From 733d843522702b00ea7517b751e2733f6d92d61e Mon Sep 17 00:00:00 2001
From: dshukertjr <18113850+dshukertjr@users.noreply.github.com>
Date: Thu, 4 May 2023 23:44:26 +0900
Subject: [PATCH 1/3] add flutter mfa article
---
...04-flutter-multi-factor-authentication.mdx | 933 ++++++++++++++++++
.../images/blog/flutter-mfa/directory.png | Bin 0 -> 40553 bytes
.../blog/flutter-mfa/flutter-mfa-thumb-og.png | Bin 0 -> 519345 bytes
.../blog/flutter-mfa/flutter-mfa-thumb.jpg | Bin 0 -> 58689 bytes
.../public/images/blog/flutter-mfa/home.png | Bin 0 -> 102673 bytes
.../public/images/blog/flutter-mfa/login.png | Bin 0 -> 106204 bytes
.../public/images/blog/flutter-mfa/mfa.png | Bin 0 -> 122558 bytes
.../images/blog/flutter-mfa/register.png | Bin 0 -> 143243 bytes
8 files changed, 933 insertions(+)
create mode 100644 apps/www/_blog/2023-05-04-flutter-multi-factor-authentication.mdx
create mode 100644 apps/www/public/images/blog/flutter-mfa/directory.png
create mode 100644 apps/www/public/images/blog/flutter-mfa/flutter-mfa-thumb-og.png
create mode 100644 apps/www/public/images/blog/flutter-mfa/flutter-mfa-thumb.jpg
create mode 100644 apps/www/public/images/blog/flutter-mfa/home.png
create mode 100644 apps/www/public/images/blog/flutter-mfa/login.png
create mode 100644 apps/www/public/images/blog/flutter-mfa/mfa.png
create mode 100644 apps/www/public/images/blog/flutter-mfa/register.png
diff --git a/apps/www/_blog/2023-05-04-flutter-multi-factor-authentication.mdx b/apps/www/_blog/2023-05-04-flutter-multi-factor-authentication.mdx
new file mode 100644
index 00000000000..24b5dd2ff45
--- /dev/null
+++ b/apps/www/_blog/2023-05-04-flutter-multi-factor-authentication.mdx
@@ -0,0 +1,933 @@
+---
+title: 'Securing your Flutter apps with Multi-Factor Authentication'
+description: Build a Flutter app where the user is required to authenticate using Multi-Factor Authentication.
+author: tyler_shukert
+image: flutter-mfa/flutter-mfa-thumb-og.png
+thumb: flutter-mfa/flutter-mfa-thumb.jpg
+tags:
+ - flutter
+date: '2023-05-04'
+toc_depth: 2
+---
+
+MFA or multi-factor authentication is an essential part of security for any kind of app.
+
+We will take a look at an example app where a user has to sign in via MFA in order to view the contents of the app to demonstrate how easy it is to get started with MFA on Flutter.
+
+## What is Multi-Factor Authentication?
+
+Multi-factor authentication (MFA), sometimes called two-factor authentication (2FA), is an additional security layer on top of traditional login methods such as email and password login.
+
+There are several forms of MFA, such as with an SMS or through using an authenticator app such as Google Authenticator. It is considered a best practice to use MFA whenever possible because it protects users against weak passwords or compromised social accounts.
+
+## Why Multi-Factor Authentication matters for Flutter apps
+
+In the context of Flutter apps, MFA is important because it helps protect sensitive user data and prevent unauthorized access to user accounts. By requiring users to provide an additional factor, MFA adds an extra layer of security that makes it harder for attackers to gain access to user accounts.
+
+Given how Flutter is widely used MFA might be a requirement rather than a nice-to-have. Implementing MFA in a Flutter app can improve overall security and give users peace of mind knowing that their data is better protected.
+
+## Building the App
+
+
+
+We are building a simple app where users register with an email and password. After completing the registration process, the users will be asked to set up MFA using an authenticator app. Once verifying the identity via the authenticator app, the user can go to the home page where they can view the main content.
+
+Login works similarly, where after an email and password login, they are asked to enter the verification code to complete the login process.
+
+The app will have the following directory structure, where `auth` contains any basic auth-related pages, `mfa` contains enrolling and verifying the MFA, and we have some additional pages for us to see that MFA is working correctly.
+
+You can find the complete code created in this article [here](https://github.com/supabase/supabase/tree/master/examples/auth/flutter-mfa).
+
+
+
+### Step 1: Setup the scenes
+
+Let’s start with the `flutter create` command.
+
+```bash
+flutter create mfa_app
+```
+
+Also, if you do not have a Supabase project yet, create one by heading to [database.new](https://dstabase.new). Within a few minutes, you will have a new Supabase project.
+
+### Step 2: Add the dependencies
+
+Install the [supabase_flutter](https://pub.dev/packages/supabase_flutter) package by running the following command in your terminal.
+
+```bash
+dart pub add supabase_flutter
+```
+
+Then update your `lib/main.dart` file to initialize Supabase in the main function. You should be able to find your Supabase URL and AnonKey from the `settings -> api` section of your dashboard. We will also extract the `SupabaseClient` for easy access to our Supabase instance.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:supabase_flutter/supabase_flutter.dart';
+
+void main() async {
+ await Supabase.initialize(
+ url: 'SUPABASE_URL',
+ anonKey: 'SUPABASE_ANONKEY',
+ );
+ runApp(const MyApp());
+}
+
+/// Extract SupabaseClient instance in a handy variable
+final supabase = Supabase.instance.client;
+```
+
+Also, add [go_router](https://pub.dev/packages/go_router) to handle our routing and redirects.
+
+```dart
+dart pub add go_router
+```
+
+We will set up the routes towards the end when we have created all the pages we need. With this, we are ready to jump into creating the app.
+
+Also, if we want to support iOS and Android, we need to set up deep links so that a session can be obtained upon clicking on the confirmation link sent to the user’s email address.
+
+We will configure it so that we can open the app by redirecting to `mfa-app://callback` .
+
+For iOS, open `ios/Runner/info.plist` file and add the following deep link configuration.
+
+```xml
+
+
+
+
+
+
+ FlutterDeepLinkingEnabled
+
+ CFBundleURLTypes
+
+
+ CFBundleTypeRole
+ Editor
+ CFBundleURLSchemes
+
+ mfa-app
+
+
+
+
+
+
+
+
+```
+
+For Android, open `android/app/src/main/AndroidManifest.xml` file and add the following deep link configuration.
+
+```xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+```
+
+After, we will add the deep link as one of the redirect URLs in our Supabase dashboard.
+
+Go to `Authentication > URL Configuration` and add `mfa-app://callback/*` as a redirect URL. Make sure you don’t add any extra slashes or anything because if you do, deep linking will not work properly.
+
+
+
+Lastly, we will add the `flutter_svg` package. This package will later be used to display a QR code to scan with their authentication app.
+
+```bash
+dart pub add flutter_svg
+```
+
+That is all the dependencies that we need. Let’s dive into coding!
+
+### Step 3: Create the signup flow
+
+
+
+Let’s first create a signup flow. Again, the user will register with the app using email and password, and after confirming their email address, they will enroll in MFA using an authenticator app.
+
+The register page contains a form with an email and password field for the user to create a new account. We are just calling the [.signUp()](https://supabase.com/docs/reference/dart/auth-signup) method with it.
+As you can see in the code below at `emailRedirectTo` option of the `.signUp()`method, upon clicking on the confirmation link sent to the user, they will be taken to MFA enrollment page, which we will implement later.
+
+Create a `lib/pages/auth/signup_page.dart` file and add the following. There will be some errors, but that is because we haven’t created some of the files yet. The errors will go away as we move on, so ignore them for now.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/main.dart';
+import 'package:mfa_app/pages/auth/login_page.dart';
+import 'package:mfa_app/pages/mfa/enroll_page.dart';
+import 'package:supabase_flutter/supabase_flutter.dart';
+
+class RegisterPage extends StatefulWidget {
+ static const route = '/auth/register';
+
+ const RegisterPage({super.key});
+
+ @override
+ State createState() => _RegisterPageState();
+}
+
+class _RegisterPageState extends State {
+ final _emailController = TextEditingController();
+ final _passwordController = TextEditingController();
+
+ bool _isLoading = false;
+
+ @override
+ void dispose() {
+ _emailController.dispose();
+ _passwordController.dispose();
+ super.dispose();
+ }
+
+ @override
+ Widget build(BuildContext context) {
+ return Scaffold(
+ appBar: AppBar(title: const Text('Register')),
+ body: ListView(
+ padding: const EdgeInsets.symmetric(horizontal: 20, vertical: 24),
+ children: [
+ TextFormField(
+ controller: _emailController,
+ decoration: const InputDecoration(
+ label: Text('Email'),
+ ),
+ ),
+ const SizedBox(height: 16),
+ TextFormField(
+ controller: _passwordController,
+ decoration: const InputDecoration(
+ label: Text('Password'),
+ ),
+ obscureText: true,
+ ),
+ const SizedBox(height: 16),
+ ElevatedButton(
+ onPressed: () async {
+ try {
+ setState(() {
+ _isLoading = true;
+ });
+ final email = _emailController.text.trim();
+ final password = _passwordController.text.trim();
+ await supabase.auth.signUp(
+ email: email,
+ password: password,
+ emailRedirectTo:
+ 'mfa-app://callback${MFAEnrollPage.route}', // redirect the user to setup MFA page after email confirmation
+ );
+ if (mounted) {
+ ScaffoldMessenger.of(context).showSnackBar(
+ const SnackBar(content: Text('Check your inbox.')));
+ }
+ } on AuthException catch (error) {
+ ScaffoldMessenger.of(context)
+ .showSnackBar(SnackBar(content: Text(error.message)));
+ } catch (error) {
+ ScaffoldMessenger.of(context).showSnackBar(
+ const SnackBar(content: Text('Unexpected error occured')));
+ }
+ if (mounted) {
+ setState(() {
+ _isLoading = false;
+ });
+ }
+ },
+ child: _isLoading
+ ? const SizedBox(
+ height: 24,
+ width: 24,
+ child: Center(
+ child: CircularProgressIndicator(color: Colors.white)),
+ )
+ : const Text('Register'),
+ ),
+ const SizedBox(height: 16),
+ TextButton(
+ onPressed: () => context.push(LoginPage.route),
+ child: const Text('I already have an account'),
+ )
+ ],
+ ),
+ );
+ }
+}
+```
+
+We can then create the enrollment page for MFA. This page is taking care of the following.
+
+- Retrieve the enrollment secret from the server via `supabase.auth.mfa.enroll()` method.
+- Displaying the secret and its QR code representation and prompts the user to add the app to their authenticator app
+- Verifies the user with a TOTP
+
+The QR code and the secret will be displayed automatically when the page loads. When the user enters the correct 6-digit TOTP, they will be automatically redirected to the home page.
+
+Create `lib/pages/mfa/enroll_page.dart` file and add the following.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:flutter/services.dart';
+import 'package:flutter_svg/flutter_svg.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/main.dart';
+import 'package:mfa_app/pages/auth/register_page.dart';
+import 'package:mfa_app/pages/home_page.dart';
+import 'package:supabase_flutter/supabase_flutter.dart';
+
+class MFAEnrollPage extends StatefulWidget {
+ static const route = '/mfa/enroll';
+ const MFAEnrollPage({super.key});
+
+ @override
+ State createState() => _MFAEnrollPageState();
+}
+
+class _MFAEnrollPageState extends State {
+ final _enrollFuture = supabase.auth.mfa.enroll();
+
+ @override
+ Widget build(BuildContext context) {
+ return Scaffold(
+ appBar: AppBar(
+ title: const Text('Setup MFA'),
+ actions: [
+ TextButton(
+ onPressed: () {
+ supabase.auth.signOut();
+ context.go(RegisterPage.route);
+ },
+ child: Text(
+ 'Logout',
+ style: TextStyle(color: Theme.of(context).colorScheme.onPrimary),
+ ),
+ ),
+ ],
+ ),
+ body: FutureBuilder(
+ future: _enrollFuture,
+ builder: (context, snapshot) {
+ if (snapshot.hasError) {
+ return Center(child: Text(snapshot.error.toString()));
+ }
+ if (!snapshot.hasData) {
+ return const Center(child: CircularProgressIndicator());
+ }
+
+ final response = snapshot.data!;
+ final qrCodeUrl = response.totp.qrCode;
+ final secret = response.totp.secret;
+ final factorId = response.id;
+
+ return ListView(
+ padding: const EdgeInsets.symmetric(
+ horizontal: 20,
+ vertical: 24,
+ ),
+ children: [
+ const Text(
+ 'Open your authentication app and add this app via QR code or by pasting the code below.',
+ style: TextStyle(
+ fontWeight: FontWeight.bold,
+ ),
+ ),
+ const SizedBox(height: 16),
+ SvgPicture.string(
+ qrCodeUrl,
+ width: 150,
+ height: 150,
+ ),
+ const SizedBox(height: 16),
+ Row(
+ children: [
+ Expanded(
+ child: Text(
+ secret,
+ style: const TextStyle(
+ fontWeight: FontWeight.bold,
+ fontSize: 18,
+ ),
+ ),
+ ),
+ IconButton(
+ onPressed: () {
+ Clipboard.setData(ClipboardData(text: secret));
+ ScaffoldMessenger.of(context).showSnackBar(const SnackBar(
+ content: Text('Copied to your clip board')));
+ },
+ icon: const Icon(Icons.copy),
+ ),
+ ],
+ ),
+ const SizedBox(height: 16),
+ const Text('Enter the code shown in your authentication app.'),
+ const SizedBox(height: 16),
+ TextFormField(
+ decoration: const InputDecoration(
+ hintText: '000000',
+ ),
+ style: const TextStyle(fontSize: 24),
+ textAlign: TextAlign.center,
+ keyboardType: TextInputType.number,
+ onChanged: (value) async {
+ if (value.length != 6) return;
+
+ // kick off the verification process once 6 characters are entered
+ try {
+ final challenge =
+ await supabase.auth.mfa.challenge(factorId: factorId);
+ await supabase.auth.mfa.verify(
+ factorId: factorId,
+ challengeId: challenge.id,
+ code: value,
+ );
+ await supabase.auth.refreshSession();
+ if (mounted) {
+ context.go(HomePage.route);
+ }
+ } on AuthException catch (error) {
+ ScaffoldMessenger.of(context)
+ .showSnackBar(SnackBar(content: Text(error.message)));
+ } catch (error) {
+ ScaffoldMessenger.of(context).showSnackBar(const SnackBar(
+ content: Text('Unexpected error occured')));
+ }
+ },
+ ),
+ ],
+ );
+ },
+ ),
+ );
+ }
+}
+```
+
+### Step 4: Creating the login flow
+
+
+
+Now that we have created a registration flow, we can get to the login flow for returning existing users. Again, the login page has nothing fancy going. We are just collecting the user’s email and password, and calling the good old [.signInWithPassword()](https://supabase.com/docs/reference/dart/auth-signinwithpassword) method. Upon signing in, the user will be taken to a verify page where the user will then enter their verification code from their authenticator app.
