws Exception { + String hex = Files.readString(Path.of(path), StandardCharsets.UTF_8) + .replaceAll("\\s", ""); + byte[] key = hexToBytes(hex); + if (key.length != 32) { + throw new IllegalStateException("key length != 32 bytes"); + } + return key; + } + + /** base64(nonce12 + ciphertext + tag) → AES-256-GCM 복호 평문(char[]). */ + private static char[] decrypt(String encBase64, byte[] key) throws Exception { + byte[] blob = Base64.getDecoder().decode(encBase64.trim()); + if (blob.length <= NONCE_LEN) { + throw new IllegalStateException("cipher blob too short"); + } + byte[] nonce = Arrays.copyOfRange(blob, 0, NONCE_LEN); + byte[] ct = Arrays.copyOfRange(blob, NONCE_LEN, blob.length); + Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding"); + cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(key, "AES"), + new GCMParameterSpec(GCM_TAG_BITS, nonce)); + byte[] out = cipher.doFinal(ct); + char[] chars = new String(out, StandardCharsets.UTF_8).toCharArray(); + Arrays.fill(out, (byte) 0); + return chars; + } + + private static byte[] hexToBytes(String hex) { + int len = hex.length(); + if (len % 2 != 0) { + throw new IllegalStateException("odd hex length"); + } + byte[] out = new byte[len / 2]; + for (int i = 0; i < len; i += 2) { + out[i / 2] = (byte) ((Character.digit(hex.charAt(i), 16) << 4) + + Character.digit(hex.charAt(i + 1), 16)); + } + return out; + } + + private static boolean isBlank(String s) { + return s == null || s.isBlank(); + } +} diff --git a/backend/src/main/java/com/zioinfo/hrm/uiws/auth/OtpAuthService.java b/backend/src/main/java/com/zioinfo/hrm/uiws/auth/OtpAuthService.java new file mode 100644 index 0000000..14ac27b --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/uiws/auth/OtpAuthService.java @@ -0,0 +1,185 @@ +package com.zioinfo.hrm.uiws.auth; + +import com.zioinfo.hrm.admin.AdminMapper; +import com.zioinfo.hrm.auth.HrmUser; +import com.zioinfo.hrm.auth.JwtUtil; +import com.zioinfo.hrm.auth.dto.OtpSetupResponse; +import com.zioinfo.hrm.auth.mapper.UserMapper; +import com.zioinfo.hrm.uiws.common.UiwsApiException; +import com.zioinfo.hrm.uiws.common.UiwsErrorCode; +import com.zioinfo.hrm.uiws.config.UiwsProperties; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Service; +import org.springframework.transaction.annotation.Transactional; + +import java.util.HashMap; +import java.util.LinkedHashMap; +import java.util.Map; + +/** + * TOTP(OTP 2차 인증) 오케스트레이션 레이어 — UIWS AuthService 의 OTP 경로 미러(UIMS 방식). + * + *

흐름: + *

    + *
  1. 1차 로그인 성공 → {@link #beginOtp}: verify-token 발급 + (미등록이면 보류 시크릿+QR) 반환.
    2. + *
  2. {@code POST /verify-otp}(verifyToken+code) → {@link #verifyOtp}: 6자리 검증 후 access/refresh 발급. + * 최초 로그인이면 등록 확정(otp_enabled=true).
    3. + *
  3. 마이페이지: {@link #setup}/{@link #confirm}/{@link #disable}.
    4. + *
+ * + *

보안 불변: 시크릿·QR·otpauth URI 는 setup/OTP_SETUP 응답에서만 노출. 로그·감사에 시크릿/코드 미기록. + * 기존 auth(JWT·RBAC) 엔진 교체 없음 — TOTP 레이어만 추가. + */ +@Slf4j +@Service +@RequiredArgsConstructor +public class OtpAuthService { + + private final UserMapper userMapper; + private final JwtUtil jwtUtil; + private final TotpService totpService; + private final UiwsProperties properties; + private final AdminMapper adminMapper; + + /** 로그인 2단계에 OTP 경로를 사용할지. */ + public boolean isEnabled() { + return properties.getAuth().isOtpEnabled(); + } + + private static boolean blank(String s) { + return s == null || s.isBlank(); + } + + /** + * 1차 로그인 성공 후 OTP 2단계 시작. + * @return 미등록: { twofa:true, verifyToken, verifyMethod:OTP_SETUP, secret, otpAuthUri, qrImage } + * 등록됨: { twofa:true, verifyToken, verifyMethod:OTP } + */ + @Transactional + public Map beginOtp(HrmUser user) { + long tokenValidity = properties.getAuth().getVerifyTokenValiditySeconds(); + String verifyToken = jwtUtil.generateVerifyToken(user.getUsername(), tokenValidity); + // 성공 시 실패카운트 초기화(잠금 회복) + userMapper.resetLoginFail(user.getUsername()); + + Map resp = new LinkedHashMap<>(); + resp.put("twofa", "true"); + resp.put("verifyToken", verifyToken); + + if (blank(user.getOtpSecret())) { + // 미등록 최초 로그인 — 보류 시크릿 발급 + QR(이 응답에서만 노출) + String secret = totpService.generateSecret(); + userMapper.updateOtpSecret(user.getUsername(), secret); + resp.put("verifyMethod", "OTP_SETUP"); + resp.put("secret", secret); + resp.put("otpAuthUri", totpService.otpAuthUri(secret, user.getUsername())); + resp.put("qrImage", totpService.qrImageDataUri(secret, user.getUsername())); + } else { + resp.put("verifyMethod", "OTP"); + } + return resp; + } + + /** + * 2단계 검증: verify-token + 6자리 코드 → access/refresh 발급. 최초 로그인이면 등록 확정. + * @return { token, refreshToken, type, username, role } + */ + @Transactional + public Map verifyOtp(String verifyToken, String code) { + String username = jwtUtil.parseVerifyTokenUsername(verifyToken); + if (username == null) { + throw new UiwsApiException(UiwsErrorCode.VERIFY_TOKEN_INVALID); + } + HrmUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.VERIFY_TOKEN_INVALID); + } + if (Boolean.TRUE.equals(user.getLocked())) { + throw new UiwsApiException(UiwsErrorCode.ACCOUNT_LOCKED); + } + if (!totpService.verify(user.getOtpSecret(), code)) { + // OTP 오입력도 실패 카운트에 합산(정책) — 임계 도달 시 잠금. + userMapper.incrementLoginFail(username, properties.getAuth().getMaxLoginFail()); + throw new UiwsApiException(UiwsErrorCode.VERIFY_CODE_INVALID); + } + + // 최초 로그인(보류 시크릿) → 등록 확정(멱등) + if (!Boolean.TRUE.equals(user.getOtpEnabled())) { + userMapper.enableOtp(username); + audit(username, "OTP_ENROLL", username, "최초 로그인 OTP 등록 확정"); + } + userMapper.resetLoginFail(username); + + String access = jwtUtil.generate(user.getUsername(), user.getRole()); + String refresh = jwtUtil.generate(user.getUsername(), user.getRole()); + Map resp = new LinkedHashMap<>(); + resp.put("token", access); + resp.put("refreshToken", refresh); + resp.put("type", "Bearer"); + resp.put("username", user.getUsername()); + resp.put("role", user.getRole() == null ? "" : user.getRole()); + return resp; + } + + /** 마이페이지 OTP 등록/재설정 시작: 새 보류 시크릿 발급(기존 시크릿 무효화) + QR 반환. */ + @Transactional + public OtpSetupResponse setup(String username) { + HrmUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + String secret = totpService.generateSecret(); + userMapper.updateOtpSecret(username, secret); // 확정 전엔 otp_enabled 유지(재설정 시 confirm 재확정) + audit(username, "OTP_SETUP", username, "OTP 등록/재설정 시작(새 시크릿 발급)"); + return new OtpSetupResponse( + secret, + totpService.otpAuthUri(secret, username), + totpService.qrImageDataUri(secret, username)); + } + + /** 마이페이지 OTP 확인·활성화: 앱 코드 검증 성공 시 otp_enabled=true. */ + @Transactional + public void confirm(String username, String code) { + HrmUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + if (blank(user.getOtpSecret())) { + throw new UiwsApiException(UiwsErrorCode.OTP_NOT_REGISTERED); + } + if (!totpService.verify(user.getOtpSecret(), code)) { + throw new UiwsApiException(UiwsErrorCode.VERIFY_CODE_INVALID); + } + userMapper.enableOtp(username); + audit(username, "OTP_ENABLE", username, "OTP 2차 인증 활성화"); + } + + /** 마이페이지 OTP 해제: 시크릿 폐기 + otp_enabled=false. */ + @Transactional + public void disable(String username) { + HrmUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + userMapper.disableOtp(username); + audit(username, "OTP_DISABLE", username, "OTP 2차 인증 해제"); + } + + /** 감사 기록(hrm_audit_log). 시크릿/코드는 절대 detail 에 포함하지 않는다(보안 불변). */ + private void audit(String actor, String action, String targetId, String detail) { + try { + Map log = new HashMap<>(); + log.put("actor", actor); + log.put("action", action); + log.put("targetType", "auth.otp"); + log.put("targetId", targetId); + log.put("detail", detail); + log.put("ipAddr", null); + adminMapper.insertAuditLog(log); + } catch (Exception e) { + // 감사 실패가 인증 흐름을 막지 않도록 방어(값 미기록). + log.warn("[otp-audit] 감사 기록 실패 — 스킵. cause={}", e.getClass().getSimpleName()); + } + } +} diff --git a/backend/src/main/java/com/zioinfo/hrm/uiws/auth/TotpService.java b/backend/src/main/java/com/zioinfo/hrm/uiws/auth/TotpService.java new file mode 100644 index 0000000..ce4f806 --- /dev/null +++ b/backend/src/main/java/com/zioinfo/hrm/uiws/auth/TotpService.java @@ -0,0 +1,81 @@ +package com.zioinfo.hrm.uiws.auth; + +import dev.samstevens.totp.code.CodeGenerator; +import dev.samstevens.totp.code.CodeVerifier; +import dev.samstevens.totp.code.DefaultCodeGenerator; +import dev.samstevens.totp.code.DefaultCodeVerifier; +import dev.samstevens.totp.code.HashingAlgorithm; +import dev.samstevens.totp.exceptions.QrGenerationException; +import dev.samstevens.totp.qr.QrData; +import dev.samstevens.totp.qr.QrGenerator; +import dev.samstevens.totp.qr.ZxingPngQrGenerator; +import dev.samstevens.totp.secret.DefaultSecretGenerator; +import dev.samstevens.totp.secret.SecretGenerator; +import dev.samstevens.totp.time.SystemTimeProvider; +import dev.samstevens.totp.time.TimeProvider; +import dev.samstevens.totp.util.Utils; +import org.springframework.stereotype.Service; + +/** + * TOTP(RFC 6238, HMAC-SHA1, 30s, 6자리, ±1 윈도우) 코덱 — UIWS TotpService 미러. + * 시크릿(otp_secret)은 hrm_users 에 저장되어 있다고 가정. issuer 만 GUARDiA-HRM 으로 교체. + * + *

