From bb3514150a787d8b1495975c0ea38dcc71b538bf Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 12 Sep 2022 06:24:53 +1000
Subject: [PATCH 001/263] build(deps): update jest monorepo (#4000)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   6 +-
 web/pnpm-lock.yaml | 588 +++++++++++++++++++++++----------------------
 2 files changed, 302 insertions(+), 292 deletions(-)

diff --git a/web/package.json b/web/package.json
index a4ddc1adb..474203cfa 100644
--- a/web/package.json
+++ b/web/package.json
@@ -146,7 +146,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.0.0",
+    "@types/jest": "29.0.1",
     "@types/node": "16.11.58",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.19",
@@ -168,8 +168,8 @@
     "eslint-plugin-react": "7.31.8",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.0.2",
-    "jest-environment-jsdom": "29.0.2",
+    "jest": "29.0.3",
+    "jest-environment-jsdom": "29.0.3",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.1.1",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index bb0905c45..c549fa210 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.3
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.0.0
+  '@types/jest': 29.0.1
   '@types/node': 16.11.58
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.19
@@ -42,8 +42,8 @@ specifiers:
   i18next: 21.9.1
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.1
-  jest: 29.0.2
-  jest-environment-jsdom: 29.0.2
+  jest: 29.0.3
+  jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.1.1
   prettier: 2.7.1
@@ -95,7 +95,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.0.0
+  '@types/jest': 29.0.1
   '@types/node': 16.11.58
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.19
@@ -108,7 +108,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.7
   eslint: 8.23.0
   eslint-config-prettier: 8.5.0_eslint@8.23.0
-  eslint-config-react-app: 7.0.1_4fdwrjms7sui3pmirbrnmoo7cy
+  eslint-config-react-app: 7.0.1_cr6wnmwwhjzeqnbkyvjwx3muuu
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_faomjyrlgqmwswvqymymzkxcqi
   eslint-plugin-import: 2.26.0_ikxfxf6lcdzwf3sfhs76tj4x7m
@@ -117,10 +117,10 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.23.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.23.0
   husky: 8.0.1
-  jest: 29.0.2_@types+node@16.11.58
-  jest-environment-jsdom: 29.0.2
+  jest: 29.0.3_@types+node@16.11.58
+  jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.1.1_jest@29.0.2
+  jest-watch-typeahead: 2.1.1_jest@29.0.3
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
@@ -2497,20 +2497,20 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /@jest/console/29.0.2:
-    resolution: {integrity: sha512-Fv02ijyhF4D/Wb3DvZO3iBJQz5DnzpJEIDBDbvje8Em099N889tNMUnBw7SalmSuOI+NflNG40RA1iK71kImPw==}
+  /@jest/console/29.0.3:
+    resolution: {integrity: sha512-cGg0r+klVHSYnfE977S9wmpuQ9L+iYuYgL+5bPXiUlUynLLYunRxswEmhBzvrSKGof5AKiHuTTmUKAqRcDY9dg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       chalk: 4.1.2
-      jest-message-util: 29.0.2
-      jest-util: 29.0.2
+      jest-message-util: 29.0.3
+      jest-util: 29.0.3
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.0.2:
-    resolution: {integrity: sha512-imP5M6cdpHEOkmcuFYZuM5cTG1DAF7ZlVNCq1+F7kbqme2Jcl+Kh4M78hihM76DJHNkurbv4UVOnejGxBKEmww==}
+  /@jest/core/29.0.3:
+    resolution: {integrity: sha512-1d0hLbOrM1qQE3eP3DtakeMbKTcXiXP3afWxqz103xPyddS2NhnNghS7MaXx1dcDt4/6p4nlhmeILo2ofgi8cQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2518,11 +2518,11 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/console': 29.0.2
-      '@jest/reporters': 29.0.2
-      '@jest/test-result': 29.0.2
-      '@jest/transform': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/console': 29.0.3
+      '@jest/reporters': 29.0.3
+      '@jest/test-result': 29.0.3
+      '@jest/transform': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       ansi-escapes: 4.3.2
       chalk: 4.1.2
@@ -2530,20 +2530,20 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.0.2_@types+node@16.11.58
-      jest-haste-map: 29.0.2
-      jest-message-util: 29.0.2
+      jest-config: 29.0.3_@types+node@16.11.58
+      jest-haste-map: 29.0.3
+      jest-message-util: 29.0.3
       jest-regex-util: 29.0.0
-      jest-resolve: 29.0.2
-      jest-resolve-dependencies: 29.0.2
-      jest-runner: 29.0.2
-      jest-runtime: 29.0.2
-      jest-snapshot: 29.0.2
-      jest-util: 29.0.2
-      jest-validate: 29.0.2
-      jest-watcher: 29.0.2
+      jest-resolve: 29.0.3
+      jest-resolve-dependencies: 29.0.3
+      jest-runner: 29.0.3
+      jest-runtime: 29.0.3
+      jest-snapshot: 29.0.3
+      jest-util: 29.0.3
+      jest-validate: 29.0.3
+      jest-watcher: 29.0.3
       micromatch: 4.0.5
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
       slash: 3.0.0
       strip-ansi: 6.0.1
     transitivePeerDependencies:
@@ -2551,21 +2551,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.0.2:
-    resolution: {integrity: sha512-Yf+EYaLOrVCgts/aTS5nGznU4prZUPa5k9S63Yct8YSOKj2jkdS17hHSUKhk5jxDFMyCy1PXknypDw7vfgc/mA==}
+  /@jest/environment/29.0.3:
+    resolution: {integrity: sha512-iKl272NKxYNQNqXMQandAIwjhQaGw5uJfGXduu8dS9llHi8jV2ChWrtOAVPnMbaaoDhnI3wgUGNDvZgHeEJQCA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/fake-timers': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
-      jest-mock: 29.0.2
-    dev: true
-
-  /@jest/expect-utils/29.0.1:
-    resolution: {integrity: sha512-Tw5kUUOKmXGQDmQ9TSgTraFFS7HMC1HG/B7y0AN2G2UzjdAXz9BzK2rmNpCSDl7g7y0Gf/VLBm//blonvhtOTQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      jest-get-type: 29.0.0
+      jest-mock: 29.0.3
     dev: true
 
   /@jest/expect-utils/29.0.2:
@@ -2575,42 +2568,49 @@ packages:
       jest-get-type: 29.0.0
     dev: true
 
-  /@jest/expect/29.0.2:
-    resolution: {integrity: sha512-y/3geZ92p2/zovBm/F+ZjXUJ3thvT9IRzD6igqaWskFE2aR0idD+N/p5Lj/ZautEox/9RwEc6nqergebeh72uQ==}
+  /@jest/expect-utils/29.0.3:
+    resolution: {integrity: sha512-i1xUkau7K/63MpdwiRqaxgZOjxYs4f0WMTGJnYwUKubsNRZSeQbLorS7+I4uXVF9KQ5r61BUPAUMZ7Lf66l64Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.0.2
-      jest-snapshot: 29.0.2
+      jest-get-type: 29.0.0
+    dev: true
+
+  /@jest/expect/29.0.3:
+    resolution: {integrity: sha512-6W7K+fsI23FQ01H/BWccPyDZFrnU9QlzDcKOjrNVU5L8yUORFAJJIpmyxWPW70+X624KUNqzZwPThPMX28aXEQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      expect: 29.0.3
+      jest-snapshot: 29.0.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.0.2:
-    resolution: {integrity: sha512-2JhQeWU28fvmM5r33lxg6BxxkTKaVXs6KMaJ6eXSM8ml/MaWkt2BvbIO8G9KWAJFMdBXWbn+2h9OK1/s5urKZA==}
+  /@jest/fake-timers/29.0.3:
+    resolution: {integrity: sha512-tmbUIo03x0TdtcZCESQ0oQSakPCpo7+s6+9mU19dd71MptkP4zCwoeZqna23//pgbhtT1Wq02VmA9Z9cNtvtCQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 16.11.58
-      jest-message-util: 29.0.2
-      jest-mock: 29.0.2
-      jest-util: 29.0.2
+      jest-message-util: 29.0.3
+      jest-mock: 29.0.3
+      jest-util: 29.0.3
     dev: true
 
-  /@jest/globals/29.0.2:
-    resolution: {integrity: sha512-4hcooSNJCVXuTu07/VJwCWW6HTnjLtQdqlcGisK6JST7z2ixa8emw4SkYsOk7j36WRc2ZUEydlUePnOIOTCNXg==}
+  /@jest/globals/29.0.3:
+    resolution: {integrity: sha512-YqGHT65rFY2siPIHHFjuCGUsbzRjdqkwbat+Of6DmYRg5shIXXrLdZoVE/+TJ9O1dsKsFmYhU58JvIbZRU1Z9w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.2
-      '@jest/expect': 29.0.2
-      '@jest/types': 29.0.2
-      jest-mock: 29.0.2
+      '@jest/environment': 29.0.3
+      '@jest/expect': 29.0.3
+      '@jest/types': 29.0.3
+      jest-mock: 29.0.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.0.2:
-    resolution: {integrity: sha512-Kr41qejRQHHkCgWHC9YwSe7D5xivqP4XML+PvgwsnRFaykKdNflDUb4+xLXySOU+O/bPkVdFpGzUpVNSJChCrw==}
+  /@jest/reporters/29.0.3:
+    resolution: {integrity: sha512-3+QU3d4aiyOWfmk1obDerie4XNCaD5Xo1IlKNde2yGEi02WQD+ZQD0i5Hgqm1e73sMV7kw6pMlCnprtEwEVwxw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2619,10 +2619,10 @@ packages:
         optional: true
     dependencies:
       '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.0.2
-      '@jest/test-result': 29.0.2
-      '@jest/transform': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/console': 29.0.3
+      '@jest/test-result': 29.0.3
+      '@jest/transform': 29.0.3
+      '@jest/types': 29.0.3
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 16.11.58
       chalk: 4.1.2
@@ -2635,9 +2635,9 @@ packages:
       istanbul-lib-report: 3.0.0
       istanbul-lib-source-maps: 4.0.1
       istanbul-reports: 3.1.5
-      jest-message-util: 29.0.2
-      jest-util: 29.0.2
-      jest-worker: 29.0.2
+      jest-message-util: 29.0.3
+      jest-util: 29.0.3
+      jest-worker: 29.0.3
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
@@ -2680,23 +2680,23 @@ packages:
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-result/29.0.2:
-    resolution: {integrity: sha512-b5rDc0lLL6Kx73LyCx6370k9uZ8o5UKdCpMS6Za3ke7H9y8PtAU305y6TeghpBmf2In8p/qqi3GpftgzijSsNw==}
+  /@jest/test-result/29.0.3:
+    resolution: {integrity: sha512-vViVnQjCgTmbhDKEonKJPtcFe9G/CJO4/Np4XwYJah+lF2oI7KKeRp8t1dFvv44wN2NdbDb/qC6pi++Vpp0Dlg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/console': 29.0.3
+      '@jest/types': 29.0.3
       '@types/istanbul-lib-coverage': 2.0.4
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.0.2:
-    resolution: {integrity: sha512-fsyZqHBlXNMv5ZqjQwCuYa2pskXCO0DVxh5aaVCuAtwzHuYEGrhordyEncBLQNuCGQSYgElrEEmS+7wwFnnMKw==}
+  /@jest/test-sequencer/29.0.3:
+    resolution: {integrity: sha512-Hf4+xYSWZdxTNnhDykr8JBs0yBN/nxOXyUQWfotBUqqy0LF9vzcFB0jm/EDNZCx587znLWTIgxcokW7WeZMobQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.0.2
+      '@jest/test-result': 29.0.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.2
+      jest-haste-map: 29.0.3
       slash: 3.0.0
     dev: true
 
@@ -2723,21 +2723,21 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.0.2:
-    resolution: {integrity: sha512-lajVQx2AnsR+Pa17q2zR7eikz2PkPs1+g/qPbZkqQATeS/s6eT55H+yHcsLfuI/0YQ/4VSBepSu3bOX+44q0aA==}
+  /@jest/transform/29.0.3:
+    resolution: {integrity: sha512-C5ihFTRYaGDbi/xbRQRdbo5ddGtI4VSpmL6AIcZxdhwLbXMa7PcXxxqyI91vGOFHnn5aVM3WYnYKCHEqmLVGzg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 1.8.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.2
+      jest-haste-map: 29.0.3
       jest-regex-util: 29.0.0
-      jest-util: 29.0.2
+      jest-util: 29.0.3
       micromatch: 4.0.5
       pirates: 4.0.5
       slash: 3.0.0
@@ -2769,8 +2769,8 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@jest/types/29.0.2:
-    resolution: {integrity: sha512-5WNMesBLmlkt1+fVkoCjHa0X3i3q8zc4QLTDkdHgCa2gyPZc7rdlZBWgVLqwS1860ZW5xJuCDwAzqbGaXIr/ew==}
+  /@jest/types/29.0.3:
+    resolution: {integrity: sha512-coBJmOQvurXjN1Hh5PzF7cmsod0zLIOXpP8KD161mqNlroMhLcwpODiEzi7ZsRl5Z/AIuxpeNm8DCl43F4kz8A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -3319,7 +3319,7 @@ packages:
     resolution: {integrity: sha512-WEOTgRsbYkvA/KCsDwVEGkd7WAr1e3g31VHQ8zy5gul/V1qKullU/BU5I68X5v7V3GnB9eotmom4v5a5gjxorw==}
     dependencies:
       '@babel/parser': 7.18.11
-      '@babel/types': 7.18.10
+      '@babel/types': 7.19.0
       '@types/babel__generator': 7.6.4
       '@types/babel__template': 7.4.1
       '@types/babel__traverse': 7.17.1
@@ -3377,11 +3377,11 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.0.0:
-    resolution: {integrity: sha512-X6Zjz3WO4cT39Gkl0lZ2baFRaEMqJl5NC1OjElkwtNzAlbkr2K/WJXkBkH5VP0zx4Hgsd2TZYdOEfvp2Dxia+Q==}
+  /@types/jest/29.0.1:
+    resolution: {integrity: sha512-CAZrjLRZs4xEdIrfrdV74xK1Vo/BKQZwUcjJv3gp6gMeV3BsVxMnXTcgtYOKyphT4DPPo7jxVEVhuwJTQn3oPQ==}
     dependencies:
-      expect: 29.0.1
-      pretty-format: 29.0.1
+      expect: 29.0.2
+      pretty-format: 29.0.2
     dev: true
 
   /@types/jsdom/20.0.0:
@@ -3467,7 +3467,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.0.0
+      '@types/jest': 29.0.1
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -3997,8 +3997,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.0.2_@babel+core@7.19.0:
-    resolution: {integrity: sha512-yTu4/WSi/HzarjQtrJSwV+/0maoNt+iP0DmpvFJdv9yY+5BuNle8TbheHzzcSWj5gIHfuhpbLYHWRDYhWKyeKQ==}
+  /babel-jest/29.0.3_@babel+core@7.19.0:
+    resolution: {integrity: sha512-ApPyHSOhS/sVzwUOQIWJmdvDhBsMG01HX9z7ogtkp1TToHGGUWFlnXJUIzCgKPSfiYLn3ibipCYzsKSURHEwLg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -4007,7 +4007,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/transform': 29.0.2
+      '@jest/transform': 29.0.3
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.0.2_@babel+core@7.19.0
@@ -4042,7 +4042,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.18.10
+      '@babel/types': 7.19.0
       '@types/babel__core': 7.1.19
       '@types/babel__traverse': 7.17.1
     dev: true
@@ -5147,7 +5147,7 @@ packages:
       eslint: 8.23.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_4fdwrjms7sui3pmirbrnmoo7cy:
+  /eslint-config-react-app/7.0.1_cr6wnmwwhjzeqnbkyvjwx3muuu:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5167,7 +5167,7 @@ packages:
       eslint: 8.23.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.23.0
       eslint-plugin-import: 2.26.0_ikxfxf6lcdzwf3sfhs76tj4x7m
-      eslint-plugin-jest: 25.7.0_62vgemiqelkrsjmvvizzfhdaya
+      eslint-plugin-jest: 25.7.0_awpfis7kegyr7vghibvuyaqt2u
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.0
       eslint-plugin-react: 7.31.8_eslint@8.23.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.23.0
@@ -5291,7 +5291,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_62vgemiqelkrsjmvvizzfhdaya:
+  /eslint-plugin-jest/25.7.0_awpfis7kegyr7vghibvuyaqt2u:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5307,7 +5307,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.36.2_2l2r3i3lm6jysqd4ac3ql4n2mm
       '@typescript-eslint/experimental-utils': 5.30.6_itqs5654cmlnjraw6gjzqacppi
       eslint: 8.23.0
-      jest: 29.0.2_@types+node@16.11.58
+      jest: 29.0.3_@types+node@16.11.58
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5581,17 +5581,6 @@ packages:
       - supports-color
     dev: true
 
-  /expect/29.0.1:
-    resolution: {integrity: sha512-yQgemsjLU+1S8t2A7pXT3Sn/v5/37LY8J+tocWtKEA0iEYYc6gfKbbJJX2fxHZmd7K9WpdbQqXUpmYkq1aewYg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/expect-utils': 29.0.1
-      jest-get-type: 29.0.0
-      jest-matcher-utils: 29.0.1
-      jest-message-util: 29.0.1
-      jest-util: 29.0.1
-    dev: true
-
   /expect/29.0.2:
     resolution: {integrity: sha512-JeJlAiLKn4aApT4pzUXBVxl3NaZidWIOdg//smaIlP9ZMBDkHZGFd9ubphUZP9pUyDEo7bC6M0IIZR51o75qQw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -5603,6 +5592,17 @@ packages:
       jest-util: 29.0.2
     dev: true
 
+  /expect/29.0.3:
+    resolution: {integrity: sha512-t8l5DTws3212VbmPL+tBFXhjRHLmctHB0oQbL8eUc6S7NzZtYUhycrFO9mkxA0ZUC6FAWdNi7JchJSkODtcu1Q==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/expect-utils': 29.0.3
+      jest-get-type: 29.0.0
+      jest-matcher-utils: 29.0.3
+      jest-message-util: 29.0.3
+      jest-util: 29.0.3
+    dev: true
+
   /extend-shallow/2.0.1:
     resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==}
     engines: {node: '>=0.10.0'}
@@ -6522,35 +6522,35 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.0.2:
-    resolution: {integrity: sha512-YTPEsoE1P1X0bcyDQi3QIkpt2Wl9om9k2DQRuLFdS5x8VvAKSdYAVJufgvudhnKgM8WHvvAzhBE+1DRQB8x1CQ==}
+  /jest-circus/29.0.3:
+    resolution: {integrity: sha512-QeGzagC6Hw5pP+df1+aoF8+FBSgkPmraC1UdkeunWh0jmrp7wC0Hr6umdUAOELBQmxtKAOMNC3KAdjmCds92Zg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.2
-      '@jest/expect': 29.0.2
-      '@jest/test-result': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/environment': 29.0.3
+      '@jest/expect': 29.0.3
+      '@jest/test-result': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
       is-generator-fn: 2.1.0
-      jest-each: 29.0.2
-      jest-matcher-utils: 29.0.2
-      jest-message-util: 29.0.2
-      jest-runtime: 29.0.2
-      jest-snapshot: 29.0.2
-      jest-util: 29.0.2
+      jest-each: 29.0.3
+      jest-matcher-utils: 29.0.3
+      jest-message-util: 29.0.3
+      jest-runtime: 29.0.3
+      jest-snapshot: 29.0.3
+      jest-util: 29.0.3
       p-limit: 3.1.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
       slash: 3.0.0
       stack-utils: 2.0.5
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-cli/29.0.2_@types+node@16.11.58:
-    resolution: {integrity: sha512-tlf8b+4KcUbBGr25cywIi3+rbZ4+G+SiG8SvY552m9sRZbXPafdmQRyeVE/C/R8K+TiBAMrTIUmV2SlStRJ40g==}
+  /jest-cli/29.0.3_@types+node@16.11.58:
+    resolution: {integrity: sha512-aUy9Gd/Kut1z80eBzG10jAn6BgS3BoBbXyv+uXEqBJ8wnnuZ5RpNfARoskSrTIy1GY4a8f32YGuCMwibtkl9CQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6559,16 +6559,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.0.2
-      '@jest/test-result': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/core': 29.0.3
+      '@jest/test-result': 29.0.3
+      '@jest/types': 29.0.3
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.0.2_@types+node@16.11.58
-      jest-util: 29.0.2
-      jest-validate: 29.0.2
+      jest-config: 29.0.3_@types+node@16.11.58
+      jest-util: 29.0.3
+      jest-validate: 29.0.3
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6577,8 +6577,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.0.2_@types+node@16.11.58:
-    resolution: {integrity: sha512-RU4gzeUNZAFktYVzDGimDxeYoaiTnH100jkYYZgldqFamaZukF0IqmFx8+QrzVeEWccYg10EEJT3ox1Dq5b74w==}
+  /jest-config/29.0.3_@types+node@16.11.58:
+    resolution: {integrity: sha512-U5qkc82HHVYe3fNu2CRXLN4g761Na26rWKf7CjM8LlZB3In1jadEkZdMwsE37rd9RSPV0NfYaCjHdk/gu3v+Ew==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6590,26 +6590,26 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/test-sequencer': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/test-sequencer': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
-      babel-jest: 29.0.2_@babel+core@7.19.0
+      babel-jest: 29.0.3_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.0.2
-      jest-environment-node: 29.0.2
+      jest-circus: 29.0.3
+      jest-environment-node: 29.0.3
       jest-get-type: 29.0.0
       jest-regex-util: 29.0.0
-      jest-resolve: 29.0.2
-      jest-runner: 29.0.2
-      jest-util: 29.0.2
-      jest-validate: 29.0.2
+      jest-resolve: 29.0.3
+      jest-runner: 29.0.3
+      jest-util: 29.0.3
+      jest-validate: 29.0.3
       micromatch: 4.0.5
       parse-json: 5.2.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
       slash: 3.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -6623,7 +6623,17 @@ packages:
       chalk: 4.1.2
       diff-sequences: 29.0.0
       jest-get-type: 29.0.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
+    dev: true
+
+  /jest-diff/29.0.3:
+    resolution: {integrity: sha512-+X/AIF5G/vX9fWK+Db9bi9BQas7M9oBME7egU7psbn4jlszLFCu0dW63UgeE6cs/GANq4fLaT+8sGHQQ0eCUfg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      diff-sequences: 29.0.0
+      jest-get-type: 29.0.0
+      pretty-format: 29.0.3
     dev: true
 
   /jest-docblock/29.0.0:
@@ -6633,28 +6643,28 @@ packages:
       detect-newline: 3.1.0
     dev: true
 
-  /jest-each/29.0.2:
-    resolution: {integrity: sha512-+sA9YjrJl35iCg0W0VCrgCVj+wGhDrrKQ+YAqJ/DHBC4gcDFAeePtRRhpJnX9gvOZ63G7gt52pwp2PesuSEx0Q==}
+  /jest-each/29.0.3:
+    resolution: {integrity: sha512-wILhZfESURHHBNvPMJ0lZlYZrvOQJxAo3wNHi+ycr90V7M+uGR9Gh4+4a/BmaZF0XTyZsk4OiYEf3GJN7Ltqzg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       chalk: 4.1.2
       jest-get-type: 29.0.0
-      jest-util: 29.0.2
-      pretty-format: 29.0.2
+      jest-util: 29.0.3
+      pretty-format: 29.0.3
     dev: true
 
-  /jest-environment-jsdom/29.0.2:
-    resolution: {integrity: sha512-hWqC9FQI5yT04lTd4VJnzT5QObxq0xrSrqpGkqsYfxPeJYjyhriI7W2oJC5HZ1UbhnvA+8GS1nzgPsstvRpdVw==}
+  /jest-environment-jsdom/29.0.3:
+    resolution: {integrity: sha512-KIGvpm12c71hoYTjL4wC2c8K6KfhOHJqJtaHc1IApu5rG047YWZoEP13BlbucWfzGISBrmli8KFqdhdQEa8Wnw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.2
-      '@jest/fake-timers': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/environment': 29.0.3
+      '@jest/fake-timers': 29.0.3
+      '@jest/types': 29.0.3
       '@types/jsdom': 20.0.0
       '@types/node': 16.11.58
-      jest-mock: 29.0.2
-      jest-util: 29.0.2
+      jest-mock: 29.0.3
+      jest-util: 29.0.3
       jsdom: 20.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -6663,16 +6673,16 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.0.2:
-    resolution: {integrity: sha512-4Fv8GXVCToRlMzDO94gvA8iOzKxQ7rhAbs8L+j8GPyTxGuUiYkV+63LecGeVdVhsL2KXih1sKnoqmH6tp89J7Q==}
+  /jest-environment-node/29.0.3:
+    resolution: {integrity: sha512-cdZqRCnmIlTXC+9vtvmfiY/40Cj6s2T0czXuq1whvQdmpzAnj4sbqVYuZ4zFHk766xTTJ+Ij3uUqkk8KCfXoyg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.2
-      '@jest/fake-timers': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/environment': 29.0.3
+      '@jest/fake-timers': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
-      jest-mock: 29.0.2
-      jest-util: 29.0.2
+      jest-mock: 29.0.3
+      jest-util: 29.0.3
     dev: true
 
   /jest-get-type/29.0.0:
@@ -6703,41 +6713,31 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.0.2:
-    resolution: {integrity: sha512-SOorh2ysQ0fe8gsF4gaUDhoMIWAvi2hXOkwThEO48qT3JqA8GLAUieQcIvdSEd6M0scRDe1PVmKc5tXR3Z0U0A==}
+  /jest-haste-map/29.0.3:
+    resolution: {integrity: sha512-uMqR99+GuBHo0RjRhOE4iA6LmsxEwRdgiIAQgMU/wdT2XebsLDz5obIwLZm/Psj+GwSEQhw9AfAVKGYbh2G55A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       '@types/graceful-fs': 4.1.5
       '@types/node': 16.11.58
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
       jest-regex-util: 29.0.0
-      jest-util: 29.0.2
-      jest-worker: 29.0.2
+      jest-util: 29.0.3
+      jest-worker: 29.0.3
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.2
     dev: true
 
-  /jest-leak-detector/29.0.2:
-    resolution: {integrity: sha512-5f0493qDeAxjUldkBSQg5D1cLadRgZVyWpTQvfJeQwQUpHQInE21AyVHVv64M7P2Ue8Z5EZ4BAcoDS/dSPPgMw==}
+  /jest-leak-detector/29.0.3:
+    resolution: {integrity: sha512-YfW/G63dAuiuQ3QmQlh8hnqLDe25WFY3eQhuc/Ev1AGmkw5zREblTh7TCSKLoheyggu6G9gxO2hY8p9o6xbaRQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-get-type: 29.0.0
-      pretty-format: 29.0.2
-    dev: true
-
-  /jest-matcher-utils/29.0.1:
-    resolution: {integrity: sha512-/e6UbCDmprRQFnl7+uBKqn4G22c/OmwriE5KCMVqxhElKCQUDcFnq5XM9iJeKtzy4DUjxT27y9VHmKPD8BQPaw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.0.2
-      jest-get-type: 29.0.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
     dev: true
 
   /jest-matcher-utils/29.0.2:
@@ -6747,7 +6747,17 @@ packages:
       chalk: 4.1.2
       jest-diff: 29.0.2
       jest-get-type: 29.0.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
+    dev: true
+
+  /jest-matcher-utils/29.0.3:
+    resolution: {integrity: sha512-RsR1+cZ6p1hDV4GSCQTg+9qjeotQCgkaleIKLK7dm+U4V/H2bWedU3RAtLm8+mANzZ7eDV33dMar4pejd7047w==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      jest-diff: 29.0.3
+      jest-get-type: 29.0.0
+      pretty-format: 29.0.3
     dev: true
 
   /jest-message-util/28.1.3:
@@ -6765,45 +6775,45 @@ packages:
       stack-utils: 2.0.5
     dev: true
 
-  /jest-message-util/29.0.1:
-    resolution: {integrity: sha512-wRMAQt3HrLpxSubdnzOo68QoTfQ+NLXFzU0Heb18ZUzO2S9GgaXNEdQ4rpd0fI9dq2NXkpCk1IUWSqzYKji64A==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@babel/code-frame': 7.18.6
-      '@jest/types': 29.0.2
-      '@types/stack-utils': 2.0.1
-      chalk: 4.1.2
-      graceful-fs: 4.2.10
-      micromatch: 4.0.5
-      pretty-format: 29.0.2
-      slash: 3.0.0
-      stack-utils: 2.0.5
-    dev: true
-
   /jest-message-util/29.0.2:
     resolution: {integrity: sha512-kcJAgms3ckJV0wUoLsAM40xAhY+pb9FVSZwicjFU9PFkaTNmqh9xd99/CzKse48wPM1ANUQKmp03/DpkY+lGrA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       '@types/stack-utils': 2.0.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
       micromatch: 4.0.5
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
       slash: 3.0.0
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.0.2:
-    resolution: {integrity: sha512-giWXOIT23UCxHCN2VUfUJ0Q7SmiqQwfSFXlCaIhW5anITpNQ+3vuLPQdKt5wkuwM37GrbFyHIClce8AAK9ft9g==}
+  /jest-message-util/29.0.3:
+    resolution: {integrity: sha512-7T8JiUTtDfppojosORAflABfLsLKMLkBHSWkjNQrjIltGoDzNGn7wEPOSfjqYAGTYME65esQzMJxGDjuLBKdOg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@babel/code-frame': 7.18.6
+      '@jest/types': 29.0.3
+      '@types/stack-utils': 2.0.1
+      chalk: 4.1.2
+      graceful-fs: 4.2.10
+      micromatch: 4.0.5
+      pretty-format: 29.0.3
+      slash: 3.0.0
+      stack-utils: 2.0.5
+    dev: true
+
+  /jest-mock/29.0.3:
+    resolution: {integrity: sha512-ort9pYowltbcrCVR43wdlqfAiFJXBx8l4uJDsD8U72LgBcetvEp+Qxj1W9ZYgMRoeAo+ov5cnAGF2B6+Oth+ww==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.0.2:
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.0.3:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6812,7 +6822,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.0.2
+      jest-resolve: 29.0.3
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6830,84 +6840,84 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.0.2:
-    resolution: {integrity: sha512-fSAu6eIG7wtGdnPJUkVVdILGzYAP9Dj/4+zvC8BrGe8msaUMJ9JeygU0Hf9+Uor6/icbuuzQn5See1uajLnAqg==}
+  /jest-resolve-dependencies/29.0.3:
+    resolution: {integrity: sha512-KzuBnXqNvbuCdoJpv8EanbIGObk7vUBNt/PwQPPx2aMhlv/jaXpUJsqWYRpP/0a50faMBY7WFFP8S3/CCzwfDw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.0.0
-      jest-snapshot: 29.0.2
+      jest-snapshot: 29.0.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.0.2:
-    resolution: {integrity: sha512-V3uLjSA+EHxLtjIDKTBXnY71hyx+8lusCqPXvqzkFO1uCGvVpjBfuOyp+KOLBNSuY61kM2jhepiMwt4eiJS+Vw==}
+  /jest-resolve/29.0.3:
+    resolution: {integrity: sha512-toVkia85Y/BPAjJasTC9zIPY6MmVXQPtrCk8SmiheC4MwVFE/CMFlOtMN6jrwPMC6TtNh8+sTMllasFeu1wMPg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.2
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.0.2
-      jest-util: 29.0.2
-      jest-validate: 29.0.2
+      jest-haste-map: 29.0.3
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.0.3
+      jest-util: 29.0.3
+      jest-validate: 29.0.3
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.0.2:
-    resolution: {integrity: sha512-+D82iPZejI8t+SfduOO1deahC/QgLFf8aJBO++Znz3l2ETtOMdM7K4ATsGWzCFnTGio5yHaRifg1Su5Ybza5Nw==}
+  /jest-runner/29.0.3:
+    resolution: {integrity: sha512-Usu6VlTOZlCZoNuh3b2Tv/yzDpKqtiNAetG9t3kJuHfUyVMNW7ipCCJOUojzKkjPoaN7Bl1f7Buu6PE0sGpQxw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.0.2
-      '@jest/environment': 29.0.2
-      '@jest/test-result': 29.0.2
-      '@jest/transform': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/console': 29.0.3
+      '@jest/environment': 29.0.3
+      '@jest/test-result': 29.0.3
+      '@jest/transform': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
       jest-docblock: 29.0.0
-      jest-environment-node: 29.0.2
-      jest-haste-map: 29.0.2
-      jest-leak-detector: 29.0.2
-      jest-message-util: 29.0.2
-      jest-resolve: 29.0.2
-      jest-runtime: 29.0.2
-      jest-util: 29.0.2
-      jest-watcher: 29.0.2
-      jest-worker: 29.0.2
+      jest-environment-node: 29.0.3
+      jest-haste-map: 29.0.3
+      jest-leak-detector: 29.0.3
+      jest-message-util: 29.0.3
+      jest-resolve: 29.0.3
+      jest-runtime: 29.0.3
+      jest-util: 29.0.3
+      jest-watcher: 29.0.3
+      jest-worker: 29.0.3
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.0.2:
-    resolution: {integrity: sha512-DO6F81LX4okOgjJLkLySv10E5YcV5NHUbY1ZqAUtofxdQE+q4hjH0P2gNsY8x3z3sqgw7O/+919SU4r18Fcuig==}
+  /jest-runtime/29.0.3:
+    resolution: {integrity: sha512-12gZXRQ7ozEeEHKTY45a+YLqzNDR/x4c//X6AqwKwKJPpWM8FY4vwn4VQJOcLRS3Nd1fWwgP7LU4SoynhuUMHQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.2
-      '@jest/fake-timers': 29.0.2
-      '@jest/globals': 29.0.2
+      '@jest/environment': 29.0.3
+      '@jest/fake-timers': 29.0.3
+      '@jest/globals': 29.0.3
       '@jest/source-map': 29.0.0
-      '@jest/test-result': 29.0.2
-      '@jest/transform': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/test-result': 29.0.3
+      '@jest/transform': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.2
-      jest-message-util: 29.0.2
-      jest-mock: 29.0.2
+      jest-haste-map: 29.0.3
+      jest-message-util: 29.0.3
+      jest-mock: 29.0.3
       jest-regex-util: 29.0.0
-      jest-resolve: 29.0.2
-      jest-snapshot: 29.0.2
-      jest-util: 29.0.2
+      jest-resolve: 29.0.3
+      jest-snapshot: 29.0.3
+      jest-util: 29.0.3
       slash: 3.0.0
       strip-bom: 4.0.0
     transitivePeerDependencies:
@@ -6922,8 +6932,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.0.2:
-    resolution: {integrity: sha512-26C4PzGKaX5gkoKg8UzYGVy2HPVcTaROSkf0gwnHu3lGeTB7bAIJBovvVPZoiJ20IximJELQs/r8WSDRCuGX2A==}
+  /jest-snapshot/29.0.3:
+    resolution: {integrity: sha512-52q6JChm04U3deq+mkQ7R/7uy7YyfVIrebMi6ZkBoDJ85yEjm/sJwdr1P0LOIEHmpyLlXrxy3QP0Zf5J2kj0ew==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -6932,23 +6942,23 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
       '@babel/traverse': 7.19.0
       '@babel/types': 7.19.0
-      '@jest/expect-utils': 29.0.2
-      '@jest/transform': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/expect-utils': 29.0.3
+      '@jest/transform': 29.0.3
+      '@jest/types': 29.0.3
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
       chalk: 4.1.2
-      expect: 29.0.2
+      expect: 29.0.3
       graceful-fs: 4.2.10
-      jest-diff: 29.0.2
+      jest-diff: 29.0.3
       jest-get-type: 29.0.0
-      jest-haste-map: 29.0.2
-      jest-matcher-utils: 29.0.2
-      jest-message-util: 29.0.2
-      jest-util: 29.0.2
+      jest-haste-map: 29.0.3
+      jest-matcher-utils: 29.0.3
+      jest-message-util: 29.0.3
+      jest-util: 29.0.3
       natural-compare: 1.4.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -6982,23 +6992,11 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-util/29.0.1:
-    resolution: {integrity: sha512-GIWkgNfkeA9d84rORDHPGGTFBrRD13A38QVSKE0bVrGSnoR1KDn8Kqz+0yI5kezMgbT/7zrWaruWP1Kbghlb2A==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/types': 29.0.2
-      '@types/node': 16.11.58
-      chalk: 4.1.2
-      ci-info: 3.3.2
-      graceful-fs: 4.2.10
-      picomatch: 2.3.1
-    dev: true
-
   /jest-util/29.0.2:
     resolution: {integrity: sha512-ozk8ruEEEACxqpz0hN9UOgtPZS0aN+NffwQduR5dVlhN+eN47vxurtvgZkYZYMpYrsmlAEx1XabkB3BnN0GfKQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -7006,19 +7004,31 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.0.2:
-    resolution: {integrity: sha512-AeRKm7cEucSy7tr54r3LhiGIXYvOILUwBM1S7jQkKs6YelwAlWKsmZGVrQR7uwsd31rBTnR5NQkODi1Z+6TKIQ==}
+  /jest-util/29.0.3:
+    resolution: {integrity: sha512-Q0xaG3YRG8QiTC4R6fHjHQPaPpz9pJBEi0AeOE4mQh/FuWOijFjGXMMOfQEaU9i3z76cNR7FobZZUQnL6IyfdQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.2
+      '@jest/types': 29.0.3
+      '@types/node': 16.11.58
+      chalk: 4.1.2
+      ci-info: 3.3.2
+      graceful-fs: 4.2.10
+      picomatch: 2.3.1
+    dev: true
+
+  /jest-validate/29.0.3:
+    resolution: {integrity: sha512-OebiqqT6lK8cbMPtrSoS3aZP4juID762lZvpf1u+smZnwTEBCBInan0GAIIhv36MxGaJvmq5uJm7dl5gVt+Zrw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.0.3
       camelcase: 6.3.0
       chalk: 4.1.2
       jest-get-type: 29.0.0
       leven: 3.1.0
-      pretty-format: 29.0.2
+      pretty-format: 29.0.3
     dev: true
 
-  /jest-watch-typeahead/2.1.1_jest@29.0.2:
+  /jest-watch-typeahead/2.1.1_jest@29.0.3:
     resolution: {integrity: sha512-yKrj2VBDJoMLlD6lpfWfIQpSSC1GFGvPHaLnJWRhL/PiLlBDRWFwCYe21h0o+peqcVlilQhIa2g2vncaBXS73g==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -7026,7 +7036,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.0.2_@types+node@16.11.58
+      jest: 29.0.3_@types+node@16.11.58
       jest-regex-util: 28.0.2
       jest-watcher: 28.1.3
       slash: 4.0.0
@@ -7048,17 +7058,17 @@ packages:
       string-length: 4.0.2
     dev: true
 
-  /jest-watcher/29.0.2:
-    resolution: {integrity: sha512-ds2bV0oyUdYoyrUTv4Ga5uptz4cEvmmP/JzqDyzZZanvrIn8ipxg5l3SDOAIiyuAx1VdHd2FBzeXPFO5KPH8vQ==}
+  /jest-watcher/29.0.3:
+    resolution: {integrity: sha512-tQX9lU91A+9tyUQKUMp0Ns8xAcdhC9fo73eqA3LFxP2bSgiF49TNcc+vf3qgGYYK9qRjFpXW9+4RgF/mbxyOOw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/test-result': 29.0.3
+      '@jest/types': 29.0.3
       '@types/node': 16.11.58
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.0.2
+      jest-util: 29.0.3
       string-length: 4.0.2
     dev: true
 
@@ -7071,8 +7081,8 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.0.2:
-    resolution: {integrity: sha512-EyvBlYcvd2pg28yg5A3OODQnqK9LI1kitnGUZUG5/NYIeaRgewtYBKB5wlr7oXj8zPCkzev7EmnTCsrXK7V+Xw==}
+  /jest-worker/29.0.3:
+    resolution: {integrity: sha512-Tl/YWUugQOjoTYwjKdfJWkSOfhufJHO5LhXTSZC3TRoQKO+fuXnZAdoXXBlpLXKGODBL3OvdUasfDD4PcMe6ng==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 16.11.58
@@ -7080,8 +7090,8 @@ packages:
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.0.2_@types+node@16.11.58:
-    resolution: {integrity: sha512-enziNbNUmXTcTaTP/Uq5rV91r0Yqy2UKzLUIabxMpGm9YHz8qpbJhiRnNVNvm6vzWfzt/0o97NEHH8/3udoClA==}
+  /jest/29.0.3_@types+node@16.11.58:
+    resolution: {integrity: sha512-ElgUtJBLgXM1E8L6K1RW1T96R897YY/3lRYqq9uVcPWtP2AAl/nQ16IYDh/FzQOOQ12VEuLdcPU83mbhG2C3PQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7090,10 +7100,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.0.2
-      '@jest/types': 29.0.2
+      '@jest/core': 29.0.3
+      '@jest/types': 29.0.3
       import-local: 3.1.0
-      jest-cli: 29.0.2_@types+node@16.11.58
+      jest-cli: 29.0.3_@types+node@16.11.58
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -7977,8 +7987,8 @@ packages:
       react-is: 18.2.0
     dev: true
 
-  /pretty-format/29.0.1:
-    resolution: {integrity: sha512-iTHy3QZMzuL484mSTYbQIM1AHhEQsH8mXWS2/vd2yFBYnG3EBqGiMONo28PlPgrW7P/8s/1ISv+y7WH306l8cw==}
+  /pretty-format/29.0.2:
+    resolution: {integrity: sha512-wp3CdtUa3cSJVFn3Miu5a1+pxc1iPIQTenOAn+x5erXeN1+ryTcLesV5pbK/rlW5EKwp27x38MoYfNGaNXDDhg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -7986,8 +7996,8 @@ packages:
       react-is: 18.2.0
     dev: true
 
-  /pretty-format/29.0.2:
-    resolution: {integrity: sha512-wp3CdtUa3cSJVFn3Miu5a1+pxc1iPIQTenOAn+x5erXeN1+ryTcLesV5pbK/rlW5EKwp27x38MoYfNGaNXDDhg==}
+  /pretty-format/29.0.3:
+    resolution: {integrity: sha512-cHudsvQr1K5vNVLbvYF/nv3Qy/F/BcEKxGuIeMiVMRHxPOO1RxXooP8g/ZrwAp7Dx+KdMZoOc7NxLHhMrP2f9Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0

From 528c298e7511e062e87f01cc8113eebcbae1f5b5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 12 Sep 2022 08:32:14 +1000
Subject: [PATCH 002/263] build(deps): update dependency jest-watch-typeahead
 to v2.2.0 (#4001)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 109 +++------------------------------------------
 2 files changed, 7 insertions(+), 104 deletions(-)

diff --git a/web/package.json b/web/package.json
index 474203cfa..05132e7ec 100644
--- a/web/package.json
+++ b/web/package.json
@@ -171,7 +171,7 @@
     "jest": "29.0.3",
     "jest-environment-jsdom": "29.0.3",
     "jest-transform-stub": "2.0.0",
-    "jest-watch-typeahead": "2.1.1",
+    "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.3",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index c549fa210..283f4019d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -45,7 +45,7 @@ specifiers:
   jest: 29.0.3
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.1.1
+  jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
   qrcode.react: 3.1.0
   query-string: 7.1.1
@@ -120,7 +120,7 @@ devDependencies:
   jest: 29.0.3_@types+node@16.11.58
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.1.1_jest@29.0.3
+  jest-watch-typeahead: 2.2.0_jest@29.0.3
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
@@ -2485,18 +2485,6 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /@jest/console/28.1.3:
-    resolution: {integrity: sha512-QPAkP5EwKdK/bxIr6C1I4Vs0rm2nHiANzj/Z5X2JQkrZo6IqvC4ldZ9K95tF0HdidhA8Bo6egxSzUFPYKcEXLw==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@jest/types': 28.1.3
-      '@types/node': 16.11.58
-      chalk: 4.1.2
-      jest-message-util: 28.1.3
-      jest-util: 28.1.3
-      slash: 3.0.0
-    dev: true
-
   /@jest/console/29.0.3:
     resolution: {integrity: sha512-cGg0r+klVHSYnfE977S9wmpuQ9L+iYuYgL+5bPXiUlUynLLYunRxswEmhBzvrSKGof5AKiHuTTmUKAqRcDY9dg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -2647,13 +2635,6 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/schemas/28.1.3:
-    resolution: {integrity: sha512-/l/VWsdt/aBXgjshLWOFyFt3IVdYypu5y2Wn2rOO1un6nkqIn8SLXzgIMYXFyYsRWDyF5EthmKJMIdJvk08grg==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@sinclair/typebox': 0.24.19
-    dev: true
-
   /@jest/schemas/29.0.0:
     resolution: {integrity: sha512-3Ab5HgYIIAnS0HjqJHQYZS+zXc4tUmTmBH3z83ajI6afXp8X3ZtdLX+nXx+I7LNkJD7uN9LAVhgnjDgZa2z0kA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -2670,16 +2651,6 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /@jest/test-result/28.1.3:
-    resolution: {integrity: sha512-kZAkxnSE+FqE8YjW8gNuoVkkC9I7S1qmenl8sGcDOLropASP+BkcGKwhXoyqQuGOGeYY0y/ixjrd/iERpEXHNg==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@jest/console': 28.1.3
-      '@jest/types': 28.1.3
-      '@types/istanbul-lib-coverage': 2.0.4
-      collect-v8-coverage: 1.0.1
-    dev: true
-
   /@jest/test-result/29.0.3:
     resolution: {integrity: sha512-vViVnQjCgTmbhDKEonKJPtcFe9G/CJO4/Np4XwYJah+lF2oI7KKeRp8t1dFvv44wN2NdbDb/qC6pi++Vpp0Dlg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -2757,18 +2728,6 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@jest/types/28.1.3:
-    resolution: {integrity: sha512-RyjiyMUZrKz/c+zlMFO1pm70DcIlST8AeWTkoUdZevew44wcNZQHsEVOiCVtgVnlFFD82FPaXycys58cf2muVQ==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@jest/schemas': 28.1.3
-      '@types/istanbul-lib-coverage': 2.0.4
-      '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.58
-      '@types/yargs': 17.0.10
-      chalk: 4.1.2
-    dev: true
-
   /@jest/types/29.0.3:
     resolution: {integrity: sha512-coBJmOQvurXjN1Hh5PzF7cmsod0zLIOXpP8KD161mqNlroMhLcwpODiEzi7ZsRl5Z/AIuxpeNm8DCl43F4kz8A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6760,21 +6719,6 @@ packages:
       pretty-format: 29.0.3
     dev: true
 
-  /jest-message-util/28.1.3:
-    resolution: {integrity: sha512-PFdn9Iewbt575zKPf1286Ht9EPoJmYT7P0kY+RibeYZ2XtOr53pDLEFoTWXbd1h4JiGiWpTBC84fc8xMXQMb7g==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@babel/code-frame': 7.18.6
-      '@jest/types': 28.1.3
-      '@types/stack-utils': 2.0.1
-      chalk: 4.1.2
-      graceful-fs: 4.2.10
-      micromatch: 4.0.5
-      pretty-format: 28.1.3
-      slash: 3.0.0
-      stack-utils: 2.0.5
-    dev: true
-
   /jest-message-util/29.0.2:
     resolution: {integrity: sha512-kcJAgms3ckJV0wUoLsAM40xAhY+pb9FVSZwicjFU9PFkaTNmqh9xd99/CzKse48wPM1ANUQKmp03/DpkY+lGrA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6830,11 +6774,6 @@ packages:
     engines: {node: '>= 10.14.2'}
     dev: true
 
-  /jest-regex-util/28.0.2:
-    resolution: {integrity: sha512-4s0IgyNIy0y9FK+cjoVYoxamT7Zeo7MhzqRGx7YDYmaQn1wucY9rotiGkBzzcMXTtjrCAP/f7f+E0F7+fxPNdw==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dev: true
-
   /jest-regex-util/29.0.0:
     resolution: {integrity: sha512-BV7VW7Sy0fInHWN93MMPtlClweYv2qrSCwfeFWmpribGZtQPWNvRSq9XOVgOEjU1iBGRKXUZil0o2AH7Iy9Lug==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6980,18 +6919,6 @@ packages:
       micromatch: 4.0.5
     dev: true
 
-  /jest-util/28.1.3:
-    resolution: {integrity: sha512-XdqfpHwpcSRko/C35uLYFM2emRAltIIKZiJ9eAmhjsj0CqZMa0p1ib0R5fWIqGhn1a103DebTbpqIaP1qCQ6tQ==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@jest/types': 28.1.3
-      '@types/node': 16.11.58
-      chalk: 4.1.2
-      ci-info: 3.3.2
-      graceful-fs: 4.2.10
-      picomatch: 2.3.1
-    dev: true
-
   /jest-util/29.0.2:
     resolution: {integrity: sha512-ozk8ruEEEACxqpz0hN9UOgtPZS0aN+NffwQduR5dVlhN+eN47vxurtvgZkYZYMpYrsmlAEx1XabkB3BnN0GfKQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -7028,8 +6955,8 @@ packages:
       pretty-format: 29.0.3
     dev: true
 
-  /jest-watch-typeahead/2.1.1_jest@29.0.3:
-    resolution: {integrity: sha512-yKrj2VBDJoMLlD6lpfWfIQpSSC1GFGvPHaLnJWRhL/PiLlBDRWFwCYe21h0o+peqcVlilQhIa2g2vncaBXS73g==}
+  /jest-watch-typeahead/2.2.0_jest@29.0.3:
+    resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       jest: ^27.0.0 || ^28.0.0 || ^29.0.0
@@ -7037,27 +6964,13 @@ packages:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
       jest: 29.0.3_@types+node@16.11.58
-      jest-regex-util: 28.0.2
-      jest-watcher: 28.1.3
+      jest-regex-util: 29.0.0
+      jest-watcher: 29.0.3
       slash: 4.0.0
       string-length: 5.0.1
       strip-ansi: 7.0.1
     dev: true
 
-  /jest-watcher/28.1.3:
-    resolution: {integrity: sha512-t4qcqj9hze+jviFPUN3YAtAEeFnr/azITXQEMARf5cMwKY2SMBRnCQTXLixTl20OR6mLh9KLMrgVJgJISym+1g==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@jest/test-result': 28.1.3
-      '@jest/types': 28.1.3
-      '@types/node': 16.11.58
-      ansi-escapes: 4.3.2
-      chalk: 4.1.2
-      emittery: 0.10.2
-      jest-util: 28.1.3
-      string-length: 4.0.2
-    dev: true
-
   /jest-watcher/29.0.3:
     resolution: {integrity: sha512-tQX9lU91A+9tyUQKUMp0Ns8xAcdhC9fo73eqA3LFxP2bSgiF49TNcc+vf3qgGYYK9qRjFpXW9+4RgF/mbxyOOw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -7977,16 +7890,6 @@ packages:
       react-is: 17.0.2
     dev: true
 
-  /pretty-format/28.1.3:
-    resolution: {integrity: sha512-8gFb/To0OmxHR9+ZTb14Df2vNxdGCX8g1xWGUTqUw5TiZvcQf5sHKObd5UcPyLLyowNwDAMTF3XWOG1B6mxl1Q==}
-    engines: {node: ^12.13.0 || ^14.15.0 || ^16.10.0 || >=17.0.0}
-    dependencies:
-      '@jest/schemas': 28.1.3
-      ansi-regex: 5.0.1
-      ansi-styles: 5.2.0
-      react-is: 18.2.0
-    dev: true
-
   /pretty-format/29.0.2:
     resolution: {integrity: sha512-wp3CdtUa3cSJVFn3Miu5a1+pxc1iPIQTenOAn+x5erXeN1+ryTcLesV5pbK/rlW5EKwp27x38MoYfNGaNXDDhg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}

From e9034a5f50b189fc6dfdaee8816bb451e1913b8e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 12 Sep 2022 21:42:52 +1000
Subject: [PATCH 003/263] build(deps): update dependency eslint to v8.23.1
 (#4003)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 174 +++++++++++++++++++++++----------------------
 2 files changed, 90 insertions(+), 86 deletions(-)

diff --git a/web/package.json b/web/package.json
index 05132e7ec..c79b42533 100644
--- a/web/package.json
+++ b/web/package.json
@@ -157,7 +157,7 @@
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.7",
     "esbuild-jest": "0.5.0",
-    "eslint": "8.23.0",
+    "eslint": "8.23.1",
     "eslint-config-prettier": "8.5.0",
     "eslint-config-react-app": "7.0.1",
     "eslint-formatter-rdjson": "1.0.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 283f4019d..49b8f3d51 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -28,7 +28,7 @@ specifiers:
   classnames: 2.3.1
   esbuild: 0.15.7
   esbuild-jest: 0.5.0
-  eslint: 8.23.0
+  eslint: 8.23.1
   eslint-config-prettier: 8.5.0
   eslint-config-react-app: 7.0.1
   eslint-formatter-rdjson: 1.0.5
@@ -101,21 +101,21 @@ devDependencies:
   '@types/react': 18.0.19
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.36.2_2l2r3i3lm6jysqd4ac3ql4n2mm
-  '@typescript-eslint/parser': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+  '@typescript-eslint/eslint-plugin': 5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e
+  '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
   '@vitejs/plugin-react': 2.1.0_vite@3.1.0
   esbuild: 0.15.7
   esbuild-jest: 0.5.0_esbuild@0.15.7
-  eslint: 8.23.0
-  eslint-config-prettier: 8.5.0_eslint@8.23.0
-  eslint-config-react-app: 7.0.1_cr6wnmwwhjzeqnbkyvjwx3muuu
+  eslint: 8.23.1
+  eslint-config-prettier: 8.5.0_eslint@8.23.1
+  eslint-config-react-app: 7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.1_faomjyrlgqmwswvqymymzkxcqi
-  eslint-plugin-import: 2.26.0_ikxfxf6lcdzwf3sfhs76tj4x7m
-  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.0
-  eslint-plugin-prettier: 4.2.1_tgumt6uwl2md3n6uqnggd6wvce
-  eslint-plugin-react: 7.31.8_eslint@8.23.0
-  eslint-plugin-react-hooks: 4.6.0_eslint@8.23.0
+  eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
+  eslint-plugin-import: 2.26.0_bkwixupcywvgmrzjbgj7n47r6y
+  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
+  eslint-plugin-prettier: 4.2.1_cabrci5exjdaojcvd6xoxgeowu
+  eslint-plugin-react: 7.31.8_eslint@8.23.1
+  eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
   husky: 8.0.1
   jest: 29.0.3_@types+node@16.11.58
   jest-environment-jsdom: 29.0.3
@@ -125,7 +125,7 @@ devDependencies:
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
   vite: 3.1.0
-  vite-plugin-eslint: 1.8.1_eslint@8.23.0+vite@3.1.0
+  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.0
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1_vite@3.1.0
   vite-tsconfig-paths: 3.5.0_vite@3.1.0
@@ -201,7 +201,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/eslint-parser/7.18.2_oj2zia55h5aiwaxxlc5vhqdsce:
+  /@babel/eslint-parser/7.18.2_i26poghmbi7wetx4acurtjxrle:
     resolution: {integrity: sha512-oFQYkE8SuH14+uR51JVAmdqwKYXGRjEXx7s+WiagVjqQ+HPE+nnwyF2qlVG8evUsUHmPcA+6YXMEDbIhEyQc5A==}
     engines: {node: ^10.13.0 || ^12.13.0 || >=14.0.0}
     peerDependencies:
@@ -212,7 +212,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      eslint: 8.23.0
+      eslint: 8.23.1
       eslint-scope: 5.1.1
       eslint-visitor-keys: 2.1.0
       semver: 6.3.0
@@ -2387,8 +2387,8 @@ packages:
     dev: true
     optional: true
 
-  /@eslint/eslintrc/1.3.1:
-    resolution: {integrity: sha512-OhSY22oQQdw3zgPOOwdoj01l/Dzl1Z+xyUP33tkSN+aqyEhymJCcPHyXt+ylW8FSe0TfRC2VG+ROQOapD0aZSQ==}
+  /@eslint/eslintrc/1.3.2:
+    resolution: {integrity: sha512-AXYd23w1S/bv3fTs3Lz0vjiYemS08jWkI3hYyS9I1ry+0f+Yjs1wm+sU0BS8qDOPrBIkp4qHYC16I8uVtpLajQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
       ajv: 6.12.6
@@ -3453,7 +3453,7 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.36.2_2l2r3i3lm6jysqd4ac3ql4n2mm:
+  /@typescript-eslint/eslint-plugin/5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e:
     resolution: {integrity: sha512-OwwR8LRwSnI98tdc2z7mJYgY60gf7I9ZfGjN5EjCwwns9bdTuQfAXcsjSB2wSQ/TVNYSGKf4kzVXbNGaZvwiXw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3464,12 +3464,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
       '@typescript-eslint/scope-manager': 5.36.2
-      '@typescript-eslint/type-utils': 5.36.2_itqs5654cmlnjraw6gjzqacppi
-      '@typescript-eslint/utils': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+      '@typescript-eslint/type-utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
       debug: 4.3.4
-      eslint: 8.23.0
+      eslint: 8.23.1
       functional-red-black-tree: 1.0.1
       ignore: 5.2.0
       regexpp: 3.2.0
@@ -3480,20 +3480,20 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/experimental-utils/5.30.6_itqs5654cmlnjraw6gjzqacppi:
+  /@typescript-eslint/experimental-utils/5.30.6_irgkl5vooow2ydyo6aokmferha:
     resolution: {integrity: sha512-bqvT+0L8IjtW7MCrMgm9oVNxs4g7mESro1mm5c1/SNfTnHuFTf9OUX1WzVkTz75M9cp//UrTrSmGvK48NEKshQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.30.6_itqs5654cmlnjraw6gjzqacppi
-      eslint: 8.23.0
+      '@typescript-eslint/utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
+      eslint: 8.23.1
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.36.2_itqs5654cmlnjraw6gjzqacppi:
+  /@typescript-eslint/parser/5.36.2_irgkl5vooow2ydyo6aokmferha:
     resolution: {integrity: sha512-qS/Kb0yzy8sR0idFspI9Z6+t7mqk/oRjnAYfewG+VN73opAUvmYL3oPIMmgOX6CnQS6gmVIXGshlb5RY/R22pA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3507,7 +3507,7 @@ packages:
       '@typescript-eslint/types': 5.36.2
       '@typescript-eslint/typescript-estree': 5.36.2_typescript@4.8.3
       debug: 4.3.4
-      eslint: 8.23.0
+      eslint: 8.23.1
       typescript: 4.8.3
     transitivePeerDependencies:
       - supports-color
@@ -3529,7 +3529,7 @@ packages:
       '@typescript-eslint/visitor-keys': 5.36.2
     dev: true
 
-  /@typescript-eslint/type-utils/5.36.2_itqs5654cmlnjraw6gjzqacppi:
+  /@typescript-eslint/type-utils/5.36.2_irgkl5vooow2ydyo6aokmferha:
     resolution: {integrity: sha512-rPQtS5rfijUWLouhy6UmyNquKDPhQjKsaKH0WnY6hl/07lasj8gPaH2UD8xWkePn6SC+jW2i9c2DZVDnL+Dokw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3540,9 +3540,9 @@ packages:
         optional: true
     dependencies:
       '@typescript-eslint/typescript-estree': 5.36.2_typescript@4.8.3
-      '@typescript-eslint/utils': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+      '@typescript-eslint/utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
       debug: 4.3.4
-      eslint: 8.23.0
+      eslint: 8.23.1
       tsutils: 3.21.0_typescript@4.8.3
       typescript: 4.8.3
     transitivePeerDependencies:
@@ -3601,7 +3601,7 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/utils/5.30.6_itqs5654cmlnjraw6gjzqacppi:
+  /@typescript-eslint/utils/5.30.6_irgkl5vooow2ydyo6aokmferha:
     resolution: {integrity: sha512-xFBLc/esUbLOJLk9jKv0E9gD/OH966M40aY9jJ8GiqpSkP2xOV908cokJqqhVd85WoIvHVHYXxSFE4cCSDzVvA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3611,15 +3611,15 @@ packages:
       '@typescript-eslint/scope-manager': 5.30.6
       '@typescript-eslint/types': 5.30.6
       '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.3
-      eslint: 8.23.0
+      eslint: 8.23.1
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.23.0
+      eslint-utils: 3.0.0_eslint@8.23.1
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.36.2_itqs5654cmlnjraw6gjzqacppi:
+  /@typescript-eslint/utils/5.36.2_irgkl5vooow2ydyo6aokmferha:
     resolution: {integrity: sha512-uNcopWonEITX96v9pefk9DC1bWMdkweeSsewJ6GeC7L6j2t0SJywisgkr9wUTtXk90fi2Eljj90HSHm3OGdGRg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3629,9 +3629,9 @@ packages:
       '@typescript-eslint/scope-manager': 5.36.2
       '@typescript-eslint/types': 5.36.2
       '@typescript-eslint/typescript-estree': 5.36.2_typescript@4.8.3
-      eslint: 8.23.0
+      eslint: 8.23.1
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.23.0
+      eslint-utils: 3.0.0_eslint@8.23.1
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5097,16 +5097,16 @@ packages:
       source-map: 0.6.1
     dev: true
 