+
+Create `lib/pages/auth/login_page.dart` and add the following.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/main.dart';
+import 'package:mfa_app/pages/mfa/verify_page.dart';
+import 'package:supabase_flutter/supabase_flutter.dart';
+
+class LoginPage extends StatefulWidget {
+ static const route = '/auth/login';
+
+ const LoginPage({super.key});
+
+ @override
+ State createState() => _LoginPageState();
+}
+
+class _LoginPageState extends State {
+ final _emailController = TextEditingController();
+ final _passwordController = TextEditingController();
+
+ @override
+ void dispose() {
+ _emailController.dispose();
+ _passwordController.dispose();
+ super.dispose();
+ }
+
+ @override
+ Widget build(BuildContext context) {
+ return Scaffold(
+ appBar: AppBar(title: const Text('Login')),
+ body: ListView(
+ padding: const EdgeInsets.symmetric(horizontal: 20, vertical: 24),
+ children: [
+ TextFormField(
+ controller: _emailController,
+ decoration: const InputDecoration(
+ label: Text('Email'),
+ ),
+ ),
+ const SizedBox(height: 16),
+ TextFormField(
+ controller: _passwordController,
+ decoration: const InputDecoration(
+ label: Text('Password'),
+ ),
+ obscureText: true,
+ ),
+ const SizedBox(height: 16),
+ ElevatedButton(
+ onPressed: () async {
+ try {
+ final email = _emailController.text.trim();
+ final password = _passwordController.text.trim();
+ await supabase.auth.signInWithPassword(
+ email: email,
+ password: password,
+ );
+ if (mounted) {
+ context.go(MFAVerifyPage.route);
+ }
+ } on AuthException catch (error) {
+ ScaffoldMessenger.of(context)
+ .showSnackBar(SnackBar(content: Text(error.message)));
+ } catch (error) {
+ ScaffoldMessenger.of(context).showSnackBar(
+ const SnackBar(content: Text('Unexpected error occured')));
+ }
+ },
+ child: const Text('Login'),
+ ),
+ ],
+ ),
+ );
+ }
+}
+```
+
+Once a returning user logs in, they are taken to the verification page where they are asked to enter the TOTP from their authenticator app.
+
+This verification page has the same text field as the enrollment page, and upon entering the code, they are taken to the home page.
+
+Create a `lib/pages/mfa/verify_page.dart` file and add the following.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/main.dart';
+import 'package:mfa_app/pages/auth/register_page.dart';
+import 'package:mfa_app/pages/home_page.dart';
+import 'package:supabase_flutter/supabase_flutter.dart';
+
+class MFAVerifyPage extends StatefulWidget {
+ static const route = '/mfa/verify';
+ const MFAVerifyPage({super.key});
+
+ @override
+ State createState() => _MFAVerifyPageState();
+}
+
+class _MFAVerifyPageState extends State {
+ @override
+ Widget build(BuildContext context) {
+ return Scaffold(
+ appBar: AppBar(
+ title: const Text('Verify MFA'),
+ actions: [
+ TextButton(
+ onPressed: () {
+ supabase.auth.signOut();
+ context.go(RegisterPage.route);
+ },
+ child: Text(
+ 'Logout',
+ style: TextStyle(color: Theme.of(context).colorScheme.onPrimary),
+ ),
+ ),
+ ],
+ ),
+ body: ListView(
+ padding: const EdgeInsets.symmetric(
+ horizontal: 20,
+ vertical: 24,
+ ),
+ children: [
+ Text(
+ 'Verification Required',
+ style: Theme.of(context).textTheme.titleLarge,
+ ),
+ const SizedBox(height: 16),
+ const Text('Enter the code shown in your authentication app.'),
+ const SizedBox(height: 16),
+ TextFormField(
+ decoration: const InputDecoration(
+ hintText: '000000',
+ ),
+ style: const TextStyle(fontSize: 24),
+ textAlign: TextAlign.center,
+ keyboardType: TextInputType.number,
+ onChanged: (value) async {
+ if (value.length != 6) return;
+
+ // kick off the verification process once 6 characters are entered
+ try {
+ final factorsResponse = await supabase.auth.mfa.listFactors();
+ final factor = factorsResponse.totp.first;
+ final factorId = factor.id;
+
+ final challenge =
+ await supabase.auth.mfa.challenge(factorId: factorId);
+ await supabase.auth.mfa.verify(
+ factorId: factorId,
+ challengeId: challenge.id,
+ code: value,
+ );
+ await supabase.auth.refreshSession();
+ if (mounted) {
+ context.go(HomePage.route);
+ }
+ } on AuthException catch (error) {
+ ScaffoldMessenger.of(context)
+ .showSnackBar(SnackBar(content: Text(error.message)));
+ } catch (error) {
+ ScaffoldMessenger.of(context).showSnackBar(
+ const SnackBar(content: Text('Unexpected error occured')));
+ }
+ },
+ ),
+ ],
+ ),
+ );
+ }
+}
+```
+
+### Step 5: Add a home page with secure contents
+
+
+
+The home page is where the “secure” contents are displayed. We will create a dummy table with some dummy secure contents for demonstration purposes.
+
+First, we create dummy content. Run the following SQL to create the table and add some content.
+
+```sql
+-- Dummy table that contains "secure" information
+create table if not exists public.private_posts (
+ id int generated by default as identity primary key,
+ content text not null
+);
+
+-- Dmmy "secure" data
+insert into public.private_posts
+ (content)
+values
+ ('Flutter is awesome!'),
+ ('Supabase is awesome!'),
+ ('Postgres is awesome!');
+```
+
+Now, we can add some [row security policy](https://supabase.com/docs/guides/auth/row-level-security) to lock those data down so that only users who have signed in using MFA can view them.
+
+Run the following SQL to secure our data from malicious users.
+
+```sql
+-- Enable RLS for private_posts table
+alter table public.private_posts enable row level security;
+
+-- Create a policy that only allows read if they user has signed in via MFA
+create policy "Users can view private_posts if they have signed in via MFA"
+ on public.private_posts
+ for select
+ to authenticated
+ using (auth.jwt()->>'aal' = 'aal2');
+```
+
+`aal` here stands for [Authenticator Assurance Level](https://pages.nist.gov/800-63-3-Implementation-Resources/63B/AAL/), and it will be `aal1` for users who have only signed in with 1 sign-in method, and `aal2` for users who have completed the MFA flow. Checking the `aal` inside RLS policy ensures that the data cannot be viewed by users unless they complete the entire MFA flow.
+
+The nice thing about RLS is that it gives us the flexibility to control how users can interact with the data. In this particular example, we are mandating MFA to view the data, but you could easily create layered permissions where for example a user can view the data with 1 factor, but can edit the data when signed in with MFA. You can see more examples in our official MFA guide [here](https://supabase.com/docs/guides/auth/auth-mfa).
+
+Now that we have the secure data in our Supabase instance, all we need to do is to display them in the HomePage. We can simply query the table and display it using a `FutureBuilder`.
+
+Create a `lib/pages/home_page.dart` file and add the following.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/main.dart';
+import 'package:mfa_app/pages/auth/register_page.dart';
+import 'package:mfa_app/pages/list_mfa_page.dart';
+
+class HomePage extends StatelessWidget {
+ static const route = '/';
+
+ const HomePage({super.key});
+
+ @override
+ Widget build(BuildContext context) {
+ final privatePostsFuture =
+ supabase.from('private_posts').select>>();
+
+ return Scaffold(
+ appBar: AppBar(
+ title: const Text('Home'),
+ actions: [
+ PopupMenuButton(
+ itemBuilder: (context) {
+ return [
+ PopupMenuItem(
+ child: const Text('Unenroll MFA'),
+ onTap: () {
+ context.push(ListMFAPage.route);
+ },
+ ),
+ PopupMenuItem(
+ child: const Text('Logout'),
+ onTap: () {
+ supabase.auth.signOut();
+ context.go(RegisterPage.route);
+ },
+ ),
+ ];
+ },
+ )
+ ],
+ ),
+ body: FutureBuilder>>(
+ future: privatePostsFuture,
+ builder: (context, snapshot) {
+ if (snapshot.hasError) {
+ return Center(child: Text(snapshot.error.toString()));
+ }
+ if (!snapshot.hasData) {
+ return const Center(child: CircularProgressIndicator());
+ }
+
+ // Display the secure private content upon retrieval
+ final data = snapshot.data!;
+ return ListView.builder(
+ itemCount: data.length,
+ itemBuilder: (context, index) {
+ return ListTile(title: Text(data[index]['content']));
+ },
+ );
+ },
+ ),
+ );
+ }
+}
+```
+
+Because we have set the RLS policy, any user without going through the MFA flow will not see anything on this page.
+
+One final page to add here is the **unenrollment** page. On this page, users can remove any factors that they have added. Once a user removes the factor, the user’s account will no longer be associated with the authenticator app, and they would have to go through the enrollment steps again.
+
+Create `lib/pages/list_mfa_page.dart` file and add the following.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/main.dart';
+import 'package:mfa_app/pages/auth/register_page.dart';
+
+/// A page that lists the currently signed in user's MFA methods.
+///
+/// The user can unenroll the factors.
+class ListMFAPage extends StatelessWidget {
+ static const route = '/list-mfa';
+ ListMFAPage({super.key});
+
+ final _factorListFuture = supabase.auth.mfa.listFactors();
+
+ @override
+ Widget build(BuildContext context) {
+ return Scaffold(
+ appBar: AppBar(title: const Text('List of MFA Factors')),
+ body: FutureBuilder(
+ future: _factorListFuture,
+ builder: (context, snapshot) {
+ if (snapshot.hasError) {
+ return Center(child: Text(snapshot.error.toString()));
+ }
+ if (!snapshot.hasData) {
+ return const Center(child: CircularProgressIndicator());
+ }
+
+ final response = snapshot.data!;
+ final factors = response.all;
+ return ListView.builder(
+ itemCount: factors.length,
+ itemBuilder: (context, index) {
+ final factor = factors[index];
+ return ListTile(
+ title: Text(factor.friendlyName ?? factor.factorType.name),
+ subtitle: Text(factor.status.name),
+ trailing: IconButton(
+ onPressed: () {
+ showDialog(
+ context: context,
+ builder: (context) {
+ return AlertDialog(
+ title: const Text(
+ 'Are you sure you want to delete this factor? You will be signed out of the app upon removing the factor.',
+ ),
+ actions: [
+ TextButton(
+ onPressed: () {
+ context.pop();
+ },
+ child: const Text('cancel'),
+ ),
+ TextButton(
+ onPressed: () async {
+ await supabase.auth.mfa.unenroll(factor.id);
+ await supabase.auth.signOut();
+ if (context.mounted) {
+ context.go(RegisterPage.route);
+ }
+ },
+ child: const Text('delete'),
+ ),
+ ],
+ );
+ });
+ },
+ icon: const Icon(Icons.delete_outline),
+ ),
+ );
+ },
+ );
+ },
+ ),
+ );
+ }
+}
+```
+
+### Step 6: Putting the pieces together with go_router
+
+Now that we have all the pages, it’s time to put it all together with the help of [go_router](https://pub.dev/packages/go_router).
+
+go_router, as you may know, is a routing package for Flutter, and its redirect feature is particularly helpful for implementing the complex requirement this app had. Particularly, we wanted to make sure that a user who has not yet set up MFA is redirected to the MFA setup page, and only users who have signed in land on the home page.
+
+Another helpful feature of go_router comes when using deep links, and it automatically redirects the users to the correct path of the deep link. Because of this, we can ensure that user lands on the MFA setup page upon confirming their email address.
+
+We will add the router in our `lib/main.dart` file. Your `main.dart` file should now look like this.
+
+```dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:mfa_app/pages/auth/login_page.dart';
+import 'package:mfa_app/pages/auth/register_page.dart';
+import 'package:mfa_app/pages/home_page.dart';
+import 'package:mfa_app/pages/list_mfa_page.dart';
+import 'package:mfa_app/pages/mfa/verify_page.dart';
+import 'package:supabase_flutter/supabase_flutter.dart';
+import 'package:mfa_app/pages/mfa/enroll_page.dart';
+
+void main() async {
+ await Supabase.initialize(
+ url: 'YOUR_SUPABASE_URL',
+ anonKey: 'YOUR_ANON_KEY',
+ );
+ runApp(const MyApp());
+}
+
+/// Extract SupabaseClient instance in a handy variable
+final supabase = Supabase.instance.client;
+
+final _router = GoRouter(
+ routes: [
+ GoRoute(
+ path: HomePage.route,
+ builder: (context, state) => const HomePage(),
+ ),
+ GoRoute(
+ path: ListMFAPage.route,
+ builder: (context, state) => ListMFAPage(),
+ ),
+ GoRoute(
+ path: LoginPage.route,
+ builder: (context, state) => const LoginPage(),
+ ),
+ GoRoute(
+ path: RegisterPage.route,
+ builder: (context, state) => const RegisterPage(),
+ ),
+ GoRoute(
+ path: MFAEnrollPage.route,
+ builder: (context, state) => const MFAEnrollPage(),
+ ),
+ GoRoute(
+ path: MFAVerifyPage.route,
+ builder: (context, state) => const MFAVerifyPage(),
+ ),
+ ],
+ redirect: (context, state) async {
+ // Any users can visit the /auth route
+ if (state.location.contains('/auth') == true) {
+ return null;
+ }
+
+ final session = supabase.auth.currentSession;
+ // A user without a session should be redirected to the register page
+ if (session == null) {
+ return RegisterPage.route;
+ }
+
+ final assuranceLevelData =
+ supabase.auth.mfa.getAuthenticatorAssuranceLevel();
+
+ // The user has not setup MFA yet, so send them to enroll MFA page.