보안 불변: 시크릿·otpauth URI·QR 은 등록 순간 발급 응답에서만 노출. 로그 기록 금지. + */ +@Service +public class TotpService { + + private final TimeProvider timeProvider = new SystemTimeProvider(); + private final CodeGenerator codeGenerator = new DefaultCodeGenerator(HashingAlgorithm.SHA1, 6); + private final SecretGenerator secretGenerator = new DefaultSecretGenerator(); + private final CodeVerifier codeVerifier = buildVerifier(); + private final QrGenerator qrGenerator = new ZxingPngQrGenerator(); + + private static final String ISSUER = "GUARDiA-HRM"; + + private CodeVerifier buildVerifier() { + DefaultCodeVerifier verifier = new DefaultCodeVerifier(codeGenerator, timeProvider); + verifier.setTimePeriod(30); + verifier.setAllowedTimePeriodDiscrepancy(1); // ±1 윈도우 허용(시계 오차) + return verifier; + } + + /** 신규 OTP 시크릿 생성(최초 로그인/마이페이지 OTP 등록용). */ + public String generateSecret() { + return secretGenerator.generate(); + } + + /** 주어진 시크릿에 대해 사용자 입력 코드가 유효한지 검증. */ + public boolean verify(String secret, String code) { + if (secret == null || secret.isBlank() || code == null || code.isBlank()) { + return false; + } + return codeVerifier.isValidCode(secret, code.trim()); + } + + /** Authenticator 앱 직접 등록용 otpauth:// URI. */ + public String otpAuthUri(String secret, String userId) { + return buildQrData(secret, userId).getUri(); + } + + /** QR 이미지(data:image/png;base64,...) — 앱으로 스캔해 등록. */ + public String qrImageDataUri(String secret, String userId) { + try { + byte[] image = qrGenerator.generate(buildQrData(secret, userId)); + return Utils.getDataUriForImage(image, qrGenerator.getImageMimeType()); + } catch (QrGenerationException e) { + throw new IllegalStateException("OTP QR 생성 실패", e); + } + } + + private QrData buildQrData(String secret, String userId) { + return new QrData.Builder() + .label(userId) + .secret(secret) + .issuer(ISSUER) + .algorithm(HashingAlgorithm.SHA1) + .digits(6) + .period(30) + .build(); + } +} diff --git a/backend/src/main/java/com/zioinfo/hrm/uiws/common/UiwsErrorCode.java b/backend/src/main/java/com/zioinfo/hrm/uiws/common/UiwsErrorCode.java index 3068b6c..a7405df 100644 --- a/backend/src/main/java/com/zioinfo/hrm/uiws/common/UiwsErrorCode.java +++ b/backend/src/main/java/com/zioinfo/hrm/uiws/common/UiwsErrorCode.java @@ -37,6 +37,10 @@ public enum UiwsErrorCode { VERIFY_TOKEN_INVALID("ERR-UIWS-2FA-401", "2차 검증 토큰이 유효하지 않거나 만료되었습니다."), VERIFY_CODE_INVALID("ERR-UIWS-2FA-401C", "인증 코드가 올바르지 않거나 만료되었습니다."), ACCOUNT_LOCKED("ERR-UIWS-2FA-LOCK", "로그인 실패 횟수 초과로 계정이 잠겼습니다. 관리자에게 문의하세요."), + UNAUTHORIZED("ERR-UIWS-401", "인증이 필요합니다."), + OTP_NOT_REGISTERED("ERR-UIWS-2FA-OTP404", "OTP가 등록되어 있지 않습니다. 먼저 등록을 진행하세요."), + PASSWORD_MISMATCH("ERR-UIWS-PW-401", "현재 비밀번호가 일치하지 않습니다."), + PASSWORD_SAME_AS_OLD("ERR-UIWS-PW-409", "새 비밀번호가 기존 비밀번호와 동일합니다."), // system (시스템관리·권한관리 — CMS uiws.system 이식) DUPLICATE_KEY("ERR-UIWS-SYS-409D", "이미 존재하는 항목입니다."), diff --git a/backend/src/main/java/com/zioinfo/hrm/uiws/config/UiwsProperties.java b/backend/src/main/java/com/zioinfo/hrm/uiws/config/UiwsProperties.java index 6152fee..a9793d1 100644 --- a/backend/src/main/java/com/zioinfo/hrm/uiws/config/UiwsProperties.java +++ b/backend/src/main/java/com/zioinfo/hrm/uiws/config/UiwsProperties.java @@ -24,6 +24,11 @@ public class UiwsProperties { public static class Auth { /** 2FA 레이어 on/off. 기본 on(켜짐). off 시 기존 단일 JWT 로그인 흐름 유지(회귀 0). */ private boolean twofaEnabled = true; + /** + * TOTP(OTP 2차 인증) 레이어 on/off. 기본 on. 활성 시 로그인 2단계가 OTP(등록/검증) 경로를 사용한다. + * 우선순위: otpEnabled → OTP, (off 이고 twofaEnabled) → 이메일코드, (둘 다 off) → 단일 로그인. + */ + private boolean otpEnabled = true; /** 1차 통과 후 verify-token 유효시간(초). 계획서 300(5분). */ private long verifyTokenValiditySeconds = 300; /** 이메일 인증코드 유효시간(초). 계획서 300(5분). */ diff --git a/backend/src/main/resources/application.yml b/backend/src/main/resources/application.yml index 82211b8..4f1a60a 100644 --- a/backend/src/main/resources/application.yml +++ b/backend/src/main/resources/application.yml @@ -20,7 +20,8 @@ spring: # 92_uiws_system.sql: UIWS system(권한관리) tb_uiws_* 10테이블(부서/회사/코드/사용자/역할/메뉴/프로그램, 멱등). mode: ${SQL_INIT_MODE:always} # 104_seed_ai_config.sql: AI 플랫폼(provider/모델) 설정 시드 hrm_settings ai.* (멱등 ON CONFLICT DO NOTHING). - schema-locations: classpath:db/schema.sql,classpath:db/91_uiws_port.sql,classpath:db/92_uiws_system.sql,classpath:db/104_seed_ai_config.sql + # 93_auth_otp.sql: hrm_users otp_enabled 멱등 ALTER(TOTP 2차 인증). ops_otp_reset_all.sql 은 미등재(운영 1회 수동). + schema-locations: classpath:db/schema.sql,classpath:db/91_uiws_port.sql,classpath:db/92_uiws_system.sql,classpath:db/93_auth_otp.sql,classpath:db/104_seed_ai_config.sql continue-on-error: true servlet: multipart: @@ -65,6 +66,8 @@ hrm: uiws: auth: twofa-enabled: ${UIWS_2FA:true} + # TOTP(OTP 2차 인증, UIMS 방식) on/off. 기본 on. 우선순위: otp → 이메일코드 → 단일. off 시 이메일/단일 경로로 폴백. + otp-enabled: ${UIWS_OTP:true} verify-token-validity-seconds: 300 # verify-token 5분 email-code-validity-seconds: 300 # 이메일 코드 5분 max-login-fail: 5 # 실패 5회 잠금 diff --git a/backend/src/main/resources/db/93_auth_otp.sql b/backend/src/main/resources/db/93_auth_otp.sql new file mode 100644 index 0000000..bd37b42 --- /dev/null +++ b/backend/src/main/resources/db/93_auth_otp.sql @@ -0,0 +1,11 @@ +-- ===================================================================== +-- TOTP(OTP 2차 인증) 이식 — hrm_users 멱등 ALTER +-- ===================================================================== +-- otp_secret 은 db/91_uiws_port.sql 에서 이미 ADD(VARCHAR(255)). +-- 여기서는 등록 확정 플래그 otp_enabled 만 추가한다. +-- schema-locations 마지막에 등재(mode=always + continue-on-error) → 멱등 재실행 안전. + +ALTER TABLE hrm_users ADD COLUMN IF NOT EXISTS otp_enabled BOOLEAN DEFAULT false; + +COMMENT ON COLUMN hrm_users.otp_secret IS 'TOTP 시크릿(보류/확정 공용). API 응답·로그 미노출.'; +COMMENT ON COLUMN hrm_users.otp_enabled IS 'OTP 등록 확정 여부(최초 로그인 verify 성공 시 true).'; diff --git a/backend/src/main/resources/db/ops_otp_reset_all.sql b/backend/src/main/resources/db/ops_otp_reset_all.sql new file mode 100644 index 0000000..cde7d58 --- /dev/null +++ b/backend/src/main/resources/db/ops_otp_reset_all.sql @@ -0,0 +1,16 @@ +-- ===================================================================== +-- [1회 운영 작업] 전 사용자 OTP 초기화 — 멱등 +-- ===================================================================== +-- 목적: 인증 강화 전환 시점에 기존 사용자 OTP 를 초기화한다. +-- 다음 로그인부터 OTP_SETUP(QR 재등록) 플로우를 타게 한다(UIMS 방식). +-- +-- ★ 이 파일은 schema-locations 에 등재하지 않는다(자동 재실행 금지). +-- 운영자가 서버에서 1회 수동 적용: +-- psql -U hrm_user -d hrm_db -f db/ops_otp_reset_all.sql +-- +-- 멱등: 여러 번 실행해도 결과 동일(모두 NULL/false). + +UPDATE hrm_users + SET otp_secret = NULL, + otp_enabled = false + WHERE otp_secret IS NOT NULL OR otp_enabled IS DISTINCT FROM false; diff --git a/backend/src/main/resources/mapper/AdminMapper.xml b/backend/src/main/resources/mapper/AdminMapper.xml index 1459b2c..08480f0 100644 --- a/backend/src/main/resources/mapper/AdminMapper.xml +++ b/backend/src/main/resources/mapper/AdminMapper.xml @@ -39,6 +39,10 @@ UPDATE hrm_users SET active=#{active} WHERE id=#{id} + + UPDATE hrm_users SET otp_secret=NULL, otp_enabled=false WHERE id=#{id} + + SELECT id, username, password_hash, display_name, email, role, active, created_at, - email_verify_code, email_verify_expire, login_fail_count, locked, otp_secret, + email_verify_code, email_verify_expire, login_fail_count, locked, otp_secret, otp_enabled, approved, pw_change_yn FROM hrm_users WHERE username = #{username} diff --git a/backend/src/main/resources/static/assets/index-Bcwr7v00.css b/backend/src/main/resources/static/assets/index-Bcwr7v00.css deleted file mode 100644 index f7c46b4..0000000 --- a/backend/src/main/resources/static/assets/index-Bcwr7v00.css +++ /dev/null @@ -1 +0,0 @@ -*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.collapse{visibility:collapse}.fixed{position:fixed}.inset-0{top:0;right:0;bottom:0;left:0}.z-50{z-index:50}.mx-auto{margin-left:auto;margin-right:auto}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-8{margin-bottom:2rem}.ml-auto{margin-left:auto}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.mt-6{margin-top:1.5rem}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.table{display:table}.table-cell{display:table-cell}.grid{display:grid}.hidden{display:none}.h-1\.5{height:.375rem}.h-10{height:2.5rem}.h-16{height:4rem}.h-2{height:.5rem}.h-3{height:.75rem}.h-44{height:11rem}.h-5{height:1.25rem}.h-8{height:2rem}.h-screen{height:100vh}.max-h-32{max-height:8rem}.min-h-\[300px\]{min-height:300px}.min-h-screen{min-height:100vh}.w-10{width:2.5rem}.w-12{width:3rem}.w-16{width:4rem}.w-2{width:.5rem}.w-3{width:.75rem}.w-40{width:10rem}.w-44{width:11rem}.w-5{width:1.25rem}.w-60{width:15rem}.w-8{width:2rem}.w-full{width:100%}.min-w-0{min-width:0px}.max-w-4xl{max-width:56rem}.max-w-\[200px\]{max-width:200px}.max-w-lg{max-width:32rem}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.flex-1{flex:1 1 0%}.flex-shrink-0{flex-shrink:0}@keyframes pulse{50%{opacity:.5}}.animate-pulse{animation:pulse 2s cubic-bezier(.4,0,.6,1) infinite}@keyframes spin{to{transform:rotate(360deg)}}.animate-spin{animation:spin 1s linear infinite}.cursor-pointer{cursor:pointer}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-6{gap:1.5rem}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem * var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem * var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem * var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem * var(--tw-space-y-reverse))}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-line{white-space:pre-line}.whitespace-pre-wrap{white-space:pre-wrap}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-2{border-width:2px}.border-b{border-bottom-width:1px}.border-b-2{border-bottom-width:2px}.border-t{border-top-width:1px}.border-amber-200{--tw-border-opacity: 1;border-color:rgb(253 230 138 / var(--tw-border-opacity, 1))}.border-blue-500{--tw-border-opacity: 1;border-color:rgb(59 130 246 / var(--tw-border-opacity, 1))}.border-blue-600{--tw-border-opacity: 1;border-color:rgb(37 99 235 / var(--tw-border-opacity, 1))}.border-emerald-200{--tw-border-opacity: 1;border-color:rgb(167 243 208 / var(--tw-border-opacity, 1))}.border-emerald-300{--tw-border-opacity: 1;border-color:rgb(110 231 183 / var(--tw-border-opacity, 1))}.border-purple-600{--tw-border-opacity: 1;border-color:rgb(147 51 234 / var(--tw-border-opacity, 1))}.border-rose-300{--tw-border-opacity: 1;border-color:rgb(253 164 175 / var(--tw-border-opacity, 1))}.border-slate-100{--tw-border-opacity: 1;border-color:rgb(241 245 249 / var(--tw-border-opacity, 1))}.border-slate-200{--tw-border-opacity: 1;border-color:rgb(226 232 240 / var(--tw-border-opacity, 1))}.border-slate-50{--tw-border-opacity: 1;border-color:rgb(248 250 252 / var(--tw-border-opacity, 1))}.border-slate-800{--tw-border-opacity: 1;border-color:rgb(30 41 59 / var(--tw-border-opacity, 1))}.border-transparent{border-color:transparent}.border-t-transparent{border-top-color:transparent}.bg-amber-100{--tw-bg-opacity: 1;background-color:rgb(254 243 199 / var(--tw-bg-opacity, 1))}.bg-amber-50{--tw-bg-opacity: 1;background-color:rgb(255 251 235 / var(--tw-bg-opacity, 1))}.bg-black\/40{background-color:#0006}.bg-black\/50{background-color:#00000080}.bg-blue-100{--tw-bg-opacity: 1;background-color:rgb(219 234 254 / var(--tw-bg-opacity, 1))}.bg-blue-50{--tw-bg-opacity: 1;background-color:rgb(239 246 255 / var(--tw-bg-opacity, 1))}.bg-blue-500{--tw-bg-opacity: 1;background-color:rgb(59 130 246 / var(--tw-bg-opacity, 1))}.bg-blue-600{--tw-bg-opacity: 1;background-color:rgb(37 99 235 / var(--tw-bg-opacity, 1))}.bg-emerald-100{--tw-bg-opacity: 1;background-color:rgb(209 250 229 / var(--tw-bg-opacity, 1))}.bg-emerald-50{--tw-bg-opacity: 1;background-color:rgb(236 253 245 / var(--tw-bg-opacity, 1))}.bg-green-100{--tw-bg-opacity: 1;background-color:rgb(220 252 231 / var(--tw-bg-opacity, 1))}.bg-green-50{--tw-bg-opacity: 1;background-color:rgb(240 253 244 / var(--tw-bg-opacity, 1))}.bg-green-500{--tw-bg-opacity: 1;background-color:rgb(34 197 94 / var(--tw-bg-opacity, 1))}.bg-orange-100{--tw-bg-opacity: 1;background-color:rgb(255 237 213 / var(--tw-bg-opacity, 1))}.bg-orange-50{--tw-bg-opacity: 1;background-color:rgb(255 247 237 / var(--tw-bg-opacity, 1))}.bg-purple-100{--tw-bg-opacity: 1;background-color:rgb(243 232 255 / var(--tw-bg-opacity, 1))}.bg-purple-500{--tw-bg-opacity: 1;background-color:rgb(168 85 247 / var(--tw-bg-opacity, 1))}.bg-red-100{--tw-bg-opacity: 1;background-color:rgb(254 226 226 / var(--tw-bg-opacity, 1))}.bg-red-50{--tw-bg-opacity: 1;background-color:rgb(254 242 242 / var(--tw-bg-opacity, 1))}.bg-red-500{--tw-bg-opacity: 1;background-color:rgb(239 68 68 / var(--tw-bg-opacity, 1))}.bg-slate-100{--tw-bg-opacity: 1;background-color:rgb(241 245 249 / var(--tw-bg-opacity, 1))}.bg-slate-50{--tw-bg-opacity: 1;background-color:rgb(248 250 252 / var(--tw-bg-opacity, 1))}.bg-slate-900{--tw-bg-opacity: 1;background-color:rgb(15 23 42 / var(--tw-bg-opacity, 1))}.bg-white{--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1))}.bg-yellow-100{--tw-bg-opacity: 1;background-color:rgb(254 249 195 / var(--tw-bg-opacity, 1))}.bg-yellow-500{--tw-bg-opacity: 1;background-color:rgb(234 179 8 / var(--tw-bg-opacity, 1))}.bg-gradient-to-br{background-image:linear-gradient(to bottom right,var(--tw-gradient-stops))}.from-slate-900{--tw-gradient-from: #0f172a var(--tw-gradient-from-position);--tw-gradient-to: rgb(15 23 42 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), var(--tw-gradient-to)}.to-blue-900{--tw-gradient-to: #1e3a8a var(--tw-gradient-to-position)}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.p-7{padding:1.75rem}.p-8{padding:2rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-10{padding-top:2.5rem;padding-bottom:2.5rem}.py-16{padding-top:4rem;padding-bottom:4rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-8{padding-top:2rem;padding-bottom:2rem}.text-left{text-align:left}.text-center{text-align:center}.text-right{text-align:right}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-\[11px\]{font-size:11px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.leading-relaxed{line-height:1.625}.tracking-wider{letter-spacing:.05em}.tracking-widest{letter-spacing:.1em}.text-amber-600{--tw-text-opacity: 1;color:rgb(217 119 6 / var(--tw-text-opacity, 1))}.text-amber-700{--tw-text-opacity: 1;color:rgb(180 83 9 / var(--tw-text-opacity, 1))}.text-blue-300{--tw-text-opacity: 1;color:rgb(147 197 253 / var(--tw-text-opacity, 1))}.text-blue-600{--tw-text-opacity: 1;color:rgb(37 99 235 / var(--tw-text-opacity, 1))}.text-blue-700{--tw-text-opacity: 1;color:rgb(29 78 216 / var(--tw-text-opacity, 1))}.text-emerald-500{--tw-text-opacity: 1;color:rgb(16 185 129 / var(--tw-text-opacity, 1))}.text-emerald-700{--tw-text-opacity: 1;color:rgb(4 120 87 / var(--tw-text-opacity, 1))}.text-green-600{--tw-text-opacity: 1;color:rgb(22 163 74 / var(--tw-text-opacity, 1))}.text-green-700{--tw-text-opacity: 1;color:rgb(21 128 61 / var(--tw-text-opacity, 1))}.text-orange-600{--tw-text-opacity: 1;color:rgb(234 88 12 / var(--tw-text-opacity, 1))}.text-orange-700{--tw-text-opacity: 1;color:rgb(194 65 12 / var(--tw-text-opacity, 1))}.text-purple-600{--tw-text-opacity: 1;color:rgb(147 51 234 / var(--tw-text-opacity, 1))}.text-purple-700{--tw-text-opacity: 1;color:rgb(126 34 206 / var(--tw-text-opacity, 1))}.text-red-500{--tw-text-opacity: 1;color:rgb(239 68 68 / var(--tw-text-opacity, 1))}.text-red-600{--tw-text-opacity: 1;color:rgb(220 38 38 / var(--tw-text-opacity, 1))}.text-red-700{--tw-text-opacity: 1;color:rgb(185 28 28 / var(--tw-text-opacity, 1))}.text-rose-600{--tw-text-opacity: 1;color:rgb(225 29 72 / var(--tw-text-opacity, 1))}.text-rose-700{--tw-text-opacity: 1;color:rgb(190 18 60 / var(--tw-text-opacity, 1))}.text-slate-300{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.text-slate-400{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-slate-600{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.text-slate-700{--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1))}.text-slate-800{--tw-text-opacity: 1;color:rgb(30 41 59 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.text-yellow-700{--tw-text-opacity: 1;color:rgb(161 98 7 / var(--tw-text-opacity, 1))}.shadow-2xl{--tw-shadow: 0 25px 50px -12px rgb(0 0 0 / .25);--tw-shadow-colored: 0 25px 50px -12px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}body{margin:0;font-family:Pretendard,Malgun Gothic,-apple-system,BlinkMacSystemFont,sans-serif;background-color:#f1f5f9;color:#1e293b}.sidebar-item{display:flex;cursor:pointer;align-items:center;gap:.75rem;border-radius:.5rem;padding:.625rem 1rem;font-size:.875rem;line-height:1.25rem;--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.sidebar-item:hover{--tw-bg-opacity: 1;background-color:rgb(30 41 59 / var(--tw-bg-opacity, 1));--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.sidebar-item.active{--tw-bg-opacity: 1;background-color:rgb(29 78 216 / var(--tw-bg-opacity, 1));--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.card{border-radius:.75rem;border-width:1px;--tw-border-opacity: 1;border-color:rgb(241 245 249 / var(--tw-border-opacity, 1));--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1));padding:1.25rem;--tw-shadow: 0 1px 2px 0 rgb(0 0 0 / .05);--tw-shadow-colored: 0 1px 2px 0 var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.btn-primary{border-radius:.5rem;--tw-bg-opacity: 1;background-color:rgb(37 99 235 / var(--tw-bg-opacity, 1));padding:.5rem 1rem;font-size:.875rem;line-height:1.25rem;font-weight:500;--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.btn-primary:hover{--tw-bg-opacity: 1;background-color:rgb(29 78 216 / var(--tw-bg-opacity, 1))}.btn-secondary{border-radius:.5rem;--tw-bg-opacity: 1;background-color:rgb(241 245 249 / var(--tw-bg-opacity, 1));padding:.5rem 1rem;font-size:.875rem;line-height:1.25rem;font-weight:500;--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.btn-secondary:hover{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.badge{display:inline-flex;align-items:center;border-radius:9999px;padding:.125rem .625rem;font-size:.75rem;line-height:1rem;font-weight:500}.table-header{padding:.75rem 1rem;text-align:left;font-size:.75rem;line-height:1rem;font-weight:600;text-transform:uppercase;letter-spacing:.05em;--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.table-cell{padding:.75rem 1rem;font-size:.875rem;line-height:1.25rem;--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1))}:root{--uiws-surface: #ffffff;--uiws-surface-2: #f1f5f9;--uiws-border: #e2e8f0;--uiws-text: #1e293b;--uiws-text-muted: #64748b;--uiws-text-faint: #94a3b8;--uiws-primary: #2563eb;--uiws-primary-contrast: #ffffff;--uiws-primary-soft: #eff6ff;--uiws-input-bg: #ffffff;--uiws-row-hover: #f8fafc;--uiws-danger: #dc2626;--uiws-success: #16a34a;--uiws-shadow: 0 1px 3px rgba(15, 23, 42, .08)}@media (prefers-color-scheme: dark){:root{--uiws-surface: #1e293b;--uiws-surface-2: #0f172a;--uiws-border: #334155;--uiws-text: #e2e8f0;--uiws-text-muted: #94a3b8;--uiws-text-faint: #64748b;--uiws-primary: #3b82f6;--uiws-primary-contrast: #ffffff;--uiws-primary-soft: #1e3a5f;--uiws-input-bg: #0f172a;--uiws-row-hover: #273449;--uiws-danger: #f87171;--uiws-success: #4ade80;--uiws-shadow: 0 1px 3px rgba(0, 0, 0, .4)}}.last\:border-0:last-child{border-width:0px}.hover\:bg-blue-700:hover{--tw-bg-opacity: 1;background-color:rgb(29 78 216 / var(--tw-bg-opacity, 1))}.hover\:bg-emerald-50:hover{--tw-bg-opacity: 1;background-color:rgb(236 253 245 / var(--tw-bg-opacity, 1))}.hover\:bg-rose-50:hover{--tw-bg-opacity: 1;background-color:rgb(255 241 242 / var(--tw-bg-opacity, 1))}.hover\:bg-slate-200:hover{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.hover\:bg-slate-50:hover{--tw-bg-opacity: 1;background-color:rgb(248 250 252 / var(--tw-bg-opacity, 1))}.hover\:text-blue-600:hover{--tw-text-opacity: 1;color:rgb(37 99 235 / var(--tw-text-opacity, 1))}.hover\:text-slate-600:hover{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.hover\:text-slate-700:hover{--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1))}.hover\:text-white:hover{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.hover\:underline:hover{text-decoration-line:underline}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.focus\:ring-2:focus{--tw-ring-offset-shadow: var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow: var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000)}.focus\:ring-blue-400:focus{--tw-ring-opacity: 1;--tw-ring-color: rgb(96 165 250 / var(--tw-ring-opacity, 1))}.focus\:ring-blue-500:focus{--tw-ring-opacity: 1;--tw-ring-color: rgb(59 130 246 / var(--tw-ring-opacity, 1))}.disabled\:opacity-50:disabled{opacity:.5}@media (min-width: 768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\:grid-cols-\[200px_1fr\]{grid-template-columns:200px 1fr}}@media (min-width: 1024px){.