-  /eslint-config-prettier/8.5.0_eslint@8.23.0:
+  /eslint-config-prettier/8.5.0_eslint@8.23.1:
     resolution: {integrity: sha512-obmWKLUNCnhtQRKc+tmnYuQl0pFU1ibYJQ5BGhTVB08bHe9wC8qUeG7c08dj9XX+AuPj1YSGSQIHl1pnDHZR0Q==}
     hasBin: true
     peerDependencies:
       eslint: '>=7.0.0'
     dependencies:
-      eslint: 8.23.0
+      eslint: 8.23.1
     dev: true
 
-  /eslint-config-react-app/7.0.1_cr6wnmwwhjzeqnbkyvjwx3muuu:
+  /eslint-config-react-app/7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5117,20 +5117,20 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/eslint-parser': 7.18.2_oj2zia55h5aiwaxxlc5vhqdsce
+      '@babel/eslint-parser': 7.18.2_i26poghmbi7wetx4acurtjxrle
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.36.2_2l2r3i3lm6jysqd4ac3ql4n2mm
-      '@typescript-eslint/parser': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+      '@typescript-eslint/eslint-plugin': 5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e
+      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
-      eslint: 8.23.0
-      eslint-plugin-flowtype: 8.0.3_eslint@8.23.0
-      eslint-plugin-import: 2.26.0_ikxfxf6lcdzwf3sfhs76tj4x7m
-      eslint-plugin-jest: 25.7.0_awpfis7kegyr7vghibvuyaqt2u
-      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.0
-      eslint-plugin-react: 7.31.8_eslint@8.23.0
-      eslint-plugin-react-hooks: 4.6.0_eslint@8.23.0
-      eslint-plugin-testing-library: 5.5.1_itqs5654cmlnjraw6gjzqacppi
+      eslint: 8.23.1
+      eslint-plugin-flowtype: 8.0.3_eslint@8.23.1
+      eslint-plugin-import: 2.26.0_bkwixupcywvgmrzjbgj7n47r6y
+      eslint-plugin-jest: 25.7.0_3uxzneizrm2frppo2upad2a3qa
+      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
+      eslint-plugin-react: 7.31.8_eslint@8.23.1
+      eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
+      eslint-plugin-testing-library: 5.5.1_irgkl5vooow2ydyo6aokmferha
       typescript: 4.8.3
     transitivePeerDependencies:
       - '@babel/plugin-syntax-flow'
@@ -5154,7 +5154,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-import-resolver-typescript/3.5.1_faomjyrlgqmwswvqymymzkxcqi:
+  /eslint-import-resolver-typescript/3.5.1_hdzsmr7kawaomymueo2tso6fjq:
     resolution: {integrity: sha512-U7LUjNJPYjNsHvAUAkt/RU3fcTSpbllA0//35B4eLYTX74frmOepbt7F7J3D1IGtj9k21buOpaqtDd4ZlS/BYQ==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -5163,8 +5163,8 @@ packages:
     dependencies:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
-      eslint: 8.23.0
-      eslint-plugin-import: 2.26.0_ikxfxf6lcdzwf3sfhs76tj4x7m
+      eslint: 8.23.1
+      eslint-plugin-import: 2.26.0_bkwixupcywvgmrzjbgj7n47r6y
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5192,16 +5192,16 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
-      eslint-import-resolver-typescript: 3.5.1_faomjyrlgqmwswvqymymzkxcqi
+      eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
       find-up: 2.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /eslint-plugin-flowtype/8.0.3_eslint@8.23.0:
+  /eslint-plugin-flowtype/8.0.3_eslint@8.23.1:
     resolution: {integrity: sha512-dX8l6qUL6O+fYPtpNRideCFSpmWOUVx5QcaGLVqe/vlDiBSe4vYljDWDETwnyFzpl7By/WVIu6rcrniCgH9BqQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5214,12 +5214,12 @@ packages:
       '@babel/plugin-transform-react-jsx':
         optional: true
     dependencies:
-      eslint: 8.23.0
+      eslint: 8.23.1
       lodash: 4.17.21
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_ikxfxf6lcdzwf3sfhs76tj4x7m:
+  /eslint-plugin-import/2.26.0_bkwixupcywvgmrzjbgj7n47r6y:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5229,12 +5229,12 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.36.2_itqs5654cmlnjraw6gjzqacppi
+      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
-      eslint: 8.23.0
+      eslint: 8.23.1
       eslint-import-resolver-node: 0.3.6
       eslint-module-utils: 2.7.3_7liths4w263er5tix7tpkwznyq
       has: 1.0.3
@@ -5250,7 +5250,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_awpfis7kegyr7vghibvuyaqt2u:
+  /eslint-plugin-jest/25.7.0_3uxzneizrm2frppo2upad2a3qa:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5263,16 +5263,16 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.36.2_2l2r3i3lm6jysqd4ac3ql4n2mm
-      '@typescript-eslint/experimental-utils': 5.30.6_itqs5654cmlnjraw6gjzqacppi
-      eslint: 8.23.0
+      '@typescript-eslint/eslint-plugin': 5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e
+      '@typescript-eslint/experimental-utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
+      eslint: 8.23.1
       jest: 29.0.3_@types+node@16.11.58
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.23.0:
+  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.23.1:
     resolution: {integrity: sha512-sXgFVNHiWffBq23uiS/JaP6eVR622DqwB4yTzKvGZGcPq6/yZ3WmOZfuBks/vHWo9GaFOqC2ZK4i6+C35knx7Q==}
     engines: {node: '>=4.0'}
     peerDependencies:
@@ -5286,7 +5286,7 @@ packages:
       axobject-query: 2.2.0
       damerau-levenshtein: 1.0.8
       emoji-regex: 9.2.2
-      eslint: 8.23.0
+      eslint: 8.23.1
       has: 1.0.3
       jsx-ast-utils: 3.3.2
       language-tags: 1.0.5
@@ -5294,7 +5294,7 @@ packages:
       semver: 6.3.0
     dev: true
 
-  /eslint-plugin-prettier/4.2.1_tgumt6uwl2md3n6uqnggd6wvce:
+  /eslint-plugin-prettier/4.2.1_cabrci5exjdaojcvd6xoxgeowu:
     resolution: {integrity: sha512-f/0rXLXUt0oFYs8ra4w49wYZBG5GKZpAYsJSm6rnYL5uVDjd+zowwMwVZHnAjf4edNrKpCDYfXDgmRE/Ak7QyQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5305,22 +5305,22 @@ packages:
       eslint-config-prettier:
         optional: true
     dependencies:
-      eslint: 8.23.0
-      eslint-config-prettier: 8.5.0_eslint@8.23.0
+      eslint: 8.23.1
+      eslint-config-prettier: 8.5.0_eslint@8.23.1
       prettier: 2.7.1
       prettier-linter-helpers: 1.0.0
     dev: true
 
-  /eslint-plugin-react-hooks/4.6.0_eslint@8.23.0:
+  /eslint-plugin-react-hooks/4.6.0_eslint@8.23.1:
     resolution: {integrity: sha512-oFc7Itz9Qxh2x4gNHStv3BqJq54ExXmfC+a1NjAta66IAN87Wu0R/QArgIS9qKzX3dXKPI9H5crl9QchNMY9+g==}
     engines: {node: '>=10'}
     peerDependencies:
       eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0
     dependencies:
-      eslint: 8.23.0
+      eslint: 8.23.1
     dev: true
 
-  /eslint-plugin-react/7.31.8_eslint@8.23.0:
+  /eslint-plugin-react/7.31.8_eslint@8.23.1:
     resolution: {integrity: sha512-5lBTZmgQmARLLSYiwI71tiGVTLUuqXantZM6vlSY39OaDSV0M7+32K5DnLkmFrwTe+Ksz0ffuLUC91RUviVZfw==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5329,7 +5329,7 @@ packages:
       array-includes: 3.1.5
       array.prototype.flatmap: 1.3.0
       doctrine: 2.1.0
-      eslint: 8.23.0
+      eslint: 8.23.1
       estraverse: 5.3.0
       jsx-ast-utils: 3.3.2
       minimatch: 3.1.2
@@ -5343,14 +5343,14 @@ packages:
       string.prototype.matchall: 4.0.7
     dev: true
 
-  /eslint-plugin-testing-library/5.5.1_itqs5654cmlnjraw6gjzqacppi:
+  /eslint-plugin-testing-library/5.5.1_irgkl5vooow2ydyo6aokmferha:
     resolution: {integrity: sha512-plLEkkbAKBjPxsLj7x4jNapcHAg2ernkQlKKrN2I8NrQwPISZHyCUNvg5Hv3EDqOQReToQb5bnqXYbkijJPE/g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0, npm: '>=6'}
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.36.2_itqs5654cmlnjraw6gjzqacppi
-      eslint: 8.23.0
+      '@typescript-eslint/utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      eslint: 8.23.1
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5372,13 +5372,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.23.0:
+  /eslint-utils/3.0.0_eslint@8.23.1:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.23.0
+      eslint: 8.23.1
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -5392,12 +5392,12 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.23.0:
-    resolution: {integrity: sha512-pBG/XOn0MsJcKcTRLr27S5HpzQo4kLr+HjLQIyK4EiCsijDl/TB+h5uEuJU6bQ8Edvwz1XWOjpaP2qgnXGpTcA==}
+  /eslint/8.23.1:
+    resolution: {integrity: sha512-w7C1IXCc6fNqjpuYd0yPlcTKKmHlHHktRkzmBPZ+7cvNBQuiNjx0xaMTjAJGCafJhQkrFJooREv0CtrVzmHwqg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@eslint/eslintrc': 1.3.1
+      '@eslint/eslintrc': 1.3.2
       '@humanwhocodes/config-array': 0.10.4
       '@humanwhocodes/gitignore-to-minimatch': 1.0.2
       '@humanwhocodes/module-importer': 1.0.1
@@ -5408,7 +5408,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.23.0
+      eslint-utils: 3.0.0_eslint@8.23.1
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -5416,7 +5416,6 @@ packages:
       fast-deep-equal: 3.1.3
       file-entry-cache: 6.0.1
       find-up: 5.0.0
-      functional-red-black-tree: 1.0.1
       glob-parent: 6.0.2
       globals: 13.16.0
       globby: 11.1.0
@@ -5425,6 +5424,7 @@ packages:
       import-fresh: 3.3.0
       imurmurhash: 0.1.4
       is-glob: 4.0.3
+      js-sdsl: 4.1.4
       js-yaml: 4.1.0
       json-stable-stringify-without-jsonify: 1.0.1
       levn: 0.4.1
@@ -7023,6 +7023,10 @@ packages:
       - ts-node
     dev: true
 
+  /js-sdsl/4.1.4:
+    resolution: {integrity: sha512-Y2/yD55y5jteOAmY50JbUZYwk3CP3wnLPEZnlR1w9oKhITrBEtAxwuWKebFf8hMrPMgbYwFoWK/lH2sBkErELw==}
+    dev: true
+
   /js-tokens/4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
@@ -9104,7 +9108,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.23.0+vite@3.1.0:
+  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.0:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9112,7 +9116,7 @@ packages:
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@types/eslint': 8.4.5
-      eslint: 8.23.0
+      eslint: 8.23.1
       rollup: 2.78.0
       vite: 3.1.0
     dev: true

From c1e97f841d09acb5cd540b1490b88bcec237359f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Sep 2022 06:18:29 +1000
Subject: [PATCH 004/263] build(deps): update dependency @mui/material to
 v5.10.5 (#4004)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 38 +++++++++++++++++++-------------------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/web/package.json b/web/package.json
index c79b42533..15145beb9 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,7 +26,7 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.3",
-    "@mui/material": "5.10.4",
+    "@mui/material": "5.10.5",
     "@mui/styles": "5.10.3",
     "axios": "0.27.2",
     "classnames": "2.3.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 49b8f3d51..f85802a59 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,7 +11,7 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.3
-  '@mui/material': 5.10.4
+  '@mui/material': 5.10.5
   '@mui/styles': 5.10.3
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
@@ -72,8 +72,8 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.3_a2hj5atstaulbk2sc24hz7fpli
-  '@mui/material': 5.10.4_g6p6knjyjrjltwufjb7cltiueu
+  '@mui/icons-material': 5.10.3_q2hl5ykxc65u7zta43mkuvhuom
+  '@mui/material': 5.10.5_g6p6knjyjrjltwufjb7cltiueu
   '@mui/styles': 5.10.3_fn6mmk7tilns4p7ajkklhuudvi
   axios: 0.27.2
   classnames: 2.3.1
@@ -2785,8 +2785,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.96_nylzxt5ale4dsv666zkb25cgtm:
-    resolution: {integrity: sha512-GZf2YguepLFMWGG8vQNLRl7FlXPDeyxQBYgrkHxwNJYeRw55rrGrJxHzL1iCbk71VZ2IIAIs5IAxNpyHK9iqPQ==}
+  /@mui/base/5.0.0-alpha.97_nylzxt5ale4dsv666zkb25cgtm:
+    resolution: {integrity: sha512-gvo0hOg/tBzfJ3eDQOGAPBJJU+qTWd0e5zBEMFIkT1ekJqXx14JtIHvheOFU17y9iDciYE256Q8g+tj6a1dcBA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2809,11 +2809,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.4:
-    resolution: {integrity: sha512-VGekVa9dleJ+ii47+gXvKUV5a11T0nsjXN8bk5NqiJRQWRCAhbTHgsfZuctNcMeLW9FSf2gu6U0k2U6rhABKcA==}
+  /@mui/core-downloads-tracker/5.10.5:
+    resolution: {integrity: sha512-sZYg85rQdlgDYU3V4WcT2Dl+k+y2wYqN04aUvVkFksRR0j81sj6KmfXx4842HJQcq5rjzcTvh4N+yv66XR/9fA==}
     dev: false
 
-  /@mui/icons-material/5.10.3_a2hj5atstaulbk2sc24hz7fpli:
+  /@mui/icons-material/5.10.3_q2hl5ykxc65u7zta43mkuvhuom:
     resolution: {integrity: sha512-o0kbUlsWCBtCE0wP33cGKbyryCh7kpm2EECYMPDmWrLhbA+HUODXIdhiTFS26szp2xXo9HY1lEx0ufeJ+tddYw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2825,13 +2825,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.18.9
-      '@mui/material': 5.10.4_g6p6knjyjrjltwufjb7cltiueu
+      '@mui/material': 5.10.5_g6p6knjyjrjltwufjb7cltiueu
       '@types/react': 18.0.19
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.4_g6p6knjyjrjltwufjb7cltiueu:
-    resolution: {integrity: sha512-uwupjunU3p8XxZU4f2zF1GYlwB9GDxW1H05BMDPSh0u+37yLxuQDMMxwQQPUo9jSA5Y22/eR4Y71ScxKU89QHg==}
+  /@mui/material/5.10.5_g6p6knjyjrjltwufjb7cltiueu:
+    resolution: {integrity: sha512-VFMadvfA6jqx5DCk2xoBl4bAGyzgmmubJIuB7fUWUZBwYIYL5Ea9SsoFpt5kawA6O2feuj69alDN2fhxPw1MeQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2850,9 +2850,9 @@ packages:
       '@babel/runtime': 7.18.9
       '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
       '@emotion/styled': 11.10.4_v6omebeixt23oq3ljl3rjllla4
-      '@mui/base': 5.0.0-alpha.96_nylzxt5ale4dsv666zkb25cgtm
-      '@mui/core-downloads-tracker': 5.10.4
-      '@mui/system': 5.10.4_wc57cflkzchz4hcfrsslybhb6e
+      '@mui/base': 5.0.0-alpha.97_nylzxt5ale4dsv666zkb25cgtm
+      '@mui/core-downloads-tracker': 5.10.5
+      '@mui/system': 5.10.5_wc57cflkzchz4hcfrsslybhb6e
       '@mui/types': 7.2.0_@types+react@18.0.19
       '@mui/utils': 5.10.3_react@18.2.0
       '@types/react': 18.0.19
@@ -2883,8 +2883,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styled-engine/5.10.4_hfzxdiydbrbhhfpkwuv3jhvwmq:
-    resolution: {integrity: sha512-y29qlonPj4wndTjbePk9O6uWp/FBRNXjiMwI64oiYQ+v3E0EkLnADfDn49GAqOJAfN/r7nHbVZBlvLNIcMbgDg==}
+  /@mui/styled-engine/5.10.5_hfzxdiydbrbhhfpkwuv3jhvwmq:
+    resolution: {integrity: sha512-6U6tTdf+H1OsjgcFoY12gYPR+qqZ1WHGGIahK5V7JhMkMUgH7ozyiNi8s1LzmwrUlAz1hAAhuO5nBYXku3wWvw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.4.1
@@ -2936,8 +2936,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.4_wc57cflkzchz4hcfrsslybhb6e:
-    resolution: {integrity: sha512-fE7LtYStPHPfq7EJXEVLQGvz23pS5YwSI7A4mWEFyyW21hHUh0c1opZXb7caHJsUTiBoC22W7R8GGfbVdSOnZA==}
+  /@mui/system/5.10.5_wc57cflkzchz4hcfrsslybhb6e:
+    resolution: {integrity: sha512-GUPiDVZTKp9yH3FVeLSIw3Bqsyl7qLxtAK1ZiZmC8e+zdH7bcnZZXvWK3vPIbx35ZyhQpvAOWQFpiF9TjdA77w==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2956,7 +2956,7 @@ packages:
       '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
       '@emotion/styled': 11.10.4_v6omebeixt23oq3ljl3rjllla4
       '@mui/private-theming': 5.10.3_fn6mmk7tilns4p7ajkklhuudvi
-      '@mui/styled-engine': 5.10.4_hfzxdiydbrbhhfpkwuv3jhvwmq
+      '@mui/styled-engine': 5.10.5_hfzxdiydbrbhhfpkwuv3jhvwmq
       '@mui/types': 7.2.0_@types+react@18.0.19
       '@mui/utils': 5.10.3_react@18.2.0
       '@types/react': 18.0.19

From a3fbdbd4c65b88aeb59c8b2227514144242c8ed8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Sep 2022 07:07:44 +1000
Subject: [PATCH 005/263] build(deps): update typescript-eslint monorepo to
 v5.37.0 (#4005)

---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 102 ++++++++++++++++++++++-----------------------
 2 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 15145beb9..0358dc5b8 100644
--- a/web/package.json
+++ b/web/package.json
@@ -152,8 +152,8 @@
     "@types/react": "18.0.19",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.36.2",
-    "@typescript-eslint/parser": "5.36.2",
+    "@typescript-eslint/eslint-plugin": "5.37.0",
+    "@typescript-eslint/parser": "5.37.0",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.7",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index f85802a59..8f7815cc3 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.19
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.36.2
-  '@typescript-eslint/parser': 5.36.2
+  '@typescript-eslint/eslint-plugin': 5.37.0
+  '@typescript-eslint/parser': 5.37.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   classnames: 2.3.1
@@ -101,8 +101,8 @@ devDependencies:
   '@types/react': 18.0.19
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e
-  '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
+  '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
+  '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
   '@vitejs/plugin-react': 2.1.0_vite@3.1.0
   esbuild: 0.15.7
   esbuild-jest: 0.5.0_esbuild@0.15.7
@@ -111,7 +111,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
-  eslint-plugin-import: 2.26.0_bkwixupcywvgmrzjbgj7n47r6y
+  eslint-plugin-import: 2.26.0_dnpzw43gx7nu2gqo7farhnkjku
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
   eslint-plugin-prettier: 4.2.1_cabrci5exjdaojcvd6xoxgeowu
   eslint-plugin-react: 7.31.8_eslint@8.23.1
@@ -3453,8 +3453,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e:
-    resolution: {integrity: sha512-OwwR8LRwSnI98tdc2z7mJYgY60gf7I9ZfGjN5EjCwwns9bdTuQfAXcsjSB2wSQ/TVNYSGKf4kzVXbNGaZvwiXw==}
+  /@typescript-eslint/eslint-plugin/5.37.0_22c5fnooleyfkzrkkgdmel5kmi:
+    resolution: {integrity: sha512-Fde6W0IafXktz1UlnhGkrrmnnGpAo1kyX7dnyHHVrmwJOn72Oqm3eYtddrpOwwel2W8PAK9F3pIL5S+lfoM0og==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3464,10 +3464,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
-      '@typescript-eslint/scope-manager': 5.36.2
-      '@typescript-eslint/type-utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
-      '@typescript-eslint/utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/scope-manager': 5.37.0
+      '@typescript-eslint/type-utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
       debug: 4.3.4
       eslint: 8.23.1
       functional-red-black-tree: 1.0.1
@@ -3493,8 +3493,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.36.2_irgkl5vooow2ydyo6aokmferha:
-    resolution: {integrity: sha512-qS/Kb0yzy8sR0idFspI9Z6+t7mqk/oRjnAYfewG+VN73opAUvmYL3oPIMmgOX6CnQS6gmVIXGshlb5RY/R22pA==}
+  /@typescript-eslint/parser/5.37.0_irgkl5vooow2ydyo6aokmferha:
+    resolution: {integrity: sha512-01VzI/ipYKuaG5PkE5+qyJ6m02fVALmMPY3Qq5BHflDx3y4VobbLdHQkSMg9VPRS4KdNt4oYTMaomFoHonBGAw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3503,9 +3503,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.36.2
-      '@typescript-eslint/types': 5.36.2
-      '@typescript-eslint/typescript-estree': 5.36.2_typescript@4.8.3
+      '@typescript-eslint/scope-manager': 5.37.0
+      '@typescript-eslint/types': 5.37.0
+      '@typescript-eslint/typescript-estree': 5.37.0_typescript@4.8.3
       debug: 4.3.4
       eslint: 8.23.1
       typescript: 4.8.3
@@ -3521,16 +3521,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.36.2:
-    resolution: {integrity: sha512-cNNP51L8SkIFSfce8B1NSUBTJTu2Ts4nWeWbFrdaqjmn9yKrAaJUBHkyTZc0cL06OFHpb+JZq5AUHROS398Orw==}
+  /@typescript-eslint/scope-manager/5.37.0:
+    resolution: {integrity: sha512-F67MqrmSXGd/eZnujjtkPgBQzgespu/iCZ+54Ok9X5tALb9L2v3G+QBSoWkXG0p3lcTJsL+iXz5eLUEdSiJU9Q==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.36.2
-      '@typescript-eslint/visitor-keys': 5.36.2
+      '@typescript-eslint/types': 5.37.0
+      '@typescript-eslint/visitor-keys': 5.37.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.36.2_irgkl5vooow2ydyo6aokmferha:
-    resolution: {integrity: sha512-rPQtS5rfijUWLouhy6UmyNquKDPhQjKsaKH0WnY6hl/07lasj8gPaH2UD8xWkePn6SC+jW2i9c2DZVDnL+Dokw==}
+  /@typescript-eslint/type-utils/5.37.0_irgkl5vooow2ydyo6aokmferha:
+    resolution: {integrity: sha512-BSx/O0Z0SXOF5tY0bNTBcDEKz2Ec20GVYvq/H/XNKiUorUFilH7NPbFUuiiyzWaSdN3PA8JV0OvYx0gH/5aFAQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3539,8 +3539,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.36.2_typescript@4.8.3
-      '@typescript-eslint/utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/typescript-estree': 5.37.0_typescript@4.8.3
+      '@typescript-eslint/utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
       debug: 4.3.4
       eslint: 8.23.1
       tsutils: 3.21.0_typescript@4.8.3
@@ -3554,8 +3554,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.36.2:
-    resolution: {integrity: sha512-9OJSvvwuF1L5eS2EQgFUbECb99F0mwq501w0H0EkYULkhFa19Qq7WFbycdw1PexAc929asupbZcgjVIe6OK/XQ==}
+  /@typescript-eslint/types/5.37.0:
+    resolution: {integrity: sha512-3frIJiTa5+tCb2iqR/bf7XwU20lnU05r/sgPJnRpwvfZaqCJBrl8Q/mw9vr3NrNdB/XtVyMA0eppRMMBqdJ1bA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3580,8 +3580,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.36.2_typescript@4.8.3:
-    resolution: {integrity: sha512-8fyH+RfbKc0mTspfuEjlfqA4YywcwQK2Amcf6TDOwaRLg7Vwdu4bZzyvBZp4bjt1RRjQ5MDnOZahxMrt2l5v9w==}
+  /@typescript-eslint/typescript-estree/5.37.0_typescript@4.8.3:
+    resolution: {integrity: sha512-JkFoFIt/cx59iqEDSgIGnQpCTRv96MQnXCYvJi7QhBC24uyuzbD8wVbajMB1b9x4I0octYFJ3OwjAwNqk1AjDA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3589,8 +3589,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.36.2
-      '@typescript-eslint/visitor-keys': 5.36.2
+      '@typescript-eslint/types': 5.37.0
+      '@typescript-eslint/visitor-keys': 5.37.0
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3619,16 +3619,16 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.36.2_irgkl5vooow2ydyo6aokmferha:
-    resolution: {integrity: sha512-uNcopWonEITX96v9pefk9DC1bWMdkweeSsewJ6GeC7L6j2t0SJywisgkr9wUTtXk90fi2Eljj90HSHm3OGdGRg==}
+  /@typescript-eslint/utils/5.37.0_irgkl5vooow2ydyo6aokmferha:
+    resolution: {integrity: sha512-jUEJoQrWbZhmikbcWSMDuUSxEE7ID2W/QCV/uz10WtQqfOuKZUqFGjqLJ+qhDd17rjgp+QJPqTdPIBWwoob2NQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
-      '@typescript-eslint/scope-manager': 5.36.2
-      '@typescript-eslint/types': 5.36.2
-      '@typescript-eslint/typescript-estree': 5.36.2_typescript@4.8.3
+      '@typescript-eslint/scope-manager': 5.37.0
+      '@typescript-eslint/types': 5.37.0
+      '@typescript-eslint/typescript-estree': 5.37.0_typescript@4.8.3
       eslint: 8.23.1
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.23.1
@@ -3645,11 +3645,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.36.2:
-    resolution: {integrity: sha512-BtRvSR6dEdrNt7Net2/XDjbYKU5Ml6GqJgVfXT0CxTCJlnIqK7rAGreuWKMT2t8cFUT2Msv5oxw0GMRD7T5J7A==}
+  /@typescript-eslint/visitor-keys/5.37.0:
+    resolution: {integrity: sha512-Hp7rT4cENBPIzMwrlehLW/28EVCOcE9U1Z1BQTc8EA8v5qpr7GRGuG+U58V5tTY48zvUOA3KHvw3rA8tY9fbdA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.36.2
+      '@typescript-eslint/types': 5.37.0
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5119,14 +5119,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_i26poghmbi7wetx4acurtjxrle
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e
-      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
+      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.23.1
       eslint-plugin-flowtype: 8.0.3_eslint@8.23.1
-      eslint-plugin-import: 2.26.0_bkwixupcywvgmrzjbgj7n47r6y
-      eslint-plugin-jest: 25.7.0_3uxzneizrm2frppo2upad2a3qa
+      eslint-plugin-import: 2.26.0_dnpzw43gx7nu2gqo7farhnkjku
+      eslint-plugin-jest: 25.7.0_agihzdubifvlsy3vxhvuafdnha
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
       eslint-plugin-react: 7.31.8_eslint@8.23.1
       eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
@@ -5164,7 +5164,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.23.1
-      eslint-plugin-import: 2.26.0_bkwixupcywvgmrzjbgj7n47r6y
+      eslint-plugin-import: 2.26.0_dnpzw43gx7nu2gqo7farhnkjku
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5174,7 +5174,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_7liths4w263er5tix7tpkwznyq:
+  /eslint-module-utils/2.7.3_yotz5rgxbsebaglktiy7k3y6ua:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5192,7 +5192,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
@@ -5219,7 +5219,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_bkwixupcywvgmrzjbgj7n47r6y:
+  /eslint-plugin-import/2.26.0_dnpzw43gx7nu2gqo7farhnkjku:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5229,14 +5229,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.23.1
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_7liths4w263er5tix7tpkwznyq
+      eslint-module-utils: 2.7.3_yotz5rgxbsebaglktiy7k3y6ua
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5250,7 +5250,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_3uxzneizrm2frppo2upad2a3qa:
+  /eslint-plugin-jest/25.7.0_agihzdubifvlsy3vxhvuafdnha:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5263,7 +5263,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.36.2_wxqvmnl3i4rbvz4ixyoiufmx3e
+      '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
       '@typescript-eslint/experimental-utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
       eslint: 8.23.1
       jest: 29.0.3_@types+node@16.11.58
@@ -5349,7 +5349,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.36.2_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
       eslint: 8.23.1
     transitivePeerDependencies:
       - supports-color

From a5f0db5f6dce51ebd54b4de1563fe27c38c94e8f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 14 Sep 2022 08:56:02 +1000
Subject: [PATCH 006/263] build(deps): update dependency classnames to v2.3.2
 (#4006)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 0358dc5b8..b6ced1b01 100644
--- a/web/package.json
+++ b/web/package.json
@@ -29,7 +29,7 @@
     "@mui/material": "5.10.5",
     "@mui/styles": "5.10.3",
     "axios": "0.27.2",
-    "classnames": "2.3.1",
+    "classnames": "2.3.2",
     "i18next": "21.9.1",
     "i18next-browser-languagedetector": "6.1.5",
     "i18next-http-backend": "1.4.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 8f7815cc3..e4bd1dc3d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -25,7 +25,7 @@ specifiers:
   '@typescript-eslint/parser': 5.37.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
-  classnames: 2.3.1
+  classnames: 2.3.2
   esbuild: 0.15.7
   esbuild-jest: 0.5.0
   eslint: 8.23.1
@@ -76,7 +76,7 @@ dependencies:
   '@mui/material': 5.10.5_g6p6knjyjrjltwufjb7cltiueu
   '@mui/styles': 5.10.3_fn6mmk7tilns4p7ajkklhuudvi
   axios: 0.27.2
-  classnames: 2.3.1
+  classnames: 2.3.2
   i18next: 21.9.1
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.1
@@ -4357,8 +4357,8 @@ packages:
       static-extend: 0.1.2
     dev: true
 
-  /classnames/2.3.1:
-    resolution: {integrity: sha512-OlQdbZ7gLfGarSqxesMesDa5uz7KFbID8Kpq/SxIoNGDqY8lSYs0D+hhtBXhcdB3rcbXArFr7vlHheLk1voeNA==}
+  /classnames/2.3.2:
+    resolution: {integrity: sha512-CSbhY4cFEJRe6/GQzIk5qXZ4Jeg5pcsP7b5peFSDpffpe1cqjASH/n9UTjBwOp6XpMSTwQ8Za2K5V02ueA7Tmw==}
     dev: false
 
   /cliui/7.0.4:

From 7400a95bec2894a05a01bc3149a5aa582846c6ed Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 14 Sep 2022 14:38:06 +1000
Subject: [PATCH 007/263] build(deps): update dependency @types/jest to v29.0.2
 (#4007)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 88 ++++------------------------------------------
 2 files changed, 8 insertions(+), 82 deletions(-)

diff --git a/web/package.json b/web/package.json
index b6ced1b01..40b4675c2 100644
--- a/web/package.json
+++ b/web/package.json
@@ -146,7 +146,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.0.1",
+    "@types/jest": "29.0.2",
     "@types/node": "16.11.58",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.19",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e4bd1dc3d..3b6ff19fc 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.3
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.0.1
+  '@types/jest': 29.0.2
   '@types/node': 16.11.58
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.19
@@ -95,7 +95,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.0.1
+  '@types/jest': 29.0.2
   '@types/node': 16.11.58
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.19
@@ -2549,13 +2549,6 @@ packages:
       jest-mock: 29.0.3
     dev: true
 
-  /@jest/expect-utils/29.0.2:
-    resolution: {integrity: sha512-+wcQF9khXKvAEi8VwROnCWWmHfsJYCZAs5dmuMlJBKk57S6ZN2/FQMIlo01F29fJyT8kV/xblE7g3vkIdTLOjw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      jest-get-type: 29.0.0
-    dev: true
-
   /@jest/expect-utils/29.0.3:
     resolution: {integrity: sha512-i1xUkau7K/63MpdwiRqaxgZOjxYs4f0WMTGJnYwUKubsNRZSeQbLorS7+I4uXVF9KQ5r61BUPAUMZ7Lf66l64Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -3336,11 +3329,11 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.0.1:
-    resolution: {integrity: sha512-CAZrjLRZs4xEdIrfrdV74xK1Vo/BKQZwUcjJv3gp6gMeV3BsVxMnXTcgtYOKyphT4DPPo7jxVEVhuwJTQn3oPQ==}
+  /@types/jest/29.0.2:
+    resolution: {integrity: sha512-TaklkwSEtvwJpleiKBHgEBySIQlcZ08gYP/s5wdtdLnjz9uxjnDd7U+Y0JWACebkqBc+jtbol2PEtEW0wQV2zQ==}
     dependencies:
-      expect: 29.0.2
-      pretty-format: 29.0.2
+      expect: 29.0.3
+      pretty-format: 29.0.3
     dev: true
 
   /@types/jsdom/20.0.0:
@@ -3426,7 +3419,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.0.1
+      '@types/jest': 29.0.2
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -5540,17 +5533,6 @@ packages:
       - supports-color
     dev: true
 
-  /expect/29.0.2:
-    resolution: {integrity: sha512-JeJlAiLKn4aApT4pzUXBVxl3NaZidWIOdg//smaIlP9ZMBDkHZGFd9ubphUZP9pUyDEo7bC6M0IIZR51o75qQw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/expect-utils': 29.0.2
-      jest-get-type: 29.0.0
-      jest-matcher-utils: 29.0.2
-      jest-message-util: 29.0.2
-      jest-util: 29.0.2
-    dev: true
-
   /expect/29.0.3:
     resolution: {integrity: sha512-t8l5DTws3212VbmPL+tBFXhjRHLmctHB0oQbL8eUc6S7NzZtYUhycrFO9mkxA0ZUC6FAWdNi7JchJSkODtcu1Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6575,16 +6557,6 @@ packages:
       - supports-color
     dev: true
 
-  /jest-diff/29.0.2:
-    resolution: {integrity: sha512-b9l9970sa1rMXH1owp2Woprmy42qIwwll/htsw4Gf7+WuSp5bZxNhkKHDuCGKL+HoHn1KhcC+tNEeAPYBkD2Jg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      diff-sequences: 29.0.0
-      jest-get-type: 29.0.0
-      pretty-format: 29.0.3
-    dev: true
-
   /jest-diff/29.0.3:
     resolution: {integrity: sha512-+X/AIF5G/vX9fWK+Db9bi9BQas7M9oBME7egU7psbn4jlszLFCu0dW63UgeE6cs/GANq4fLaT+8sGHQQ0eCUfg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6699,16 +6671,6 @@ packages:
       pretty-format: 29.0.3
     dev: true
 
-  /jest-matcher-utils/29.0.2:
-    resolution: {integrity: sha512-s62YkHFBfAx0JLA2QX1BlnCRFwHRobwAv2KP1+YhjzF6ZCbCVrf1sG8UJyn62ZUsDaQKpoo86XMTjkUyO5aWmQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.0.2
-      jest-get-type: 29.0.0
-      pretty-format: 29.0.3
-    dev: true
-
   /jest-matcher-utils/29.0.3:
     resolution: {integrity: sha512-RsR1+cZ6p1hDV4GSCQTg+9qjeotQCgkaleIKLK7dm+U4V/H2bWedU3RAtLm8+mANzZ7eDV33dMar4pejd7047w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6719,21 +6681,6 @@ packages:
       pretty-format: 29.0.3
     dev: true
 
-  /jest-message-util/29.0.2:
-    resolution: {integrity: sha512-kcJAgms3ckJV0wUoLsAM40xAhY+pb9FVSZwicjFU9PFkaTNmqh9xd99/CzKse48wPM1ANUQKmp03/DpkY+lGrA==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@babel/code-frame': 7.18.6
-      '@jest/types': 29.0.3
-      '@types/stack-utils': 2.0.1
-      chalk: 4.1.2
-      graceful-fs: 4.2.10
-      micromatch: 4.0.5
-      pretty-format: 29.0.3
-      slash: 3.0.0
-      stack-utils: 2.0.5
-    dev: true
-
   /jest-message-util/29.0.3:
     resolution: {integrity: sha512-7T8JiUTtDfppojosORAflABfLsLKMLkBHSWkjNQrjIltGoDzNGn7wEPOSfjqYAGTYME65esQzMJxGDjuLBKdOg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6919,18 +6866,6 @@ packages:
       micromatch: 4.0.5
     dev: true
 
-  /jest-util/29.0.2:
-    resolution: {integrity: sha512-ozk8ruEEEACxqpz0hN9UOgtPZS0aN+NffwQduR5dVlhN+eN47vxurtvgZkYZYMpYrsmlAEx1XabkB3BnN0GfKQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/types': 29.0.3
-      '@types/node': 16.11.58
-      chalk: 4.1.2
-      ci-info: 3.3.2
-      graceful-fs: 4.2.10
-      picomatch: 2.3.1
-    dev: true
-
   /jest-util/29.0.3:
     resolution: {integrity: sha512-Q0xaG3YRG8QiTC4R6fHjHQPaPpz9pJBEi0AeOE4mQh/FuWOijFjGXMMOfQEaU9i3z76cNR7FobZZUQnL6IyfdQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -7894,15 +7829,6 @@ packages:
       react-is: 17.0.2
     dev: true
 
-  /pretty-format/29.0.2:
-    resolution: {integrity: sha512-wp3CdtUa3cSJVFn3Miu5a1+pxc1iPIQTenOAn+x5erXeN1+ryTcLesV5pbK/rlW5EKwp27x38MoYfNGaNXDDhg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/schemas': 29.0.0
-      ansi-styles: 5.2.0
-      react-is: 18.2.0
-    dev: true
-
   /pretty-format/29.0.3:
     resolution: {integrity: sha512-cHudsvQr1K5vNVLbvYF/nv3Qy/F/BcEKxGuIeMiVMRHxPOO1RxXooP8g/ZrwAp7Dx+KdMZoOc7NxLHhMrP2f9Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}

From d08dcb31d49fe0f3af0d72e40b7526395517ea5b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 14 Sep 2022 15:57:16 +1000
Subject: [PATCH 008/263] build(deps): update traefik docker tag to v2.8.5
 (#4008)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/traefik2/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/traefik2/docker-compose.yml b/internal/suites/example/compose/traefik2/docker-compose.yml
index 68e4f5334..0b001ddaf 100644
--- a/internal/suites/example/compose/traefik2/docker-compose.yml
+++ b/internal/suites/example/compose/traefik2/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   traefik:
-    image: traefik:v2.8.4
+    image: traefik:v2.8.5
     volumes:
       - '/var/run/docker.sock:/var/run/docker.sock'
     labels:

From 2b345d39d3a5096e2180c843fdd99399d4de8c6b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 14 Sep 2022 20:24:26 +1000
Subject: [PATCH 009/263] build(deps): update dependency @types/node to
 v16.11.59 (#4011)

---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 74 +++++++++++++++++++++++-----------------------
 2 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/web/package.json b/web/package.json
index 40b4675c2..9291a0d78 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.0.2",
-    "@types/node": "16.11.58",
+    "@types/node": "16.11.59",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.19",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 3b6ff19fc..b1cb7913f 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.0.2
-  '@types/node': 16.11.58
+  '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.19
   '@types/react-dom': 18.0.6
@@ -96,7 +96,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.0.2
-  '@types/node': 16.11.58
+  '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.19
   '@types/react-dom': 18.0.6
@@ -117,7 +117,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.23.1
   eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
   husky: 8.0.1
-  jest: 29.0.3_@types+node@16.11.58
+  jest: 29.0.3_@types+node@16.11.59
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.0.3
@@ -2490,7 +2490,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       jest-message-util: 29.0.3
       jest-util: 29.0.3
@@ -2511,14 +2511,14 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.0.3_@types+node@16.11.58
+      jest-config: 29.0.3_@types+node@16.11.59
       jest-haste-map: 29.0.3
       jest-message-util: 29.0.3
       jest-regex-util: 29.0.0
@@ -2545,7 +2545,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       jest-mock: 29.0.3
     dev: true
 
@@ -2572,7 +2572,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       jest-message-util: 29.0.3
       jest-mock: 29.0.3
       jest-util: 29.0.3
@@ -2605,7 +2605,7 @@ packages:
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2716,7 +2716,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2728,7 +2728,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3310,7 +3310,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3339,7 +3339,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3360,8 +3360,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/16.11.58:
-    resolution: {integrity: sha512-uMVxJ111wpHzkx/vshZFb6Qni3BOMnlWLq7q9jrwej7Yw/KvjsEbpxCCxw+hLKxexFMc8YmpG8J9tnEe/rKsIg==}
+  /@types/node/16.11.59:
+    resolution: {integrity: sha512-6u+36Dj3aDzhfBVUf/mfmc92OEdzQ2kx2jcXGdigfl70E/neV21ZHE6UCz4MDzTRcVqGAM27fk+DLXvyDsn3Jw==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5259,7 +5259,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
       '@typescript-eslint/experimental-utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
       eslint: 8.23.1
-      jest: 29.0.3_@types+node@16.11.58
+      jest: 29.0.3_@types+node@16.11.59
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6471,7 +6471,7 @@ packages:
       '@jest/expect': 29.0.3
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6490,7 +6490,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.0.3_@types+node@16.11.58:
+  /jest-cli/29.0.3_@types+node@16.11.59:
     resolution: {integrity: sha512-aUy9Gd/Kut1z80eBzG10jAn6BgS3BoBbXyv+uXEqBJ8wnnuZ5RpNfARoskSrTIy1GY4a8f32YGuCMwibtkl9CQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6507,7 +6507,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.0.3_@types+node@16.11.58
+      jest-config: 29.0.3_@types+node@16.11.59
       jest-util: 29.0.3
       jest-validate: 29.0.3
       prompts: 2.4.2
@@ -6518,7 +6518,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.0.3_@types+node@16.11.58:
+  /jest-config/29.0.3_@types+node@16.11.59:
     resolution: {integrity: sha512-U5qkc82HHVYe3fNu2CRXLN4g761Na26rWKf7CjM8LlZB3In1jadEkZdMwsE37rd9RSPV0NfYaCjHdk/gu3v+Ew==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6533,7 +6533,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       babel-jest: 29.0.3_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6593,7 +6593,7 @@ packages:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
       '@types/jsdom': 20.0.0
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       jest-mock: 29.0.3
       jest-util: 29.0.3
       jsdom: 20.0.0
@@ -6611,7 +6611,7 @@ packages:
       '@jest/environment': 29.0.3
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       jest-mock: 29.0.3
       jest-util: 29.0.3
     dev: true
@@ -6627,7 +6627,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6650,7 +6650,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6701,7 +6701,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
     dev: true
 
   /jest-pnp-resolver/1.2.2_jest-resolve@29.0.3:
@@ -6760,7 +6760,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6791,7 +6791,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6814,7 +6814,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       graceful-fs: 4.2.10
     dev: true
 
@@ -6859,7 +6859,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6871,7 +6871,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6898,7 +6898,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.0.3_@types+node@16.11.58
+      jest: 29.0.3_@types+node@16.11.59
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6912,7 +6912,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6924,7 +6924,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6933,12 +6933,12 @@ packages:
     resolution: {integrity: sha512-Tl/YWUugQOjoTYwjKdfJWkSOfhufJHO5LhXTSZC3TRoQKO+fuXnZAdoXXBlpLXKGODBL3OvdUasfDD4PcMe6ng==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 16.11.58
+      '@types/node': 16.11.59
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.0.3_@types+node@16.11.58:
+  /jest/29.0.3_@types+node@16.11.59:
     resolution: {integrity: sha512-ElgUtJBLgXM1E8L6K1RW1T96R897YY/3lRYqq9uVcPWtP2AAl/nQ16IYDh/FzQOOQ12VEuLdcPU83mbhG2C3PQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6951,7 +6951,7 @@ packages:
       '@jest/core': 29.0.3
       '@jest/types': 29.0.3
       import-local: 3.1.0
-      jest-cli: 29.0.3_@types+node@16.11.58
+      jest-cli: 29.0.3_@types+node@16.11.59
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 4c979c1558a35e376662be88c5610037ab53964a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 14 Sep 2022 20:45:58 +1000
Subject: [PATCH 010/263] build(deps): update dependency @types/react to
 v18.0.20 (#4012)

---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 94 +++++++++++++++++++++++-----------------------
 2 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/web/package.json b/web/package.json
index 9291a0d78..909acdbb5 100644
--- a/web/package.json
+++ b/web/package.json
@@ -149,7 +149,7 @@
     "@types/jest": "29.0.2",
     "@types/node": "16.11.59",
     "@types/qrcode.react": "1.0.2",
-    "@types/react": "18.0.19",
+    "@types/react": "18.0.20",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.37.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index b1cb7913f..620e3745a 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -18,7 +18,7 @@ specifiers:
   '@types/jest': 29.0.2
   '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.19
+  '@types/react': 18.0.20
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.37.0
@@ -66,15 +66,15 @@ specifiers:
 
 dependencies:
   '@emotion/cache': 11.10.3
-  '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
-  '@emotion/styled': 11.10.4_v6omebeixt23oq3ljl3rjllla4
+  '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
+  '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.3_q2hl5ykxc65u7zta43mkuvhuom
-  '@mui/material': 5.10.5_g6p6knjyjrjltwufjb7cltiueu
-  '@mui/styles': 5.10.3_fn6mmk7tilns4p7ajkklhuudvi
+  '@mui/icons-material': 5.10.3_5evnxlqsqnxmrwqqtdxt2buelq
+  '@mui/material': 5.10.5_af5ln35zuaotaffazii6n6bke4
+  '@mui/styles': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
   axios: 0.27.2
   classnames: 2.3.2
   i18next: 21.9.1
@@ -98,7 +98,7 @@ devDependencies:
   '@types/jest': 29.0.2
   '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.19
+  '@types/react': 18.0.20
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
@@ -2296,7 +2296,7 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.4_fn6mmk7tilns4p7ajkklhuudvi:
+  /@emotion/react/11.10.4_w5j4k42lgipnm43s3brx6h3c34:
     resolution: {integrity: sha512-j0AkMpr6BL8gldJZ6XQsQ8DnS9TxEQu1R+OGmDZiWjBAJtCcbt0tS3I/YffoqHXxH6MjgI7KdMbYKw3MEiU9eA==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2315,7 +2315,7 @@ packages:
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       hoist-non-react-statics: 3.3.2
       react: 18.2.0
     dev: false
@@ -2334,7 +2334,7 @@ packages:
     resolution: {integrity: sha512-OiTkRgpxescko+M51tZsMq7Puu/KP55wMT8BgpcXVG2hqXc0Vo0mfymJ/Uj24Hp0i083ji/o0aLddh08UEjq8w==}
     dev: false
 
-  /@emotion/styled/11.10.4_v6omebeixt23oq3ljl3rjllla4:
+  /@emotion/styled/11.10.4_yiaqs725o7pcd7rteavrnhgj4y:
     resolution: {integrity: sha512-pRl4R8Ez3UXvOPfc2bzIoV8u9P97UedgHS4FPX594ntwEuAMA114wlaHvOK24HB48uqfXiGlYIZYCxVJ1R1ttQ==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2350,11 +2350,11 @@ packages:
       '@babel/runtime': 7.18.9
       '@emotion/babel-plugin': 11.10.0
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
+      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
       '@emotion/serialize': 1.1.0
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       react: 18.2.0
     dev: false
 
@@ -2778,7 +2778,7 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.97_nylzxt5ale4dsv666zkb25cgtm:
+  /@mui/base/5.0.0-alpha.97_7ey2zzynotv32rpkwno45fsx4e:
     resolution: {integrity: sha512-gvo0hOg/tBzfJ3eDQOGAPBJJU+qTWd0e5zBEMFIkT1ekJqXx14JtIHvheOFU17y9iDciYE256Q8g+tj6a1dcBA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2791,10 +2791,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       '@emotion/is-prop-valid': 1.2.0
-      '@mui/types': 7.2.0_@types+react@18.0.19
+      '@mui/types': 7.2.0_@types+react@18.0.20
       '@mui/utils': 5.10.3_react@18.2.0
       '@popperjs/core': 2.11.6
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       clsx: 1.2.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -2806,7 +2806,7 @@ packages:
     resolution: {integrity: sha512-sZYg85rQdlgDYU3V4WcT2Dl+k+y2wYqN04aUvVkFksRR0j81sj6KmfXx4842HJQcq5rjzcTvh4N+yv66XR/9fA==}
     dev: false
 
-  /@mui/icons-material/5.10.3_q2hl5ykxc65u7zta43mkuvhuom:
+  /@mui/icons-material/5.10.3_5evnxlqsqnxmrwqqtdxt2buelq:
     resolution: {integrity: sha512-o0kbUlsWCBtCE0wP33cGKbyryCh7kpm2EECYMPDmWrLhbA+HUODXIdhiTFS26szp2xXo9HY1lEx0ufeJ+tddYw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2818,12 +2818,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.18.9
-      '@mui/material': 5.10.5_g6p6knjyjrjltwufjb7cltiueu
-      '@types/react': 18.0.19
+      '@mui/material': 5.10.5_af5ln35zuaotaffazii6n6bke4
+      '@types/react': 18.0.20
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.5_g6p6knjyjrjltwufjb7cltiueu:
+  /@mui/material/5.10.5_af5ln35zuaotaffazii6n6bke4:
     resolution: {integrity: sha512-VFMadvfA6jqx5DCk2xoBl4bAGyzgmmubJIuB7fUWUZBwYIYL5Ea9SsoFpt5kawA6O2feuj69alDN2fhxPw1MeQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2841,14 +2841,14 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.18.9
-      '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
-      '@emotion/styled': 11.10.4_v6omebeixt23oq3ljl3rjllla4
-      '@mui/base': 5.0.0-alpha.97_nylzxt5ale4dsv666zkb25cgtm
+      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
+      '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
+      '@mui/base': 5.0.0-alpha.97_7ey2zzynotv32rpkwno45fsx4e
       '@mui/core-downloads-tracker': 5.10.5
-      '@mui/system': 5.10.5_wc57cflkzchz4hcfrsslybhb6e
-      '@mui/types': 7.2.0_@types+react@18.0.19
+      '@mui/system': 5.10.5_4mv32nu4vciambuqqzuu4gtvj4
+      '@mui/types': 7.2.0_@types+react@18.0.20
       '@mui/utils': 5.10.3_react@18.2.0
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
       csstype: 3.1.0
@@ -2859,7 +2859,7 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.3_fn6mmk7tilns4p7ajkklhuudvi:
+  /@mui/private-theming/5.10.3_w5j4k42lgipnm43s3brx6h3c34:
     resolution: {integrity: sha512-LCYIKlkGz2BTSng2BFzzwSJBRZbChIUri2x2Nh8ryk2B1Ho7zpvE7ex6y39LlStG2Frf92NFC/V4YQbmMAjD5A==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2871,7 +2871,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       '@mui/utils': 5.10.3_react@18.2.0
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -2891,14 +2891,14 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       '@emotion/cache': 11.10.3
-      '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
-      '@emotion/styled': 11.10.4_v6omebeixt23oq3ljl3rjllla4
+      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
+      '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
       csstype: 3.1.0
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.3_fn6mmk7tilns4p7ajkklhuudvi:
+  /@mui/styles/5.10.3_w5j4k42lgipnm43s3brx6h3c34:
     resolution: {integrity: sha512-I9BYAKENJ6Ot+UEqsU+D2o5jVSeHAme+ZcPzBataTNmpjd7yrmdPeJgAyzju21KtSucBb283gvggcFqxLH1lOQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2910,10 +2910,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.3_fn6mmk7tilns4p7ajkklhuudvi
-      '@mui/types': 7.2.0_@types+react@18.0.19
+      '@mui/private-theming': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
+      '@mui/types': 7.2.0_@types+react@18.0.20
       '@mui/utils': 5.10.3_react@18.2.0
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       clsx: 1.2.1
       csstype: 3.1.0
       hoist-non-react-statics: 3.3.2
@@ -2929,7 +2929,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.5_wc57cflkzchz4hcfrsslybhb6e:
+  /@mui/system/5.10.5_4mv32nu4vciambuqqzuu4gtvj4:
     resolution: {integrity: sha512-GUPiDVZTKp9yH3FVeLSIw3Bqsyl7qLxtAK1ZiZmC8e+zdH7bcnZZXvWK3vPIbx35ZyhQpvAOWQFpiF9TjdA77w==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2946,20 +2946,20 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.18.9
-      '@emotion/react': 11.10.4_fn6mmk7tilns4p7ajkklhuudvi
-      '@emotion/styled': 11.10.4_v6omebeixt23oq3ljl3rjllla4
-      '@mui/private-theming': 5.10.3_fn6mmk7tilns4p7ajkklhuudvi
+      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
+      '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
+      '@mui/private-theming': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
       '@mui/styled-engine': 5.10.5_hfzxdiydbrbhhfpkwuv3jhvwmq
-      '@mui/types': 7.2.0_@types+react@18.0.19
+      '@mui/types': 7.2.0_@types+react@18.0.20
       '@mui/utils': 5.10.3_react@18.2.0
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
       clsx: 1.2.1
       csstype: 3.1.0
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/types/7.2.0_@types+react@18.0.19:
+  /@mui/types/7.2.0_@types+react@18.0.20:
     resolution: {integrity: sha512-lGXtFKe5lp3UxTBGqKI1l7G8sE2xBik8qCfrLHD5olwP/YU0/ReWoWT7Lp1//ri32dK39oPMrJN8TgbkCSbsNA==}
     peerDependencies:
       '@types/react': '*'
@@ -2967,7 +2967,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
     dev: false
 
   /@mui/utils/5.10.3_react@18.2.0:
@@ -3381,29 +3381,29 @@ packages:
   /@types/qrcode.react/1.0.2:
     resolution: {integrity: sha512-I9Oq5Cjlkgy3Tw7krCnCXLw2/zMhizkTere49OOcta23tkvH0xBTP0yInimTh0gstLRtb8Ki9NZVujE5UI6ffQ==}
     dependencies:
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
     dev: true
 
   /@types/react-dom/18.0.6:
     resolution: {integrity: sha512-/5OFZgfIPSwy+YuIBP/FgJnQnsxhZhjjrnxudMddeblOouIodEQ75X14Rr4wGSG/bknL+Omy9iWlLo1u/9GzAA==}
     dependencies:
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
     dev: true
 
   /@types/react-is/17.0.3:
     resolution: {integrity: sha512-aBTIWg1emtu95bLTLx0cpkxwGW3ueZv71nE2YFBpL8k/z5czEW8yYpOo8Dp+UUAFAtKwNaOsh/ioSeQnWlZcfw==}
     dependencies:
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
     dev: false
 
   /@types/react-transition-group/4.4.5:
     resolution: {integrity: sha512-juKD/eiSM3/xZYzjuzH6ZwpP+/lejltmiS3QEzV/vmb/Q8+HfDmxu+Baga8UEMGBqV88Nbg4l2hY/K2DkyaLLA==}
     dependencies:
-      '@types/react': 18.0.19
+      '@types/react': 18.0.20
     dev: false
 
-  /@types/react/18.0.19:
-    resolution: {integrity: sha512-BDc3Q+4Q3zsn7k9xZrKfjWyJsSlEDMs38gD1qp2eDazLCdcPqAT+vq1ND+Z8AGel/UiwzNUk8ptpywgNQcJ1MQ==}
+  /@types/react/18.0.20:
+    resolution: {integrity: sha512-MWul1teSPxujEHVwZl4a5HxQ9vVNsjTchVA+xRqv/VYGCuKGAU6UhfrTdF5aBefwD1BHUD8i/zq+O/vyCm/FrA==}
     dependencies:
       '@types/prop-types': 15.7.5
       '@types/scheduler': 0.16.2

From 8f78684f034166d42825996f56145ee9fa051939 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 15 Sep 2022 09:23:29 +1000
Subject: [PATCH 011/263] build(deps): update dependency react-router-dom to
 v6.4.0 (#4013)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 30 +++++++++++++++---------------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/web/package.json b/web/package.json
index 909acdbb5..6617badec 100644
--- a/web/package.json
+++ b/web/package.json
@@ -40,7 +40,7 @@
     "react-i18next": "11.18.6",
     "react-loading": "2.0.3",
     "react-otp-input": "2.4.0",
-    "react-router-dom": "6.3.0",
+    "react-router-dom": "6.4.0",
     "zxcvbn": "4.4.2"
   },
   "scripts": {
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 620e3745a..da7ae6d3a 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -54,7 +54,7 @@ specifiers:
   react-i18next: 11.18.6
   react-loading: 2.0.3
   react-otp-input: 2.4.0
-  react-router-dom: 6.3.0
+  react-router-dom: 6.4.0
   react-test-renderer: 18.2.0
   typescript: 4.8.3
   vite: 3.1.0
@@ -87,7 +87,7 @@ dependencies:
   react-i18next: 11.18.6_4sidbwfhen5r7txudrvpua6nty
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
-  react-router-dom: 6.3.0_biqbaboplfbrettd7655fr4n2y
+  react-router-dom: 6.4.0_biqbaboplfbrettd7655fr4n2y
   zxcvbn: 4.4.2
 
 devDependencies:
@@ -3021,6 +3021,11 @@ packages:
     resolution: {integrity: sha512-50/17A98tWUfQ176raKiOGXuYpLyyVMkxxG6oylzL3BPOlA6ADGdK7EYunSa4I064xerltq9TGXs8HmOk5E+vw==}
     dev: false
 
+  /@remix-run/router/1.0.0:
+    resolution: {integrity: sha512-SCR1cxRSMNKjaVYptCzBApPDqGwa3FGdjVHc+rOToocNPHQdIYLZBfv/3f+KvYuXDkUGVIW9IAzmPNZDRL1I4A==}
+    engines: {node: '>=14'}
+    dev: false
+
   /@rollup/pluginutils/4.2.1:
     resolution: {integrity: sha512-iKnFXr7NkdZAIHiIWE+BX5ULi/ucVFYWD6TbAV+rZctiRTY2PL6tsIKhoIOaoskiWAkgu+VsbXgUVDNLHf+InQ==}
     engines: {node: '>= 8.0.0'}
@@ -5978,12 +5983,6 @@ packages:
     dependencies:
       function-bind: 1.1.1
 
-  /history/5.3.0:
-    resolution: {integrity: sha512-ZqaKwjjrAYUYfLG+htGaIIZ4nioX2L70ZUMIFysS3xvBsSG4x/n1V6TXV3N8ZYNuFGlDirFg32T7B6WOUPDYcQ==}
-    dependencies:
-      '@babel/runtime': 7.18.9
-    dev: false
-
   /hoist-non-react-statics/3.3.2:
     resolution: {integrity: sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==}
     dependencies:
@@ -7967,24 +7966,25 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /react-router-dom/6.3.0_biqbaboplfbrettd7655fr4n2y:
-    resolution: {integrity: sha512-uaJj7LKytRxZNQV8+RbzJWnJ8K2nPsOOEuX7aQstlMZKQT0164C+X2w6bnkqU3sjtLvpd5ojrezAyfZ1+0sStw==}
+  /react-router-dom/6.4.0_biqbaboplfbrettd7655fr4n2y:
+    resolution: {integrity: sha512-4Aw1xmXKeleYYQ3x0Lcl2undHR6yMjXZjd9DKZd53SGOYqirrUThyUb0wwAX5VZAyvSuzjNJmZlJ3rR9+/vzqg==}
+    engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
       react-dom: '>=16.8 || 18'
     dependencies:
-      history: 5.3.0
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
-      react-router: 6.3.0_react@18.2.0
+      react-router: 6.4.0_react@18.2.0
     dev: false
 
-  /react-router/6.3.0_react@18.2.0:
-    resolution: {integrity: sha512-7Wh1DzVQ+tlFjkeo+ujvjSqSJmkt1+8JO+T5xklPlgrh70y7ogx75ODRW0ThWhY7S+6yEDks8TYrtQe/aoboBQ==}
+  /react-router/6.4.0_react@18.2.0:
+    resolution: {integrity: sha512-B+5bEXFlgR1XUdHYR6P94g299SjrfCBMmEDJNcFbpAyRH1j1748yt9NdDhW3++nw1lk3zQJ6aOO66zUx3KlTZg==}
+    engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
     dependencies:
-      history: 5.3.0
+      '@remix-run/router': 1.0.0
       react: 18.2.0
     dev: false
 