+ if (assuranceLevelData.currentLevel == AuthenticatorAssuranceLevels.aal1) {
+ await supabase.auth.refreshSession();
+ final nextLevel =
+ supabase.auth.mfa.getAuthenticatorAssuranceLevel().nextLevel;
+ if (nextLevel == AuthenticatorAssuranceLevels.aal2) {
+ // The user has already setup MFA, but haven't login via MFA
+ // Redirect them to the verify page
+ return MFAVerifyPage.route;
+ } else {
+ // The user has not yet setup MFA
+ // Redirect them to the enrollment page
+ return MFAEnrollPage.route;
+ }
+ }
+
+ // The user has signed invia MFA, and is allowed to view any page.
+ return null;
+ },
+);
+
+class MyApp extends StatelessWidget {
+ const MyApp({super.key});
+
+ // This widget is the root of your application.
+ @override
+ Widget build(BuildContext context) {
+ return MaterialApp.router(
+ title: 'MFA App',
+ debugShowCheckedModeBanner: false,
+ theme: ThemeData.light().copyWith(
+ inputDecorationTheme: const InputDecorationTheme(
+ border: OutlineInputBorder(),
+ ),
+ ),
+ routerConfig: _router,
+ );
+ }
+}
+```
+
+## Conclusions and future iterations
+
+We looked at how to incorporate Multi-Factor Authentication into a Flutter app with a complete enrollment and verification flow for new and existing users. We saw how we are able to control how the users can interact with the data using their MFA status.
+
+Another common use case is to make MFA optional and allow the user to opt-in whenever they are ready. Optionally enrolling in MFA will require some tweaks in the code, but might be a fun one to try out.
+
+## More Flutter content
+
+- [Flutter Tutorial: building a Flutter chat app](https://supabase.com/blog/flutter-tutorial-building-a-chat-app)
+- [Flutter Authentication and Authorization with RLS](https://supabase.com/blog/flutter-authentication-and-authorization-with-rls)
+- [How to build a real-time multiplayer game with Flutter Flame](https://supabase.com/blog/flutter-real-time-multiplayer-game)
+- [Write backend code using Dart Edge](https://supabase.com/docs/guides/functions/dart-edge)
\ No newline at end of file
diff --git a/apps/www/public/images/blog/flutter-mfa/directory.png b/apps/www/public/images/blog/flutter-mfa/directory.png
new file mode 100644
index 0000000000000000000000000000000000000000..b328493c2c66225b983a2fd03ab0e0ac8229ac8a
GIT binary patch
literal 40553
zcmd3ObySpVyEiGJB8ZeU2q;L4bazM(-5?+x(v5UCsB{R-(9+!?C?yTjNOv>Dch5fW
zIcI%qeSf}deeYg-ui3DenJ4c1x_)&%;mV5AkFlR)BOxI@mX(oEMM6U9Kte*k#e4vM
z17FS&1}|6+GTP2aNDuK5{~;rNNhb!sM0Qq{7DFl9mxR`WU%%@L156HLP@zDh4PLDW`J4;BEWap})p;xXl
zsU{l~T!4RZa#BT#a$1}Pc{xA-`AOgOD*xx%z3zPSznZ+SA{==I1oXgf!lrRVKP+sH<`ujj
zOgY{h75~idmWeo3cJR4wXWNj^JdU}DpSQptVyWgzV14-0nEXP$(nPZ0-PgAXPqW+V
z9hN&)OLe%gu&`9x@bU0eW;^BBdUUT(x7N?53=?f;s={MqV}E7}O0VR}#M2xP@gK3E81e#J-C?GNqWbeKd;D
ztR5GCgpSt|OUY5#%zh+D8hBS0HlL2ki-D{60hOsEiAp+#EICKKO#}IdKAe&yIehmJt>@mst%_ctd>+7(7QFX~9S?fRuDeO?o>
z=&_ZFF9|yTjS{&1NOa~^XE)4-2CiQLvQ22VgyYSnBS8?}i&d-W{w(1(LjOewvinN6
z>?;~1)N9{g$XeXae-(KBgtk4?U#8MZalY|e}n
zn@T62A|vOxF+}bXn8l=7rpLvydWE>r+r797;rrvozd76wjkt6ao^)E$ZqC(}qoJYo
zPgky*ZH>K8NH7`;ZmKJk@6+%^T%8!|w1n=h-^PrXhE1;T(3h2juC%Jmu;SQF@8Z@6
zQ|0A8VG&ezoMQgjo2v^3%Ttv*#7K_A*w{iH7w5?n&4(&CcW`3u2B(62iK6|GkdVga
z7Mb|m-t|Z#R!p!;3+!$TQWM6(4O_pxSWG?L@_~3s$W4CxmB`_J$<1CioXnIuUZO3o
zFQwZZL(czS-=Gor>c^i}ABG+bqauycFCTX%-!-@7-CM*nX)130E{t^~Pto(eJj_9?
zzU^K)ws?9D4prvjC@Y7q5T*XnJn0GIIvU9cVtHoM2ONK&|8r&fz@JG3FX7Qj75TBF
zlzLwst5#d8&>|VOctV8WyUtwK(TKAX&dSctMixtw+MTOYx-}{`{nHg1s~*;K#_zW8
zgjv;JANqt+qpnn|QuSR~y%)D?uyM5`nSi@;3X49C@XcYK=OY>#8adKtG4V*@r{I5S
zXh@Cu(f+L!>fcrA{*9kQ*OZ-2CHpA+j0bGur1Jv&Tr+i0nYRAGZ9j9{XZ}-aV3wn~
zV}--~RqjVmKMVOZc1zDxy)Q8P@e~v}+A}>0A@7&(zPyPy>4}gFKtW#{E0A|u>sQgP
zG7Hyh^Zm2FdU<)-kFO*^-4huqx6tfC=W~7PbahO?`*AZHY#=GY7$yS)1Jx#1+cQ1v
zXZ@^h`}3o<{4cC0OOk&VD#`z8bfI(G*W2b*{Azy7_uXQcCHgs6LTB(p*`ajanl>Np
z7)oJkCXJG~la1lN>$;uEQrhxu9HD6*#WA&1usUOojz9f9n2
z;#660J|rYDX&MZqvKIOtEZoizUs#XkHV9nIJFo1KpU6|7S?rqb(pnVdUhK_jqT4fJ
zt}c3?l+`Tn`4-OLVkDZdl2m7knwDup9eoA8bdj3VnkB<
z%pnO$T7~H~R6#i&7lk~)z<`Z-ULG1l@O~xGMM95hj3%KFd9MZd#98Cd&zyrqhL4g;
zw7)|aX=!O81ZUt1B)n3iKRP>u%&pYeEi}*Me2MBK=Q(tS1WaTIk$;0Y#KPn_3@FcI
zv$C?x`r|q&0ZL(AsG?1j(O7g&jKcE7<-yA82px2o8#ccDrF?JTE
zfkp&DzS}8pGrPM%PtZ~(`SaZ(R^y2L71*2GjZq|=1Elshx{R7-B`E8Wtmor*cTK%-
zEdxZ1fcQ-1?muo)~q1a_@e;rqQWrs5b3$(v~W5ndPR9>t~P(Ykv#Z!e>V(#wsyMLOb
zA+k*BMYtA{#Da}J@K%@@!z>!%Yps`9@5|6=!+cLi`<&qCwyUn{!Q3{}+1KVrZYp$=
zHO~a={3DpJT^-2-b3Js`?MCHBT78=C1t$fyYpjwT`8&D9-aeubkT^sBn!)EHXE$F@
zoy-W~pcvM}vK!3}KED|(9xMuD)vNC}hF4Uuc^od~Y;#Frwz=*#syr@J&dEKmCzx25
zj3gWc1)Z$6r=z`8x9?0a>xp~j4h
znTt=a5QTU7v?~z(VH9H-NoT{=L5{6hXa$eOklvZ8%L>`G)hG?JXAkj+aLEO3-fc$%
zL^L${tVr)j}|j;zT*f2I8WG}y#e00N4wK*Ce$B!i#opR4bP5@PZs80tU{8nUy@n{yix+Et$UNV%
z+Xqva6Y~QTXY|-(NyJ&pv_o;otFz9bT%G!9Q8`|ROTHx+E(B6%4$*CqN0ym4@2Wi>
zJ%6Khcal{XB@#0QcDB4rgJ!ujw9jKKUwFbx9IPBdHZ-+}pamT?W->hk9B`P}wjgS-F6w=W6(bj3u9%`*zm2rtgj>B~%k
z{HS1UnG|g6C&ZMqr882azAi$V_izBvBqyukEZr
z@mAZQf#3NEFc~bAL+V0`{XXkw4E|UUczaA|UnNH){
zNykz!9|cch+(eO_gnnrZ_&~V%ONy%ZV;F$2KjNsx0myh+vl{N0luJ!TgINxGdGxI(
z88Wdlmdi#h_+|}1ahY-5r?vKr#w7mE>jUp+=pDiGooR9_Z%luc*d_qCxgfp}b=aSP
zrLv<=&)nUrFqGsR5I=N%@j$(-l5e4p(l1wxFYO5u0#R@RG}FWHbzTBR5>|BC9@n7#
znXW0rWYApy#^y4pF)E_G^_VoUgvDYg4ffMG;Nj0Jm-oFL+FCDGsY|u*
zQZ&0q!Av2G$NMsFzL{hq1S~nJ)H##f-cU;47fQl^B)2C^VT?`Y?t;I+z59)FCX6$c
z_ZWq`UOu%jA5{I7jg1Wlelb=9&hv2IQw0AoFG0hiQdk(N4#9<1)W|-zXYA-*z@hKeFq_Ga
z(ynG$deJi9;0%N3iUIsAfM7P4rkM0{$T4KRxzIM&)@e2L<(sP$7^MXdHBO}Q?#y>-
zuxDQ05eJ6fZOqo}NX>m}y8RxGMf)3vLZE1t2C811+nZoaz*|D$c6;ptAu*^jt2`$g
z#s-H$_ed#<7J<0umaBe%yC`AC502|U>UAq9%x3i$_u?}{LqlG$JP_m+obPS~by~j^
z6ar%eni0Wg~s>r^9
zFWx7B#lf%V2Z+Gc)kap$t%Do_dNYEOIsrfG%UT;qW*W;DMfF$?-ViLq+~|+*!u+Ro
zy6jBKdQ)Heg5IoJYok55p;Ds7es%gA8A19&cgPRER7BLSu6hfUCp<`J@=zwNQ~9B1v9KM$T8AI-2K)k2shx>a?+-
zheRyyWI-xh-Ulrg<86RrrvPz*?j_R3V5%m%OwbTHzv}?^q6CIYwW!T}y-Jf^JsJjv
zwQ+sWwxE>JyCML@iv6104!+&>SWh>)Sf|f1>($H5Nt;G30?NPuK!z&Bs7U)eJwi+?
z&;|(U%_^WijDSeg>(DA+Num=6JTrFa3<}4>Zg;r;n0C(X1*LRGnl$!3sI{GoT0E*t
zeArub3+@$rnKY)5+kSdul!y`l9~ubx%4utijv$Ct4=5q1sNZ2oQ3gxs4+;D8WfNb#
zqE;{olq^;)c;Wo_XYZLtOJnRHkRR4T%TB2a4h}B%(?7#U)IxN`L17@8A#1Q&3H8ej7bQjwoVTcK;@dYA7f$O7=By)X0
zn;=2(^Jwf&t!fmtC+5SMw18Tsc2Cwjn$jZWO(2yLGAO32|7Pm!>RO+zu^y{5#Q>6@
zT1o8co-KKTkB<*R-gt^3&Q|b2vpfXW!=Q}ZYl8pX{8s`Ar@5SJk!nGeqX!@^?++GQ
z*!Ner&3H~^JpfDo-mG+Ya~1U8Z}uqaJU2q(fJw;$@sRFqDvSPGmOQRc;A{0v>C#@t8#S!!)L0b{0vHC#A#is4Zt)~3
zfi91*Po%s8f-B^>5=18KtA|a%nD6OVd3p@gtM%UKuc{SB$XxGHM1^Wwmw+rL-{ACq
zVx7ovw^+kFGAu0aiSUigub1@T2rWUEqkH-~QNUt|Y}GBw7{Q{FSoG!4jY?=jD{abd
zE?1Sd*Ld5}!T~ps`^-@QL27k7$c&;C7Mg5}4JYCuQ4T$iLP5utY5XWKNk>ED)O*kO
zl#b?gOSA2qu+C*Evt-0G6`uwMrObrAx%>EEU+aoQO0v-0R(l_Z+NxXuo>%_HYFvxC
zB%aHf5bH@BJphuBLB7RSAKfMvSY!EwtXtZ_T+;>rSj93v^cGaoC@WHD0%A3G+z7|c
zY^I$ldu7=E@&}Xmyod|l&-A962P5PuXif2@736{7I)>SVQm6f=zrMs-5E4olV*P}W
z*Jk4t!}?W2UI!!;ijf~3pU3xqo$6+#Y6`N|r*6h<+uuv0h58O7@
zt&jKiI0+xeG%n0BWIX#YVxVZR&*E05pOOz$MX4V^@oV(n9)AUhV?h41neP^NJRgo*GLn4Xh^w$=qPtlW
z^|)MWb%f_hKbderx2{Rj)f|Gwr6WoJ-R<>RBK^DPgEiJuYyI(g395k7$_TarsyzTo
z<{FSK#EQR`mzPI9Kg+mozJgmMf#QgT7q1Wab?pXG+`D6l?F)m21t)X(bC2v`-K^8r
z?Y@C6=D`A^j1(u6KQ}L6n4jwEV)LIB5d+fr`%=*F&b#XUAR)C}5%_TV0F*5e55cvH#l;iEdDLNM%`2y_N-#w`_)T_HDnnqFu%(Nj
zvH2DMx2OdE<IoCBO2&4qU8UO~xB+~iuJ|7H^Hp&;&^&i14lCe88Bd|N|
zWqNHoOfb0Z=8cf(X>#8LBpX$gX6L@AQ*)rmi-@FpM4=gkS|#sMO4ICo{IY@ESA`-J
zoTkkB07RYjy@-gvUcG~8MoBH;a1HM4=NoZ!^8Rn^<|QJYy~@4z?&?&8;U5w*>*S-@
zh2rc@+#-NB=y6=NFoTva=NH&TgKC9Rlx%1Z9>@XpeqtTbz>Ze?YWnP7uMZ?AFD;SH
zo-}0ZyNPL(>J(&Jm{`wL1)B{d$(HFiv4HkBX<$hBVJtr!(YXNx9)A;g3%?iy$7h;R
zyS%YcXdrEA=?HE?>h`Br_oD=$)QSjR>`c*`{2^pW4GsyBL+Ca;0-n#{A1e{U-drJh
zcVD0GJHz&q3ItRrhQPjkne?CX$A5CvifH(Di!t}IX`2l_cP}+cionVee@EWotlR7!