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}} diff --git a/backend/src/main/resources/static/assets/index-QZl_9xgd.css b/backend/src/main/resources/static/assets/index-QZl_9xgd.css new file mode 100644 index 0000000..20d5523 --- /dev/null +++ b/backend/src/main/resources/static/assets/index-QZl_9xgd.css @@ -0,0 +1 @@ +*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.collapse{visibility:collapse}.fixed{position:fixed}.inset-0{top:0;right:0;bottom:0;left:0}.z-50{z-index:50}.mx-auto{margin-left:auto;margin-right:auto}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-8{margin-bottom:2rem}.ml-2{margin-left:.5rem}.ml-auto{margin-left:auto}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.mt-6{margin-top:1.5rem}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.table{display:table}.table-cell{display:table-cell}.grid{display:grid}.hidden{display:none}.h-1\.5{height:.375rem}.h-10{height:2.5rem}.h-16{height:4rem}.h-2{height:.5rem}.h-3{height:.75rem}.h-44{height:11rem}.h-5{height:1.25rem}.h-8{height:2rem}.h-screen{height:100vh}.max-h-32{max-height:8rem}.min-h-\[300px\]{min-height:300px}.min-h-screen{min-height:100vh}.w-10{width:2.5rem}.w-12{width:3rem}.w-16{width:4rem}.w-2{width:.5rem}.w-3{width:.75rem}.w-40{width:10rem}.w-44{width:11rem}.w-5{width:1.25rem}.w-60{width:15rem}.w-8{width:2rem}.w-full{width:100%}.min-w-0{min-width:0px}.max-w-2xl{max-width:42rem}.max-w-4xl{max-width:56rem}.max-w-\[200px\]{max-width:200px}.max-w-lg{max-width:32rem}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.flex-1{flex:1 1 0%}.flex-shrink-0{flex-shrink:0}@keyframes pulse{50%{opacity:.5}}.animate-pulse{animation:pulse 2s cubic-bezier(.4,0,.6,1) infinite}@keyframes spin{to{transform:rotate(360deg)}}.animate-spin{animation:spin 1s linear infinite}.cursor-pointer{cursor:pointer}.select-none{-webkit-user-select:none;-moz-user-select:none;user-select:none}.select-all{-webkit-user-select:all;-moz-user-select:all;user-select:all}.list-inside{list-style-position:inside}.list-decimal{list-style-type:decimal}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-6{gap:1.5rem}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem * var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem * var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem * var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem * var(--tw-space-y-reverse))}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-line{white-space:pre-line}.whitespace-pre-wrap{white-space:pre-wrap}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-2{border-width:2px}.border-b{border-bottom-width:1px}.border-b-2{border-bottom-width:2px}.border-t{border-top-width:1px}.border-amber-200{--tw-border-opacity: 1;border-color:rgb(253 230 138 / var(--tw-border-opacity, 1))}.border-blue-500{--tw-border-opacity: 1;border-color:rgb(59 130 246 / var(--tw-border-opacity, 1))}.border-blue-600{--tw-border-opacity: 1;border-color:rgb(37 99 235 / var(--tw-border-opacity, 1))}.border-emerald-200{--tw-border-opacity: 1;border-color:rgb(167 243 208 / var(--tw-border-opacity, 1))}.border-emerald-300{--tw-border-opacity: 1;border-color:rgb(110 231 183 / var(--tw-border-opacity, 1))}.border-green-200{--tw-border-opacity: 1;border-color:rgb(187 247 208 / var(--tw-border-opacity, 1))}.border-purple-600{--tw-border-opacity: 1;border-color:rgb(147 51 234 / var(--tw-border-opacity, 1))}.border-red-200{--tw-border-opacity: 1;border-color:rgb(254 202 202 / var(--tw-border-opacity, 1))}.border-red-300{--tw-border-opacity: 1;border-color:rgb(252 165 165 / var(--tw-border-opacity, 1))}.border-rose-300{--tw-border-opacity: 1;border-color:rgb(253 164 175 / var(--tw-border-opacity, 1))}.border-slate-100{--tw-border-opacity: 1;border-color:rgb(241 245 249 / var(--tw-border-opacity, 1))}.border-slate-200{--tw-border-opacity: 1;border-color:rgb(226 232 240 / var(--tw-border-opacity, 1))}.border-slate-50{--tw-border-opacity: 1;border-color:rgb(248 250 252 / var(--tw-border-opacity, 1))}.border-slate-800{--tw-border-opacity: 1;border-color:rgb(30 41 59 / var(--tw-border-opacity, 1))}.border-transparent{border-color:transparent}.border-t-transparent{border-top-color:transparent}.bg-amber-100{--tw-bg-opacity: 1;background-color:rgb(254 243 199 / var(--tw-bg-opacity, 1))}.bg-amber-50{--tw-bg-opacity: 1;background-color:rgb(255 251 235 / var(--tw-bg-opacity, 1))}.bg-black\/40{background-color:#0006}.bg-black\/50{background-color:#00000080}.bg-blue-100{--tw-bg-opacity: 1;background-color:rgb(219 234 254 / var(--tw-bg-opacity, 1))}.bg-blue-50{--tw-bg-opacity: 1;background-color:rgb(239 246 255 / var(--tw-bg-opacity, 1))}.bg-blue-500{--tw-bg-opacity: 1;background-color:rgb(59 130 246 / var(--tw-bg-opacity, 1))}.bg-blue-600{--tw-bg-opacity: 1;background-color:rgb(37 99 235 / var(--tw-bg-opacity, 1))}.bg-emerald-100{--tw-bg-opacity: 1;background-color:rgb(209 250 229 / var(--tw-bg-opacity, 1))}.bg-emerald-50{--tw-bg-opacity: 1;background-color:rgb(236 253 245 / var(--tw-bg-opacity, 1))}.bg-green-100{--tw-bg-opacity: 1;background-color:rgb(220 252 231 / var(--tw-bg-opacity, 1))}.bg-green-50{--tw-bg-opacity: 1;background-color:rgb(240 253 244 / var(--tw-bg-opacity, 1))}.bg-green-500{--tw-bg-opacity: 1;background-color:rgb(34 197 94 / var(--tw-bg-opacity, 1))}.bg-orange-100{--tw-bg-opacity: 1;background-color:rgb(255 237 213 / var(--tw-bg-opacity, 1))}.bg-orange-50{--tw-bg-opacity: 1;background-color:rgb(255 247 237 / var(--tw-bg-opacity, 1))}.bg-purple-100{--tw-bg-opacity: 1;background-color:rgb(243 232 255 / var(--tw-bg-opacity, 1))}.bg-purple-500{--tw-bg-opacity: 1;background-color:rgb(168 85 247 / var(--tw-bg-opacity, 1))}.bg-red-100{--tw-bg-opacity: 1;background-color:rgb(254 226 226 / var(--tw-bg-opacity, 1))}.bg-red-50{--tw-bg-opacity: 1;background-color:rgb(254 242 242 / var(--tw-bg-opacity, 1))}.bg-red-500{--tw-bg-opacity: 1;background-color:rgb(239 68 68 / var(--tw-bg-opacity, 1))}.bg-slate-100{--tw-bg-opacity: 1;background-color:rgb(241 245 249 / var(--tw-bg-opacity, 1))}.bg-slate-50{--tw-bg-opacity: 1;background-color:rgb(248 250 252 / var(--tw-bg-opacity, 1))}.bg-slate-900{--tw-bg-opacity: 1;background-color:rgb(15 23 42 / var(--tw-bg-opacity, 1))}.bg-white{--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1))}.bg-yellow-100{--tw-bg-opacity: 1;background-color:rgb(254 249 195 / var(--tw-bg-opacity, 1))}.bg-yellow-500{--tw-bg-opacity: 1;background-color:rgb(234 179 8 / var(--tw-bg-opacity, 1))}.bg-gradient-to-br{background-image:linear-gradient(to bottom right,var(--tw-gradient-stops))}.from-slate-900{--tw-gradient-from: #0f172a var(--tw-gradient-from-position);--tw-gradient-to: rgb(15 23 42 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), var(--tw-gradient-to)}.to-blue-900{--tw-gradient-to: #1e3a8a var(--tw-gradient-to-position)}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.p-7{padding:1.75rem}.p-8{padding:2rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-10{padding-top:2.5rem;padding-bottom:2.5rem}.py-16{padding-top:4rem;padding-bottom:4rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-8{padding-top:2rem;padding-bottom:2rem}.text-left{text-align:left}.text-center{text-align:center}.text-right{text-align:right}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-\[11px\]{font-size:11px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.leading-7{line-height:1.75rem}.leading-relaxed{line-height:1.625}.tracking-\[0\.4em\]{letter-spacing:.4em}.tracking-wider{letter-spacing:.05em}.tracking-widest{letter-spacing:.1em}.text-amber-600{--tw-text-opacity: 1;color:rgb(217 119 6 / var(--tw-text-opacity, 1))}.text-amber-700{--tw-text-opacity: 1;color:rgb(180 83 9 / var(--tw-text-opacity, 1))}.text-blue-300{--tw-text-opacity: 1;color:rgb(147 197 253 / var(--tw-text-opacity, 1))}.text-blue-600{--tw-text-opacity: 1;color:rgb(37 99 235 / var(--tw-text-opacity, 1))}.text-blue-700{--tw-text-opacity: 1;color:rgb(29 78 216 / var(--tw-text-opacity, 1))}.text-emerald-500{--tw-text-opacity: 1;color:rgb(16 185 129 / var(--tw-text-opacity, 1))}.text-emerald-700{--tw-text-opacity: 1;color:rgb(4 120 87 / var(--tw-text-opacity, 1))}.text-green-600{--tw-text-opacity: 1;color:rgb(22 163 74 / var(--tw-text-opacity, 1))}.text-green-700{--tw-text-opacity: 1;color:rgb(21 128 61 / var(--tw-text-opacity, 1))}.text-orange-600{--tw-text-opacity: 1;color:rgb(234 88 12 / var(--tw-text-opacity, 1))}.text-orange-700{--tw-text-opacity: 1;color:rgb(194 65 12 / var(--tw-text-opacity, 1))}.text-purple-600{--tw-text-opacity: 1;color:rgb(147 51 234 / var(--tw-text-opacity, 1))}.text-purple-700{--tw-text-opacity: 1;color:rgb(126 34 206 / var(--tw-text-opacity, 1))}.text-red-500{--tw-text-opacity: 1;color:rgb(239 68 68 / var(--tw-text-opacity, 1))}.text-red-600{--tw-text-opacity: 1;color:rgb(220 38 38 / var(--tw-text-opacity, 1))}.text-red-700{--tw-text-opacity: 1;color:rgb(185 28 28 / var(--tw-text-opacity, 1))}.text-rose-600{--tw-text-opacity: 1;color:rgb(225 29 72 / var(--tw-text-opacity, 1))}.text-rose-700{--tw-text-opacity: 1;color:rgb(190 18 60 / var(--tw-text-opacity, 1))}.text-slate-300{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.text-slate-400{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-slate-600{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.text-slate-700{--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1))}.text-slate-800{--tw-text-opacity: 1;color:rgb(30 41 59 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.text-yellow-700{--tw-text-opacity: 1;color:rgb(161 98 7 / var(--tw-text-opacity, 1))}.shadow-2xl{--tw-shadow: 0 25px 50px -12px rgb(0 0 0 / .25);--tw-shadow-colored: 0 25px 50px -12px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}body{margin:0;font-family:Pretendard,Malgun Gothic,-apple-system,BlinkMacSystemFont,sans-serif;background-color:#f1f5f9;color:#1e293b}.sidebar-item{display:flex;cursor:pointer;align-items:center;gap:.75rem;border-radius:.5rem;padding:.625rem 1rem;font-size:.875rem;line-height:1.25rem;--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.sidebar-item:hover{--tw-bg-opacity: 1;background-color:rgb(30 41 59 / var(--tw-bg-opacity, 1));--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.sidebar-item.active{--tw-bg-opacity: 1;background-color:rgb(29 78 216 / var(--tw-bg-opacity, 1));--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.card{border-radius:.75rem;border-width:1px;--tw-border-opacity: 1;border-color:rgb(241 245 249 / var(--tw-border-opacity, 1));--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1));padding:1.25rem;--tw-shadow: 0 1px 2px 0 rgb(0 0 0 / .05);--tw-shadow-colored: 0 1px 2px 0 var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.btn-primary{border-radius:.5rem;--tw-bg-opacity: 1;background-color:rgb(37 99 235 / var(--tw-bg-opacity, 1));padding:.5rem 1rem;font-size:.875rem;line-height:1.25rem;font-weight:500;--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.btn-primary:hover{--tw-bg-opacity: 1;background-color:rgb(29 78 216 / var(--tw-bg-opacity, 1))}.btn-secondary{border-radius:.5rem;--tw-bg-opacity: 1;background-color:rgb(241 245 249 / var(--tw-bg-opacity, 1));padding:.5rem 1rem;font-size:.875rem;line-height:1.25rem;font-weight:500;--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.btn-secondary:hover{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.badge{display:inline-flex;align-items:center;border-radius:9999px;padding:.125rem .625rem;font-size:.75rem;line-height:1rem;font-weight:500}.table-header{padding:.75rem 1rem;text-align:left;font-size:.75rem;line-height:1rem;font-weight:600;text-transform:uppercase;letter-spacing:.05em;--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.table-cell{padding:.75rem 1rem;font-size:.875rem;line-height:1.25rem;--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1))}:root{--uiws-surface: #ffffff;--uiws-surface-2: #f1f5f9;--uiws-border: #e2e8f0;--uiws-text: #1e293b;--uiws-text-muted: #64748b;--uiws-text-faint: #94a3b8;--uiws-primary: #2563eb;--uiws-primary-contrast: #ffffff;--uiws-primary-soft: #eff6ff;--uiws-input-bg: #ffffff;--uiws-row-hover: #f8fafc;--uiws-danger: #dc2626;--uiws-success: #16a34a;--uiws-shadow: 0 1px 3px rgba(15, 23, 42, .08)}@media (prefers-color-scheme: dark){:root{--uiws-surface: #1e293b;--uiws-surface-2: #0f172a;--uiws-border: #334155;--uiws-text: #e2e8f0;--uiws-text-muted: #94a3b8;--uiws-text-faint: #64748b;--uiws-primary: #3b82f6;--uiws-primary-contrast: #ffffff;--uiws-primary-soft: #1e3a5f;--uiws-input-bg: #0f172a;--uiws-row-hover: #273449;--uiws-danger: #f87171;--uiws-success: #4ade80;--uiws-shadow: 0 1px 3px rgba(0, 0, 0, .4)}}.last\:border-0:last-child{border-width:0px}.hover\:bg-blue-700:hover{--tw-bg-opacity: 1;background-color:rgb(29 78 216 / var(--tw-bg-opacity, 1))}.hover\:bg-emerald-50:hover{--tw-bg-opacity: 1;background-color:rgb(236 253 245 / var(--tw-bg-opacity, 1))}.hover\:bg-red-50:hover{--tw-bg-opacity: 1;background-color:rgb(254 242 242 / var(--tw-bg-opacity, 1))}.hover\:bg-rose-50:hover{--tw-bg-opacity: 1;background-color:rgb(255 241 242 / var(--tw-bg-opacity, 1))}.hover\:bg-slate-200:hover{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.hover\:bg-slate-50:hover{--tw-bg-opacity: 1;background-color:rgb(248 250 252 / var(--tw-bg-opacity, 1))}.hover\:text-blue-600:hover{--tw-text-opacity: 1;color:rgb(37 99 235 / var(--tw-text-opacity, 1))}.hover\:text-slate-600:hover{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.hover\:text-slate-700:hover{--tw-text-opacity: 1;color:rgb(51 65 85 / var(--tw-text-opacity, 1))}.hover\:text-white:hover{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.hover\:underline:hover{text-decoration-line:underline}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.focus\:ring-2:focus{--tw-ring-offset-shadow: var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow: var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000)}.focus\:ring-blue-400:focus{--tw-ring-opacity: 1;--tw-ring-color: rgb(96 165 250 / var(--tw-ring-opacity, 1))}.focus\:ring-blue-500:focus{--tw-ring-opacity: 1;--tw-ring-color: rgb(59 130 246 / var(--tw-ring-opacity, 1))}.disabled\:opacity-50:disabled{opacity:.5}@media (min-width: 768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\:grid-cols-\[200px_1fr\]{grid-template-columns:200px 1fr}}@media (min-width: 1024px){.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}} diff --git a/backend/src/main/resources/static/assets/index-cExOrMDr.js b/backend/src/main/resources/static/assets/index-cExOrMDr.js new file mode 100644 index 0000000..9d30884 --- /dev/null +++ b/backend/src/main/resources/static/assets/index-cExOrMDr.js @@ -0,0 +1,255 @@ +(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const a of document.querySelectorAll('link[rel="modulepreload"]'))r(a);new MutationObserver(a=>{for(const i of a)if(i.type==="childList")for(const l of i.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&r(l)}).observe(document,{childList:!0,subtree:!0});function n(a){const i={};return a.integrity&&(i.integrity=a.integrity),a.referrerPolicy&&(i.referrerPolicy=a.referrerPolicy),a.crossOrigin==="use-credentials"?i.credentials="include":a.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(a){if(a.ep)return;a.ep=!0;const i=n(a);fetch(a.href,i)}})();var Du=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function Te(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var hO={exports:{}},gd={};/** + * @license React + * react-jsx-runtime.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var QC=Symbol.for("react.transitional.element"),JC=Symbol.for("react.fragment");function pO(e,t,n){var r=null;if(n!==void 0&&(r=""+n),t.key!==void 0&&(r=""+t.key),"key"in t){n={};for(var a in t)a!=="key"&&(n[a]=t[a])}else n=t;return t=n.ref,{$$typeof:QC,type:e,key:r,ref:t!==void 0?t:null,props:n}}gd.Fragment=JC;gd.jsx=pO;gd.jsxs=pO;hO.exports=gd;var c=hO.exports,mO={exports:{}},le={};/** + * @license React + * react.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var Kv=Symbol.for("react.transitional.element"),eM=Symbol.for("react.portal"),tM=Symbol.for("react.fragment"),nM=Symbol.for("react.strict_mode"),rM=Symbol.for("react.profiler"),aM=Symbol.for("react.consumer"),iM=Symbol.for("react.context"),lM=Symbol.for("react.forward_ref"),oM=Symbol.for("react.suspense"),sM=Symbol.for("react.memo"),yO=Symbol.for("react.lazy"),uM=Symbol.for("react.activity"),v0=Symbol.iterator;function cM(e){return e===null||typeof e!="object"?null:(e=v0&&e[v0]||e["@@iterator"],typeof e=="function"?e:null)}var vO={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},gO=Object.assign,bO={};function Kl(e,t,n){this.props=e,this.context=t,this.refs=bO,this.updater=n||vO}Kl.prototype.isReactComponent={};Kl.prototype.setState=function(e,t){if(typeof e!="object"&&typeof e!="function"&&e!=null)throw Error("takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};Kl.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")};function xO(){}xO.prototype=Kl.prototype;function Xv(e,t,n){this.props=e,this.context=t,this.refs=bO,this.updater=n||vO}var Wv=Xv.prototype=new xO;Wv.constructor=Xv;gO(Wv,Kl.prototype);Wv.isPureReactComponent=!0;var g0=Array.isArray;function dm(){}var Fe={H:null,A:null,T:null,S:null},SO=Object.prototype.hasOwnProperty;function Zv(e,t,n){var r=n.ref;return{$$typeof:Kv,type:e,key:t,ref:r!==void 0?r:null,props:n}}function fM(e,t){return Zv(e.type,t,e.props)}function Qv(e){return typeof e=="object"&&e!==null&&e.$$typeof===Kv}function dM(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,function(n){return t[n]})}var b0=/\/+/g;function qh(e,t){return typeof e=="object"&&e!==null&&e.key!=null?dM(""+e.key):t.toString(36)}function hM(e){switch(e.status){case"fulfilled":return e.value;case"rejected":throw e.reason;default:switch(typeof e.status=="string"?e.then(dm,dm):(e.status="pending",e.then(function(t){e.status==="pending"&&(e.status="fulfilled",e.value=t)},function(t){e.status==="pending"&&(e.status="rejected",e.reason=t)})),e.status){case"fulfilled":return e.value;case"rejected":throw e.reason}}throw e}function Ri(e,t,n,r,a){var i=typeof e;(i==="undefined"||i==="boolean")&&(e=null);var l=!1;if(e===null)l=!0;else switch(i){case"bigint":case"string":case"number":l=!0;break;case"object":switch(e.$$typeof){case Kv:case eM:l=!0;break;case yO:return l=e._init,Ri(l(e._payload),t,n,r,a)}}if(l)return a=a(e),l=r===""?"."+qh(e,0):r,g0(a)?(n="",l!=null&&(n=l.replace(b0,"$&/")+"/"),Ri(a,t,n,"",function(u){return u})):a!=null&&(Qv(a)&&(a=fM(a,n+(a.key==null||e&&e.key===a.key?"":(""+a.key).replace(b0,"$&/")+"/")+l)),t.push(a)),1;l=0;var o=r===""?".":r+":";if(g0(e))for(var s=0;s>>1,G=$[H];if(0>>1;Ha(W,B))oea(Ce,W)?($[H]=Ce,$[oe]=B,H=oe):($[H]=W,$[Y]=B,H=Y);else if(oea(Ce,B))$[H]=Ce,$[oe]=B,H=oe;else break e}}return P}function a($,P){var B=$.sortIndex-P.sortIndex;return B!==0?B:$.id-P.id}if(e.unstable_now=void 0,typeof performance=="object"&&typeof performance.now=="function"){var i=performance;e.unstable_now=function(){return i.now()}}else{var l=Date,o=l.now();e.unstable_now=function(){return l.now()-o}}var s=[],u=[],d=1,f=null,h=3,p=!1,S=!1,g=!1,v=!1,m=typeof setTimeout=="function"?setTimeout:null,y=typeof clearTimeout=="function"?clearTimeout:null,b=typeof setImmediate<"u"?setImmediate:null;function w($){for(var P=n(u);P!==null;){if(P.callback===null)r(u);else if(P.startTime<=$)r(u),P.sortIndex=P.expirationTime,t(s,P);else break;P=n(u)}}function x($){if(g=!1,w($),!S)if(n(s)!==null)S=!0,j||(j=!0,N());else{var P=n(u);P!==null&&D(x,P.startTime-$)}}var j=!1,A=-1,_=5,E=-1;function T(){return v?!0:!(e.unstable_now()-E<_)}function R(){if(v=!1,j){var $=e.unstable_now();E=$;var P=!0;try{e:{S=!1,g&&(g=!1,y(A),A=-1),p=!0;var B=h;try{t:{for(w($),f=n(s);f!==null&&!(f.expirationTime>$&&T());){var H=f.callback;if(typeof H=="function"){f.callback=null,h=f.priorityLevel;var G=H(f.expirationTime<=$);if($=e.unstable_now(),typeof G=="function"){f.callback=G,w($),P=!0;break t}f===n(s)&&r(s),w($)}else r(s);f=n(s)}if(f!==null)P=!0;else{var q=n(u);q!==null&&D(x,q.startTime-$),P=!1}}break e}finally{f=null,h=B,p=!1}P=void 0}}finally{P?N():j=!1}}}var N;if(typeof b=="function")N=function(){b(R)};else if(typeof MessageChannel<"u"){var L=new MessageChannel,k=L.port2;L.port1.onmessage=R,N=function(){k.postMessage(null)}}else N=function(){m(R,0)};function D($,P){A=m(function(){$(e.unstable_now())},P)}e.unstable_IdlePriority=5,e.unstable_ImmediatePriority=1,e.unstable_LowPriority=4,e.unstable_NormalPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.unstable_cancelCallback=function($){$.callback=null},e.unstable_forceFrameRate=function($){0>$||125<$?