From bbf3587fbb92fe865a9a48640d7253b6549343ac Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 15 Sep 2022 21:52:30 +1000
Subject: [PATCH 012/263] build(deps): update dependency vite to v3.1.1 (#4017)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6617badec..c6bbb6208 100644
--- a/web/package.json
+++ b/web/package.json
@@ -175,7 +175,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.3",
-    "vite": "3.1.0",
+    "vite": "3.1.1",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index da7ae6d3a..e14292984 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -57,7 +57,7 @@ specifiers:
   react-router-dom: 6.4.0
   react-test-renderer: 18.2.0
   typescript: 4.8.3
-  vite: 3.1.0
+  vite: 3.1.1
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -103,7 +103,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
   '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.0
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.1
   esbuild: 0.15.7
   esbuild-jest: 0.5.0_esbuild@0.15.7
   eslint: 8.23.1
@@ -124,11 +124,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
-  vite: 3.1.0
-  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.0
+  vite: 3.1.1
+  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.1
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.0
-  vite-tsconfig-paths: 3.5.0_vite@3.1.0
+  vite-plugin-svgr: 2.2.1_vite@3.1.1
+  vite-tsconfig-paths: 3.5.0_vite@3.1.1
 
 packages:
 
@@ -3651,7 +3651,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.0:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.1:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3664,7 +3664,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.0
+      vite: 3.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9034,7 +9034,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.0:
+  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.1:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9044,7 +9044,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.23.1
       rollup: 2.78.0
-      vite: 3.1.0
+      vite: 3.1.1
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9058,19 +9058,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.0:
+  /vite-plugin-svgr/2.2.1_vite@3.1.1:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.0
+      vite: 3.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.0_vite@3.1.0:
+  /vite-tsconfig-paths/3.5.0_vite@3.1.1:
     resolution: {integrity: sha512-NKIubr7gXgh/3uniQaOytSg+aKWPrjquP6anAy+zCWEn6h9fB8z2/qdlfQrTgZWaXJ2pHVlllrSdRZltHn9P4g==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9079,13 +9079,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.0
+      vite: 3.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.0:
-    resolution: {integrity: sha512-YBg3dUicDpDWFCGttmvMbVyS9ydjntwEjwXRj2KBFwSB8SxmGcudo1yb8FW5+M/G86aS8x828ujnzUVdsLjs9g==}
+  /vite/3.1.1:
+    resolution: {integrity: sha512-hgxQWev/AL7nWYrqByYo8nfcH9n97v6oFsta9+JX8h6cEkni7nHKP2kJleNYV2kcGhE8jsbaY1aStwPZXzPbgA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From ec88b67cf1ef843d09bbaff9e2f7f7e31e40021b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 16 Sep 2022 09:57:26 +1000
Subject: [PATCH 013/263] build(deps): update dependency @types/jest to v29.0.3
 (#4018)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index c6bbb6208..da5a3f76c 100644
--- a/web/package.json
+++ b/web/package.json
@@ -146,7 +146,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.0.2",
+    "@types/jest": "29.0.3",
     "@types/node": "16.11.59",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.20",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e14292984..12a132d76 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.3
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.0.2
+  '@types/jest': 29.0.3
   '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.20
@@ -95,7 +95,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.0.2
+  '@types/jest': 29.0.3
   '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.20
@@ -3334,8 +3334,8 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.0.2:
-    resolution: {integrity: sha512-TaklkwSEtvwJpleiKBHgEBySIQlcZ08gYP/s5wdtdLnjz9uxjnDd7U+Y0JWACebkqBc+jtbol2PEtEW0wQV2zQ==}
+  /@types/jest/29.0.3:
+    resolution: {integrity: sha512-F6ukyCTwbfsEX5F2YmVYmM5TcTHy1q9P5rWlRbrk56KyMh3v9xRGUO3aa8+SkvMi0SHXtASJv1283enXimC0Og==}
     dependencies:
       expect: 29.0.3
       pretty-format: 29.0.3
@@ -3424,7 +3424,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.0.2
+      '@types/jest': 29.0.3
     dev: true
 
   /@types/tough-cookie/4.0.2:

From 15110b732a4a24c9bd611477627bdd06291e10b2 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 11:19:16 +1000
Subject: [PATCH 014/263] fix(server): i18n etags missing (#3973)

This fixes missing etags from locales assets.
---
 crowdin.yml                                   | 10 --
 internal/middlewares/asset_override.go        | 20 ++--
 internal/server/asset.go                      | 97 ++++++++++++++-----
 internal/server/const.go                      | 17 ++--
 internal/server/handlers.go                   | 18 ++--
 .../server/locales/{de => de-DE}/portal.json  |  0
 .../server/locales/{es => es-ES}/portal.json  |  0
 .../server/locales/{fr => fr-FR}/portal.json  |  0
 .../server/locales/{nl => nl-NL}/portal.json  |  0
 .../server/locales/{pt => pt-PT}/portal.json  |  0
 .../server/locales/{ru => ru-RU}/portal.json  |  0
 internal/server/locales/sv/portal.json        | 69 -------------
 .../server/locales/{zh => zh-CN}/portal.json  |  0
 internal/server/template.go                   | 17 ++--
 web/src/i18n/index.ts                         |  4 +-
 15 files changed, 116 insertions(+), 136 deletions(-)
 rename internal/server/locales/{de => de-DE}/portal.json (100%)
 rename internal/server/locales/{es => es-ES}/portal.json (100%)
 rename internal/server/locales/{fr => fr-FR}/portal.json (100%)
 rename internal/server/locales/{nl => nl-NL}/portal.json (100%)
 rename internal/server/locales/{pt => pt-PT}/portal.json (100%)
 rename internal/server/locales/{ru => ru-RU}/portal.json (100%)
 delete mode 100644 internal/server/locales/sv/portal.json
 rename internal/server/locales/{zh => zh-CN}/portal.json (100%)

diff --git a/crowdin.yml b/crowdin.yml
index 51597bf01..88613ec99 100644
--- a/crowdin.yml
+++ b/crowdin.yml
@@ -6,14 +6,4 @@ files:
   - source: /internal/server/locales/en/*
     translation: /internal/server/locales/%locale%/%original_file_name%
     skip_untranslated_files: true
-    languages_mapping:
-      locale:
-        "de-DE": de
-        "en-EN": en
-        "es-ES": es
-        "fr-FR": fr
-        "nl-NL": nl
-        "pt-PT": pt
-        "ru-RU": ru
-        "zh-CH": zh
 ...
diff --git a/internal/middlewares/asset_override.go b/internal/middlewares/asset_override.go
index e25444aba..c8ed111c4 100644
--- a/internal/middlewares/asset_override.go
+++ b/internal/middlewares/asset_override.go
@@ -9,20 +9,22 @@ import (
 
 // AssetOverride allows overriding and serving of specific embedded assets from disk.
 func AssetOverride(root string, strip int, next fasthttp.RequestHandler) fasthttp.RequestHandler {
+	if root == "" {
+		return next
+	}
+
+	handler := fasthttp.FSHandler(root, strip)
+	stripper := fasthttp.NewPathSlashesStripper(strip)
+
 	return func(ctx *fasthttp.RequestCtx) {
-		if root == "" {
+		asset := filepath.Join(root, string(stripper(ctx)))
+
+		if _, err := os.Stat(asset); err != nil {
 			next(ctx)
 
 			return
 		}
 
-		_, err := os.Stat(filepath.Join(root, string(fasthttp.NewPathSlashesStripper(strip)(ctx))))
-		if err != nil {
-			next(ctx)
-
-			return
-		}
-
-		fasthttp.FSHandler(root, strip)(ctx)
+		handler(ctx)
 	}
 }
diff --git a/internal/server/asset.go b/internal/server/asset.go
index 5c4559a9b..57905a283 100644
--- a/internal/server/asset.go
+++ b/internal/server/asset.go
@@ -20,19 +20,21 @@ import (
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
-//go:embed locales
-var locales embed.FS
+var (
+	//go:embed public_html
+	assets embed.FS
 
-//go:embed public_html
-var assets embed.FS
+	//go:embed locales
+	locales embed.FS
+)
 
 func newPublicHTMLEmbeddedHandler() fasthttp.RequestHandler {
 	etags := map[string][]byte{}
 
-	getEmbedETags(assets, "public_html", etags)
+	getEmbedETags(assets, assetsRoot, etags)
 
 	return func(ctx *fasthttp.RequestCtx) {
-		p := path.Join("public_html", string(ctx.Path()))
+		p := path.Join(assetsRoot, string(ctx.Path()))
 
 		if etag, ok := etags[p]; ok {
 			ctx.Response.Header.SetBytesKV(headerETag, etag)
@@ -66,8 +68,10 @@ func newPublicHTMLEmbeddedHandler() fasthttp.RequestHandler {
 	}
 }
 
-func newLocalesEmbeddedHandler() (handler fasthttp.RequestHandler) {
-	var languages []string
+func newLocalesPathResolver() func(ctx *fasthttp.RequestCtx) (supported bool, asset string) {
+	var (
+		languages, dirs []string
+	)
 
 	entries, err := locales.ReadDir("locales")
 	if err == nil {
@@ -84,6 +88,10 @@ func newLocalesEmbeddedHandler() (handler fasthttp.RequestHandler) {
 					lng = strings.SplitN(entry.Name(), "-", 2)[0]
 				}
 
+				if !utils.IsStringInSlice(entry.Name(), dirs) {
+					dirs = append(dirs, entry.Name())
+				}
+
 				if utils.IsStringInSlice(lng, languages) {
 					continue
 				}
@@ -93,34 +101,79 @@ func newLocalesEmbeddedHandler() (handler fasthttp.RequestHandler) {
 		}
 	}
 
-	return func(ctx *fasthttp.RequestCtx) {
-		var (
-			language, variant, locale, namespace string
-		)
+	aliases := map[string]string{
+		"sv": "sv-SE",
+		"zh": "zh-CN",
+	}
 
-		language = ctx.UserValue("language").(string)
-		namespace = ctx.UserValue("namespace").(string)
-		locale = language
+	return func(ctx *fasthttp.RequestCtx) (supported bool, asset string) {
+		var language, namespace, variant, locale string
+
+		language, namespace = ctx.UserValue("language").(string), ctx.UserValue("namespace").(string)
+
+		if !utils.IsStringInSlice(language, languages) {
+			return false, ""
+		}
 
 		if v := ctx.UserValue("variant"); v != nil {
 			variant = v.(string)
 			locale = fmt.Sprintf("%s-%s", language, variant)
+		} else {
+			locale = language
 		}
 
-		var data []byte
+		ll := language + "-" + strings.ToUpper(language)
+		alias, ok := aliases[locale]
 
-		if data, err = locales.ReadFile(fmt.Sprintf("locales/%s/%s.json", locale, namespace)); err != nil {
-			if utils.IsStringInSliceFold(language, languages) {
-				data = []byte("{}")
-			}
+		switch {
+		case ok:
+			return true, fmt.Sprintf("locales/%s/%s.json", alias, namespace)
+		case utils.IsStringInSlice(locale, dirs):
+			return true, fmt.Sprintf("locales/%s/%s.json", locale, namespace)
+		case utils.IsStringInSlice(ll, dirs):
+			return true, fmt.Sprintf("locales/%s-%s/%s.json", language, strings.ToUpper(language), namespace)
+		default:
+			return true, fmt.Sprintf("locales/%s/%s.json", locale, namespace)
+		}
+	}
+}
 
-			if len(data) == 0 {
-				hfsHandleErr(ctx, err)
+func newLocalesEmbeddedHandler() (handler fasthttp.RequestHandler) {
+	etags := map[string][]byte{}
+
+	getEmbedETags(locales, "locales", etags)
+
+	getAssetName := newLocalesPathResolver()
+
+	return func(ctx *fasthttp.RequestCtx) {
+		supported, asset := getAssetName(ctx)
+
+		if !supported {
+			handlers.SetStatusCodeResponse(ctx, fasthttp.StatusNotFound)
+
+			return
+		}
+
+		if etag, ok := etags[asset]; ok {
+			ctx.Response.Header.SetBytesKV(headerETag, etag)
+			ctx.Response.Header.SetBytesKV(headerCacheControl, headerValueCacheControlETaggedAssets)
+
+			if bytes.Equal(etag, ctx.Request.Header.PeekBytes(headerIfNoneMatch)) {
+				ctx.SetStatusCode(fasthttp.StatusNotModified)
 
 				return
 			}
 		}
 
+		var (
+			data []byte
+			err  error
+		)
+
+		if data, err = locales.ReadFile(asset); err != nil {
+			data = []byte("{}")
+		}
+
 		middlewares.SetContentTypeApplicationJSON(ctx)
 
 		ctx.SetBody(data)
diff --git a/internal/server/const.go b/internal/server/const.go
index 9c9a34098..4d7a636b2 100644
--- a/internal/server/const.go
+++ b/internal/server/const.go
@@ -5,16 +5,17 @@ import (
 )
 
 const (
-	embeddedAssets = "public_html/"
-	swaggerAssets  = embeddedAssets + "api/"
-	apiFile        = "openapi.yml"
-	indexFile      = "index.html"
-	logoFile       = "logo.png"
+	assetsRoot    = "public_html"
+	assetsSwagger = assetsRoot + "/api"
+
+	fileOpenAPI   = "openapi.yml"
+	fileIndexHTML = "index.html"
+	fileLogo      = "logo.png"
 )
 
 var (
-	rootFiles    = []string{"manifest.json", "robots.txt"}
-	swaggerFiles = []string{
+	filesRoot    = []string{"manifest.json", "robots.txt"}
+	filesSwagger = []string{
 		"favicon-16x16.png",
 		"favicon-32x32.png",
 		"index.css",
@@ -35,7 +36,7 @@ var (
 	}
 
 	// Directories excluded from the not found handler proceeding to the next() handler.
-	httpServerDirs = []struct {
+	dirsHTTPServer = []struct {
 		name, prefix string
 	}{
 		{name: "/api", prefix: "/api/"},
diff --git a/internal/server/handlers.go b/internal/server/handlers.go
index 389743d39..9f77e0bbb 100644
--- a/internal/server/handlers.go
+++ b/internal/server/handlers.go
@@ -79,8 +79,8 @@ func handleNotFound(next fasthttp.RequestHandler) fasthttp.RequestHandler {
 	return func(ctx *fasthttp.RequestCtx) {
 		path := strings.ToLower(string(ctx.Path()))
 
-		for i := 0; i < len(httpServerDirs); i++ {
-			if path == httpServerDirs[i].name || strings.HasPrefix(path, httpServerDirs[i].prefix) {
+		for i := 0; i < len(dirsHTTPServer); i++ {
+			if path == dirsHTTPServer[i].name || strings.HasPrefix(path, dirsHTTPServer[i].prefix) {
 				handlers.SetStatusCodeResponse(ctx, fasthttp.StatusNotFound)
 
 				return
@@ -104,9 +104,9 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 
 	https := config.Server.TLS.Key != "" && config.Server.TLS.Certificate != ""
 
-	serveIndexHandler := ServeTemplatedFile(embeddedAssets, indexFile, config.Server.AssetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, config.Session.Name, config.Theme, https)
-	serveSwaggerHandler := ServeTemplatedFile(swaggerAssets, indexFile, config.Server.AssetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, config.Session.Name, config.Theme, https)
-	serveSwaggerAPIHandler := ServeTemplatedFile(swaggerAssets, apiFile, config.Server.AssetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, config.Session.Name, config.Theme, https)
+	serveIndexHandler := ServeTemplatedFile(assetsRoot, fileIndexHTML, config.Server.AssetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, config.Session.Name, config.Theme, https)
+	serveSwaggerHandler := ServeTemplatedFile(assetsSwagger, fileIndexHTML, config.Server.AssetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, config.Session.Name, config.Theme, https)
+	serveSwaggerAPIHandler := ServeTemplatedFile(assetsSwagger, fileOpenAPI, config.Server.AssetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, config.Session.Name, config.Theme, https)
 
 	handlerPublicHTML := newPublicHTMLEmbeddedHandler()
 	handlerLocales := newLocalesEmbeddedHandler()
@@ -124,7 +124,7 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 	// Static Assets.
 	r.GET("/", middleware(serveIndexHandler))
 
-	for _, f := range rootFiles {
+	for _, f := range filesRoot {
 		r.GET("/"+f, handlerPublicHTML)
 	}
 
@@ -139,10 +139,10 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 	// Swagger.
 	r.GET("/api/", middleware(serveSwaggerHandler))
 	r.OPTIONS("/api/", policyCORSPublicGET.HandleOPTIONS)
-	r.GET("/api/"+apiFile, policyCORSPublicGET.Middleware(middleware(serveSwaggerAPIHandler)))
-	r.OPTIONS("/api/"+apiFile, policyCORSPublicGET.HandleOPTIONS)
+	r.GET("/api/"+fileOpenAPI, policyCORSPublicGET.Middleware(middleware(serveSwaggerAPIHandler)))
+	r.OPTIONS("/api/"+fileOpenAPI, policyCORSPublicGET.HandleOPTIONS)
 
-	for _, file := range swaggerFiles {
+	for _, file := range filesSwagger {
 		r.GET("/api/"+file, handlerPublicHTML)
 	}
 
diff --git a/internal/server/locales/de/portal.json b/internal/server/locales/de-DE/portal.json
similarity index 100%
rename from internal/server/locales/de/portal.json
rename to internal/server/locales/de-DE/portal.json
diff --git a/internal/server/locales/es/portal.json b/internal/server/locales/es-ES/portal.json
similarity index 100%
rename from internal/server/locales/es/portal.json
rename to internal/server/locales/es-ES/portal.json
diff --git a/internal/server/locales/fr/portal.json b/internal/server/locales/fr-FR/portal.json
similarity index 100%
rename from internal/server/locales/fr/portal.json
rename to internal/server/locales/fr-FR/portal.json
diff --git a/internal/server/locales/nl/portal.json b/internal/server/locales/nl-NL/portal.json
similarity index 100%
rename from internal/server/locales/nl/portal.json
rename to internal/server/locales/nl-NL/portal.json
diff --git a/internal/server/locales/pt/portal.json b/internal/server/locales/pt-PT/portal.json
similarity index 100%
rename from internal/server/locales/pt/portal.json
rename to internal/server/locales/pt-PT/portal.json
diff --git a/internal/server/locales/ru/portal.json b/internal/server/locales/ru-RU/portal.json
similarity index 100%
rename from internal/server/locales/ru/portal.json
rename to internal/server/locales/ru-RU/portal.json
diff --git a/internal/server/locales/sv/portal.json b/internal/server/locales/sv/portal.json
deleted file mode 100644
index 20f8e1948..000000000
--- a/internal/server/locales/sv/portal.json
+++ /dev/null
@@ -1,69 +0,0 @@
-{
-	"Accept": "Acceptera",
-	"Access your email addresses": "Hantera din e-postadress",
-	"Access your group membership": "Hantera dina gruppmedlemskap",
-	"Access your profile information": "Hantera din profilinformation",
-	"An email has been sent to your address to complete the process": "Ett mejl har skickats till din e-postadress för att slutföra processen.",
-	"Authenticated": "Autentiserad",
-	"Cancel": "Avbryt",
-	"Client ID": "Klient-ID: {{client_id}}",
-	"Consent Request": "Begäran om medgivande",
-	"Contact your administrator to register a device": "Kontakta din administratör för att registrera en enhet.",
-	"Could not obtain user settings": "Misslyckades med att hämta användarinställningarna.",
-	"Deny": "Avböj",
-	"Done": "Klar",
-	"Enter new password": "Skriv ditt nya lösenord",
-	"Enter one-time password": "Skriv ditt engångslösenord",
-	"Failed to register device, the provided link is expired or has already been used": "Enhetsregistreringen misslyckades, den angivna länken har utgått eller redan blivit använd.",
-	"Hi": "Hej",
-	"Incorrect username or password": "Fel användarnamn eller lösenord",
-	"Loading": "Läser in",
-	"Logout": "Logga ut",
-	"Lost your device?": "Har du tappat bort din enhet?",
-	"Methods": "Metoder",
-	"Must be at least {{len}} characters in length": "Måste vara minst {{len}} tecken långt",
-	"Must have at least one UPPERCASE letter": "Måste innehålla minst en stor bokstav",
-	"Must have at least one lowercase letter": "Måste innehålla minst en liten bokstav",
-	"Must have at least one number": "Måste innehålla minst ett nummer",
-	"Must have at least one special character": "Måste innehålla minst ett specialtecken",
-	"Must not be more than {{len}} characters in length": "Får inte vara längre än {{len}} tecken",
-	"Need Google Authenticator?": "Behöver du Google Authenticator?",
-	"New password": "Nytt lösenord",
-	"No verification token provided": "Ingen verifieringskod tillhandahålls",
-	"OTP Secret copied to clipboard": "OTP koden har kopierats till urklipp",
-	"OTP URL copied to clipboard": "OTP länken har kopierats till urklipp",
-	"One-Time Password": "Engångslösenord",
-	"Password has been reset": "Lösenordet har blivit återställt",
-	"Password": "Lösenord",
-	"Passwords do not match": "Lösenorden matchar inte",
-	"Push Notification": "Push-avisering",
-	"Register device": "Registrera enhet",
-	"Register your first device by clicking on the link below": "Registrera din första enhet genom att klicka på länken nedan",
-	"Remember Consent": "Kom ihåg samtycke",
-	"Remember me": "Kom ihåg mig",
-	"Repeat new password": "Upprepa nya lösenordet",
-	"Reset password": "Återställ lösenord",
-	"Reset password?": "Återställ lösenord?",
-	"Reset": "Återställ",
-	"Scan QR Code": "Skanna QR koden",
-	"Secret": "Kod",
-	"Security Key - WebAuthN": "Säkerhetsnyckel - WebAuthN",
-	"Select a Device": "Välj en enhet",
-	"Sign in": "Logga in",
-	"Sign out": "Logga ut",
-	"The above application is requesting the following permissions": "Ovanstående program begär följande behörigheter",
-	"The password does not meet the password policy": "Lösenordet uppfyller inte lösenordspolicyn",
-	"The resource you're attempting to access requires two-factor authentication": "Resursen du vill komma åt kräver tvåstegsverifiering",
-	"There was a problem initiating the registration process": "Ett problem uppstod när registreringsprocessen skulle starta",
-	"There was an issue completing the process. The verification token might have expired": "Det uppstod ett problem med att slutföra processen. Verifieringskoden kan ha gått ut",
-	"There was an issue initiating the password reset process": "Ett problem uppstod när processen för lösenordsåterställning startade",
-	"There was an issue resetting the password": "Ett problem uppstod med att återställa lösenordet",
-	"There was an issue signing out": "Ett problem uppstod med att logga ut",
-	"This saves this consent as a pre-configured consent for future use": "Spara detta samtycke som ett förkonfigurerat samtycke för framtida användning",
-	"Time-based One-Time Password": "Tidsbaserat engångslösenord",
-	"Use OpenID to verify your identity": "Använd OpenID till att verifiera din identitet",
-	"Username": "Användarnamn",
-	"You must open the link from the same device and browser that initiated the registration process": "Du måste öppna länken från samma enhet och webbläsare som startade registreringsprocessen",
-	"You're being signed out and redirected": "Du blir utloggad och omdirigerad",
-	"Your supplied password does not meet the password policy requirements": "Det angivna lösenordet möter inte lösenordskraven"
-}
diff --git a/internal/server/locales/zh/portal.json b/internal/server/locales/zh-CN/portal.json
similarity index 100%
rename from internal/server/locales/zh/portal.json
rename to internal/server/locales/zh-CN/portal.json
diff --git a/internal/server/template.go b/internal/server/template.go
index 9c5bb523d..fedf2df57 100644
--- a/internal/server/template.go
+++ b/internal/server/template.go
@@ -4,10 +4,13 @@ import (
 	"fmt"
 	"io"
 	"os"
+	"path"
 	"path/filepath"
 	"strings"
 	"text/template"
 
+	"github.com/valyala/fasthttp"
+
 	"github.com/authelia/authelia/v4/internal/logging"
 	"github.com/authelia/authelia/v4/internal/middlewares"
 	"github.com/authelia/authelia/v4/internal/utils"
@@ -19,7 +22,7 @@ import (
 func ServeTemplatedFile(publicDir, file, assetPath, duoSelfEnrollment, rememberMe, resetPassword, resetPasswordCustomURL, session, theme string, https bool) middlewares.RequestHandler {
 	logger := logging.Logger()
 
-	a, err := assets.Open(publicDir + file)
+	a, err := assets.Open(path.Join(publicDir, file))
 	if err != nil {
 		logger.Fatalf("Unable to open %s: %s", file, err)
 	}
@@ -43,7 +46,7 @@ func ServeTemplatedFile(publicDir, file, assetPath, duoSelfEnrollment, rememberM
 		logoOverride := f
 
 		if assetPath != "" {
-			if _, err := os.Stat(filepath.Join(assetPath, logoFile)); err == nil {
+			if _, err := os.Stat(filepath.Join(assetPath, fileLogo)); err == nil {
 				logoOverride = t
 			}
 		}
@@ -71,14 +74,14 @@ func ServeTemplatedFile(publicDir, file, assetPath, duoSelfEnrollment, rememberM
 		}
 
 		switch {
-		case publicDir == swaggerAssets:
-			ctx.Response.Header.Add("Content-Security-Policy", fmt.Sprintf("base-uri 'self'; default-src 'self'; img-src 'self' https://validator.swagger.io data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'nonce-%s'; style-src 'self' 'nonce-%s'", nonce, nonce))
+		case publicDir == assetsSwagger:
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf("base-uri 'self'; default-src 'self'; img-src 'self' https://validator.swagger.io data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'nonce-%s'; style-src 'self' 'nonce-%s'", nonce, nonce))
 		case ctx.Configuration.Server.Headers.CSPTemplate != "":
-			ctx.Response.Header.Add("Content-Security-Policy", strings.ReplaceAll(ctx.Configuration.Server.Headers.CSPTemplate, cspNoncePlaceholder, nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, strings.ReplaceAll(ctx.Configuration.Server.Headers.CSPTemplate, cspNoncePlaceholder, nonce))
 		case os.Getenv("ENVIRONMENT") == dev:
-			ctx.Response.Header.Add("Content-Security-Policy", fmt.Sprintf(cspDefaultTemplate, " 'unsafe-eval'", nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(cspDefaultTemplate, " 'unsafe-eval'", nonce))
 		default:
-			ctx.Response.Header.Add("Content-Security-Policy", fmt.Sprintf(cspDefaultTemplate, "", nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(cspDefaultTemplate, "", nonce))
 		}
 
 		err := tmpl.Execute(ctx.Response.BodyWriter(), struct{ Base, BaseURL, CSPNonce, DuoSelfEnrollment, LogoOverride, RememberMe, ResetPassword, ResetPasswordCustomURL, Session, Theme string }{Base: base, BaseURL: baseURL, CSPNonce: nonce, DuoSelfEnrollment: duoSelfEnrollment, LogoOverride: logoOverride, RememberMe: rememberMe, ResetPassword: resetPassword, ResetPasswordCustomURL: resetPasswordCustomURL, Session: session, Theme: theme})
diff --git a/web/src/i18n/index.ts b/web/src/i18n/index.ts
index 53231ccd1..6cfa4419d 100644
--- a/web/src/i18n/index.ts
+++ b/web/src/i18n/index.ts
@@ -18,9 +18,9 @@ i18n.use(Backend)
         backend: {
             loadPath: basePath + "/locales/{{lng}}/{{ns}}.json",
         },
+        load: "all",
         ns: ["portal"],
         defaultNS: "portal",
-        load: "all",
         fallbackLng: {
             default: ["en"],
             de: ["en"],
@@ -33,7 +33,7 @@ i18n.use(Backend)
             "sv-SE": ["sv", "en"],
             zh: ["en"],
             "zh-CN": ["zh", "en"],
-            "zh-TW": ["zh", "en"],
+            "zh-TW": ["en"],
         },
         supportedLngs: ["en", "de", "es", "fr", "nl", "pt", "ru", "sv", "sv-SE", "zh", "zh-CN", "zh-TW"],
         lowerCaseLng: false,

From 9c72bc8977359ef5b79996d2b9bd41882438d11d Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 14:21:05 +1000
Subject: [PATCH 015/263] ci: gen github tmpl locales and commitlint (#3759)

This adds several automatic generators for Authelia docs etc.
---
 .github/ISSUE_TEMPLATE/bug-report.yml         | 138 +++++++++
 .github/ISSUE_TEMPLATE/bug_report.md          |  41 ---
 .github/ISSUE_TEMPLATE/config.yml             |   9 +
 .github/ISSUE_TEMPLATE/feature-request.yml    |  47 ++++
 .github/ISSUE_TEMPLATE/feature_request.md     |  26 --
 .github/ISSUE_TEMPLATE/misc.md                |   7 -
 .yamllint.yml                                 |   3 +-
 cmd/authelia-gen/cmd_all.go                   |  36 ---
 cmd/authelia-gen/cmd_code.go                  | 263 +++++++++++++++++-
 cmd/authelia-gen/cmd_code_keys.go             | 173 ------------
 cmd/authelia-gen/cmd_commit_msg.go            | 220 +++++++++++++++
 cmd/authelia-gen/cmd_docs.go                  |  22 +-
 cmd/authelia-gen/cmd_docs_cli.go              |  38 ++-
 cmd/authelia-gen/cmd_docs_date.go             |  21 +-
 cmd/authelia-gen/cmd_docs_keys.go             |  81 ++++++
 cmd/authelia-gen/cmd_github.go                | 236 ++++++++++++++++
 cmd/authelia-gen/cmd_locales.go               | 215 ++++++++++++++
 cmd/authelia-gen/cmd_root.go                  | 124 +++++++++
 cmd/authelia-gen/const.go                     |  80 +++++-
 cmd/authelia-gen/main.go                      |  24 +-
 cmd/authelia-gen/templates.go                 |  69 +++++
 .../cmd-authelia-scripts-gen.go.tmpl          |  11 +
 ...contributing-development-commitmsg.md.tmpl | 138 +++++++++
 .../templates/dot_commitlintrc.js.tmpl        |  25 ++
 .../github_issue_template_bug_report.yml.tmpl | 108 +++++++
 .../github_issue_template_feature.yml.tmpl    |  47 ++++
 ...nternal_configuration_schema_keys.go.tmpl} |   0
 .../templates/web_i18n_index.ts.tmpl          |  47 ++++
 cmd/authelia-gen/types.go                     | 123 ++++++++
 cmd/authelia-scripts/cmd/build.go             |   7 +-
 cmd/authelia-scripts/cmd/gen.go               |  11 +
 docs/config/_default/menus/menus.en.toml      |  12 +-
 .../en/configuration/methods/environment.md   |   4 +
 .../en/configuration/methods/secrets.md       |  18 +-
 .../development/guidelines-commit-message.md  |  13 +-
 .../privacy-policy.md => policies/privacy.md} |   2 +-
 .../en/{information => policies}/security.md  |   7 +-
 .../cli/authelia-gen/authelia-gen.md          |  28 +-
 .../cli/authelia-gen/authelia-gen_all.md      |  32 ---
 .../cli/authelia-gen/authelia-gen_code.md     |  24 ++
 .../authelia-gen/authelia-gen_code_keys.md    |  27 +-
 .../authelia-gen/authelia-gen_code_scripts.md |  55 ++++
 .../authelia-gen/authelia-gen_commit-lint.md  |  55 ++++
 .../cli/authelia-gen/authelia-gen_docs.md     |  27 +-
 .../cli/authelia-gen/authelia-gen_docs_cli.md |  22 +-
 .../authelia-gen/authelia-gen_docs_date.md    |  22 +-
 .../authelia-gen/authelia-gen_docs_keys.md    |  55 ++++
 .../authelia-gen/authelia-gen_docs_time.md    |  42 ---
 .../cli/authelia-gen/authelia-gen_github.md   |  56 ++++
 .../authelia-gen_github_issue-templates.md    |  57 ++++
 ...a-gen_github_issue-templates_bug-report.md |  55 ++++
 ..._github_issue-templates_feature-request.md |  55 ++++
 .../cli/authelia-gen/authelia-gen_locales.md  |  55 ++++
 .../authelia-scripts_certificates.md          |  39 ---
 .../authelia-scripts_certificates_generate.md |  49 ----
 .../authelia-scripts_hash-password.md         |  49 ----
 .../authelia-scripts/authelia-scripts_rsa.md  |  38 ---
 .../authelia-scripts_rsa_generate.md          |  43 ---
 .../reference/guides/domain-sanitizaiton.md   |  30 --
 .../reference/guides/internationalization.md  |  17 ++
 .../guides/troubleshooting-sanitizaiton.md    |  43 +++
 docs/data/configkeys.json                     |   1 +
 docs/data/languages.json                      |   2 +-
 docs/layouts/policies/list.html               |  22 ++
 .../layouts/shortcodes/table-config-keys.html |  14 +
 .../shortcodes/table-i18n-locales.html        |   5 +
 docs/package.json                             |   2 +-
 internal/configuration/helpers.go             |  28 +-
 internal/configuration/helpers_test.go        |  12 +-
 internal/configuration/sources.go             |  10 +-
 web/src/i18n/index.ts                         |   6 +
 71 files changed, 2770 insertions(+), 753 deletions(-)
 create mode 100644 .github/ISSUE_TEMPLATE/bug-report.yml
 delete mode 100644 .github/ISSUE_TEMPLATE/bug_report.md
 create mode 100644 .github/ISSUE_TEMPLATE/feature-request.yml
 delete mode 100644 .github/ISSUE_TEMPLATE/feature_request.md
 delete mode 100644 .github/ISSUE_TEMPLATE/misc.md
 delete mode 100644 cmd/authelia-gen/cmd_all.go
 delete mode 100644 cmd/authelia-gen/cmd_code_keys.go
 create mode 100644 cmd/authelia-gen/cmd_commit_msg.go
 create mode 100644 cmd/authelia-gen/cmd_docs_keys.go
 create mode 100644 cmd/authelia-gen/cmd_github.go
 create mode 100644 cmd/authelia-gen/cmd_locales.go
 create mode 100644 cmd/authelia-gen/cmd_root.go
 create mode 100644 cmd/authelia-gen/templates.go
 create mode 100644 cmd/authelia-gen/templates/cmd-authelia-scripts-gen.go.tmpl
 create mode 100644 cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
 create mode 100644 cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl
 create mode 100644 cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
 create mode 100644 cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl
 rename cmd/authelia-gen/templates/{config_keys.go.tmpl => internal_configuration_schema_keys.go.tmpl} (100%)
 create mode 100644 cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
 create mode 100644 cmd/authelia-gen/types.go
 create mode 100644 cmd/authelia-scripts/cmd/gen.go
 rename docs/content/en/{information/privacy-policy.md => policies/privacy.md} (92%)
 rename docs/content/en/{information => policies}/security.md (93%)
 delete mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_all.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
 delete mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_time.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
 delete mode 100644 docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates.md
 delete mode 100644 docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates_generate.md
 delete mode 100644 docs/content/en/reference/cli/authelia-scripts/authelia-scripts_hash-password.md
 delete mode 100644 docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa.md
 delete mode 100644 docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa_generate.md
 delete mode 100644 docs/content/en/reference/guides/domain-sanitizaiton.md
 create mode 100644 docs/content/en/reference/guides/internationalization.md
 create mode 100644 docs/content/en/reference/guides/troubleshooting-sanitizaiton.md
 create mode 100644 docs/data/configkeys.json
 create mode 100644 docs/layouts/policies/list.html
 create mode 100644 docs/layouts/shortcodes/table-config-keys.html
 create mode 100644 docs/layouts/shortcodes/table-i18n-locales.html

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
new file mode 100644
index 000000000..3b107f758
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -0,0 +1,138 @@
+---
+name: Bug Report
+description: Report a bug
+labels:
+  - type/bug/unconfirmed
+  - status/needs-triage
+  - priority/4-normal
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this bug report. If you are unsure if this is actually a bug we generally recommend creating a [Question and Answer Discussion](https://github.com/authelia/authelia/discussions/new?category=q-a) first.
+
+        Please review the following requirements before submitting this issue type:
+
+        1. Please ensure you do not report security vulnerabilities via this method. See our [Security Policy](https://www.authelia.com/security-policy).
+        2. Please try to give as much information as possible for us to be able to reproduce the issue and provide a quick fix.
+        3. Please ensure an issue does not already exist for this potential bug.
+        4. Please only provide specific versions. Latest is not a version.
+        5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files
+  - type: dropdown
+    id: version
+    attributes:
+      label: Version
+      description: What version(s) of Authelia can you reproduce this bug on?
+      multiple: true
+      options:
+        - v4.36.7
+        - v4.36.6
+        - v4.36.5
+        - v4.36.4
+        - v4.36.3
+        - v4.36.2
+        - v4.36.1
+        - v4.36.0
+        - v4.35.6
+        - v4.35.5
+        - v4.35.4
+        - v4.35.3
+        - v4.35.2
+        - v4.35.1
+        - v4.35.0
+        - v4.34.6
+        - v4.34.5
+        - v4.34.4
+        - v4.34.3
+        - v4.34.2
+        - v4.34.1
+        - v4.34.0
+        - v4.33.2
+        - v4.33.1
+        - v4.33.0
+        - v4.32.2
+        - v4.32.1
+        - v4.32.0
+        - v4.31.0
+    validations:
+      required: true
+  - type: dropdown
+    id: deployment
+    attributes:
+      label: Deployment Method
+      description: How are you deploying Authelia?
+      options:
+        - Docker
+        - Kubernetes
+        - Bare-metal
+        - Other
+    validations:
+      required: true
+  - type: dropdown
+    id: proxy
+    attributes:
+      label: Reverse Proxy
+      description: What reverse proxy are you using?
+      options:
+        - Caddy
+        - Traefik
+        - Envoy
+        - NGINX
+        - SWAG
+        - NGINX Proxy Manager
+        - HAProxy
+    validations:
+      required: true
+  - type: input
+    id: proxy-version
+    attributes:
+      label: Reverse Proxy Version
+      description: What is the version of your reverse proxy?
+      placeholder: x.x.x
+    validations:
+      required: false
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Describe the bug
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction
+      description: Describe how we can reproduce this issue
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs
+      description: Provide the logs (the template will automatically put this content in a code block)
+      render: shell
+    validations:
+      required: false
+  - type: textarea
+    id: configuration
+    attributes:
+      label: Configuration
+      description: Provide the Authelia configuration file (the template will automatically put this content in a code block)
+      render: yaml
+    validations:
+      required: false
+  - type: textarea
+    id: expectations
+    attributes:
+      label: Expectations
+      description: Describe the desired or expected results
+    validations:
+      required: false
+  - type: textarea
+    id: documentation
+    attributes:
+      label: Documentation
+      description: Provide any relevant specification or other documentation if applicable
+    validations:
+      required: false
+...
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
deleted file mode 100644
index 76a60c8f8..000000000
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ /dev/null
@@ -1,41 +0,0 @@
----
-name: Bug Report
-about: Use this template to report bugs other than security vulnerabilities
-labels: Possible Bug
----
-## Bug Report
-<!--
-1. IMPORTANT: Do not report security vulnerabilities via GitHub issues. Please click 'choose a different type' and see 
-the dedicated report a security vulnerability link.
-2. Remember to customize the title above.
-3. Replace the below sections (not this section) starting with <!- - and ending with - -> with relevant information, 
-making sure to remove the <!- - and - ->.
-4. Sections that start with _N/A_ are optional, but if you populate them with values please remove the _N/A_.
--->
-
-### Description
-
-<!--
-Describe the bug here.
--->
-
-### Expected Behaviour
-
-_N/A_
-<!--
-Describe the behaviour your expect here.
--->
-
-### Reproduction Steps
-
-_N/A_
-<!--
-1. Replace this step with your first step. Add additional steps below this.
--->
-
-### Additional Information
-
-_N/A_
-<!--
-This section is for relevant additional information like; logs, configurations, environment information, etc. 
--->
\ No newline at end of file
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index 899f94db9..2a89a14ac 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,6 +1,15 @@
 ---
 blank_issues_enabled: false
 contact_links:
+  - name: Idea
+    url: https://github.com/authelia/authelia/discussions/new?category=ideas
+    about: Submit an Idea for Voting
+  - name: Question
+    url: https://github.com/authelia/authelia/discussions/new?category=q-a
+    about: Ask a Question
+  - name: Discussion
+    url: https://github.com/authelia/authelia/discussions/new
+    about: Start a Discussion related to Ideas, Polls, Show and Tell, or General Topics
   - name: Documentation
     url: https://www.authelia.com/
     about: Read the Documentation
diff --git a/.github/ISSUE_TEMPLATE/feature-request.yml b/.github/ISSUE_TEMPLATE/feature-request.yml
new file mode 100644
index 000000000..00a448c06
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature-request.yml
@@ -0,0 +1,47 @@
+---
+name: Feature Request
+description: Submit a Feature for Design which Has Been Submitted as an Idea and has been voted on
+labels:
+  - type/feature
+  - status/needs-design
+  - priority/4-normal
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this feature request. A feature request is created as issue for the purpose of tracking the design and implementation of a feature.
+
+        Please review the following requirements before submitting this issue type:
+
+        1. Ensure there are no other similar feature requests.
+        2. Make sure you've checked the [Documentation](https://www.authelia.com) doesn't clearly document the features existence already.
+        3. Consider creating an [Idea Discussion](https://github.com/authelia/authelia/discussions/new?category=ideas) which can be voted on instead if one doesn't exist.
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Describe the feature
+    validations:
+      required: true
+  - type: textarea
+    id: use-case
+    attributes:
+      label: Use Case
+      description: Provide a use case
+    validations:
+      required: true
+  - type: textarea
+    id: details
+    attributes:
+      label: Details
+      description: Describe the feature in detail
+    validations:
+      required: false
+  - type: textarea
+    id: documentation
+    attributes:
+      label: Documentation
+      description: Provide any relevant specification or other documentation if applicable
+    validations:
+      required: false
+...
diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md
deleted file mode 100644
index 4354ccba9..000000000
--- a/.github/ISSUE_TEMPLATE/feature_request.md
+++ /dev/null
@@ -1,26 +0,0 @@
----
-name: Feature Request
-about: Use this template to request features
-labels: Feature Request
----
-## Feature Request
-<!--
-1. IMPORTANT: Do not report security vulnerabilities via GitHub issues. Please click 'choose a different type' and see the dedicated report a security vulnerability link.
-2. Remember to customize the title above.
-3. Replace the below sections (not this section) starting with <!- - and ending with - -> with relevant information, 
-making sure to remove the <!- - and - ->.
-4. Sections that start with _N/A_ are optional, but if you populate them with values please remove the _N/A_.
--->
-
-### Description
-
-<!--
-Describe the feature here.
--->
-
-### Use Case
-
-_N/A_
-<!--
-Describe the specific use case if it isn't clear or may not be clear from your feature description here.
--->
\ No newline at end of file
diff --git a/.github/ISSUE_TEMPLATE/misc.md b/.github/ISSUE_TEMPLATE/misc.md
deleted file mode 100644
index 23a941098..000000000
--- a/.github/ISSUE_TEMPLATE/misc.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-name: Miscellaneous
-about: Use this template for everything other than feature requests, security vulnerabilities, or bug reports such as questions
----
-<!--
-IMPORTANT: Do not report security vulnerabilities via GitHub issues. Please click 'choose a different type' and see the dedicated report a security vulnerability link.
--->
\ No newline at end of file
diff --git a/.yamllint.yml b/.yamllint.yml
index 3d31542b4..d7fc7209f 100644
--- a/.yamllint.yml
+++ b/.yamllint.yml
@@ -6,7 +6,8 @@ ignore: |
   internal/configuration/test_resources/config_bad_quoting.yml
   web/pnpm-lock.yaml
   web/node_modules/
-
+  .github/ISSUE_TEMPLATE/feature-request.yml
+  .github/ISSUE_TEMPLATE/bug-report.yml
 rules:
   document-end:
     level: warning
diff --git a/cmd/authelia-gen/cmd_all.go b/cmd/authelia-gen/cmd_all.go
deleted file mode 100644
index aba00a5a3..000000000
--- a/cmd/authelia-gen/cmd_all.go
+++ /dev/null
@@ -1,36 +0,0 @@
-package main
-
-import (
-	"github.com/spf13/cobra"
-)
-
-func newAllCmd() *cobra.Command {
-	cmd := &cobra.Command{
-		Use:   "all",
-		Short: "Run all generators with default options",
-		RunE:  allRunE,
-
-		DisableAutoGenTag: true,
-	}
-
-	return cmd
-}
-
-func allRunE(cmd *cobra.Command, args []string) (err error) {
-	for _, subCmd := range cmd.Parent().Commands() {
-		if subCmd == cmd || subCmd.Use == "completion" || subCmd.Use == "help [command]" {
-			continue
-		}
-
-		switch {
-		case subCmd.RunE != nil:
-			if err = subCmd.RunE(subCmd, args); err != nil {
-				return err
-			}
-		case subCmd.Run != nil:
-			subCmd.Run(subCmd, args)
-		}
-	}
-
-	return nil
-}
diff --git a/cmd/authelia-gen/cmd_code.go b/cmd/authelia-gen/cmd_code.go
index f0eea6b02..f0cac4bba 100644
--- a/cmd/authelia-gen/cmd_code.go
+++ b/cmd/authelia-gen/cmd_code.go
@@ -1,34 +1,271 @@
 package main
 
 import (
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"net/mail"
+	"net/url"
+	"os"
+	"path/filepath"
+	"reflect"
+	"regexp"
+	"strings"
+	"time"
+
 	"github.com/spf13/cobra"
+
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
 )
 
 func newCodeCmd() *cobra.Command {
 	cmd := &cobra.Command{
-		Use:   "code",
+		Use:   cmdUseCode,
 		Short: "Generate code",
-		RunE:  codeRunE,
+		RunE:  rootSubCommandsRunE,
 
 		DisableAutoGenTag: true,
 	}
 
-	cmd.AddCommand(newCodeKeysCmd())
+	cmd.AddCommand(newCodeKeysCmd(), newCodeScriptsCmd())
 
 	return cmd
 }
 
-func codeRunE(cmd *cobra.Command, args []string) (err error) {
-	for _, subCmd := range cmd.Commands() {
-		switch {
-		case subCmd.RunE != nil:
-			if err = subCmd.RunE(subCmd, args); err != nil {
-				return err
-			}
-		case subCmd.Run != nil:
-			subCmd.Run(subCmd, args)
-		}
+func newCodeScriptsCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseCodeScripts,
+		Short: "Generate the generated portion of the authelia-scripts command",
+		RunE:  codeScriptsRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func newCodeKeysCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseKeys,
+		Short: "Generate the list of valid configuration keys",
+		RunE:  codeKeysRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func codeScriptsRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		root, pathScriptsGen string
+		resp                 *http.Response
+	)
+
+	data := &tmplScriptsGEnData{}
+
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if pathScriptsGen, err = cmd.Flags().GetString(cmdFlagFileScriptsGen); err != nil {
+		return err
+	}
+
+	if data.Package, err = cmd.Flags().GetString(cmdFlagPackageScriptsGen); err != nil {
+		return err
+	}
+
+	if resp, err = http.Get("https://api.github.com/repos/swagger-api/swagger-ui/tags"); err != nil {
+		return fmt.Errorf("failed to get latest version of the Swagger UI: %w", err)
+	}
+
+	defer resp.Body.Close()
+
+	var (
+		respJSON []GitHubTagsJSON
+		respRaw  []byte
+	)
+
+	if respRaw, err = io.ReadAll(resp.Body); err != nil {
+		return fmt.Errorf("failed to get latest version of the Swagger UI: %w", err)
+	}
+
+	if err = json.Unmarshal(respRaw, &respJSON); err != nil {
+		return fmt.Errorf("failed to get latest version of the Swagger UI: %w", err)
+	}
+
+	if len(respJSON) < 1 {
+		return fmt.Errorf("failed to get latest version of the Swagger UI: the api returned zero results")
+	}
+
+	if strings.HasPrefix(respJSON[0].Name, "v") {
+		data.VersionSwaggerUI = respJSON[0].Name[1:]
+	} else {
+		data.VersionSwaggerUI = respJSON[0].Name
+	}
+
+	fullPathScriptsGen := filepath.Join(root, pathScriptsGen)
+
+	var f *os.File
+
+	if f, err = os.Create(fullPathScriptsGen); err != nil {
+		return fmt.Errorf("failed to create file '%s': %w", fullPathScriptsGen, err)
+	}
+
+	if err = tmplScriptsGen.Execute(f, data); err != nil {
+		_ = f.Close()
+
+		return fmt.Errorf("failed to write output file '%s': %w", fullPathScriptsGen, err)
+	}
+
+	if err = f.Close(); err != nil {
+		return fmt.Errorf("failed to close output file '%s': %w", fullPathScriptsGen, err)
 	}
 
 	return nil
 }
+
+// GitHubTagsJSON represents the JSON struct for the GitHub Tags API.
+type GitHubTagsJSON struct {
+	Name string `json:"name"`
+}
+
+func codeKeysRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		pathCodeConfigKeys, root string
+
+		f *os.File
+	)
+
+	data := tmplConfigurationKeysData{
+		Timestamp: time.Now(),
+		Keys:      readTags("", reflect.TypeOf(schema.Configuration{})),
+	}
+
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if pathCodeConfigKeys, err = cmd.Flags().GetString(cmdFlagFileConfigKeys); err != nil {
+		return err
+	}
+
+	if data.Package, err = cmd.Flags().GetString(cmdFlagPackageConfigKeys); err != nil {
+		return err
+	}
+
+	fullPathCodeConfigKeys := filepath.Join(root, pathCodeConfigKeys)
+
+	if f, err = os.Create(fullPathCodeConfigKeys); err != nil {
+		return fmt.Errorf("failed to create file '%s': %w", fullPathCodeConfigKeys, err)
+	}
+
+	if err = tmplCodeConfigurationSchemaKeys.Execute(f, data); err != nil {
+		_ = f.Close()
+
+		return fmt.Errorf("failed to write output file '%s': %w", fullPathCodeConfigKeys, err)
+	}
+
+	if err = f.Close(); err != nil {
+		return fmt.Errorf("failed to close output file '%s': %w", fullPathCodeConfigKeys, err)
+	}
+
+	return nil
+}
+
+var decodedTypes = []reflect.Type{
+	reflect.TypeOf(mail.Address{}),
+	reflect.TypeOf(regexp.Regexp{}),
+	reflect.TypeOf(url.URL{}),
+	reflect.TypeOf(time.Duration(0)),
+	reflect.TypeOf(schema.Address{}),
+}
+
+func containsType(needle reflect.Type, haystack []reflect.Type) (contains bool) {
+	for _, t := range haystack {
+		if needle.Kind() == reflect.Ptr {
+			if needle.Elem() == t {
+				return true
+			}
+		} else if needle == t {
+			return true
+		}
+	}
+
+	return false
+}
+
+func readTags(prefix string, t reflect.Type) (tags []string) {
+	tags = make([]string, 0)
+
+	for i := 0; i < t.NumField(); i++ {
+		field := t.Field(i)
+
+		tag := field.Tag.Get("koanf")
+
+		if tag == "" {
+			tags = append(tags, prefix)
+
+			continue
+		}
+
+		switch field.Type.Kind() {
+		case reflect.Struct:
+			if !containsType(field.Type, decodedTypes) {
+				tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, false), field.Type)...)
+
+				continue
+			}
+		case reflect.Slice:
+			if field.Type.Elem().Kind() == reflect.Struct {
+				if !containsType(field.Type.Elem(), decodedTypes) {
+					tags = append(tags, getKeyNameFromTagAndPrefix(prefix, tag, false))
+					tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, true), field.Type.Elem())...)
+
+					continue
+				}
+			}
+		case reflect.Ptr:
+			switch field.Type.Elem().Kind() {
+			case reflect.Struct:
+				if !containsType(field.Type.Elem(), decodedTypes) {
+					tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, false), field.Type.Elem())...)
+
+					continue
+				}
+			case reflect.Slice:
+				if field.Type.Elem().Elem().Kind() == reflect.Struct {
+					if !containsType(field.Type.Elem(), decodedTypes) {
+						tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, true), field.Type.Elem())...)
+
+						continue
+					}
+				}
+			}
+		}
+
+		tags = append(tags, getKeyNameFromTagAndPrefix(prefix, tag, false))
+	}
+
+	return tags
+}
+
+func getKeyNameFromTagAndPrefix(prefix, name string, slice bool) string {
+	nameParts := strings.SplitN(name, ",", 2)
+
+	if prefix == "" {
+		return nameParts[0]
+	}
+
+	if len(nameParts) == 2 && nameParts[1] == "squash" {
+		return prefix
+	}
+
+	if slice {
+		return fmt.Sprintf("%s.%s[]", prefix, nameParts[0])
+	}
+
+	return fmt.Sprintf("%s.%s", prefix, nameParts[0])
+}
diff --git a/cmd/authelia-gen/cmd_code_keys.go b/cmd/authelia-gen/cmd_code_keys.go
deleted file mode 100644
index 4599ae148..000000000
--- a/cmd/authelia-gen/cmd_code_keys.go
+++ /dev/null
@@ -1,173 +0,0 @@
-package main
-
-import (
-	"fmt"
-	"net/mail"
-	"net/url"
-	"os"
-	"reflect"
-	"regexp"
-	"strings"
-	"text/template"
-	"time"
-
-	"github.com/spf13/cobra"
-
-	"github.com/authelia/authelia/v4/internal/configuration/schema"
-)
-
-func newCodeKeysCmd() *cobra.Command {
-	cmd := &cobra.Command{
-		Use:   "keys",
-		Short: "Generate the list of valid configuration keys",
-		RunE:  codeKeysRunE,
-
-		DisableAutoGenTag: true,
-	}
-
-	cmd.Flags().StringP("file", "f", "./internal/configuration/schema/keys.go", "Sets the path of the keys file")
-	cmd.Flags().String("package", "schema", "Sets the package name of the keys file")
-
-	return cmd
-}
-
-func codeKeysRunE(cmd *cobra.Command, args []string) (err error) {
-	var (
-		file string
-
-		f *os.File
-	)
-
-	data := keysTemplateStruct{
-		Timestamp: time.Now(),
-		Keys:      readTags("", reflect.TypeOf(schema.Configuration{})),
-	}
-
-	if file, err = cmd.Flags().GetString("file"); err != nil {
-		return err
-	}
-
-	if data.Package, err = cmd.Flags().GetString("package"); err != nil {
-		return err
-	}
-
-	if f, err = os.Create(file); err != nil {
-		return fmt.Errorf("failed to create file '%s': %w", file, err)
-	}
-
-	var (
-		content []byte
-		tmpl    *template.Template
-	)
-
-	if content, err = templatesFS.ReadFile("templates/config_keys.go.tmpl"); err != nil {
-		return err
-	}
-
-	if tmpl, err = template.New("keys").Parse(string(content)); err != nil {
-		return err
-	}
-
-	return tmpl.Execute(f, data)
-}
-
-type keysTemplateStruct struct {
-	Timestamp time.Time
-	Keys      []string
-	Package   string
-}
-
-var decodedTypes = []reflect.Type{
-	reflect.TypeOf(mail.Address{}),
-	reflect.TypeOf(regexp.Regexp{}),
-	reflect.TypeOf(url.URL{}),
-	reflect.TypeOf(time.Duration(0)),
-	reflect.TypeOf(schema.Address{}),
-}
-
-func containsType(needle reflect.Type, haystack []reflect.Type) (contains bool) {
-	for _, t := range haystack {
-		if needle.Kind() == reflect.Ptr {
-			if needle.Elem() == t {
-				return true
-			}
-		} else if needle == t {
-			return true
-		}
-	}
-
-	return false
-}
-
-func readTags(prefix string, t reflect.Type) (tags []string) {
-	tags = make([]string, 0)
-
-	for i := 0; i < t.NumField(); i++ {
-		field := t.Field(i)
-
-		tag := field.Tag.Get("koanf")
-
-		if tag == "" {
-			tags = append(tags, prefix)
-
-			continue
-		}
-
-		switch field.Type.Kind() {
-		case reflect.Struct:
-			if !containsType(field.Type, decodedTypes) {
-				tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, false), field.Type)...)
-
-				continue
-			}
-		case reflect.Slice:
-			if field.Type.Elem().Kind() == reflect.Struct {
-				if !containsType(field.Type.Elem(), decodedTypes) {
-					tags = append(tags, getKeyNameFromTagAndPrefix(prefix, tag, false))
-					tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, true), field.Type.Elem())...)
-
-					continue
-				}
-			}
-		case reflect.Ptr:
-			switch field.Type.Elem().Kind() {
-			case reflect.Struct:
-				if !containsType(field.Type.Elem(), decodedTypes) {
-					tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, false), field.Type.Elem())...)
-
-					continue
-				}
-			case reflect.Slice:
-				if field.Type.Elem().Elem().Kind() == reflect.Struct {
-					if !containsType(field.Type.Elem(), decodedTypes) {
-						tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, true), field.Type.Elem())...)
-
-						continue
-					}
-				}
-			}
-		}
-
-		tags = append(tags, getKeyNameFromTagAndPrefix(prefix, tag, false))
-	}
-
-	return tags
-}
-
-func getKeyNameFromTagAndPrefix(prefix, name string, slice bool) string {
-	nameParts := strings.SplitN(name, ",", 2)
-
-	if prefix == "" {
-		return nameParts[0]
-	}
-
-	if len(nameParts) == 2 && nameParts[1] == "squash" {
-		return prefix
-	}
-
-	if slice {
-		return fmt.Sprintf("%s.%s[]", prefix, nameParts[0])
-	}
-
-	return fmt.Sprintf("%s.%s", prefix, nameParts[0])
-}
diff --git a/cmd/authelia-gen/cmd_commit_msg.go b/cmd/authelia-gen/cmd_commit_msg.go
new file mode 100644
index 000000000..cadf70d68
--- /dev/null
+++ b/cmd/authelia-gen/cmd_commit_msg.go
@@ -0,0 +1,220 @@
+package main
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+
+	"github.com/spf13/cobra"
+)
+
+// CommitMessageTmpl is a template data structure which is used to generate files with commit message information.
+type CommitMessageTmpl struct {
+	Scopes ScopesTmpl
+	Types  TypesTmpl
+}
+
+// TypesTmpl is a template data structure which is used to generate files with commit message types.
+type TypesTmpl struct {
+	List    []string
+	Details []NameDescriptionTmpl
+}
+
+// ScopesTmpl is a template data structure which is used to generate files with commit message scopes.
+type ScopesTmpl struct {
+	All      []string
+	Packages []string
+	Extra    []NameDescriptionTmpl
+}
+
+// NameDescriptionTmpl is a template item which includes a name, description and list of scopes.
+type NameDescriptionTmpl struct {
+	Name        string
+	Description string
+	Scopes      []string
+}
+
+func newCommitLintCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseCommitLint,
+		Short: "Generate commit lint files",
+		RunE:  commitLintRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+var commitScopesExtra = []NameDescriptionTmpl{
+	{"api", "used for changes that change the openapi specification", nil},
+	{"cmd", "used for changes to the `%s` top level binaries", nil},
+	{"web", "used for changes to the React based frontend", nil},
+}
+
+var commitTypes = []NameDescriptionTmpl{
+	{"build", "Changes that affect the build system or external dependencies", []string{"bundler", "deps", "docker", "go", "npm"}},
+	{"ci", "Changes to our CI configuration files and scripts", []string{"autheliabot", "buildkite", "codecov", "golangci-lint", "renovate", "reviewdog"}},
+	{"docs", "Documentation only changes", nil},
+	{"feat", "A new feature", nil},
+	{"fix", "A bug fix", nil},
+	{"i18n", "Updating translations or internationalization settings", nil},
+	{"perf", "A code change that improves performance", nil},
+	{"refactor", "A code change that neither fixes a bug nor adds a feature", nil},
+	{"release", "Releasing a new version of Authelia", nil},
+	{"test", "Adding missing tests or correcting existing tests", nil},
+}
+
+var commitTypesExtra = []string{"revert"}
+
+func getGoPackages(dir string) (pkgs []string, err error) {
+	var (
+		entries    []os.DirEntry
+		entriesSub []os.DirEntry
+	)
+
+	if entries, err = os.ReadDir(dir); err != nil {
+		return nil, fmt.Errorf("failed to detect go packages in directory '%s': %w", dir, err)
+	}
+
+	for _, entry := range entries {
+		if !entry.IsDir() {
+			continue
+		}
+
+		if entriesSub, err = os.ReadDir(filepath.Join(dir, entry.Name())); err != nil {
+			continue
+		}
+
+		for _, entrySub := range entriesSub {
+			if entrySub.IsDir() {
+				continue
+			}
+
+			if strings.HasSuffix(entrySub.Name(), ".go") {
+				pkgs = append(pkgs, entry.Name())
+				break
+			}
+		}
+	}
+
+	return pkgs, nil
+}
+
+func commitLintRunE(cmd *cobra.Command, args []string) (err error) {
+	var root, pathCommitLintConfig, pathDocsCommitMessageGuidelines string
+
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if pathCommitLintConfig, err = cmd.Flags().GetString(cmdFlagFileConfigCommitLint); err != nil {
+		return err
+	}
+
+	if pathDocsCommitMessageGuidelines, err = cmd.Flags().GetString(cmdFlagFileDocsCommitMsgGuidelines); err != nil {
+		return err
+	}
+
+	data := &CommitMessageTmpl{
+		Scopes: ScopesTmpl{
+			All:      []string{},
+			Packages: []string{},
+			Extra:    []NameDescriptionTmpl{},
+		},
+		Types: TypesTmpl{
+			List:    []string{},
+			Details: []NameDescriptionTmpl{},
+		},
+	}
+
+	var (
+		cmds []string
+		pkgs []string
+	)
+
+	if cmds, err = getGoPackages(filepath.Join(root, subPathCmd)); err != nil {
+		return err
+	}
+
+	if pkgs, err = getGoPackages(filepath.Join(root, subPathInternal)); err != nil {
+		return err
+	}
+
+	data.Scopes.All = append(data.Scopes.All, pkgs...)
+	data.Scopes.Packages = append(data.Scopes.Packages, pkgs...)
+
+	for _, scope := range commitScopesExtra {
+		switch scope.Name {
+		case subPathCmd:
+			data.Scopes.Extra = append(data.Scopes.Extra, NameDescriptionTmpl{Name: scope.Name, Description: fmt.Sprintf(scope.Description, strings.Join(cmds, "|"))})
+		default:
+			data.Scopes.Extra = append(data.Scopes.Extra, scope)
+		}
+
+		data.Scopes.All = append(data.Scopes.All, scope.Name)
+	}
+
+	for _, cType := range commitTypes {
+		data.Types.List = append(data.Types.List, cType.Name)
+		data.Types.Details = append(data.Types.Details, cType)
+
+		data.Scopes.All = append(data.Scopes.All, cType.Scopes...)
+	}
+
+	data.Types.List = append(data.Types.List, commitTypesExtra...)
+
+	sort.Slice(data.Scopes.All, func(i, j int) bool {
+		return data.Scopes.All[i] < data.Scopes.All[j]
+	})
+
+	sort.Slice(data.Scopes.Packages, func(i, j int) bool {
+		return data.Scopes.Packages[i] < data.Scopes.Packages[j]
+	})
+
+	sort.Slice(data.Scopes.Extra, func(i, j int) bool {
+		return data.Scopes.Extra[i].Name < data.Scopes.Extra[j].Name
+	})
+
+	sort.Slice(data.Types.List, func(i, j int) bool {
+		return data.Types.List[i] < data.Types.List[j]
+	})
+
+	sort.Slice(data.Types.Details, func(i, j int) bool {
+		return data.Types.Details[i].Name < data.Types.Details[j].Name
+	})
+
+	var f *os.File
+
+	fullPathCommitLintConfig := filepath.Join(root, pathCommitLintConfig)
+
+	if f, err = os.Create(fullPathCommitLintConfig); err != nil {
+		return fmt.Errorf("failed to create output file '%s': %w", fullPathCommitLintConfig, err)
+	}
+
+	if err = tmplDotCommitLintRC.Execute(f, data); err != nil {
+		return fmt.Errorf("failed to write output file '%s': %w", fullPathCommitLintConfig, err)
+	}
+
+	if err = f.Close(); err != nil {
+		return fmt.Errorf("failed to close output file '%s': %w", fullPathCommitLintConfig, err)
+	}
+
+	fullPathDocsCommitMessageGuidelines := filepath.Join(root, pathDocsCommitMessageGuidelines)
+
+	if f, err = os.Create(fullPathDocsCommitMessageGuidelines); err != nil {
+		return fmt.Errorf("failed to create output file '%s': %w", fullPathDocsCommitMessageGuidelines, err)
+	}
+
+	if err = tmplDocsCommitMessageGuidelines.Execute(f, data); err != nil {
+		return fmt.Errorf("failed to write output file '%s': %w", fullPathDocsCommitMessageGuidelines, err)
+	}
+
+	if err = f.Close(); err != nil {
+		return fmt.Errorf("failed to close output file '%s': %w", fullPathDocsCommitMessageGuidelines, err)
+	}
+
+	return nil
+}
diff --git a/cmd/authelia-gen/cmd_docs.go b/cmd/authelia-gen/cmd_docs.go
index 8fa4b26b6..2902b8aa0 100644
--- a/cmd/authelia-gen/cmd_docs.go
+++ b/cmd/authelia-gen/cmd_docs.go
@@ -6,30 +6,14 @@ import (
 
 func newDocsCmd() *cobra.Command {
 	cmd := &cobra.Command{
-		Use:   "docs",
+		Use:   cmdUseDocs,
 		Short: "Generate docs",
-		RunE:  docsRunE,
+		RunE:  rootSubCommandsRunE,
 