zt~JSj>+J!bs!V#Y8@w*;qHNO_6FtwiWdS)KZ|%4hzPrT#
zFj-RUxvN?rM>022Zm0xr$!~1-JbQlT78aI(EzUMWNH5BxCaU#NSd!HBnbOi)<}$5Wlj^O@ovF$=bdaSOU8$}8>>@opl7aq
zwQps==1gTZ+{X=sL0~KZBdMhRq9ztqTcih|@EDNF=caY1edVeJ5!JSHQoc7w(%Nml
zpI&@RVb+B@5aHobgEwoGKgm%K-9QMfdk1xiKm-FAssupH6_bI@-kNSqPX)$
z7!;QuNc<_cP&&D!xK^J0c^r{K##}=qQNZu*0yAB_15=nLbGNgb79$&
zOl0|LMUb4stcVYZle3KhfxP^bLhqa`CrduB{rWm(+yvxQ($pgZ4m5lfRTF-+8P)SZ
zx))S#qJwj66np*0TPv^He$J@JvY|MtifC;EohB5?8(hno2IoSATzVU`O@}hYIV^y0
z>ZKmL=nHR?LW+rsQYTQoS>pJM)OI$hn}Ex#Q>~nH0>r*5`$ZuD?<+iQMB+U6YNjR@
zWw9|^F{>_#CZ_&0xxuVzDH;PmeOgOY64D@$`yLmE>v7Q1DitOW&8<^=n!5ko
z^{Iz6c~Ba4w-2}xy|qON6nr0L9u9g{P
zD&IX`YgFS{qDN(w7PbYR&RC%$B^h3UQCR=jL=_$AYf_#vSSGW?wx|
zHT0dq1cs_j@4HxcDp5LW0;iYwfO`QyeL5`DPK3wrEX!pvH^`#}FvxZ9O;VPGrVGIeURE^;#oS+qMmvl{(Yd*01
zf1PMKl2FS&F**wFW5+NOc}d1?*L>s!03uzn%|f#_y+YdN2;A#@SDS?I)Os~YXqU)&
z{pqsHN_Y6IEB@M)p)@}lS97Lp;@unHC)n6;^>N0a1qBoDg9bZ3g%TqZACmP(lQIA>
z=z8Tn$`1pLB){vf@1)0iRC8nSE4M_AK|Lylyrs53Otb5Ke;ly-5~OXm@BW<@dy
z;<~^@au?6d7jD=>1)GQu{|Oi`<{8-Qq8UmW53+G^stw7
zh>{TlyOY#hnR_0eb_i*;1J(`8L1?SIy3i=h3daT+c{Ei&n0dOE*?918@7vEPYRDYs
zKQ|pz4NSyF#M_`uY1RJtzuKFxGjN6Kj8D(tAXwPfgp_
z07)9Mbu?L6Rx;ksGK~3CJ&8ILj
zl8O`aSch#sAQ8!>l02>ZZ50m2>rL@qZtP47o^4|P@RxKz-kEFg*eco0x(H43JVpnY
z(b21E?NR5&zU1@NRcO9>KdvB!!o4S@#rlqz*m3?u=WNqn8}EzuhI>u3YL*+Q;FIGfI4+4uB}n@;xR)
zDR-QJ)y^mIWoJ2se`Pzyd89KXAK?RIOnP93F!aXTZi!C!O%3OjdnK-#@&0t3KxG#D
z3M=2kQ#i%n{F(S*vfR+#X0h3W^A$i_QMT+g$PZuUYq&oFZGGq1RdBa+p+!ZM2>;pX
z1qJmaFA^%fwN}R|TFdjOVD_I3d0TAK7h8o*T6VE-(OaTXS_Z;rm~3&TE2BkWIyGO`
z&w%pI!Lr)T1H)(kbs_s&OBsPz!LjLz;|f)qRjt7$r}OqG+;Dq4v49!{NmXg7#?~m(
zYCY^c={*2d{SC|N&JLILWYHkz2}d=d1yn}yGU!0zO5TtPeglsx^j!oL>?n?>d_Ul;imwnQj7vKwRNYB&Y@
zLLO&T+eu}$g>rC$^T)*$&#
z_%NA8KQrQpo6VXy(k@@4DDVl{WdpFhb#W+#Xg+gXSwkjuRNH({f35-IL6TaTOa4uc
zO2kC=gMuaK)CGK-BJC3OQF~_9K>UM^L_%&H90G!w4^3;Wr&tJhe#sNMzUpBcYWZ^ThOA-iIAlPqjitNb1oS+!6kd
zVc5{kgB}`6puZ~Te7Bi#vJxfGT=X~U;nP3)`wKYVns03*uqT1p4ap)$yXZC&Qo$ee
zU3JO!!AO+TtEt7sqk914$X^9rM-Mvz<4dV1Wm?;h?lzdlu%<#~o>R{tKFDs_IIm08T5^
z+WoP*i7^TfrfU2c4lUuf8kf0E%h^NT!_iQFjG#QF9QV~$oa|Xhp|@=g%QXK)fIxC5
zWiF2ng{jc^%H-#)YnpzuTE7A7Q|P(GvPLfr9@7nP7-oJOs)}2TlFkx)m0NSt`f(4)CI9ru^!r_KU6f
zd5z&y!9C)*CVertUF(ZIzF&dc5ADny%LJhp=6M5Ee9BWvMm=VFWUY0(c7LUsi_=%3
zk^-kwK?ED$-hCxpU3-hR3BaW_CYv(ryg80f)`>)QVMBJ(E?#rZKd%D`TchLL$89A031D
z>1QfTxcN{n`ZAZ}0(ZWuV1u{ilxZ;h`A)0(pA#e}9;@eVFuo|tc()ni_t>yPQ2)|Ih9
zx%=knuJTSg%mpW8NZF+QE8g
zi}fgUjO|6oeUp6t5$r-tfGa10>;-IMVLoFy(kC31<>wcv`aW4FS*{b32_x^aqsuZJ
zV2eF{$kZXBcpBjl&%oE8hfx`t{YV>ieJo%vfeiQhe0OGb(g)AoVTBMHfJvO?J+^4<
zi3Y$46<`8BPp5%~NcXA*Zbu2kwyJI-PcMDu#HfLn*FHz9EW3Hr8k*maXRTYJ@b{H}
z%~!pLb?srgw0O2y-Ry5KiHEW^*)RGY1^Ffz+9=1n`nLTE_W8iYMf)myz$PJ
zQw2j>zd3M{8P0a5G-1Ix&m#{*$_GdNBDN2JjHCARhu!|>+=V`uA)!w*IR1tg7}YL7
zW>aP^2_VGWRXfEuh4AjGr5p7jfpf0y*E)(0OdvH#g#@+zG&42f4txNEHgRdkI_g=aH4CJ(uO4k&mUc_{9
zu#logN;G)e&%f5SU(}1Y#ie1s!Bu;=#A*VXz-fV~=+WTAF;&FS(a>a+mE#({
z0e%OnK^Z8&bpJ9#)e8XSP`?yxGA+HHBKcGy)8cuyW_a(ZuaA&kfg{t3OQ#NcX})J~>@)0F{B!8bwsUv!KtYZK!5$zAs6HKR4?vwT4G9e$+$q1852N7reGtAIOr2)K
zEFCVlvbRSoo$@X*H=56*n%Ogy>7$35s{#p~TPJI{KCt~I3_Q2q1IPZ;zcN>fmm$4M#wSSQJj_L*iP%*|=SFYNd
zJ^Tju=2RH4&4<#pb*e4PSPuR)DZyt*R~;V`Funk>r3649p%n58alj`Ivze`ygB%<>%PjiQSsz>qjVoQ*h^@@azf_EdTKo#Od!fYWlP2e0dH{cGJ?
z1)t=-*KBOcbFu$Y(17$*;BjJ(NWGkqf!o2#Y5p@V$l;C@I6R2pY|$<0^XJgLMQP~p
z$F7j*D!=(b6DVvFkXbd
zUu?ata^2H869QrrWI2lv3(7
zAAU>ew|QS-hvJq9OUHj;7juZE5X=Y4F8iH1FsQ2gyj0OA4E@MU%f#CweM>esz8Qib
z-z_on+KfdLEYs{e3i>gu(iW&y;}mesJ*4(ZO_DsIt4Xji8n!mG$2>g#`#3&`<31Xo
zgAX0h&*wtpj`d1MD?K&1lX~bg2d$(8w91|zvRX0)4V4d?IBn+Y9cf*VjwdufRXeyc
z^!k*XKgNl9&TUr`xB%qrs10H~N7`NsRQTUNZi|q)Gy-NF^-T8_tPhK=8P^IxepVC+
zm;(9+>xYr-)~+)i8LOG9f-h(RsN9-kg-WdU%|{{X21^V*~qBP^_b{gLBZpu4aCUvinr2JX7lz`i*Mj&4jD@y8Coq!o*0ow^bBdhTX?*zzui_W=0Z15Dd0kM{*tY|1DY$gD
zMqk)1h*uCZC&3*=LQUb_W7Qwp%C4m#px$Mtt>xmwcvKjf~`5y^oTlpO>i4veuD`g7I
z`dml0wY9mgTy1#qpc$#}9L;xjc8(uhN}*sFmNg#_4B{XY!%^WqWW6fXzSmnUER?G=6JVRj%?Cg(U`~d(ynVtA_hvtC)
zc__#deh64n_H*{
zmEx{=Z;@B3Xb|KG&PzMype-HAzy_C%AyYZvoi(oTJNty{%@i<o|?kaVC
zwfnra2~P4Nw>lWKz>L?_!7r@uMtBa079$)?M86^j#yJD=N)MT!vAit?r`=y@>7W&^
z7;GwH&l(t62Cjeax}onCmlSIOMf0loJwI@y+<>-4p)IiA9ghEgd%Sq%)u}5@f4%1d
zrUquRf68OcWE-@;yIYJG+DMbp&(B)KksefkP{^YA|^WaJaGu#Fw5E%@)&WbzDDZ7$joAx
zzceVO;EEE(zx$2z^8gh;*A1(@Vj%};PHE3UI)8>I)S
zKJatx1q|DVe3}I7eMhbMD%+i|m{sI0jO%5WwNfvhUHg|(q3w+1h5O1f@j6SD@22oN
zf4jf^I#aZ?%yckq146_#%dR&WH|M3mmNQahk$)lJWGA=y%HQcBfutI^-z@1?$;
zZT-pQ=s|YCk5|C*zY1PWxwFsw{Uw7EZY_mmuu;CaVZ{O|8EFfRbs0r3*T$69wTK?j
zd$UpGT0B(@Px4H{uvvWB8kRtM6?A#^(%kxiygsh1(b$xS>3T$|CEBG*$_nj4taV$7
zZ}dc|BrtoCv2^fG@rND!Pe9bC=*~hZJC@+I&#`C1E8;>n6uS||*!a24Ps%aWz&Hkm
zy#s}yvORy?GG2ybGk?Uh;6@{-PaOEe)y{yA3BGYlU6AQ5+T83jzrfPK*g3TSClZH`
z*wN+YGMuNb!&^rLb0RpXTZr(rkZBigr|;!5#%FL-uAyyW!4bf0!!x~ORIK&7J)5eo
zNL70H6aSB|p0j(`kB@1!xT$M5+x%trq#S04oGf`&kBhMVZjSn9+dfC{9Oq;_M~)IQJD%?S?1e29+DMSm`aa
z`h-d|e5Muwpj6%`IqCx{rh$ebeqNOpNH&C*b6O1bgEaZX6BO#d-%WaLYphgE%h=G7
ze?OeRjd)J|MD%fN@Cc`8wO1lmf_#oxrRK(HFUltBBwwTF_fjC3TvFC`CxuzJVzuq>n`;nH6Re+klccI%q`a`6grd%TR{QJ(
zOaE{AHN(5>-&KB-5G6L8kdI2jx7FfvkvP98Pewv?=G%8XzPhTD%0tSPKWI^
zasub;@f1hp3{qFtvhEM#hXX
ze_4l2tkEl`XZ!wC!~8p(W$%q1OZTyI^MR-9Xsy2=n7TnN22l}rY@f!}zF0M3VCsBt
z9{z+eYWQ1Pf+wUIevy}n-5Z5_titAf2ni0(B-kD2auJu?kbU1iIjFh$cu-S1X@4MGU
z?!`lcubk;&;lp+&VLO~M5+5GUQTLzY27QW5PK}E=Tl;xFVP_vowM!JIe}n2g&;=j8
z&xvVHKDEd(wPQrV3N!-4X+@CMw|4XS&`=(=R^u*)DD2su$kcILzMukNP`=BsL@SU_
z)etu4k;Ph;q?G>~1E3&u<5NY@dVD3y41iE;oxzdY4OB0-jLBNkhXf0VSkg5au5$dI
zMKYA=))|x;wB%}h{RA3rQCws=5=h{xmiuju6*&FiR`%NhHSfCF?1!qX;r%0rWt0tlF-cT`eLW(uZu;$
za`JZXqRtncD}$_k>4*NK)@3?0V2-kou-pIsW`o)Go>_&{{Ybmrxp%DFlN3XPUclox
zzmge+TO$~?+NJqKk&-sa^fl?M;bFS+kGqw~04oB~=6lQdb`+3gY^2Z)LlsgVM$U@-