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):_=0<$?Math.floor(1e3/$):5},e.unstable_getCurrentPriorityLevel=function(){return h},e.unstable_next=function($){switch(h){case 1:case 2:case 3:var P=3;break;default:P=h}var B=h;h=P;try{return $()}finally{h=B}},e.unstable_requestPaint=function(){v=!0},e.unstable_runWithPriority=function($,P){switch($){case 1:case 2:case 3:case 4:case 5:break;default:$=3}var B=h;h=$;try{return P()}finally{h=B}},e.unstable_scheduleCallback=function($,P,B){var H=e.unstable_now();switch(typeof B=="object"&&B!==null?(B=B.delay,B=typeof B=="number"&&0H?($.sortIndex=B,t(u,$),n(s)===null&&$===n(u)&&(g?(y(A),A=-1):g=!0,D(x,B-H))):($.sortIndex=G,t(s,$),S||p||(S=!0,j||(j=!0,N()))),$},e.unstable_shouldYield=T,e.unstable_wrapCallback=function($){var P=h;return function(){var B=h;h=P;try{return $.apply(this,arguments)}finally{h=B}}}})(OO);jO.exports=OO;var yM=jO.exports,AO={exports:{}},qt={};/** + * @license React + * react-dom.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var vM=O;function _O(e){var t="https://react.dev/errors/"+e;if(1"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(EO)}catch(e){console.error(e)}}EO(),AO.exports=qt;var xM=AO.exports;/** + * @license React + * react-dom-client.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var mt=yM,TO=O,SM=xM;function I(e){var t="https://react.dev/errors/"+e;if(1Bi||(e.current=gm[Bi],gm[Bi]=null,Bi--)}function ze(e,t){Bi++,gm[Bi]=e.current,e.current=t}var er=ar(null),fs=ar(null),sa=ar(null),Lc=ar(null);function Bc(e,t){switch(ze(sa,t),ze(fs,e),ze(er,null),t.nodeType){case 9:case 11:e=(e=t.documentElement)&&(e=e.namespaceURI)?Tx(e):0;break;default:if(e=t.tagName,t=t.namespaceURI)t=Tx(t),e=eE(t,e);else switch(e){case"svg":e=1;break;case"math":e=2;break;default:e=0}}wt(er),ze(er,e)}function fl(){wt(er),wt(fs),wt(sa)}function bm(e){e.memoizedState!==null&&ze(Lc,e);var t=er.current,n=eE(t,e.type);t!==n&&(ze(fs,e),ze(er,n))}function zc(e){fs.current===e&&(wt(er),wt(fs)),Lc.current===e&&(wt(Lc),ws._currentValue=Xa)}var Gh,j0;function ka(e){if(Gh===void 0)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);Gh=t&&t[1]||"",j0=-1)":-1a||s[r]!==u[a]){var d=` +`+s[r].replace(" at new "," at ");return e.displayName&&d.includes("")&&(d=d.replace("",e.displayName)),d}while(1<=r&&0<=a);break}}}finally{Yh=!1,Error.prepareStackTrace=n}return(n=e?e.displayName||e.name:"")?ka(n):""}function _M(e,t){switch(e.tag){case 26:case 27:case 5:return ka(e.type);case 16:return ka("Lazy");case 13:return e.child!==t&&t!==null?ka("Suspense Fallback"):ka("Suspense");case 19:return ka("SuspenseList");case 0:case 15:return Fh(e.type,!1);case 11:return Fh(e.type.render,!1);case 1:return Fh(e.type,!0);case 31:return ka("Activity");default:return""}}function O0(e){try{var t="",n=null;do t+=_M(e,n),n=e,e=e.return;while(e);return t}catch(r){return` +Error generating stack: `+r.message+` +`+r.stack}}var xm=Object.prototype.hasOwnProperty,tg=mt.unstable_scheduleCallback,Vh=mt.unstable_cancelCallback,EM=mt.unstable_shouldYield,TM=mt.unstable_requestPaint,cn=mt.unstable_now,NM=mt.unstable_getCurrentPriorityLevel,DO=mt.unstable_ImmediatePriority,kO=mt.unstable_UserBlockingPriority,Ic=mt.unstable_NormalPriority,CM=mt.unstable_LowPriority,LO=mt.unstable_IdlePriority,MM=mt.log,$M=mt.unstable_setDisableYieldValue,fu=null,fn=null;function na(e){if(typeof MM=="function"&&$M(e),fn&&typeof fn.setStrictMode=="function")try{fn.setStrictMode(fu,e)}catch{}}var dn=Math.clz32?Math.clz32:DM,RM=Math.log,PM=Math.LN2;function DM(e){return e>>>=0,e===0?32:31-(RM(e)/PM|0)|0}var Bu=256,zu=262144,Iu=4194304;function La(e){var t=e&42;if(t!==0)return t;switch(e&-e){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:return 64;case 128:return 128;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:return e&261888;case 262144:case 524288:case 1048576:case 2097152:return e&3932160;case 4194304:case 8388608:case 16777216:case 33554432:return e&62914560;case 67108864:return 67108864;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 0;default:return e}}function Sd(e,t,n){var r=e.pendingLanes;if(r===0)return 0;var a=0,i=e.suspendedLanes,l=e.pingedLanes;e=e.warmLanes;var o=r&134217727;return o!==0?(r=o&~i,r!==0?a=La(r):(l&=o,l!==0?a=La(l):n||(n=o&~e,n!==0&&(a=La(n))))):(o=r&~i,o!==0?a=La(o):l!==0?a=La(l):n||(n=r&~e,n!==0&&(a=La(n)))),a===0?0:t!==0&&t!==a&&!(t&i)&&(i=a&-a,n=t&-t,i>=n||i===32&&(n&4194048)!==0)?t:a}function du(e,t){return(e.pendingLanes&~(e.suspendedLanes&~e.pingedLanes)&t)===0}function kM(e,t){switch(e){case 1:case 2:case 4:case 8:case 64:return t+250;case 16:case 32:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return t+5e3;case 4194304:case 8388608:case 16777216:case 33554432:return-1;case 67108864:case 134217728:case 268435456:case 536870912:case 1073741824:return-1;default:return-1}}function BO(){var e=Iu;return Iu<<=1,!(Iu&62914560)&&(Iu=4194304),e}function Kh(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function hu(e,t){e.pendingLanes|=t,t!==268435456&&(e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0)}function LM(e,t,n,r,a,i){var l=e.pendingLanes;e.pendingLanes=n,e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0,e.expiredLanes&=n,e.entangledLanes&=n,e.errorRecoveryDisabledLanes&=n,e.shellSuspendCounter=0;var o=e.entanglements,s=e.expirationTimes,u=e.hiddenUpdates;for(n=l&~n;0"u")return null;try{return e.activeElement||e.body}catch{return e.body}}var qM=/[\n"\\]/g;function An(e){return e.replace(qM,function(t){return"\\"+t.charCodeAt(0).toString(16)+" "})}function jm(e,t,n,r,a,i,l,o){e.name="",l!=null&&typeof l!="function"&&typeof l!="symbol"&&typeof l!="boolean"?e.type=l:e.removeAttribute("type"),t!=null?l==="number"?(t===0&&e.value===""||e.value!=t)&&(e.value=""+wn(t)):e.value!==""+wn(t)&&(e.value=""+wn(t)):l!=="submit"&&l!=="reset"||e.removeAttribute("value"),t!=null?Om(e,l,wn(t)):n!=null?Om(e,l,wn(n)):r!=null&&e.removeAttribute("value"),a==null&&i!=null&&(e.defaultChecked=!!i),a!=null&&(e.checked=a&&typeof a!="function"&&typeof a!="symbol"),o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"?e.name=""+wn(o):e.removeAttribute("name")}function VO(e,t,n,r,a,i,l,o){if(i!=null&&typeof i!="function"&&typeof i!="symbol"&&typeof i!="boolean"&&(e.type=i),t!=null||n!=null){if(!(i!=="submit"&&i!=="reset"||t!=null)){wm(e);return}n=n!=null?""+wn(n):"",t=t!=null?""+wn(t):n,o||t===e.value||(e.value=t),e.defaultValue=t}r=r??a,r=typeof r!="function"&&typeof r!="symbol"&&!!r,e.checked=o?e.checked:!!r,e.defaultChecked=!!r,l!=null&&typeof l!="function"&&typeof l!="symbol"&&typeof l!="boolean"&&(e.name=l),wm(e)}function Om(e,t,n){t==="number"&&Uc(e.ownerDocument)===e||e.defaultValue===""+n||(e.defaultValue=""+n)}function nl(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a"u"||typeof window.document>"u"||typeof window.document.createElement>"u"),_m=!1;if(Mr)try{var So={};Object.defineProperty(So,"passive",{get:function(){_m=!0}}),window.addEventListener("test",So,So),window.removeEventListener("test",So,So)}catch{_m=!1}var ra=null,og=null,gc=null;function QO(){if(gc)return gc;var e,t=og,n=t.length,r,a="value"in ra?ra.value:ra.textContent,i=a.length;for(e=0;e=Fo),D0=" ",k0=!1;function eA(e,t){switch(e){case"keyup":return v$.indexOf(t.keyCode)!==-1;case"keydown":return t.keyCode!==229;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function tA(e){return e=e.detail,typeof e=="object"&&"data"in e?e.data:null}var Ui=!1;function b$(e,t){switch(e){case"compositionend":return tA(t);case"keypress":return t.which!==32?null:(k0=!0,D0);case"textInput":return e=t.data,e===D0&&k0?null:e;default:return null}}function x$(e,t){if(Ui)return e==="compositionend"||!ug&&eA(e,t)?(e=QO(),gc=og=ra=null,Ui=!1,e):null;switch(e){case"paste":return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1=t)return{node:n,offset:t-e};e=r}e:{for(;n;){if(n.nextSibling){n=n.nextSibling;break e}n=n.parentNode}n=void 0}n=U0(n)}}function iA(e,t){return e&&t?e===t?!0:e&&e.nodeType===3?!1:t&&t.nodeType===3?iA(e,t.parentNode):"contains"in e?e.contains(t):e.compareDocumentPosition?!!(e.compareDocumentPosition(t)&16):!1:!1}function lA(e){e=e!=null&&e.ownerDocument!=null&&e.ownerDocument.defaultView!=null?e.ownerDocument.defaultView:window;for(var t=Uc(e.document);t instanceof e.HTMLIFrameElement;){try{var n=typeof t.contentWindow.location.href=="string"}catch{n=!1}if(n)e=t.contentWindow;else break;t=Uc(e.document)}return t}function cg(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&(t==="input"&&(e.type==="text"||e.type==="search"||e.type==="tel"||e.type==="url"||e.type==="password")||t==="textarea"||e.contentEditable==="true")}var T$=Mr&&"documentMode"in document&&11>=document.documentMode,Hi=null,Em=null,Ko=null,Tm=!1;function q0(e,t,n){var r=n.window===n?n.document:n.nodeType===9?n:n.ownerDocument;Tm||Hi==null||Hi!==Uc(r)||(r=Hi,"selectionStart"in r&&cg(r)?r={start:r.selectionStart,end:r.selectionEnd}:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection(),r={anchorNode:r.anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset}),Ko&&ps(Ko,r)||(Ko=r,r=lf(Em,"onSelect"),0>=l,a-=l,Wn=1<<32-dn(t)+a|n<_?(E=A,A=null):E=A.sibling;var T=h(m,A,b[_],w);if(T===null){A===null&&(A=E);break}e&&A&&T.alternate===null&&t(m,A),y=i(T,y,_),j===null?x=T:j.sibling=T,j=T,A=E}if(_===b.length)return n(m,A),be&&gr(m,_),x;if(A===null){for(;__?(E=A,A=null):E=A.sibling;var R=h(m,A,T.value,w);if(R===null){A===null&&(A=E);break}e&&A&&R.alternate===null&&t(m,A),y=i(R,y,_),j===null?x=R:j.sibling=R,j=R,A=E}if(T.done)return n(m,A),be&&gr(m,_),x;if(A===null){for(;!T.done;_++,T=b.next())T=f(m,T.value,w),T!==null&&(y=i(T,y,_),j===null?x=T:j.sibling=T,j=T);return be&&gr(m,_),x}for(A=r(A);!T.done;_++,T=b.next())T=p(A,m,_,T.value,w),T!==null&&(e&&T.alternate!==null&&A.delete(T.key===null?_:T.key),y=i(T,y,_),j===null?x=T:j.sibling=T,j=T);return e&&A.forEach(function(N){return t(m,N)}),be&&gr(m,_),x}function v(m,y,b,w){if(typeof b=="object"&&b!==null&&b.type===Li&&b.key===null&&(b=b.props.children),typeof b=="object"&&b!==null){switch(b.$$typeof){case Lu:e:{for(var x=b.key;y!==null;){if(y.key===x){if(x=b.type,x===Li){if(y.tag===7){n(m,y.sibling),w=a(y,b.props.children),w.return=m,m=w;break e}}else if(y.elementType===x||typeof x=="object"&&x!==null&&x.$$typeof===Kr&&Ba(x)===y.type){n(m,y.sibling),w=a(y,b.props),jo(w,b),w.return=m,m=w;break e}n(m,y);break}else t(m,y);y=y.sibling}b.type===Li?(w=Wa(b.props.children,m.mode,w,b.key),w.return=m,m=w):(w=xc(b.type,b.key,b.props,null,m.mode,w),jo(w,b),w.return=m,m=w)}return l(m);case zo:e:{for(x=b.key;y!==null;){if(y.key===x)if(y.tag===4&&y.stateNode.containerInfo===b.containerInfo&&y.stateNode.implementation===b.implementation){n(m,y.sibling),w=a(y,b.children||[]),w.return=m,m=w;break e}else{n(m,y);break}else t(m,y);y=y.sibling}w=rp(b,m.mode,w),w.return=m,m=w}return l(m);case Kr:return b=Ba(b),v(m,y,b,w)}if(Io(b))return S(m,y,b,w);if(xo(b)){if(x=xo(b),typeof x!="function")throw Error(I(150));return b=x.call(b),g(m,y,b,w)}if(typeof b.then=="function")return v(m,y,Gu(b),w);if(b.$$typeof===xr)return v(m,y,qu(m,b),w);Yu(m,b)}return typeof b=="string"&&b!==""||typeof b=="number"||typeof b=="bigint"?(b=""+b,y!==null&&y.tag===6?(n(m,y.sibling),w=a(y,b),w.return=m,m=w):(n(m,y),w=np(b,m.mode,w),w.return=m,m=w),l(m)):n(m,y)}return function(m,y,b,w){try{vs=0;var x=v(m,y,b,w);return il=null,x}catch(A){if(A===Ql||A===Ed)throw A;var j=on(29,A,null,m.mode);return j.lanes=w,j.return=m,j}finally{}}}var li=SA(!0),wA=SA(!1),Xr=!1;function bg(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null,lanes:0,hiddenCallbacks:null},callbacks:null}}function Dm(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,callbacks:null})}function ca(e){return{lane:e,tag:0,payload:null,callback:null,next:null}}function fa(e,t,n){var r=e.updateQueue;if(r===null)return null;if(r=r.shared,Se&2){var a=r.pending;return a===null?t.next=t:(t.next=a.next,a.next=t),r.pending=t,t=qc(e),hA(e,null,n),t}return _d(e,r,t,n),qc(e)}function Wo(e,t,n){if(t=t.updateQueue,t!==null&&(t=t.shared,(n&4194048)!==0)){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,IO(e,n)}}function ip(e,t){var n=e.updateQueue,r=e.alternate;if(r!==null&&(r=r.updateQueue,n===r)){var a=null,i=null;if(n=n.firstBaseUpdate,n!==null){do{var l={lane:n.lane,tag:n.tag,payload:n.payload,callback:null,next:null};i===null?a=i=l:i=i.next=l,n=n.next}while(n!==null);i===null?a=i=t:i=i.next=t}else a=i=t;n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:i,shared:r.shared,callbacks:r.callbacks},e.updateQueue=n;return}e=n.lastBaseUpdate,e===null?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}var km=!1;function Zo(){if(km){var e=al;if(e!==null)throw e}}function Qo(e,t,n,r){km=!1;var a=e.updateQueue;Xr=!1;var i=a.firstBaseUpdate,l=a.lastBaseUpdate,o=a.shared.pending;if(o!==null){a.shared.pending=null;var s=o,u=s.next;s.next=null,l===null?i=u:l.next=u,l=s;var d=e.alternate;d!==null&&(d=d.updateQueue,o=d.lastBaseUpdate,o!==l&&(o===null?d.firstBaseUpdate=u:o.next=u,d.lastBaseUpdate=s))}if(i!==null){var f=a.baseState;l=0,d=u=s=null,o=i;do{var h=o.lane&-536870913,p=h!==o.lane;if(p?(ge&h)===h:(r&h)===h){h!==0&&h===pl&&(km=!0),d!==null&&(d=d.next={lane:0,tag:o.tag,payload:o.payload,callback:null,next:null});e:{var S=e,g=o;h=t;var v=n;switch(g.tag){case 1:if(S=g.payload,typeof S=="function"){f=S.call(v,f,h);break e}f=S;break e;case 3:S.flags=S.flags&-65537|128;case 0:if(S=g.payload,h=typeof S=="function"?S.call(v,f,h):S,h==null)break e;f=Ve({},f,h);break e;case 2:Xr=!0}}h=o.callback,h!==null&&(e.flags|=64,p&&(e.flags|=8192),p=a.callbacks,p===null?a.callbacks=[h]:p.push(h))}else p={lane:h,tag:o.tag,payload:o.payload,callback:o.callback,next:null},d===null?(u=d=p,s=f):d=d.next=p,l|=h;if(o=o.next,o===null){if(o=a.shared.pending,o===null)break;p=o,o=p.next,p.next=null,a.lastBaseUpdate=p,a.shared.pending=null}}while(!0);d===null&&(s=f),a.baseState=s,a.firstBaseUpdate=u,a.lastBaseUpdate=d,i===null&&(a.shared.lanes=0),wa|=l,e.lanes=l,e.memoizedState=f}}function jA(e,t){if(typeof e!="function")throw Error(I(191,e));e.call(t)}function OA(e,t){var n=e.callbacks;if(n!==null)for(e.callbacks=null,e=0;ei?i:8;var l=te.T,o={};te.T=o,$g(e,!1,t,n);try{var s=a(),u=te.S;if(u!==null&&u(o,s),s!==null&&typeof s=="object"&&typeof s.then=="function"){var d=L$(s,r);Jo(e,t,d,hn(e))}else Jo(e,t,r,hn(e))}catch(f){Jo(e,t,{then:function(){},status:"rejected",reason:f},hn())}finally{we.p=i,l!==null&&o.types!==null&&(l.types=o.types),te.T=l}}function q$(){}function Um(e,t,n,r){if(e.tag!==5)throw Error(I(476));var a=XA(e).queue;KA(e,a,t,Xa,n===null?q$:function(){return WA(e),n(r)})}function XA(e){var t=e.memoizedState;if(t!==null)return t;t={memoizedState:Xa,baseState:Xa,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:Rr,lastRenderedState:Xa},next:null};var n={};return t.next={memoizedState:n,baseState:n,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:Rr,lastRenderedState:n},next:null},e.memoizedState=t,e=e.alternate,e!==null&&(e.memoizedState=t),t}function WA(e){var t=XA(e);t.next===null&&(t=e.alternate.memoizedState),Jo(e,t.next.queue,{},hn())}function Mg(){return Mt(ws)}function ZA(){return rt().memoizedState}function QA(){return rt().memoizedState}function G$(e){for(var t=e.return;t!==null;){switch(t.tag){case 24:case 3:var n=hn();e=ca(n);var r=fa(t,e,n);r!==null&&(Wt(r,t,n),Wo(r,t,n)),t={cache:yg()},e.payload=t;return}t=t.return}}function Y$(e,t,n){var r=hn();n={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null},Md(e)?e_(t,n):(n=dg(e,t,n,r),n!==null&&(Wt(n,e,r),t_(n,t,r)))}function JA(e,t,n){var r=hn();Jo(e,t,n,r)}function Jo(e,t,n,r){var a={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null};if(Md(e))e_(t,a);else{var i=e.alternate;if(e.lanes===0&&(i===null||i.lanes===0)&&(i=t.lastRenderedReducer,i!==null))try{var l=t.lastRenderedState,o=i(l,n);if(a.hasEagerState=!0,a.eagerState=o,mn(o,l))return _d(e,t,a,0),ke===null&&Ad(),!1}catch{}finally{}if(n=dg(e,t,a,r),n!==null)return Wt(n,e,r),t_(n,t,r),!0}return!1}function $g(e,t,n,r){if(r={lane:2,revertLane:Ug(),gesture:null,action:r,hasEagerState:!1,eagerState:null,next:null},Md(e)){if(t)throw Error(I(479))}else t=dg(e,n,r,2),t!==null&&Wt(t,e,2)}function Md(e){var t=e.alternate;return e===ce||t!==null&&t===ce}function e_(e,t){ll=Xc=!0;var n=e.pending;n===null?t.next=t:(t.next=n.next,n.next=t),e.pending=t}function t_(e,t,n){if(n&4194048){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,IO(e,n)}}var bs={readContext:Mt,use:Nd,useCallback:Ze,useContext:Ze,useEffect:Ze,useImperativeHandle:Ze,useLayoutEffect:Ze,useInsertionEffect:Ze,useMemo:Ze,useReducer:Ze,useRef:Ze,useState:Ze,useDebugValue:Ze,useDeferredValue:Ze,useTransition:Ze,useSyncExternalStore:Ze,useId:Ze,useHostTransitionStatus:Ze,useFormState:Ze,useActionState:Ze,useOptimistic:Ze,useMemoCache:Ze,useCacheRefresh:Ze};bs.useEffectEvent=Ze;var n_={readContext:Mt,use:Nd,useCallback:function(e,t){return Bt().memoizedState=[e,t===void 0?null:t],e},useContext:Mt,useEffect:ax,useImperativeHandle:function(e,t,n){n=n!=null?n.concat([e]):null,jc(4194308,4,qA.bind(null,t,e),n)},useLayoutEffect:function(e,t){return jc(4194308,4,e,t)},useInsertionEffect:function(e,t){jc(4,2,e,t)},useMemo:function(e,t){var n=Bt();t=t===void 0?null:t;var r=e();if(oi){na(!0);try{e()}finally{na(!1)}}return n.memoizedState=[r,t],r},useReducer:function(e,t,n){var r=Bt();if(n!==void 0){var a=n(t);if(oi){na(!0);try{n(t)}finally{na(!1)}}}else a=t;return r.memoizedState=r.baseState=a,e={pending:null,lanes:0,dispatch:null,lastRenderedReducer:e,lastRenderedState:a},r.queue=e,e=e.dispatch=Y$.bind(null,ce,e),[r.memoizedState,e]},useRef:function(e){var t=Bt();return e={current:e},t.memoizedState=e},useState:function(e){e=zm(e);var t=e.queue,n=JA.bind(null,ce,t);return t.dispatch=n,[e.memoizedState,n]},useDebugValue:Ng,useDeferredValue:function(e,t){var n=Bt();return Cg(n,e,t)},useTransition:function(){var e=zm(!1);return e=KA.bind(null,ce,e.queue,!0,!1),Bt().memoizedState=e,[!1,e]},useSyncExternalStore:function(e,t,n){var r=ce,a=Bt();if(be){if(n===void 0)throw Error(I(407));n=n()}else{if(n=t(),ke===null)throw Error(I(349));ge&127||NA(r,t,n)}a.memoizedState=n;var i={value:n,getSnapshot:t};return a.queue=i,ax(MA.bind(null,r,i,e),[e]),r.flags|=2048,yl(9,{destroy:void 0},CA.bind(null,r,i,n,t),null),n},useId:function(){var e=Bt(),t=ke.identifierPrefix;if(be){var n=Zn,r=Wn;n=(r&~(1<<32-dn(r)-1)).toString(32)+n,t="_"+t+"R_"+n,n=Wc++,0<\/script>",i=i.removeChild(i.firstChild);break;case"select":i=typeof r.is=="string"?l.createElement("select",{is:r.is}):l.createElement("select"),r.multiple?i.multiple=!0:r.size&&(i.size=r.size);break;default:i=typeof r.is=="string"?l.createElement(a,{is:r.is}):l.createElement(a)}}i[Tt]=t,i[Qt]=r;e:for(l=t.child;l!==null;){if(l.tag===5||l.tag===6)i.appendChild(l.stateNode);else if(l.tag!==4&&l.tag!==27&&l.child!==null){l.child.return=l,l=l.child;continue}if(l===t)break e;for(;l.sibling===null;){if(l.return===null||l.return===t)break e;l=l.return}l.sibling.return=l.return,l=l.sibling}t.stateNode=i;e:switch($t(i,a,r),a){case"button":case"input":case"select":case"textarea":r=!!r.autoFocus;break e;case"img":r=!0;break e;default:r=!1}r&&dr(t)}}return He(t),hp(t,t.type,e===null?null:e.memoizedProps,t.pendingProps,n),null;case 6:if(e&&t.stateNode!=null)e.memoizedProps!==r&&dr(t);else{if(typeof r!="string"&&t.stateNode===null)throw Error(I(166));if(e=sa.current,Ti(t)){if(e=t.stateNode,n=t.memoizedProps,r=null,a=Nt,a!==null)switch(a.tag){case 27:case 5:r=a.memoizedProps}e[Tt]=t,e=!!(e.nodeValue===n||r!==null&&r.suppressHydrationWarning===!0||J_(e.nodeValue,n)),e||xa(t,!0)}else e=of(e).createTextNode(r),e[Tt]=t,t.stateNode=e}return He(t),null;case 31:if(n=t.memoizedState,e===null||e.memoizedState!==null){if(r=Ti(t),n!==null){if(e===null){if(!r)throw Error(I(318));if(e=t.memoizedState,e=e!==null?e.dehydrated:null,!e)throw Error(I(557));e[Tt]=t}else ai(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;He(t),e=!1}else n=ap(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=n),e=!0;if(!e)return t.flags&256?(ln(t),t):(ln(t),null);if(t.flags&128)throw Error(I(558))}return He(t),null;case 13:if(r=t.memoizedState,e===null||e.memoizedState!==null&&e.memoizedState.dehydrated!==null){if(a=Ti(t),r!==null&&r.dehydrated!==null){if(e===null){if(!a)throw Error(I(318));if(a=t.memoizedState,a=a!