 		DisableAutoGenTag: true,
 	}
 
-	cmd.PersistentFlags().StringP("cwd", "C", "", "Sets the CWD for git commands")
-	cmd.AddCommand(newDocsCLICmd(), newDocsDateCmd())
+	cmd.AddCommand(newDocsCLICmd(), newDocsDateCmd(), newDocsKeysCmd())
 
 	return cmd
 }
-
-func docsRunE(cmd *cobra.Command, args []string) (err error) {
-	for _, subCmd := range cmd.Commands() {
-		switch {
-		case subCmd.RunE != nil:
-			if err = subCmd.RunE(subCmd, args); err != nil {
-				return err
-			}
-		case subCmd.Run != nil:
-			subCmd.Run(subCmd, args)
-		}
-	}
-
-	return nil
-}
diff --git a/cmd/authelia-gen/cmd_docs_cli.go b/cmd/authelia-gen/cmd_docs_cli.go
index 5e0c01bb7..e41b6f189 100644
--- a/cmd/authelia-gen/cmd_docs_cli.go
+++ b/cmd/authelia-gen/cmd_docs_cli.go
@@ -16,52 +16,56 @@ import (
 
 func newDocsCLICmd() *cobra.Command {
 	cmd := &cobra.Command{
-		Use:   "cli",
+		Use:   cmdUseDocsCLI,
 		Short: "Generate CLI docs",
 		RunE:  docsCLIRunE,
 
 		DisableAutoGenTag: true,
 	}
 
-	cmd.Flags().StringP("directory", "d", "./docs/content/en/reference/cli", "The directory to store the markdown in")
-
 	return cmd
 }
 
 func docsCLIRunE(cmd *cobra.Command, args []string) (err error) {
-	var root string
+	var root, pathDocsCLIReference string
 
-	if root, err = cmd.Flags().GetString("directory"); err != nil {
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
 		return err
 	}
 
-	if err = os.MkdirAll(root, 0775); err != nil {
+	if pathDocsCLIReference, err = cmd.Flags().GetString(cmdFlagDocsCLIReference); err != nil {
+		return err
+	}
+
+	fullPathDocsCLIReference := filepath.Join(root, pathDocsCLIReference)
+
+	if err = os.MkdirAll(fullPathDocsCLIReference, 0775); err != nil {
 		if !os.IsExist(err) {
 			return err
 		}
 	}
 
-	if err = genCLIDoc(commands.NewRootCmd(), filepath.Join(root, "authelia")); err != nil {
+	if err = genCLIDoc(commands.NewRootCmd(), filepath.Join(fullPathDocsCLIReference, "authelia")); err != nil {
 		return err
 	}
 
-	if err = genCLIDocWriteIndex(root, "authelia"); err != nil {
+	if err = genCLIDocWriteIndex(fullPathDocsCLIReference, "authelia"); err != nil {
 		return err
 	}
 
-	if err = genCLIDoc(cmdscripts.NewRootCmd(), filepath.Join(root, "authelia-scripts")); err != nil {
+	if err = genCLIDoc(cmdscripts.NewRootCmd(), filepath.Join(fullPathDocsCLIReference, "authelia-scripts")); err != nil {
 		return err
 	}
 
-	if err = genCLIDocWriteIndex(root, "authelia-scripts"); err != nil {
+	if err = genCLIDocWriteIndex(fullPathDocsCLIReference, "authelia-scripts"); err != nil {
 		return err
 	}
 
-	if err = genCLIDoc(newRootCmd(), filepath.Join(root, "authelia-gen")); err != nil {
+	if err = genCLIDoc(newRootCmd(), filepath.Join(fullPathDocsCLIReference, cmdUseRoot)); err != nil {
 		return err
 	}
 
-	if err = genCLIDocWriteIndex(root, "authelia-gen"); err != nil {
+	if err = genCLIDocWriteIndex(fullPathDocsCLIReference, cmdUseRoot); err != nil {
 		return err
 	}
 
@@ -69,6 +73,16 @@ func docsCLIRunE(cmd *cobra.Command, args []string) (err error) {
 }
 
 func genCLIDoc(cmd *cobra.Command, path string) (err error) {
+	if _, err = os.Stat(path); err != nil && !os.IsNotExist(err) {
+		return err
+	}
+
+	if err == nil || !os.IsNotExist(err) {
+		if err = os.RemoveAll(path); err != nil {
+			return fmt.Errorf("failed to remove docs: %w", err)
+		}
+	}
+
 	if err = os.Mkdir(path, 0755); err != nil {
 		if !os.IsExist(err) {
 			return err
diff --git a/cmd/authelia-gen/cmd_docs_date.go b/cmd/authelia-gen/cmd_docs_date.go
index 7d9f83f85..b7a2f2794 100644
--- a/cmd/authelia-gen/cmd_docs_date.go
+++ b/cmd/authelia-gen/cmd_docs_date.go
@@ -17,14 +17,13 @@ import (
 
 func newDocsDateCmd() *cobra.Command {
 	cmd := &cobra.Command{
-		Use:   "date",
+		Use:   cmdUseDocsDate,
 		Short: "Generate doc dates",
 		RunE:  docsDateRunE,
 
 		DisableAutoGenTag: true,
 	}
 
-	cmd.Flags().StringP("directory", "d", "./docs/content", "The directory to modify")
 	cmd.Flags().String("commit-until", "HEAD", "The commit to check the logs until")
 	cmd.Flags().String("commit-since", "", "The commit to check the logs since")
 
@@ -33,14 +32,18 @@ func newDocsDateCmd() *cobra.Command {
 
 func docsDateRunE(cmd *cobra.Command, args []string) (err error) {
 	var (
-		dir, cwd, commitUtil, commitSince, commitFilter string
+		root, pathDocsContent, cwd, commitUtil, commitSince, commitFilter string
 	)
 
-	if dir, err = cmd.Flags().GetString("directory"); err != nil {
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
 		return err
 	}
 
-	if cwd, err = cmd.Flags().GetString("cwd"); err != nil {
+	if pathDocsContent, err = cmd.Flags().GetString(cmdFlagDocsContent); err != nil {
+		return err
+	}
+
+	if cwd, err = cmd.Flags().GetString(cmdFlagCwd); err != nil {
 		return err
 	}
 
@@ -56,7 +59,7 @@ func docsDateRunE(cmd *cobra.Command, args []string) (err error) {
 		commitFilter = fmt.Sprintf("%s...%s", commitUtil, commitSince)
 	}
 
-	return filepath.Walk(dir, func(path string, info fs.FileInfo, err error) error {
+	return filepath.Walk(filepath.Join(root, pathDocsContent), func(path string, info fs.FileInfo, err error) error {
 		if err != nil {
 			return err
 		}
@@ -163,7 +166,7 @@ func replaceDates(path string, date time.Time, dateGit *time.Time) {
 	for scanner.Scan() {
 		if found < 2 && frontmatter < 2 {
 			switch {
-			case scanner.Text() == frontmatterDelimiterLine:
+			case scanner.Text() == delimiterLineFrontMatter:
 				buf.Write(scanner.Bytes())
 				frontmatter++
 			case frontmatter != 0 && strings.HasPrefix(scanner.Text(), "date: "):
@@ -207,13 +210,13 @@ func getFrontmatter(path string) []byte {
 
 	for scanner.Scan() {
 		if start {
-			if scanner.Text() == frontmatterDelimiterLine {
+			if scanner.Text() == delimiterLineFrontMatter {
 				break
 			}
 
 			buf.Write(scanner.Bytes())
 			buf.Write(newline)
-		} else if scanner.Text() == frontmatterDelimiterLine {
+		} else if scanner.Text() == delimiterLineFrontMatter {
 			start = true
 		}
 	}
diff --git a/cmd/authelia-gen/cmd_docs_keys.go b/cmd/authelia-gen/cmd_docs_keys.go
new file mode 100644
index 000000000..df6763acb
--- /dev/null
+++ b/cmd/authelia-gen/cmd_docs_keys.go
@@ -0,0 +1,81 @@
+package main
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"reflect"
+	"strings"
+
+	"github.com/spf13/cobra"
+
+	"github.com/authelia/authelia/v4/internal/configuration"
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
+)
+
+func newDocsKeysCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseKeys,
+		Short: "Generate the docs data file for configuration keys",
+		RunE:  docsKeysRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func docsKeysRunE(cmd *cobra.Command, args []string) (err error) {
+	//nolint:prealloc
+	var (
+		pathDocsConfigKeys, root string
+		data                     []ConfigurationKey
+	)
+
+	keys := readTags("", reflect.TypeOf(schema.Configuration{}))
+
+	for _, key := range keys {
+		if strings.Contains(key, "[]") {
+			continue
+		}
+
+		ck := ConfigurationKey{
+			Path:   key,
+			Secret: configuration.IsSecretKey(key),
+		}
+
+		switch {
+		case ck.Secret:
+			ck.Env = configuration.ToEnvironmentSecretKey(key, configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter)
+		default:
+			ck.Env = configuration.ToEnvironmentKey(key, configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter)
+		}
+
+		data = append(data, ck)
+	}
+
+	var (
+		dataJSON []byte
+	)
+
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if pathDocsConfigKeys, err = cmd.Flags().GetString(cmdFlagFileDocsKeys); err != nil {
+		return err
+	}
+
+	fullPathDocsConfigKeys := filepath.Join(root, pathDocsConfigKeys)
+
+	if dataJSON, err = json.Marshal(data); err != nil {
+		return err
+	}
+
+	if err = os.WriteFile(fullPathDocsConfigKeys, dataJSON, 0600); err != nil {
+		return fmt.Errorf("failed to write file '%s': %w", fullPathDocsConfigKeys, err)
+	}
+
+	return nil
+}
diff --git a/cmd/authelia-gen/cmd_github.go b/cmd/authelia-gen/cmd_github.go
new file mode 100644
index 000000000..8d8ec2f49
--- /dev/null
+++ b/cmd/authelia-gen/cmd_github.go
@@ -0,0 +1,236 @@
+package main
+
+import (
+	"fmt"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	"github.com/spf13/cobra"
+)
+
+func newGitHubCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseGitHub,
+		Short: "Generate GitHub files",
+		RunE:  rootSubCommandsRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.AddCommand(newGitHubIssueTemplatesCmd())
+
+	return cmd
+}
+
+func newGitHubIssueTemplatesCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseGitHubIssueTemplates,
+		Short: "Generate GitHub issue templates",
+		RunE:  rootSubCommandsRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.AddCommand(newGitHubIssueTemplatesBugReportCmd(), newGitHubIssueTemplatesFeatureCmd())
+
+	return cmd
+}
+
+func newGitHubIssueTemplatesFeatureCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseGitHubIssueTemplatesFR,
+		Short: "Generate GitHub feature request issue template",
+		RunE:  cmdGitHubIssueTemplatesFeatureRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func newGitHubIssueTemplatesBugReportCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseGitHubIssueTemplatesBR,
+		Short: "Generate GitHub bug report issue template",
+		RunE:  cmdGitHubIssueTemplatesBugReportRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func cmdGitHubIssueTemplatesFeatureRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		cwd, file, root                                 string
+		tags, tagsFuture                                []string
+		latestMajor, latestMinor, latestPatch, versions int
+	)
+
+	if cwd, err = cmd.Flags().GetString(cmdFlagCwd); err != nil {
+		return err
+	}
+
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if file, err = cmd.Flags().GetString(cmdFlagFeatureRequest); err != nil {
+		return err
+	}
+
+	if versions, err = cmd.Flags().GetInt(cmdFlagVersions); err != nil {
+		return err
+	}
+
+	if tags, err = getGitTags(cwd); err != nil {
+		return err
+	}
+
+	latest := tags[0]
+
+	if _, err = fmt.Sscanf(latest, "v%d.%d.%d", &latestMajor, &latestMinor, &latestPatch); err != nil {
+		return fmt.Errorf("error occurred parsing version as semver: %w", err)
+	}
+
+	var (
+		minor int
+	)
+
+	for minor = latestMinor + 1; minor < latestMinor+versions; minor++ {
+		tagsFuture = append(tagsFuture, fmt.Sprintf("v%d.%d.0", latestMajor, minor))
+	}
+
+	tagsFuture = append(tagsFuture, fmt.Sprintf("v%d.0.0", latestMajor+1))
+
+	var (
+		f *os.File
+	)
+
+	fullPath := filepath.Join(root, file)
+
+	if f, err = os.Create(fullPath); err != nil {
+		return fmt.Errorf("failed to create file '%s': %w", fullPath, err)
+	}
+
+	data := &tmplIssueTemplateData{
+		Labels:   []string{labelTypeFeature.String(), labelStatusNeedsDesign.String(), labelPriorityNormal.String()},
+		Versions: tagsFuture,
+	}
+
+	if err = tmplIssueTemplateFeature.Execute(f, data); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func cmdGitHubIssueTemplatesBugReportRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		cwd, file, dirRoot    string
+		latestMinor, versions int
+
+		tags []string
+	)
+
+	if cwd, err = cmd.Flags().GetString(cmdFlagCwd); err != nil {
+		return err
+	}
+
+	if dirRoot, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if file, err = cmd.Flags().GetString(cmdFlagBugReport); err != nil {
+		return err
+	}
+
+	if versions, err = cmd.Flags().GetInt(cmdFlagVersions); err != nil {
+		return err
+	}
+
+	if tags, err = getGitTags(cwd); err != nil {
+		return err
+	}
+
+	latest := tags[0]
+
+	latestParts := strings.Split(latest, ".")
+
+	if len(latestParts) < 2 {
+		return fmt.Errorf("error extracting latest minor version from tag: %s does not appear to be a semver", latest)
+	}
+
+	if latestMinor, err = strconv.Atoi(latestParts[1]); err != nil {
+		return fmt.Errorf("error extracting latest minor version from tag: %w", err)
+	}
+
+	//nolint:prealloc
+	var (
+		tagsRecent []string
+		parts      []string
+		minor      int
+	)
+
+	for _, tag := range tags {
+		if parts = strings.Split(tag, "."); len(parts) < 2 {
+			return fmt.Errorf("error extracting minor version from tag: %s does not appear to be a semver", tag)
+		}
+
+		if minor, err = strconv.Atoi(parts[1]); err != nil {
+			return fmt.Errorf("error extracting minor version from tag: %w", err)
+		}
+
+		if minor < latestMinor-versions {
+			break
+		}
+
+		tagsRecent = append(tagsRecent, tag)
+	}
+
+	var (
+		f *os.File
+	)
+
+	fullPath := filepath.Join(dirRoot, file)
+
+	if f, err = os.Create(fullPath); err != nil {
+		return fmt.Errorf("failed to create file '%s': %w", fullPath, err)
+	}
+
+	data := &tmplIssueTemplateData{
+		Labels:   []string{labelTypeBugUnconfirmed.String(), labelStatusNeedsTriage.String(), labelPriorityNormal.String()},
+		Versions: tagsRecent,
+		Proxies:  []string{"Caddy", "Traefik", "Envoy", "NGINX", "SWAG", "NGINX Proxy Manager", "HAProxy"},
+	}
+
+	if err = tmplGitHubIssueTemplateBug.Execute(f, data); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func getGitTags(cwd string) (tags []string, err error) {
+	var (
+		args       []string
+		tagsOutput []byte
+	)
+
+	if len(cwd) != 0 {
+		args = append(args, "-C", cwd)
+	}
+
+	args = append(args, "tag", "--sort=-creatordate")
+
+	cmd := exec.Command("git", args...)
+
+	if tagsOutput, err = cmd.Output(); err != nil {
+		return nil, err
+	}
+
+	return strings.Split(string(tagsOutput), "\n"), nil
+}
diff --git a/cmd/authelia-gen/cmd_locales.go b/cmd/authelia-gen/cmd_locales.go
new file mode 100644
index 000000000..6948ac7b4
--- /dev/null
+++ b/cmd/authelia-gen/cmd_locales.go
@@ -0,0 +1,215 @@
+package main
+
+import (
+	"encoding/json"
+	"fmt"
+	"io/fs"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+
+	"github.com/spf13/cobra"
+	"golang.org/x/text/language"
+	"golang.org/x/text/language/display"
+
+	"github.com/authelia/authelia/v4/internal/utils"
+)
+
+func newLocalesCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseLocales,
+		Short: "Generate locales files",
+		RunE:  localesRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func localesRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		root, pathLocales                       string
+		pathWebI18NIndex, pathDocsDataLanguages string
+	)
+
+	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+		return err
+	}
+
+	if pathLocales, err = cmd.Flags().GetString(cmdFlagDirLocales); err != nil {
+		return err
+	}
+
+	if pathWebI18NIndex, err = cmd.Flags().GetString(cmdFlagFileWebI18N); err != nil {
+		return err
+	}
+
+	if pathDocsDataLanguages, err = cmd.Flags().GetString(cmdFlagDocsDataLanguages); err != nil {
+		return err
+	}
+
+	data, err := getLanguages(filepath.Join(root, pathLocales))
+	if err != nil {
+		return err
+	}
+
+	fullPathWebI18NIndex := filepath.Join(root, pathWebI18NIndex)
+
+	var (
+		f        *os.File
+		dataJSON []byte
+	)
+
+	if f, err = os.Create(fullPathWebI18NIndex); err != nil {
+		return fmt.Errorf("failed to create file '%s': %w", fullPathWebI18NIndex, err)
+	}
+
+	if err = tmplWebI18NIndex.Execute(f, data); err != nil {
+		return err
+	}
+
+	if dataJSON, err = json.Marshal(data); err != nil {
+		return err
+	}
+
+	fullPathDocsDataLanguages := filepath.Join(root, pathDocsDataLanguages)
+
+	if err = os.WriteFile(fullPathDocsDataLanguages, dataJSON, 0600); err != nil {
+		return fmt.Errorf("failed to write file '%s': %w", fullPathDocsDataLanguages, err)
+	}
+
+	return nil
+}
+
+//nolint:gocyclo
+func getLanguages(dir string) (languages *Languages, err error) {
+	//nolint:prealloc
+	var locales []string
+
+	languages = &Languages{
+		Defaults: DefaultsLanguages{
+			Namespace: localeNamespaceDefault,
+		},
+	}
+
+	var defaultTag language.Tag
+
+	if defaultTag, err = language.Parse(localeDefault); err != nil {
+		return nil, fmt.Errorf("failed to parse default language: %w", err)
+	}
+
+	languages.Defaults.Language = Language{
+		Display: display.English.Tags().Name(defaultTag),
+		Locale:  localeDefault,
+	}
+
+	if err = filepath.Walk(dir, func(path string, info fs.FileInfo, errWalk error) (err error) {
+		if errWalk != nil {
+			return errWalk
+		}
+
+		nameLower := strings.ToLower(info.Name())
+		ext := filepath.Ext(nameLower)
+		ns := strings.Replace(nameLower, ext, "", 1)
+
+		if ext != ".json" {
+			return nil
+		}
+
+		if !utils.IsStringInSlice(ns, languages.Namespaces) {
+			languages.Namespaces = append(languages.Namespaces, ns)
+		}
+
+		fdir, _ := filepath.Split(path)
+
+		locale := filepath.Base(fdir)
+
+		if utils.IsStringInSlice(locale, locales) {
+			for i, l := range languages.Languages {
+				if l.Locale == locale {
+					if utils.IsStringInSlice(ns, languages.Languages[i].Namespaces) {
+						break
+					}
+
+					languages.Languages[i].Namespaces = append(languages.Languages[i].Namespaces, ns)
+					break
+				}
+			}
+
+			return nil
+		}
+
+		var localeReal string
+
+		parts := strings.SplitN(locale, "-", 2)
+		if len(parts) == 2 && strings.EqualFold(parts[0], parts[1]) {
+			localeReal = parts[0]
+		} else {
+			localeReal = locale
+		}
+
+		var tag language.Tag
+
+		if tag, err = language.Parse(localeReal); err != nil {
+			return fmt.Errorf("failed to parse language '%s': %w", localeReal, err)
+		}
+
+		l := Language{
+			Display:    display.English.Tags().Name(tag),
+			Locale:     localeReal,
+			Namespaces: []string{ns},
+			Fallbacks:  []string{languages.Defaults.Language.Locale},
+			Tag:        tag,
+		}
+
+		languages.Languages = append(languages.Languages, l)
+
+		locales = append(locales, l.Locale)
+
+		return nil
+	}); err != nil {
+		return nil, err
+	}
+
+	var langs []Language //nolint:prealloc
+
+	for i, lang := range languages.Languages {
+		p := lang.Tag.Parent()
+
+		if p.String() == "und" || strings.Contains(p.String(), "-") {
+			continue
+		}
+
+		if utils.IsStringInSlice(p.String(), locales) {
+			continue
+		}
+
+		if p.String() != lang.Locale {
+			lang.Fallbacks = append([]string{p.String()}, lang.Fallbacks...)
+		}
+
+		languages.Languages[i] = lang
+
+		l := Language{
+			Display:    display.English.Tags().Name(p),
+			Locale:     p.String(),
+			Namespaces: lang.Namespaces,
+			Fallbacks:  []string{languages.Defaults.Language.Locale},
+			Tag:        p,
+		}
+
+		langs = append(langs, l)
+
+		locales = append(locales, l.Locale)
+	}
+
+	languages.Languages = append(languages.Languages, langs...)
+
+	sort.Slice(languages.Languages, func(i, j int) bool {
+		return languages.Languages[i].Locale == localeDefault || languages.Languages[i].Locale < languages.Languages[j].Locale
+	})
+
+	return languages, nil
+}
diff --git a/cmd/authelia-gen/cmd_root.go b/cmd/authelia-gen/cmd_root.go
new file mode 100644
index 000000000..1ce6cf2dc
--- /dev/null
+++ b/cmd/authelia-gen/cmd_root.go
@@ -0,0 +1,124 @@
+package main
+
+import (
+	"sort"
+	"strings"
+
+	"github.com/spf13/cobra"
+
+	"github.com/authelia/authelia/v4/internal/utils"
+)
+
+var rootCmd *cobra.Command
+
+func init() {
+	rootCmd = newRootCmd()
+}
+
+func newRootCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseRoot,
+		Short: "Authelia's generator tooling",
+		RunE:  rootSubCommandsRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.PersistentFlags().StringP(cmdFlagCwd, "C", "", "Sets the CWD for git commands")
+	cmd.PersistentFlags().StringP(cmdFlagRoot, "d", dirCurrent, "The repository root")
+	cmd.PersistentFlags().StringSliceP(cmdFlagExclude, "X", nil, "Sets the names of excluded generators")
+	cmd.PersistentFlags().String(cmdFlagFeatureRequest, fileGitHubIssueTemplateFR, "Sets the path of the feature request issue template file")
+	cmd.PersistentFlags().String(cmdFlagBugReport, fileGitHubIssueTemplateBR, "Sets the path of the bug report issue template file")
+	cmd.PersistentFlags().Int(cmdFlagVersions, 5, "the maximum number of minor versions to list in output templates")
+	cmd.PersistentFlags().String(cmdFlagDirLocales, dirLocales, "The locales directory in relation to the root")
+	cmd.PersistentFlags().String(cmdFlagFileWebI18N, fileWebI18NIndex, "The i18n typescript configuration file in relation to the root")
+	cmd.PersistentFlags().String(cmdFlagDocsDataLanguages, fileDocsDataLanguages, "The languages docs data file in relation to the docs data folder")
+	cmd.PersistentFlags().String(cmdFlagDocsCLIReference, dirDocsCLIReference, "The directory to store the markdown in")
+	cmd.PersistentFlags().String(cmdFlagDocsContent, dirDocsContent, "The directory with the docs content")
+	cmd.PersistentFlags().String(cmdFlagFileConfigKeys, fileCodeConfigKeys, "Sets the path of the keys file")
+	cmd.PersistentFlags().String(cmdFlagFileDocsKeys, fileDocsConfigKeys, "Sets the path of the docs keys file")
+	cmd.PersistentFlags().String(cmdFlagPackageConfigKeys, pkgConfigSchema, "Sets the package name of the keys file")
+	cmd.PersistentFlags().String(cmdFlagFileScriptsGen, fileScriptsGen, "Sets the path of the authelia-scripts gen file")
+	cmd.PersistentFlags().String(cmdFlagPackageScriptsGen, pkgScriptsGen, "Sets the package name of the authelia-scripts gen file")
+	cmd.PersistentFlags().String(cmdFlagFileConfigCommitLint, fileCICommitLintConfig, "The commit lint javascript configuration file in relation to the root")
+	cmd.PersistentFlags().String(cmdFlagFileDocsCommitMsgGuidelines, fileDocsCommitMessageGuidelines, "The commit message guidelines documentation file in relation to the root")
+
+	cmd.AddCommand(newCodeCmd(), newDocsCmd(), newGitHubCmd(), newLocalesCmd(), newCommitLintCmd())
+
+	return cmd
+}
+
+func rootSubCommandsRunE(cmd *cobra.Command, args []string) (err error) {
+	var exclude []string
+
+	if exclude, err = cmd.Flags().GetStringSlice(cmdFlagExclude); err != nil {
+		return err
+	}
+
+	subCmds := cmd.Commands()
+
+	switch cmd.Use {
+	case cmdUseRoot:
+		sort.Slice(subCmds, func(i, j int) bool {
+			switch subCmds[j].Use {
+			case cmdUseDocs:
+				// Ensure `docs` subCmd is last.
+				return true
+			default:
+				return subCmds[i].Use < subCmds[j].Use
+			}
+		})
+	case cmdUseDocs:
+		sort.Slice(subCmds, func(i, j int) bool {
+			switch subCmds[j].Use {
+			case cmdUseDocsDate:
+				// Ensure `date` subCmd is last.
+				return true
+			default:
+				return subCmds[i].Use < subCmds[j].Use
+			}
+		})
+	default:
+		sort.Slice(subCmds, func(i, j int) bool {
+			return subCmds[i].Use < subCmds[j].Use
+		})
+	}
+
+	for _, subCmd := range subCmds {
+		if subCmd.Use == cmdUseCompletion || strings.HasPrefix(subCmd.Use, "help ") || utils.IsStringSliceContainsAny([]string{resolveCmdName(subCmd), subCmd.Use}, exclude) {
+			continue
+		}
+
+		rootCmd.SetArgs(rootCmdGetArgs(subCmd, args))
+
+		if err = rootCmd.Execute(); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func resolveCmdName(cmd *cobra.Command) string {
+	parent := cmd.Parent()
+
+	if parent != nil && parent.Use != cmd.Use && parent.Use != cmdUseRoot {
+		return resolveCmdName(parent) + "." + cmd.Use
+	}
+
+	return cmd.Use
+}
+
+func rootCmdGetArgs(cmd *cobra.Command, args []string) []string {
+	for {
+		if cmd == rootCmd {
+			break
+		}
+
+		args = append([]string{cmd.Use}, args...)
+
+		cmd = cmd.Parent()
+	}
+
+	return args
+}
diff --git a/cmd/authelia-gen/const.go b/cmd/authelia-gen/const.go
index 71f3ada18..e7b8eb980 100644
--- a/cmd/authelia-gen/const.go
+++ b/cmd/authelia-gen/const.go
@@ -1,7 +1,81 @@
 package main
 
 const (
-	dateFmtRFC2822           = "Mon, _2 Jan 2006 15:04:05 -0700"
-	dateFmtYAML              = "2006-01-02T15:04:05-07:00"
-	frontmatterDelimiterLine = "---"
+	dirCurrent = "./"
+	dirLocales = "internal/server/locales"
+
+	subPathCmd      = "cmd"
+	subPathInternal = "internal"
+
+	fileCICommitLintConfig = "web/.commitlintrc.js"
+	fileWebI18NIndex       = "web/src/i18n/index.ts"
+
+	fileDocsCommitMessageGuidelines = "docs/content/en/contributing/development/guidelines-commit-message.md"
+
+	fileDocsConfigKeys = "docs/data/configkeys.json"
+	fileCodeConfigKeys = "internal/configuration/schema/keys.go"
+	fileScriptsGen     = "cmd/authelia-scripts/cmd/gen.go"
+
+	dirDocsContent      = "docs/content"
+	dirDocsCLIReference = dirDocsContent + "/en/reference/cli"
+
+	fileDocsDataLanguages = "docs/data/languages.json"
+
+	fileGitHubIssueTemplateFR = ".github/ISSUE_TEMPLATE/feature-request.yml"
+	fileGitHubIssueTemplateBR = ".github/ISSUE_TEMPLATE/bug-report.yml"
+)
+
+const (
+	dateFmtRFC2822 = "Mon, _2 Jan 2006 15:04:05 -0700"
+	dateFmtYAML    = "2006-01-02T15:04:05-07:00"
+)
+
+const (
+	delimiterLineFrontMatter = "---"
+
+	localeDefault          = "en"
+	localeNamespaceDefault = "portal"
+)
+
+const (
+	pkgConfigSchema = "schema"
+	pkgScriptsGen   = "cmd"
+)
+
+const (
+	cmdUseRoot                   = "authelia-gen"
+	cmdUseCompletion             = "completion"
+	cmdUseDocs                   = "docs"
+	cmdUseDocsDate               = "date"
+	cmdUseDocsCLI                = "cli"
+	cmdUseGitHub                 = "github"
+	cmdUseGitHubIssueTemplates   = "issue-templates"
+	cmdUseGitHubIssueTemplatesFR = "feature-request"
+	cmdUseGitHubIssueTemplatesBR = "bug-report"
+	cmdUseLocales                = "locales"
+	cmdUseCommitLint             = "commit-lint"
+	cmdUseCode                   = "code"
+	cmdUseCodeScripts            = "scripts"
+	cmdUseKeys                   = "keys"
+)
+
+const (
+	cmdFlagRoot                        = "dir.root"
+	cmdFlagExclude                     = "exclude"
+	cmdFlagVersions                    = "versions"
+	cmdFlagDirLocales                  = "dir.locales"
+	cmdFlagDocsCLIReference            = "dir.docs.cli-reference"
+	cmdFlagDocsContent                 = "dir.docs.content"
+	cmdFlagDocsDataLanguages           = "file.docs.data.languages"
+	cmdFlagCwd                         = "cwd"
+	cmdFlagFileConfigKeys              = "file.configuration-keys"
+	cmdFlagFileDocsKeys                = "file.docs-keys"
+	cmdFlagFileScriptsGen              = "file.scripts.gen"
+	cmdFlagFileConfigCommitLint        = "file.commit-lint-config"
+	cmdFlagFileDocsCommitMsgGuidelines = "file.docs-commit-msg-guidelines"
+	cmdFlagFileWebI18N                 = "file.web-i18n"
+	cmdFlagFeatureRequest              = "file.feature-request"
+	cmdFlagBugReport                   = "file.bug-report"
+	cmdFlagPackageConfigKeys           = "package.configuration.keys"
+	cmdFlagPackageScriptsGen           = "package.scripts.gen"
 )
diff --git a/cmd/authelia-gen/main.go b/cmd/authelia-gen/main.go
index 15a8d4586..ffbdca170 100644
--- a/cmd/authelia-gen/main.go
+++ b/cmd/authelia-gen/main.go
@@ -1,29 +1,7 @@
 package main
 
-import (
-	"embed"
-
-	"github.com/spf13/cobra"
-)
-
-//go:embed templates/*
-var templatesFS embed.FS
-
 func main() {
-	if err := newRootCmd().Execute(); err != nil {
+	if err := rootCmd.Execute(); err != nil {
 		panic(err)
 	}
 }
-
-func newRootCmd() *cobra.Command {
-	cmd := &cobra.Command{
-		Use:   "authelia-gen",
-		Short: "Authelia's generator tooling",
-
-		DisableAutoGenTag: true,
-	}
-
-	cmd.AddCommand(newAllCmd(), newCodeCmd(), newDocsCmd())
-
-	return cmd
-}
diff --git a/cmd/authelia-gen/templates.go b/cmd/authelia-gen/templates.go
new file mode 100644
index 000000000..4f65a4b18
--- /dev/null
+++ b/cmd/authelia-gen/templates.go
@@ -0,0 +1,69 @@
+package main
+
+import (
+	"embed"
+	"fmt"
+	"strings"
+	"text/template"
+)
+
+//go:embed templates/*
+var templatesFS embed.FS
+
+var (
+	funcMap = template.FuncMap{
+		"stringsContains": strings.Contains,
+		"join":            strings.Join,
+		"joinX":           fmJoinX,
+	}
+
+	tmplCodeConfigurationSchemaKeys = template.Must(newTMPL("internal_configuration_schema_keys.go"))
+	tmplGitHubIssueTemplateBug      = template.Must(newTMPL("github_issue_template_bug_report.yml"))
+	tmplIssueTemplateFeature        = template.Must(newTMPL("github_issue_template_feature.yml"))
+	tmplWebI18NIndex                = template.Must(newTMPL("web_i18n_index.ts"))
+	tmplDotCommitLintRC             = template.Must(newTMPL("dot_commitlintrc.js"))
+	tmplDocsCommitMessageGuidelines = template.Must(newTMPL("docs-contributing-development-commitmsg.md"))
+	tmplScriptsGen                  = template.Must(newTMPL("cmd-authelia-scripts-gen.go"))
+)
+
+func fmJoinX(elems []string, sep string, n int, p string) string {
+	buf := strings.Builder{}
+
+	c := 0
+	e := len(elems) - 1
+
+	for i := 0; i <= e; i++ {
+		if c+len(elems[i])+1 > n {
+			c = 0
+
+			buf.WriteString(p)
+		}
+
+		c += len(elems[i]) + 1
+
+		buf.WriteString(elems[i])
+
+		if i < e {
+			buf.WriteString(sep)
+		}
+	}
+
+	return buf.String()
+}
+
+func newTMPL(name string) (tmpl *template.Template, err error) {
+	return template.New(name).Funcs(funcMap).Parse(mustLoadTmplFS(name))
+}
+
+func mustLoadTmplFS(tmpl string) string {
+	var (
+		content []byte
+		err     error
+	)
+
+	if content, err = templatesFS.ReadFile(fmt.Sprintf("templates/%s.tmpl", tmpl)); err != nil {
+		panic(err)
+	}
+
+	return string(content)
+}
diff --git a/cmd/authelia-gen/templates/cmd-authelia-scripts-gen.go.tmpl b/cmd/authelia-gen/templates/cmd-authelia-scripts-gen.go.tmpl
new file mode 100644
index 000000000..5955d5f7d
--- /dev/null
+++ b/cmd/authelia-gen/templates/cmd-authelia-scripts-gen.go.tmpl
@@ -0,0 +1,11 @@
+// Code generated by go generate. DO NOT EDIT.
+//
+// Run the following command to generate this file:
+// 		go run ./cmd/authelia-gen code scripts
+//
+
+package {{ .Package }}
+
+const (
+	versionSwaggerUI = "{{ .VersionSwaggerUI }}"
+)
diff --git a/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl b/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
new file mode 100644
index 000000000..93b960316
--- /dev/null
+++ b/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
@@ -0,0 +1,138 @@
+---
+title: "Commit Message Guidelines"
+description: "Authelia Development Commit Message Guidelines"
+lead: "This section covers the git commit message guidelines we use for development."
+date: 2021-01-30T19:29:07+11:00
+draft: false
+images: []
+menu:
+  contributing:
+    parent: "development"
+weight: 231
+toc: true
+aliases:
+  - /docs/contributing/commitmsg-guidelines.html
+---
+
+The reasons for these conventions are as follows:
+
+* simple navigation though git history
+* easier to read git history
+
+## Commit Message Format
+
+Each commit message consists of a __header__, a __body__, and a __footer__.
+
+```bash
+<header>
+<BLANK LINE>
+<body>
+<BLANK LINE>
+<footer>
+```
+
+The `header` is mandatory and must conform to the [Commit Message Header](#commit-message-header) format. The header
+cannot be longer than 72 characters.
+
+The `body` is mandatory for all commits except for those of type "docs". When the body is present it must be at least 20
+characters long and must conform to the [Commit Message Body](#commit-message-body) format.
+
+The `footer` is optional. The [Commit Message Footer](#commit-message-footer) format describes what the footer is used
+for, and the structure it must have.
+
+### Commit Message Header
+
+```text
+<type>(<scope>): <summary>
+  │       │             │
+  │       │             └─⫸ Summary in present tense. Not capitalized. No period at the end.
+  │       │
+  │       └─⫸ Commit Scope: {{ joinX .Scopes.All "|" 70 "\n  │                          " }}
+  │
+  └─⫸ Commit Type: {{ join .Types.List "|" }}
+```
+
+The `<type>` and `<summary>` fields are mandatory, the `(<scope>)` field is optional.
+
+#### Allowed type values:
+{{ range .Types.Details }}
+* __{{ .Name }}__ {{ .Description }}
+{{- if .Scopes }}
+  (example scopes: {{ join .Scopes ", " }})
+{{- end }}
+{{- end }}
+
+#### Allowed scope values:
+
+The scope should be the name of the package affected (as perceived by the person reading the changelog generated from
+commit messages).
+{{ range .Scopes.Packages }}
+* {{ . }}
+{{- end }}
+
+There are currently a few exceptions to the "use package name" rule:
+{{ range .Scopes.Extra }}
+* `{{ .Name }}`: {{ .Description }}
+{{- end }}
+* none/empty string: useful for `test`, `refactor` and changes that are done across multiple packages
+  (e.g. `test: add missing unit tests`) and for docs changes that are not related to a specific package
+  (e.g. `docs: fix typo in tutorial`).
+
+#### Summary
+
+Use the summary field to provide a succinct description of the change:
+
+* use the imperative, present tense: "change" not "changed" nor "changes"
+* don't capitalize the first letter
+* no dot (.) at the end
+
+### Commit Message Body
+
+Just as in the summary, use the imperative, present tense: "fix" not "fixed" nor "fixes".
+
+Explain the motivation for the change in the commit message body. This commit message should explain *why* you are
+making the change. You can include a comparison of the previous behavior with the new behavior in order to illustrate
+the impact of the change.
+
+### Commit Message Footer
+
+The footer can contain information about breaking changes and is also the place to reference GitHub issues and other PRs
+that this commit closes or is related to.
+
+```text
+BREAKING CHANGE: <breaking change summary>
+<BLANK LINE>
+<breaking change description + migration instructions>
+<BLANK LINE>
+<BLANK LINE>
+Fixes #<issue number>
+```
+
+Breaking Change section should start with the phrase "BREAKING CHANGE: " followed by a summary of the breaking change, a
+blank line, and a detailed description of the breaking change that also includes migration instructions.
+
+### Revert Commits
+
+If the commit reverts a previous commit, it should begin with `revert:`, followed by the header of the reverted commit.
+
+The content of the commit message body should contain:
+
+* information about the SHA of the commit being reverted in the following format: `This reverts commit <SHA>`,
+* a clear description of the reason for reverting the commit message.
+
+## Commit Message Examples
+
+```bash
+fix(logging): disabled colored logging outputs when file is specified
+
+In some scenarios if a user has a log_file_path specified and a TTY seems to be detected this causes terminal coloring outputs to be written to the file.
+This in turn will cause issues when attempting to utilise the log with the provided fail2ban regexes.
+
+We now override any TTY detection/logging treatments and disable coloring/removal of the timestamp when a user is utilising the text based logger to a file.
+
+Fixes #1480.
+```
+
+This document is based on [AngularJS Git Commit Message Format].
+
+[AngularJS Git Commit Message Format]: https://github.com/angular/angular/blob/master/CONTRIBUTING.md#commit
diff --git a/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl b/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl
new file mode 100644
index 000000000..f84b2b839
--- /dev/null
+++ b/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl
@@ -0,0 +1,25 @@
+module.exports = {
+    extends: ["@commitlint/config-conventional"],
+    rules: {
+        "body-max-line-length": [2, "always", "Infinity"],
+        "body-min-length": [2, "always", 20],
+        "header-case": [2, "always", "lower-case"],
+        "header-max-length": [2, "always", 72],
+        "type-enum": [
+            2,
+            "always",
+            ["{{ join .Types.List "\", \"" }}"],
+        ],
+        "scope-enum": [
+            2,
+            "always",
+            [
+                {{- range .Scopes.All }}
+                "{{ . }}",
+                {{- end }}
+            ],
+        ],
+    },
+    defaultIgnores: true,
+    helpUrl: "https://www.authelia.com/contributing/development/guidelines-commit-message/",
+};
diff --git a/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl b/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
new file mode 100644
index 000000000..592c9383e
--- /dev/null
+++ b/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
@@ -0,0 +1,108 @@
+---
+name: Bug Report
+description: Report a bug
+labels:
+{{- range .Labels }}
+  - {{ . }}
+{{- end }}
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this bug report. If you are unsure if this is actually a bug we generally recommend creating a [Question and Answer Discussion](https://github.com/authelia/authelia/discussions/new?category=q-a) first.
+
+        Please review the following requirements before submitting this issue type:
+
+        1. Please ensure you do not report security vulnerabilities via this method. See our [Security Policy](https://www.authelia.com/security-policy).
+        2. Please try to give as much information as possible for us to be able to reproduce the issue and provide a quick fix.
+        3. Please ensure an issue does not already exist for this potential bug.
+        4. Please only provide specific versions. Latest is not a version.
+        5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files
+  - type: dropdown
+    id: version
+    attributes:
+      label: Version
+      description: What version(s) of Authelia can you reproduce this bug on?
+      multiple: true
+      options:
+      {{- range .Versions }}
+        - {{ . }}
+	  {{- end }}
+    validations:
+      required: true
+  - type: dropdown
+    id: deployment
+    attributes:
+      label: Deployment Method
+      description: How are you deploying Authelia?
+      options:
+        - Docker
+        - Kubernetes
+        - Bare-metal
+        - Other
+    validations:
+      required: true
+  - type: dropdown
+    id: proxy
+    attributes:
+      label: Reverse Proxy
+      description: What reverse proxy are you using?
+      options:
+      {{- range .Proxies }}
+        - {{ . }}
+	  {{- end }}
+    validations:
+      required: true
+  - type: input
+    id: proxy-version
+    attributes:
+      label: Reverse Proxy Version
+      description: What is the version of your reverse proxy?
+      placeholder: x.x.x
+    validations:
+      required: false
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Describe the bug
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction
+      description: Describe how we can reproduce this issue
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs
+      description: Provide the logs (the template will automatically put this content in a code block)
+      render: shell
+    validations:
+      required: false
+  - type: textarea
+    id: configuration
+    attributes:
+      label: Configuration
+      description: Provide the Authelia configuration file (the template will automatically put this content in a code block)
+      render: yaml
+    validations:
+      required: false
+  - type: textarea
+    id: expectations
+    attributes:
+      label: Expectations
+      description: Describe the desired or expected results
+    validations:
+      required: false
+  - type: textarea
+    id: documentation
+    attributes:
+      label: Documentation
+      description: Provide any relevant specification or other documentation if applicable
+    validations:
+      required: false
+...
diff --git a/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl b/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl
new file mode 100644
index 000000000..3ca722538
--- /dev/null
+++ b/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl
@@ -0,0 +1,47 @@
+---
+name: Feature Request
+description: Submit a Feature for Design which Has Been Submitted as an Idea and has been voted on
+labels:
+{{- range .Labels }}
+  - {{ . }}
+{{- end }}
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this feature request. A feature request is created as issue for the purpose of tracking the design and implementation of a feature.
+
+        Please review the following requirements before submitting this issue type:
+
+        1. Ensure there are no other similar feature requests.
+        2. Make sure you've checked the [Documentation](https://www.authelia.com) doesn't clearly document the features existence already.
+        3. Consider creating an [Idea Discussion](https://github.com/authelia/authelia/discussions/new?category=ideas) which can be voted on instead if one doesn't exist.
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Describe the feature
+    validations:
+      required: true
+  - type: textarea
+    id: use-case
+    attributes:
+      label: Use Case
+      description: Provide a use case
+    validations:
+      required: true
+  - type: textarea
+    id: details
+    attributes:
+      label: Details
+      description: Describe the feature in detail
+    validations:
+      required: false
+  - type: textarea
+    id: documentation
+    attributes:
+      label: Documentation
+      description: Provide any relevant specification or other documentation if applicable
+    validations:
+      required: false
+...
diff --git a/cmd/authelia-gen/templates/config_keys.go.tmpl b/cmd/authelia-gen/templates/internal_configuration_schema_keys.go.tmpl
similarity index 100%
rename from cmd/authelia-gen/templates/config_keys.go.tmpl
rename to cmd/authelia-gen/templates/internal_configuration_schema_keys.go.tmpl
diff --git a/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl b/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
new file mode 100644
index 000000000..205cbec97
--- /dev/null
+++ b/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
@@ -0,0 +1,47 @@
+// Code generated by go generate. DO NOT EDIT.
+//
+// Run the following command to generate this file:
+// 		go run ./cmd/authelia-gen locales
+//
+
+import i18n from "i18next";
+import LanguageDetector from "i18next-browser-languagedetector";
+import Backend from "i18next-http-backend";
+import { initReactI18next } from "react-i18next";
+
+import { getBasePath } from "@utils/BasePath";
+
+const basePath = getBasePath();
+
+i18n.use(Backend)
+    .use(LanguageDetector)
+    .use(initReactI18next)
+    .init({
+        detection: {
+            order: ["querystring", "navigator"],
+            lookupQuerystring: "lng",
+        },
+        backend: {
+            loadPath: basePath + "/locales/{{"{{lng}}"}}/{{"{{ns}}"}}.json",
+        },
+        load: "all",
+        ns: [{{ range $i, $value := .Namespaces }}{{ if eq $i 0 }}"{{ $value }}"{{ else }}, "{{ $value }}"{{ end }}{{ end }}],
+        defaultNS: "{{ .Defaults.Namespace }}",
+        fallbackLng: {
+            default: ["{{ .Defaults.Language.Locale }}"],
+            {{- range .Languages }}
+            {{- if and (not (eq .Locale "en")) (not (eq (len .Fallbacks) 0)) }}
+            {{ if stringsContains .Locale "-" }}"{{ .Locale }}"{{ else }}{{ .Locale }}{{ end }}: [{{ range $i, $value := .Fallbacks }}{{ if eq $i 0 }}"{{ $value }}"{{ else }}, "{{ $value }}"{{ end }}{{ end }}],
+            {{- end }}
+            {{- end }}
+        },
+        supportedLngs: [{{ range $i, $value := .Languages }}{{ if eq $i 0 }}"{{ $value.Locale }}"{{ else }}, "{{ $value.Locale }}"{{ end }}{{ end }}],
+        lowerCaseLng: false,
+        nonExplicitSupportedLngs: true,
+        interpolation: {
+            escapeValue: false,
+        },
+        debug: false,
+    });
+
+export default i18n;
diff --git a/cmd/authelia-gen/types.go b/cmd/authelia-gen/types.go
new file mode 100644
index 000000000..e812b231c
--- /dev/null
+++ b/cmd/authelia-gen/types.go
@@ -0,0 +1,123 @@
+package main
+
+import (
+	"fmt"
+	"strings"
+	"time"
+
+	"golang.org/x/text/language"
+)
+
+type tmplIssueTemplateData struct {
+	Labels   []string
+	Versions []string
+	Proxies  []string
+}
+
+type tmplConfigurationKeysData struct {
+	Timestamp time.Time
+	Keys      []string
+	Package   string
+}
+
+type tmplScriptsGEnData struct {
+	Package          string
+	VersionSwaggerUI string
+}
+
+// ConfigurationKey is the docs json model for the Authelia configuration keys.
+type ConfigurationKey struct {
+	Path   string `json:"path"`
+	Secret bool   `json:"secret"`
+	Env    string `json:"env"`
+}
+
+// Languages is the docs json model for the Authelia languages configuration.
+type Languages struct {
+	Defaults   DefaultsLanguages `json:"defaults"`
+	Namespaces []string          `json:"namespaces"`
+	Languages  []Language        `json:"languages"`
+}
+
+type DefaultsLanguages struct {
+	Language  Language `json:"language"`
+	Namespace string   `json:"namespace"`
+}
+
+// Language is the docs json model for a language.
+type Language struct {
+	Display    string   `json:"display"`
+	Locale     string   `json:"locale"`
+	Namespaces []string `json:"namespaces,omitempty"`
+	Fallbacks  []string `json:"fallbacks,omitempty"`
+
+	Tag language.Tag `json:"-"`
+}
+
+const (
+	labelAreaPrefixPriority = "priority"
+	labelAreaPrefixType     = "type"
+	labelAreaPrefixStatus   = "status"
+)
+
+type labelPriority int
+
+//nolint:deadcode // Kept for future use.
+const (
+	labelPriorityCritical labelPriority = iota
+	labelPriorityHigh
+	labelPriorityMedium
+	labelPriorityNormal
+	labelPriorityLow
+)
+
+var labelPriorityDescriptions = [...]string{
+	"Critical",
+	"High",
+	"Medium",
+	"Normal",
+	"Low",
+}
+
+func (p labelPriority) String() string {
+	return fmt.Sprintf("%s/%d-%s", labelAreaPrefixPriority, p+1, strings.ToLower(labelPriorityDescriptions[p]))
+}
+
+func (p labelPriority) Description() string {
+	return labelPriorityDescriptions[p]
+}
+
+type labelStatus int
+
+const (
+	labelStatusNeedsDesign labelStatus = iota
+	labelStatusNeedsTriage
+)
+
+var labelStatusDescriptions = [...]string{
+	"needs-design",
+	"needs-triage",
+}
+
+func (s labelStatus) String() string {
+	return fmt.Sprintf("%s/%s", labelAreaPrefixStatus, labelStatusDescriptions[s])
+}
+
+type labelType int
+
+//nolint:deadcode // Kept for future use.
+const (
+	labelTypeFeature labelType = iota
+	labelTypeBugUnconfirmed
+	labelTypeBug
+)
+
+var labelTypeDescriptions = [...]string{
+	"feature",
+	"bug/unconfirmed",
+	"bug",
+}
+
+func (t labelType) String() string {
+	return fmt.Sprintf("%s/%s", labelAreaPrefixType, labelTypeDescriptions[t])
+}
diff --git a/cmd/authelia-scripts/cmd/build.go b/cmd/authelia-scripts/cmd/build.go
index 1949b2bdf..337b5ccb8 100644
--- a/cmd/authelia-scripts/cmd/build.go
+++ b/cmd/authelia-scripts/cmd/build.go
@@ -146,8 +146,7 @@ func buildFrontend(branch string) {
 }
 
 func buildSwagger() {
-	swaggerVer := "4.13.0"
-	cmd := utils.CommandWithStdout("bash", "-c", "wget -q https://github.com/swagger-api/swagger-ui/archive/v"+swaggerVer+".tar.gz -O ./v"+swaggerVer+".tar.gz")
+	cmd := utils.CommandWithStdout("bash", "-c", "wget -q https://github.com/swagger-api/swagger-ui/archive/v"+versionSwaggerUI+".tar.gz -O ./v"+versionSwaggerUI+".tar.gz")
 
 	err := cmd.Run()
 	if err != nil {
@@ -161,14 +160,14 @@ func buildSwagger() {
 		log.Fatal(err)
 	}
 
-	cmd = utils.CommandWithStdout("tar", "-C", "internal/server/public_html/api", "--exclude=index.html", "--strip-components=2", "-xf", "v"+swaggerVer+".tar.gz", "swagger-ui-"+swaggerVer+"/dist")
+	cmd = utils.CommandWithStdout("tar", "-C", "internal/server/public_html/api", "--exclude=index.html", "--strip-components=2", "-xf", "v"+versionSwaggerUI+".tar.gz", "swagger-ui-"+versionSwaggerUI+"/dist")
 
 	err = cmd.Run()
 	if err != nil {
 		log.Fatal(err)
 	}
 
-	cmd = utils.CommandWithStdout("rm", "./v"+swaggerVer+".tar.gz")
+	cmd = utils.CommandWithStdout("rm", "./v"+versionSwaggerUI+".tar.gz")
 
 	err = cmd.Run()
 	if err != nil {
diff --git a/cmd/authelia-scripts/cmd/gen.go b/cmd/authelia-scripts/cmd/gen.go
new file mode 100644
index 000000000..5fe6a5e49
--- /dev/null
+++ b/cmd/authelia-scripts/cmd/gen.go
@@ -0,0 +1,11 @@
+// Code generated by go generate. DO NOT EDIT.
+//
+// Run the following command to generate this file:
+// 		go run ./cmd/authelia-gen code scripts
+//
+
+package cmd
+
+const (
+	versionSwaggerUI = "4.14.0"
+)
diff --git a/docs/config/_default/menus/menus.en.toml b/docs/config/_default/menus/menus.en.toml
index 2cb6e6245..af2244358 100644
--- a/docs/config/_default/menus/menus.en.toml
+++ b/docs/config/_default/menus/menus.en.toml
@@ -48,18 +48,18 @@
   weight = 10
 
 [[footer]]
-  name = "Privacy"
-  url = "/information/privacy-policy"
+  name = "Privacy Policy"
+  url = "/policies/privacy"
   weight = 10
 
 [[footer]]
-  name = "Code of Conduct"
-  url = "/information/code-of-conduct"
+  name = "Security Policy"
+  url = "/policies/security"
   weight = 20
 
 [[footer]]
-  name = "Security"
-  url = "/information/security"
+  name = "Code of Conduct"
+  url = "/code-of-conduct"
   weight = 30
 
 [[footer]]
diff --git a/docs/content/en/configuration/methods/environment.md b/docs/content/en/configuration/methods/environment.md
index 4fc3ccd49..e5e4686bb 100644
--- a/docs/content/en/configuration/methods/environment.md
+++ b/docs/content/en/configuration/methods/environment.md
@@ -50,3 +50,7 @@ Can be replaced by this environment variable configuration:
 AUTHELIA_LOG_LEVEL=info
 AUTHELIA_SERVER_BUFFERS_READ=4096
 ```
+
+## Environment Variables
+
+{{% table-config-keys secrets="false" %}}
diff --git a/docs/content/en/configuration/methods/secrets.md b/docs/content/en/configuration/methods/secrets.md
index 10c9096fe..2a767bb49 100644
--- a/docs/content/en/configuration/methods/secrets.md
+++ b/docs/content/en/configuration/methods/secrets.md
@@ -52,24 +52,11 @@ Here is the list of the environment variables which are considered secrets and c
 secrets can be loaded into the configuration if they end with one of the suffixes above, you can set the value of any
 other configuration using the environment but instead of loading a file the value of the environment variable is used.
 
-|                  Configuration Key                  |                   Environment Variable                   |
-|:---------------------------------------------------:|:--------------------------------------------------------:|
-|                  [server.tls.key]                   |               AUTHELIA_SERVER_TLS_KEY_FILE               |
-|                    [jwt_secret]                     |                 AUTHELIA_JWT_SECRET_FILE                 |
-|                [duo_api.secret_key]                 |             AUTHELIA_DUO_API_SECRET_KEY_FILE             |
-|                  [session.secret]                   |               AUTHELIA_SESSION_SECRET_FILE               |
-|              [session.redis.password]               |           AUTHELIA_SESSION_REDIS_PASSWORD_FILE           |
-| [session.redis.high_availability.sentinel_password] | AUTHELIA_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE  |
-|              [storage.encryption_key]               |           AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE           |
-|              [storage.mysql.password]               |           AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE           |
-|             [storage.postgres.password]             |         AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE          |
-|              [notifier.smtp.password]               |           AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE           |
-|       [authentication_backend.ldap.password]        |    AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE    |
-|    [identity_providers.oidc.issuer_private_key]     | AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE |
-|        [identity_providers.oidc.hmac_secret]        |    AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE     |
+{{% table-config-keys secrets="true" %}}
 
 [server.tls.key]: ../miscellaneous/server.md#key
 [jwt_secret]: ../miscellaneous/introduction.md#jwt_secret
+[duo_api.integration_key]: ../second-factor/duo.md#integration_key
 [duo_api.secret_key]: ../second-factor/duo.md#secret_key
 [session.secret]: ../session/introduction.md#secret
 [session.redis.password]: ../session/redis.md#password
@@ -77,6 +64,7 @@ other configuration using the environment but instead of loading a file the valu
 [storage.encryption_key]: ../storage/introduction.md#encryption_key
 [storage.mysql.password]: ../storage/mysql.md#password
 [storage.postgres.password]: ../storage/postgres.md#password
+[storage.postgres.ssl.key]: ../storage/postgres.md#key
 [notifier.smtp.password]: ../notifications/smtp.md#password
 [authentication_backend.ldap.password]: ../first-factor/ldap.md#password
 [identity_providers.oidc.issuer_private_key]: ../identity-providers/open-id-connect.md#issuer_private_key
diff --git a/docs/content/en/contributing/development/guidelines-commit-message.md b/docs/content/en/contributing/development/guidelines-commit-message.md
index 45b3e6408..d60764d63 100644
--- a/docs/content/en/contributing/development/guidelines-commit-message.md
+++ b/docs/content/en/contributing/development/guidelines-commit-message.md
@@ -47,11 +47,13 @@ for, and the structure it must have.
   │       │             │
   │       │             └─⫸ Summary in present tense. Not capitalized. No period at the end.
   │       │
-  │       └─⫸ Commit Scope: api|authentication|authorization|cmd|commands|configuration|duo|
-  │                          handlers|logging|middlewares|mocks|model|notification|ntp|oidc|
-  │                          regulation|server|session|storage|suites|templates|utils|web
+  │       └─⫸ Commit Scope: api|autheliabot|authentication|authorization|buildkite|bundler|cmd|
+  │                          codecov|commands|configuration|deps|docker|duo|go|golangci-lint|
+  │                          handlers|logging|metrics|middlewares|mocks|model|notification|npm|ntp|
+  │                          oidc|regulation|renovate|reviewdog|server|session|storage|suites|
+  │                          templates|totp|utils|web
   │
-  └─⫸ Commit Type: build|ci|docs|feat|fix|perf|refactor|release|test
+  └─⫸ Commit Type: build|ci|docs|feat|fix|i18n|perf|refactor|release|revert|test
 ```
 
 The `<type>` and `<summary>` fields are mandatory, the `(<scope>)` field is optional.
@@ -65,6 +67,7 @@ The `<type>` and `<summary>` fields are mandatory, the `(<scope>)` field is opti
 * __docs__ Documentation only changes
 * __feat__ A new feature
 * __fix__ A bug fix
+* __i18n__ Updating translations or internationalization settings
 * __perf__ A code change that improves performance
 * __refactor__ A code change that neither fixes a bug nor adds a feature
 * __release__ Releasing a new version of Authelia
@@ -101,7 +104,7 @@ commit messages).
 There are currently a few exceptions to the "use package name" rule:
 
 * `api`: used for changes that change the openapi specification
-* `cmd`: used for changes to the `authelia|authelia-scripts|authelia-suites` top level binaries
+* `cmd`: used for changes to the `authelia|authelia-gen|authelia-scripts|authelia-suites` top level binaries
 * `web`: used for changes to the React based frontend
 * none/empty string: useful for `test`, `refactor` and changes that are done across multiple packages
   (e.g. `test: add missing unit tests`) and for docs changes that are not related to a specific package
diff --git a/docs/content/en/information/privacy-policy.md b/docs/content/en/policies/privacy.md
similarity index 92%
rename from docs/content/en/information/privacy-policy.md
rename to docs/content/en/policies/privacy.md
index e646d854b..0435cd528 100644
--- a/docs/content/en/information/privacy-policy.md
+++ b/docs/content/en/policies/privacy.md
@@ -29,6 +29,6 @@ __TLDR__: We do not use cookies and we do not collect any personal data.
 