z@cY}39P!Wzv}j-hlbl53i|Zkvtu7E)-lXF6v0^SZ_-c37mc=!3KW!CDXQ)Wut9M)-
z=jc>Mj1#Rsf~bIjhn(^`)AC5-ADK;zs*xAL-+aN
z0?0jyo=rAlcNEF3>INb#`cEXMD_>F_CXJ0#0Et+4$nbcIQ7fr6DbBWF|C%h&p7^je
z=VFRCd)22m?9B-`A)f%l>xQV2$WP=YA)C$2gy!MQGEGcn2+qX}lC$^ti&W`p6dr7S
zSTOtG;EZ^HlgVfw(HN}=Z)#=y6u|3z^w4ApgMbgM959(8?5_)vRtCR*-ZcMQp19gF
z5k*z^1-dF{D(1*rz=x0QdVLSEtd-LPx4XqJhw
z8R2khgoqEn=_Kn-%Q?_GDD34%C3%)<}51vN|GwGQ!W`R_@UwI=5gQmJY7USg3){b-ZV_Tl?KFYxmCG?2`nhJy&
zr3{5DP`yl#_n%OZHp}26klIs?4e#?fpV`oh`Qts_6lDCui{V4nz6+QlfA`$
z24WPuXT-voO{9vU%tIVui~QKaGFY_U?{qVVZ=}6>J%0sp+N#_dAnvtEuuP-$F;4o4
z$rA`k)q{Zo)H%8aYME^8Z5;JEHdSn(pD+Si7>lQKm|X9>f)5SLd|)IZ5^gWkp*LTj
zt$8+*Bc7m~7RYY?^MIoKg(V;;ZmD(4NJewDe%<)f5AeC>gQ0K`>MUoWEdfas2KG)m
zvBm|>s0(~s*2<&P+sLS9A`9gQ0_B(I)48#;-nsg!P8*<*7L$sz#iOGc-{ebzW{#Lz
zhG8=gtx>YC=yK^Vo$v88;%XGD&KMIke)yeWPd2~mfA}>HDgEh^5mK_lYyPO#8T(d}
zGL7{nr*-HyDvMryTo)!s^Wu+&G)z1dxprIyGfv`QE|YGVs{_CLJd~%sjxL)c)V;UL
zU7j*-OKR2awdWdWs^
zmRd*zxnNm|?#H|?+xZ}(7!LFo?Fprj
z83?!0$RU9M@R^vH*cz}y!%|aIUr3bcH6ZlTo;iNUdkd8!Wzk}TmPXG^jgbvqL`WWB
zd{3Opqw^TgXfRv$%q`m`7o-YQ!GzN*kWfbiB%l3vPTo@Vd)y@)4m2mfevtd?Rs-B8
z$@g|45wNR408kK<^iL^G`|hX_A%Ec1fNYA|Iv56s17VTX^PQ>kLDse#Mi7om2E()-
z`wbQaU`h}t))7P{ua-k8*FhEBzCb9l!@~D#4p|^T^#fdz=tcOMmmwGh$zh@GuCt!f
z(5bUy{><^-X?h>5{VJmlF+{kTFrN}kW5?@XS>97qP)QU|xB9>#HQ&{XRjtgXL3T`F
zmLib=u~eWm^U$Fl)B=WJ$Q~(!mvy=mfFDjaWGrlwHK=ArR-BKwN|1
z3!Y9SNF~;a6S!R-+K;;+9_-MY#|1n`omv~?-P9k6h5e^noYe#8d<_oEfzMbC^aO=;
zI1!U4Wni$RiWc1JFaB)YmLo=pycS~cz(rrL6c4i%r13Ma!72CXXk{d2BkkHOcS_DW
z6Pw<|P+gx*iAT3Cg2}c4#84Ip18=)kE98S59tL6}Wh@EYtzs(g<-i>(GU7CSbfZ%gR;>yV
z`gdPmgg;LH0K*@)TWq!UEF&_VkD-e@LJj9CK(Qqe6%BwU=gP!)e%rZ{1UqDg=$=XD
z!w}fC;8_MT==vLzm
zpsqqB>+KhdsG>ZYNjS{nX1;HLyZf82RJ6WF&qNT(lm^{14lzrJgIyua#xN~l2$I?T
zWndQbU6Uu5-h(GGU!KP^C{cU{=^+sAQX9(!g1v05jS9nWY9t^pwSy5r$~WMCf<(#V
zpwLkH`#aR}2&ejVjn9R$AZXfuECl2{LQslUK4Mm3Dd@=zA`^FZ4iTp!#Ir7^Un7;K
z(lzPei1C15kz^he9Q*?$Ukj9T#GuS8bM|fVh%8+4Y6aT^sjeIbVxLjOb^(tuPvT`G>8r@|01>J7B^NJltm
z$P@Vw=37ns6dPQ2Qr3MCOMBmWt$&obE`!HW?0o+Z1Mpd6EBC;WgNH>F%(ii(uZE~x
z_1uE(%CP9eEe8gE3id<$dQG!EL60$$Hpt28!M88f0$)s%tM0#t3l8!>aPaE?F$m^(
zczzWB(U$}t>aA
z#VS_T++S>AE_}<90*`kaKU)ym%9r_c?&P`S)Zn~VrF^qCoMq@;y?qVVAYu-r_Y918
zB!P%*@gR5-N&?0c3QW2-uoUINV+(_nGeC>(Q_(^e8v`FcO*y6ILl1e
zCO`E(&KB@?SggMt%?sUb46M-^C}rA!$j}c1fidHa^`wGa%IjAk1jk)guHTe$x-+Hp
z<;{nZ&ZBr*>EHyzN|PS5rS{$V{Dm7A}~fL8K0^(9IIPA*A7{b#)*EBSm4k
zJju{feqHJ0Iq39CtFRzli#v;88BK(1n!w(kl6q|Y=Vvt#S{<)L#lRtZMw8nOwpne+
zl5W{aTemRVw)G{Tt@8_Sbz4oUOpo0jbxO$Ywp?7x$;gCZcMJ=`(-A=u#ZW5UL6zJD
zC?AFP+jj!N3(MI03rUY=0)xX6Vn9CzfAcoPsETz@xa11P4I%2f(@yrMx(P8e!$q`j
z2*Qi_m$63+Ov2(tyr3M*JVjs!DQg@&fUz`
z^Z|N^+FkS$0e$rqz%L&gY*St%&%#Il3D#3Eyxy(myRsk6m9*j)kZ$*CcG=Mw>}&S|
z4`LzM<5W=w&$^)kN^=Sz89zXrVh!YlpBjR)Fzalcp9zw;Gvm&P@zir|-Tle)qZ!t}
z7iM58efvPOL`%g-gVnJ0HDY8BZ1!a>2$&EYf4i`-FxKEaelG;Z30?pBlFz6G@_~;9@Q4Ppm=}TFHLKNAx7Z5NLJ%}lI
z(EMB1>n94%MaLpc`+G?3p4#!8{e2;dmmFXe(z01X8DxT<>L7<+U@@GD!|;~?IF95F
zMp;juznMO!0wx)NennK~AzN6}wGdc}l`a~O1#ln}>lQrK!1vq?T?2}SO^qLyE
z;i1k#$p2yPE#s=%->zRIWC==$bfbuXlo)gif=bB(L>dtUk&;dcX;E558ihrP($cXI
zX<-2Z(v5WYxu*a7KIc5=ym(&T&wk_nxVIo{tvToQ8`l`$v1X|hr$(!`XWsG2J%BQp
zDh(n?uuwt|!Lxu)*opEcSZOj9L(6}q-6o}etj^qchgZuEs2ez&goFJ->jG=s^k4qc
ze*e>|3coBGUIi%~d1r)lG~>odrAC1@DM2uofk^~`403Q|ke({Qz7eX8YRr}SvU^!AzG0%Ct1CGjR#j4ECzAM|l7$efS#$7~)Qbf=T7eLrq^
z_)8&%0`6XX5795%DFW(xLciF~!Lax>MZ_|Ep%yXl?^s8Aj*`)LE_Tffn
zPHWZ^NN3_urB6_9s1CSX;{kFoLvPXk9*wx{kIos5ZepBF2d^)FiChA|Xdb5Az3UhI
zh4Df>c5^VZE5?$)%!B11<{ApM2^0Fa+}z8=0k;Ew6q+^vJlrD5@;uJnTnW~(KjQK*Ev
zy){hDM3Jg_&eDhO=Cg!EaNQrhCU}pm{&KGLYsIg<+Xacfk=ZrUW81TC*9&CM^^MLN
zx@4{Z$Q+Dn7qr9%{H5L4koj@6{9WVg)1J#gLsGkA@>?qq$JJs}nmZcvCl3g|B7_8-
zqB%3(JZ@)Ym_3?!M5&4*d>|=!wBA|(A2r~ISQgQxaD)}~kfFqy8O2(lQhiz=z^z0UEIv3NV1(?{q=0Yp^l${uCqYAC
zn7agMh?r#W{TBAQQ#@OM*tzAcWR#Z=Mhh&D>zr4Uhw1S?OT1Dz9i=rR!QdG@*|o)j
zbokc4PGF^-ZFko4X*aq01RT4lCx`H~)+y!MiM4dQS8@tYx4?j}FQw?Y6DI8WI*~vS
z5(z7FmHl8nKwfMgSVY1@^i@1=$8d1yfI6
zQH^gJ>LrFxFHGHXq^9<2<0g_5Q~mVyD+H3A{Fsoa&z9~Y#rxT|cR7Iv=(r)natB;l
z_(FcZLde{XMN1SXzuJTY*|Zo_)|@Og`xz8sd?qtg@67a23wCC36cCjx~kR
ze)kODU8WTdSd#SEMp1T8Vv*IAn#F5u>5cjasCbc6B&)>&?pBk2XU=PHCaLgdjZLg1
zsQq$q26Rp9V!Kx(*d$(*OI{{O`57`64gNr7ZuMg9saL!r?Dq@ar1RD9J?7UMwRd3G
z7TDNmO~K^v*1b5(d+OA~@K$(s+wHjka^;CzRk>cIGoDUz2)uvqlFTmK2km|P1~!NI
z9dY-~gvO?xBhyzPB*ZWw8=j7(5jHoTK5ARm9qHr9i>MF0ktm7?h9)n~hkdzyT;okQ
zZ}5}|8QRMV6sk&VbWjJ}4;Z`mZkW_O(!c!L)289$mxkKRSnn#>8EdA>xvd3=z8R^U
zugIrTgrS?r?C-8tQSxnw%4ef2$F?9_)_wiT7hxFXUGvqp;=7+L;B2W|;`j6K>o
zexs>Y&1N{VOmzCr0^2h(xvZ(>;d0&%o6Qi)$S_fvgS|bhyHR2m(Twmx^rKg2y$eT{
zZT2PRUeZOA3x1SMuJr8+HV(GBg-H;Z2TYU%VB^|u2HcHLBe=v
zoL5k_Nt@eiQdR92LC0*N
zpW_bO8~yLj28sY7;RcsMw=DA{R$msck5=T4a@Z4NQ`u+hQz0xupLApvaXA)*Rd8u!
zJ*Dedx~%Kk!1MQ=kq4;Ej}Nw)O`C9K;*L3ZB_G9ZY`?2Ys3Z
z37x7*xL+zLaGwIDW9XOvm&k%-C9isAx3A!opY5$d@)eVnnhb59a81tmG^(pT7R{eB
zqLaFkGzv|LT8GrvdetW6xAa(N&7VJbcWcGA)!W+9_2#1*?0uY_T4}
zM*An6+I!V@mj6uI%Lz7`p7#A+aE?)ma#Cu};%33kAkjK*W%!RcjD3fo&%cqI8Du!J02kB)%%|8F7@JO6FSj^$#8GI@2DDHxujo8r6#OcbUPP^
z1MUBA`?7()XnXsPCm)=D1N9SQ(B%%C#n*;l&kAGlw*~3rGS%dsFbdcMYq|{|15ros
z8oiyS7R+bn;Hz~2fZYvJ8rk~==a+wf>z|(TpYki%so9+%1-N7WJ_Bp3?4%i04C!;i0WFP(LaU1Q3<
z_x`%F7nz+*Z{CowCMa0H%j~1Aifai;nS#e8eL*0|9(s}0I8pVB{L}JCgjO`7I^!D=J~c$+w1Fnes+d#d(-h(S2nxhnA0a=a;7*12(f-0U
z{2G>hBiB@ma3X`?;9=0C{^R*R=as_hz55nJm$uRe+le}}h2Ez^GaaTSc5)J-Hu>+P
z0sDfX%7z^Mg~>*4EyhCE1|y#%^K#>$oSNu2-8RehB-Zjl-g&UyY3Zo6?d}Q1EbebH
znm!AP9dzGxRV6|@Itg=d$iZeagC;hZ@2|;u0@W7^3Ac^xAmEZH>7jk!qjs@xR^A`C
zT$gqMh>Jy`*0XfPw+C2ar{;Ss=<;|fU?j;Ii+mHdQ}4zim~`TMDj7pVN%&&Jx?$=q
zXbG*5?1-Q^oa=5-7!pYG94WCmP+Iy9a^I({w;l>H6>fpAXk1QC&Qt!z^Mg6+svd+YSkI)O*f6%-~D!cBt;MP=I89ZcG%zMMbnOTAj(P+%21>v4X_8u(^!^mg$J?n*27Fefd?