==null?a.dehydrated:null,!a)throw Error(I(317));a[Tt]=t}else ai(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;He(t),a=!1}else a=ap(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=a),a=!0;if(!a)return t.flags&256?(ln(t),t):(ln(t),null)}return ln(t),t.flags&128?(t.lanes=n,t):(n=r!==null,e=e!==null&&e.memoizedState!==null,n&&(r=t.child,a=null,r.alternate!==null&&r.alternate.memoizedState!==null&&r.alternate.memoizedState.cachePool!==null&&(a=r.alternate.memoizedState.cachePool.pool),i=null,r.memoizedState!==null&&r.memoizedState.cachePool!==null&&(i=r.memoizedState.cachePool.pool),i!==a&&(r.flags|=2048)),n!==e&&n&&(t.child.flags|=8192),Fu(t,t.updateQueue),He(t),null);case 4:return fl(),e===null&&Hg(t.stateNode.containerInfo),He(t),null;case 10:return _r(t.type),He(t),null;case 19:if(wt(nt),r=t.memoizedState,r===null)return He(t),null;if(a=(t.flags&128)!==0,i=r.rendering,i===null)if(a)Oo(r,!1);else{if(et!==0||e!==null&&e.flags&128)for(e=t.child;e!==null;){if(i=Kc(e),i!==null){for(t.flags|=128,Oo(r,!1),e=i.updateQueue,t.updateQueue=e,Fu(t,e),t.subtreeFlags=0,e=n,n=t.child;n!==null;)pA(n,e),n=n.sibling;return ze(nt,nt.current&1|2),be&&gr(t,r.treeForkCount),t.child}e=e.sibling}r.tail!==null&&cn()>ef&&(t.flags|=128,a=!0,Oo(r,!1),t.lanes=4194304)}else{if(!a)if(e=Kc(i),e!==null){if(t.flags|=128,a=!0,e=e.updateQueue,t.updateQueue=e,Fu(t,e),Oo(r,!0),r.tail===null&&r.tailMode==="hidden"&&!i.alternate&&!be)return He(t),null}else 2*cn()-r.renderingStartTime>ef&&n!==536870912&&(t.flags|=128,a=!0,Oo(r,!1),t.lanes=4194304);r.isBackwards?(i.sibling=t.child,t.child=i):(e=r.last,e!==null?e.sibling=i:t.child=i,r.last=i)}return r.tail!==null?(e=r.tail,r.rendering=e,r.tail=e.sibling,r.renderingStartTime=cn(),e.sibling=null,n=nt.current,ze(nt,a?n&1|2:n&1),be&&gr(t,r.treeForkCount),e):(He(t),null);case 22:case 23:return ln(t),xg(),r=t.memoizedState!==null,e!==null?e.memoizedState!==null!==r&&(t.flags|=8192):r&&(t.flags|=8192),r?n&536870912&&!(t.flags&128)&&(He(t),t.subtreeFlags&6&&(t.flags|=8192)):He(t),n=t.updateQueue,n!==null&&Fu(t,n.retryQueue),n=null,e!==null&&e.memoizedState!==null&&e.memoizedState.cachePool!==null&&(n=e.memoizedState.cachePool.pool),r=null,t.memoizedState!==null&&t.memoizedState.cachePool!==null&&(r=t.memoizedState.cachePool.pool),r!==n&&(t.flags|=2048),e!==null&&wt(Za),null;case 24:return n=null,e!==null&&(n=e.memoizedState.cache),t.memoizedState.cache!==n&&(t.flags|=2048),_r(ot),He(t),null;case 25:return null;case 30:return null}throw Error(I(156,t.tag))}function W$(e,t){switch(mg(t),t.tag){case 1:return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 3:return _r(ot),fl(),e=t.flags,e&65536&&!(e&128)?(t.flags=e&-65537|128,t):null;case 26:case 27:case 5:return zc(t),null;case 31:if(t.memoizedState!==null){if(ln(t),t.alternate===null)throw Error(I(340));ai()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 13:if(ln(t),e=t.memoizedState,e!==null&&e.dehydrated!==null){if(t.alternate===null)throw Error(I(340));ai()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 19:return wt(nt),null;case 4:return fl(),null;case 10:return _r(t.type),null;case 22:case 23:return ln(t),xg(),e!==null&&wt(Za),e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 24:return _r(ot),null;case 25:return null;default:return null}}function p_(e,t){switch(mg(t),t.tag){case 3:_r(ot),fl();break;case 26:case 27:case 5:zc(t);break;case 4:fl();break;case 31:t.memoizedState!==null&&ln(t);break;case 13:ln(t);break;case 19:wt(nt);break;case 10:_r(t.type);break;case 22:case 23:ln(t),xg(),e!==null&&wt(Za);break;case 24:_r(ot)}}function gu(e,t){try{var n=t.updateQueue,r=n!==null?n.lastEffect:null;if(r!==null){var a=r.next;n=a;do{if((n.tag&e)===e){r=void 0;var i=n.create,l=n.inst;r=i(),l.destroy=r}n=n.next}while(n!==a)}}catch(o){_e(t,t.return,o)}}function Sa(e,t,n){try{var r=t.updateQueue,a=r!==null?r.lastEffect:null;if(a!==null){var i=a.next;r=i;do{if((r.tag&e)===e){var l=r.inst,o=l.destroy;if(o!==void 0){l.destroy=void 0,a=t;var s=n,u=o;try{u()}catch(d){_e(a,s,d)}}}r=r.next}while(r!==i)}}catch(d){_e(t,t.return,d)}}function m_(e){var t=e.updateQueue;if(t!==null){var n=e.stateNode;try{OA(t,n)}catch(r){_e(e,e.return,r)}}}function y_(e,t,n){n.props=si(e.type,e.memoizedProps),n.state=e.memoizedState;try{n.componentWillUnmount()}catch(r){_e(e,t,r)}}function es(e,t){try{var n=e.ref;if(n!==null){switch(e.tag){case 26:case 27:case 5:var r=e.stateNode;break;case 30:r=e.stateNode;break;default:r=e.stateNode}typeof n=="function"?e.refCleanup=n(r):n.current=r}}catch(a){_e(e,t,a)}}function Qn(e,t){var n=e.ref,r=e.refCleanup;if(n!==null)if(typeof r=="function")try{r()}catch(a){_e(e,t,a)}finally{e.refCleanup=null,e=e.alternate,e!=null&&(e.refCleanup=null)}else if(typeof n=="function")try{n(null)}catch(a){_e(e,t,a)}else n.current=null}function v_(e){var t=e.type,n=e.memoizedProps,r=e.stateNode;try{e:switch(t){case"button":case"input":case"select":case"textarea":n.autoFocus&&r.focus();break e;case"img":n.src?r.src=n.src:n.srcSet&&(r.srcset=n.srcSet)}}catch(a){_e(e,e.return,a)}}function pp(e,t,n){try{var r=e.stateNode;gR(r,e.type,n,t),r[Qt]=t}catch(a){_e(e,e.return,a)}}function g_(e){return e.tag===5||e.tag===3||e.tag===26||e.tag===27&&Oa(e.type)||e.tag===4}function mp(e){e:for(;;){for(;e.sibling===null;){if(e.return===null||g_(e.return))return null;e=e.return}for(e.sibling.return=e.return,e=e.sibling;e.tag!==5&&e.tag!==6&&e.tag!==18;){if(e.tag===27&&Oa(e.type)||e.flags&2||e.child===null||e.tag===4)continue e;e.child.return=e,e=e.child}if(!(e.flags&2))return e.stateNode}}function Fm(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?(n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n).insertBefore(e,t):(t=n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n,t.appendChild(e),n=n._reactRootContainer,n!=null||t.onclick!==null||(t.onclick=Sr));else if(r!==4&&(r===27&&Oa(e.type)&&(n=e.stateNode,t=null),e=e.child,e!==null))for(Fm(e,t,n),e=e.sibling;e!==null;)Fm(e,t,n),e=e.sibling}function Jc(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?n.insertBefore(e,t):n.appendChild(e);else if(r!==4&&(r===27&&Oa(e.type)&&(n=e.stateNode),e=e.child,e!==null))for(Jc(e,t,n),e=e.sibling;e!==null;)Jc(e,t,n),e=e.sibling}function b_(e){var t=e.stateNode,n=e.memoizedProps;try{for(var r=e.type,a=t.attributes;a.length;)t.removeAttributeNode(a[0]);$t(t,r,n),t[Tt]=e,t[Qt]=n}catch(i){_e(e,e.return,i)}}var br=!1,lt=!1,yp=!1,vx=typeof WeakSet=="function"?WeakSet:Set,bt=null;function Z$(e,t){if(e=e.containerInfo,Jm=ff,e=lA(e),cg(e)){if("selectionStart"in e)var n={start:e.selectionStart,end:e.selectionEnd};else e:{n=(n=e.ownerDocument)&&n.defaultView||window;var r=n.getSelection&&n.getSelection();if(r&&r.rangeCount!==0){n=r.anchorNode;var a=r.anchorOffset,i=r.focusNode;r=r.focusOffset;try{n.nodeType,i.nodeType}catch{n=null;break e}var l=0,o=-1,s=-1,u=0,d=0,f=e,h=null;t:for(;;){for(var p;f!==n||a!==0&&f.nodeType!==3||(o=l+a),f!==i||r!==0&&f.nodeType!==3||(s=l+r),f.nodeType===3&&(l+=f.nodeValue.length),(p=f.firstChild)!==null;)h=f,f=p;for(;;){if(f===e)break t;if(h===n&&++u===a&&(o=l),h===i&&++d===r&&(s=l),(p=f.nextSibling)!==null)break;f=h,h=f.parentNode}f=p}n=o===-1||s===-1?null:{start:o,end:s}}else n=null}n=n||{start:0,end:0}}else n=null;for(ey={focusedElem:e,selectionRange:n},ff=!1,bt=t;bt!==null;)if(t=bt,e=t.child,(t.subtreeFlags&1028)!==0&&e!==null)e.return=t,bt=e;else for(;bt!==null;){switch(t=bt,i=t.alternate,e=t.flags,t.tag){case 0:if(e&4&&(e=t.updateQueue,e=e!==null?e.events:null,e!==null))for(n=0;n title"))),$t(i,r,n),i[Tt]=e,xt(i),r=i;break e;case"link":var l=Lx("link","href",a).get(r+(n.href||""));if(l){for(var o=0;ov&&(l=v,v=g,g=l);var m=H0(o,g),y=H0(o,v);if(m&&y&&(p.rangeCount!==1||p.anchorNode!==m.node||p.anchorOffset!==m.offset||p.focusNode!==y.node||p.focusOffset!==y.offset)){var b=f.createRange();b.setStart(m.node,m.offset),p.removeAllRanges(),g>v?(p.addRange(b),p.extend(y.node,y.offset)):(b.setEnd(y.node,y.offset),p.addRange(b))}}}}for(f=[],p=o;p=p.parentNode;)p.nodeType===1&&f.push({element:p,left:p.scrollLeft,top:p.scrollTop});for(typeof o.focus=="function"&&o.focus(),o=0;on?32:n,te.T=null,n=Xm,Xm=null;var i=ha,l=Er;if(ht=0,gl=ha=null,Er=0,Se&6)throw Error(I(331));var o=Se;if(Se|=4,C_(i.current),E_(i,i.current,l,n),Se=o,bu(0,!1),fn&&typeof fn.onPostCommitFiberRoot=="function")try{fn.onPostCommitFiberRoot(fu,i)}catch{}return!0}finally{we.p=a,te.T=r,Y_(e,t)}}function Sx(e,t,n){t=_n(n,t),t=qm(e.stateNode,t,2),e=fa(e,t,2),e!==null&&(hu(e,2),ir(e))}function _e(e,t,n){if(e.tag===3)Sx(e,e,n);else for(;t!==null;){if(t.tag===3){Sx(t,e,n);break}else if(t.tag===1){var r=t.stateNode;if(typeof t.type.getDerivedStateFromError=="function"||typeof r.componentDidCatch=="function"&&(da===null||!da.has(r))){e=_n(n,e),n=o_(2),r=fa(t,n,2),r!==null&&(s_(n,r,t,e),hu(r,2),ir(r));break}}t=t.return}}function gp(e,t,n){var r=e.pingCache;if(r===null){r=e.pingCache=new eR;var a=new Set;r.set(t,a)}else a=r.get(t),a===void 0&&(a=new Set,r.set(t,a));a.has(n)||(Bg=!0,a.add(n),e=iR.bind(null,e,t,n),t.then(e,e))}function iR(e,t,n){var r=e.pingCache;r!==null&&r.delete(t),e.pingedLanes|=e.suspendedLanes&n,e.warmLanes&=~n,ke===e&&(ge&n)===n&&(et===4||et===3&&(ge&62914560)===ge&&300>cn()-$d?!(Se&2)&&bl(e,0):zg|=n,vl===ge&&(vl=0)),ir(e)}function V_(e,t){t===0&&(t=BO()),e=bi(e,t),e!==null&&(hu(e,t),ir(e))}function lR(e){var t=e.memoizedState,n=0;t!==null&&(n=t.retryLane),V_(e,n)}function oR(e,t){var n=0;switch(e.tag){case 31:case 13:var r=e.stateNode,a=e.memoizedState;a!==null&&(n=a.retryLane);break;case 19:r=e.stateNode;break;case 22:r=e.stateNode._retryCache;break;default:throw Error(I(314))}r!==null&&r.delete(t),V_(e,n)}function sR(e,t){return tg(e,t)}var rf=null,Di=null,Zm=!1,af=!1,bp=!1,la=0;function ir(e){e!==Di&&e.next===null&&(Di===null?rf=Di=e:Di=Di.next=e),af=!0,Zm||(Zm=!0,cR())}function bu(e,t){if(!bp&&af){bp=!0;do for(var n=!1,r=rf;r!==null;){if(e!==0){var a=r.pendingLanes;if(a===0)var i=0;else{var l=r.suspendedLanes,o=r.pingedLanes;i=(1<<31-dn(42|e)+1)-1,i&=a&~(l&~o),i=i&201326741?i&201326741|1:i?i|2:0}i!==0&&(n=!0,wx(r,i))}else i=ge,i=Sd(r,r===ke?i:0,r.cancelPendingCommit!==null||r.timeoutHandle!==-1),!(i&3)||du(r,i)||(n=!0,wx(r,i));r=r.next}while(n);bp=!1}}function uR(){K_()}function K_(){af=Zm=!1;var e=0;la!==0&&xR()&&(e=la);for(var t=cn(),n=null,r=rf;r!==null;){var a=r.next,i=X_(r,t);i===0?(r.next=null,n===null?rf=a:n.next=a,a===null&&(Di=n)):(n=r,(e!==0||i&3)&&(af=!0)),r=a}ht!==0&&ht!==5||bu(e),la!==0&&(la=0)}function X_(e,t){for(var n=e.suspendedLanes,r=e.pingedLanes,a=e.expirationTimes,i=e.pendingLanes&-62914561;0o)break;var d=s.transferSize,f=s.initiatorType;d&&Ex(f)&&(s=s.responseEnd,l+=d*(s"u"?null:document;function aE(e,t,n){var r=eo;if(r&&typeof t=="string"&&t){var a=An(t);a='link[rel="'+e+'"][href="'+a+'"]',typeof n=="string"&&(a+='[crossorigin="'+n+'"]'),Px.has(a)||(Px.add(a),e={rel:e,crossOrigin:n,href:t},r.querySelector(a)===null&&(t=r.createElement("link"),$t(t,"link",e),xt(t),r.head.appendChild(t)))}}function NR(e){Ur.D(e),aE("dns-prefetch",e,null)}function CR(e,t){Ur.C(e,t),aE("preconnect",e,t)}function MR(e,t,n){Ur.L(e,t,n);var r=eo;if(r&&e&&t){var a='link[rel="preload"][as="'+An(t)+'"]';t==="image"&&n&&n.imageSrcSet?(a+='[imagesrcset="'+An(n.imageSrcSet)+'"]',typeof n.imageSizes=="string"&&(a+='[imagesizes="'+An(n.imageSizes)+'"]')):a+='[href="'+An(e)+'"]';var i=a;switch(t){case"style":i=xl(e);break;case"script":i=to(e)}Rn.has(i)||(e=Ve({rel:"preload",href:t==="image"&&n&&n.imageSrcSet?void 0:e,as:t},n),Rn.set(i,e),r.querySelector(a)!==null||t==="style"&&r.querySelector(xu(i))||t==="script"&&r.querySelector(Su(i))||(t=r.createElement("link"),$t(t,"link",e),xt(t),r.head.appendChild(t)))}}function $R(e,t){Ur.m(e,t);var n=eo;if(n&&e){var r=t&&typeof t.as=="string"?t.as:"script",a='link[rel="modulepreload"][as="'+An(r)+'"][href="'+An(e)+'"]',i=a;switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":i=to(e)}if(!Rn.has(i)&&(e=Ve({rel:"modulepreload",href:e},t),Rn.set(i,e),n.querySelector(a)===null)){switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":if(n.querySelector(Su(i)))return}r=n.createElement("link"),$t(r,"link",e),xt(r),n.head.appendChild(r)}}}function RR(e,t,n){Ur.S(e,t,n);var r=eo;if(r&&e){var a=tl(r).hoistableStyles,i=xl(e);t=t||"default";var l=a.get(i);if(!l){var o={loading:0,preload:null};if(l=r.querySelector(xu(i)))o.loading=5;else{e=Ve({rel:"stylesheet",href:e,"data-precedence":t},n),(n=Rn.get(i))&&qg(e,n);var s=l=r.createElement("link");xt(s),$t(s,"link",e),s._p=new Promise(function(u,d){s.onload=u,s.onerror=d}),s.addEventListener("load",function(){o.loading|=1}),s.addEventListener("error",function(){o.loading|=2}),o.loading|=4,Ec(l,t,r)}l={type:"stylesheet",instance:l,count:1,state:o},a.set(i,l)}}}function PR(e,t){Ur.X(e,t);var n=eo;if(n&&e){var r=tl(n).hoistableScripts,a=to(e),i=r.get(a);i||(i=n.querySelector(Su(a)),i||(e=Ve({src:e,async:!0},t),(t=Rn.get(a))&&Gg(e,t),i=n.createElement("script"),xt(i),$t(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function DR(e,t){Ur.M(e,t);var n=eo;if(n&&e){var r=tl(n).hoistableScripts,a=to(e),i=r.get(a);i||(i=n.querySelector(Su(a)),i||(e=Ve({src:e,async:!0,type:"module"},t),(t=Rn.get(a))&&Gg(e,t),i=n.createElement("script"),xt(i),$t(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function Dx(e,t,n,r){var a=(a=sa.current)?sf(a):null;if(!a)throw Error(I(446));switch(e){case"meta":case"title":return null;case"style":return typeof n.precedence=="string"&&typeof n.href=="string"?(t=xl(n.href),n=tl(a).hoistableStyles,r=n.get(t),r||(r={type:"style",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};case"link":if(n.rel==="stylesheet"&&typeof n.href=="string"&&typeof n.precedence=="string"){e=xl(n.href);var i=tl(a).hoistableStyles,l=i.get(e);if(l||(a=a.ownerDocument||a,l={type:"stylesheet",instance:null,count:0,state:{loading:0,preload:null}},i.set(e,l),(i=a.querySelector(xu(e)))&&!i._p&&(l.instance=i,l.state.loading=5),Rn.has(e)||(n={rel:"preload",as:"style",href:n.href,crossOrigin:n.crossOrigin,integrity:n.integrity,media:n.media,hrefLang:n.hrefLang,referrerPolicy:n.referrerPolicy},Rn.set(e,n),i||kR(a,e,n,l.state))),t&&r===null)throw Error(I(528,""));return l}if(t&&r!==null)throw Error(I(529,""));return null;case"script":return t=n.async,n=n.src,typeof n=="string"&&t&&typeof t!="function"&&typeof t!="symbol"?(t=to(n),n=tl(a).hoistableScripts,r=n.get(t),r||(r={type:"script",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};default:throw Error(I(444,e))}}function xl(e){return'href="'+An(e)+'"'}function xu(e){return'link[rel="stylesheet"]['+e+"]"}function iE(e){return Ve({},e,{"data-precedence":e.precedence,precedence:null})}function kR(e,t,n,r){e.querySelector('link[rel="preload"][as="style"]['+t+"]")?r.loading=1:(t=e.createElement("link"),r.preload=t,t.addEventListener("load",function(){return r.loading|=1}),t.addEventListener("error",function(){return r.loading|=2}),$t(t,"link",n),xt(t),e.head.appendChild(t))}function to(e){return'[src="'+An(e)+'"]'}function Su(e){return"script[async]"+e}function kx(e,t,n){if(t.count++,t.instance===null)switch(t.type){case"style":var r=e.querySelector('style[data-href~="'+An(n.href)+'"]');if(r)return t.instance=r,xt(r),r;var a=Ve({},n,{"data-href":n.href,"data-precedence":n.precedence,href:null,precedence:null});return r=(e.ownerDocument||e).createElement("style"),xt(r),$t(r,"style",a),Ec(r,n.precedence,e),t.instance=r;case"stylesheet":a=xl(n.href);var i=e.querySelector(xu(a));if(i)return t.state.loading|=4,t.instance=i,xt(i),i;r=iE(n),(a=Rn.get(a))&&qg(r,a),i=(e.ownerDocument||e).createElement("link"),xt(i);var l=i;return l._p=new Promise(function(o,s){l.onload=o,l.onerror=s}),$t(i,"link",r),t.state.loading|=4,Ec(i,n.precedence,e),t.instance=i;case"script":return i=to(n.src),(a=e.querySelector(Su(i)))?(t.instance=a,xt(a),a):(r=n,(a=Rn.get(i))&&(r=Ve({},n),Gg(r,a)),e=e.ownerDocument||e,a=e.createElement("script"),xt(a),$t(a,"link",r),e.head.appendChild(a),t.instance=a);case"void":return null;default:throw Error(I(443,t.type))}else t.type==="stylesheet"&&!(t.state.loading&4)&&(r=t.instance,t.state.loading|=4,Ec(r,n.precedence,e));return t.instance}function Ec(e,t,n){for(var r=n.querySelectorAll('link[rel="stylesheet"][data-precedence],style[data-precedence]'),a=r.length?r[r.length-1]:null,i=a,l=0;l title"):null)}function LR(e,t,n){if(n===1||t.itemProp!=null)return!1;switch(e){case"meta":case"title":return!0;case"style":if(typeof t.precedence!="string"||typeof t.href!="string"||t.href==="")break;return!0;case"link":if(typeof t.rel!="string"||typeof t.href!="string"||t.href===""||t.onLoad||t.onError)break;switch(t.rel){case"stylesheet":return e=t.disabled,typeof t.precedence=="string"&&e==null;default:return!0}case"script":if(t.async&&typeof t.async!="function"&&typeof t.async!="symbol"&&!t.onLoad&&!t.onError&&t.src&&typeof t.src=="string")return!0}return!1}function lE(e){return!(e.type==="stylesheet"&&!(e.state.loading&3))}function BR(e,t,n,r){if(n.type==="stylesheet"&&(typeof r.media!="string"||matchMedia(r.media).matches!==!1)&&!(n.state.loading&4)){if(n.instance===null){var a=xl(r.href),i=t.querySelector(xu(a));if(i){t=i._p,t!==null&&typeof t=="object"&&typeof t.then=="function"&&(e.count++,e=uf.bind(e),t.then(e,e)),n.state.loading|=4,n.instance=i,xt(i);return}i=t.ownerDocument||t,r=iE(r),(a=Rn.get(a))&&qg(r,a),i=i.createElement("link"),xt(i);var l=i;l._p=new Promise(function(o,s){l.onload=o,l.onerror=s}),$t(i,"link",r),n.instance=i}e.stylesheets===null&&(e.stylesheets=new Map),e.stylesheets.set(n,t),(t=n.state.preload)&&!(n.state.loading&3)&&(e.count++,n=uf.bind(e),t.addEventListener("load",n),t.addEventListener("error",n))}}var Ap=0;function zR(e,t){return e.stylesheets&&e.count===0&&Nc(e,e.stylesheets),0Ap?50:800)+t);return e.unsuspend=n,function(){e.unsuspend=null,clearTimeout(r),clearTimeout(a)}}:null}function uf(){if(this.count--,this.count===0&&(this.imgCount===0||!this.waitingForImages)){if(this.stylesheets)Nc(this,this.stylesheets);else if(this.unsuspend){var e=this.unsuspend;this.unsuspend=null,e()}}}var cf=null;function Nc(e,t){e.stylesheets=null,e.unsuspend!==null&&(e.count++,cf=new Map,t.forEach(IR,e),cf=null,uf.call(e))}function IR(e,t){if(!(t.state.loading&4)){var n=cf.get(e);if(n)var r=n.get(null);else{n=new Map,cf.set(e,n);for(var a=e.querySelectorAll("link[data-precedence],style[data-precedence]"),i=0;i"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(pE)}catch(e){console.error(e)}}pE(),wO.exports=bd;var KR=wO.exports;const XR=Te(KR);/** + * react-router v7.18.0 + * + * Copyright (c) Remix Software Inc. + * + * This source code is licensed under the MIT license found in the + * LICENSE.md file in the root directory of this source tree. + * + * @license MIT + */var Xg=/^(?:[a-z][a-z0-9+.-]*:|[\\/]{2})/i,mE=/^[\\/]{2}/;function WR(e,t){return t+e.replace(/\\/g,"/")}var Yx="popstate";function Fx(e){return typeof e=="object"&&e!=null&&"pathname"in e&&"search"in e&&"hash"in e&&"state"in e&&"key"in e}function ZR(e={}){function t(r,a){var u;let i=(u=a.state)==null?void 0:u.masked,{pathname:l,search:o,hash:s}=i||r.location;return sy("",{pathname:l,search:o,hash:s},a.state&&a.state.usr||null,a.state&&a.state.key||"default",i?{pathname:r.location.pathname,search:r.location.search,hash:r.location.hash}:void 0)}function n(r,a){return typeof a=="string"?a:As(a)}return JR(t,n,null,e)}function We(e,t){if(e===!1||e===null||typeof e>"u")throw new Error(t)}function Fn(e,t){if(!e){typeof console<"u"&&console.warn(t);try{throw new Error(t)}catch{}}}function QR(){return Math.random().toString(36).substring(2,10)}function Vx(e,t){return{usr:e.state,key:e.key,idx:t,masked:e.mask?{pathname:e.pathname,search:e.search,hash:e.hash}:void 0}}function sy(e,t,n=null,r,a){return{pathname:typeof e=="string"?e:e.pathname,search:"",hash:"",...typeof t=="string"?no(t):t,state:n,key:t&&t.key||r||QR(),mask:a}}function As({pathname:e="/",search:t="",hash:n=""}){return t&&t!=="?"&&(e+=t.charAt(0)==="?"?t:"?"+t),n&&n!