 ## Contact us
 
-[Contact us](contact.md) if you have any questions.
+[Contact us](../information/contact.md) if you have any questions.
 
 __Effective Date:__ *16th May 2022*
diff --git a/docs/content/en/information/security.md b/docs/content/en/policies/security.md
similarity index 93%
rename from docs/content/en/information/security.md
rename to docs/content/en/policies/security.md
index f1a22ed2b..bbd332090 100644
--- a/docs/content/en/information/security.md
+++ b/docs/content/en/policies/security.md
@@ -1,10 +1,11 @@
 ---
-title: "Security"
-description: "Report security issues."
+title: "Security Policy"
+description: "The Authelia Security Policy which is essential reading for reporting security issues"
 date: 2022-06-15T17:51:47+10:00
 draft: false
 images: []
 aliases:
+  - /security-policy
   - /security
   - /security.html
 ---
@@ -36,7 +37,7 @@ This is the preferred method of reporting.
 
 ### Chat
 
-If you wish to chat directly instead of sending an email please use one of the [chat options](contact.md#chat) but it
+If you wish to chat directly instead of sending an email please use one of the [chat options](../information/contact.md#chat) but it
 is vital that when you do that you only do so privately with one of the maintainers. In order to start a private
 discussion you should ask to have a private discussion with a team member without mentioning the reason why you wish to
 have a private discussion so that provided the bug is confirmed we can coordinate the release of fixes and information
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
index f9194a274..2dec8b94d 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
@@ -16,15 +16,39 @@ toc: true
 
 Authelia's generator tooling
 
+```
+authelia-gen [flags]
+```
+
 ### Options
 
 ```
-  -h, --help   help for authelia-gen
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+  -h, --help                                     help for authelia-gen
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
 ```
 
 ### SEE ALSO
 
-* [authelia-gen all](authelia-gen_all.md)	 - Run all generators with default options
 * [authelia-gen code](authelia-gen_code.md)	 - Generate code
+* [authelia-gen commit-lint](authelia-gen_commit-lint.md)	 - Generate commit lint files
 * [authelia-gen docs](authelia-gen_docs.md)	 - Generate docs
+* [authelia-gen github](authelia-gen_github.md)	 - Generate GitHub files
+* [authelia-gen locales](authelia-gen_locales.md)	 - Generate locales files
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_all.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_all.md
deleted file mode 100644
index b1c144577..000000000
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_all.md
+++ /dev/null
@@ -1,32 +0,0 @@
----
-title: "authelia-gen all"
-description: "Reference for the authelia-gen all command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-gen"
-weight: 330
-toc: true
----
-
-## authelia-gen all
-
-Run all generators with default options
-
-```
-authelia-gen all [flags]
-```
-
-### Options
-
-```
-  -h, --help   help for all
-```
-
-### SEE ALSO
-
-* [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
-
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
index 166e8fe64..1b7e3dda8 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
@@ -26,8 +26,32 @@ authelia-gen code [flags]
   -h, --help   help for code
 ```
 
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
 ### SEE ALSO
 
 * [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
 * [authelia-gen code keys](authelia-gen_code_keys.md)	 - Generate the list of valid configuration keys
+* [authelia-gen code scripts](authelia-gen_code_scripts.md)	 - Generate the generated portion of the authelia-scripts command
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
index da85af909..cf8aa9902 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
@@ -23,9 +23,30 @@ authelia-gen code keys [flags]
 ### Options
 
 ```
-  -f, --file string      Sets the path of the keys file (default "./internal/configuration/schema/keys.go")
-  -h, --help             help for keys
-      --package string   Sets the package name of the keys file (default "schema")
+  -h, --help   help for keys
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
new file mode 100644
index 000000000..d5c0f3ac5
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
@@ -0,0 +1,55 @@
+---
+title: "authelia-gen code scripts"
+description: "Reference for the authelia-gen code scripts command."
+lead: ""
+date: 2022-08-01T10:11:13+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen code scripts
+
+Generate the generated portion of the authelia-scripts command
+
+```
+authelia-gen code scripts [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for scripts
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen code](authelia-gen_code.md)	 - Generate code
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
new file mode 100644
index 000000000..47df1a317
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
@@ -0,0 +1,55 @@
+---
+title: "authelia-gen commit-lint"
+description: "Reference for the authelia-gen commit-lint command."
+lead: ""
+date: 2022-07-31T12:57:53+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen commit-lint
+
+Generate commit lint files
+
+```
+authelia-gen commit-lint [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for commit-lint
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
index 015fc5362..5bb23ea36 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
@@ -23,8 +23,30 @@ authelia-gen docs [flags]
 ### Options
 
 ```
-  -C, --cwd string   Sets the CWD for git commands
-  -h, --help         help for docs
+  -h, --help   help for docs
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
 ```
 
 ### SEE ALSO
@@ -32,4 +54,5 @@ authelia-gen docs [flags]
 * [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
 * [authelia-gen docs cli](authelia-gen_docs_cli.md)	 - Generate CLI docs
 * [authelia-gen docs date](authelia-gen_docs_date.md)	 - Generate doc dates
+* [authelia-gen docs keys](authelia-gen_docs_keys.md)	 - Generate the docs data file for configuration keys
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
index 936d7b7d7..dc87228f5 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
@@ -23,14 +23,30 @@ authelia-gen docs cli [flags]
 ### Options
 
 ```
-  -d, --directory string   The directory to store the markdown in (default "./docs/content/en/reference/cli")
-  -h, --help               help for cli
+  -h, --help   help for cli
 ```
 
 ### Options inherited from parent commands
 
 ```
-  -C, --cwd string   Sets the CWD for git commands
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
index 3aa716197..f2d625bdf 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
@@ -2,7 +2,7 @@
 title: "authelia-gen docs date"
 description: "Reference for the authelia-gen docs date command."
 lead: ""
-date: 2022-09-01T12:28:38+10:00
+date: 2022-06-15T17:51:47+10:00
 draft: false
 images: []
 menu:
@@ -25,14 +25,30 @@ authelia-gen docs date [flags]
 ```
       --commit-since string   The commit to check the logs since
       --commit-until string   The commit to check the logs until (default "HEAD")
-  -d, --directory string      The directory to modify (default "./docs/content")
   -h, --help                  help for date
 ```
 
 ### Options inherited from parent commands
 
 ```
-  -C, --cwd string   Sets the CWD for git commands
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
new file mode 100644
index 000000000..9521eec8e
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
@@ -0,0 +1,55 @@
+---
+title: "authelia-gen docs keys"
+description: "Reference for the authelia-gen docs keys command."
+lead: ""
+date: 2022-09-16T13:42:10+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen docs keys
+
+Generate the docs data file for configuration keys
+
+```
+authelia-gen docs keys [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for keys
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen docs](authelia-gen_docs.md)	 - Generate docs
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_time.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_time.md
deleted file mode 100644
index 25402c2ea..000000000
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_time.md
+++ /dev/null
@@ -1,42 +0,0 @@
----
-title: "authelia-gen docs time"
-description: "Reference for the authelia-gen docs time command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-gen"
-weight: 330
-toc: true
----
-
-## authelia-gen docs time
-
-Generate doc timestamps
-
-```
-authelia-gen docs time [flags]
-```
-
-### Options
-
-```
-      --commit-since string   The commit to check the logs since
-      --commit-until string   The commit to check the logs until (default "HEAD")
-  -d, --directory string      The directory to modify (default "./docs/content")
-  -h, --help                  help for time
-```
-
-### Options inherited from parent commands
-
-```
-  -C, --cwd string   Sets the CWD for git commands
-```
-
-### SEE ALSO
-
-* [authelia-gen docs](authelia-gen_docs.md)	 - Generate docs
-
-###### Auto generated by spf13/cobra on 12-Jun-2022
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
new file mode 100644
index 000000000..dc7a1c971
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
@@ -0,0 +1,56 @@
+---
+title: "authelia-gen github"
+description: "Reference for the authelia-gen github command."
+lead: ""
+date: 2022-07-31T12:57:53+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen github
+
+Generate GitHub files
+
+```
+authelia-gen github [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for github
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
+* [authelia-gen github issue-templates](authelia-gen_github_issue-templates.md)	 - Generate GitHub issue templates
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
new file mode 100644
index 000000000..eaf0de959
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
@@ -0,0 +1,57 @@
+---
+title: "authelia-gen github issue-templates"
+description: "Reference for the authelia-gen github issue-templates command."
+lead: ""
+date: 2022-07-31T12:57:53+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen github issue-templates
+
+Generate GitHub issue templates
+
+```
+authelia-gen github issue-templates [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for issue-templates
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen github](authelia-gen_github.md)	 - Generate GitHub files
+* [authelia-gen github issue-templates bug-report](authelia-gen_github_issue-templates_bug-report.md)	 - Generate GitHub bug report issue template
+* [authelia-gen github issue-templates feature-request](authelia-gen_github_issue-templates_feature-request.md)	 - Generate GitHub feature request issue template
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
new file mode 100644
index 000000000..bf4fffaca
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
@@ -0,0 +1,55 @@
+---
+title: "authelia-gen github issue-templates bug-report"
+description: "Reference for the authelia-gen github issue-templates bug-report command."
+lead: ""
+date: 2022-07-31T12:57:53+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen github issue-templates bug-report
+
+Generate GitHub bug report issue template
+
+```
+authelia-gen github issue-templates bug-report [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for bug-report
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen github issue-templates](authelia-gen_github_issue-templates.md)	 - Generate GitHub issue templates
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
new file mode 100644
index 000000000..f7f443495
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
@@ -0,0 +1,55 @@
+---
+title: "authelia-gen github issue-templates feature-request"
+description: "Reference for the authelia-gen github issue-templates feature-request command."
+lead: ""
+date: 2022-07-31T12:57:53+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen github issue-templates feature-request
+
+Generate GitHub feature request issue template
+
+```
+authelia-gen github issue-templates feature-request [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for feature-request
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen github issue-templates](authelia-gen_github_issue-templates.md)	 - Generate GitHub issue templates
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
new file mode 100644
index 000000000..d46544a45
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
@@ -0,0 +1,55 @@
+---
+title: "authelia-gen locales"
+description: "Reference for the authelia-gen locales command."
+lead: ""
+date: 2022-07-31T12:57:53+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen locales
+
+Generate locales files
+
+```
+authelia-gen locales [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for locales
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
+
diff --git a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates.md b/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates.md
deleted file mode 100644
index 62a98ca28..000000000
--- a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates.md
+++ /dev/null
@@ -1,39 +0,0 @@
----
-title: "authelia-scripts certificates"
-description: "Reference for the authelia-scripts certificates command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-lastmod: 2022-06-03T11:17:29+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-scripts"
-weight: 330
-toc: true
----
-
-## authelia-scripts certificates
-
-Commands related to certificate generation
-
-### Options
-
-```
-  -h, --help           help for certificates
-      --host strings   Comma-separated hostnames and IPs to generate a certificate for
-```
-
-### Options inherited from parent commands
-
-```
-      --buildkite          Set CI flag for Buildkite
-      --log-level string   Set the log level for the command (default "info")
-```
-
-### SEE ALSO
-
-* [authelia-scripts](authelia-scripts.md)	 - 
-* [authelia-scripts certificates generate](authelia-scripts_certificates_generate.md)	 - Generate a self-signed certificate
-
-###### Auto generated by spf13/cobra on 3-Jun-2022
diff --git a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates_generate.md b/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates_generate.md
deleted file mode 100644
index 685f7c1a2..000000000
--- a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_certificates_generate.md
+++ /dev/null
@@ -1,49 +0,0 @@
----
-title: "authelia-scripts certificates generate"
-description: "Reference for the authelia-scripts certificates generate command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-lastmod: 2022-06-03T11:17:29+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-scripts"
-weight: 330
-toc: true
----
-
-## authelia-scripts certificates generate
-
-Generate a self-signed certificate
-
-```
-authelia-scripts certificates generate [flags]
-```
-
-### Options
-
-```
-      --ca                   Whether this cert should be its own Certificate Authority
-      --dir string           Target directory where the certificate and keys will be stored
-      --duration duration    Duration that certificate is valid for (default 8760h0m0s)
-      --ecdsa-curve string   ECDSA curve to use to generate a key. Valid values are P224, P256 (recommended), P384, P521
-      --ed25519              Generate an Ed25519 key
-  -h, --help                 help for generate
-      --rsa-bits int         Size of RSA key to generate. Ignored if --ecdsa-curve is set (default 2048)
-      --start-date string    Creation date formatted as Jan 1 15:04:05 2011
-```
-
-### Options inherited from parent commands
-
-```
-      --buildkite          Set CI flag for Buildkite
-      --host strings       Comma-separated hostnames and IPs to generate a certificate for
-      --log-level string   Set the log level for the command (default "info")
-```
-
-### SEE ALSO
-
-* [authelia-scripts certificates](authelia-scripts_certificates.md)	 - Commands related to certificate generation
-
-###### Auto generated by spf13/cobra on 3-Jun-2022
diff --git a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_hash-password.md b/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_hash-password.md
deleted file mode 100644
index c8236e2c1..000000000
--- a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_hash-password.md
+++ /dev/null
@@ -1,49 +0,0 @@
----
-title: "authelia-scripts hash-password"
-description: "Reference for the authelia-scripts hash-password command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-lastmod: 2022-06-03T11:17:29+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-scripts"
-weight: 330
-toc: true
----
-
-## authelia-scripts hash-password
-
-Hash a password to be used in file-based users database. Default algorithm is argon2id.
-
-```
-authelia-scripts hash-password [flags] -- <password>
-```
-
-### Options
-
-```
-  -c, --config strings    Configuration files
-  -h, --help              help for hash-password
-  -i, --iterations int    set the number of hashing iterations (default 3)
-  -k, --key-length int    [argon2id] set the key length param (default 32)
-  -m, --memory int        [argon2id] set the amount of memory param (in MB) (default 64)
-  -p, --parallelism int   [argon2id] set the parallelism param (default 4)
-  -s, --salt string       set the salt string
-  -l, --salt-length int   set the auto-generated salt length (default 16)
-  -z, --sha512            use sha512 as the algorithm (changes iterations to 50000, change with -i)
-```
-
-### Options inherited from parent commands
-
-```
-      --buildkite          Set CI flag for Buildkite
-      --log-level string   Set the log level for the command (default "info")
-```
-
-### SEE ALSO
-
-* [authelia-scripts](authelia-scripts.md)	 - 
-
-###### Auto generated by spf13/cobra on 3-Jun-2022
diff --git a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa.md b/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa.md
deleted file mode 100644
index 80196b3f5..000000000
--- a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa.md
+++ /dev/null
@@ -1,38 +0,0 @@
----
-title: "authelia-scripts rsa"
-description: "Reference for the authelia-scripts rsa command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-lastmod: 2022-06-03T11:17:29+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-scripts"
-weight: 330
-toc: true
----
-
-## authelia-scripts rsa
-
-Commands related to rsa keypair generation
-
-### Options
-
-```
-  -h, --help   help for rsa
-```
-
-### Options inherited from parent commands
-
-```
-      --buildkite          Set CI flag for Buildkite
-      --log-level string   Set the log level for the command (default "info")
-```
-
-### SEE ALSO
-
-* [authelia-scripts](authelia-scripts.md)	 - 
-* [authelia-scripts rsa generate](authelia-scripts_rsa_generate.md)	 - Generate a RSA keypair
-
-###### Auto generated by spf13/cobra on 3-Jun-2022
diff --git a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa_generate.md b/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa_generate.md
deleted file mode 100644
index 8707c1c67..000000000
--- a/docs/content/en/reference/cli/authelia-scripts/authelia-scripts_rsa_generate.md
+++ /dev/null
@@ -1,43 +0,0 @@
----
-title: "authelia-scripts rsa generate"
-description: "Reference for the authelia-scripts rsa generate command."
-lead: ""
-date: 2022-06-15T17:51:47+10:00
-lastmod: 2022-06-03T11:17:29+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "cli-authelia-scripts"
-weight: 330
-toc: true
----
-
-## authelia-scripts rsa generate
-
-Generate a RSA keypair
-
-```
-authelia-scripts rsa generate [flags]
-```
-
-### Options
-
-```
-  -d, --dir string     Target directory where the keypair will be stored
-  -h, --help           help for generate
-  -b, --key-size int   Sets the key size in bits (default 2048)
-```
-
-### Options inherited from parent commands
-
-```
-      --buildkite          Set CI flag for Buildkite
-      --log-level string   Set the log level for the command (default "info")
-```
-
-### SEE ALSO
-
-* [authelia-scripts rsa](authelia-scripts_rsa.md)	 - Commands related to rsa keypair generation
-
-###### Auto generated by spf13/cobra on 3-Jun-2022
diff --git a/docs/content/en/reference/guides/domain-sanitizaiton.md b/docs/content/en/reference/guides/domain-sanitizaiton.md
deleted file mode 100644
index 950e751b6..000000000
--- a/docs/content/en/reference/guides/domain-sanitizaiton.md
+++ /dev/null
@@ -1,30 +0,0 @@
----
-title: "Domain Sanitization"
-description: "This guide describes and helps users sanitize provided files to hide their domain"
-lead: "This guide describes and helps users sanitize provided files to hide their domain."
-date: 2022-08-26T13:50:51+10:00
-draft: false
-images: []
-menu:
-  reference:
-    parent: "guides"
-weight: 220
-toc: true
----
-
-Some users may wish to hide their domain in files provided during troubleshooting. While this is discouraged, if a user
-decides to perform this action it's critical for these purposes that you hide your domain in a very specific
-way. Most editors allow replacing all instances of a value, utilizing this is essential to making troubleshooting
-possible.
-
-## General Rule
-
-Only replace the purchased portion of domains. For example if you have `auth.abc123.com` and `app.abc123.com` they
-should become `auth.example.com` and `app.example.com`, i.e. replace all instances of `abc123.com` with `example.com`.
-
-## Multiple Domains
-
-*__Replacement Value:__* `example#.com` (where `#` is a unique number per domain)
-
-In instances where there are multiple domains it's recommended these domains are replaced with `example1.com`,
-`example2.com`, etc.
diff --git a/docs/content/en/reference/guides/internationalization.md b/docs/content/en/reference/guides/internationalization.md
new file mode 100644
index 000000000..bd6059a28
--- /dev/null
+++ b/docs/content/en/reference/guides/internationalization.md
@@ -0,0 +1,17 @@
+---
+title: "Internationalization"
+description: "A collection of internationalization reference information"
+lead: "This section contains internationalization references for Authelia."
+date: 2022-08-01T10:44:40+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "guides"
+weight: 220
+toc: true
+---
+
+## Web Portal Internationalization
+
+{{% table-i18n-locales %}}
diff --git a/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md b/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md
new file mode 100644
index 000000000..94c3d3923
--- /dev/null
+++ b/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md
@@ -0,0 +1,43 @@
+---
+title: "Troubleshooting Sanitization"
+description: "This guide describes and helps users sanitize provided files to hide privacy related values for troubleshooting"
+lead: "This guide describes and helps users sanitize provided files to hide information for privacy."
+date: 2022-09-16T12:50:04+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "guides"
+weight: 220
+toc: true
+aliases:
+  - /r/sanitize
+  - /reference/guides/domain-sanitizaiton
+---
+
+Some users may wish to hide their domain in files provided during troubleshooting. While this is discouraged, if a user
+decides to perform this action it's critical for these purposes that you hide your domain in a very specific
+way. Most editors allow replacing all instances of a value, utilizing this is essential to making troubleshooting
+possible.
+
+## General Rules
+
+1. Only replace the purchased portion of domains:
+   - For example if you have `auth.abc123.com` and `app.abc123.com` they
+   should become `auth.example.com` and `app.example.com`, i.e. replace all instances of `abc123.com` with `example.com`.
+2. Make sure value replaced is replaced with a unique value:
+   - For example if you replace `abc123.com` with `example.com` DO NOT replace any other value other than `abc123.com` with
+   `example.com`. The same rule applies to IP addresses, usernames, and groups.
+3. Make sure the value replaced is replaced across logs, configuration, and any references:
+   - For example if you replace `abc123.com` with `example.com` in your configuration, make exactly the same replacement
+   for the log files.
+4. Make sure this consistency is followed for all communication regarding a single issue.
+
+## Multiple Domains
+
+*__Replacement Value:__* `example#.com` (where `#` is a unique number per domain)
+
+In instances where there are multiple domains it's recommended these domains are replaced with `example1.com`,
+`example2.com`, etc.
+
+## Specific Values
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
new file mode 100644
index 000000000..5907669b9
--- /dev/null
+++ b/docs/data/configkeys.json
@@ -0,0 +1 @@
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/docs/data/languages.json b/docs/data/languages.json
index 3578e9dde..e44c2acba 100644
--- a/docs/data/languages.json
+++ b/docs/data/languages.json
@@ -1 +1 @@
-{"defaultLocale":"en","defaultNamespace":"portal","namespaces":["portal"],"languages":[{"display":"German","locale":"de","namespaces":["portal"],"fallbacks":["en"]},{"display":"English","locale":"en","namespaces":["portal"],"fallbacks":["en"]},{"display":"Spanish","locale":"es","namespaces":["portal"],"fallbacks":["en"]},{"display":"French","locale":"fr","namespaces":["portal"],"fallbacks":["en"]},{"display":"Russian","locale":"ru","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish","locale":"sv","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish (Sweden)","locale":"sv-SE","namespaces":["portal"],"fallbacks":["sv","en"]},{"display":"Chinese (Taiwan)","locale":"zh-TW","namespaces":["portal"],"fallbacks":["en"]}]}
\ No newline at end of file
+{"defaults":{"language":{"display":"English","locale":"en"},"namespace":"portal"},"namespaces":["portal"],"languages":[{"display":"English","locale":"en","namespaces":["portal"],"fallbacks":["en"]},{"display":"German","locale":"de","namespaces":["portal"],"fallbacks":["en"]},{"display":"Spanish","locale":"es","namespaces":["portal"],"fallbacks":["en"]},{"display":"French","locale":"fr","namespaces":["portal"],"fallbacks":["en"]},{"display":"Dutch","locale":"nl","namespaces":["portal"],"fallbacks":["en"]},{"display":"Portuguese","locale":"pt","namespaces":["portal"],"fallbacks":["en"]},{"display":"Russian","locale":"ru","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish","locale":"sv","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish (Sweden)","locale":"sv-SE","namespaces":["portal"],"fallbacks":["sv","en"]},{"display":"Chinese","locale":"zh","namespaces":["portal"],"fallbacks":["en"]},{"display":"Chinese (China)","locale":"zh-CN","namespaces":["portal"],"fallbacks":["zh","en"]},{"display":"Chinese (Taiwan)","locale":"zh-TW","namespaces":["portal"],"fallbacks":["en"]}]}
\ No newline at end of file
diff --git a/docs/layouts/policies/list.html b/docs/layouts/policies/list.html
new file mode 100644
index 000000000..41b36f8c7
--- /dev/null
+++ b/docs/layouts/policies/list.html
@@ -0,0 +1,22 @@
+{{ define "main" }}
+<div class="row justify-content-center">
+  <div class="col-md-12 col-lg-10 col-xl-8">
+    <article>
+      <h1 class="text-center">{{ if eq .CurrentSection .FirstSection }}{{ .Section | humanize }}{{ else }}{{ .Title }}{{ end }}</h1>
+      <div class="text-center">{{ .Content }}</div>
+			<div class="card-list">
+				{{ $currentSection := .CurrentSection }}
+				{{ range where .Site.RegularPages.ByWeight "Section" .Section }}
+					{{ if in (.RelPermalink | string) $currentSection.RelPermalink }}
+						<div class="card my-3">
+							<div class="card-body">
+								<a class="stretched-link" href="{{ .RelPermalink }}">{{ if (eq $currentSection.Title .Title) }}Introduction{{ else }}{{ .Params.title | title }}{{ end }} &rarr;</a>
+							</div>
+						</div>
+					{{ end }}
+				{{ end }}
+			</div>
+    </article>
+  </div>
+</div>
+{{ end }}
diff --git a/docs/layouts/shortcodes/table-config-keys.html b/docs/layouts/shortcodes/table-config-keys.html
new file mode 100644
index 000000000..6f74b1c3e
--- /dev/null
+++ b/docs/layouts/shortcodes/table-config-keys.html
@@ -0,0 +1,14 @@
+{{ $secrets := .Get "secrets" }}
+| Configuration Key | Environment Variable |
+|:-----------------:|:--------------------:|
+{{- range $.Site.Data.configkeys }}
+{{- if eq "true" $secrets }}
+{{- if .secret }}
+|    [{{ .path }}]    |      {{ .env }}      |
+{{- end }}
+{{- else }}
+{{- if not .secret }}
+|    {{ .path }}    |      {{ .env }}      |
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/docs/layouts/shortcodes/table-i18n-locales.html b/docs/layouts/shortcodes/table-i18n-locales.html
new file mode 100644
index 000000000..246df3805
--- /dev/null
+++ b/docs/layouts/shortcodes/table-i18n-locales.html
@@ -0,0 +1,5 @@
+| Language | Locale | Namespaces | Fallbacks |
+|:--------:|:------:|:----------:|:---------:|
+{{- range $.Site.Data.languages.languages }}
+|{{ .display }}|{{ .locale }}|{{ range $i, $v := .namespaces }}{{ if eq $i 0 }}{{ $v }}{{ else }}, {{ $v }}{{ end }}{{ end }}|{{ range $i, $v := .fallbacks }}{{ if eq $i 0 }}{{ $v }}{{ else }}, {{ $v }}{{ end }}{{ end }}|
+{{- end }}
diff --git a/docs/package.json b/docs/package.json
index a896d171c..286d3953b 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -68,6 +68,6 @@
     "stylelint-config-standard-scss": "4.0.0"
   },
   "otherDependencies": {
-    "hugo": "0.102.2"
+    "hugo": "0.102.3"
   }
 }
diff --git a/internal/configuration/helpers.go b/internal/configuration/helpers.go
index 0f5e0b215..22b793e9a 100644
--- a/internal/configuration/helpers.go
+++ b/internal/configuration/helpers.go
@@ -12,15 +12,12 @@ func getEnvConfigMap(keys []string, prefix, delimiter string) (keyMap map[string
 
 	for _, key := range keys {
 		if strings.Contains(key, delimiter) {
-			originalKey := prefix + strings.ToUpper(strings.ReplaceAll(key, constDelimiter, delimiter))
-			keyMap[originalKey] = key
+			keyMap[ToEnvironmentKey(key, prefix, delimiter)] = key
 		}
 
 		// Secret envs should be ignored by the env parser.
-		if isSecretKey(key) {
-			originalKey := strings.ToUpper(strings.ReplaceAll(key, constDelimiter, delimiter)) + constSecretSuffix
-
-			ignoredKeys = append(ignoredKeys, prefix+originalKey)
+		if IsSecretKey(key) {
+			ignoredKeys = append(ignoredKeys, ToEnvironmentSecretKey(key, prefix, delimiter))
 		}
 	}
 
@@ -31,7 +28,7 @@ func getSecretConfigMap(keys []string, prefix, delimiter string) (keyMap map[str
 	keyMap = make(map[string]string)
 
 	for _, key := range keys {
-		if isSecretKey(key) {
+		if IsSecretKey(key) {
 			originalKey := strings.ToUpper(strings.ReplaceAll(key, constDelimiter, delimiter)) + constSecretSuffix
 
 			keyMap[prefix+originalKey] = key
@@ -41,7 +38,22 @@ func getSecretConfigMap(keys []string, prefix, delimiter string) (keyMap map[str
 	return keyMap
 }
 
-func isSecretKey(key string) (isSecretKey bool) {
+// ToEnvironmentKey converts a key into the environment variable name.
+func ToEnvironmentKey(key, prefix, delimiter string) string {
+	return prefix + strings.ToUpper(strings.ReplaceAll(key, constDelimiter, delimiter))
+}
+
+// ToEnvironmentSecretKey converts a key into the environment variable name.
+func ToEnvironmentSecretKey(key, prefix, delimiter string) string {
+	return prefix + strings.ToUpper(strings.ReplaceAll(key, constDelimiter, delimiter)) + constSecretSuffix
+}
+
+// IsSecretKey returns true if the provided key is a secret enabled key.
+func IsSecretKey(key string) (isSecretKey bool) {
+	if strings.Contains(key, "[]") {
+		return false
+	}
+
 	return utils.IsStringInSliceSuffix(key, secretSuffixes)
 }
 
diff --git a/internal/configuration/helpers_test.go b/internal/configuration/helpers_test.go
index b244d4dcf..cc8cd1180 100644
--- a/internal/configuration/helpers_test.go
+++ b/internal/configuration/helpers_test.go
@@ -7,12 +7,12 @@ import (
 )
 
 func TestIsSecretKey(t *testing.T) {
-	assert.True(t, isSecretKey("my_fake_token"))
-	assert.False(t, isSecretKey("my_fake_tokenz"))
-	assert.True(t, isSecretKey("my_.fake.secret"))
-	assert.True(t, isSecretKey("my.password"))
-	assert.False(t, isSecretKey("my.passwords"))
-	assert.False(t, isSecretKey("my.passwords"))
+	assert.True(t, IsSecretKey("my_fake_token"))
+	assert.False(t, IsSecretKey("my_fake_tokenz"))
+	assert.True(t, IsSecretKey("my_.fake.secret"))
+	assert.True(t, IsSecretKey("my.password"))
+	assert.False(t, IsSecretKey("my.passwords"))
+	assert.False(t, IsSecretKey("my.passwords"))
 }
 
 func TestGetEnvConfigMaps(t *testing.T) {
diff --git a/internal/configuration/sources.go b/internal/configuration/sources.go
index 8798083aa..67aba6d5a 100644
--- a/internal/configuration/sources.go
+++ b/internal/configuration/sources.go
@@ -36,7 +36,7 @@ func NewYAMLFileSources(paths []string) (sources []*YAMLFileSource) {
 }
 
 // Name of the Source.
-func (s YAMLFileSource) Name() (name string) {
+func (s *YAMLFileSource) Name() (name string) {
 	return fmt.Sprintf("yaml file(%s)", s.path)
 }
 
@@ -64,7 +64,7 @@ func NewEnvironmentSource(prefix, delimiter string) (source *EnvironmentSource)
 }
 
 // Name of the Source.
-func (s EnvironmentSource) Name() (name string) {
+func (s *EnvironmentSource) Name() (name string) {
 	return "environment"
 }
 
@@ -90,7 +90,7 @@ func NewSecretsSource(prefix, delimiter string) (source *SecretsSource) {
 }
 
 // Name of the Source.
-func (s SecretsSource) Name() (name string) {
+func (s *SecretsSource) Name() (name string) {
 	return "secrets"
 }
 
@@ -127,7 +127,7 @@ func NewCommandLineSourceWithMapping(flags *pflag.FlagSet, mapping map[string]st
 }
 
 // Name of the Source.
-func (s CommandLineSource) Name() (name string) {
+func (s *CommandLineSource) Name() (name string) {
 	return "command-line"
 }
 
@@ -154,7 +154,7 @@ func NewMapSource(m map[string]interface{}) (source *MapSource) {
 }
 
 // Name of the Source.
-func (s MapSource) Name() (name string) {
+func (s *MapSource) Name() (name string) {
 	return "map"
 }
 
diff --git a/web/src/i18n/index.ts b/web/src/i18n/index.ts
index 6cfa4419d..d3e60deb8 100644
--- a/web/src/i18n/index.ts
+++ b/web/src/i18n/index.ts
@@ -1,3 +1,9 @@
+// Code generated by go generate. DO NOT EDIT.
+//
+// Run the following command to generate this file:
+// 		go run ./cmd/authelia-gen locales
+//
+
 import i18n from "i18next";
 import LanguageDetector from "i18next-browser-languagedetector";
 import Backend from "i18next-http-backend";

From c756c7b67b23c7192c7e06238c6d468518a88446 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 15:01:22 +1000
Subject: [PATCH 016/263] i18n: update translations (#3972)

---
 .../templates/web_i18n_index.ts.tmpl          |  6 +-
 .../authelia-gen/authelia-gen_code_scripts.md |  2 +-
 .../authelia-gen/authelia-gen_commit-lint.md  |  2 +-
 .../authelia-gen/authelia-gen_docs_keys.md    |  2 +-
 .../cli/authelia-gen/authelia-gen_github.md   |  2 +-
 .../authelia-gen_github_issue-templates.md    |  2 +-
 ...a-gen_github_issue-templates_bug-report.md |  2 +-
 ..._github_issue-templates_feature-request.md |  2 +-
 .../cli/authelia-gen/authelia-gen_locales.md  |  2 +-
 .../reference/guides/internationalization.md  |  2 +-
 .../guides/troubleshooting-sanitizaiton.md    |  2 +-
 docs/data/languages.json                      |  2 +-
 internal/server/asset.go                      |  6 ++
 internal/server/locales/ar-SA/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/cs-CZ/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/da-DK/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/el-GR/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/es-ES/portal.json     |  5 +-
 internal/server/locales/fi-FI/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/it-IT/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/ja-JP/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/nb-NO/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/nl-NL/portal.json     |  1 +
 internal/server/locales/no-NO/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/pl-PL/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/pt-BR/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/ro-RO/portal.json     | 72 +++++++++++++++++++
 internal/server/locales/ru-RU/portal.json     |  3 +
 internal/server/locales/sv-SE/portal.json     | 23 +++---
 internal/server/locales/uk-UA/portal.json     | 72 +++++++++++++++++++
 web/src/i18n/index.ts                         | 55 +++++++++++++-
 31 files changed, 1032 insertions(+), 25 deletions(-)
 create mode 100644 internal/server/locales/ar-SA/portal.json
 create mode 100644 internal/server/locales/cs-CZ/portal.json
 create mode 100644 internal/server/locales/da-DK/portal.json
 create mode 100644 internal/server/locales/el-GR/portal.json
 create mode 100644 internal/server/locales/fi-FI/portal.json
 create mode 100644 internal/server/locales/it-IT/portal.json
 create mode 100644 internal/server/locales/ja-JP/portal.json
 create mode 100644 internal/server/locales/nb-NO/portal.json
 create mode 100644 internal/server/locales/no-NO/portal.json
 create mode 100644 internal/server/locales/pl-PL/portal.json
 create mode 100644 internal/server/locales/pt-BR/portal.json
 create mode 100644 internal/server/locales/ro-RO/portal.json
 create mode 100644 internal/server/locales/uk-UA/portal.json

diff --git a/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl b/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
index 205cbec97..342c410ba 100644
--- a/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
+++ b/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
@@ -35,7 +35,11 @@ i18n.use(Backend)
             {{- end }}
             {{- end }}
         },
-        supportedLngs: [{{ range $i, $value := .Languages }}{{ if eq $i 0 }}"{{ $value.Locale }}"{{ else }}, "{{ $value.Locale }}"{{ end }}{{ end }}],
+        supportedLngs: [
+        	{{- range $i, $value := .Languages }}
+            "{{ $value.Locale }}",
+        	{{- end }}
+        ],
         lowerCaseLng: false,
         nonExplicitSupportedLngs: true,
         interpolation: {
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
index d5c0f3ac5..1502c7e6b 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
@@ -2,7 +2,7 @@
 title: "authelia-gen code scripts"
 description: "Reference for the authelia-gen code scripts command."
 lead: ""
-date: 2022-08-01T10:11:13+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
index 47df1a317..a574a7534 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
@@ -2,7 +2,7 @@
 title: "authelia-gen commit-lint"
 description: "Reference for the authelia-gen commit-lint command."
 lead: ""
-date: 2022-07-31T12:57:53+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
index 9521eec8e..18b43fb12 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
@@ -2,7 +2,7 @@
 title: "authelia-gen docs keys"
 description: "Reference for the authelia-gen docs keys command."
 lead: ""
-date: 2022-09-16T13:42:10+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
index dc7a1c971..40914aac0 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
@@ -2,7 +2,7 @@
 title: "authelia-gen github"
 description: "Reference for the authelia-gen github command."
 lead: ""
-date: 2022-07-31T12:57:53+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
index eaf0de959..fd3df20c2 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
@@ -2,7 +2,7 @@
 title: "authelia-gen github issue-templates"
 description: "Reference for the authelia-gen github issue-templates command."
 lead: ""
-date: 2022-07-31T12:57:53+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
index bf4fffaca..139ad47a9 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
@@ -2,7 +2,7 @@
 title: "authelia-gen github issue-templates bug-report"
 description: "Reference for the authelia-gen github issue-templates bug-report command."
 lead: ""
-date: 2022-07-31T12:57:53+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
index f7f443495..34e06edc6 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
@@ -2,7 +2,7 @@
 title: "authelia-gen github issue-templates feature-request"
 description: "Reference for the authelia-gen github issue-templates feature-request command."
 lead: ""
-date: 2022-07-31T12:57:53+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
index d46544a45..9477f4f61 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
@@ -2,7 +2,7 @@
 title: "authelia-gen locales"
 description: "Reference for the authelia-gen locales command."
 lead: ""
-date: 2022-07-31T12:57:53+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/guides/internationalization.md b/docs/content/en/reference/guides/internationalization.md
index bd6059a28..eb204bee9 100644
--- a/docs/content/en/reference/guides/internationalization.md
+++ b/docs/content/en/reference/guides/internationalization.md
@@ -2,7 +2,7 @@
 title: "Internationalization"
 description: "A collection of internationalization reference information"
 lead: "This section contains internationalization references for Authelia."
-date: 2022-08-01T10:44:40+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md b/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md
index 94c3d3923..a73df0959 100644
--- a/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md
+++ b/docs/content/en/reference/guides/troubleshooting-sanitizaiton.md
@@ -2,7 +2,7 @@
 title: "Troubleshooting Sanitization"
 description: "This guide describes and helps users sanitize provided files to hide privacy related values for troubleshooting"
 lead: "This guide describes and helps users sanitize provided files to hide information for privacy."
-date: 2022-09-16T12:50:04+10:00
+date: 2022-09-16T14:21:05+10:00
 draft: false
 images: []
 menu:
diff --git a/docs/data/languages.json b/docs/data/languages.json
index e44c2acba..cc3952d0e 100644
--- a/docs/data/languages.json
+++ b/docs/data/languages.json
@@ -1 +1 @@
-{"defaults":{"language":{"display":"English","locale":"en"},"namespace":"portal"},"namespaces":["portal"],"languages":[{"display":"English","locale":"en","namespaces":["portal"],"fallbacks":["en"]},{"display":"German","locale":"de","namespaces":["portal"],"fallbacks":["en"]},{"display":"Spanish","locale":"es","namespaces":["portal"],"fallbacks":["en"]},{"display":"French","locale":"fr","namespaces":["portal"],"fallbacks":["en"]},{"display":"Dutch","locale":"nl","namespaces":["portal"],"fallbacks":["en"]},{"display":"Portuguese","locale":"pt","namespaces":["portal"],"fallbacks":["en"]},{"display":"Russian","locale":"ru","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish","locale":"sv","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish (Sweden)","locale":"sv-SE","namespaces":["portal"],"fallbacks":["sv","en"]},{"display":"Chinese","locale":"zh","namespaces":["portal"],"fallbacks":["en"]},{"display":"Chinese (China)","locale":"zh-CN","namespaces":["portal"],"fallbacks":["zh","en"]},{"display":"Chinese (Taiwan)","locale":"zh-TW","namespaces":["portal"],"fallbacks":["en"]}]}
\ No newline at end of file
+{"defaults":{"language":{"display":"English","locale":"en"},"namespace":"portal"},"namespaces":["portal"],"languages":[{"display":"English","locale":"en","namespaces":["portal"],"fallbacks":["en"]},{"display":"Arabic","locale":"ar","namespaces":["portal"],"fallbacks":["en"]},{"display":"Arabic (Saudi Arabia)","locale":"ar-SA","namespaces":["portal"],"fallbacks":["ar","en"]},{"display":"Czech","locale":"cs","namespaces":["portal"],"fallbacks":["en"]},{"display":"Czech (Czechia)","locale":"cs-CZ","namespaces":["portal"],"fallbacks":["cs","en"]},{"display":"Danish","locale":"da","namespaces":["portal"],"fallbacks":["en"]},{"display":"Danish (Denmark)","locale":"da-DK","namespaces":["portal"],"fallbacks":["da","en"]},{"display":"German","locale":"de","namespaces":["portal"],"fallbacks":["en"]},{"display":"Greek","locale":"el","namespaces":["portal"],"fallbacks":["en"]},{"display":"Greek (Greece)","locale":"el-GR","namespaces":["portal"],"fallbacks":["el","en"]},{"display":"Spanish","locale":"es","namespaces":["portal"],"fallbacks":["en"]},{"display":"Finnish","locale":"fi","namespaces":["portal"],"fallbacks":["en"]},{"display":"French","locale":"fr","namespaces":["portal"],"fallbacks":["en"]},{"display":"Italian","locale":"it","namespaces":["portal"],"fallbacks":["en"]},{"display":"Japanese","locale":"ja","namespaces":["portal"],"fallbacks":["en"]},{"display":"Japanese (Japan)","locale":"ja-JP","namespaces":["portal"],"fallbacks":["ja","en"]},{"display":"Norwegian Bokmål","locale":"nb","namespaces":["portal"],"fallbacks":["en"]},{"display":"Norwegian Bokmål (Norway)","locale":"nb-NO","namespaces":["portal"],"fallbacks":["nb","en"]},{"display":"Dutch","locale":"nl","namespaces":["portal"],"fallbacks":["en"]},{"display":"Norwegian Bokmål","locale":"no","namespaces":["portal"],"fallbacks":["en"]},{"display":"Polish","locale":"pl","namespaces":["portal"],"fallbacks":["en"]},{"display":"Portuguese","locale":"pt","namespaces":["portal"],"fallbacks":["en"]},{"display":"Brazilian Portuguese","locale":"pt-BR","namespaces":["portal"],"fallbacks":["en"]},{"display":"Romanian","locale":"ro","namespaces":["portal"],"fallbacks":["en"]},{"display":"Russian","locale":"ru","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish","locale":"sv","namespaces":["portal"],"fallbacks":["en"]},{"display":"Swedish (Sweden)","locale":"sv-SE","namespaces":["portal"],"fallbacks":["sv","en"]},{"display":"Ukrainian","locale":"uk","namespaces":["portal"],"fallbacks":["en"]},{"display":"Ukrainian (Ukraine)","locale":"uk-UA","namespaces":["portal"],"fallbacks":["uk","en"]},{"display":"Chinese","locale":"zh","namespaces":["portal"],"fallbacks":["en"]},{"display":"Chinese (China)","locale":"zh-CN","namespaces":["portal"],"fallbacks":["zh","en"]},{"display":"Chinese (Taiwan)","locale":"zh-TW","namespaces":["portal"],"fallbacks":["en"]}]}
\ No newline at end of file
diff --git a/internal/server/asset.go b/internal/server/asset.go
index 57905a283..6b6454e8f 100644
--- a/internal/server/asset.go
+++ b/internal/server/asset.go
@@ -102,7 +102,13 @@ func newLocalesPathResolver() func(ctx *fasthttp.RequestCtx) (supported bool, as
 	}
 
 	aliases := map[string]string{
+		"cs": "cs-CZ",
+		"da": "da-DK",
+		"el": "el-GR",
+		"ja": "ja-JP",
+		"nb": "nb-NO",
 		"sv": "sv-SE",
+		"uk": "uk-UA",
 		"zh": "zh-CN",
 	}
 