z2h?sf$P&nTJtKvKY!ldeIJn$zm;In(p6d1=Ah39q`_f^))>)Zn7qf$G7^2t{0dr?$
zhCN(%P|XuZ=An2;M-A!`I0(DquMqRBEz41O&VF>!5)kAm0e`nq`@xOYC{7t2^wPv&U-WDY1*-aNjY16Fe>t>+qIBfca#hYy6?Z)dqiPfU
zjmK4%TC>#{lC}0&*Zv$=$$SsHdW2!=^N$pi8oyvZNxMKACcnGecye;j0F=O}A;gD$
zfp`$=v
z7Ca%806>iUCf;XxGGbpQ`RL`u`8VHF5(kTP|6Vr3hJ&w>m0L68%T+MN;pZmohl&
zR}A>Z_%+xERCZhZ7e>K-JjjodUQ;08HmHcH82$t>Q((U$l3Ih8)c%}2HyRVu-~>57
z8Wk@)nFlboI*D>jRKOT>1570zL{>NB4{;2wv6BZ=bsvW`GrYfxl(xhO7wl%J2{iW~
z^Ep!jiLK0YWkfP0Jp4sj)suDxMLYy}nyXi=!f#M<6;WW)cC#Qt4|pwo0~X;Ka@dB%
zfP6v&GfDB;hyIr`Yw3g)^?;BaYqQWH-TFdM?0YgA)+&7$L~+r~^R=yvE3zM7-}Yx%&35A
zP(>wh7I3|?P7^GK{gCaL?!LIwLCz0%hp8WwPW7XE8??iN0{f$9&zyM+E`c8~WluGR
zL_a^d&#Zc{aRX>~>YaNKkjE@tN(I`G7PT}`Mi#21Jhl^oVs&sEcw}Bw^lmx;ePdTp
zh$H}EL%W*iT$8xL<_Y2X^8p(=wrM=|&D!m8yYBOu@qnzsF08wZMnr)W@NlHSX6WX6
zn{a1VD>zW%-8Rw=q5xyVjj+C~`f}$fRJt30@$9e%=e4PAo95_aIeGbM*e;{v!9eqX
zXdi?Y6*xcQoZzq+tC3!<6AvJnl;@)rPC1@OTY^r10?te_AJc&4iEi?mVJo65BH8hp
zmBHe>;9lV^^h>$rzFDxa2BNrtZOu{1rA7ouW)~+D|c1wiqouo&}
zy<{nQ?~|jG-fAg_sbEjQOA4{1tEc+G6hsRbR#d~5D=RJFCxL4AV7%wS0P$`v$dmdW
z2G#Hte#0Is+rH#mqf1S~XtZq&GrMioRvZAF9{hPl;1ADx>*Tyt%o6r2m%+l9KX70J
zL6jX%9&x`c+Ag{A^uD&QBB_5+#CE79;b&Kj<=JF15WPD=VAi-v0m>?8JbM|uh}h|K
zjA{Ndu=WPp@Ikgps&K&7aDHAirUY0|0Lm&H>IFkn8F+freAE$V*
z%LUie_=LBdM?4=F)olm97@jAs-x6QhjB}X&*;K{{s@XcE5woqP5`@f{p2N;u0Fb0I
zXyZI%qaEOMi|_u(Bs!61dfs4>YCGzZY1))fHA5%e2P!|`+;sH7HfPcbaAAeW?j#yL
zKv)YX*ixI9D4JTB1;<(mXbZj~Cv|pO*%3@lnO-plI}I?3
zyQXz#yihUVmhI>H;;4nAj{OaU7Y1T#xZOkp;Nu5O>}JpUtGzrf&cUr$*~SAwYYzj~
zwgB@J^_@@edOs#<19#kKlDv3|j=BS;m~5|?*$hpg)DNhS7;a#`dv;jfb~{))VK_zC
zX$@XgD;44=H(>dxS~Uu2>^Gof{R9I~qXB#~L3}|yp5x;K+og@tyONy{_4paBRuTsv
zu<70Yuzq?=V9*I-W*+IRct`t-1w5Bv#depOt_~KoT8w9yr2g)mR0jtq!tHEn
zclXH~uy~kOsmb|$DV@)8R%5@yVVv?yJ6$n?4mSorCw+W>?n5(uMZDWTh!SIN!Zeyb
zd%=W0as#Jhgegd+yiREh+gg)7CNOSZah$F2NlRvN$kEDvrXN&0BO!M#m4+QM_=)m%
zug=nkt1N-SgdVjvt=HLP^*Jo0`N7Z7pPEO&&T6zM4;C-PgjjLUKOS~zM0tAEwCpm++IxOHX`&@S%ar=@2wS(F)1D{v60UD5$m=f;a^zwbJ18*7+3!#au<2WRFW{T>d5`9AQyT`wf_Py8TZ||e
zQJO5fyPFq4Wc@K-@lVarFkPeJ_|WnYgUM*6*wOjoPEqajdxI))!Wz7`So7S9nOxP6
zSs1$NeZwj-F~a^lMs&Nv>d|z(k!j+KKq?%3^qxZ^)RgGu?`XWgArRrqCb>GtNBJb{
z$3ko^e7aOjv%
z1B{s8l%F3xn)nM)`!Gu1kYE;CxcWZ&>hJxjUYR7TM};DEsCd{RFWcek*x9{Vquzuy
zHxo~udl(_+GfE+WWc<((n9-BRBENr<=&?mbjZCDJDkRM3MBnBsdh41;;p>m@I6eFu
zIBXHE5W$NZV3SGXLvnVil7-#qo=P|Q@K*QCVG^>(xt|oqs`_{vQ8AVtU)*MSQz{WV$EupHVH@C6k>$_7`*ZMl1usf=cCf>d6a7}t?b@%-0n>f
zCN$AnOwrDpQ-McIH&;YzDY_uV^em{5k)a#5DSY)m{fW=8mQyos7H!Y1C6esS#G$nA
zuThI5gzCJ4EyT_YdA}?<+OUXv4sG^v
zWDq}V@H=MsgGu8%@wPD4l*oSSBA&*}QU^_K(QmyVnTEiIK01EyQ{K&%XR+B3;f0rV
z|BQXY`P80A>~{EX%PZ(8-aM3;miV<`FH48x4TryvBX0o9KGg&LXsWi-&%zPy4IvNb
zzT5Q7C_DL%KkxF`6|AUOTx2|`zIh^P;CcD-+);zQkn~NtGTy>JG^0myFqR+!=*FFc
z3a`#^ql{ItF5y|!AyNT3&34KsRE;Mv!w
z3OnL{4>OGC8rR{+vG1-=&q+OM8^n3|m`!?er19=6PD9G8<^7MMa|XtbU;Z9%
zzk2L<@}Mk!oS)iuj^st9GlZrD7vR>=BHEL`ATaZDyc$)6lG*36N3nDN1`FU6oUo!q
z9WUd~zx-J`Lh`bIW?sc=xmJNNoYV1!9;sKZm{%gLd(76_W7pT(#I*VQcBQt>0U@(E
z^Kga+lu(hRi1koO-t_iN3mstAFE4mlk^>iABk}ai(2Ema^-7YVuwrONX$9>1#6iFNB*O6Mubp6Wo0Z4R#Sj
z%_Z7^;aJ}EPtqxzX+WICp7AaGSQ)3jyD*{xI-XV&vz=h7+RYy^+!gIpP-PG|^j@j&
zoyokhq#dHyk9h4E1X&4VvUKy>aSFs*ja%LZSB)aRSP_kq&8=kP>S=d}I%1z}phVgf
zOE3y%*BPFFi+XbuMUlV=T4n-F6nzu{J8g&Pb+osfr?5G|DKY?%krJ%_C`+B)>0wRB
z?@;RQeppgj3&jnz!!rpG6@ekhWJ9uSB@0em6@GhHxhZ^&f!K6p@yUv;{Z2GaNT6L>ei9x48D^l
zpW|EZnPraWCBFOuvPhs+mN2`hl3n6hC;X3)6`7yNeVd^uo@$ZS^3+bnqak)w^6x^$
z=LTY2JI`;^^^cY(i5MANykd$I^7@5WAC=Q>l4Uq?43E+WTvhA?Y`G~`;n}B99{csg
zS?UYy*UODlU&9Ks_A=tq$pgARdR6x~mrDt05hMpZD`Pa!(}6Ty)O+vs`dOi4{id?E`1Dcm10fVJgf}
z*`Y}+n_sRk!6@GLuYWriVg0hXC>*9p)RES8Wkl_hm!g$ht6gq(ui_BKb$HJ9l90IA%;
zSD7vlHp(R$GsP(Fx4jcARvC%nyvxV+gh}j$?uhsIQn7MA%+GhqXw$Xf?tEX8=bP2v
zr0UM5Ql$2i)PMGldWQ>f%rYit-Y-V1R&Y>CRrOR*TSksxzC
z%4>i}rQ4}XkR;rM83D6k3*r1JSh6hK5YQ{S6KHT$JYLZ_D6lbel!x8_Q?)p9J*=Rb
zA>&i9@k`o(XW_{WUk4Qw&P+pvki;I8&2S?_G#{!odc)&ZO9OFX+=_Ni?YsQ=jKh6x&zs^tOd>MGRNi=>QyVv8e(s7@?Gi7}M
z;k47oYRDgJ1hxsOy3KmNnv<^WbY|4EVy)&ktfEOi$&5Yb
zxhl2RDcz#;yE)M!Q6`SvKiN1*fT!N_cWqhWlz#pD;2#|zpMfm(!&!vue;kVWOGH39
zzRu{N`7WZAy_gTUa&CQFnXA0DkK!a{*nw*Tv%61xr|~zH1H9mf&1#+G9N+Ps;9sbK
zQGIg?Z^xGMKa5i|O~P0k(YxA|1<)CCxEv9sh3vMyy}bbfioo+|(x&31eZ0Xp@^+}y
zwiQCv@FJ!Gm;e1(-jR|N&*6+V`wq5Au=Rk`iGl?z%Po+Rg!&T$_bvDP!BIny!-w9J
z7f_5sxi^;{iTq&zi)!8wuw}(U)1)VI}$V%?2js|9Wa*@l87Z)#om+S6Sgf)vz*i*`;4^n(?
zKl^DoRKyGu+u%~W0AF4Y;GkJ+7NrG-G0f3QO}wa}oAVrQMa{@-=>ZivnJOdmzwVCk
zoQoK>HL6PSvkT<64K4`tHol9hk4V{ZH7LsgJo9t`2+CO10gR!!hQ1&0`CPUax`q{
zRS>yg`Oh6u*Hzzr9=&9}@x?`6;B7oOdXH#iFya4%*lqE_RRqpl?)eB0#JkX%W;$Np~0f37Xjago9_Ps5t6r%xNSnI4txS)
z&%!$RsP9CwbT)~|lC#@@)rN;@3xSTeGdN1KtnV*ezs%t-4SAAW5e3eg=~Xu2y--TC8hx9@u`}Vqe!rYKa!H#o`)70OJXGt
zruE*P&h4*RGU1Cz0a0Ky!-7491K9Ud@;eiRtbEea-T~hE_m?_*
zcSQv0VAu1g>ZZ&XFhIYM$h{L*3e?mRT`Pl2D7rCChdC7%$P2}6ZDuuNGI+7KD{m5R
zfVBxT8{tpEoHPW5Lf7$q9zV`-Z--Vk^%ZI!aIAy2g6Q=(MpT3B_TZ7kfV&%TFxjkT
zd9W2zQgc|mnxHWxfW}GHjW(N!>-c$W&auN8>6&-*C}7K}bv;>DlO}{Zk|fhVah36c
z&Dq1ii0%~43IR_}R`}$N$)iSVIXvvBOeSlrwE?&mJ@@DFwj}V917RS_Ixz9@yuA7z
zqf@{S&qs7Y`<`UoWZFcSkG+iV4gv9njah-N=bd>hj0g8lo~2rOgHgk&2J&`4L398i
zvmCige@x88+yRm@zip(8bpTDkw`qa6D^wRZo6e{^{i*S(vG;;&wRpi!3wPF{9XgnB
zW#^2{rMI-SoEYm&keU?BZqvza2{(sU@s-N->Yqx*<#6-4=KNQrwI*^Eyg<^7xZ8xy
zZ|S`N7pR{(kAtTCEQHBNNA27
za@b3luOYRkU6YTu3i@%@N)*q#QeJ{>e`KHpI4Rf?upw$wyFzbBC-FE$K)^!8#xJuaoUCjISRo81jAay4;_hL
z1bmL1iq<^fnH1hSKn#$vYs*1i1;oa+i_Hg{JEI#0QbwDD3oG4lqg$ZxHGyp(hKr7(
zq+5EKjPSwcIKG_lpiCR@g^3#+y<$E+#;>eIwp)&d(|umi!l=odr-{$Z&HMBJV9kq|=dAj|$z-y=>dE?!
zfW4q1oGl=FJQp~x-4iRz*Z40oJw!8s`-1GgWms2gpxiB&{H+k9tgf{EbGsyx+-%qN
zWbv>e_P$+Dj}PW7ZinG}x8;$E5lVR(&7qBIt8pI5h0@(vV8h%D09El?hKtmOQMoWY2~@iF>4%
zS5FR)n71iuwU~r6M3_L+kAT1dy4-0#_dVg;8%7$XrOL0_n34-#ZDB5|z6xt^|ImG^
zPe1Rz%8X1e^y-ML*plsp5SfG>AclN|!?2sjf~`e}r6e7Eq@v
zoR>}U^jz#rnLh<4j2nl;0qNJZBs!(+D3$14H4Jc?AG7~9pyeXOLFg;iJ++AG})yum$RJ!uzZ0%f5iB)uMxVaa#Xm}Pz2gz{m#-~(~XkL(dH|*va6%(PuC3Vw)73H@cx?O7NggZD8&0I;maEA
zK|*+=xzvRC(|u^TN=-BsEiHwf4wn^r?oHE1!67DoXpu_JZnX=*LalMHVc5lZy<)9g
zc_Q-g96O_MYC9JrG{E#)eysH_UAU!arxZ98>UJ%-nj(arMxt)?-r1SH3rACG9BDBS
z8i~QMqgV~32qQuuI7g?8wDT1U;;;Kn}~3exbrN?_~lRa5!22YR%4b(L917sk(*g)aqLW
zBL;lAZ`2bW`*MB+F){Or;K6Rj18QS0S&~}(OZ#UYSt{3tm;vbqok~IK4n$y?Edn!k
z(jt`vE+dggfZg1F&r64M3AjI78!~^^GDtA;d(XHn`&8Od3Sg(#e_JGDaQ(n1&Ve7%
z$=!*u^S2xOnX4hWJB*VG-x1h#**Q`THeG^x(YROG&9j6);d%`V{`;m39bbO2?pJD@
zYA(C+EVBI9Ts)S<4jzobLQ5Rg{QAL3d4Lb(b$SB@D&|}7bq18rgh?9XL
zaY@(0F{51_Z_upJ%B{nOJ;Ucj?P}@mv4ia)$_2^WIQlw9>5f%h5W}v~Xm-zg4ZOK!