=="#"&&(e+=n.charAt(0)==="#"?n:"#"+n),e}function no(e){let t={};if(e){let n=e.indexOf("#");n>=0&&(t.hash=e.substring(n),e=e.substring(0,n));let r=e.indexOf("?");r>=0&&(t.search=e.substring(r),e=e.substring(0,r)),e&&(t.pathname=e)}return t}function JR(e,t,n,r={}){let{window:a=document.defaultView,v5Compat:i=!1}=r,l=a.history,o="POP",s=null,u=d();u==null&&(u=0,l.replaceState({...l.state,idx:u},""));function d(){return(l.state||{idx:null}).idx}function f(){o="POP";let v=d(),m=v==null?null:v-u;u=v,s&&s({action:o,location:g.location,delta:m})}function h(v,m){o="PUSH";let y=Fx(v)?v:sy(g.location,v,m);u=d()+1;let b=Vx(y,u),w=g.createHref(y.mask||y);try{l.pushState(b,"",w)}catch(x){if(x instanceof DOMException&&x.name==="DataCloneError")throw x;a.location.assign(w)}i&&s&&s({action:o,location:g.location,delta:1})}function p(v,m){o="REPLACE";let y=Fx(v)?v:sy(g.location,v,m);u=d();let b=Vx(y,u),w=g.createHref(y.mask||y);l.replaceState(b,"",w),i&&s&&s({action:o,location:g.location,delta:0})}function S(v){return eP(a,v)}let g={get action(){return o},get location(){return e(a,l)},listen(v){if(s)throw new Error("A history only accepts one active listener");return a.addEventListener(Yx,f),s=v,()=>{a.removeEventListener(Yx,f),s=null}},createHref(v){return t(a,v)},createURL:S,encodeLocation(v){let m=S(v);return{pathname:m.pathname,search:m.search,hash:m.hash}},push:h,replace:p,go(v){return l.go(v)}};return g}function eP(e,t,n=!1){let r="http://localhost";e&&(r=e.location.origin!=="null"?e.location.origin:e.location.href),We(r,"No window.location.(origin|href) available to create URL");let a=typeof t=="string"?t:As(t);return a=a.replace(/ $/,"%20"),!n&&mE.test(a)&&(a=r+a),new URL(a,r)}function yE(e,t,n="/"){return tP(e,t,n,!1)}function tP(e,t,n,r,a){let i=typeof t=="string"?no(t):t,l=kr(i.pathname||"/",n);if(l==null)return null;let o=nP(e),s=null,u=hP(l);for(let d=0;s==null&&d{let d={relativePath:u===void 0?l.path||"":u,caseSensitive:l.caseSensitive===!0,childrenIndex:o,route:l};if(d.relativePath.startsWith("/")){if(!d.relativePath.startsWith(r)&&s)return;We(d.relativePath.startsWith(r),`Absolute route path "${d.relativePath}" nested under path "${r}" is not valid. An absolute child route path must start with the combined path of all its parent routes.`),d.relativePath=d.relativePath.slice(r.length)}let f=Yn([r,d.relativePath]),h=n.concat(d);l.children&&l.children.length>0&&(We(l.index!==!0,`Index routes must not have child routes. Please remove all child routes from route path "${f}".`),vE(l.children,t,h,f,s)),!(l.path==null&&!l.index)&&t.push({path:f,score:cP(f,l.index),routesMeta:h.map((p,S)=>{let[g,v]=xE(p.relativePath,p.caseSensitive,S===h.length-1);return{...p,matcher:g,compiledParams:v}})})};return e.forEach((l,o)=>{var s;if(l.path===""||!((s=l.path)!=null&&s.includes("?")))i(l,o);else for(let u of gE(l.path))i(l,o,!0,u)}),t}function gE(e){let t=e.split("/");if(t.length===0)return[];let[n,...r]=t,a=n.endsWith("?"),i=n.replace(/\?$/,"");if(r.length===0)return a?[i,""]:[i];let l=gE(r.join("/")),o=[];return o.push(...l.map(s=>s===""?i:[i,s].join("/"))),a&&o.push(...l),o.map(s=>e.startsWith("/")&&s===""?"/":s)}function rP(e){e.sort((t,n)=>t.score!==n.score?n.score-t.score:fP(t.routesMeta.map(r=>r.childrenIndex),n.routesMeta.map(r=>r.childrenIndex)))}var aP=/^:[\w-]+$/,iP=3,lP=2,oP=1,sP=10,uP=-2,Kx=e=>e==="*";function cP(e,t){let n=e.split("/"),r=n.length;return n.some(Kx)&&(r+=uP),t&&(r+=lP),n.filter(a=>!Kx(a)).reduce((a,i)=>a+(aP.test(i)?iP:i===""?oP:sP),r)}function fP(e,t){return e.length===t.length&&e.slice(0,-1).every((r,a)=>r===t[a])?e[e.length-1]-t[t.length-1]:0}function dP(e,t,n=!1){let{routesMeta:r}=e,a={},i="/",l=[];for(let o=0;o{if(d==="*"){let S=o[h]||"";l=i.slice(0,i.length-S.length).replace(/(.)\/+$/,"$1")}const p=o[h];return f&&!p?u[d]=void 0:u[d]=(p||"").replace(/%2F/g,"/"),u},{}),pathname:i,pathnameBase:l,pattern:e}}function xE(e,t=!1,n=!0){Fn(e==="*"||!e.endsWith("*")||e.endsWith("/*"),`Route path "${e}" will be treated as if it were "${e.replace(/\*$/,"/*")}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${e.replace(/\*$/,"/*")}".`);let r=[],a="^"+e.replace(/\/*\*?$/,"").replace(/^\/*/,"/").replace(/[\\.*+^${}|()[\]]/g,"\\$&").replace(/\/:([\w-]+)(\?)?/g,(l,o,s,u,d)=>{if(r.push({paramName:o,isOptional:s!=null}),s){let f=d.charAt(u+l.length);return f&&f!=="/"?"/([^\\/]*)":"(?:/([^\\/]*))?"}return"/([^\\/]+)"}).replace(/\/([\w-]+)\?(\/|$)/g,"(/$1)?$2");return e.endsWith("*")?(r.push({paramName:"*"}),a+=e==="*"||e==="/*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):n?a+="\\/*$":e!==""&&e!=="/"&&(a+="(?:(?=\\/|$))"),[new RegExp(a,t?void 0:"i"),r]}function hP(e){try{return e.split("/").map(t=>decodeURIComponent(t).replace(/\//g,"%2F")).join("/")}catch(t){return Fn(!1,`The URL path "${e}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${t}).`),e}}function kr(e,t){if(t==="/")return e;if(!e.toLowerCase().startsWith(t.toLowerCase()))return null;let n=t.endsWith("/")?t.length-1:t.length,r=e.charAt(n);return r&&r!=="/"?null:e.slice(n)||"/"}function pP(e,t="/"){let{pathname:n,search:r="",hash:a=""}=typeof e=="string"?no(e):e,i;return n?(n=SE(n),n.startsWith("/")?i=Xx(n.substring(1),"/"):i=Xx(n,t)):i=t,{pathname:i,search:vP(r),hash:gP(a)}}function Xx(e,t){let n=pf(t).split("/");return e.split("/").forEach(a=>{a===".."?n.length>1&&n.pop():a!=="."&&n.push(a)}),n.length>1?n.join("/"):"/"}function _p(e,t,n,r){return`Cannot include a '${e}' character in a manually specified \`to.${t}\` field [${JSON.stringify(r)}]. Please separate it out to the \`to.${n}\` field. Alternatively you may provide the full path as a string in and the router will parse it for you.`}function mP(e){return e.filter((t,n)=>n===0||t.route.path&&t.route.path.length>0)}function Wg(e){let t=mP(e);return t.map((n,r)=>r===t.length-1?n.pathname:n.pathnameBase)}function Ld(e,t,n,r=!1){let a;typeof e=="string"?a=no(e):(a={...e},We(!a.pathname||!a.pathname.includes("?"),_p("?","pathname","search",a)),We(!a.pathname||!a.pathname.includes("#"),_p("#","pathname","hash",a)),We(!a.search||!a.search.includes("#"),_p("#","search","hash",a)));let i=e===""||a.pathname==="",l=i?"/":a.pathname,o;if(l==null)o=n;else{let f=t.length-1;if(!r&&l.startsWith("..")){let h=l.split("/");for(;h[0]==="..";)h.shift(),f-=1;a.pathname=h.join("/")}o=f>=0?t[f]:"/"}let s=pP(a,o),u=l&&l!=="/"&&l.endsWith("/"),d=(i||l===".")&&n.endsWith("/");return!s.pathname.endsWith("/")&&(u||d)&&(s.pathname+="/"),s}var SE=e=>e.replace(/[\\/]{2,}/g,"/"),Yn=e=>SE(e.join("/")),pf=e=>e.replace(/\/+$/,""),yP=e=>pf(e).replace(/^\/*/,"/"),vP=e=>!e||e==="?"?"":e.startsWith("?")?e:"?"+e,gP=e=>!e||e==="#"?"":e.startsWith("#")?e:"#"+e,bP=class{constructor(e,t,n,r=!1){this.status=e,this.statusText=t||"",this.internal=r,n instanceof Error?(this.data=n.toString(),this.error=n):this.data=n}};function xP(e){return e!=null&&typeof e.status=="number"&&typeof e.statusText=="string"&&typeof e.internal=="boolean"&&"data"in e}function SP(e){let t=e.map(n=>n.route.path).filter(Boolean);return Yn(t)||"/"}var wE=typeof window<"u"&&typeof window.document<"u"&&typeof window.document.createElement<"u";function jE(e,t){let n=e;if(typeof n!="string"||!Xg.test(n))return{absoluteURL:void 0,isExternal:!1,to:n};let r=n,a=!1;if(wE)try{let i=new URL(window.location.href),l=mE.test(n)?new URL(WR(n,i.protocol)):new URL(n),o=kr(l.pathname,t);l.origin===i.origin&&o!=null?n=o+l.search+l.hash:a=!0}catch{Fn(!1,` contains an invalid URL which will probably break when clicked - please update to a valid URL path.`)}return{absoluteURL:r,isExternal:a,to:n}}Object.getOwnPropertyNames(Object.prototype).sort().join("\0");var OE=["POST","PUT","PATCH","DELETE"];new Set(OE);var wP=["GET",...OE];new Set(wP);var jP=["about:","blob:","chrome:","chrome-untrusted:","content:","data:","devtools:","file:","filesystem:","javascript:"];function OP(e){try{return jP.includes(new URL(e).protocol)}catch{return!1}}var ro=O.createContext(null);ro.displayName="DataRouter";var Bd=O.createContext(null);Bd.displayName="DataRouterState";var AE=O.createContext(!1);function AP(){return O.useContext(AE)}var _E=O.createContext({isTransitioning:!1});_E.displayName="ViewTransition";var _P=O.createContext(new Map);_P.displayName="Fetchers";var EP=O.createContext(null);EP.displayName="Await";var vn=O.createContext(null);vn.displayName="Navigation";var wu=O.createContext(null);wu.displayName="Location";var lr=O.createContext({outlet:null,matches:[],isDataRoute:!1});lr.displayName="Route";var Zg=O.createContext(null);Zg.displayName="RouteError";var EE="REACT_ROUTER_ERROR",TP="REDIRECT",NP="ROUTE_ERROR_RESPONSE";function CP(e){if(e.startsWith(`${EE}:${TP}:{`))try{let t=JSON.parse(e.slice(28));if(typeof t=="object"&&t&&typeof t.status=="number"&&typeof t.statusText=="string"&&typeof t.location=="string"&&typeof t.reloadDocument=="boolean"&&typeof t.replace=="boolean")return t}catch{}}function MP(e){if(e.startsWith(`${EE}:${NP}:{`))try{let t=JSON.parse(e.slice(40));if(typeof t=="object"&&t&&typeof t.status=="number"&&typeof t.statusText=="string")return new bP(t.status,t.statusText,t.data)}catch{}}function $P(e,{relative:t}={}){We(ao(),"useHref() may be used only in the context of a component.");let{basename:n,navigator:r}=O.useContext(vn),{hash:a,pathname:i,search:l}=ju(e,{relative:t}),o=i;return n!=="/"&&(o=i==="/"?n:Yn([n,i])),r.createHref({pathname:o,search:l,hash:a})}function ao(){return O.useContext(wu)!=null}function or(){return We(ao(),"useLocation() may be used only in the context of a component."),O.useContext(wu).location}var TE="You should call navigate() in a React.useEffect(), not when your component is first rendered.";function NE(e){O.useContext(vn).static||O.useLayoutEffect(e)}function Qg(){let{isDataRoute:e}=O.useContext(lr);return e?YP():RP()}function RP(){We(ao(),"useNavigate() may be used only in the context of a component.");let e=O.useContext(ro),{basename:t,navigator:n}=O.useContext(vn),{matches:r}=O.useContext(lr),{pathname:a}=or(),i=JSON.stringify(Wg(r)),l=O.useRef(!1);return NE(()=>{l.current=!0}),O.useCallback((s,u={})=>{if(Fn(l.current,TE),!l.current)return;if(typeof s=="number"){n.go(s);return}let d=Ld(s,JSON.parse(i),a,u.relative==="path");e==null&&t!=="/"&&(d.pathname=d.pathname==="/"?t:Yn([t,d.pathname])),(u.replace?n.replace:n.push)(d,u.state,u)},[t,n,i,a,e])}O.createContext(null);function ju(e,{relative:t}={}){let{matches:n}=O.useContext(lr),{pathname:r}=or(),a=JSON.stringify(Wg(n));return O.useMemo(()=>Ld(e,JSON.parse(a),r,t==="path"),[e,a,r,t])}function PP(e,t){return CE(e,t)}function CE(e,t,n){var v;We(ao(),"useRoutes() may be used only in the context of a component.");let{navigator:r}=O.useContext(vn),{matches:a}=O.useContext(lr),i=a[a.length-1],l=i?i.params:{},o=i?i.pathname:"/",s=i?i.pathnameBase:"/",u=i&&i.route;{let m=u&&u.path||"";$E(o,!u||m.endsWith("*")||m.endsWith("*?"),`You rendered descendant (or called \`useRoutes()\`) at "${o}" (under ) but the parent route path has no trailing "*". This means if you navigate deeper, the parent won't match anymore and therefore the child routes will never render. + +Please change the parent to .`)}let d=or(),f;if(t){let m=typeof t=="string"?no(t):t;We(s==="/"||((v=m.pathname)==null?void 0:v.startsWith(s)),`When overriding the location using \`\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${s}" but pathname "${m.pathname}" was given in the \`location\` prop.`),f=m}else f=d;let h=f.pathname||"/",p=h;if(s!=="/"){let m=s.replace(/^\//,"").split("/");p="/"+h.replace(/^\//,"").split("/").slice(m.length).join("/")}let S=n&&n.state.matches.length?n.state.matches.map(m=>Object.assign(m,{route:n.manifest[m.route.id]||m.route})):yE(e,{pathname:p});Fn(u||S!=null,`No routes matched location "${f.pathname}${f.search}${f.hash}" `),Fn(S==null||S[S.length-1].route.element!==void 0||S[S.length-1].route.Component!==void 0||S[S.length-1].route.lazy!==void 0,`Matched leaf route at location "${f.pathname}${f.search}${f.hash}" does not have an element or Component. This means it will render an with a null value by default resulting in an "empty" page.`);let g=zP(S&&S.map(m=>Object.assign({},m,{params:Object.assign({},l,m.params),pathname:Yn([s,r.encodeLocation?r.encodeLocation(m.pathname.replace(/%/g,"%25").replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:m.pathname]),pathnameBase:m.pathnameBase==="/"?s:Yn([s,r.encodeLocation?r.encodeLocation(m.pathnameBase.replace(/%/g,"%25").replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:m.pathnameBase])})),a,n);return t&&g?O.createElement(wu.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",mask:void 0,...f},navigationType:"POP"}},g):g}function DP(){let e=GP(),t=xP(e)?`${e.status} ${e.statusText}`:e instanceof Error?e.message:JSON.stringify(e),n=e instanceof Error?e.stack:null,r="rgba(200,200,200, 0.5)",a={padding:"0.5rem",backgroundColor:r},i={padding:"2px 4px",backgroundColor:r},l=null;return console.error("Error handled by React Router default ErrorBoundary:",e),l=O.createElement(O.Fragment,null,O.createElement("p",null,"💿 Hey developer 👋"),O.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",O.createElement("code",{style:i},"ErrorBoundary")," or"," ",O.createElement("code",{style:i},"errorElement")," prop on your route.")),O.createElement(O.Fragment,null,O.createElement("h2",null,"Unexpected Application Error!"),O.createElement("h3",{style:{fontStyle:"italic"}},t),n?O.createElement("pre",{style:a},n):null,l)}var kP=O.createElement(DP,null),ME=class extends O.Component{constructor(e){super(e),this.state={location:e.location,revalidation:e.revalidation,error:e.error}}static getDerivedStateFromError(e){return{error:e}}static getDerivedStateFromProps(e,t){return t.location!==e.location||t.revalidation!=="idle"&&e.revalidation==="idle"?{error:e.error,location:e.location,revalidation:e.revalidation}:{error:e.error!==void 0?e.error:t.error,location:t.location,revalidation:e.revalidation||t.revalidation}}componentDidCatch(e,t){this.props.onError?this.props.onError(e,t):console.error("React Router caught the following error during render",e)}render(){let e=this.state.error;if(this.context&&typeof e=="object"&&e&&"digest"in e&&typeof e.digest=="string"){const n=MP(e.digest);n&&(e=n)}let t=e!==void 0?O.createElement(lr.Provider,{value:this.props.routeContext},O.createElement(Zg.Provider,{value:e,children:this.props.component})):this.props.children;return this.context?O.createElement(LP,{error:e},t):t}};ME.contextType=AE;var Ep=new WeakMap;function LP({children:e,error:t}){let{basename:n}=O.useContext(vn);if(typeof t=="object"&&t&&"digest"in t&&typeof t.digest=="string"){let r=CP(t.digest);if(r){let a=Ep.get(t);if(a)throw a;let i=jE(r.location,n),l=i.absoluteURL||i.to;if(OP(l))throw new Error("Invalid redirect location");if(wE&&!Ep.get(t))if(i.isExternal||r.reloadDocument)window.location.href=l;else{const o=Promise.resolve().then(()=>window.__reactRouterDataRouter.navigate(i.to,{replace:r.replace}));throw Ep.set(t,o),o}return O.createElement("meta",{httpEquiv:"refresh",content:`0;url=${l}`})}}return e}function BP({routeContext:e,match:t,children:n}){let r=O.useContext(ro);return r&&r.static&&r.staticContext&&(t.route.errorElement||t.route.ErrorBoundary)&&(r.staticContext._deepestRenderedBoundaryId=t.route.id),O.createElement(lr.Provider,{value:e},n)}function zP(e,t=[],n){let r=n==null?void 0:n.state;if(e==null){if(!r)return null;if(r.errors)e=r.matches;else if(t.length===0&&!r.initialized&&r.matches.length>0)e=r.matches;else return null}let a=e,i=r==null?void 0:r.errors;if(i!=null){let d=a.findIndex(f=>f.route.id&&(i==null?void 0:i[f.route.id])!==void 0);We(d>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(i).join(",")}`),a=a.slice(0,Math.min(a.length,d+1))}let l=!1,o=-1;if(n&&r){l=r.renderFallback;for(let d=0;d=0?a=a.slice(0,o+1):a=[a[0]];break}}}}let s=n==null?void 0:n.onError,u=r&&s?(d,f)=>{var h,p;s(d,{location:r.location,params:((p=(h=r.matches)==null?void 0:h[0])==null?void 0:p.params)??{},pattern:SP(r.matches),errorInfo:f})}:void 0;return a.reduceRight((d,f,h)=>{let p,S=!1,g=null,v=null;r&&(p=i&&f.route.id?i[f.route.id]:void 0,g=f.route.errorElement||kP,l&&(o<0&&h===0?($E("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),S=!0,v=null):o===h&&(S=!0,v=f.route.hydrateFallbackElement||null)));let m=t.concat(a.slice(0,h+1)),y=()=>{let b;return p?b=g:S?b=v:f.route.Component?b=O.createElement(f.route.Component,null):f.route.element?b=f.route.element:b=d,O.createElement(BP,{match:f,routeContext:{outlet:d,matches:m,isDataRoute:r!=null},children:b})};return r&&(f.route.ErrorBoundary||f.route.errorElement||h===0)?O.createElement(ME,{location:r.location,revalidation:r.revalidation,component:g,error:p,children:y(),routeContext:{outlet:null,matches:m,isDataRoute:!0},onError:u}):y()},null)}function Jg(e){return`${e} must be used within a data router. See https://reactrouter.com/en/main/routers/picking-a-router.`}function IP(e){let t=O.useContext(ro);return We(t,Jg(e)),t}function UP(e){let t=O.useContext(Bd);return We(t,Jg(e)),t}function HP(e){let t=O.useContext(lr);return We(t,Jg(e)),t}function eb(e){let t=HP(e),n=t.matches[t.matches.length-1];return We(n.route.id,`${e} can only be used on routes that contain a unique "id"`),n.route.id}function qP(){return eb("useRouteId")}function GP(){var r;let e=O.useContext(Zg),t=UP("useRouteError"),n=eb("useRouteError");return e!==void 0?e:(r=t.errors)==null?void 0:r[n]}function YP(){let{router:e}=IP("useNavigate"),t=eb("useNavigate"),n=O.useRef(!1);return NE(()=>{n.current=!0}),O.useCallback(async(a,i={})=>{Fn(n.current,TE),n.current&&(typeof a=="number"?await e.navigate(a):await e.navigate(a,{fromRouteId:t,...i}))},[e,t])}var Wx={};function $E(e,t,n){!t&&!Wx[e]&&(Wx[e]=!0,Fn(!1,n))}O.memo(FP);function FP({routes:e,manifest:t,future:n,state:r,isStatic:a,onError:i}){return CE(e,void 0,{manifest:t,state:r,isStatic:a,onError:i})}function _s({to:e,replace:t,state:n,relative:r}){We(ao()," may be used only in the context of a component.");let{static:a}=O.useContext(vn);Fn(!a," must not be used on the initial render in a . This is a no-op, but you should modify your code so the is only ever rendered in response to some user interaction or state change.");let{matches:i}=O.useContext(lr),{pathname:l}=or(),o=Qg(),s=Ld(e,Wg(i),l,r==="path"),u=JSON.stringify(s);return O.useEffect(()=>{o(JSON.parse(u),{replace:t,state:n,relative:r})},[o,u,r,t,n]),null}function Qe(e){We(!1,"A is only ever to be used as the child of element, never rendered directly. Please wrap your in a .")}function VP({basename:e="/",children:t=null,location:n,navigationType:r="POP",navigator:a,static:i=!1,useTransitions:l}){We(!ao(),"You cannot render a inside another . You should never have more than one in your app.");let o=e.replace(/^\/*/,"/"),s=O.useMemo(()=>({basename:o,navigator:a,static:i,useTransitions:l,future:{}}),[o,a,i,l]);typeof n=="string"&&(n=no(n));let{pathname:u="/",search:d="",hash:f="",state:h=null,key:p="default",mask:S}=n,g=O.useMemo(()=>{let v=kr(u,o);return v==null?null:{location:{pathname:v,search:d,hash:f,state:h,key:p,mask:S},navigationType:r}},[o,u,d,f,h,p,r,S]);return Fn(g!=null,` is not able to match the URL "${u}${d}${f}" because it does not start with the basename, so the won't render anything.`),g==null?null:O.createElement(vn.Provider,{value:s},O.createElement(wu.Provider,{children:t,value:g}))}function KP({children:e,location:t}){return PP(uy(e),t)}function uy(e,t=[]){let n=[];return O.Children.forEach(e,(r,a)=>{if(!O.isValidElement(r))return;let i=[...t,a];if(r.type===O.Fragment){n.push.apply(n,uy(r.props.children,i));return}We(r.type===Qe,`[${typeof r.type=="string"?r.type:r.type.name}] is not a component. All component children of must be a or `),We(!r.props.index||!r.props.children,"An index route cannot have child routes.");let l={id:r.props.id||i.join("-"),caseSensitive:r.props.caseSensitive,element:r.props.element,Component:r.props.Component,index:r.props.index,path:r.props.path,middleware:r.props.middleware,loader:r.props.loader,action:r.props.action,hydrateFallbackElement:r.props.hydrateFallbackElement,HydrateFallback:r.props.HydrateFallback,errorElement:r.props.errorElement,ErrorBoundary:r.props.ErrorBoundary,hasErrorBoundary:r.props.hasErrorBoundary===!0||r.props.ErrorBoundary!=null||r.props.errorElement!=null,shouldRevalidate:r.props.shouldRevalidate,handle:r.props.handle,lazy:r.props.lazy};r.props.children&&(l.children=uy(r.props.children,i)),n.push(l)}),n}var Mc="get",$c="application/x-www-form-urlencoded";function zd(e){return typeof HTMLElement<"u"&&e instanceof HTMLElement}function XP(e){return zd(e)&&e.tagName.toLowerCase()==="button"}function WP(e){return zd(e)&&e.tagName.toLowerCase()==="form"}function ZP(e){return zd(e)&&e.tagName.toLowerCase()==="input"}function QP(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}function JP(e,t){return e.button===0&&(!t||t==="_self")&&!QP(e)}var Qu=null;function eD(){if(Qu===null)try{new FormData(document.createElement("form"),0),Qu=!1}catch{Qu=!0}return Qu}var tD=new Set(["application/x-www-form-urlencoded","multipart/form-data","text/plain"]);function Tp(e){return e!=null&&!tD.has(e)?(Fn(!1,`"${e}" is not a valid \`encType\` for \`