diff --git a/internal/server/locales/ar-SA/portal.json b/internal/server/locales/ar-SA/portal.json
new file mode 100644
index 000000000..eee796828
--- /dev/null
+++ b/internal/server/locales/ar-SA/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "قبول",
+	"Access your email addresses": "الوصول إلى عناوين بريدك الإلكتروني",
+	"Access your group membership": "الوصول إلى عضوية المجموعة الخاصة بك",
+	"Access your profile information": "الوصول إلى معلومات ملفك الشخصي",
+	"An email has been sent to your address to complete the process": "تم إرسال بريد إلكتروني إلى العنوان الخاص بك لإكمال العملية.",
+	"Authenticated": "مصادق",
+	"Automatically refresh these permissions without user interaction": "تحديث هذه الأذونات تلقائياً بدون تفاعل المستخدم",
+	"Cancel": "إلغاء",
+	"Client ID": "معرف العميل: {{client_id}}",
+	"Consent Request": "طلب الموافقة",
+	"Contact your administrator to register a device": "اتصل بالمسؤول لتسجيل الجهاز.",
+	"Could not obtain user settings": "تعذر الحصول على إعدادات المستخدم",
+	"Deny": "رفض",
+	"Done": "تم",
+	"Enter new password": "أدخل كلمة مرور جديدة",
+	"Enter one-time password": "أدخل كلمة المرور لمرة واحدة",
+	"Failed to register device, the provided link is expired or has already been used": "فشل في تسجيل الجهاز، انتهت صلاحية الرابط المتوفر أو تم استخدامه بالفعل",
+	"Hi": "Hi",
+	"Incorrect username or password": "اسم المستخدم أو كلمة المرور غير صحيحة.",
+	"Loading": "جاري التحميل",
+	"Login": "تسجيل الدخول",
+	"Logout": "تسجيل الخروج",
+	"Lost your device?": "فقدت جهازك؟",
+	"Methods": "الأساليب",
+	"Must be at least {{len}} characters in length": "يجب أن يكون على الأقل {{len}} حرف في الطول",
+	"Must have at least one UPPERCASE letter": "يجب أن يكون لديك حرف واحد على الأقل",
+	"Must have at least one lowercase letter": "يجب أن يحتوي على حرف صغير واحد على الأقل",
+	"Must have at least one number": "يجب أن يكون لديك رقم واحد على الأقل",
+	"Must have at least one special character": "يجب أن يكون لديك حرف خاص واحد على الأقل",
+	"Must not be more than {{len}} characters in length": "يجب ألا يكون أكثر من {{len}} حرف في الطول",
+	"Need Google Authenticator?": "هل تحتاج إلى مؤلف جوجل؟",
+	"New password": "كلمة مرور جديدة",
+	"No verification token provided": "لم يتم تقديم رمز التحقق",
+	"OTP Secret copied to clipboard": "تم نسخ OTP السرية إلى الحافظة.",
+	"OTP URL copied to clipboard": "تم نسخ رابط OTP إلى الحافظة.",
+	"One-Time Password": "كلمة المرور لمرة واحدة",
+	"Password has been reset": "تم إعادة تعيين كلمة المرور.",
+	"Password": "كلمة المرور",
+	"Passwords do not match": "كلمة المرور غير متطابقة.",
+	"Powered by": "مدعوم من قبل",
+	"Push Notification": "دفع الإشعار",
+	"Register device": "تسجيل الجهاز",
+	"Register your first device by clicking on the link below": "قم بتسجيل جهازك الأول بالنقر على الرابط أدناه.",
+	"Remember Consent": "تذكر الموافقة",
+	"Remember me": "تذكر لي",
+	"Repeat new password": "تكرار كلمة المرور الجديدة",
+	"Reset password": "إعادة تعيين كلمة المرور",
+	"Reset password?": "إعادة تعيين كلمة المرور؟",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "سرية",
+	"Security Key - WebAuthN": "مفتاح الأمان - WebAuthN",
+	"Select a Device": "حدد جهاز",
+	"Sign in": "تسجيل الدخول",
+	"Sign out": "تسجيل الخروج",
+	"The above application is requesting the following permissions": "طلب التطبيق أعلاه الأذونات التالية",
+	"The password does not meet the password policy": "كلمة المرور لا تفي بسياسة كلمة المرور",
+	"The resource you're attempting to access requires two-factor authentication": "يتطلب المورد الذي تحاول الوصول إليه مصادقة ذات عاملين.",
+	"There was a problem initiating the registration process": "كانت هناك مشكلة في بدء عملية التسجيل",
+	"There was an issue completing the process. The verification token might have expired": "كانت هناك مشكلة في إكمال العملية، ربما تكون علامة التحقق قد انتهت.",
+	"There was an issue initiating the password reset process": "حدثت مشكلة أثناء بدء عملية إعادة تعيين كلمة المرور.",
+	"There was an issue resetting the password": "حدثت مشكلة أثناء إعادة تعيين كلمة المرور",
+	"There was an issue signing out": "حدثت مشكلة أثناء تسجيل الدخول",
+	"This saves this consent as a pre-configured consent for future use": "هذا يحفظ هذه الموافقة كموافقة مهيأة مسبقا للاستخدام في المستقبل",
+	"Time-based One-Time Password": "كلمة المرور لمرة واحدة حسب الوقت",
+	"Use OpenID to verify your identity": "استخدم OpenID للتحقق من هويتك",
+	"Username": "اسم المستخدم",
+	"You must open the link from the same device and browser that initiated the registration process": "يجب فتح الرابط من نفس الجهاز والمتصفح الذي بدأ عملية التسجيل",
+	"You're being signed out and redirected": "يتم تسجيل الخروج وإعادة التوجيه",
+	"Your supplied password does not meet the password policy requirements": "كلمة المرور المقدمة الخاصة بك لا تفي بمتطلبات سياسة كلمة المرور."
+}
diff --git a/internal/server/locales/cs-CZ/portal.json b/internal/server/locales/cs-CZ/portal.json
new file mode 100644
index 000000000..f5dd71945
--- /dev/null
+++ b/internal/server/locales/cs-CZ/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Přijmout",
+	"Access your email addresses": "Přístup k vašim e-mailovým adresám",
+	"Access your group membership": "Přístup k Vašemu členství ve skupině",
+	"Access your profile information": "Přístup k informacím o vašem profilu",
+	"An email has been sent to your address to complete the process": "Na vaši adresu byl odeslán e-mail pro dokončení procesu.",
+	"Authenticated": "Ověřeno",
+	"Automatically refresh these permissions without user interaction": "Automaticky obnovit tato oprávnění bez interakce uživatele",
+	"Cancel": "Zrušit",
+	"Client ID": "ID klienta: {{client_id}}",
+	"Consent Request": "Žádost o souhlas",
+	"Contact your administrator to register a device": "Obraťte se na správce pro registraci zařízení.",
+	"Could not obtain user settings": "Nelze získat uživatelské nastavení",
+	"Deny": "Zamítnout",
+	"Done": "Hotovo",
+	"Enter new password": "Zadejte nové heslo",
+	"Enter one-time password": "Zadejte jednorázové heslo",
+	"Failed to register device, the provided link is expired or has already been used": "Registrace zařízení se nezdařila, odkaz vypršel nebo byl již použit",
+	"Hi": "Hi",
+	"Incorrect username or password": "Nesprávné uživatelské jméno nebo heslo.",
+	"Loading": "Načítání",
+	"Login": "Přihlásit se",
+	"Logout": "Odhlásit se",
+	"Lost your device?": "Zapomněli jste své zařízení?",
+	"Methods": "Metody",
+	"Must be at least {{len}} characters in length": "Musí mít alespoň {{len}} znaků",
+	"Must have at least one UPPERCASE letter": "Musí mít alespoň jedno písmeno UPPERCASE",
+	"Must have at least one lowercase letter": "Musí mít alespoň jedno malé písmeno",
+	"Must have at least one number": "Musí mít alespoň jedno číslo",
+	"Must have at least one special character": "Musí mít alespoň jeden speciální znak",
+	"Must not be more than {{len}} characters in length": "Nesmí být delší než {{len}} znaků",
+	"Need Google Authenticator?": "Potřebujete Google Authenticator?",
+	"New password": "Nové heslo",
+	"No verification token provided": "Nebyl zadán ověřovací token",
+	"OTP Secret copied to clipboard": "OTP tajný klíč zkopírován do schránky.",
+	"OTP URL copied to clipboard": "OTP URL zkopírováno do schránky.",
+	"One-Time Password": "Jednorázové heslo",
+	"Password has been reset": "Heslo bylo obnoveno.",
+	"Password": "Heslo",
+	"Passwords do not match": "Hesla se neshodují.",
+	"Powered by": "Běží na",
+	"Push Notification": "Push oznámení",
+	"Register device": "Registrovat zařízení",
+	"Register your first device by clicking on the link below": "Zaregistrujte své první zařízení kliknutím na odkaz níže.",
+	"Remember Consent": "Zapamatovat souhlas",
+	"Remember me": "Zapamatovat si mě",
+	"Repeat new password": "Opakovat nové heslo",
+	"Reset password": "Obnovit heslo",
+	"Reset password?": "Obnovit heslo?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Tajný klíč",
+	"Security Key - WebAuthN": "Bezpečnostní klíč - WebAuthN",
+	"Select a Device": "Vybrat zařízení",
+	"Sign in": "Přihlásit se",
+	"Sign out": "Odhlásit se",
+	"The above application is requesting the following permissions": "Výše uvedená aplikace požaduje následující oprávnění",
+	"The password does not meet the password policy": "Heslo nesplňuje zásady hesla",
+	"The resource you're attempting to access requires two-factor authentication": "Dokument, ke kterému se snažíte přistupovat, vyžaduje dvoufaktorové ověření.",
+	"There was a problem initiating the registration process": "Vyskytl se problém při zahájení procesu registrace",
+	"There was an issue completing the process. The verification token might have expired": "Vyskytl se problém při dokončování procesu. Ověřovací token možná vypršel.",
+	"There was an issue initiating the password reset process": "Při zahájení procesu obnovení hesla došlo k chybě.",
+	"There was an issue resetting the password": "Při obnovování hesla došlo k problému",
+	"There was an issue signing out": "Při odhlášení došlo k problému",
+	"This saves this consent as a pre-configured consent for future use": "Toto uloží tento souhlas jako přednastavený souhlas pro budoucí použití",
+	"Time-based One-Time Password": "Časově založené jednočasové heslo",
+	"Use OpenID to verify your identity": "Použijte OpenID k ověření Vaší identity",
+	"Username": "Uživatelské jméno",
+	"You must open the link from the same device and browser that initiated the registration process": "Musíte otevřít odkaz ze stejného zařízení a prohlížeče, který inicioval proces registrace",
+	"You're being signed out and redirected": "Probíhá odhlášení a přesměrování",
+	"Your supplied password does not meet the password policy requirements": "Zadané heslo nesplňuje požadavky zásad hesla."
+}
diff --git a/internal/server/locales/da-DK/portal.json b/internal/server/locales/da-DK/portal.json
new file mode 100644
index 000000000..b28663849
--- /dev/null
+++ b/internal/server/locales/da-DK/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Accepter",
+	"Access your email addresses": "Få adgang til dine e-mailadresser",
+	"Access your group membership": "Få adgang til dit gruppemedlemskab",
+	"Access your profile information": "Få adgang til dine profiloplysninger",
+	"An email has been sent to your address to complete the process": "En e-mail er blevet sendt til din adresse for at fuldføre processen.",
+	"Authenticated": "Godkendt",
+	"Automatically refresh these permissions without user interaction": "Opdater automatisk disse tilladelser uden brugerinteraktion",
+	"Cancel": "Annuller",
+	"Client ID": "Klient ID: {{client_id}}",
+	"Consent Request": "Samtykke Anmodning",
+	"Contact your administrator to register a device": "Kontakt din administrator for at registrere en enhed.",
+	"Could not obtain user settings": "Kunne ikke få brugerindstillinger",
+	"Deny": "Afvis",
+	"Done": "Udført",
+	"Enter new password": "Indtast ny adgangskode",
+	"Enter one-time password": "Indtast engangs adgangskode",
+	"Failed to register device, the provided link is expired or has already been used": "Kunne ikke registrere enheden, det medfølgende link er udløbet eller er allerede blevet brugt",
+	"Hi": "Hi",
+	"Incorrect username or password": "Forkert brugernavn eller adgangskode.",
+	"Loading": "Indlæser",
+	"Login": "Login",
+	"Logout": "Log Ud",
+	"Lost your device?": "Har du mistet din enhed?",
+	"Methods": "Metoder",
+	"Must be at least {{len}} characters in length": "Skal være mindst {{len}} tegn i længden",
+	"Must have at least one UPPERCASE letter": "Skal have mindst et UPPERCASE bogstav",
+	"Must have at least one lowercase letter": "Skal have mindst et lille bogstav",
+	"Must have at least one number": "Skal have mindst et tal",
+	"Must have at least one special character": "Skal have mindst et specialtegn",
+	"Must not be more than {{len}} characters in length": "Må ikke være mere end {{len}} tegn i længden",
+	"Need Google Authenticator?": "Har du brug for Google Authenticator?",
+	"New password": "Ny adgangskode",
+	"No verification token provided": "Ingen bekræftelsestoken angivet",
+	"OTP Secret copied to clipboard": "OTP Secret kopieret til udklipsholder.",
+	"OTP URL copied to clipboard": "OTP URL kopieret til udklipsholder.",
+	"One-Time Password": "Engangs Adgangskode",
+	"Password has been reset": "Adgangskode er blevet nulstillet.",
+	"Password": "Adgangskode",
+	"Passwords do not match": "Adgangskoder stemmer ikke overens.",
+	"Powered by": "Drevet af",
+	"Push Notification": "Push Notification",
+	"Register device": "Registrer enhed",
+	"Register your first device by clicking on the link below": "Registrer din første enhed ved at klikke på linket nedenfor.",
+	"Remember Consent": "Husk Samtykke",
+	"Remember me": "Husk mig",
+	"Repeat new password": "Gentag ny adgangskode",
+	"Reset password": "Nulstil adgangskode",
+	"Reset password?": "Nulstil adgangskode?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Hemmelighed",
+	"Security Key - WebAuthN": "Sikkerhedsnøgle - WebAuthN",
+	"Select a Device": "Vælg en enhed",
+	"Sign in": "Log ind",
+	"Sign out": "Log ud",
+	"The above application is requesting the following permissions": "Ovenstående program anmoder om følgende tilladelser",
+	"The password does not meet the password policy": "Adgangskoden opfylder ikke adgangskodepolitikken",
+	"The resource you're attempting to access requires two-factor authentication": "Den ressource, du forsøger at få adgang til, kræver to-faktor godkendelse.",
+	"There was a problem initiating the registration process": "Der var et problem med at indlede registreringsprocessen",
+	"There was an issue completing the process. The verification token might have expired": "Der opstod et problem ved at fuldføre processen. Bekræftelsestoken kan være udløbet.",
+	"There was an issue initiating the password reset process": "Der opstod et problem ved at starte nulstilling af adgangskode.",
+	"There was an issue resetting the password": "Der opstod et problem ved nulstilling af adgangskoden",
+	"There was an issue signing out": "Der opstod et problem ved at logge ud",
+	"This saves this consent as a pre-configured consent for future use": "Dette gemmer dette samtykke som et prækonfigureret samtykke til fremtidig brug",
+	"Time-based One-Time Password": "Tidsbaseret Engangskodeord",
+	"Use OpenID to verify your identity": "Brug OpenID til at bekræfte din identitet",
+	"Username": "Brugernavn",
+	"You must open the link from the same device and browser that initiated the registration process": "Du skal åbne linket fra den samme enhed og browser, der startede registreringsprocessen",
+	"You're being signed out and redirected": "Du bliver logget ud og omdirigeret",
+	"Your supplied password does not meet the password policy requirements": "Din indtastede adgangskode opfylder ikke kravene til adgangskodepolitik."
+}
diff --git a/internal/server/locales/el-GR/portal.json b/internal/server/locales/el-GR/portal.json
new file mode 100644
index 000000000..a7d24fe75
--- /dev/null
+++ b/internal/server/locales/el-GR/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Αποδοχή",
+	"Access your email addresses": "Πρόσβαση στις διευθύνσεις email σας",
+	"Access your group membership": "Πρόσβαση στην ομάδα σας",
+	"Access your profile information": "Πρόσβαση στις πληροφορίες του προφίλ σας",
+	"An email has been sent to your address to complete the process": "Ένα μήνυμα ηλεκτρονικού ταχυδρομείου στάλθηκε στη διεύθυνσή σας για να ολοκληρωθεί η διαδικασία.",
+	"Authenticated": "Επικυρώθηκε",
+	"Automatically refresh these permissions without user interaction": "Αυτόματη ανανέωση αυτών των δικαιωμάτων χωρίς αλληλεπίδραση χρήστη",
+	"Cancel": "Ακύρωση",
+	"Client ID": "ID πελάτη: {{client_id}}",
+	"Consent Request": "Αίτημα Συναίνεσης",
+	"Contact your administrator to register a device": "Επικοινωνήστε με το διαχειριστή σας για να καταχωρήσετε μια συσκευή.",
+	"Could not obtain user settings": "Αδυναμία λήψης ρυθμίσεων χρήστη",
+	"Deny": "Άρνηση",
+	"Done": "Ολοκληρώθηκε",
+	"Enter new password": "Εισάγετε νέο κωδικό πρόσβασης",
+	"Enter one-time password": "Εισάγετε κωδικό μιας χρήσης",
+	"Failed to register device, the provided link is expired or has already been used": "Αποτυχία εγγραφής συσκευής, ο παρεχόμενος σύνδεσμος έχει λήξει ή έχει ήδη χρησιμοποιηθεί",
+	"Hi": "Hi",
+	"Incorrect username or password": "Λάθος όνομα χρήστη ή κωδικός πρόσβασης.",
+	"Loading": "Φόρτωση",
+	"Login": "Είσοδος",
+	"Logout": "Αποσύνδεση",
+	"Lost your device?": "Χάσατε τη συσκευή σας?",
+	"Methods": "Μέθοδοι",
+	"Must be at least {{len}} characters in length": "Πρέπει να είναι τουλάχιστον {{len}} χαρακτήρες σε μήκος",
+	"Must have at least one UPPERCASE letter": "Πρέπει να έχει τουλάχιστον ένα γράμμα UPPERCASE",
+	"Must have at least one lowercase letter": "Πρέπει να έχει τουλάχιστον ένα πεζό γράμμα",
+	"Must have at least one number": "Πρέπει να έχει τουλάχιστον έναν αριθμό",
+	"Must have at least one special character": "Πρέπει να έχει τουλάχιστον έναν ειδικό χαρακτήρα",
+	"Must not be more than {{len}} characters in length": "Πρέπει να μην υπερβαίνει τους {{len}} χαρακτήρες σε μήκος",
+	"Need Google Authenticator?": "Χρειάζεστε Google Authenticator?",
+	"New password": "Νέος κωδικός πρόσβασης",
+	"No verification token provided": "Δεν παρέχεται διακριτικό επαλήθευσης",
+	"OTP Secret copied to clipboard": "Το OTP Secret αντιγράφηκε στο πρόχειρο.",
+	"OTP URL copied to clipboard": "Η διεύθυνση URL OTP αντιγράφηκε στο πρόχειρο.",
+	"One-Time Password": "Κωδικός Μίας Χρήσης",
+	"Password has been reset": "Έχει γίνει επαναφορά του κωδικού πρόσβασης.",
+	"Password": "Κωδικός",
+	"Passwords do not match": "Οι κωδικοί πρόσβασης δεν ταιριάζουν.",
+	"Powered by": "Τροφοδοτείται από",
+	"Push Notification": "Ειδοποίηση Push",
+	"Register device": "Εγγραφή συσκευής",
+	"Register your first device by clicking on the link below": "Καταχωρήστε την πρώτη σας συσκευή κάνοντας κλικ στον παρακάτω σύνδεσμο.",
+	"Remember Consent": "Απομνημόνευση Συγκατάθεσης",
+	"Remember me": "Να με θυμάσαι",
+	"Repeat new password": "Επανάληψη νέου κωδικού πρόσβασης",
+	"Reset password": "Επαναφορά κωδικού πρόσβασης",
+	"Reset password?": "Επαναφορά κωδικού πρόσβασης?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Μυστικό",
+	"Security Key - WebAuthN": "Κλειδί Ασφαλείας - WebAuthn",
+	"Select a Device": "Επιλέξτε μια συσκευή",
+	"Sign in": "Σύνδεση",
+	"Sign out": "Αποσύνδεση",
+	"The above application is requesting the following permissions": "Η παραπάνω εφαρμογή ζητά τα ακόλουθα δικαιώματα",
+	"The password does not meet the password policy": "Ο κωδικός πρόσβασης δεν ανταποκρίνεται στην πολιτική κωδικού πρόσβασης",
+	"The resource you're attempting to access requires two-factor authentication": "Ο πόρος που προσπαθείτε να αποκτήσετε πρόσβαση απαιτεί έλεγχο ταυτότητας δύο παραγόντων.",
+	"There was a problem initiating the registration process": "Υπήρξε ένα πρόβλημα κατά την έναρξη της διαδικασίας εγγραφής",
+	"There was an issue completing the process. The verification token might have expired": "Υπήρξε ένα ζήτημα ολοκλήρωσης της διαδικασίας. Το διακριτικό επαλήθευσης μπορεί να έχει λήξει.",
+	"There was an issue initiating the password reset process": "Υπήρξε ένα ζήτημα κατά την έναρξη της διαδικασίας επαναφοράς κωδικού πρόσβασης.",
+	"There was an issue resetting the password": "Υπήρξε ένα ζήτημα κατά την επαναφορά του κωδικού πρόσβασης",
+	"There was an issue signing out": "Υπήρξε ένα πρόβλημα αποσύνδεσης",
+	"This saves this consent as a pre-configured consent for future use": "Αυτό αποθηκεύει αυτή τη συγκατάθεση ως προδιαμορφωμένη συγκατάθεση για μελλοντική χρήση",
+	"Time-based One-Time Password": "Κωδικός Μιας Χρήσης Με Χρόνο",
+	"Use OpenID to verify your identity": "Χρησιμοποιήστε OpenID για να επαληθεύσετε την ταυτότητά σας",
+	"Username": "Όνομα Χρήστη",
+	"You must open the link from the same device and browser that initiated the registration process": "Πρέπει να ανοίξετε το σύνδεσμο από την ίδια συσκευή και το πρόγραμμα περιήγησης που ξεκίνησε τη διαδικασία εγγραφής",
+	"You're being signed out and redirected": "Είστε αποσυνδεδεμένοι και ανακατευθύνονται",
+	"Your supplied password does not meet the password policy requirements": "Ο παρεχόμενος κωδικός πρόσβασης δεν πληροί τις απαιτήσεις πολιτικής κωδικού πρόσβασης."
+}
diff --git a/internal/server/locales/es-ES/portal.json b/internal/server/locales/es-ES/portal.json
index 782ba166e..77fa1e619 100644
--- a/internal/server/locales/es-ES/portal.json
+++ b/internal/server/locales/es-ES/portal.json
@@ -5,6 +5,7 @@
 	"Access your profile information": "Acceder a tu información de perfil",
 	"An email has been sent to your address to complete the process": "Un correo ha sido enviado a su cuenta para completar el proceso.",
 	"Authenticated": "Autenticado",
+	"Automatically refresh these permissions without user interaction": "Actualizar automáticamente estos permisos sin interacción del usuario",
 	"Cancel": "Cancelar",
 	"Client ID": "ID de cliente: {{client_id}}",
 	"Consent Request": "Solicitud de consentimiento",
@@ -18,7 +19,7 @@
 	"Hi": "Hola",
 	"Incorrect username or password": "Nombre de usuario o contraseña incorrectos.",
 	"Loading": "Cargando",
-	"Login":"Iniciar Sesión",
+	"Login": "Ingresar",
 	"Logout": "Cerrar Sesión",
 	"Lost your device?": "¿Ha perdido su dispositivo?",
 	"Methods": "Métodos",
@@ -61,7 +62,7 @@
 	"There was an issue initiating the password reset process": "Hubo un problema al iniciar el proceso de restablecimiento de contraseña.",
 	"There was an issue resetting the password": "Ocurrió un error al intentar restablecer la contraseña",
 	"There was an issue signing out": "Ocurrió un error al intentar cerrar sesión",
-	"This saves this consent as a pre-configured consent for future use": "Esto guarda este consentimiento como consentimiento preconfigurado para uso futuro",
+	"This saves this consent as a pre-configured consent for future use": "Esto guarda este consentimiento como consentimiento pre-configurado para uso futuro",
 	"Time-based One-Time Password": "Contraseña de uso único - OTP",
 	"Use OpenID to verify your identity": "Utilizar OpenID para verificar su identidad",
 	"Username": "Usuario",
diff --git a/internal/server/locales/fi-FI/portal.json b/internal/server/locales/fi-FI/portal.json
new file mode 100644
index 000000000..88510732d
--- /dev/null
+++ b/internal/server/locales/fi-FI/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Hyväksy",
+	"Access your email addresses": "Käytä sähköpostiosoitteitasi",
+	"Access your group membership": "Käytä ryhmän jäsenyyttä",
+	"Access your profile information": "Käytä profiilitietojasi",
+	"An email has been sent to your address to complete the process": "Prosessin loppuun saattamiseksi on lähetetty sähköpostiosoite. @ info",
+	"Authenticated": "Todennettu",
+	"Automatically refresh these permissions without user interaction": "Päivitä nämä oikeudet automaattisesti ilman käyttäjän vuorovaikutusta",
+	"Cancel": "Peruuta",
+	"Client ID": "Asiakkaan tunnus: {{client_id}}",
+	"Consent Request": "Hyväksyntä Pyyntö",
+	"Contact your administrator to register a device": "Ota yhteyttä järjestelmänvalvojaan rekisteröidäksesi laitteen.",
+	"Could not obtain user settings": "Käyttäjän asetuksia ei saatu",
+	"Deny": "Estä",
+	"Done": "Valmis",
+	"Enter new password": "Syötä uusi salasana",
+	"Enter one-time password": "Syötä kertakäyttösalasana",
+	"Failed to register device, the provided link is expired or has already been used": "Laitteen rekisteröinti epäonnistui, annettu linkki on vanhentunut tai sitä on jo käytetty",
+	"Hi": "Hi",
+	"Incorrect username or password": "Virheellinen käyttäjätunnus tai salasana.",
+	"Loading": "Ladataan",
+	"Login": "Kirjaudu",
+	"Logout": "Kirjaudu Ulos",
+	"Lost your device?": "Unohtuiko laitteesi?",
+	"Methods": "Menetelmät",
+	"Must be at least {{len}} characters in length": "Täytyy olla vähintään {{len}} merkkiä pitkä",
+	"Must have at least one UPPERCASE letter": "Täytyy olla vähintään yksi UPPERCASE kirjain",
+	"Must have at least one lowercase letter": "Täytyy olla vähintään yksi pieni kirjain",
+	"Must have at least one number": "Täytyy olla vähintään yksi numero",
+	"Must have at least one special character": "Täytyy olla vähintään yksi erikoismerkki",
+	"Must not be more than {{len}} characters in length": "Ei saa olla enempää kuin {{len}} merkkiä",
+	"Need Google Authenticator?": "Tarvitsetko Googlen Todennus?",
+	"New password": "Uusi salasana",
+	"No verification token provided": "Vahvistusmerkkiä ei ole annettu",
+	"OTP Secret copied to clipboard": "OTP salainen kopioitu leikepöydälle.",
+	"OTP URL copied to clipboard": "OTP URL kopioitu leikepöydälle.",
+	"One-Time Password": "Kertakäyttöinen Salasana",
+	"Password has been reset": "Salasana on nollattu.",
+	"Password": "Salasana",
+	"Passwords do not match": "Salasanat eivät täsmää.",
+	"Powered by": "Palvelun tarjoaa",
+	"Push Notification": "Push-Ilmoitus",
+	"Register device": "Rekisteröi laite",
+	"Register your first device by clicking on the link below": "Rekisteröi ensimmäinen laite klikkaamalla alla olevaa linkkiä.",
+	"Remember Consent": "Muista Hyväksyntä",
+	"Remember me": "Muista minut",
+	"Repeat new password": "Toista uusi salasana",
+	"Reset password": "Nollaa salasana",
+	"Reset password?": "Palauta salasana?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Salainen",
+	"Security Key - WebAuthN": "Suojausavain - WebAuthN",
+	"Select a Device": "Valitse laite",
+	"Sign in": "Kirjaudu sisään",
+	"Sign out": "Kirjaudu ulos",
+	"The above application is requesting the following permissions": "Edellä mainittu hakemus pyytää seuraavia käyttöoikeuksia",
+	"The password does not meet the password policy": "Salasana ei vastaa salasanakäytäntöä",
+	"The resource you're attempting to access requires two-factor authentication": "Resurssi, jota yrität käyttää vaatii kaksivaiheisen todennuksen.",
+	"There was a problem initiating the registration process": "Rekisteröintiprosessin käynnistämisessä tapahtui ongelma",
+	"There was an issue completing the process. The verification token might have expired": "Prosessin loppuun saattamisessa tapahtui virhe. Vahvistusmerkki saattaa olla vanhentunut.",
+	"There was an issue initiating the password reset process": "Salasanan nollausprosessin käynnistämisessä tapahtui virhe.",
+	"There was an issue resetting the password": "Salasanan palauttamisessa tapahtui virhe",
+	"There was an issue signing out": "Sisäänkirjautuminen ulos tapahtui virhe",
+	"This saves this consent as a pre-configured consent for future use": "Tämä tallentaa tämän suostumuksen ennalta määritettynä suostumuksena tulevaa käyttöä varten",
+	"Time-based One-Time Password": "Aikaperusteinen Kertasalasana",
+	"Use OpenID to verify your identity": "Käytä OpenID:tä tunnistaaksesi henkilöllisyytesi",
+	"Username": "Käyttäjätunnus",
+	"You must open the link from the same device and browser that initiated the registration process": "Sinun on avattava linkki samasta laitteesta ja selaimesta, joka käynnisti rekisteröintiprosessin",
+	"You're being signed out and redirected": "Sinut kirjaudutaan ulos ja ohjataan uudelleen",
+	"Your supplied password does not meet the password policy requirements": "Syötetty salasana ei täytä salasanakäytännön vaatimuksia."
+}
diff --git a/internal/server/locales/it-IT/portal.json b/internal/server/locales/it-IT/portal.json
new file mode 100644
index 000000000..5a7c4afa9
--- /dev/null
+++ b/internal/server/locales/it-IT/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Accetta",
+	"Access your email addresses": "Accedi ai tuoi indirizzi email",
+	"Access your group membership": "Accedi all'iscrizione al tuo gruppo",
+	"Access your profile information": "Accedi alle informazioni del tuo profilo",
+	"An email has been sent to your address to complete the process": "Una email è stata inviata al tuo indirizzo per completare il processo.",
+	"Authenticated": "Autenticato",
+	"Automatically refresh these permissions without user interaction": "Aggiorna automaticamente queste autorizzazioni senza interazione utente",
+	"Cancel": "Annulla",
+	"Client ID": "ID cliente: {{client_id}}",
+	"Consent Request": "Richiesta Di Consenso",
+	"Contact your administrator to register a device": "Contatta l'amministratore per registrare un dispositivo.",
+	"Could not obtain user settings": "Impossibile ottenere le impostazioni utente",
+	"Deny": "Nega",
+	"Done": "Fatto",
+	"Enter new password": "Inserisci una nuova password",
+	"Enter one-time password": "Inserisci password monouso",
+	"Failed to register device, the provided link is expired or has already been used": "Impossibile registrare il dispositivo, il link fornito è scaduto o è già stato utilizzato",
+	"Hi": "Hi",
+	"Incorrect username or password": "Nome utente o password errati.",
+	"Loading": "Caricamento",
+	"Login": "Accedi",
+	"Logout": "Esci",
+	"Lost your device?": "Hai perso il dispositivo?",
+	"Methods": "Metodi",
+	"Must be at least {{len}} characters in length": "Deve essere di almeno {{len}} caratteri di lunghezza",
+	"Must have at least one UPPERCASE letter": "Deve avere almeno una lettera UPPERCASE",
+	"Must have at least one lowercase letter": "Deve avere almeno una lettera minuscola",
+	"Must have at least one number": "Deve avere almeno un numero",
+	"Must have at least one special character": "Deve avere almeno un carattere speciale",
+	"Must not be more than {{len}} characters in length": "Non deve contenere più di {{len}} caratteri di lunghezza",
+	"Need Google Authenticator?": "Hai Bisogno Di Google Authenticator?",
+	"New password": "Nuova password",
+	"No verification token provided": "Nessun token di verifica fornito",
+	"OTP Secret copied to clipboard": "OTP Secret copiato negli appunti.",
+	"OTP URL copied to clipboard": "URL OTP copiato negli appunti.",
+	"One-Time Password": "Password Unica",
+	"Password has been reset": "La password è stata reimpostata.",
+	"Password": "Password",
+	"Passwords do not match": "Le password non corrispondono.",
+	"Powered by": "Alimentato da",
+	"Push Notification": "Notifica Push",
+	"Register device": "Registra dispositivo",
+	"Register your first device by clicking on the link below": "Registra il tuo primo dispositivo cliccando sul link qui sotto.",
+	"Remember Consent": "Ricorda Consenso",
+	"Remember me": "Ricordati di me",
+	"Repeat new password": "Ripeti la nuova password",
+	"Reset password": "Reimposta password",
+	"Reset password?": "Reimposta la password?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Segreto",
+	"Security Key - WebAuthN": "Chiave Di Sicurezza - WebAuthN",
+	"Select a Device": "Seleziona un dispositivo",
+	"Sign in": "Accedi",
+	"Sign out": "Esci",
+	"The above application is requesting the following permissions": "L'applicazione di cui sopra richiede i seguenti permessi",
+	"The password does not meet the password policy": "La password non soddisfa il criterio della password",
+	"The resource you're attempting to access requires two-factor authentication": "La risorsa che stai tentando di accedere richiede un'autenticazione a due fattori.",
+	"There was a problem initiating the registration process": "Si è verificato un problema durante l'avvio del processo di registrazione",
+	"There was an issue completing the process. The verification token might have expired": "Si è verificato un problema nel completamento del processo. Il token di verifica potrebbe essere scaduto.",
+	"There was an issue initiating the password reset process": "Si è verificato un problema iniziando il processo di reimpostazione della password.",
+	"There was an issue resetting the password": "Si è verificato un problema nel reimpostare la password",
+	"There was an issue signing out": "C'è stato un problema che si è concluso",
+	"This saves this consent as a pre-configured consent for future use": "Questo salva questo consenso come consenso preconfigurato per un uso futuro",
+	"Time-based One-Time Password": "Password Una Volta Basata",
+	"Use OpenID to verify your identity": "Usa OpenID per verificare la tua identità",
+	"Username": "Username",
+	"You must open the link from the same device and browser that initiated the registration process": "È necessario aprire il link dallo stesso dispositivo e browser che ha avviato il processo di registrazione",
+	"You're being signed out and redirected": "Sei stato disconnesso e reindirizzato",
+	"Your supplied password does not meet the password policy requirements": "La password fornita non soddisfa i requisiti di politica di password."
+}
diff --git a/internal/server/locales/ja-JP/portal.json b/internal/server/locales/ja-JP/portal.json
new file mode 100644
index 000000000..11d85e036
--- /dev/null
+++ b/internal/server/locales/ja-JP/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "同意する",
+	"Access your email addresses": "メールアドレスにアクセスする",
+	"Access your group membership": "グループメンバーシップにアクセス",
+	"Access your profile information": "プロフィール情報にアクセスする",
+	"An email has been sent to your address to complete the process": "プロセスを完了するためにあなたのアドレスにメールが送信されました。",
+	"Authenticated": "認証済み",
+	"Automatically refresh these permissions without user interaction": "ユーザーの操作なしでこれらの権限を自動的に更新する",
+	"Cancel": "キャンセル",
+	"Client ID": "クライアント ID: {{client_id}}",
+	"Consent Request": "同意リクエスト",
+	"Contact your administrator to register a device": "デバイスを登録するには管理者に問い合わせてください。",
+	"Could not obtain user settings": "ユーザー設定を取得できませんでした",
+	"Deny": "拒否",
+	"Done": "完了",
+	"Enter new password": "新しいパスワードを入力",
+	"Enter one-time password": "ワンタイムパスワードを入力してください",
+	"Failed to register device, the provided link is expired or has already been used": "デバイスの登録に失敗しました。指定されたリンクは期限切れか既に使用されています。",
+	"Hi": "Hi",
+	"Incorrect username or password": "ユーザー名またはパスワードが違います。",
+	"Loading": "読み込み中",
+	"Login": "ログイン",
+	"Logout": "ログアウト",
+	"Lost your device?": "デバイスを紛失しましたか？",
+	"Methods": "メソッド",
+	"Must be at least {{len}} characters in length": "少なくとも {{len}} 文字以上でなければなりません",
+	"Must have at least one UPPERCASE letter": "少なくとも1つのUPPERCASE文字が必要です",
+	"Must have at least one lowercase letter": "少なくとも1つの小文字が必要です",
+	"Must have at least one number": "少なくとも1つの数字が必要です",
+	"Must have at least one special character": "少なくとも1つの特殊文字が必要です",
+	"Must not be more than {{len}} characters in length": "長さは {{len}} 文字以上にしてください",
+	"Need Google Authenticator?": "Google 認証システムが必要ですか？",
+	"New password": "新しいパスワード",
+	"No verification token provided": "認証トークンが提供されていません",
+	"OTP Secret copied to clipboard": "OTPシークレットをクリップボードにコピーしました。",
+	"OTP URL copied to clipboard": "OTP URL をクリップボードにコピーしました。",
+	"One-Time Password": "ワンタイムパスワード",
+	"Password has been reset": "パスワードがリセットされました。",
+	"Password": "パスワード",
+	"Passwords do not match": "パスワードが一致しません。",
+	"Powered by": "Powered by",
+	"Push Notification": "プッシュ通知",
+	"Register device": "デバイスを登録する",
+	"Register your first device by clicking on the link below": "下のリンクをクリックして、最初のデバイスを登録します。",
+	"Remember Consent": "同意を保存",
+	"Remember me": "ログイン状態を維持する",
+	"Repeat new password": "新しいパスワードを再入力",
+	"Reset password": "パスワードのリセット",
+	"Reset password?": "パスワードのリセット?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "シークレット",
+	"Security Key - WebAuthN": "セキュリティキー - WebAuthN",
+	"Select a Device": "デバイスを選択",
+	"Sign in": "サインイン",
+	"Sign out": "サインアウト",
+	"The above application is requesting the following permissions": "上記のアプリケーションは、次の権限を要求しています",
+	"The password does not meet the password policy": "パスワードがパスワードポリシーを満たしていません",
+	"The resource you're attempting to access requires two-factor authentication": "アクセスしようとしているリソースには2要素認証が必要です。",
+	"There was a problem initiating the registration process": "登録プロセスの開始時に問題が発生しました",
+	"There was an issue completing the process. The verification token might have expired": "プロセスの完了に問題がありました。検証トークンの有効期限が切れている可能性があります。",
+	"There was an issue initiating the password reset process": "パスワードのリセット処理中に問題が発生しました。",
+	"There was an issue resetting the password": "パスワードをリセットする際に問題が発生しました",
+	"There was an issue signing out": "サインアウト中に問題が発生しました",
+	"This saves this consent as a pre-configured consent for future use": "これにより、この同意を将来の使用のための事前設定された同意として保存します。",
+	"Time-based One-Time Password": "時間ベースのワンタイムパスワード",
+	"Use OpenID to verify your identity": "OpenIDを使用して身元を確認してください",
+	"Username": "ユーザー名",
+	"You must open the link from the same device and browser that initiated the registration process": "登録プロセスを開始した同じデバイスとブラウザからリンクを開く必要があります",
+	"You're being signed out and redirected": "サインアウトしてリダイレクトしています",
+	"Your supplied password does not meet the password policy requirements": "入力されたパスワードは、パスワードポリシーの要件を満たしていません。"
+}
diff --git a/internal/server/locales/nb-NO/portal.json b/internal/server/locales/nb-NO/portal.json
new file mode 100644
index 000000000..4e8737478
--- /dev/null
+++ b/internal/server/locales/nb-NO/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Godta",
+	"Access your email addresses": "Få tilgang til e-postadressene",
+	"Access your group membership": "Tilgang til ditt gruppemedlemskap",
+	"Access your profile information": "Få tilgang til profilinformasjonen din",
+	"An email has been sent to your address to complete the process": "En e-post har blitt sendt til din adresse for å fullføre prosessen.",
+	"Authenticated": "Verifisert",
+	"Automatically refresh these permissions without user interaction": "Oppdater disse tillatelsene automatisk uten brukerinteraksjon",
+	"Cancel": "Avbryt",
+	"Client ID": "Klient-ID: {{client_id}}",
+	"Consent Request": "Samtaleforespørsel",
+	"Contact your administrator to register a device": "Kontakt systemansvarlig for å registrere en enhet.",
+	"Could not obtain user settings": "Kan ikke hente brukerinnstillinger",
+	"Deny": "Avslå",
+	"Done": "Ferdig",
+	"Enter new password": "Skriv inn nytt passord",
+	"Enter one-time password": "Angi engangspassord",
+	"Failed to register device, the provided link is expired or has already been used": "Kan ikke registrere enheten, den angitte lenken er utløpt eller allerede er brukt",
+	"Hi": "Hi",
+	"Incorrect username or password": "Ugyldig brukernavn eller passord.",
+	"Loading": "Laster",
+	"Login": "Innlogging",
+	"Logout": "Logg",
+	"Lost your device?": "Har du mistet enheten?",
+	"Methods": "Metoder",
+	"Must be at least {{len}} characters in length": "Må være minst {{len}} tegn i lengde",
+	"Must have at least one UPPERCASE letter": "Må ha minst én STORE bokstav",
+	"Must have at least one lowercase letter": "Må ha minst én liten bokstav",
+	"Must have at least one number": "Må ha minst ett tall",
+	"Must have at least one special character": "Må ha minst ett spesialtegn",
+	"Must not be more than {{len}} characters in length": "Må ikke være mer enn {{len}} tegn i lengde",
+	"Need Google Authenticator?": "Trenger du Google Authenticator?",
+	"New password": "Nytt passord",
+	"No verification token provided": "Ingen verifikasjonstoken angitt",
+	"OTP Secret copied to clipboard": "Hemmelig engangspassord kopiert til utklippstavlen.",
+	"OTP URL copied to clipboard": "OTP-URL kopiert til utklippstavlen.",
+	"One-Time Password": "Engangs passord",
+	"Password has been reset": "Passordet er tilbakestilt.",
+	"Password": "Passord",
+	"Passwords do not match": "Passordene samsvarer ikke.",
+	"Powered by": "Drives av",
+	"Push Notification": "Push varsling",
+	"Register device": "Registrer enheten",
+	"Register your first device by clicking on the link below": "Registrer din første enhet ved å klikke på lenken nedenfor.",
+	"Remember Consent": "Husk samtykke",
+	"Remember me": "Husk meg",
+	"Repeat new password": "Gjenta nytt passord",
+	"Reset password": "Tilbakestill passord",
+	"Reset password?": "Tilbakestill passord?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Hemmelig",
+	"Security Key - WebAuthN": "Sikkerhetsnøkkel - WebAuthN",
+	"Select a Device": "Velg en enhet",
+	"Sign in": "Logg inn",
+	"Sign out": "Logg ut",
+	"The above application is requesting the following permissions": "Programmet ovenfor ber om følgende tillatelser",
+	"The password does not meet the password policy": "Passordet oppfyller ikke minimumskravene for passord",
+	"The resource you're attempting to access requires two-factor authentication": "Ressursen du prøver å få tilgang krever 2-trinnsinnlogging.",
+	"There was a problem initiating the registration process": "Det oppsto et problem med å starte registreringsprosessen",
+	"There was an issue completing the process. The verification token might have expired": "Det oppstod et problem under fullførelse av prosessen. Bekreftelsestokenet kan ha utløpt.",
+	"There was an issue initiating the password reset process": "Det oppstod et problem under oppstart av tilbakestilling av passord.",
+	"There was an issue resetting the password": "Det oppstod et problem under tilbakestilling av passordet",
+	"There was an issue signing out": "Et problem oppstod under utlogging",
+	"This saves this consent as a pre-configured consent for future use": "Dette lagrer dette samtykket som et forhåndskonfigurert samtykke til fremtidig bruk",
+	"Time-based One-Time Password": "Tidsbasert engangspassord",
+	"Use OpenID to verify your identity": "Bruk OpenID for å bekrefte identiteten din",
+	"Username": "Brukernavn",
+	"You must open the link from the same device and browser that initiated the registration process": "Du må åpne linken fra samme enhet og nettleser som startet registreringsprosessen",
+	"You're being signed out and redirected": "Du blir logget ut og omdirigert",
+	"Your supplied password does not meet the password policy requirements": "Ditt angitte passord oppfyller ikke kravene for passord."
+}
diff --git a/internal/server/locales/nl-NL/portal.json b/internal/server/locales/nl-NL/portal.json
index f31e38c7e..96b7759bd 100644
--- a/internal/server/locales/nl-NL/portal.json
+++ b/internal/server/locales/nl-NL/portal.json
@@ -5,6 +5,7 @@
 	"Access your profile information": "Toegang tot je profielgegevens",
 	"An email has been sent to your address to complete the process": "Er is een e-mail verzonden naar uw adres om het proces te voltooien.",
 	"Authenticated": "Geverifieerd",
+	"Automatically refresh these permissions without user interaction": "Vernieuw deze machtigingen automatisch zonder gebruikersinteractie",
 	"Cancel": "annuleren",
 	"Client ID": "Client-ID: {{client_id}}",
 	"Consent Request": "Toestemming Verzoek",
diff --git a/internal/server/locales/no-NO/portal.json b/internal/server/locales/no-NO/portal.json
new file mode 100644
index 000000000..4e8737478
--- /dev/null
+++ b/internal/server/locales/no-NO/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Godta",
+	"Access your email addresses": "Få tilgang til e-postadressene",
+	"Access your group membership": "Tilgang til ditt gruppemedlemskap",
+	"Access your profile information": "Få tilgang til profilinformasjonen din",
+	"An email has been sent to your address to complete the process": "En e-post har blitt sendt til din adresse for å fullføre prosessen.",
+	"Authenticated": "Verifisert",
+	"Automatically refresh these permissions without user interaction": "Oppdater disse tillatelsene automatisk uten brukerinteraksjon",
+	"Cancel": "Avbryt",
+	"Client ID": "Klient-ID: {{client_id}}",
+	"Consent Request": "Samtaleforespørsel",
+	"Contact your administrator to register a device": "Kontakt systemansvarlig for å registrere en enhet.",
+	"Could not obtain user settings": "Kan ikke hente brukerinnstillinger",
+	"Deny": "Avslå",
+	"Done": "Ferdig",
+	"Enter new password": "Skriv inn nytt passord",
+	"Enter one-time password": "Angi engangspassord",
+	"Failed to register device, the provided link is expired or has already been used": "Kan ikke registrere enheten, den angitte lenken er utløpt eller allerede er brukt",
+	"Hi": "Hi",
+	"Incorrect username or password": "Ugyldig brukernavn eller passord.",
+	"Loading": "Laster",
+	"Login": "Innlogging",
+	"Logout": "Logg",
+	"Lost your device?": "Har du mistet enheten?",
+	"Methods": "Metoder",
+	"Must be at least {{len}} characters in length": "Må være minst {{len}} tegn i lengde",
+	"Must have at least one UPPERCASE letter": "Må ha minst én STORE bokstav",
+	"Must have at least one lowercase letter": "Må ha minst én liten bokstav",
+	"Must have at least one number": "Må ha minst ett tall",
+	"Must have at least one special character": "Må ha minst ett spesialtegn",
+	"Must not be more than {{len}} characters in length": "Må ikke være mer enn {{len}} tegn i lengde",
+	"Need Google Authenticator?": "Trenger du Google Authenticator?",
+	"New password": "Nytt passord",
+	"No verification token provided": "Ingen verifikasjonstoken angitt",
+	"OTP Secret copied to clipboard": "Hemmelig engangspassord kopiert til utklippstavlen.",
+	"OTP URL copied to clipboard": "OTP-URL kopiert til utklippstavlen.",
+	"One-Time Password": "Engangs passord",
+	"Password has been reset": "Passordet er tilbakestilt.",
+	"Password": "Passord",
+	"Passwords do not match": "Passordene samsvarer ikke.",
+	"Powered by": "Drives av",
+	"Push Notification": "Push varsling",
+	"Register device": "Registrer enheten",
+	"Register your first device by clicking on the link below": "Registrer din første enhet ved å klikke på lenken nedenfor.",
+	"Remember Consent": "Husk samtykke",
+	"Remember me": "Husk meg",
+	"Repeat new password": "Gjenta nytt passord",
+	"Reset password": "Tilbakestill passord",
+	"Reset password?": "Tilbakestill passord?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Hemmelig",
+	"Security Key - WebAuthN": "Sikkerhetsnøkkel - WebAuthN",
+	"Select a Device": "Velg en enhet",
+	"Sign in": "Logg inn",
+	"Sign out": "Logg ut",
+	"The above application is requesting the following permissions": "Programmet ovenfor ber om følgende tillatelser",
+	"The password does not meet the password policy": "Passordet oppfyller ikke minimumskravene for passord",
+	"The resource you're attempting to access requires two-factor authentication": "Ressursen du prøver å få tilgang krever 2-trinnsinnlogging.",
+	"There was a problem initiating the registration process": "Det oppsto et problem med å starte registreringsprosessen",
+	"There was an issue completing the process. The verification token might have expired": "Det oppstod et problem under fullførelse av prosessen. Bekreftelsestokenet kan ha utløpt.",
+	"There was an issue initiating the password reset process": "Det oppstod et problem under oppstart av tilbakestilling av passord.",
+	"There was an issue resetting the password": "Det oppstod et problem under tilbakestilling av passordet",
+	"There was an issue signing out": "Et problem oppstod under utlogging",
+	"This saves this consent as a pre-configured consent for future use": "Dette lagrer dette samtykket som et forhåndskonfigurert samtykke til fremtidig bruk",
+	"Time-based One-Time Password": "Tidsbasert engangspassord",
+	"Use OpenID to verify your identity": "Bruk OpenID for å bekrefte identiteten din",
+	"Username": "Brukernavn",
+	"You must open the link from the same device and browser that initiated the registration process": "Du må åpne linken fra samme enhet og nettleser som startet registreringsprosessen",
+	"You're being signed out and redirected": "Du blir logget ut og omdirigert",
+	"Your supplied password does not meet the password policy requirements": "Ditt angitte passord oppfyller ikke kravene for passord."
+}
diff --git a/internal/server/locales/pl-PL/portal.json b/internal/server/locales/pl-PL/portal.json
new file mode 100644
index 000000000..0f5dd5593
--- /dev/null
+++ b/internal/server/locales/pl-PL/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Zaakceptuj",
+	"Access your email addresses": "Dostęp do swoich adresów e-mail",
+	"Access your group membership": "Uzyskaj dostęp do członkostwa w grupie",
+	"Access your profile information": "Dostęp do informacji o profilu",
+	"An email has been sent to your address to complete the process": "E-mail został wysłany na Twój adres w celu zakończenia procesu.",
+	"Authenticated": "Uwierzytelniony",
+	"Automatically refresh these permissions without user interaction": "Automatycznie odśwież te uprawnienia bez interakcji użytkownika",
+	"Cancel": "Anuluj",
+	"Client ID": "ID klienta: {{client_id}}",
+	"Consent Request": "Prośba o zgodę",
+	"Contact your administrator to register a device": "Skontaktuj się z administratorem, aby zarejestrować urządzenie.",
+	"Could not obtain user settings": "Nie można uzyskać ustawień użytkownika",
+	"Deny": "Odmowa",
+	"Done": "Gotowe",
+	"Enter new password": "Wprowadź nowe hasło",
+	"Enter one-time password": "Wprowadź jednorazowe hasło",
+	"Failed to register device, the provided link is expired or has already been used": "Nie udało się zarejestrować urządzenia, link wygasł lub został już użyty",
+	"Hi": "Hi",
+	"Incorrect username or password": "Nieprawidłowa nazwa użytkownika lub hasło.",
+	"Loading": "Ładowanie",
+	"Login": "Logowanie",
+	"Logout": "Wyloguj się",
+	"Lost your device?": "Utracono urządzenie?",
+	"Methods": "Metody",
+	"Must be at least {{len}} characters in length": "Musi mieć co najmniej {{len}} znaków",
+	"Must have at least one UPPERCASE letter": "Musi mieć co najmniej jedną literę UPPERCASE",
+	"Must have at least one lowercase letter": "Musi mieć co najmniej jedną małą literę",
+	"Must have at least one number": "Musi mieć co najmniej jedną liczbę",
+	"Must have at least one special character": "Musi mieć co najmniej jeden znak specjalny",
+	"Must not be more than {{len}} characters in length": "Nie może być więcej niż {{len}} znaków",
+	"Need Google Authenticator?": "Potrzebujesz Google Authenticator?",
+	"New password": "Nowe hasło",
+	"No verification token provided": "Nie podano tokenu weryfikacyjnego",
+	"OTP Secret copied to clipboard": "Hasło OTP skopiowane do schowka.",
+	"OTP URL copied to clipboard": "Adres OTP został skopiowany do schowka.",
+	"One-Time Password": "Jednorazowe hasło",
+	"Password has been reset": "Hasło zostało zresetowane",
+	"Password": "Hasło",
+	"Passwords do not match": "Hasła nie są identyczne.",
+	"Powered by": "Wspierane przez",
+	"Push Notification": "Powiadomienie push",
+	"Register device": "Zarejestruj urządzenie",
+	"Register your first device by clicking on the link below": "Zarejestruj swoje pierwsze urządzenie, klikając na poniższy link.",
+	"Remember Consent": "Zapamiętaj zgodę",
+	"Remember me": "Zapamiętaj",
+	"Repeat new password": "Powtórz nowe hasło",
+	"Reset password": "Zresetuj hasło",
+	"Reset password?": "Zresetować hasło?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Sekretny",
+	"Security Key - WebAuthN": "Klucz bezpieczeństwa - WebAuthN",
+	"Select a Device": "Wybierz urządzenie",
+	"Sign in": "Zaloguj się",
+	"Sign out": "Wyloguj się",
+	"The above application is requesting the following permissions": "Powyższa aplikacja żąda następujących uprawnień",
+	"The password does not meet the password policy": "Hasło nie jest zgodne z zasadami haseł",
+	"The resource you're attempting to access requires two-factor authentication": "Zasób, do którego próbujesz uzyskać dostęp, wymaga uwierzytelniania dwuskładnikowego.",
+	"There was a problem initiating the registration process": "Wystąpił błąd podczas inicjowania procesu rejestracji",
+	"There was an issue completing the process. The verification token might have expired": "Wystąpił problem z ukończeniem procesu. Token weryfikacyjny mógł wygasnąć.",
+	"There was an issue initiating the password reset process": "Wystąpił błąd podczas inicjowania procesu resetowania hasła.",
+	"There was an issue resetting the password": "Wystąpił błąd podczas resetowania hasła",
+	"There was an issue signing out": "Wystąpił problem podczas wylogowania",
+	"This saves this consent as a pre-configured consent for future use": "Zapisuje tę zgodę jako wstępnie skonfigurowaną zgodę do przyszłego użytku",
+	"Time-based One-Time Password": "Hasło jednorazowe oparte na czasie",
+	"Use OpenID to verify your identity": "Użyj OpenID aby zweryfikować swoją tożsamość",
+	"Username": "Nazwa użytkownika",
+	"You must open the link from the same device and browser that initiated the registration process": "Musisz otworzyć link z tego samego urządzenia i przeglądarki, która zainicjowała proces rejestracji",
+	"You're being signed out and redirected": "Jesteś wylogowany i przekierowany",
+	"Your supplied password does not meet the password policy requirements": "Podane hasło nie spełnia wymogów polityki haseł."
+}
diff --git a/internal/server/locales/pt-BR/portal.json b/internal/server/locales/pt-BR/portal.json
new file mode 100644
index 000000000..8c576bc6a
--- /dev/null
+++ b/internal/server/locales/pt-BR/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Aceitar",
+	"Access your email addresses": "Acesse seus endereços de e-mail",
+	"Access your group membership": "Acessar sua associação ao grupo",
+	"Access your profile information": "Acessar informações do seu perfil",
+	"An email has been sent to your address to complete the process": "Foi enviado um email para seu endereço para completar o processo.",
+	"Authenticated": "Autenticado",
+	"Automatically refresh these permissions without user interaction": "Atualizar estas permissões automaticamente sem interação do usuário",
+	"Cancel": "cancelar",
+	"Client ID": "ID do cliente: {{client_id}}",
+	"Consent Request": "Solicitação de consentimento",
+	"Contact your administrator to register a device": "Contate seu administrador para registrar o dispositivo.",
+	"Could not obtain user settings": "Não foi possível obter as configurações do usuário",
+	"Deny": "Recusar",
+	"Done": "Concluído",
+	"Enter new password": "Digite a nova senha",
+	"Enter one-time password": "Digite senha de uso único",
+	"Failed to register device, the provided link is expired or has already been used": "Falha ao registrar o dispositivo, o link fornecido expirou ou já foi usado",
+	"Hi": "Hi",
+	"Incorrect username or password": "Nome de usuário ou senha incorretos.",
+	"Loading": "Carregando...",
+	"Login": "Conectar-se",
+	"Logout": "Desconectar",
+	"Lost your device?": "Perdeu seu dispositivo?",
+	"Methods": "Métodos",
+	"Must be at least {{len}} characters in length": "Deve ter pelo menos {{len}} caracteres de comprimento",
+	"Must have at least one UPPERCASE letter": "Deve ter pelo menos uma letra UPPERCASE",
+	"Must have at least one lowercase letter": "Deve ter pelo menos uma letra minúscula",
+	"Must have at least one number": "Deve ter pelo menos um número",
+	"Must have at least one special character": "Deve ter pelo menos um caractere especial",
+	"Must not be more than {{len}} characters in length": "Não deve ter mais de {{len}} caracteres de comprimento",
+	"Need Google Authenticator?": "Precisa do Google Authenticator?",
+	"New password": "Nova senha",
+	"No verification token provided": "Nenhum token de verificação fornecido",
+	"OTP Secret copied to clipboard": "OTP Secret copiado para a área de transferência.",
+	"OTP URL copied to clipboard": "URL OTP copiado para a área de transferência.",
+	"One-Time Password": "Senha Única",
+	"Password has been reset": "A senha foi redefinida.",
+	"Password": "Palavra-passe",
+	"Passwords do not match": "As senhas não conferem.",
+	"Powered by": "Desenvolvido por",
+	"Push Notification": "Notificação enviada automaticamente",
+	"Register device": "Registrar dispositivo",
+	"Register your first device by clicking on the link below": "Registre seu primeiro dispositivo clicando no link abaixo.",
+	"Remember Consent": "Lembrar Consentimento",
+	"Remember me": "Lembrar de mim",
+	"Repeat new password": "Repita a nova senha",
+	"Reset password": "Redefinir senha",
+	"Reset password?": "Redefinir senha?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Segredo",
+	"Security Key - WebAuthN": "Chave de segurança - WebAuthN",
+	"Select a Device": "Selecione um dispositivo",
+	"Sign in": "Iniciar sessão",
+	"Sign out": "Encerrar sessão",
+	"The above application is requesting the following permissions": "A aplicação acima está solicitando as seguintes permissões",
+	"The password does not meet the password policy": "A senha não cumpre a política de senha",
+	"The resource you're attempting to access requires two-factor authentication": "O recurso que você está tentando acessar requer autenticação de dois fatores.",
+	"There was a problem initiating the registration process": "Houve um problema ao iniciar o processo de registro",
+	"There was an issue completing the process. The verification token might have expired": "Houve um problema ao concluir o processo. O token de verificação pode ter expirado.",
+	"There was an issue initiating the password reset process": "Ocorreu um erro ao iniciar o processo de redefinição de senha.",
+	"There was an issue resetting the password": "Houve um problema ao redefinir a senha",
+	"There was an issue signing out": "Houve um problema ao fazer logout",
+	"This saves this consent as a pre-configured consent for future use": "Isto salva este consentimento como um consentimento pré-configurado para uso futuro",
+	"Time-based One-Time Password": "Senha baseada em tempo único",
+	"Use OpenID to verify your identity": "Use OpenID para verificar sua identidade",
+	"Username": "Usuário:",
+	"You must open the link from the same device and browser that initiated the registration process": "Você deve abrir o link do mesmo dispositivo e navegador que iniciou o processo de registro",
+	"You're being signed out and redirected": "Você está sendo desconectado e redirecionado",
+	"Your supplied password does not meet the password policy requirements": "A sua senha fornecida não atende aos requisitos da política de senha."
+}
diff --git a/internal/server/locales/ro-RO/portal.json b/internal/server/locales/ro-RO/portal.json
new file mode 100644
index 000000000..b5f62cd03
--- /dev/null
+++ b/internal/server/locales/ro-RO/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Acceptă",
+	"Access your email addresses": "Accesează-ți adresele de e-mail",
+	"Access your group membership": "Accesează apartenența la grup",
+	"Access your profile information": "Accesează-ți informațiile de profil",
+	"An email has been sent to your address to complete the process": "Un e-mail a fost trimis la adresa dvs. pentru a finaliza procesul.",
+	"Authenticated": "Autentificat",
+	"Automatically refresh these permissions without user interaction": "Împrospătează automat aceste permisiuni fără interacțiunea utilizatorului",
+	"Cancel": "Anulează",
+	"Client ID": "ID client: {{client_id}}",
+	"Consent Request": "Cerere de consimțământ",
+	"Contact your administrator to register a device": "Contactați administratorul pentru a înregistra un dispozitiv.",
+	"Could not obtain user settings": "Nu s-au putut obține setările utilizatorului",
+	"Deny": "Refuză",
+	"Done": "Terminat",
+	"Enter new password": "Introduceți parola nouă",
+	"Enter one-time password": "Introduceți parola unică",
+	"Failed to register device, the provided link is expired or has already been used": "Eșuare înregistrare dispozitiv, link-ul furnizat este expirat sau a fost deja utilizat",
+	"Hi": "Hi",
+	"Incorrect username or password": "Nume de utilizator sau parolă incorecte.",
+	"Loading": "Încărcare",
+	"Login": "Autentificare",
+	"Logout": "Deconectare",
+	"Lost your device?": "Aţi pierdut dispozitivul?",
+	"Methods": "Metode",
+	"Must be at least {{len}} characters in length": "Trebuie să aibă cel puțin {{len}} caractere în lungime",
+	"Must have at least one UPPERCASE letter": "Trebuie să aibă cel puţin o literă UPPERCASE",
+	"Must have at least one lowercase letter": "Trebuie să aibă cel puțin o literă mică",
+	"Must have at least one number": "Trebuie să aibă cel puțin un număr",
+	"Must have at least one special character": "Trebuie să aibă cel puțin un caracter special",
+	"Must not be more than {{len}} characters in length": "Nu trebuie să aibă mai mult de {{len}} caractere lungime",
+	"Need Google Authenticator?": "Ai nevoie de autentificatorul Google?",
+	"New password": "Parola nouă",
+	"No verification token provided": "Niciun token de verificare furnizat",
+	"OTP Secret copied to clipboard": "Secret OTP copiat în clipboard.",
+	"OTP URL copied to clipboard": "URL OTP copiat în clipboard.",
+	"One-Time Password": "Parolă unică",
+	"Password has been reset": "Parola a fost resetată.",
+	"Password": "Parolă",
+	"Passwords do not match": "Parolele nu se potrivesc.",
+	"Powered by": "Oferit de",
+	"Push Notification": "Notificare push",
+	"Register device": "Înregistrează dispozitivul",
+	"Register your first device by clicking on the link below": "Înregistrează primul tău dispozitiv făcând clic pe link-ul de mai jos.",
+	"Remember Consent": "Ține minte consimțământul",
+	"Remember me": "Ține-mă minte",
+	"Repeat new password": "Repetă parola nouă",
+	"Reset password": "Resetare parolă",
+	"Reset password?": "Resetați parola?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Secret",
+	"Security Key - WebAuthN": "Cheie de securitate - WebAuthN",
+	"Select a Device": "Selectați un dispozitiv",
+	"Sign in": "Autentificare",
+	"Sign out": "Deconectare",
+	"The above application is requesting the following permissions": "Aplicația de mai sus solicită următoarele permisiuni",
+	"The password does not meet the password policy": "Parola nu îndeplinește politica de parolă",
+	"The resource you're attempting to access requires two-factor authentication": "Resursa pe care încercați să o accesați necesită autentificarea cu doi factori.",
+	"There was a problem initiating the registration process": "A existat o problemă la inițierea procesului de înregistrare",
+	"There was an issue completing the process. The verification token might have expired": "A apărut o problemă la finalizarea procesului. Este posibil ca simbolul de verificare să fi expirat.",
+	"There was an issue initiating the password reset process": "A apărut o problemă la inițierea procesului de resetare a parolei.",
+	"There was an issue resetting the password": "A apărut o problemă la resetarea parolei",
+	"There was an issue signing out": "A existat o problemă de deconectare",
+	"This saves this consent as a pre-configured consent for future use": "Acest lucru salvează consimțământul ca un consimțământ pre-configurat pentru utilizare viitoare",
+	"Time-based One-Time Password": "Parolă unică bazată pe timp",
+	"Use OpenID to verify your identity": "Folosiți OpenID pentru a vă verifica identitatea",
+	"Username": "Nume",
+	"You must open the link from the same device and browser that initiated the registration process": "Trebuie să deschideți link-ul de pe același dispozitiv și browser care a inițiat procesul de înregistrare",
+	"You're being signed out and redirected": "Ești deconectat și redirecționat",
+	"Your supplied password does not meet the password policy requirements": "Parola furnizată de dvs. nu îndeplinește cerințele politicii de parolă."
+}
diff --git a/internal/server/locales/ru-RU/portal.json b/internal/server/locales/ru-RU/portal.json
index e7586c4c6..092def962 100644
--- a/internal/server/locales/ru-RU/portal.json
+++ b/internal/server/locales/ru-RU/portal.json
@@ -5,6 +5,7 @@
 	"Access your profile information": "Доступ к информации вашего профиля",
 	"An email has been sent to your address to complete the process": "На вашу почту было отправлено электронное письмо для завершения процесса.",
 	"Authenticated": "Авторизован",
+	"Automatically refresh these permissions without user interaction": "Автоматически обновлять эти разрешения без взаимодействия пользователя",
 	"Cancel": "Отменить",
 	"Client ID": "Идентификатор пользователя: {{client_id}}",
 	"Consent Request": "Запрос согласия",
@@ -18,6 +19,7 @@
 	"Hi": "Здравствуйте",
 	"Incorrect username or password": "Неправильное имя пользователя или пароль.",
 	"Loading": "Загрузка",
+	"Login": "Логин",
 	"Logout": "Выход",
 	"Lost your device?": "Потеряли свое устройство?",
 	"Methods": "Методы",
@@ -36,6 +38,7 @@
 	"Password has been reset": "Пароль был сброшен.",
 	"Password": "Пароль",
 	"Passwords do not match": "Пароли не совпадают.",
+	"Powered by": "При поддержке",
 	"Push Notification": "Push-уведомление",
 	"Register device": "Регистрация устройства",
 	"Register your first device by clicking on the link below": "Зарегистрируйте свое первое устройство, перейдя по ссылке ниже.",
diff --git a/internal/server/locales/sv-SE/portal.json b/internal/server/locales/sv-SE/portal.json
index 20f8e1948..abf8a6cad 100644
--- a/internal/server/locales/sv-SE/portal.json
+++ b/internal/server/locales/sv-SE/portal.json
@@ -3,8 +3,9 @@
 	"Access your email addresses": "Hantera din e-postadress",
 	"Access your group membership": "Hantera dina gruppmedlemskap",
 	"Access your profile information": "Hantera din profilinformation",
-	"An email has been sent to your address to complete the process": "Ett mejl har skickats till din e-postadress för att slutföra processen.",
-	"Authenticated": "Autentiserad",
+	"An email has been sent to your address to complete the process": "Ett mejl har skickas till din e-postadress för att slutföra processen.",
+	"Authenticated": "Autentiserat",
+	"Automatically refresh these permissions without user interaction": "Uppdatera automatiskt dessa behörigheter utan användarinteraktion",
 	"Cancel": "Avbryt",
 	"Client ID": "Klient-ID: {{client_id}}",
 	"Consent Request": "Begäran om medgivande",
@@ -15,17 +16,18 @@
 	"Enter new password": "Skriv ditt nya lösenord",
 	"Enter one-time password": "Skriv ditt engångslösenord",
 	"Failed to register device, the provided link is expired or has already been used": "Enhetsregistreringen misslyckades, den angivna länken har utgått eller redan blivit använd.",
-	"Hi": "Hej",
+	"Hi": "Hej!",
 	"Incorrect username or password": "Fel användarnamn eller lösenord",
 	"Loading": "Läser in",
+	"Login": "Inloggning",
 	"Logout": "Logga ut",
 	"Lost your device?": "Har du tappat bort din enhet?",
 	"Methods": "Metoder",
 	"Must be at least {{len}} characters in length": "Måste vara minst {{len}} tecken långt",
-	"Must have at least one UPPERCASE letter": "Måste innehålla minst en stor bokstav",
-	"Must have at least one lowercase letter": "Måste innehålla minst en liten bokstav",
-	"Must have at least one number": "Måste innehålla minst ett nummer",
-	"Must have at least one special character": "Måste innehålla minst ett specialtecken",
+	"Must have at least one UPPERCASE letter": "Måste ha minst en UPPERCASE bokstav",
+	"Must have at least one lowercase letter": "Måste ha minst en liten bokstav",
+	"Must have at least one number": "Måste ha minst ett nummer",
+	"Must have at least one special character": "Måste ha minst ett specialtecken",
 	"Must not be more than {{len}} characters in length": "Får inte vara längre än {{len}} tecken",
 	"Need Google Authenticator?": "Behöver du Google Authenticator?",
 	"New password": "Nytt lösenord",
@@ -36,12 +38,13 @@
 	"Password has been reset": "Lösenordet har blivit återställt",
 	"Password": "Lösenord",
 	"Passwords do not match": "Lösenorden matchar inte",
+	"Powered by": "Drivs av",
 	"Push Notification": "Push-avisering",
 	"Register device": "Registrera enhet",
 	"Register your first device by clicking on the link below": "Registrera din första enhet genom att klicka på länken nedan",
-	"Remember Consent": "Kom ihåg samtycke",
+	"Remember Consent": "Kom ihåg Samtycke",
 	"Remember me": "Kom ihåg mig",
-	"Repeat new password": "Upprepa nya lösenordet",
+	"Repeat new password": "Uprepa nya lösenordet",
 	"Reset password": "Återställ lösenord",
 	"Reset password?": "Återställ lösenord?",
 	"Reset": "Återställ",
@@ -59,7 +62,7 @@
 	"There was an issue initiating the password reset process": "Ett problem uppstod när processen för lösenordsåterställning startade",
 	"There was an issue resetting the password": "Ett problem uppstod med att återställa lösenordet",
 	"There was an issue signing out": "Ett problem uppstod med att logga ut",
-	"This saves this consent as a pre-configured consent for future use": "Spara detta samtycke som ett förkonfigurerat samtycke för framtida användning",
+	"This saves this consent as a pre-configured consent for future use": "Detta sparar detta samtycke som ett förkonfigurerat samtycke för framtida användning",
 	"Time-based One-Time Password": "Tidsbaserat engångslösenord",
 	"Use OpenID to verify your identity": "Använd OpenID till att verifiera din identitet",
 	"Username": "Användarnamn",
diff --git a/internal/server/locales/uk-UA/portal.json b/internal/server/locales/uk-UA/portal.json
new file mode 100644
index 000000000..857130458
--- /dev/null
+++ b/internal/server/locales/uk-UA/portal.json
@@ -0,0 +1,72 @@
+{
+	"Accept": "Прийняти",
+	"Access your email addresses": "Доступ до ваших адрес електронної пошти",
+	"Access your group membership": "Доступ до членства в групі",
+	"Access your profile information": "Доступ до інформації вашого профілю",
+	"An email has been sent to your address to complete the process": "Лист надіслано на вашу адресу для завершення процесу.",
+	"Authenticated": "Автентифіковано",
+	"Automatically refresh these permissions without user interaction": "Автоматично оновлювати ці дозволи без взаємодії з користувачем",
+	"Cancel": "Скасувати",
+	"Client ID": "ID клієнта: {{client_id}}",
+	"Consent Request": "Запит згоди",
+	"Contact your administrator to register a device": "Зверніться до вашого адміністратора для реєстрації пристрою.",
+	"Could not obtain user settings": "Не вдалося отримати налаштування користувача",
+	"Deny": "Відмовити",
+	"Done": "Виконано",
+	"Enter new password": "Введіть новий пароль",
+	"Enter one-time password": "Введіть одноразовий пароль",
+	"Failed to register device, the provided link is expired or has already been used": "Не вдалося зареєструвати пристрій, надане посилання прострочено або вже використовується",
+	"Hi": "Hi",
+	"Incorrect username or password": "Ім'я користувача або пароль помилкові.",
+	"Loading": "Завантаження",
+	"Login": "Логін",
+	"Logout": "Вихід із системи",
+	"Lost your device?": "Прогубили ваш пристрій?",
+	"Methods": "Методи",
+	"Must be at least {{len}} characters in length": "Повинно мати якнайменше {{len}} символів",
+	"Must have at least one UPPERCASE letter": "Має мати принаймні один символ UPPERCASE",
+	"Must have at least one lowercase letter": "Повинна мати принаймні одну малу літеру",
+	"Must have at least one number": "Повинно мати хоча б одне число",
+	"Must have at least one special character": "Повинно мати принаймні один спеціальний символ",
+	"Must not be more than {{len}} characters in length": "Не має бути більше {{len}} символів за довжину",
+	"Need Google Authenticator?": "Потрібен Google Authenticator?",
+	"New password": "Новий пароль",
+	"No verification token provided": "Не вказано перевірковий токен",
+	"OTP Secret copied to clipboard": "Секрет одноразових паролів скопійовано до буфера обміну.",
+	"OTP URL copied to clipboard": "URL одноразових паролів скопійовано до буфера обміну.",
+	"One-Time Password": "Одноразовий пароль",
+	"Password has been reset": "Пароль було скинуто.",
+	"Password": "Пароль",
+	"Passwords do not match": "Паролі не співпадають.",
+	"Powered by": "Працює на",
+	"Push Notification": "Push-сповіщення",
+	"Register device": "Зареєструвати пристрій",
+	"Register your first device by clicking on the link below": "Зареєструйте свій перший пристрій, натиснувши на посилання нижче.",
+	"Remember Consent": "Запам'ятати згоду",
+	"Remember me": "Запам'ятати мене",
+	"Repeat new password": "Повторіть новий пароль ще раз",
+	"Reset password": "Скинути пароль",
+	"Reset password?": "Скинути пароль?",
+	"Reset": "Reset",
+	"Scan QR Code": "Scan QR Code",
+	"Secret": "Секрет",
+	"Security Key - WebAuthN": "Ключ безпеки - WebAuthN",
+	"Select a Device": "Оберіть пристрій",
+	"Sign in": "Увійти",
+	"Sign out": "Вийти",
+	"The above application is requesting the following permissions": "Додаток запитує такі дозволи",
+	"The password does not meet the password policy": "Пароль не відповідає політиці",
+	"The resource you're attempting to access requires two-factor authentication": "Ресурс, до якого ви намагаєтеся отримати доступ, потребує двофакторної автентифікації.",
+	"There was a problem initiating the registration process": "Сталася помилка під час ініціювання процесу реєстрації",
+	"There was an issue completing the process. The verification token might have expired": "Виникла проблема із завершенням процесу. Можливо, термін дії перевірочного токена минув.",
+	"There was an issue initiating the password reset process": "Виникла проблема під час ініціювання процесу скидання пароля.",
+	"There was an issue resetting the password": "При скиданні пароля виникла проблема",
+	"There was an issue signing out": "Виникла проблема при виході",
+	"This saves this consent as a pre-configured consent for future use": "Це заощаджує цю згоду як попередньо налаштовану згоду на майбутнє",
+	"Time-based One-Time Password": "Одноразовий пароль",
+	"Use OpenID to verify your identity": "Використовуйте OpenID для підтвердження вашої особи",
+	"Username": "Ім'я користувача",
+	"You must open the link from the same device and browser that initiated the registration process": "Ви повинні відкрити посилання з того ж пристрою і браузера, який ініціював процес реєстрації",
+	"You're being signed out and redirected": "Ви виходите і перенаправлені",
+	"Your supplied password does not meet the password policy requirements": "Ваш поставлений пароль не відповідає вимогам політики пароля."
+}
diff --git a/web/src/i18n/index.ts b/web/src/i18n/index.ts
index d3e60deb8..a5cad3724 100644
--- a/web/src/i18n/index.ts
+++ b/web/src/i18n/index.ts
@@ -29,19 +29,72 @@ i18n.use(Backend)
         defaultNS: "portal",
         fallbackLng: {
             default: ["en"],
+            ar: ["en"],
+            "ar-SA": ["ar", "en"],
+            cs: ["en"],
+            "cs-CZ": ["cs", "en"],
+            da: ["en"],
+            "da-DK": ["da", "en"],
             de: ["en"],
+            el: ["en"],
+            "el-GR": ["el", "en"],
             es: ["en"],
+            fi: ["en"],
             fr: ["en"],
+            it: ["en"],
+            ja: ["en"],
+            "ja-JP": ["ja", "en"],
+            nb: ["en"],
+            "nb-NO": ["nb", "en"],
             nl: ["en"],
+            no: ["en"],
+            pl: ["en"],
             pt: ["en"],
+            "pt-BR": ["en"],
+            ro: ["en"],
             ru: ["en"],
             sv: ["en"],
             "sv-SE": ["sv", "en"],
+            uk: ["en"],
+            "uk-UA": ["uk", "en"],
             zh: ["en"],
             "zh-CN": ["zh", "en"],
             "zh-TW": ["en"],
         },
-        supportedLngs: ["en", "de", "es", "fr", "nl", "pt", "ru", "sv", "sv-SE", "zh", "zh-CN", "zh-TW"],
+        supportedLngs: [
+            "en",
+            "ar",
+            "ar-SA",
+            "cs",
+            "cs-CZ",
+            "da",
+            "da-DK",
+            "de",
+            "el",
+            "el-GR",
+            "es",
+            "fi",
+            "fr",
+            "it",
+            "ja",
+            "ja-JP",
+            "nb",
+            "nb-NO",
+            "nl",
+            "no",
+            "pl",
+            "pt",
+            "pt-BR",
+            "ro",
+            "ru",
+            "sv",
+            "sv-SE",
+            "uk",
+            "uk-UA",
+            "zh",
+            "zh-CN",
+            "zh-TW",
+        ],
         lowerCaseLng: false,
         nonExplicitSupportedLngs: true,
         interpolation: {