z8{A-n$`iTLJ@nuUK9hHwASoU38C|j8XStTzfto!KsXguuQ>V~2+B1bG()Oyl0amJy
zw@ufWfVUlLooJERoiSN`Qjy}Nn_jBVpRq`WR!465Q77oFLM}2J-I$AYV3u^h$Jg|%
zI6+Z=64O>XTH^zeG7)*)@?@m+TR3Nn7tzmko$Ldh`v;8dJj#fTS&NUPJ(d#z60VP3Who#|EWl5by_5*8tAYZCnbEQ70_a|=_jyD^DrV?f8Dp?)Sj}KRNDVhQ(?%xrJ
z+4#i@3))N3mT!Lihreh650^Gr7U4Wmi?AhpMJJ_*gt!W?;e7I
zgz$3OrI%FItI_Iog-#Gref%(!Oz_AA$Y#JNdyvPYFB>5*ug051zHe(k!K|w1_}S(q
z_=?HkS%bvrN*XAiBELTVKcL4f2J5C=arSsn+7R(zW!&Xbc>1PPO{~SBf(Q-UI8w!;}7|J4t75eNA#fh3{ltq;G3x@O+xnsu>_
z$%ul4C6WvW_er_u-q!{jkTs%_HrDlN-b>Kx{6iyEF7Oi24;R+Q8-k|6Y9f~%9lzav
z7izq5(@1CT)qGcSJQP^JE%Y>UHBqM%a`GjqEh+j>E(r7s9CKLtpmA#4-M}O
z0}}S0nO;gCWcf;cm7R9`Sro6*PS)blHH+fPlj5Er&NA2AEe83Y5{HUqqe4qd&Axj<
znQ?e4c(LC$YL?ltqYbLPCFN9;rTDVX)oYGcuc$zUiv6E-B?o)$42w=$#4(3d%cfp|v@doVMloBhZx7Ewe@q6J@@b4!
zpjK8oHu+DryN2^U7S6Y~^4*Fg{p>8G`JJD&SHN=;3tD$exuXS?$}=NnE)(L}B-~~M
z#2<@ymMXzeuI~|Uz939vv>Sf&=`V$tEL>{w(fM>Yau-t2;|TtdfK4{B=H5L0mxBXZhhWdwD~*Y4qeiMDCPV
zMr?Chp|mLqqS|z&#+Tb?RO++5hgSnb(?2El@>$t@K{R)bN{#~knDGSR54mlZas
z1S{7#DX)>Y;6H3V82NuBK>LI52V09=)I2fqph{X5tUPerF-WY97sVdI`^O2dO`*h>
zx_>FSi^s>uaXth?WUR*#<~2P3ltVNzO$S9A@X5I5`SE|TwAUwfliep+H%8&M08N(*1+ZuDJWcU$(g4BL7_WoC1=4HOQMK5M}JKVrrdG6
zs=bXe$63|v2VDD)m^@2>{mF0SBdNuFr5t=|HJ1iuIVdxq!zoycn2LQJZT-ycgCXU1
z*$uhMBK1GY4)Hmhkwehy0EQ^PGslzA&8MHo;mo%1?rCfT0PL?}Y5+2jqr&3-BFk^S
zfBfEV<130FyzrElUtDI|=r4AqRqSmK*#gG5<`cdk2JoB9v7l`;48`+3QiSyYVBBYe
zXWh4~UU07e{q2ag76Cj*1sM(tdekVYHlZNAS<$kWmDOh>;?^-AOl0vHzDFk=;#Fuo
ztT$rE);=Yb!4tnh6rSUW2ts%J4J2D$QT$=edYy
zW@J_afyTS&*OV+LM=L(rm@HmN_f6m`W(`jo6XG7%)T2-z?M`o9yU+1PT+ZWvCHlFp1T8
z$#QBeT5Ugv`%DEwrWC}>dnAq2;PlFkN%7Hnr{u%>G;NRKZA6PcX(>0#61#y78rt%aZVB}z~pB!!oVEZ?reft&s
zgJCos9S>0PP5_RIe~kM0cKSzTR%@uyIG69R>t
zQb?QCMZ5+eY=o5|4nV(ACobPWE$0lngFiKv;
zBVe(BWWUw>SG;qwef~Uplx?Tzx|$=BjAaHC!y?4H(o#Fi6{&sx)1C8|RAO|%{dp;r
zgl{A47=X&kpy@{a=0K`nTDON{qx%Pkd^49QIYMv2p&xyXC@9#+n7?%S1B0L7aeBdt
z64Q7Z(BDiwiNd1;?0)qi45IQe-W5PNG?hUdeJ+H|@`2r}Z8EPG{T##bvK05A{@1L3
zc`Z=U?nFK1nQTJrAkWP;fIPR82O2!qX28gG1Qu4pdR%Q3t4>+I3qRxdtcyre)>o{o
zu<(2_IE{4uVtgpo`}4lBoC?OvZfJSBoTXnLW$y+r92qgESmkW~Hf;(k?E%ryBcWtM
z3@e*h!?8kv5V#Q#DV&zPUp?5zx^eQQT?lXb)
zzpeZ{{}XFM!$&k5e$KZ;$v`jvzL#mY!?Fyu0u=8h*VbrrS#Xwsuk?FmyFPQNm_6Az
z>%Vp#B+#oD&g!^&gOrTy8ozil-IG_oVFclT)(KjqWZJrUrc%0~a{X%~5!I#Pw?bx{
zXT0aaoSVwmpAp%xp>Xg#);J(q;v5iwe|zotD4gLjQ9|%}prUBTK8o+aC{sM#pmy^3
z5W^B61ZfZFd9Rqc9EHd$-d&|3-477>?6aYg`%!ltPQNB&7PFLIGEhB#$13X?_9p)Q
zf*1axZ!VTiW+;VIIvOg9->k0o#+vI8(}?BFnv*r5Vi6R1*_dxV^NcUcP~F34!pW3f
zFo2pv8Qqggozs9a`UhXgCOMugwe48ZtZuDolKyeT(i6iJAT*74v80RaCDph(vpi0n
zTs6Ucb@{v3RO#q(=kCHEelRlqSFd|@eg8CQc2Dsvm1Ja`w~F0NgL$*SHpvV;&HnKW
z$qkf1ks~6`$!+{s1JBleqRC-AzvGks9#%HMED7Zc6PppD+w@vff{EK@g|&r7#R;?oK>C5L;V)rJGf3AaEi-l910w`d3sGK
zePJfbd8_IB6wjHo?myk{b)8^iM@QyZYZoARRRzs%*l&Yub1Oo3QF~JyjJ^4ak56H&
zwPU64BugzZcbaMtR#oBUbUY*)1N*sT+|7`IPh2UzUjb
zMRT$vt8k_nUavTo0LPfDOH!YtewJlqunkvxiPKAaCn9NpR@?xdWVYA_{)LnsMUJzd
zZp=_E0H2X^(wXUk@yplEsem}poBn1TzNnGiWO==|MNhX4zfIVsFd_92d&8Le(q9cfR4+
z8fxiAf18rc@Q6lH1i0Kk&`>G%HhgX%YN5|+za1c<3iufvqv^@n^4X*wd?jCoqX6L(
zp%N0Kt&4AJ0cc`+)zViz{EZ(q7S8(?cc|fM;#tVk~lo$>Bo3kDTNuI+RHU>%j&P63e>Ql5Iu{nUIogUZit&O!19Zz=ADeb{WJGE~IFRa|eXX2ABYYTG{8mGp
zHYCZQi^t$CDRD_l%ek;i<;K|$uj={w`j7eA1wfbjsWwb0l}R@Eg%+;yIPM}R>&i9k
zhbS6wC4sQVyHKo^r-wdDFuA7#3#8uQybM2;LvSx^u`K}uW7?}L-^8$ukn6JvJL>3I
zo1G?1QKW`NIM?&l!+M~YIc8xwo=tcqi`Yl$>HQ{=8v&ZNx(N-nBh&Sd0=f@Xh!H*dOvJvCRaX!QUc4o%*)AR8?SBUR?S{n
zRiFcZKgiN^S=uk!-P_BKd&44`^q}8tjlON
zn0xtE3%Q8!$U`mLRYkB?k~7bAFC0Tp5ZdH=TiQ
zjpM_H*uzN)S@kc8$gpc6>*d++%#Ra
zi=m{;{W<;C>&FMImZ`hq^iWcS0JMtTS++tRq=nEM<_18!og#^yFiov
zRgjM(|6!rn=DRfF3r2flLD5BclI6OFbZGm(@r}9x7jGifxFpm+bH;F02j3RNv;?~S
zUWQO)B~3K)=itWLzMR8+N%$Q$7P^q{DELAfT2NbJT8!QpY)P3}plZPx=CdH#+!DP~
zJ=8xvnaU748!_u^7pxsxmPCLEgEMb!I=Yr$Hn%59e$X4FpIjW4M9EXr^GVYYAW*ns
z0m(DvNwtegt#90jaP%Q5xl8`#6RT%WP}&_v_rJFuvbt=V
zJ41qc!Wv8$>s$Q|mpElPhcOJxXN6`!zn3-P3M#%Jq^Ej#
zB&-4sPc)iVz1!f6aViDnTMLj2f2BYJPxe!yHBkQOmGinfL#fCnt)Vs}Y8U}5W4dhy
z6+YTMF??MA7tBY<*$Q{Y0zioL07ASz2j{CQ_=eSB
zQMNX9ehM}bLSx8-KHl0U_5^ynJV
zZ0v@|O%mk)lS6{aK9>}@WnS!7T|&wYgLYO#hm*cNre0HtSM69S(V;-{?3;i0{D8f1
zzj|+mQPfN9o@OXmnpASM^KjE(Ds6?kFF59|+%Q%Xs3`S&tDQZ~NIipmxQ}0*Y
z>Ci+^t&bZ_L`(T!upZ#KC24qy>SdjDK{yNg&cJT#{59bE4taR9I3gdXWh2I!gjBd%L@L
zU@3~Qa3P(>1_>K#5C;R`WAgYV&zFbwes&gz7cEM-uA*F)2GMZR;e~3JD8#G!kCzD|
z5_YM~8@|FdlX?Z}tB;DUxWR;@eM-Xx;Acp89FlHax4jPfmzeWkHVFQ?l(CGvgZO{V
z`;c&p?g^}je;uo86>LHvFUyaQP4_kPK~P2bY_Z!0joVVO;rR;}rdAW-u*Q+DbaELI
zZnSFSgt1%;99fOXS+w!?s|U%V#&
zqSEW1qyiEGfQ8fQ|0v<6IpP7WL+`J5gAdaDNUU-h=FPhG6!@^B==|mj8?F?MnNFMO
zC%<9Szeid>G0kUj{E%}k(?TMk3c*&PS(t5iqF@;U?SWQLV3TGhar*fp(BfcHd<5+t
z^LC8*R{p2YT|K$!X9Vwmrg5F$HRIaPEIXxXKSO<&n69rSLLu}gmQt4$7YTQL!huMs
z{VsN`MZxSesHXc0)vEDBw2%l!_)S38;cB
z!O=QE#}mtUNJ=YksdBB6)kAHZ;>W3`k0oJWWKW%xPKCnFQ
zu3iOOdJFgiIn|OV_!@6s^AqN2oS^_*rW+LHy+t0z$b?9Jmv8{#s%iTJld*+L?fM%K
zX+pTZFoQu&D+gt(-I=ElGVu!%hDZgrRgKKFI}}ztm!8Qfs5S*G)mvbL+Z)3Xk^D#Ww3$(jO
zFl78)GpB(1P(0?WY
zmoO<4UI2)^h4{)znEg>-p2k5n>^T>VB&u@+@57xdJj}eyEO0uqs&bMH<4*Cqa{Tuh
z-4JsqkOI(X-XmJcKzuZ?HW#}%UdrUaN&F^17~9Z>uBo5*p}UwFKW7B-3T=<)WPPewy*A%c`nE%(j|oi1j4(Kso6(e;k3y;8M{{)%rYb^;)cdE_&&ym#X-oxMTqaz1KKYB)Qz>ZL!UV9
zPMyzcCU&?F)|oHnvv>sS7vJB=R}<0y-uEqmS!jBjTdyd10eAmuVZ_z%UI(vT
zd7vBBE5i8|=%p2vtUSeq*}8>(VnXCcHLh)CWM^Sb-}?5EZ
zf;kueF<2aY1DsIrGF&g7%QQo6Vvxd`M=7RTauPPRuD*8%c$r#M-1_e#hyVY*|9(?W
zJbtBb;-R|C&fC;|38oDaA#00$fG^qijqtFYeFz-tSRDLzQv$h$^m
zI&hh*Cl7dA;AZxjpd({I?EsEL>etRqN9y3Nt^w}3y1zS8?@j3(;Ka;P9W$CMdnjSK!*XwL+0uAU6qWpSEg8SqTv3Bc+1)%Oi^9|4yu
zOaU&}@cVmjU95HHl@$|#=NtL}S2M4EE0A;1x+iyTF7WO+U7e=iSAd(Ax4I{^ZQ5V2
zRx0_MQT?v!v6dd7W3$&UU9;=Yqi)-)_mAF5*)sP?X_7p!i72jpaLStyfjDu|7Tc8^
zhtHmVE>kCG=P`3(I&e)?(W{UvIf*RJYmS92_mfp-_zzqLoz>WR{3UQ!h;P5OKHn$c
zTEwjZHo!a2)enXOS6b_S?zvt7JP92bxl)K6B|dMQFVcSP~IGC&DPg;n!x?+)7-^sH=hHY
zjrdSqxY)4O{nZiE5FKFiNnCk~(gnrK55EEH_G26q1HT`<{(1V9+7FBMr}hLUMQ}-q
zhJ~~lw*Po@(|8l`-W1V>!uXblz*(DBr)MllSZ4nW*yoxv@4E8i{JECJ*FJ?RZdjx*
z{@sx^s{MkrSXq?qJzz&T6gi9?U;Vy$e<-`oaHRIg<9
zH7I3XFZ}z|SDSR;Y0}n^YaKOOKYZn%(6lxB)Xvz~TO~w(yBjY_vbEe%FbSCR1S>%!