\`/\`\` and will default to "${$c}"`),null):e}function nD(e,t){let n,r,a,i,l;if(WP(e)){let o=e.getAttribute("action");r=o?kr(o,t):null,n=e.getAttribute("method")||Mc,a=Tp(e.getAttribute("enctype"))||$c,i=new FormData(e)}else if(XP(e)||ZP(e)&&(e.type==="submit"||e.type==="image")){let o=e.form;if(o==null)throw new Error('Cannot submit a +
+ 마이페이지 + +
)} @@ -142,6 +146,8 @@ export default function App() { {/* AI 플랫폼 설정(provider/모델·연결테스트·피드백 학습) — 관리자 전용. 백엔드 /api/hrm/admin/** RBAC 강제 */} } /> } /> + {/* 마이페이지 — OTP 2차 인증 등록/재설정/해제 + 비밀번호 변경 */} + } /> {/* UIWS system 이식 — 시스템관리(권한). 관리자 전용(SUPERADMIN/MANAGER/ADMIN), 그 외 대시보드로 */} } /> {/* 통합 메신저 앱 다운로드 QR (ITSM 중앙 APK 저장소 공개 엔드포인트 재사용·읽기전용) */} diff --git a/frontend/src/api/client.ts b/frontend/src/api/client.ts index ef9c390..6690016 100644 --- a/frontend/src/api/client.ts +++ b/frontend/src/api/client.ts @@ -20,3 +20,19 @@ api.interceptors.response.use( ) export default api + +// ── Auth / Me ───────────────────────────────────────────────────────── +// client baseURL='/api/hrm' → 경로는 상대(/auth/...·/admin/...). +export const getMe = () => api.get('/auth/me') + +// ── 2FA / OTP / 계정 보안 (마이페이지, access 토큰 필요) ──────────────── +// 보안 불변: setup 응답(secret/qrImage)은 화면 표시용만 — 로그/저장 금지. +export const otpSetup = () => api.post('/auth/otp/setup') +export const otpConfirm = (code: string) => api.post('/auth/otp/confirm', { code }) +export const otpDisable = () => api.post('/auth/otp/disable') +export const changePassword = (currentPassword: string, newPassword: string) => + api.post('/auth/change-password', { currentPassword, newPassword }) + +// ── Admin: OTP 초기화 (SUPERADMIN — /api/hrm/admin/users/** 게이트) ───── +// 대상 사용자 OTP 해제(다음 로그인 시 OTP_SETUP 재등록). 시크릿 미조회. +export const adminOtpReset = (id: number) => api.post(`/admin/users/${id}/otp-reset`) diff --git a/frontend/src/api/uiws.ts b/frontend/src/api/uiws.ts index 1fee539..0668850 100644 --- a/frontend/src/api/uiws.ts +++ b/frontend/src/api/uiws.ts @@ -28,8 +28,12 @@ api.interceptors.response.use( ) // ── 2FA +// verify2fa: 이메일 인증코드 경로(하위호환). verifyMethod=EMAIL 일 때 사용. export const verify2fa = (verifyToken: string, code: string) => api.post('/api/hrm/auth/verify', { verifyToken, code }) +// verifyOtp: Authenticator(TOTP) 경로. verifyMethod=OTP | OTP_SETUP 일 때 사용. +export const verifyOtp = (verifyToken: string, code: string) => + api.post('/api/hrm/auth/verify-otp', { verifyToken, code }) // ── 로그인 보조 3종 (UIWS auth 이식, /api/auth permitAll) export const signup = (body: { username: string; password: string; displayName: string; email: string }) => diff --git a/frontend/src/pages/AdminPage.tsx b/frontend/src/pages/AdminPage.tsx index 9bbebed..93168cf 100644 --- a/frontend/src/pages/AdminPage.tsx +++ b/frontend/src/pages/AdminPage.tsx @@ -1,5 +1,5 @@ import React, { useEffect, useState } from 'react' -import api from '../api/client' +import api, { adminOtpReset } from '../api/client' export default function AdminPage() { const [users, setUsers] = useState([]) @@ -28,6 +28,21 @@ export default function AdminPage() { loadUsers() } + // 관리자 OTP 초기화(SUPERADMIN). 대상 사용자는 다음 로그인 시 OTP_SETUP(QR 재등록)을 탄다. + const resetOtp = async (id: number, username: string) => { + if (!window.confirm( + `'${username}' 사용자의 OTP를 초기화하시겠습니까?\n초기화하면 다음 로그인 시 재등록해야 합니다.` + )) return + try { + await adminOtpReset(id) + alert('OTP가 초기화되었습니다.') + } catch (e: any) { + alert(e?.response?.status === 403 + ? '권한이 없습니다 (SUPERADMIN 전용).' + : (e?.response?.data?.message || 'OTP 초기화에 실패했습니다.')) + } + } + const saveSetting = async (key: string, value: string) => { await api.put(`/admin/settings/${key}`, null, { params: { value } }) loadSettings() @@ -79,10 +94,16 @@ export default function AdminPage() { {u.last_login_at?.slice(0,16) || '-'} - +
+ + +
))} diff --git a/frontend/src/pages/LoginPage.tsx b/frontend/src/pages/LoginPage.tsx index 49ae2ab..80f9d94 100644 --- a/frontend/src/pages/LoginPage.tsx +++ b/frontend/src/pages/LoginPage.tsx @@ -1,9 +1,10 @@ import React, { useState } from 'react' import { useNavigate } from 'react-router-dom' import api from '../api/client' -import { verify2fa, signup, findId, resetPasswordHelper } from '../api/uiws' +import { verify2fa, verifyOtp, signup, findId, resetPasswordHelper } from '../api/uiws' type Helper = null | 'signup' | 'findId' | 'resetPw' +type VerifyMethod = 'OTP' | 'OTP_SETUP' | 'EMAIL' export default function LoginPage() { const nav = useNavigate() @@ -11,9 +12,17 @@ export default function LoginPage() { const [error, setError] = useState('') const [loading, setLoading] = useState(false) - // UIWS 2FA — 1차 통과 후 코드 입력 단계 - const [twofa, setTwofa] = useState<{ verifyToken: string; maskedEmail: string } | null>(null) + // UIWS 2FA — 1차 통과 후 코드 입력 단계. + // · EMAIL : 이메일 인증코드(maskedEmail) → /verify (하위호환) + // · OTP : Authenticator 6자리 → /verify-otp + // · OTP_SETUP : 최초 로그인 — QR(qrImage)+수동키(secret) 등록 후 6자리 → /verify-otp + const [twofa, setTwofa] = useState<{ + verifyToken: string; verifyMethod: VerifyMethod + maskedEmail: string; qrImage: string; secret: string + } | null>(null) const [code, setCode] = useState('') + const isOtp = twofa?.verifyMethod === 'OTP' || twofa?.verifyMethod === 'OTP_SETUP' + const isSetup = twofa?.verifyMethod === 'OTP_SETUP' // 로그인 보조 3종 모달 const [helper, setHelper] = useState(null) @@ -31,8 +40,15 @@ export default function LoginPage() { const { data } = await api.post('/auth/login', form) const payload = data.data || {} if (payload.twofa === 'true') { - // 2FA 활성 — 이메일 인증코드 입력 단계로 전환(access 토큰 미발급) - setTwofa({ verifyToken: payload.verifyToken, maskedEmail: payload.maskedEmail || '' }) + // 2FA 활성 — verifyMethod 로 분기(access 토큰 미발급). 시크릿/QR은 화면 표시용만. + setTwofa({ + verifyToken: payload.verifyToken, + verifyMethod: (payload.verifyMethod as VerifyMethod) || 'EMAIL', + maskedEmail: payload.maskedEmail || '', + qrImage: payload.qrImage || '', + secret: payload.secret || '', + }) + setCode('') return } localStorage.setItem('hrm_token', payload.token) @@ -49,7 +65,10 @@ export default function LoginPage() { if (!twofa) return setLoading(true); setError('') try { - const { data } = await verify2fa(twofa.verifyToken, code) + // OTP·OTP_SETUP 은 /verify-otp, 이메일은 /verify(하위호환) + const { data } = isOtp + ? await verifyOtp(twofa.verifyToken, code) + : await verify2fa(twofa.verifyToken, code) localStorage.setItem('hrm_token', data.data.token) await afterAuthenticated() } catch { @@ -102,18 +121,42 @@ export default function LoginPage() {