From 3e376404c5f9977f4584766943411af6fa400be9 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 15:16:02 +1000
Subject: [PATCH 017/263] ci: fix misc generator issues (#4019)

---
 .github/ISSUE_TEMPLATE/bug-report.yml          | 18 +++++++++---------
 .github/ISSUE_TEMPLATE/feature-request.yml     |  2 +-
 .../github_issue_template_bug_report.yml.tmpl  | 16 ++++++++--------
 cmd/authelia-gen/types.go                      |  2 +-
 4 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
index 3b107f758..b09a3616c 100644
--- a/.github/ISSUE_TEMPLATE/bug-report.yml
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -4,7 +4,7 @@ description: Report a bug
 labels:
   - type/bug/unconfirmed
   - status/needs-triage
-  - priority/4-normal
+  - priority/4/normal
 body:
   - type: markdown
     attributes:
@@ -17,7 +17,7 @@ body:
         2. Please try to give as much information as possible for us to be able to reproduce the issue and provide a quick fix.
         3. Please ensure an issue does not already exist for this potential bug.
         4. Please only provide specific versions. Latest is not a version.
-        5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files
+        5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files.
   - type: dropdown
     id: version
     attributes:
@@ -105,6 +105,13 @@ body:
       description: Describe how we can reproduce this issue
     validations:
       required: true
+  - type: textarea
+    id: expectations
+    attributes:
+      label: Expectations
+      description: Describe the desired or expected results
+    validations:
+      required: false
   - type: textarea
     id: logs
     attributes:
@@ -121,13 +128,6 @@ body:
       render: yaml
     validations:
       required: false
-  - type: textarea
-    id: expectations
-    attributes:
-      label: Expectations
-      description: Describe the desired or expected results
-    validations:
-      required: false
   - type: textarea
     id: documentation
     attributes:
diff --git a/.github/ISSUE_TEMPLATE/feature-request.yml b/.github/ISSUE_TEMPLATE/feature-request.yml
index 00a448c06..51f27a59e 100644
--- a/.github/ISSUE_TEMPLATE/feature-request.yml
+++ b/.github/ISSUE_TEMPLATE/feature-request.yml
@@ -4,7 +4,7 @@ description: Submit a Feature for Design which Has Been Submitted as an Idea and
 labels:
   - type/feature
   - status/needs-design
-  - priority/4-normal
+  - priority/4/normal
 body:
   - type: markdown
     attributes:
diff --git a/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl b/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
index 592c9383e..e947f87cd 100644
--- a/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
+++ b/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
@@ -17,7 +17,7 @@ body:
         2. Please try to give as much information as possible for us to be able to reproduce the issue and provide a quick fix.
         3. Please ensure an issue does not already exist for this potential bug.
         4. Please only provide specific versions. Latest is not a version.
-        5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files
+        5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files.
   - type: dropdown
     id: version
     attributes:
@@ -75,6 +75,13 @@ body:
       description: Describe how we can reproduce this issue
     validations:
       required: true
+  - type: textarea
+    id: expectations
+    attributes:
+      label: Expectations
+      description: Describe the desired or expected results
+    validations:
+      required: false
   - type: textarea
     id: logs
     attributes:
@@ -91,13 +98,6 @@ body:
       render: yaml
     validations:
       required: false
-  - type: textarea
-    id: expectations
-    attributes:
-      label: Expectations
-      description: Describe the desired or expected results
-    validations:
-      required: false
   - type: textarea
     id: documentation
     attributes:
diff --git a/cmd/authelia-gen/types.go b/cmd/authelia-gen/types.go
index e812b231c..7c47772e8 100644
--- a/cmd/authelia-gen/types.go
+++ b/cmd/authelia-gen/types.go
@@ -80,7 +80,7 @@ var labelPriorityDescriptions = [...]string{
 }
 
 func (p labelPriority) String() string {
-	return fmt.Sprintf("%s/%d-%s", labelAreaPrefixPriority, p+1, strings.ToLower(labelPriorityDescriptions[p]))
+	return fmt.Sprintf("%s/%d/%s", labelAreaPrefixPriority, p+1, strings.ToLower(labelPriorityDescriptions[p]))
 }
 
 func (p labelPriority) Description() string {

From 2947d3501484ce5a250bb797af79910ef95c64fe Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 15:44:29 +1000
Subject: [PATCH 018/263] ci: fix misc issue template issues (#4020)

---
 .github/ISSUE_TEMPLATE/bug-report.yml                           | 1 +
 .github/ISSUE_TEMPLATE/feature-request.yml                      | 2 +-
 .../templates/github_issue_template_bug_report.yml.tmpl         | 1 +
 .../templates/github_issue_template_feature.yml.tmpl            | 2 +-
 4 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
index b09a3616c..19d5af6ab 100644
--- a/.github/ISSUE_TEMPLATE/bug-report.yml
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -18,6 +18,7 @@ body:
         3. Please ensure an issue does not already exist for this potential bug.
         4. Please only provide specific versions. Latest is not a version.
         5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files.
+        6. Please consider including a [HTTP Archive File](https://www.authelia.com/r/har) if you're having redirection issues.
   - type: dropdown
     id: version
     attributes:
diff --git a/.github/ISSUE_TEMPLATE/feature-request.yml b/.github/ISSUE_TEMPLATE/feature-request.yml
index 51f27a59e..44832359d 100644
--- a/.github/ISSUE_TEMPLATE/feature-request.yml
+++ b/.github/ISSUE_TEMPLATE/feature-request.yml
@@ -1,6 +1,6 @@
 ---
 name: Feature Request
-description: Submit a Feature for Design which Has Been Submitted as an Idea and has been voted on
+description: Submit a Feature Request
 labels:
   - type/feature
   - status/needs-design
diff --git a/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl b/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
index e947f87cd..5b30bf63d 100644
--- a/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
+++ b/cmd/authelia-gen/templates/github_issue_template_bug_report.yml.tmpl
@@ -18,6 +18,7 @@ body:
         3. Please ensure an issue does not already exist for this potential bug.
         4. Please only provide specific versions. Latest is not a version.
         5. Please read the [Troubleshooting Sanitization](https://www.authelia.com/r/sanitize) reference guide if you plan on removing or adjusting any values for the logs or configuration files.
+        6. Please consider including a [HTTP Archive File](https://www.authelia.com/r/har) if you're having redirection issues.
   - type: dropdown
     id: version
     attributes:
diff --git a/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl b/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl
index 3ca722538..0e3ca87c5 100644
--- a/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl
+++ b/cmd/authelia-gen/templates/github_issue_template_feature.yml.tmpl
@@ -1,6 +1,6 @@
 ---
 name: Feature Request
-description: Submit a Feature for Design which Has Been Submitted as an Idea and has been voted on
+description: Submit a Feature Request
 labels:
 {{- range .Labels }}
   - {{ . }}

From 995a4740383c7a9ab93f15f63c0046f5a0484779 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 16:09:12 +1000
Subject: [PATCH 019/263] docs: update oidc roadmap (#4021)

---
 docs/content/en/roadmap/active/openid-connect.md | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/docs/content/en/roadmap/active/openid-connect.md b/docs/content/en/roadmap/active/openid-connect.md
index 54b464e90..7fd1650ea 100644
--- a/docs/content/en/roadmap/active/openid-connect.md
+++ b/docs/content/en/roadmap/active/openid-connect.md
@@ -93,6 +93,18 @@ Feature List:
 
 ### Beta 5
 
+{{< roadmap-status stage="in progress" version="v4.37.0" >}}
+
+Feature List:
+
+* [JWK's backed by X509 Certificate Chains](https://www.rfc-editor.org/rfc/rfc7517#section-4.7)
+* Per-Client [Consent](https://openid.net/specs/openid-connect-core-1_0.html#Consent) Mode
+  * Explicit
+  * Implicit
+  * Pre-Configured
+
+### Beta 6
+
 {{< roadmap-status >}}
 
 Feature List:
@@ -102,7 +114,7 @@ Feature List:
 
 See [OpenID Connect Core (Mandatory to Implement Features for All OpenID Providers)].
 
-### Beta 6
+### Beta 7
 
 {{< roadmap-status >}}
 

From 2fc1e4a90d426c1872fceda0d460584ef77fb9ce Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 16 Sep 2022 18:19:10 +1000
Subject: [PATCH 020/263] docs: fix shortcode issue (#4022)

---
 docs/content/en/roadmap/active/openid-connect.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/en/roadmap/active/openid-connect.md b/docs/content/en/roadmap/active/openid-connect.md
index 7fd1650ea..a52592b52 100644
--- a/docs/content/en/roadmap/active/openid-connect.md
+++ b/docs/content/en/roadmap/active/openid-connect.md
@@ -93,7 +93,7 @@ Feature List:
 
 ### Beta 5
 
-{{< roadmap-status stage="in progress" version="v4.37.0" >}}
+{{< roadmap-status stage="in-progress" version="v4.37.0" >}}
 
 Feature List:
 

From bca3432d302555f554fb5a507524b32622ccc15d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 19 Sep 2022 08:47:41 +1000
Subject: [PATCH 021/263] build(deps): update dependency vite to v3.1.2 (#4023)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index da5a3f76c..aef60e229 100644
--- a/web/package.json
+++ b/web/package.json
@@ -175,7 +175,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.3",
-    "vite": "3.1.1",
+    "vite": "3.1.2",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 12a132d76..43f0075ee 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -57,7 +57,7 @@ specifiers:
   react-router-dom: 6.4.0
   react-test-renderer: 18.2.0
   typescript: 4.8.3
-  vite: 3.1.1
+  vite: 3.1.2
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -103,7 +103,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
   '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.1
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.2
   esbuild: 0.15.7
   esbuild-jest: 0.5.0_esbuild@0.15.7
   eslint: 8.23.1
@@ -124,11 +124,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
-  vite: 3.1.1
-  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.1
+  vite: 3.1.2
+  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.2
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.1
-  vite-tsconfig-paths: 3.5.0_vite@3.1.1
+  vite-plugin-svgr: 2.2.1_vite@3.1.2
+  vite-tsconfig-paths: 3.5.0_vite@3.1.2
 
 packages:
 
@@ -3651,7 +3651,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.1:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.2:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3664,7 +3664,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.1
+      vite: 3.1.2
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9034,7 +9034,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.1:
+  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.2:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9044,7 +9044,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.23.1
       rollup: 2.78.0
-      vite: 3.1.1
+      vite: 3.1.2
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9058,19 +9058,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.1:
+  /vite-plugin-svgr/2.2.1_vite@3.1.2:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.1
+      vite: 3.1.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.0_vite@3.1.1:
+  /vite-tsconfig-paths/3.5.0_vite@3.1.2:
     resolution: {integrity: sha512-NKIubr7gXgh/3uniQaOytSg+aKWPrjquP6anAy+zCWEn6h9fB8z2/qdlfQrTgZWaXJ2pHVlllrSdRZltHn9P4g==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9079,13 +9079,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.1
+      vite: 3.1.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.1:
-    resolution: {integrity: sha512-hgxQWev/AL7nWYrqByYo8nfcH9n97v6oFsta9+JX8h6cEkni7nHKP2kJleNYV2kcGhE8jsbaY1aStwPZXzPbgA==}
+  /vite/3.1.2:
+    resolution: {integrity: sha512-wTDKPkiVbeT+drTPdkuvjVIC/2vKKUc1w3qNOuwgpyvPCZF6fvdxB5v5WEcCsqaYea0zrwA4+XialJKCHM3oVQ==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From 75904430122eff87dd489283933462669925323d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 19 Sep 2022 09:45:30 +1000
Subject: [PATCH 022/263] build(deps): update dependency i18next to v21.9.2
 (#4024)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/package.json b/web/package.json
index aef60e229..1de03429e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -30,7 +30,7 @@
     "@mui/styles": "5.10.3",
     "axios": "0.27.2",
     "classnames": "2.3.2",
-    "i18next": "21.9.1",
+    "i18next": "21.9.2",
     "i18next-browser-languagedetector": "6.1.5",
     "i18next-http-backend": "1.4.1",
     "qrcode.react": "3.1.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 43f0075ee..667699d31 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -39,7 +39,7 @@ specifiers:
   eslint-plugin-react: 7.31.8
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
-  i18next: 21.9.1
+  i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.1
   jest: 29.0.3
@@ -77,14 +77,14 @@ dependencies:
   '@mui/styles': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
   axios: 0.27.2
   classnames: 2.3.2
-  i18next: 21.9.1
+  i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.1
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 11.18.6_4sidbwfhen5r7txudrvpua6nty
+  react-i18next: 11.18.6_ulhmqqxshznzmtuvahdi5nasbq
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.0_biqbaboplfbrettd7655fr4n2y
@@ -6067,8 +6067,8 @@ packages:
       - encoding
     dev: false
 
-  /i18next/21.9.1:
-    resolution: {integrity: sha512-ITbDrAjbRR73spZAiu6+ex5WNlHRr1mY+acDi2ioTHuUiviJqSz269Le1xHAf0QaQ6GgIHResUhQNcxGwa/PhA==}
+  /i18next/21.9.2:
+    resolution: {integrity: sha512-00fVrLQOwy45nm3OtC9l1WiLK3nJlIYSljgCt0qzTaAy65aciMdRy9GsuW+a2AtKtdg9/njUGfRH30LRupV7ZQ==}
     dependencies:
       '@babel/runtime': 7.18.9
     dev: false
@@ -7909,7 +7909,7 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/11.18.6_4sidbwfhen5r7txudrvpua6nty:
+  /react-i18next/11.18.6_ulhmqqxshznzmtuvahdi5nasbq:
     resolution: {integrity: sha512-yHb2F9BiT0lqoQDt8loZ5gWP331GwctHz9tYQ8A2EIEUu+CcEdjBLQWli1USG3RdWQt3W+jqQLg/d4rrQR96LA==}
     peerDependencies:
       i18next: '>= 19.0.0'
@@ -7924,7 +7924,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       html-parse-stringify: 3.0.1
-      i18next: 21.9.1
+      i18next: 21.9.2
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false

From 35457f504f03e25770a71c6a8d8f6fbc4dc6e146 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 19 Sep 2022 11:01:56 +1000
Subject: [PATCH 023/263] build(deps): update dependency esbuild to v0.15.8
 (#4025)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 164 +++++++++++++++++++++++++--------------------
 2 files changed, 94 insertions(+), 72 deletions(-)

diff --git a/web/package.json b/web/package.json
index 1de03429e..37d69d9b3 100644
--- a/web/package.json
+++ b/web/package.json
@@ -155,7 +155,7 @@
     "@typescript-eslint/eslint-plugin": "5.37.0",
     "@typescript-eslint/parser": "5.37.0",
     "@vitejs/plugin-react": "2.1.0",
-    "esbuild": "0.15.7",
+    "esbuild": "0.15.8",
     "esbuild-jest": "0.5.0",
     "eslint": "8.23.1",
     "eslint-config-prettier": "8.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 667699d31..b7dcd0610 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -26,7 +26,7 @@ specifiers:
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   classnames: 2.3.2
-  esbuild: 0.15.7
+  esbuild: 0.15.8
   esbuild-jest: 0.5.0
   eslint: 8.23.1
   eslint-config-prettier: 8.5.0
@@ -104,8 +104,8 @@ devDependencies:
   '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
   '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
   '@vitejs/plugin-react': 2.1.0_vite@3.1.2
-  esbuild: 0.15.7
-  esbuild-jest: 0.5.0_esbuild@0.15.7
+  esbuild: 0.15.8
+  esbuild-jest: 0.5.0_esbuild@0.15.8
   eslint: 8.23.1
   eslint-config-prettier: 8.5.0_eslint@8.23.1
   eslint-config-react-app: 7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4
@@ -2378,8 +2378,19 @@ packages:
     resolution: {integrity: sha512-AHPmaAx+RYfZz0eYu6Gviiagpmiyw98ySSlQvCUhVGDRtDFe4DBS0x1bSjdF3gqUDYOczB+yYvBTtEylYSdRhg==}
     dev: false
 
-  /@esbuild/linux-loong64/0.15.7:
-    resolution: {integrity: sha512-IKznSJOsVUuyt7cDzzSZyqBEcZe+7WlBqTVXiF1OXP/4Nm387ToaXZ0fyLwI1iBlI/bzpxVq411QE2/Bt2XWWw==}
+  /@esbuild/android-arm/0.15.8:
+    resolution: {integrity: sha512-CyEWALmn+no/lbgbAJsbuuhT8s2J19EJGHkeyAwjbFJMrj80KJ9zuYsoAvidPTU7BgBf87r/sgae8Tw0dbOc4Q==}
+    engines: {node: '>=12'}
+    cpu: [arm]
+    os: [android]
+    requiresBuild: true
+    dependencies:
+      esbuild-wasm: 0.15.8
+    dev: true
+    optional: true
+
+  /@esbuild/linux-loong64/0.15.8:
+    resolution: {integrity: sha512-pE5RQsOTSERCtfZdfCT25wzo7dfhOSlhAXcsZmuvRYhendOv7djcdvtINdnDp2DAjP17WXlBB4nBO6sHLczmsg==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
@@ -4842,17 +4853,19 @@ packages:
       is-symbol: 1.0.4
     dev: true
 
-  /esbuild-android-64/0.15.7:
-    resolution: {integrity: sha512-p7rCvdsldhxQr3YHxptf1Jcd86dlhvc3EQmQJaZzzuAxefO9PvcI0GLOa5nCWem1AJ8iMRu9w0r5TG8pHmbi9w==}
+  /esbuild-android-64/0.15.8:
+    resolution: {integrity: sha512-bVh8FIKOolF7/d4AMzt7xHlL0Ljr+mYKSHI39TJWDkybVWHdn6+4ODL3xZGHOxPpdRpitemXA1WwMKYBsw8dGw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
     requiresBuild: true
+    dependencies:
+      esbuild-wasm: 0.15.8
     dev: true
     optional: true
 
-  /esbuild-android-arm64/0.15.7:
-    resolution: {integrity: sha512-L775l9ynJT7rVqRM5vo+9w5g2ysbOCfsdLV4CWanTZ1k/9Jb3IYlQ06VCI1edhcosTYJRECQFJa3eAvkx72eyQ==}
+  /esbuild-android-arm64/0.15.8:
+    resolution: {integrity: sha512-ReAMDAHuo0H1h9LxRabI6gwYPn8k6WiUeyxuMvx17yTrJO+SCnIfNc/TSPFvDwtK9MiyiKG/2dBYHouT/M0BXQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
@@ -4860,8 +4873,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-64/0.15.7:
-    resolution: {integrity: sha512-KGPt3r1c9ww009t2xLB6Vk0YyNOXh7hbjZ3EecHoVDxgtbUlYstMPDaReimKe6eOEfyY4hBEEeTvKwPsiH5WZg==}
+  /esbuild-darwin-64/0.15.8:
+    resolution: {integrity: sha512-KaKcGfJ+yto7Fo5gAj3xwxHMd1fBIKatpCHK8znTJLVv+9+NN2/tIPBqA4w5rBwjX0UqXDeIE2v1xJP+nGEXgA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
@@ -4869,8 +4882,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-arm64/0.15.7:
-    resolution: {integrity: sha512-kBIHvtVqbSGajN88lYMnR3aIleH3ABZLLFLxwL2stiuIGAjGlQW741NxVTpUHQXUmPzxi6POqc9npkXa8AcSZQ==}
+  /esbuild-darwin-arm64/0.15.8:
+    resolution: {integrity: sha512-8tjEaBgAKnXCkP7bhEJmEqdG9HEV6oLkF36BrMzpfW2rgaw0c48Zrxe+9RlfeGvs6gDF4w+agXyTjikzsS3izw==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
@@ -4878,8 +4891,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-64/0.15.7:
-    resolution: {integrity: sha512-hESZB91qDLV5MEwNxzMxPfbjAhOmtfsr9Wnuci7pY6TtEh4UDuevmGmkUIjX/b+e/k4tcNBMf7SRQ2mdNuK/HQ==}
+  /esbuild-freebsd-64/0.15.8:
+    resolution: {integrity: sha512-jaxcsGHYzn2L0/lffON2WfH4Nc+d/EwozVTP5K2v016zxMb5UQMhLoJzvLgBqHT1SG0B/mO+a+THnJCMVg15zw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
@@ -4887,8 +4900,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-arm64/0.15.7:
-    resolution: {integrity: sha512-dLFR0ChH5t+b3J8w0fVKGvtwSLWCv7GYT2Y2jFGulF1L5HftQLzVGN+6pi1SivuiVSmTh28FwUhi9PwQicXI6Q==}
+  /esbuild-freebsd-arm64/0.15.8:
+    resolution: {integrity: sha512-2xp2UlljMvX8HExtcg7VHaeQk8OBU0CSl1j18B5CcZmSDkLF9p3utuMXIopG3a08fr9Hv+Dz6+seSXUow/G51w==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
@@ -4896,7 +4909,7 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-jest/0.5.0_esbuild@0.15.7:
+  /esbuild-jest/0.5.0_esbuild@0.15.8:
     resolution: {integrity: sha512-AMZZCdEpXfNVOIDvURlqYyHwC8qC1/BFjgsrOiSL1eyiIArVtHL8YAC83Shhn16cYYoAWEW17yZn0W/RJKJKHQ==}
     peerDependencies:
       esbuild: '>=0.8.50'
@@ -4904,13 +4917,13 @@ packages:
       '@babel/core': 7.18.6
       '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.6
       babel-jest: 26.6.3_@babel+core@7.18.6
-      esbuild: 0.15.7
+      esbuild: 0.15.8
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /esbuild-linux-32/0.15.7:
-    resolution: {integrity: sha512-v3gT/LsONGUZcjbt2swrMjwxo32NJzk+7sAgtxhGx1+ZmOFaTRXBAi1PPfgpeo/J//Un2jIKm/I+qqeo4caJvg==}
+  /esbuild-linux-32/0.15.8:
+    resolution: {integrity: sha512-9u1E54BRz1FQMl86iaHK146+4ID2KYNxL3trLZT4QLLx3M7Q9n4lGG3lrzqUatGR2cKy8c33b0iaCzsItZWkFg==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
@@ -4918,8 +4931,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-64/0.15.7:
-    resolution: {integrity: sha512-LxXEfLAKwOVmm1yecpMmWERBshl+Kv5YJ/1KnyAr6HRHFW8cxOEsEfisD3sVl/RvHyW//lhYUVSuy9jGEfIRAQ==}
+  /esbuild-linux-64/0.15.8:
+    resolution: {integrity: sha512-4HxrsN9eUzJXdVGMTYA5Xler82FuZUu21bXKN42zcLHHNKCAMPUzD62I+GwDhsdgUBAUj0tRXDdsQHgaP6v0HA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
@@ -4927,8 +4940,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm/0.15.7:
-    resolution: {integrity: sha512-JKgAHtMR5f75wJTeuNQbyznZZa+pjiUHV7sRZp42UNdyXC6TiUYMW/8z8yIBAr2Fpad8hM1royZKQisqPABPvQ==}
+  /esbuild-linux-arm/0.15.8:
+    resolution: {integrity: sha512-7DVBU9SFjX4+vBwt8tHsUCbE6Vvl6y6FQWHAgyw1lybC5gULqn/WnjHYHN2/LJaZRsDBvxWT4msEgwLGq1Wd3Q==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
@@ -4936,8 +4949,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm64/0.15.7:
-    resolution: {integrity: sha512-P3cfhudpzWDkglutWgXcT2S7Ft7o2e3YDMrP1n0z2dlbUZghUkKCyaWw0zhp4KxEEzt/E7lmrtRu/pGWnwb9vw==}
+  /esbuild-linux-arm64/0.15.8:
+    resolution: {integrity: sha512-1OCm7Aq0tEJT70PbxmHSGYDLYP8DKH8r4Nk7/XbVzWaduo9beCjGBB+tGZIHK6DdTQ3h00/4Tb/70YMH/bOtKg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
@@ -4945,8 +4958,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-mips64le/0.15.7:
-    resolution: {integrity: sha512-T7XKuxl0VpeFLCJXub6U+iybiqh0kM/bWOTb4qcPyDDwNVhLUiPcGdG2/0S7F93czUZOKP57YiLV8YQewgLHKw==}
+  /esbuild-linux-mips64le/0.15.8:
+    resolution: {integrity: sha512-yeFoNPVFPEzZvFYBfUQNG2TjGRaCyV1E27OcOg4LOtnGrxb2wA+mkW3luckyv1CEyd00mpAg7UdHx8nlx3ghgA==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
@@ -4954,8 +4967,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-ppc64le/0.15.7:
-    resolution: {integrity: sha512-6mGuC19WpFN7NYbecMIJjeQgvDb5aMuvyk0PDYBJrqAEMkTwg3Z98kEKuCm6THHRnrgsdr7bp4SruSAxEM4eJw==}
+  /esbuild-linux-ppc64le/0.15.8:
+    resolution: {integrity: sha512-CEyMMUUNabXibw8OSNmBXhOIGhnjNVl5Lpseiuf00iKN0V47oqDrbo4dsHz1wH62m49AR8iG8wpDlTqfYgKbtg==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
@@ -4963,8 +4976,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-riscv64/0.15.7:
-    resolution: {integrity: sha512-uUJsezbswAYo/X7OU/P+PuL/EI9WzxsEQXDekfwpQ23uGiooxqoLFAPmXPcRAt941vjlY9jtITEEikWMBr+F/g==}
+  /esbuild-linux-riscv64/0.15.8:
+    resolution: {integrity: sha512-OCGSOaspMUjexSCU8ZiA0UnV/NiRU+s2vIfEcAQWQ6u32R+2luyfh/4ZaY6jFbylJE07Esc/yRvb9Q5fXuClXA==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
@@ -4972,8 +4985,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-s390x/0.15.7:
-    resolution: {integrity: sha512-+tO+xOyTNMc34rXlSxK7aCwJgvQyffqEM5MMdNDEeMU3ss0S6wKvbBOQfgd5jRPblfwJ6b+bKiz0g5nABpY0QQ==}
+  /esbuild-linux-s390x/0.15.8:
+    resolution: {integrity: sha512-RHdpdfxRTSrZXZJlFSLazFU4YwXLB5Rgf6Zr5rffqSsO4y9JybgtKO38bFwxZNlDXliYISXN/YROKrG9s7mZQA==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
@@ -4981,8 +4994,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-netbsd-64/0.15.7:
-    resolution: {integrity: sha512-yVc4Wz+Pu3cP5hzm5kIygNPrjar/v5WCSoRmIjCPWfBVJkZNb5brEGKUlf+0Y759D48BCWa0WHrWXaNy0DULTQ==}
+  /esbuild-netbsd-64/0.15.8:
+    resolution: {integrity: sha512-VolFFRatBH09T5QMWhiohAWCOien1R1Uz9K0BRVVTBgBaVBt7eArsXTKxVhUgRf2vwu2c2SXkuP0r7HLG0eozw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
@@ -4990,8 +5003,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-openbsd-64/0.15.7:
-    resolution: {integrity: sha512-GsimbwC4FSR4lN3wf8XmTQ+r8/0YSQo21rWDL0XFFhLHKlzEA4SsT1Tl8bPYu00IU6UWSJ+b3fG/8SB69rcuEQ==}
+  /esbuild-openbsd-64/0.15.8:
+    resolution: {integrity: sha512-HTAPlg+n4kUeE/isQxlCfsOz0xJGNoT5LJ9oYZWFKABfVf4Ycu7Zlf5ITgOnrdheTkz8JeL/gISIOCFAoOXrSA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
@@ -4999,8 +5012,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-sunos-64/0.15.7:
-    resolution: {integrity: sha512-8CDI1aL/ts0mDGbWzjEOGKXnU7p3rDzggHSBtVryQzkSOsjCHRVe0iFYUuhczlxU1R3LN/E7HgUO4NXzGGP/Ag==}
+  /esbuild-sunos-64/0.15.8:
+    resolution: {integrity: sha512-qMP/jR/FzcIOwKj+W+Lb+8Cfr8GZHbHUJxAPi7DUhNZMQ/6y7sOgRzlOSpRrbbUntrRZh0MqOyDhJ3Gpo6L1QA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
@@ -5008,8 +5021,16 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-32/0.15.7:
-    resolution: {integrity: sha512-cOnKXUEPS8EGCzRSFa1x6NQjGhGsFlVgjhqGEbLTPsA7x4RRYiy2RKoArNUU4iR2vHmzqS5Gr84MEumO/wxYKA==}
+  /esbuild-wasm/0.15.8:
+    resolution: {integrity: sha512-Y7uCl5RNO4URjlemjdx++ukVHEMt5s5AfMWYUnMiK4Sry+pPCvQIctzXq6r6FKCyGKjX6/NGMCqR2OX6aLxj0w==}
+    engines: {node: '>=12'}
+    hasBin: true
+    requiresBuild: true
+    dev: true
+    optional: true
+
+  /esbuild-windows-32/0.15.8:
+    resolution: {integrity: sha512-RKR1QHh4iWzjUhkP8Yqi75PPz/KS+b8zw3wUrzw6oAkj+iU5Qtyj61ZDaSG3Qf2vc6hTIUiPqVTqBH0NpXFNwg==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
@@ -5017,8 +5038,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-64/0.15.7:
-    resolution: {integrity: sha512-7MI08Ec2sTIDv+zH6StNBKO+2hGUYIT42GmFyW6MBBWWtJhTcQLinKS6ldIN1d52MXIbiJ6nXyCJ+LpL4jBm3Q==}
+  /esbuild-windows-64/0.15.8:
+    resolution: {integrity: sha512-ag9ptYrsizgsR+PQE8QKeMqnosLvAMonQREpLw4evA4FFgOBMLEat/dY/9txbpozTw9eEOYyD3a4cE9yTu20FA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
@@ -5026,8 +5047,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-arm64/0.15.7:
-    resolution: {integrity: sha512-R06nmqBlWjKHddhRJYlqDd3Fabx9LFdKcjoOy08YLimwmsswlFBJV4rXzZCxz/b7ZJXvrZgj8DDv1ewE9+StMw==}
+  /esbuild-windows-arm64/0.15.8:
+    resolution: {integrity: sha512-dbpAb0VyPaUs9mgw65KRfQ9rqiWCHpNzrJusoPu+LpEoswosjt/tFxN7cd2l68AT4qWdBkzAjDLRon7uqMeWcg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
@@ -5035,33 +5056,34 @@ packages:
     dev: true
     optional: true
 
-  /esbuild/0.15.7:
-    resolution: {integrity: sha512-7V8tzllIbAQV1M4QoE52ImKu8hT/NLGlGXkiDsbEU5PS6K8Mn09ZnYoS+dcmHxOS9CRsV4IRAMdT3I67IyUNXw==}
+  /esbuild/0.15.8:
+    resolution: {integrity: sha512-Remsk2dmr1Ia65sU+QasE6svJbsHe62lzR+CnjpUvbZ+uSYo1SitiOWPRfZQkCu82YWZBBKXiD/j0i//XWMZ+Q==}
     engines: {node: '>=12'}
     hasBin: true
     requiresBuild: true
     optionalDependencies:
-      '@esbuild/linux-loong64': 0.15.7
-      esbuild-android-64: 0.15.7
-      esbuild-android-arm64: 0.15.7
-      esbuild-darwin-64: 0.15.7
-      esbuild-darwin-arm64: 0.15.7
-      esbuild-freebsd-64: 0.15.7
-      esbuild-freebsd-arm64: 0.15.7
-      esbuild-linux-32: 0.15.7
-      esbuild-linux-64: 0.15.7
-      esbuild-linux-arm: 0.15.7
-      esbuild-linux-arm64: 0.15.7
-      esbuild-linux-mips64le: 0.15.7
-      esbuild-linux-ppc64le: 0.15.7
-      esbuild-linux-riscv64: 0.15.7
-      esbuild-linux-s390x: 0.15.7
-      esbuild-netbsd-64: 0.15.7
-      esbuild-openbsd-64: 0.15.7
-      esbuild-sunos-64: 0.15.7
-      esbuild-windows-32: 0.15.7
-      esbuild-windows-64: 0.15.7
-      esbuild-windows-arm64: 0.15.7
+      '@esbuild/android-arm': 0.15.8
+      '@esbuild/linux-loong64': 0.15.8
+      esbuild-android-64: 0.15.8
+      esbuild-android-arm64: 0.15.8
+      esbuild-darwin-64: 0.15.8
+      esbuild-darwin-arm64: 0.15.8
+      esbuild-freebsd-64: 0.15.8
+      esbuild-freebsd-arm64: 0.15.8
+      esbuild-linux-32: 0.15.8
+      esbuild-linux-64: 0.15.8
+      esbuild-linux-arm: 0.15.8
+      esbuild-linux-arm64: 0.15.8
+      esbuild-linux-mips64le: 0.15.8
+      esbuild-linux-ppc64le: 0.15.8
+      esbuild-linux-riscv64: 0.15.8
+      esbuild-linux-s390x: 0.15.8
+      esbuild-netbsd-64: 0.15.8
+      esbuild-openbsd-64: 0.15.8
+      esbuild-sunos-64: 0.15.8
+      esbuild-windows-32: 0.15.8
+      esbuild-windows-64: 0.15.8
+      esbuild-windows-arm64: 0.15.8
     dev: true
 
   /escalade/3.1.1:
@@ -9103,7 +9125,7 @@ packages:
       terser:
         optional: true
     dependencies:
-      esbuild: 0.15.7
+      esbuild: 0.15.8
       postcss: 8.4.16
       resolve: 1.22.1
       rollup: 2.78.0

From a0b3d327747f96a559cfbae4a4ff99f6c133950a Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 19 Sep 2022 14:19:51 +1000
Subject: [PATCH 024/263] docs: update oidc roadmap (#4027)

---
 docs/content/en/roadmap/active/openid-connect.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/en/roadmap/active/openid-connect.md b/docs/content/en/roadmap/active/openid-connect.md
index a52592b52..17a7e8f09 100644
--- a/docs/content/en/roadmap/active/openid-connect.md
+++ b/docs/content/en/roadmap/active/openid-connect.md
@@ -102,6 +102,7 @@ Feature List:
   * Explicit
   * Implicit
   * Pre-Configured
+* Hashed Client Secrets
 
 ### Beta 6
 
@@ -122,7 +123,6 @@ Feature List:
 
 * Revoke Tokens on User Logout or Expiration
 * [JSON Web Key Rotation](https://openid.net/specs/openid-connect-messages-1_0-20.html#rotate.sig.keys)
-* Hashed Client Secrets
 
 ### General Availability
 

From 1ba6effe6b8f9fdd59adbbe012fca16fff994089 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 19 Sep 2022 14:49:25 +1000
Subject: [PATCH 025/263] fix(web): broadcastchannel not supported on old
 safari  (#4014)

This utilizes a wrapper around the BroadcastChannel API to handle browsers which don't properly support the API such as Safari prior to 10.4 and iOS prior to 10.4. Where possible it uses the native API.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
---
 web/package.json                              |  1 +
 web/pnpm-lock.yaml                            | 79 +++++++++++++++----
 .../FirstFactor/FirstFactorForm.tsx           | 12 +--
 web/src/views/LoginPortal/LoginPortal.tsx     | 11 ++-
 4 files changed, 83 insertions(+), 20 deletions(-)

diff --git a/web/package.json b/web/package.json
index 37d69d9b3..e672a7f4e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -29,6 +29,7 @@
     "@mui/material": "5.10.5",
     "@mui/styles": "5.10.3",
     "axios": "0.27.2",
+    "broadcast-channel": "4.10.0",
     "classnames": "2.3.2",
     "i18next": "21.9.2",
     "i18next-browser-languagedetector": "6.1.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index b7dcd0610..d148bde15 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -25,6 +25,7 @@ specifiers:
   '@typescript-eslint/parser': 5.37.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
+  broadcast-channel: 4.10.0
   classnames: 2.3.2
   esbuild: 0.15.8
   esbuild-jest: 0.5.0
@@ -76,6 +77,7 @@ dependencies:
   '@mui/material': 5.10.5_af5ln35zuaotaffazii6n6bke4
   '@mui/styles': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
   axios: 0.27.2
+  broadcast-channel: 4.10.0
   classnames: 2.3.2
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
@@ -4182,7 +4184,6 @@ packages:
 
   /balanced-match/1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
-    dev: true
 
   /base/0.11.2:
     resolution: {integrity: sha512-5T6P4xPgpp0YDFvSWwEZ4NoE3aM4QBQXDzmVbraCkFj8zHM+mba8SyqB5DbZWyR7mYHo6Y7BdQo3MoA4m0TeQg==}
@@ -4197,12 +4198,16 @@ packages:
       pascalcase: 0.1.1
     dev: true
 
+  /big-integer/1.6.51:
+    resolution: {integrity: sha512-GPEid2Y9QU1Exl1rpO9B2IPJGHPSupF5GnVIP0blYvNOMer2bTvSWs1jGOUg04hTmu67nmLsQ9TBo1puaotBHg==}
+    engines: {node: '>=0.6'}
+    dev: false
+
   /brace-expansion/1.1.11:
     resolution: {integrity: sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==}
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
-    dev: true
 
   /braces/2.3.2:
     resolution: {integrity: sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==}
@@ -4229,6 +4234,19 @@ packages:
       fill-range: 7.0.1
     dev: true
 
+  /broadcast-channel/4.10.0:
+    resolution: {integrity: sha512-hOUh312XyHk6JTVyX9cyXaH1UYs+2gHVtnW16oQAu9FL7ALcXGXc/YoJWqlkV8vUn14URQPMmRi4A9q4UrwVEQ==}
+    dependencies:
+      '@babel/runtime': 7.18.9
+      detect-node: 2.1.0
+      microseconds: 0.2.0
+      nano-time: 1.0.0
+      oblivious-set: 1.0.0
+      p-queue: 6.6.2
+      rimraf: 3.0.2
+      unload: 2.3.1
+    dev: false
+
   /browser-process-hrtime/1.0.0:
     resolution: {integrity: sha512-9o5UecI3GhkpM6DrXr69PblIuWxPKk9Y0jHBRhdocZ2y7YECBFCsHm79Pr3OyR2AvjhDkabFJaDJMYRazHgsow==}
     dev: true
@@ -4437,8 +4455,7 @@ packages:
     dev: true
 
   /concat-map/0.0.1:
-    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
-    dev: true
+    resolution: {integrity: sha1-2Klr13/Wjfd5OnMDajug1UBdR3s=}
 
   /confusing-browser-globals/1.0.11:
     resolution: {integrity: sha512-JsPKdmh8ZkmnHxDk55FZ1TqVLvEQTvoByJZRN9jzI0UjxK/QgAmsphz7PGtqgPieQZ/CQcHWXCR7ATDNhGe+YA==}
@@ -4712,6 +4729,10 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
+  /detect-node/2.1.0:
+    resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==}
+    dev: false
+
   /diff-sequences/29.0.0:
     resolution: {integrity: sha512-7Qe/zd1wxSDL4D/X/FPjOMB+ZMDt71W94KYaq05I2l0oQqgXgs7s4ftYYmV38gBSrPz2vcygxfs1xn0FT+rKNA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -5508,6 +5529,10 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
+  /eventemitter3/4.0.7:
+    resolution: {integrity: sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==}
+    dev: false
+
   /exec-sh/0.3.6:
     resolution: {integrity: sha512-nQn+hI3yp+oD0huYhKwvYI32+JFeq+XkNcD1GAo3Y/MjxsfVGmrrzrnzjWiNY6f+pUCP440fThsFh5gZrRAU/w==}
     dev: true
@@ -5750,7 +5775,6 @@ packages:
 
   /fs.realpath/1.0.0:
     resolution: {integrity: sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==}
-    dev: true
 
   /fsevents/2.3.2:
     resolution: {integrity: sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==}
@@ -5872,7 +5896,6 @@ packages:
       minimatch: 3.1.2
       once: 1.4.0
       path-is-absolute: 1.0.1
-    dev: true
 
   /global-dirs/0.1.1:
     resolution: {integrity: sha512-NknMLn7F2J7aflwFOlGdNIuCDpN3VGoSoB+aap3KABFWbHVn1TCgFC+np23J8W2BiZbjfEw3BFBycSMv1AFblg==}
@@ -6138,11 +6161,9 @@ packages:
     dependencies:
       once: 1.4.0
       wrappy: 1.0.2
-    dev: true
 
   /inherits/2.0.4:
     resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
-    dev: true
 
   /ini/1.3.8:
     resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
@@ -7381,6 +7402,10 @@ packages:
       picomatch: 2.3.1
     dev: true
 
+  /microseconds/0.2.0:
+    resolution: {integrity: sha512-n7DHHMjR1avBbSpsTBj6fmMGh2AGrifVV4e+WYc3Q9lO+xnSZ3NyhcBND3vzzatt05LFhoKFRxrIyklmLlUtyA==}
+    dev: false
+
   /mime-db/1.52.0:
     resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
     engines: {node: '>= 0.6'}
@@ -7405,7 +7430,6 @@ packages:
     resolution: {integrity: sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==}
     dependencies:
       brace-expansion: 1.1.11
-    dev: true
 
   /minimist-options/4.1.0:
     resolution: {integrity: sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==}
@@ -7440,6 +7464,12 @@ packages:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
     dev: true
 
+  /nano-time/1.0.0:
+    resolution: {integrity: sha512-flnngywOoQ0lLQOTRNexn2gGSNuM9bKj9RZAWSzhQ+UJYaAFG9bac4DW9VHjUAzrOaIcajHybCTHe/bkvozQqA==}
+    dependencies:
+      big-integer: 1.6.51
+    dev: false
+
   /nanoid/3.3.4:
     resolution: {integrity: sha512-MqBkQh/OHTS2egovRtLk45wEyNXwF+cokD+1YPf9u5VfJiRdAiRwB2froX5Co9Rh20xs4siNPm8naNotSD6RBw==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
@@ -7622,11 +7652,14 @@ packages:
       es-abstract: 1.20.1
     dev: true
 
+  /oblivious-set/1.0.0:
+    resolution: {integrity: sha512-z+pI07qxo4c2CulUHCDf9lcqDlMSo72N/4rLUpRXf6fu+q8vjt8y0xS+Tlf8NTJDdTXHbdeO1n3MlbctwEoXZw==}
+    dev: false
+
   /once/1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
     dependencies:
       wrappy: 1.0.2
-    dev: true
 
   /onetime/5.1.2:
     resolution: {integrity: sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==}
@@ -7671,7 +7704,6 @@ packages:
   /p-finally/1.0.0:
     resolution: {integrity: sha512-LICb2p9CB7FS+0eR1oqWnHhp0FljGLZCWBE9aix0Uye9W8LTQPwMTYVGWQWIw9RdQiDg4+epXQODwIYJtSJaow==}
     engines: {node: '>=4'}
-    dev: true
 
   /p-limit/1.3.0:
     resolution: {integrity: sha512-vvcXsLAJ9Dr5rQOPk7toZQZJApBl2K4J6dANSsEuh6QI41JYcsS/qhTGa9ErIUUgK3WNQoJYvylxvjqmiqEA9Q==}
@@ -7715,6 +7747,21 @@ packages:
       p-limit: 3.1.0
     dev: true
 
+  /p-queue/6.6.2:
+    resolution: {integrity: sha512-RwFpb72c/BhQLEXIZ5K2e+AhgNVmIejGlTgiB9MzZ0e93GRvqZ7uSi0dvRF7/XIXDeNkra2fNHBxTyPDGySpjQ==}
+    engines: {node: '>=8'}
+    dependencies:
+      eventemitter3: 4.0.7
+      p-timeout: 3.2.0
+    dev: false
+
+  /p-timeout/3.2.0:
+    resolution: {integrity: sha512-rhIwUycgwwKcP9yTOOFK/AKsAopjjCakVqLHePO3CC6Mir1Z99xT+R63jZxAT5lFZLa2inS5h+ZS2GvR99/FBg==}
+    engines: {node: '>=8'}
+    dependencies:
+      p-finally: 1.0.0
+    dev: false
+
   /p-try/1.0.0:
     resolution: {integrity: sha512-U1etNYuMJoIz3ZXSrrySFjsXQTWOx2/jdi86L+2pRvph/qMKL6sbcCYdH23fqsbm8TH2Gn0OybpT4eSFlCVHww==}
     engines: {node: '>=4'}
@@ -7764,7 +7811,6 @@ packages:
   /path-is-absolute/1.0.1:
     resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
     engines: {node: '>=0.10.0'}
-    dev: true
 
   /path-key/2.0.1:
     resolution: {integrity: sha512-fEHGKCSmUSDPv4uoj8AlD+joPlq3peND+HRYyxFz4KPw4z926S/b8rIuFs2FYJg3BwsxJf6A9/3eIdLaYC+9Dw==}
@@ -8250,7 +8296,6 @@ packages:
     hasBin: true
     dependencies:
       glob: 7.2.3
-    dev: true
 
   /rollup/2.78.0:
     resolution: {integrity: sha512-4+YfbQC9QEVvKTanHhIAFVUFSRsezvQF8vFOJwtGfb9Bb+r014S+qryr9PSmw8x6sMnPkmFBGAvIFVQxvJxjtg==}
@@ -8997,6 +9042,13 @@ packages:
     engines: {node: '>= 10.0.0'}
     dev: true
 
+  /unload/2.3.1:
+    resolution: {integrity: sha512-MUZEiDqvAN9AIDRbbBnVYVvfcR6DrjCqeU2YQMmliFZl9uaBUjTkhuDQkBiyAy8ad5bx1TXVbqZ3gg7namsWjA==}
+    dependencies:
+      '@babel/runtime': 7.18.9
+      detect-node: 2.1.0
+    dev: false
+
   /unset-value/1.0.0:
     resolution: {integrity: sha512-PcA2tsuGSF9cnySLHTLSh2qrQiJ70mn+r+Glzxv2TWZblxsxCC52BDlZoPCsz7STd9pN7EZetkWZBAvk4cgZdQ==}
     engines: {node: '>=0.10.0'}
@@ -9234,7 +9286,6 @@ packages:
 
   /wrappy/1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
-    dev: true
 
   /write-file-atomic/3.0.3:
     resolution: {integrity: sha512-AvHcyZ5JnSfq3ioSyjrBkH9yW4m7Ayk8/9My/DD9onKeu/94fwrMocemO2QAJFAlnnDN+ZDS+ZjAR5ua1/PV/Q==}
diff --git a/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx b/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx
index a9cc4fd2f..5c03eec52 100644
--- a/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx
+++ b/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx
@@ -2,6 +2,7 @@ import React, { MutableRefObject, useEffect, useMemo, useRef, useState } from "r
 
 import { Button, Checkbox, FormControlLabel, Grid, Link, Theme } from "@mui/material";
 import makeStyles from "@mui/styles/makeStyles";
+import { BroadcastChannel } from "broadcast-channel";
 import classnames from "classnames";
 import { useTranslation } from "react-i18next";
 import { useNavigate } from "react-router-dom";
@@ -25,6 +26,7 @@ export interface Props {
     onAuthenticationStart: () => void;
     onAuthenticationFailure: () => void;
     onAuthenticationSuccess: (redirectURL: string | undefined) => void;
+    onChannelStateChange: () => void;
 }
 
 const FirstFactorForm = function (props: Props) {
@@ -34,7 +36,7 @@ const FirstFactorForm = function (props: Props) {
     const requestMethod = useRequestMethod();
     const workflow = useWorkflow();
 
-    const loginChannel = useMemo(() => new BroadcastChannel("login"), []);
+    const loginChannel = useMemo(() => new BroadcastChannel<boolean>("login"), []);
     const [rememberMe, setRememberMe] = useState(false);
     const [username, setUsername] = useState("");
     const [usernameError, setUsernameError] = useState(false);
@@ -52,9 +54,9 @@ const FirstFactorForm = function (props: Props) {
     }, [usernameRef]);
 
     useEffect(() => {
-        loginChannel.addEventListener("message", (ev) => {
-            if (ev.data) {
-                props.onAuthenticationSuccess(redirectionURL);
+        loginChannel.addEventListener("message", (authenticated) => {
+            if (authenticated) {
+                props.onChannelStateChange();
             }
         });
     }, [loginChannel, redirectionURL, props]);
@@ -80,7 +82,7 @@ const FirstFactorForm = function (props: Props) {
         props.onAuthenticationStart();
         try {
             const res = await postFirstFactor(username, password, rememberMe, redirectionURL, requestMethod, workflow);
-            loginChannel.postMessage(true);
+            await loginChannel.postMessage(true);
             props.onAuthenticationSuccess(res ? res.redirect : undefined);
         } catch (err) {
             console.error(err);
diff --git a/web/src/views/LoginPortal/LoginPortal.tsx b/web/src/views/LoginPortal/LoginPortal.tsx
index ac85220dd..bb1d7daf0 100644
--- a/web/src/views/LoginPortal/LoginPortal.tsx
+++ b/web/src/views/LoginPortal/LoginPortal.tsx
@@ -45,6 +45,7 @@ const LoginPortal = function (props: Props) {
     const workflow = useWorkflow();
     const { createErrorNotification } = useNotifications();
     const [firstFactorDisabled, setFirstFactorDisabled] = useState(true);
+    const [broadcastRedirect, setBroadcastRedirect] = useState(false);
     const redirector = useRedirector();
 
     const [state, fetchState, , fetchStateError] = useAutheliaState();
@@ -115,7 +116,8 @@ const LoginPortal = function (props: Props) {
                 ((configuration &&
                     configuration.available_methods.size === 0 &&
                     state.authentication_level >= AuthenticationLevel.OneFactor) ||
-                    state.authentication_level === AuthenticationLevel.TwoFactor)
+                    state.authentication_level === AuthenticationLevel.TwoFactor ||
+                    broadcastRedirect)
             ) {
                 try {
                     const res = await checkSafeRedirection(redirectionURL);
@@ -164,8 +166,14 @@ const LoginPortal = function (props: Props) {
         configuration,
         createErrorNotification,
         redirector,
+        broadcastRedirect,
     ]);
 
+    const handleChannelStateChange = async () => {
+        setBroadcastRedirect(true);
+        fetchState();
+    };
+
     const handleAuthSuccess = async (redirectionURL: string | undefined) => {
         if (redirectionURL) {
             // Do an external redirection pushed by the server.
@@ -195,6 +203,7 @@ const LoginPortal = function (props: Props) {
                             onAuthenticationStart={() => setFirstFactorDisabled(true)}
                             onAuthenticationFailure={() => setFirstFactorDisabled(false)}
                             onAuthenticationSuccess={handleAuthSuccess}
+                            onChannelStateChange={handleChannelStateChange}
                         />
                     </ComponentOrLoading>
                 }

From 54f7f13d1ca2724301dded1f8890ab624aaac76d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 19 Sep 2022 15:10:35 +1000
Subject: [PATCH 026/263] build(deps): update dependency broadcast-channel to
 v4.17.0 (#4029)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 +++++++-------------------------
 2 files changed, 8 insertions(+), 26 deletions(-)

diff --git a/web/package.json b/web/package.json
index e672a7f4e..1322062e0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -29,7 +29,7 @@
     "@mui/material": "5.10.5",
     "@mui/styles": "5.10.3",
     "axios": "0.27.2",
-    "broadcast-channel": "4.10.0",
+    "broadcast-channel": "4.17.0",
     "classnames": "2.3.2",
     "i18next": "21.9.2",
     "i18next-browser-languagedetector": "6.1.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index d148bde15..e20697ea9 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -25,7 +25,7 @@ specifiers:
   '@typescript-eslint/parser': 5.37.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
-  broadcast-channel: 4.10.0
+  broadcast-channel: 4.17.0
   classnames: 2.3.2
   esbuild: 0.15.8
   esbuild-jest: 0.5.0
@@ -77,7 +77,7 @@ dependencies:
   '@mui/material': 5.10.5_af5ln35zuaotaffazii6n6bke4
   '@mui/styles': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
   axios: 0.27.2
-  broadcast-channel: 4.10.0
+  broadcast-channel: 4.17.0
   classnames: 2.3.2
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
@@ -4198,11 +4198,6 @@ packages:
       pascalcase: 0.1.1
     dev: true
 
-  /big-integer/1.6.51:
-    resolution: {integrity: sha512-GPEid2Y9QU1Exl1rpO9B2IPJGHPSupF5GnVIP0blYvNOMer2bTvSWs1jGOUg04hTmu67nmLsQ9TBo1puaotBHg==}
-    engines: {node: '>=0.6'}
-    dev: false
-
   /brace-expansion/1.1.11:
     resolution: {integrity: sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==}
     dependencies:
@@ -4234,14 +4229,11 @@ packages:
       fill-range: 7.0.1
     dev: true
 
-  /broadcast-channel/4.10.0:
-    resolution: {integrity: sha512-hOUh312XyHk6JTVyX9cyXaH1UYs+2gHVtnW16oQAu9FL7ALcXGXc/YoJWqlkV8vUn14URQPMmRi4A9q4UrwVEQ==}
+  /broadcast-channel/4.17.0:
+    resolution: {integrity: sha512-r2GSQMNgZv7eAsbdsu9xofSjc3J2diCQTPkSuyVhLBfx8fylLCVhi5KheuhuAQBJNd4pxqUyz9U6rvdnt7GZng==}
     dependencies:
       '@babel/runtime': 7.18.9
-      detect-node: 2.1.0
-      microseconds: 0.2.0
-      nano-time: 1.0.0
-      oblivious-set: 1.0.0
+      oblivious-set: 1.1.1
       p-queue: 6.6.2
       rimraf: 3.0.2
       unload: 2.3.1
@@ -7402,10 +7394,6 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /microseconds/0.2.0:
-    resolution: {integrity: sha512-n7DHHMjR1avBbSpsTBj6fmMGh2AGrifVV4e+WYc3Q9lO+xnSZ3NyhcBND3vzzatt05LFhoKFRxrIyklmLlUtyA==}
-    dev: false
-
   /mime-db/1.52.0:
     resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
     engines: {node: '>= 0.6'}
@@ -7464,12 +7452,6 @@ packages:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
     dev: true
 
-  /nano-time/1.0.0:
-    resolution: {integrity: sha512-flnngywOoQ0lLQOTRNexn2gGSNuM9bKj9RZAWSzhQ+UJYaAFG9bac4DW9VHjUAzrOaIcajHybCTHe/bkvozQqA==}
-    dependencies:
-      big-integer: 1.6.51
-    dev: false
-
   /nanoid/3.3.4:
     resolution: {integrity: sha512-MqBkQh/OHTS2egovRtLk45wEyNXwF+cokD+1YPf9u5VfJiRdAiRwB2froX5Co9Rh20xs4siNPm8naNotSD6RBw==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
@@ -7652,8 +7634,8 @@ packages:
       es-abstract: 1.20.1
     dev: true
 
-  /oblivious-set/1.0.0:
-    resolution: {integrity: sha512-z+pI07qxo4c2CulUHCDf9lcqDlMSo72N/4rLUpRXf6fu+q8vjt8y0xS+Tlf8NTJDdTXHbdeO1n3MlbctwEoXZw==}
+  /oblivious-set/1.1.1:
+    resolution: {integrity: sha512-Oh+8fK09mgGmAshFdH6hSVco6KZmd1tTwNFWj35OvzdmJTMZtAkbn05zar2iG3v6sDs1JLEtOiBGNb6BHwkb2w==}
     dev: false
 
   /once/1.4.0:

From f01562b83a03f9029e69969fe15d7da796b55cbd Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 19 Sep 2022 15:26:13 +1000
Subject: [PATCH 027/263] release: v4.36.8 (#4028)

---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index 1322062e0..7350886a2 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "authelia",
-  "version": "4.36.7",
+  "version": "4.36.8",
   "private": true,
   "pnpm": {
     "peerDependencyRules": {

From 465c7b57d33b02668b9aca3fc29865fafddafd9a Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 19 Sep 2022 16:51:29 +1000
Subject: [PATCH 028/263] ci: regen issue templates (#4030)