zj&r{Jo2eQNy11(S)SIQvw}I_~juXMKBW;1lK!didP5GDr
literal 0
HcmV?d00001
diff --git a/apps/www/public/images/blog/flutter-mfa/flutter-mfa-thumb-og.png b/apps/www/public/images/blog/flutter-mfa/flutter-mfa-thumb-og.png
new file mode 100644
index 0000000000000000000000000000000000000000..5878eb9398d698733787c4d519848b63498b8865
GIT binary patch
literal 519345
zcmafbc|4Tg`~DyyTal#DB4mjo+0&wwY}vONEkxNyc4I9iDY7S92-#&F#tc~!V@X07
z3_@Z?*1=eQ=b`%aet*8-@9&RZ%;b6IJm=i!zOU=LuQS0qT57Dj4(x)#V60cKsOrLC
z44+^ydKpGq@J_wP$1~su6Y`3QGYrPe3H_siy-L^*gB^xlRXwlokuZ(D8yo+zIxnjz
z(e2JInuz?
zX0}>Cwa4a2pt`^)V$%9kpH%g|u?J6^3%}U)?OSqxZO=XR^K4MtK~iXhS)xOhom*Ix
z9j_p!m$XZ*tvoc0Gto+u$1W-1c!lRHyV2>>9Ys^dnVG>caJ6y68I7iK6BWB0+1>m6
z>=T!0L!>Wjx8`k}3u%3SlDqt}0O?HQXibsK2c!*4P%yj57tP@3lgGHr6Yi#l;Cu}T
zE(WAyeLo5J`xdGkNuqt%N@S8v=1tZ#q`N-c;+OL|zv}wAz&x;Z>}bb_h9aH#*a`I*
zcw=RyPLYpKTu5s?Y6!7zxn^MR@#{PqyM-@PY1viAf(uEL7jP6eBlAX~YKQ55Vi
zFAr|B$9|iS9xHVmNi9g8#XHV3J1nnr`01~@DwH=l44IF8i&yRM>3QXCawp`_#`svp
zkC~7s4~NuPiF_Bv_S9f?=x=y|Ion0VjZ+z5?*583d_;sEQ3B>gd^SZx{`C$Uk^xOe
z*m{YfN2r-vn^
zf4_)C3J*I(BGqhU>5-E9G%pbquTyEaZrmro^}!d2`LCRZ&bnplK33-uwR#&xgVqzd
zn9dR{RVivUmzR+Oy&tL06WA=|k4o89v(QY>#RW#phU{tU1;eB0(op0O+B3*lA4Z~9
zkRl)11&k`QPMLZ33*w_z5b7vnMjapcAB<*@;suQO|8^61p3@c;JBeD*C+j!sm+0Q9
zyXnrNIdJk;ZekKN5yuETukJ~o<~p+X?>U5~$#!BIOd2Z7pW2sB3Kx3;9$Bk4F;KAv
z`llQ)J~SZGi^FQVI7|sTzIcJu&iv^~Vvm-}d7O)g=^bJ1X&pkd4#FJHDeVyrgOMMJ
z!aBvc_4T*b0j_8bErXcyX)YozY4J>EF3%h+U!@!V
zxU&4&x#*Rl&ajsXR*9!=I^{h177E=SfX-h-2*y`F=1{DU~atX(ZH^^QBCB6W2Yn?D-ah^DjK1SQgMiaTT)o0Bc&6L;$A21
z`{BFtp(t6nXz~8gF;lLn30FQ$ZlLne(BWf*Jr`{B;siOjA_AJKDH;O)&UQ@u5|fN>
zL6I`FL+76GILw{&qEf4yo-i+6v(7;b-ThgFr)I3UXb?Ba@%QCc{s)O$>&FE41{B9I
z@NaP^IkA6Am5yM~0VeR?)tyM!A){Wa7>z&MrGNn`84v9U;bFu^AnMo;{<|-a3~Qyg
zxWUqwo+vO;NZzUL^)QN;JK9XY`Ea01z->2QtWT%l)?lGH>Y+n-4*v>aI>ICfVkmB@
z4z!daSMX#f6u`s6DE7_baj@UJ6v0j$pU!zci<*&ioWz;3IxhoLxL&N+c_F?*!
z&;wDS8Q^eJAS`nHcooOy9?+MUlcU->>>wE6G3)To({m8^7UcF91E)3dMRxsntefL3
zV}qf+!_r*$wo=FO%4aL)mdMENS*JqX*KYIQRLc$;ZpjTVkNe`{bPL%I
zi)~K}duNyqVx=!pI1{;z!z?tpN(&f9Xci`q553ah$jdRl6Q4CNDnyWNe^W5ATpXVi
zn}**>u!6z6XkNG5OnJwBuNyN*d*T@T(Z=H={^ph?qQ}RPmzmNhN~!*AyXi}V76`;ORWQ^H6p5GZB<8E+gEcS;z|?e4TD$R}bA(2q)F!(1
zV>?6R;%n9qGU6Kap{xl)dd)|bbZlTJxR3hL&eNmTBf{>6cP^=dyn{;gNAadvTQGqD
zh(s2s(X;-E?i^Y|$iq=H?Ah(~Jaz3W$x*YG??{Q@>z2!OgvFrFtLTZIVT3D@KR=wQ
z2M;3%@JX%g?9Yly(fyMfbwGO7*hftAI4jA>?-0hMB2ts69+x_#L5p^zC6wzmS+=uCbf_p1aTm=bMd-*|_qe3@tq?SOb+Mxr4
zU^64({7;zsdXozWdCr5%CPV;Zs7p-A>Z_2i0Y6wYt!zXu>M^Su8v58|KU2}&iuake
zPx_)(;*T?q1{OU@$vQ?@EWR&l1tUX$eNVDuT{Xw86wh1zN`C*ijjfz+k=rdcq_%iW
z2mdAE;Uwe9L6^jgslawsg_~zU`4*`#DU`ih8kG3;VC1cTg~lxq;!K25E6EjF%Ca-p
zgkw?&6!urqGc11PQg6QG<%AG>bUrKw9Q3~u_~IOC57D9jj3Ssf!GSWd;RPi{CJNFK
zg>Fw|qg=U*dUNwJo4Y^8t*`CVmuC5kcTx3Psl_aECu*UxvcEZpc28W$PGtjaG&d`u
zPV&gRuYAP(%oZ%s@5uFq9(%GZ?`*yxK|tjM4S8P;UkY6B(=2vfc-LWHK}$pPY(BCS
zH*0y@qS)Hd*W__203&fuyHpUAMNq=(u%o^3gW3h@_=n4L##N_jrsxZ_XI}LvMVu}cXpre{eU7v=K_be|jkk4X
zCT41nwx=>%+6qsbRBy=8xCG49sa*XWfXh#IEEAeoygc2^=v@yoS#~w;Va&SlHhlP%
zcM)fZ5~IYe7a#?0=Y4r@8p1<2K7W*;KkDThH7#1g34g^4HnzM~KeY8R_ibOC%1XK3Z``@OXZ
zHD6#e;x1*54iGSSU_k6G+t)Z>r&Wg^IG&_h^I|PuJ7&24$!yOyZ3s(fx
zBvylu3h0(ERe3h$qW@Hut*iceEZW!ZNdvox{5w`2Mn>->^Q=(&Y6hxs`*xy@XwlNA
zyR@ETJHfscO%UM5Ho)Ame?5ybGcxRSnWO#VdvDJB+RF+`u$3~~COb5L(ie0*D`D{U
zReKac{Hw_gg{_Y(kVS^={Rkt3gbv0YLNj1V!)L)X*n<^hOs~?`>3ddXqIa&E)@&xU
z-!03|d&)2q+YA>xsHP?Yp%!+<#5yfu?~LBXLxT!u&uD8sXc)E%KN#T
z0Q)tBn8J#J)b4%$bI%Ov9~3d%xvL`SXM|d!vd^3=lw+;Om+9-dC@<^WXM@kKPFmw;
zvkP)qs~zfYs}#!>%!HIyhaK%U7D-!h7AkO9AV}Icmgiu7OmYua25?_z!LQq(out7Fs>JrIyRXe>Tj_ow07ob}FY4@PEms%W4i{M(@_9z(
zT7p3UszYcC7+{uefY>8FN%+r3!5^jyUG>`r_>o9Qfan{Px
zJ_hYDWB85V0p2p^{SByfLH7>O#su1-gtH}
zxfpQwROWM|@pj3Hf|cI`QN0l}QiTqSJA)1Brz+1?$?yuAD)J0D5hV)mldfYXlfJ3qI)nKLheO_
z>&F#kR1olx1Qa3LB01ZlJh9&rkF(HMvG5$IZYiQh4OWk|2en?ik!^Kt*1B}AeJ#X!
zm{oxE-u0-%_njt;DMez>9Ex)_RP-+WGw=4@Rjh$4-u%4*euaCF*5|F%0ddyV$Vmu|
z%phywGELAVW8AU_Go`(MK4>X1V(mp2lK%MoyZR*x0alRQ(rNkt*yIKjw5#!c)b8bL!
zb|*;8YA*W~6uhOKZU83Kf})3$dbhPne&HaVS0I}{&M;-syu{e0JDlqh6Fq62eY|+&
z=r1a|MVPhvX~=y{DERXDEztTHg(H?MMVZebQsP*Sb^qXyFp1#Y9$_jY)!exm0f=&Of
zC(ekTthdcO39NVxm$t4`MbabfMbc&^*9(i!Es3AOs0D)*9&DKRAUv-fKiMAd`&d0r
zF2ixLZC5FP^=j?Oi_r;^h;|3(lln#5AuK76G%7un7}cC@=^fd)FWlI1CB=h2N2u2z
zQSx%TgYDUCF2y$rVv$3HNqNe&p=MEmOJE8X
z%1K?SE*lyD?EcNNg(5jzkW4qyp4e~J+s^7b6+{FR5>p>;l2Or*lQX)XW?)N0*wbf4
zUoT%U^^4&H?Ijve9cX-$7fKD!CCpc9U4m-PZ*|D6Z@bV;
zB8M&n0ny`6(&jJwj+89E@;?lm>ogQ5AX$?V_=vbs22m
zB%#MuRCH@YL%S9NXjjnvop)19-2qPEdG$)bS$3bZU_Abk1lz@VDLTr?#aI^2)=pBU
zY=vB-SYkyA73c}>@B$8IyH-oY9`f}_#9>Z%-12tC2^xBF
z7*L*aKzu@XUx>%&X0hPQ@0taSS{E5BiIS_jxyfaDji>{*;g9mrug0MvjLZd4r
z{YFbqAm!-;cD?uB^}WSDLd=HFwF`%FU+eQlpRlXp
zH=Ct~%Ch_R(7*LVvR%)vHZxc%x_H`&MuhZke=Xs~q~0
zr{aoud<-M#L@hE7y6N?`dqsEcNL7o11uei8jDJFQD=2-g)nLEZE7bTXmW>yy&Ky7*
zVcGtIlxJ%Ajs(6i(F^~rM{KjwMYqye8eAlDh@O~)?Sjj{lkh}r3o+Xny8J4Dyt`BX
zm2%%ki5x%&_1}Kb&^o)Hh(k2BxXn#>(UY_5^sfR$l7{tvq#m~@cI%$0h~5Ik65mGM
z)f0KR`$B*0e~q9#8H9J|FhY1+P=rxP?px8`7XpZD`6R$TM?f_GhlN7f_shsvg=i@j
z%@g*u@EZ#rO&W+AWveH=e1LljfU|^P7|d#q?o3L
zeg8q_GnQ#ccMj~;Y~^WHUwd9Y84P^**~ENN?k*u}+UJ6_d-LDk=$K_@s<(xg9kkBO
z8#Ey<#~rmxT8tLYd9=rK2`!ry&eYG#;{47{3h|vM(DB)#7vKt>|!%cVEzN4!kb+*LuPzBmO97rO*N$t;t34vgyzWtKh}d$Z4tgfwT*J+V#wg64#n1qBRQCK|xJPq}-E)jNLQ*#HyzW-+R@II;r`h
zxquhhR
zwHVcO?7L`P`jJ^RsJ6o>(>2Q2SC=8cVjBc%CyDSMzz(B40N@dSa%+;Z`(Y3a*?}DD
z`#`&eJle&EB}Ty|P#PzB^AZu%Kx%dyczKL4uZ_lM-@byLxl^kwU<{#Gs0?h0dY=XT
zsoiJxfgL&oYK}{nhUGU%xB)4@@10x?_CvIkI#B=ho8K-~(E+S{ot_*{3kWr&hUGmgXaS1z&KfV>Vs
z8iW@ZzQZW@1PKNQ??Bb;s6WPzkstc37u#(0m)5R-fre0C_6`Em;9+~`$LXO$k(Afj
zsd~_Q#aQtwG<%~k%Bn%LY7&@quOYc-J)@xocKhsZpR#BlzaQQpbt}n=6-eYm^1h
z!o&PL)}}7E%6)5;KmP!G+8-4-;+&rtM!tlv*2
zhZNR+^2R2H-=r+7<)Px_n+m@WPMc{KbDfQ(k8R9btrEiy+S|2rT}4l6;vCOjmLX2_
z@TJVZ=Lwj^&txAXT#N9Qr790siCVS1FYG#0vPw5=G;8gAl4Vmyjz>Jy%=>hckKn<&
zo2iSpW=TWAx%~tDm-sepq{mZ(5)GAy^Y3+mt?UKwI(_NkG6;6*o&C~6Lk7-d8tZb&
zwgw)P^cJD6Qzlhbz9nZq;`g9~91qKhXez|ApeJI8`A;|z4Xx=jUl#j^g6x#1