2차 인증

-

- {twofa.maskedEmail ? `${twofa.maskedEmail} 으로 발송된 인증 코드를 입력하세요.` : '이메일로 발송된 인증 코드를 입력하세요.'} -

+ {isSetup ? ( +

+ 최초 로그인입니다. 아래 QR을 Authenticator 앱(Google·Microsoft)으로 스캔해 + 등록한 뒤 6자리 코드를 입력하세요. +

+ ) : isOtp ? ( +

Authenticator 앱에 표시된 6자리 코드를 입력하세요.

+ ) : ( +

+ {twofa.maskedEmail ? `${twofa.maskedEmail} 으로 발송된 인증 코드를 입력하세요.` : '이메일로 발송된 인증 코드를 입력하세요.'} +

+ )}
+ {isSetup && twofa.qrImage && ( +
+ OTP QR +
+ )} + {isSetup && twofa.secret && ( +
+

QR 스캔이 안 되면 수동 입력 키

+ + {twofa.secret} + +
+ )} setCode(e.target.value)} + autoComplete="one-time-code" + onChange={e => setCode(e.target.value.replace(/\D/g, '').slice(0, 6))} className="w-full border border-slate-200 rounded-lg px-4 py-2.5 text-center tracking-widest text-lg focus:outline-none focus:ring-2 focus:ring-blue-500" placeholder="6자리 코드" maxLength={6} required /> {error &&

{error}

} - diff --git a/frontend/src/pages/MyPage.tsx b/frontend/src/pages/MyPage.tsx new file mode 100644 index 0000000..c0128e0 --- /dev/null +++ b/frontend/src/pages/MyPage.tsx @@ -0,0 +1,261 @@ +import { useEffect, useState } from 'react' +import { + ShieldCheck, QrCode, Lock, Eye, EyeOff, CheckCircle2, AlertTriangle, +} from 'lucide-react' +import { + getMe, otpSetup, otpConfirm, otpDisable, changePassword, +} from '../api/client' + +/** + * 마이페이지(HRM 라이트 테마) — OTP 2차 인증(등록/재설정/해제) + 비밀번호 변경. + * 보안: setup 응답의 secret/qrImage 는 화면 표시용만 — 로그/저장 절대 금지. + * 새 비밀번호는 콘솔/응답에 출력 금지, 검증 4대(필수·8자·일치·현재와 다름). + * me() 는 otpEnabled 를 내려주지 않으므로 상태는 중립(null) 표시. + */ +const MIN_PW = 8 + +type OtpPhase = 'idle' | 'setup' | 'done' + +function errMsg(e: any, fallback: string): string { + if (e?.response?.status === 403) return '권한이 없습니다.' + return e?.response?.data?.message || fallback +} + +export default function MyPage() { + const [username, setUsername] = useState('') + const [otpEnabled, setOtpEnabled] = useState(null) + + // ── OTP 상태머신 ────────────────────────────────────────────────────── + const [phase, setPhase] = useState('idle') + const [qrImage, setQrImage] = useState('') + const [secret, setSecret] = useState('') + const [otpCode, setOtpCode] = useState('') + const [otpBusy, setOtpBusy] = useState(false) + const [otpMsg, setOtpMsg] = useState<{ ok: boolean; text: string } | null>(null) + + // ── 비밀번호 변경 ───────────────────────────────────────────────────── + const [curPw, setCurPw] = useState('') + const [newPw, setNewPw] = useState('') + const [newPw2, setNewPw2] = useState('') + const [showPw, setShowPw] = useState(false) + const [pwBusy, setPwBusy] = useState(false) + const [pwMsg, setPwMsg] = useState<{ ok: boolean; text: string } | null>(null) + + const loadMe = () => + getMe().then(r => { + const me = r.data?.data || {} + let fallback = '' + try { fallback = JSON.parse(localStorage.getItem('hrm_user') || '{}').username || '' } catch { /* noop */ } + setUsername(me.username || fallback) + if (typeof me.otpEnabled === 'boolean') setOtpEnabled(me.otpEnabled) + else if (typeof me.verifyMethod === 'string') setOtpEnabled(me.verifyMethod === 'OTP') + }).catch(() => {}) + + useEffect(() => { loadMe() }, []) + + const startSetup = async () => { + setOtpMsg(null); setOtpBusy(true) + try { + const res = await otpSetup() + const d = res.data?.data || {} + setQrImage(d.qrImage || '') + setSecret(d.secret || '') + setOtpCode('') + setPhase('setup') + } catch (e) { + setOtpMsg({ ok: false, text: errMsg(e, 'OTP 등록을 시작하지 못했습니다.') }) + } finally { setOtpBusy(false) } + } + + const confirmOtp = async () => { + setOtpMsg(null); setOtpBusy(true) + try { + await otpConfirm(otpCode) + setSecret(''); setQrImage(''); setOtpCode('') // 시크릿 잔존 방지 + setPhase('done'); setOtpEnabled(true) + setOtpMsg({ ok: true, text: '2차 인증이 활성화되었습니다.' }) + } catch (e) { + setOtpMsg({ ok: false, text: errMsg(e, '코드가 일치하지 않거나 만료되었습니다.') }) + } finally { setOtpBusy(false) } + } + + const cancelSetup = () => { + setPhase('idle'); setSecret(''); setQrImage(''); setOtpCode(''); setOtpMsg(null) + } + + const disableOtp = async () => { + if (!window.confirm('Authenticator 2차 인증을 해제하시겠습니까?')) return + setOtpMsg(null); setOtpBusy(true) + try { + await otpDisable() + setPhase('idle'); setSecret(''); setQrImage(''); setOtpEnabled(false) + setOtpMsg({ ok: true, text: '2차 인증이 해제되었습니다.' }) + } catch (e) { + setOtpMsg({ ok: false, text: errMsg(e, 'OTP 해제에 실패했습니다.') }) + } finally { setOtpBusy(false) } + } + + const submitPw = async () => { + setPwMsg(null) + if (!curPw) { setPwMsg({ ok: false, text: '현재 비밀번호를 입력하세요.' }); return } + if (newPw.length < MIN_PW) { setPwMsg({ ok: false, text: `새 비밀번호는 최소 ${MIN_PW}자 이상이어야 합니다.` }); return } + if (newPw !== newPw2) { setPwMsg({ ok: false, text: '새 비밀번호가 일치하지 않습니다.' }); return } + if (newPw === curPw) { setPwMsg({ ok: false, text: '새 비밀번호는 현재 비밀번호와 달라야 합니다.' }); return } + setPwBusy(true) + try { + await changePassword(curPw, newPw) + setCurPw(''); setNewPw(''); setNewPw2('') + setPwMsg({ ok: true, text: '비밀번호가 변경되었습니다.' }) + } catch (e) { + setPwMsg({ ok: false, text: errMsg(e, '비밀번호 변경에 실패했습니다.') }) + } finally { setPwBusy(false) } + } + + const inputCls = + 'w-full border border-slate-200 rounded-lg px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-blue-500' + const codeCls = inputCls + ' tracking-[0.4em] text-center text-lg' + + const StatusMsg = ({ m }: { m: { ok: boolean; text: string } | null }) => + m ? ( +
+ {m.ok ? : } + {m.text} +
+ ) : null + + return ( +
+
+

마이페이지

+

+ {username && <>계정: {username}} +

+
+ + {/* ── OTP 2차 인증 ──────────────────────────────────────────────── */} +
+
+ +

2차 인증 — Authenticator(OTP)

+
+

+ Google·Microsoft Authenticator 앱으로 6자리 코드를 사용하는 2차 인증을 설정합니다. + {otpEnabled !== null && ( + + 현재 상태:{' '} + + {otpEnabled ? 'OTP 사용 중' : '미설정'} + + + )} +

+ + + + {phase === 'idle' && ( +
+ + {otpEnabled && ( + + )} +
+ )} + + {phase === 'setup' && ( +
+
    +
  1. Authenticator 앱에서 아래 QR을 스캔하세요.
    2. +
  2. 스캔이 안 되면 수동 키를 직접 입력하세요.
    3. +
  3. 앱에 표시된 6자리 코드를 입력해 확인하세요.
    4. +
+ {qrImage && ( +
+ OTP QR +
+ )} + {secret && ( +
+
수동 입력 키
+ + {secret} + +
+ )} + + setOtpCode(e.target.value.replace(/\D/g, '').slice(0, 6))} + inputMode="numeric" autoComplete="one-time-code" maxLength={6} placeholder="000000" + className={codeCls + ' mb-3'} /> +
+ + +
+
+ )} + + {phase === 'done' && ( +
+ +
+ )} +
+ + {/* ── 비밀번호 변경 ─────────────────────────────────────────────── */} +
+
+ +

비밀번호 변경

+
+ + + +
+
+ + setCurPw(e.target.value)} className={inputCls} /> +
+
+ + setNewPw(e.target.value)} className={inputCls} /> +
+
+ + setNewPw2(e.target.value)} className={inputCls} /> +
+ + +
+
+
+ ) +}