---
 .github/ISSUE_TEMPLATE/bug-report.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
index 19d5af6ab..e30299cd7 100644
--- a/.github/ISSUE_TEMPLATE/bug-report.yml
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -26,6 +26,7 @@ body:
       description: What version(s) of Authelia can you reproduce this bug on?
       multiple: true
       options:
+        - v4.36.8
         - v4.36.7
         - v4.36.6
         - v4.36.5

From 8a7a8ba4c06918fc901484c04dd1fece8b8ae50c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 20 Sep 2022 07:59:30 +1000
Subject: [PATCH 029/263] build(deps): update material-ui monorepo to v5.10.6
 (#4033)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   6 +--
 web/pnpm-lock.yaml | 124 ++++++++++++++++++++++++---------------------
 2 files changed, 68 insertions(+), 62 deletions(-)

diff --git a/web/package.json b/web/package.json
index 7350886a2..8c9448f89 100644
--- a/web/package.json
+++ b/web/package.json
@@ -25,9 +25,9 @@
     "@fortawesome/free-regular-svg-icons": "6.2.0",
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
-    "@mui/icons-material": "5.10.3",
-    "@mui/material": "5.10.5",
-    "@mui/styles": "5.10.3",
+    "@mui/icons-material": "5.10.6",
+    "@mui/material": "5.10.6",
+    "@mui/styles": "5.10.6",
     "axios": "0.27.2",
     "broadcast-channel": "4.17.0",
     "classnames": "2.3.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e20697ea9..cad597c58 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -10,9 +10,9 @@ specifiers:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
-  '@mui/icons-material': 5.10.3
-  '@mui/material': 5.10.5
-  '@mui/styles': 5.10.3
+  '@mui/icons-material': 5.10.6
+  '@mui/material': 5.10.6
+  '@mui/styles': 5.10.6
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.0.3
@@ -73,9 +73,9 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.3_5evnxlqsqnxmrwqqtdxt2buelq
-  '@mui/material': 5.10.5_af5ln35zuaotaffazii6n6bke4
-  '@mui/styles': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
+  '@mui/icons-material': 5.10.6_53tnv4wp66xcbe2be5ezn33rnm
+  '@mui/material': 5.10.6_af5ln35zuaotaffazii6n6bke4
+  '@mui/styles': 5.10.6_w5j4k42lgipnm43s3brx6h3c34
   axios: 0.27.2
   broadcast-channel: 4.17.0
   classnames: 2.3.2
@@ -2004,6 +2004,12 @@ packages:
     dependencies:
       regenerator-runtime: 0.13.9
 
+  /@babel/runtime/7.19.0:
+    resolution: {integrity: sha512-eR8Lo9hnDS7tqkO7NsV+mKvCmv5boaXFSZ70DnfhcgiEne8hv9oCEd36Klw74EtizEqLsy4YnW8UWwpBVolHZA==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      regenerator-runtime: 0.13.9
+
   /@babel/template/7.18.10:
     resolution: {integrity: sha512-TI+rCtooWHr3QJ27kJxfjutghu44DLnasDMwpDqCXVTal9RLp3RSYNh4NdBrRP2cQAoG9A8juOQl6P6oZG4JxA==}
     engines: {node: '>=6.9.0'}
@@ -2262,7 +2268,7 @@ packages:
     dependencies:
       '@babel/helper-module-imports': 7.18.6
       '@babel/plugin-syntax-jsx': 7.18.6
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
       '@emotion/memoize': 0.8.0
       '@emotion/serialize': 1.1.0
@@ -2791,8 +2797,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.97_7ey2zzynotv32rpkwno45fsx4e:
-    resolution: {integrity: sha512-gvo0hOg/tBzfJ3eDQOGAPBJJU+qTWd0e5zBEMFIkT1ekJqXx14JtIHvheOFU17y9iDciYE256Q8g+tj6a1dcBA==}
+  /@mui/base/5.0.0-alpha.98_7ey2zzynotv32rpkwno45fsx4e:
+    resolution: {integrity: sha512-c0U51+K2m57MASpRrmNs6qTXSvktDbVcSjD8zCRPbfuwYWERGGwNxwM3/jsBa4dSojTSmLPnOBFDypl74Ds6yQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2802,10 +2808,10 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@emotion/is-prop-valid': 1.2.0
       '@mui/types': 7.2.0_@types+react@18.0.20
-      '@mui/utils': 5.10.3_react@18.2.0
+      '@mui/utils': 5.10.6_react@18.2.0
       '@popperjs/core': 2.11.6
       '@types/react': 18.0.20
       clsx: 1.2.1
@@ -2815,12 +2821,12 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.5:
-    resolution: {integrity: sha512-sZYg85rQdlgDYU3V4WcT2Dl+k+y2wYqN04aUvVkFksRR0j81sj6KmfXx4842HJQcq5rjzcTvh4N+yv66XR/9fA==}
+  /@mui/core-downloads-tracker/5.10.6:
+    resolution: {integrity: sha512-dmyQBqrKmVU6yCSM4GGal5qNXpViXX+/V1t0GA1A5i9QF5Gx6noV/cw0hrSS2ffLT8L2oScq1oTdA6NVIiQ8lg==}
     dev: false
 
-  /@mui/icons-material/5.10.3_5evnxlqsqnxmrwqqtdxt2buelq:
-    resolution: {integrity: sha512-o0kbUlsWCBtCE0wP33cGKbyryCh7kpm2EECYMPDmWrLhbA+HUODXIdhiTFS26szp2xXo9HY1lEx0ufeJ+tddYw==}
+  /@mui/icons-material/5.10.6_53tnv4wp66xcbe2be5ezn33rnm:
+    resolution: {integrity: sha512-QwxdRmLA46S94B0hExPDx0td+A2unF+33bQ6Cs+lNpJKVsm1YeHwNdYXYcnpWeHeQQ07055OXl7IB2GKDd0MfA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@mui/material': ^5.0.0
@@ -2830,14 +2836,14 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
-      '@mui/material': 5.10.5_af5ln35zuaotaffazii6n6bke4
+      '@babel/runtime': 7.19.0
+      '@mui/material': 5.10.6_af5ln35zuaotaffazii6n6bke4
       '@types/react': 18.0.20
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.5_af5ln35zuaotaffazii6n6bke4:
-    resolution: {integrity: sha512-VFMadvfA6jqx5DCk2xoBl4bAGyzgmmubJIuB7fUWUZBwYIYL5Ea9SsoFpt5kawA6O2feuj69alDN2fhxPw1MeQ==}
+  /@mui/material/5.10.6_af5ln35zuaotaffazii6n6bke4:
+    resolution: {integrity: sha512-QilW5PAAGSQdN7Cpp4rwSQ1doJAt3ca1a2PHZtr8RLVlpHnXb+qQ8CeDo9+9V2fK5CDNdtTN1F+iJKO43aFBpQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2853,14 +2859,14 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
       '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
-      '@mui/base': 5.0.0-alpha.97_7ey2zzynotv32rpkwno45fsx4e
-      '@mui/core-downloads-tracker': 5.10.5
-      '@mui/system': 5.10.5_4mv32nu4vciambuqqzuu4gtvj4
+      '@mui/base': 5.0.0-alpha.98_7ey2zzynotv32rpkwno45fsx4e
+      '@mui/core-downloads-tracker': 5.10.6
+      '@mui/system': 5.10.6_4mv32nu4vciambuqqzuu4gtvj4
       '@mui/types': 7.2.0_@types+react@18.0.20
-      '@mui/utils': 5.10.3_react@18.2.0
+      '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.20
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
@@ -2872,8 +2878,8 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.3_w5j4k42lgipnm43s3brx6h3c34:
-    resolution: {integrity: sha512-LCYIKlkGz2BTSng2BFzzwSJBRZbChIUri2x2Nh8ryk2B1Ho7zpvE7ex6y39LlStG2Frf92NFC/V4YQbmMAjD5A==}
+  /@mui/private-theming/5.10.6_w5j4k42lgipnm43s3brx6h3c34:
+    resolution: {integrity: sha512-I/W0QyTLRdEx6py3lKAquKO/rNF/7j+nIOM/xCyI9kU0fcotVTcTY08mKMsS6vrzdWpi6pAkD0wP0KwWy5R5VA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2882,15 +2888,15 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
-      '@mui/utils': 5.10.3_react@18.2.0
+      '@babel/runtime': 7.19.0
+      '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.20
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styled-engine/5.10.5_hfzxdiydbrbhhfpkwuv3jhvwmq:
-    resolution: {integrity: sha512-6U6tTdf+H1OsjgcFoY12gYPR+qqZ1WHGGIahK5V7JhMkMUgH7ozyiNi8s1LzmwrUlAz1hAAhuO5nBYXku3wWvw==}
+  /@mui/styled-engine/5.10.6_hfzxdiydbrbhhfpkwuv3jhvwmq:
+    resolution: {integrity: sha512-OnVw5xnO4l0XzlJFhKif/RlLenBNhyEQQlSTwB9ApSWB05UAU5ZSbjNsRfyEKvgmQ/fPa+MqPD/dzxbIRCwyeg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.4.1
@@ -2902,7 +2908,7 @@ packages:
       '@emotion/styled':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@emotion/cache': 11.10.3
       '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
       '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
@@ -2911,8 +2917,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.3_w5j4k42lgipnm43s3brx6h3c34:
-    resolution: {integrity: sha512-I9BYAKENJ6Ot+UEqsU+D2o5jVSeHAme+ZcPzBataTNmpjd7yrmdPeJgAyzju21KtSucBb283gvggcFqxLH1lOQ==}
+  /@mui/styles/5.10.6_w5j4k42lgipnm43s3brx6h3c34:
+    resolution: {integrity: sha512-QmT/PXDKOSttkSWV97SVw1isfmc+iNMQBUtVwafRju1T6+O26tf9Hz0QjILuXIk74lg/nrbQn5S5c9h6FZWPXQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || 18
@@ -2921,11 +2927,11 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
+      '@mui/private-theming': 5.10.6_w5j4k42lgipnm43s3brx6h3c34
       '@mui/types': 7.2.0_@types+react@18.0.20
-      '@mui/utils': 5.10.3_react@18.2.0
+      '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.20
       clsx: 1.2.1
       csstype: 3.1.0
@@ -2942,8 +2948,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.5_4mv32nu4vciambuqqzuu4gtvj4:
-    resolution: {integrity: sha512-GUPiDVZTKp9yH3FVeLSIw3Bqsyl7qLxtAK1ZiZmC8e+zdH7bcnZZXvWK3vPIbx35ZyhQpvAOWQFpiF9TjdA77w==}
+  /@mui/system/5.10.6_4mv32nu4vciambuqqzuu4gtvj4:
+    resolution: {integrity: sha512-HfQVX7e2xpQ3jtdB/WwtkFVtozMOozyN575/63u8ILHkE8wGDhblmCieAsnyJPFbm7WBW5PCMyzmfr4QyKLaYg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2958,13 +2964,13 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
       '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
-      '@mui/private-theming': 5.10.3_w5j4k42lgipnm43s3brx6h3c34
-      '@mui/styled-engine': 5.10.5_hfzxdiydbrbhhfpkwuv3jhvwmq
+      '@mui/private-theming': 5.10.6_w5j4k42lgipnm43s3brx6h3c34
+      '@mui/styled-engine': 5.10.6_hfzxdiydbrbhhfpkwuv3jhvwmq
       '@mui/types': 7.2.0_@types+react@18.0.20
-      '@mui/utils': 5.10.3_react@18.2.0
+      '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.20
       clsx: 1.2.1
       csstype: 3.1.0
@@ -2983,13 +2989,13 @@ packages:
       '@types/react': 18.0.20
     dev: false
 
-  /@mui/utils/5.10.3_react@18.2.0:
-    resolution: {integrity: sha512-4jXMDPfx6bpMVuheLaOpKTjpzw39ogAZLeaLj5+RJec3E37/hAZMYjURfblLfTWMMoGoqkY03mNsZaEwNobBow==}
+  /@mui/utils/5.10.6_react@18.2.0:
+    resolution: {integrity: sha512-g0Qs8xN/MW2M3fLL8197h5J2VB9U+49fLlnKKqC6zy/yus5cZwdT+Gwec+wUMxgwQoxMDn+J8oDWAn28kEOR/Q==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       react: ^17.0.0 || ^18.0.0 || 18
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@types/prop-types': 15.7.5
       '@types/react-is': 17.0.3
       prop-types: 15.8.1
@@ -3835,7 +3841,7 @@ packages:
     resolution: {integrity: sha512-o/HelwhuKpTj/frsOsbNLNgnNGVIFsVP/SW2BSF14gVl7kAfMOJ6/8wUAUvG1R1NHKrfG+2sHZTu0yauT1qBrA==}
     engines: {node: '>=6.0'}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@babel/runtime-corejs3': 7.18.6
     dev: true
 
@@ -4031,7 +4037,7 @@ packages:
     resolution: {integrity: sha512-Cg7TFGpIr01vOQNODXOOaGz2NpCU5gl8x1qJFbb6hbZxR7XrcE2vtbAsTAbJ7/xwJtUuJEw8K8Zr/AE0LHlesg==}
     engines: {node: '>=10', npm: '>=6'}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       cosmiconfig: 7.0.1
       resolve: 1.22.1
 
@@ -4565,7 +4571,7 @@ packages:
   /css-vendor/2.0.8:
     resolution: {integrity: sha512-x9Aq0XTInxrkuFeHKbYC7zWY8ai7qJ04Kxd9MnvbC1uO5DagxoHQjm4JvG+vCdXOoFtCjbL2XSZfxmoYa9uQVQ==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       is-in-browser: 1.1.3
     dev: false
 
@@ -4763,7 +4769,7 @@ packages:
   /dom-helpers/5.2.1:
     resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       csstype: 3.1.0
     dev: false
 
@@ -7111,7 +7117,7 @@ packages:
   /jss-plugin-camel-case/10.9.2:
     resolution: {integrity: sha512-wgBPlL3WS0WDJ1lPJcgjux/SHnDuu7opmgQKSraKs4z8dCCyYMx9IDPFKBXQ8Q5dVYij1FFV0WdxyhuOOAXuTg==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       hyphenate-style-name: 1.0.4
       jss: 10.9.2
     dev: false
@@ -7119,21 +7125,21 @@ packages:
   /jss-plugin-default-unit/10.9.2:
     resolution: {integrity: sha512-pYg0QX3bBEFtTnmeSI3l7ad1vtHU42YEEpgW7pmIh+9pkWNWb5dwS/4onSfAaI0kq+dOZHzz4dWe+8vWnanoSg==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       jss: 10.9.2
     dev: false
 
   /jss-plugin-global/10.9.2:
     resolution: {integrity: sha512-GcX0aE8Ef6AtlasVrafg1DItlL/tWHoC4cGir4r3gegbWwF5ZOBYhx04gurPvWHC8F873aEGqge7C17xpwmp2g==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       jss: 10.9.2
     dev: false
 
   /jss-plugin-nested/10.9.2:
     resolution: {integrity: sha512-VgiOWIC6bvgDaAL97XCxGD0BxOKM0K0zeB/ECyNaVF6FqvdGB9KBBWRdy2STYAss4VVA7i5TbxFZN+WSX1kfQA==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       jss: 10.9.2
       tiny-warning: 1.0.3
     dev: false
@@ -7141,14 +7147,14 @@ packages:
   /jss-plugin-props-sort/10.9.2:
     resolution: {integrity: sha512-AP1AyUTbi2szylgr+O0OB7gkIxEGzySLITZ2GpsaoX72YMCGI2jYAc+WUhPfvUnZYiauF4zTnN4V4TGuvFjJlw==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       jss: 10.9.2
     dev: false
 
   /jss-plugin-rule-value-function/10.9.2:
     resolution: {integrity: sha512-vf5ms8zvLFMub6swbNxvzsurHfUZ5Shy5aJB2gIpY6WNA3uLinEcxYyraQXItRHi5ivXGqYciFDRM2ZoVoRZ4Q==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       jss: 10.9.2
       tiny-warning: 1.0.3
     dev: false
@@ -7156,7 +7162,7 @@ packages:
   /jss-plugin-vendor-prefixer/10.9.2:
     resolution: {integrity: sha512-SxcEoH+Rttf9fEv6KkiPzLdXRmI6waOTcMkbbEFgdZLDYNIP9UKNHFy6thhbRKqv0XMQZdrEsbDyV464zE/dUA==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       css-vendor: 2.0.8
       jss: 10.9.2
     dev: false
@@ -7164,7 +7170,7 @@ packages:
   /jss/10.9.2:
     resolution: {integrity: sha512-b8G6rWpYLR4teTUbGd4I4EsnWjg7MN0Q5bSsjKhVkJVjhQDy2KzkbD2AW3TuT0RYZVmZZHKIrXDn6kjU14qkUg==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       csstype: 3.1.0
       is-in-browser: 1.1.3
       tiny-warning: 1.0.3
@@ -8065,7 +8071,7 @@ packages:
       react: '>=16.6.0 || 18'
       react-dom: '>=16.6.0 || 18'
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       dom-helpers: 5.2.1
       loose-envify: 1.4.0
       prop-types: 15.8.1
@@ -8141,7 +8147,7 @@ packages:
   /regenerator-transform/0.15.0:
     resolution: {integrity: sha512-LsrGtPmbYg19bcPHwdtmXwbW+TqNvtY4riE3P83foeHRroMbH6/2ddFBfab3t7kbzc7v7p4wbkIecHImqt0QNg==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
     dev: true
 
   /regex-not/1.0.2:

From 66cca69066ef780221b9e94795eaa0176d7e8825 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 20 Sep 2022 12:15:16 +1000
Subject: [PATCH 030/263] build(deps): update dependency i18next-http-backend
 to v1.4.2 (#4034)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 8c9448f89..733e30bd4 100644
--- a/web/package.json
+++ b/web/package.json
@@ -33,7 +33,7 @@
     "classnames": "2.3.2",
     "i18next": "21.9.2",
     "i18next-browser-languagedetector": "6.1.5",
-    "i18next-http-backend": "1.4.1",
+    "i18next-http-backend": "1.4.2",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
     "react": "18.2.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index cad597c58..f57bf8725 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -42,7 +42,7 @@ specifiers:
   husky: 8.0.1
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
-  i18next-http-backend: 1.4.1
+  i18next-http-backend: 1.4.2
   jest: 29.0.3
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
@@ -81,7 +81,7 @@ dependencies:
   classnames: 2.3.2
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
-  i18next-http-backend: 1.4.1
+  i18next-http-backend: 1.4.2
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
@@ -6102,8 +6102,8 @@ packages:
       '@babel/runtime': 7.18.9
     dev: false
 
-  /i18next-http-backend/1.4.1:
-    resolution: {integrity: sha512-s4Q9hK2jS29iyhniMP82z+yYY8riGTrWbnyvsSzi5TaF7Le4E7b5deTmtuaRuab9fdDcYXtcwdBgawZG+JCEjA==}
+  /i18next-http-backend/1.4.2:
+    resolution: {integrity: sha512-Ig3bjNFrgFuRgEug0pTUCyH2NyUeMO4cUDwuom+CIB3LkKSba8ui5p4nWmZISuBtLQ7SI/5naDUXDmq6ZWuEwA==}
     dependencies:
       cross-fetch: 3.1.5
     transitivePeerDependencies:

From b203bf414a595ae34ae166afc24a87a8934b792b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 20 Sep 2022 13:40:45 +1000
Subject: [PATCH 031/263] build(deps): update typescript-eslint monorepo to
 v5.38.0 (#4035)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 107 +++++++++++++++++++++------------------------
 2 files changed, 53 insertions(+), 58 deletions(-)

diff --git a/web/package.json b/web/package.json
index 733e30bd4..80a763338 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.20",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.37.0",
-    "@typescript-eslint/parser": "5.37.0",
+    "@typescript-eslint/eslint-plugin": "5.38.0",
+    "@typescript-eslint/parser": "5.38.0",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.8",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index f57bf8725..25a3b78a1 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.20
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.37.0
-  '@typescript-eslint/parser': 5.37.0
+  '@typescript-eslint/eslint-plugin': 5.38.0
+  '@typescript-eslint/parser': 5.38.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   broadcast-channel: 4.17.0
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.20
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
-  '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
+  '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
+  '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
   '@vitejs/plugin-react': 2.1.0_vite@3.1.2
   esbuild: 0.15.8
   esbuild-jest: 0.5.0_esbuild@0.15.8
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
-  eslint-plugin-import: 2.26.0_dnpzw43gx7nu2gqo7farhnkjku
+  eslint-plugin-import: 2.26.0_qidincc6lbiur5hfuez2qbs5ge
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
   eslint-plugin-prettier: 4.2.1_cabrci5exjdaojcvd6xoxgeowu
   eslint-plugin-react: 7.31.8_eslint@8.23.1
@@ -3470,8 +3470,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.37.0_22c5fnooleyfkzrkkgdmel5kmi:
-    resolution: {integrity: sha512-Fde6W0IafXktz1UlnhGkrrmnnGpAo1kyX7dnyHHVrmwJOn72Oqm3eYtddrpOwwel2W8PAK9F3pIL5S+lfoM0og==}
+  /@typescript-eslint/eslint-plugin/5.38.0_wsb62dxj2oqwgas4kadjymcmry:
+    resolution: {integrity: sha512-GgHi/GNuUbTOeoJiEANi0oI6fF3gBQc3bGFYj40nnAPCbhrtEDf2rjBmefFadweBmO1Du1YovHeDP2h5JLhtTQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3481,13 +3481,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
-      '@typescript-eslint/scope-manager': 5.37.0
-      '@typescript-eslint/type-utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
-      '@typescript-eslint/utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/scope-manager': 5.38.0
+      '@typescript-eslint/type-utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
       debug: 4.3.4
       eslint: 8.23.1
-      functional-red-black-tree: 1.0.1
       ignore: 5.2.0
       regexpp: 3.2.0
       semver: 7.3.7
@@ -3510,8 +3509,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.37.0_irgkl5vooow2ydyo6aokmferha:
-    resolution: {integrity: sha512-01VzI/ipYKuaG5PkE5+qyJ6m02fVALmMPY3Qq5BHflDx3y4VobbLdHQkSMg9VPRS4KdNt4oYTMaomFoHonBGAw==}
+  /@typescript-eslint/parser/5.38.0_irgkl5vooow2ydyo6aokmferha:
+    resolution: {integrity: sha512-/F63giJGLDr0ms1Cr8utDAxP2SPiglaD6V+pCOcG35P2jCqdfR7uuEhz1GIC3oy4hkUF8xA1XSXmd9hOh/a5EA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3520,9 +3519,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.37.0
-      '@typescript-eslint/types': 5.37.0
-      '@typescript-eslint/typescript-estree': 5.37.0_typescript@4.8.3
+      '@typescript-eslint/scope-manager': 5.38.0
+      '@typescript-eslint/types': 5.38.0
+      '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
       debug: 4.3.4
       eslint: 8.23.1
       typescript: 4.8.3
@@ -3538,16 +3537,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.37.0:
-    resolution: {integrity: sha512-F67MqrmSXGd/eZnujjtkPgBQzgespu/iCZ+54Ok9X5tALb9L2v3G+QBSoWkXG0p3lcTJsL+iXz5eLUEdSiJU9Q==}
+  /@typescript-eslint/scope-manager/5.38.0:
+    resolution: {integrity: sha512-ByhHIuNyKD9giwkkLqzezZ9y5bALW8VNY6xXcP+VxoH4JBDKjU5WNnsiD4HJdglHECdV+lyaxhvQjTUbRboiTA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.37.0
-      '@typescript-eslint/visitor-keys': 5.37.0
+      '@typescript-eslint/types': 5.38.0
+      '@typescript-eslint/visitor-keys': 5.38.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.37.0_irgkl5vooow2ydyo6aokmferha:
-    resolution: {integrity: sha512-BSx/O0Z0SXOF5tY0bNTBcDEKz2Ec20GVYvq/H/XNKiUorUFilH7NPbFUuiiyzWaSdN3PA8JV0OvYx0gH/5aFAQ==}
+  /@typescript-eslint/type-utils/5.38.0_irgkl5vooow2ydyo6aokmferha:
+    resolution: {integrity: sha512-iZq5USgybUcj/lfnbuelJ0j3K9dbs1I3RICAJY9NZZpDgBYXmuUlYQGzftpQA9wC8cKgtS6DASTvF3HrXwwozA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3556,8 +3555,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.37.0_typescript@4.8.3
-      '@typescript-eslint/utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
+      '@typescript-eslint/utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
       debug: 4.3.4
       eslint: 8.23.1
       tsutils: 3.21.0_typescript@4.8.3
@@ -3571,8 +3570,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.37.0:
-    resolution: {integrity: sha512-3frIJiTa5+tCb2iqR/bf7XwU20lnU05r/sgPJnRpwvfZaqCJBrl8Q/mw9vr3NrNdB/XtVyMA0eppRMMBqdJ1bA==}
+  /@typescript-eslint/types/5.38.0:
+    resolution: {integrity: sha512-HHu4yMjJ7i3Cb+8NUuRCdOGu2VMkfmKyIJsOr9PfkBVYLYrtMCK/Ap50Rpov+iKpxDTfnqvDbuPLgBE5FwUNfA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3597,8 +3596,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.37.0_typescript@4.8.3:
-    resolution: {integrity: sha512-JkFoFIt/cx59iqEDSgIGnQpCTRv96MQnXCYvJi7QhBC24uyuzbD8wVbajMB1b9x4I0octYFJ3OwjAwNqk1AjDA==}
+  /@typescript-eslint/typescript-estree/5.38.0_typescript@4.8.3:
+    resolution: {integrity: sha512-6P0RuphkR+UuV7Avv7MU3hFoWaGcrgOdi8eTe1NwhMp2/GjUJoODBTRWzlHpZh6lFOaPmSvgxGlROa0Sg5Zbyg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3606,8 +3605,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.37.0
-      '@typescript-eslint/visitor-keys': 5.37.0
+      '@typescript-eslint/types': 5.38.0
+      '@typescript-eslint/visitor-keys': 5.38.0
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3636,16 +3635,16 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.37.0_irgkl5vooow2ydyo6aokmferha:
-    resolution: {integrity: sha512-jUEJoQrWbZhmikbcWSMDuUSxEE7ID2W/QCV/uz10WtQqfOuKZUqFGjqLJ+qhDd17rjgp+QJPqTdPIBWwoob2NQ==}
+  /@typescript-eslint/utils/5.38.0_irgkl5vooow2ydyo6aokmferha:
+    resolution: {integrity: sha512-6sdeYaBgk9Fh7N2unEXGz+D+som2QCQGPAf1SxrkEr+Z32gMreQ0rparXTNGRRfYUWk/JzbGdcM8NSSd6oqnTA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
-      '@typescript-eslint/scope-manager': 5.37.0
-      '@typescript-eslint/types': 5.37.0
-      '@typescript-eslint/typescript-estree': 5.37.0_typescript@4.8.3
+      '@typescript-eslint/scope-manager': 5.38.0
+      '@typescript-eslint/types': 5.38.0
+      '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
       eslint: 8.23.1
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.23.1
@@ -3662,11 +3661,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.37.0:
-    resolution: {integrity: sha512-Hp7rT4cENBPIzMwrlehLW/28EVCOcE9U1Z1BQTc8EA8v5qpr7GRGuG+U58V5tTY48zvUOA3KHvw3rA8tY9fbdA==}
+  /@typescript-eslint/visitor-keys/5.38.0:
+    resolution: {integrity: sha512-MxnrdIyArnTi+XyFLR+kt/uNAcdOnmT+879os7qDRI+EYySR4crXJq9BXPfRzzLGq0wgxkwidrCJ9WCAoacm1w==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.37.0
+      '@typescript-eslint/types': 5.38.0
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5158,14 +5157,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_i26poghmbi7wetx4acurtjxrle
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
-      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
+      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.23.1
       eslint-plugin-flowtype: 8.0.3_eslint@8.23.1
-      eslint-plugin-import: 2.26.0_dnpzw43gx7nu2gqo7farhnkjku
-      eslint-plugin-jest: 25.7.0_agihzdubifvlsy3vxhvuafdnha
+      eslint-plugin-import: 2.26.0_qidincc6lbiur5hfuez2qbs5ge
+      eslint-plugin-jest: 25.7.0_qsk6uocri6piwezqjqcgw24zhq
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
       eslint-plugin-react: 7.31.8_eslint@8.23.1
       eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
@@ -5203,7 +5202,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.23.1
-      eslint-plugin-import: 2.26.0_dnpzw43gx7nu2gqo7farhnkjku
+      eslint-plugin-import: 2.26.0_qidincc6lbiur5hfuez2qbs5ge
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5213,7 +5212,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_yotz5rgxbsebaglktiy7k3y6ua:
+  /eslint-module-utils/2.7.3_ykdyddfakcjre356m77nfkledi:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5231,7 +5230,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
@@ -5258,7 +5257,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_dnpzw43gx7nu2gqo7farhnkjku:
+  /eslint-plugin-import/2.26.0_qidincc6lbiur5hfuez2qbs5ge:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5268,14 +5267,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.23.1
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_yotz5rgxbsebaglktiy7k3y6ua
+      eslint-module-utils: 2.7.3_ykdyddfakcjre356m77nfkledi
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5289,7 +5288,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_agihzdubifvlsy3vxhvuafdnha:
+  /eslint-plugin-jest/25.7.0_qsk6uocri6piwezqjqcgw24zhq:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5302,7 +5301,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.37.0_22c5fnooleyfkzrkkgdmel5kmi
+      '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
       '@typescript-eslint/experimental-utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
       eslint: 8.23.1
       jest: 29.0.3_@types+node@16.11.59
@@ -5388,7 +5387,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.37.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
       eslint: 8.23.1
     transitivePeerDependencies:
       - supports-color
@@ -5795,10 +5794,6 @@ packages:
       functions-have-names: 1.2.3
     dev: true
 
-  /functional-red-black-tree/1.0.1:
-    resolution: {integrity: sha512-dsKNQNdj6xA3T+QlADDA7mOSlX0qiMINjn0cgr+eGHGsbSHzTabcIogz2+p/iqP1Xs6EP/sS2SbqH+brGTbq0g==}
-    dev: true
-
   /functions-have-names/1.2.3:
     resolution: {integrity: sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ==}
     dev: true

From bd711c4669280c842c777dc3086f34d02a11c246 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 20 Sep 2022 13:58:10 +1000
Subject: [PATCH 032/263] build(deps): update dependency vite to v3.1.3 (#4032)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 80a763338..932bd4822 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.3",
-    "vite": "3.1.2",
+    "vite": "3.1.3",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 25a3b78a1..8d3fc40f3 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.0
   react-test-renderer: 18.2.0
   typescript: 4.8.3
-  vite: 3.1.2
+  vite: 3.1.3
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
   '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.2
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.3
   esbuild: 0.15.8
   esbuild-jest: 0.5.0_esbuild@0.15.8
   eslint: 8.23.1
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
-  vite: 3.1.2
-  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.2
+  vite: 3.1.3
+  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.3
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.2
-  vite-tsconfig-paths: 3.5.0_vite@3.1.2
+  vite-plugin-svgr: 2.2.1_vite@3.1.3
+  vite-tsconfig-paths: 3.5.0_vite@3.1.3
 
 packages:
 
@@ -3669,7 +3669,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.2:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.3:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3682,7 +3682,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.2
+      vite: 3.1.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9091,7 +9091,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.2:
+  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.3:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9101,7 +9101,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.23.1
       rollup: 2.78.0
-      vite: 3.1.2
+      vite: 3.1.3
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9115,19 +9115,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.2:
+  /vite-plugin-svgr/2.2.1_vite@3.1.3:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.2
+      vite: 3.1.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.0_vite@3.1.2:
+  /vite-tsconfig-paths/3.5.0_vite@3.1.3:
     resolution: {integrity: sha512-NKIubr7gXgh/3uniQaOytSg+aKWPrjquP6anAy+zCWEn6h9fB8z2/qdlfQrTgZWaXJ2pHVlllrSdRZltHn9P4g==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9136,13 +9136,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.2
+      vite: 3.1.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.2:
-    resolution: {integrity: sha512-wTDKPkiVbeT+drTPdkuvjVIC/2vKKUc1w3qNOuwgpyvPCZF6fvdxB5v5WEcCsqaYea0zrwA4+XialJKCHM3oVQ==}
+  /vite/3.1.3:
+    resolution: {integrity: sha512-/3XWiktaopByM5bd8dqvHxRt5EEgRikevnnrpND0gRfNkrMrPaGGexhtLCzv15RcCMtV2CLw+BPas8YFeSG0KA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From 52e61109f777d833649539c959fa11966c9bd2a6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 20 Sep 2022 22:02:32 +1000
Subject: [PATCH 033/263] build(deps): update dependency i18next-http-backend
 to v1.4.4 (#4039)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 932bd4822..a795805f0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -33,7 +33,7 @@
     "classnames": "2.3.2",
     "i18next": "21.9.2",
     "i18next-browser-languagedetector": "6.1.5",
-    "i18next-http-backend": "1.4.2",
+    "i18next-http-backend": "1.4.4",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
     "react": "18.2.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 8d3fc40f3..9e20e1656 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -42,7 +42,7 @@ specifiers:
   husky: 8.0.1
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
-  i18next-http-backend: 1.4.2
+  i18next-http-backend: 1.4.4
   jest: 29.0.3
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
@@ -81,7 +81,7 @@ dependencies:
   classnames: 2.3.2
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
-  i18next-http-backend: 1.4.2
+  i18next-http-backend: 1.4.4
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
@@ -6097,8 +6097,8 @@ packages:
       '@babel/runtime': 7.18.9
     dev: false
 
-  /i18next-http-backend/1.4.2:
-    resolution: {integrity: sha512-Ig3bjNFrgFuRgEug0pTUCyH2NyUeMO4cUDwuom+CIB3LkKSba8ui5p4nWmZISuBtLQ7SI/5naDUXDmq6ZWuEwA==}
+  /i18next-http-backend/1.4.4:
+    resolution: {integrity: sha512-M4gLPe6JKZ2p1UmE6t4rzWV/sAxgrLThW7ztXAsTpFwFqXoyzhTzX8eYxVv9KjpCQh4K9nwxnEjEi+74C4Thbg==}
     dependencies:
       cross-fetch: 3.1.5
     transitivePeerDependencies:

From 8cf290a1df89d387105112fd8189d13097023882 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 21 Sep 2022 12:37:27 +1000
Subject: [PATCH 034/263] build(deps): update mariadb docker tag to v10.9.3
 (#4041)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/mariadb/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/mariadb/docker-compose.yml b/internal/suites/example/compose/mariadb/docker-compose.yml
index 951f72596..6d914b82f 100644
--- a/internal/suites/example/compose/mariadb/docker-compose.yml
+++ b/internal/suites/example/compose/mariadb/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   mariadb:
-    image: mariadb:10.9.2
+    image: mariadb:10.9.3
     environment:
       - MYSQL_ROOT_PASSWORD=rootpassword
       - MYSQL_USER=admin

From f5baf2ea1aa794f054cfa52a281bebe30678c395 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 21 Sep 2022 12:57:47 +1000
Subject: [PATCH 035/263] build(deps): update caddy docker tag to v2.6.0
 (#4042)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/caddy/Dockerfile         | 4 ++--
 internal/suites/example/compose/caddy/docker-compose.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/internal/suites/example/compose/caddy/Dockerfile b/internal/suites/example/compose/caddy/Dockerfile
index 2a3115835..c8f296990 100644
--- a/internal/suites/example/compose/caddy/Dockerfile
+++ b/internal/suites/example/compose/caddy/Dockerfile
@@ -1,7 +1,7 @@
-FROM caddy:2.5.2-builder AS builder
+FROM caddy:2.6.0-builder AS builder
 
 RUN xcaddy build fix-empty-copy-headers
 
-FROM caddy:2.5.2
+FROM caddy:2.6.0
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy
diff --git a/internal/suites/example/compose/caddy/docker-compose.yml b/internal/suites/example/compose/caddy/docker-compose.yml
index 515d70a42..c292d4380 100644
--- a/internal/suites/example/compose/caddy/docker-compose.yml
+++ b/internal/suites/example/compose/caddy/docker-compose.yml
@@ -3,7 +3,7 @@ version: '3'
 services:
   caddy:
     # build: ./example/compose/caddy/ # used for debugging
-    image: caddy:2.5.2-alpine
+    image: caddy:2.6.0-alpine
     volumes:
       - ./example/compose/caddy/Caddyfile:/etc/caddy/Caddyfile
     networks:

From 4029555a7b25f6196e52b6160e635d4cbacbb0d8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 07:19:46 +1000
Subject: [PATCH 036/263] build(deps): update dependency @types/react to
 v18.0.21 (#4047)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 94 +++++++++++++++++++++++-----------------------
 2 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/web/package.json b/web/package.json
index a795805f0..424f9a206 100644
--- a/web/package.json
+++ b/web/package.json
@@ -150,7 +150,7 @@
     "@types/jest": "29.0.3",
     "@types/node": "16.11.59",
     "@types/qrcode.react": "1.0.2",
-    "@types/react": "18.0.20",
+    "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.38.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 9e20e1656..46fc21eb5 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -18,7 +18,7 @@ specifiers:
   '@types/jest': 29.0.3
   '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.20
+  '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.38.0
@@ -67,15 +67,15 @@ specifiers:
 
 dependencies:
   '@emotion/cache': 11.10.3
-  '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
-  '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
+  '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
+  '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.6_53tnv4wp66xcbe2be5ezn33rnm
-  '@mui/material': 5.10.6_af5ln35zuaotaffazii6n6bke4
-  '@mui/styles': 5.10.6_w5j4k42lgipnm43s3brx6h3c34
+  '@mui/icons-material': 5.10.6_zggcj3xc6dksem2wq5c4poxkne
+  '@mui/material': 5.10.6_ikcgkdnp4bn3rgptamntbhbo7e
+  '@mui/styles': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
   axios: 0.27.2
   broadcast-channel: 4.17.0
   classnames: 2.3.2
@@ -100,7 +100,7 @@ devDependencies:
   '@types/jest': 29.0.3
   '@types/node': 16.11.59
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.20
+  '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
@@ -2304,7 +2304,7 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.4_w5j4k42lgipnm43s3brx6h3c34:
+  /@emotion/react/11.10.4_iapumuv4e6jcjznwuxpf4tt22e:
     resolution: {integrity: sha512-j0AkMpr6BL8gldJZ6XQsQ8DnS9TxEQu1R+OGmDZiWjBAJtCcbt0tS3I/YffoqHXxH6MjgI7KdMbYKw3MEiU9eA==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2323,7 +2323,7 @@ packages:
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       hoist-non-react-statics: 3.3.2
       react: 18.2.0
     dev: false
@@ -2342,7 +2342,7 @@ packages:
     resolution: {integrity: sha512-OiTkRgpxescko+M51tZsMq7Puu/KP55wMT8BgpcXVG2hqXc0Vo0mfymJ/Uj24Hp0i083ji/o0aLddh08UEjq8w==}
     dev: false
 
-  /@emotion/styled/11.10.4_yiaqs725o7pcd7rteavrnhgj4y:
+  /@emotion/styled/11.10.4_g3tud4ene45llglqap74b5kkse:
     resolution: {integrity: sha512-pRl4R8Ez3UXvOPfc2bzIoV8u9P97UedgHS4FPX594ntwEuAMA114wlaHvOK24HB48uqfXiGlYIZYCxVJ1R1ttQ==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2358,11 +2358,11 @@ packages:
       '@babel/runtime': 7.18.9
       '@emotion/babel-plugin': 11.10.0
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
+      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/serialize': 1.1.0
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       react: 18.2.0
     dev: false
 
@@ -2797,7 +2797,7 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.98_7ey2zzynotv32rpkwno45fsx4e:
+  /@mui/base/5.0.0-alpha.98_rj7ozvcq3uehdlnj3cbwzbi5ce:
     resolution: {integrity: sha512-c0U51+K2m57MASpRrmNs6qTXSvktDbVcSjD8zCRPbfuwYWERGGwNxwM3/jsBa4dSojTSmLPnOBFDypl74Ds6yQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2810,10 +2810,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/is-prop-valid': 1.2.0
-      '@mui/types': 7.2.0_@types+react@18.0.20
+      '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
       '@popperjs/core': 2.11.6
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       clsx: 1.2.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -2825,7 +2825,7 @@ packages:
     resolution: {integrity: sha512-dmyQBqrKmVU6yCSM4GGal5qNXpViXX+/V1t0GA1A5i9QF5Gx6noV/cw0hrSS2ffLT8L2oScq1oTdA6NVIiQ8lg==}
     dev: false
 
-  /@mui/icons-material/5.10.6_53tnv4wp66xcbe2be5ezn33rnm:
+  /@mui/icons-material/5.10.6_zggcj3xc6dksem2wq5c4poxkne:
     resolution: {integrity: sha512-QwxdRmLA46S94B0hExPDx0td+A2unF+33bQ6Cs+lNpJKVsm1YeHwNdYXYcnpWeHeQQ07055OXl7IB2GKDd0MfA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2837,12 +2837,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.6_af5ln35zuaotaffazii6n6bke4
-      '@types/react': 18.0.20
+      '@mui/material': 5.10.6_ikcgkdnp4bn3rgptamntbhbo7e
+      '@types/react': 18.0.21
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.6_af5ln35zuaotaffazii6n6bke4:
+  /@mui/material/5.10.6_ikcgkdnp4bn3rgptamntbhbo7e:
     resolution: {integrity: sha512-QilW5PAAGSQdN7Cpp4rwSQ1doJAt3ca1a2PHZtr8RLVlpHnXb+qQ8CeDo9+9V2fK5CDNdtTN1F+iJKO43aFBpQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2860,14 +2860,14 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
-      '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
-      '@mui/base': 5.0.0-alpha.98_7ey2zzynotv32rpkwno45fsx4e
+      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
+      '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
+      '@mui/base': 5.0.0-alpha.98_rj7ozvcq3uehdlnj3cbwzbi5ce
       '@mui/core-downloads-tracker': 5.10.6
-      '@mui/system': 5.10.6_4mv32nu4vciambuqqzuu4gtvj4
-      '@mui/types': 7.2.0_@types+react@18.0.20
+      '@mui/system': 5.10.6_h33l6npc22g7vcra72cibfsrvm
+      '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
       csstype: 3.1.0
@@ -2878,7 +2878,7 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.6_w5j4k42lgipnm43s3brx6h3c34:
+  /@mui/private-theming/5.10.6_iapumuv4e6jcjznwuxpf4tt22e:
     resolution: {integrity: sha512-I/W0QyTLRdEx6py3lKAquKO/rNF/7j+nIOM/xCyI9kU0fcotVTcTY08mKMsS6vrzdWpi6pAkD0wP0KwWy5R5VA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2890,7 +2890,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@mui/utils': 5.10.6_react@18.2.0
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -2910,14 +2910,14 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/cache': 11.10.3
-      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
-      '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
+      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
+      '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
       csstype: 3.1.0
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.6_w5j4k42lgipnm43s3brx6h3c34:
+  /@mui/styles/5.10.6_iapumuv4e6jcjznwuxpf4tt22e:
     resolution: {integrity: sha512-QmT/PXDKOSttkSWV97SVw1isfmc+iNMQBUtVwafRju1T6+O26tf9Hz0QjILuXIk74lg/nrbQn5S5c9h6FZWPXQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2929,10 +2929,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.6_w5j4k42lgipnm43s3brx6h3c34
-      '@mui/types': 7.2.0_@types+react@18.0.20
+      '@mui/private-theming': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
+      '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       clsx: 1.2.1
       csstype: 3.1.0
       hoist-non-react-statics: 3.3.2
@@ -2948,7 +2948,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.6_4mv32nu4vciambuqqzuu4gtvj4:
+  /@mui/system/5.10.6_h33l6npc22g7vcra72cibfsrvm:
     resolution: {integrity: sha512-HfQVX7e2xpQ3jtdB/WwtkFVtozMOozyN575/63u8ILHkE8wGDhblmCieAsnyJPFbm7WBW5PCMyzmfr4QyKLaYg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2965,20 +2965,20 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_w5j4k42lgipnm43s3brx6h3c34
-      '@emotion/styled': 11.10.4_yiaqs725o7pcd7rteavrnhgj4y
-      '@mui/private-theming': 5.10.6_w5j4k42lgipnm43s3brx6h3c34
+      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
+      '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
+      '@mui/private-theming': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
       '@mui/styled-engine': 5.10.6_hfzxdiydbrbhhfpkwuv3jhvwmq
-      '@mui/types': 7.2.0_@types+react@18.0.20
+      '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
       clsx: 1.2.1
       csstype: 3.1.0
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/types/7.2.0_@types+react@18.0.20:
+  /@mui/types/7.2.0_@types+react@18.0.21:
     resolution: {integrity: sha512-lGXtFKe5lp3UxTBGqKI1l7G8sE2xBik8qCfrLHD5olwP/YU0/ReWoWT7Lp1//ri32dK39oPMrJN8TgbkCSbsNA==}
     peerDependencies:
       '@types/react': '*'
@@ -2986,7 +2986,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
     dev: false
 
   /@mui/utils/5.10.6_react@18.2.0:
@@ -3405,29 +3405,29 @@ packages:
   /@types/qrcode.react/1.0.2:
     resolution: {integrity: sha512-I9Oq5Cjlkgy3Tw7krCnCXLw2/zMhizkTere49OOcta23tkvH0xBTP0yInimTh0gstLRtb8Ki9NZVujE5UI6ffQ==}
     dependencies:
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
     dev: true
 
   /@types/react-dom/18.0.6:
     resolution: {integrity: sha512-/5OFZgfIPSwy+YuIBP/FgJnQnsxhZhjjrnxudMddeblOouIodEQ75X14Rr4wGSG/bknL+Omy9iWlLo1u/9GzAA==}
     dependencies:
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
     dev: true
 
   /@types/react-is/17.0.3:
     resolution: {integrity: sha512-aBTIWg1emtu95bLTLx0cpkxwGW3ueZv71nE2YFBpL8k/z5czEW8yYpOo8Dp+UUAFAtKwNaOsh/ioSeQnWlZcfw==}
     dependencies:
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
     dev: false
 
   /@types/react-transition-group/4.4.5:
     resolution: {integrity: sha512-juKD/eiSM3/xZYzjuzH6ZwpP+/lejltmiS3QEzV/vmb/Q8+HfDmxu+Baga8UEMGBqV88Nbg4l2hY/K2DkyaLLA==}
     dependencies:
-      '@types/react': 18.0.20
+      '@types/react': 18.0.21
     dev: false
 
-  /@types/react/18.0.20:
-    resolution: {integrity: sha512-MWul1teSPxujEHVwZl4a5HxQ9vVNsjTchVA+xRqv/VYGCuKGAU6UhfrTdF5aBefwD1BHUD8i/zq+O/vyCm/FrA==}
+  /@types/react/18.0.21:
+    resolution: {integrity: sha512-7QUCOxvFgnD5Jk8ZKlUAhVcRj7GuJRjnjjiY/IUBWKgOlnvDvTMLD4RTF7NPyVmbRhNrbomZiOepg7M/2Kj1mA==}
     dependencies:
       '@types/prop-types': 15.7.5
       '@types/scheduler': 0.16.2

From 46ad12b787a4199ec41f5592cae6c019f6895546 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 08:43:14 +1000
Subject: [PATCH 037/263] build(deps): update dependency esbuild to v0.15.9
 (#4050)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 160 +++++++++++++++++++++------------------------
 2 files changed, 75 insertions(+), 87 deletions(-)

diff --git a/web/package.json b/web/package.json
index 424f9a206..1a6c4cca2 100644
--- a/web/package.json
+++ b/web/package.json
@@ -156,7 +156,7 @@
     "@typescript-eslint/eslint-plugin": "5.38.0",
     "@typescript-eslint/parser": "5.38.0",
     "@vitejs/plugin-react": "2.1.0",
-    "esbuild": "0.15.8",
+    "esbuild": "0.15.9",
     "esbuild-jest": "0.5.0",
     "eslint": "8.23.1",
     "eslint-config-prettier": "8.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 46fc21eb5..c7ea7fad4 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -27,7 +27,7 @@ specifiers:
   axios: 0.27.2
   broadcast-channel: 4.17.0
   classnames: 2.3.2
-  esbuild: 0.15.8
+  esbuild: 0.15.9
   esbuild-jest: 0.5.0
   eslint: 8.23.1
   eslint-config-prettier: 8.5.0
@@ -106,8 +106,8 @@ devDependencies:
   '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
   '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
   '@vitejs/plugin-react': 2.1.0_vite@3.1.3
-  esbuild: 0.15.8
-  esbuild-jest: 0.5.0_esbuild@0.15.8
+  esbuild: 0.15.9
+  esbuild-jest: 0.5.0_esbuild@0.15.9
   eslint: 8.23.1
   eslint-config-prettier: 8.5.0_eslint@8.23.1
   eslint-config-react-app: 7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4
@@ -2386,19 +2386,17 @@ packages:
     resolution: {integrity: sha512-AHPmaAx+RYfZz0eYu6Gviiagpmiyw98ySSlQvCUhVGDRtDFe4DBS0x1bSjdF3gqUDYOczB+yYvBTtEylYSdRhg==}
     dev: false
 
-  /@esbuild/android-arm/0.15.8:
-    resolution: {integrity: sha512-CyEWALmn+no/lbgbAJsbuuhT8s2J19EJGHkeyAwjbFJMrj80KJ9zuYsoAvidPTU7BgBf87r/sgae8Tw0dbOc4Q==}
+  /@esbuild/android-arm/0.15.9:
+    resolution: {integrity: sha512-VZPy/ETF3fBG5PiinIkA0W/tlsvlEgJccyN2DzWZEl0DlVKRbu91PvY2D6Lxgluj4w9QtYHjOWjAT44C+oQ+EQ==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [android]
     requiresBuild: true
-    dependencies:
-      esbuild-wasm: 0.15.8
     dev: true
     optional: true
 
-  /@esbuild/linux-loong64/0.15.8:
-    resolution: {integrity: sha512-pE5RQsOTSERCtfZdfCT25wzo7dfhOSlhAXcsZmuvRYhendOv7djcdvtINdnDp2DAjP17WXlBB4nBO6sHLczmsg==}
+  /@esbuild/linux-loong64/0.15.9:
+    resolution: {integrity: sha512-O+NfmkfRrb3uSsTa4jE3WApidSe3N5++fyOVGP1SmMZi4A3BZELkhUUvj5hwmMuNdlpzAZ8iAPz2vmcR7DCFQA==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
@@ -4871,19 +4869,17 @@ packages:
       is-symbol: 1.0.4
     dev: true
 
-  /esbuild-android-64/0.15.8:
-    resolution: {integrity: sha512-bVh8FIKOolF7/d4AMzt7xHlL0Ljr+mYKSHI39TJWDkybVWHdn6+4ODL3xZGHOxPpdRpitemXA1WwMKYBsw8dGw==}
+  /esbuild-android-64/0.15.9:
+    resolution: {integrity: sha512-HQCX7FJn9T4kxZQkhPjNZC7tBWZqJvhlLHPU2SFzrQB/7nDXjmTIFpFTjt7Bd1uFpeXmuwf5h5fZm+x/hLnhbw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
     requiresBuild: true
-    dependencies:
-      esbuild-wasm: 0.15.8
     dev: true
     optional: true
 
-  /esbuild-android-arm64/0.15.8:
-    resolution: {integrity: sha512-ReAMDAHuo0H1h9LxRabI6gwYPn8k6WiUeyxuMvx17yTrJO+SCnIfNc/TSPFvDwtK9MiyiKG/2dBYHouT/M0BXQ==}
+  /esbuild-android-arm64/0.15.9:
+    resolution: {integrity: sha512-E6zbLfqbFVCNEKircSHnPiSTsm3fCRxeIMPfrkS33tFjIAoXtwegQfVZqMGR0FlsvVxp2NEDOUz+WW48COCjSg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
@@ -4891,8 +4887,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-64/0.15.8:
-    resolution: {integrity: sha512-KaKcGfJ+yto7Fo5gAj3xwxHMd1fBIKatpCHK8znTJLVv+9+NN2/tIPBqA4w5rBwjX0UqXDeIE2v1xJP+nGEXgA==}
+  /esbuild-darwin-64/0.15.9:
+    resolution: {integrity: sha512-gI7dClcDN/HHVacZhTmGjl0/TWZcGuKJ0I7/xDGJwRQQn7aafZGtvagOFNmuOq+OBFPhlPv1T6JElOXb0unkSQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
@@ -4900,8 +4896,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-arm64/0.15.8:
-    resolution: {integrity: sha512-8tjEaBgAKnXCkP7bhEJmEqdG9HEV6oLkF36BrMzpfW2rgaw0c48Zrxe+9RlfeGvs6gDF4w+agXyTjikzsS3izw==}
+  /esbuild-darwin-arm64/0.15.9:
+    resolution: {integrity: sha512-VZIMlcRN29yg/sv7DsDwN+OeufCcoTNaTl3Vnav7dL/nvsApD7uvhVRbgyMzv0zU/PP0xRhhIpTyc7lxEzHGSw==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
@@ -4909,8 +4905,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-64/0.15.8:
-    resolution: {integrity: sha512-jaxcsGHYzn2L0/lffON2WfH4Nc+d/EwozVTP5K2v016zxMb5UQMhLoJzvLgBqHT1SG0B/mO+a+THnJCMVg15zw==}
+  /esbuild-freebsd-64/0.15.9:
+    resolution: {integrity: sha512-uM4z5bTvuAXqPxrI204txhlsPIolQPWRMLenvGuCPZTnnGlCMF2QLs0Plcm26gcskhxewYo9LkkmYSS5Czrb5A==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
@@ -4918,8 +4914,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-arm64/0.15.8:
-    resolution: {integrity: sha512-2xp2UlljMvX8HExtcg7VHaeQk8OBU0CSl1j18B5CcZmSDkLF9p3utuMXIopG3a08fr9Hv+Dz6+seSXUow/G51w==}
+  /esbuild-freebsd-arm64/0.15.9:
+    resolution: {integrity: sha512-HHDjT3O5gWzicGdgJ5yokZVN9K9KG05SnERwl9nBYZaCjcCgj/sX8Ps1jvoFSfNCO04JSsHSOWo4qvxFuj8FoA==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
@@ -4927,7 +4923,7 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-jest/0.5.0_esbuild@0.15.8:
+  /esbuild-jest/0.5.0_esbuild@0.15.9:
     resolution: {integrity: sha512-AMZZCdEpXfNVOIDvURlqYyHwC8qC1/BFjgsrOiSL1eyiIArVtHL8YAC83Shhn16cYYoAWEW17yZn0W/RJKJKHQ==}
     peerDependencies:
       esbuild: '>=0.8.50'
@@ -4935,13 +4931,13 @@ packages:
       '@babel/core': 7.18.6
       '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.6
       babel-jest: 26.6.3_@babel+core@7.18.6
-      esbuild: 0.15.8
+      esbuild: 0.15.9
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /esbuild-linux-32/0.15.8:
-    resolution: {integrity: sha512-9u1E54BRz1FQMl86iaHK146+4ID2KYNxL3trLZT4QLLx3M7Q9n4lGG3lrzqUatGR2cKy8c33b0iaCzsItZWkFg==}
+  /esbuild-linux-32/0.15.9:
+    resolution: {integrity: sha512-AQIdE8FugGt1DkcekKi5ycI46QZpGJ/wqcMr7w6YUmOmp2ohQ8eO4sKUsOxNOvYL7hGEVwkndSyszR6HpVHLFg==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
@@ -4949,8 +4945,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-64/0.15.8:
-    resolution: {integrity: sha512-4HxrsN9eUzJXdVGMTYA5Xler82FuZUu21bXKN42zcLHHNKCAMPUzD62I+GwDhsdgUBAUj0tRXDdsQHgaP6v0HA==}
+  /esbuild-linux-64/0.15.9:
+    resolution: {integrity: sha512-4RXjae7g6Qs7StZyiYyXTZXBlfODhb1aBVAjd+ANuPmMhWthQilWo7rFHwJwL7DQu1Fjej2sODAVwLbcIVsAYQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
@@ -4958,8 +4954,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm/0.15.8:
-    resolution: {integrity: sha512-7DVBU9SFjX4+vBwt8tHsUCbE6Vvl6y6FQWHAgyw1lybC5gULqn/WnjHYHN2/LJaZRsDBvxWT4msEgwLGq1Wd3Q==}
+  /esbuild-linux-arm/0.15.9:
+    resolution: {integrity: sha512-3Zf2GVGUOI7XwChH3qrnTOSqfV1V4CAc/7zLVm4lO6JT6wbJrTgEYCCiNSzziSju+J9Jhf9YGWk/26quWPC6yQ==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
@@ -4967,8 +4963,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm64/0.15.8:
-    resolution: {integrity: sha512-1OCm7Aq0tEJT70PbxmHSGYDLYP8DKH8r4Nk7/XbVzWaduo9beCjGBB+tGZIHK6DdTQ3h00/4Tb/70YMH/bOtKg==}
+  /esbuild-linux-arm64/0.15.9:
+    resolution: {integrity: sha512-a+bTtxJmYmk9d+s2W4/R1SYKDDAldOKmWjWP0BnrWtDbvUBNOm++du0ysPju4mZVoEFgS1yLNW+VXnG/4FNwdQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
@@ -4976,8 +4972,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-mips64le/0.15.8:
-    resolution: {integrity: sha512-yeFoNPVFPEzZvFYBfUQNG2TjGRaCyV1E27OcOg4LOtnGrxb2wA+mkW3luckyv1CEyd00mpAg7UdHx8nlx3ghgA==}
+  /esbuild-linux-mips64le/0.15.9:
+    resolution: {integrity: sha512-Zn9HSylDp89y+TRREMDoGrc3Z4Hs5u56ozZLQCiZAUx2+HdbbXbWdjmw3FdTJ/i7t5Cew6/Q+6kfO3KCcFGlyw==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
@@ -4985,8 +4981,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-ppc64le/0.15.8:
-    resolution: {integrity: sha512-CEyMMUUNabXibw8OSNmBXhOIGhnjNVl5Lpseiuf00iKN0V47oqDrbo4dsHz1wH62m49AR8iG8wpDlTqfYgKbtg==}
+  /esbuild-linux-ppc64le/0.15.9:
+    resolution: {integrity: sha512-OEiOxNAMH9ENFYqRsWUj3CWyN3V8P3ZXyfNAtX5rlCEC/ERXrCEFCJji/1F6POzsXAzxvUJrTSTCy7G6BhA6Fw==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
@@ -4994,8 +4990,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-riscv64/0.15.8:
-    resolution: {integrity: sha512-OCGSOaspMUjexSCU8ZiA0UnV/NiRU+s2vIfEcAQWQ6u32R+2luyfh/4ZaY6jFbylJE07Esc/yRvb9Q5fXuClXA==}
+  /esbuild-linux-riscv64/0.15.9:
+    resolution: {integrity: sha512-ukm4KsC3QRausEFjzTsOZ/qqazw0YvJsKmfoZZm9QW27OHjk2XKSQGGvx8gIEswft/Sadp03/VZvAaqv5AIwNA==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
@@ -5003,8 +4999,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-s390x/0.15.8:
-    resolution: {integrity: sha512-RHdpdfxRTSrZXZJlFSLazFU4YwXLB5Rgf6Zr5rffqSsO4y9JybgtKO38bFwxZNlDXliYISXN/YROKrG9s7mZQA==}
+  /esbuild-linux-s390x/0.15.9:
+    resolution: {integrity: sha512-uDOQEH55wQ6ahcIKzQr3VyjGc6Po/xblLGLoUk3fVL1qjlZAibtQr6XRfy5wPJLu/M2o0vQKLq4lyJ2r1tWKcw==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
@@ -5012,8 +5008,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-netbsd-64/0.15.8:
-    resolution: {integrity: sha512-VolFFRatBH09T5QMWhiohAWCOien1R1Uz9K0BRVVTBgBaVBt7eArsXTKxVhUgRf2vwu2c2SXkuP0r7HLG0eozw==}
+  /esbuild-netbsd-64/0.15.9:
+    resolution: {integrity: sha512-yWgxaYTQz+TqX80wXRq6xAtb7GSBAp6gqLKfOdANg9qEmAI1Bxn04IrQr0Mzm4AhxvGKoHzjHjMgXbCCSSDxcw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
@@ -5021,8 +5017,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-openbsd-64/0.15.8:
-    resolution: {integrity: sha512-HTAPlg+n4kUeE/isQxlCfsOz0xJGNoT5LJ9oYZWFKABfVf4Ycu7Zlf5ITgOnrdheTkz8JeL/gISIOCFAoOXrSA==}
+  /esbuild-openbsd-64/0.15.9:
+    resolution: {integrity: sha512-JmS18acQl4iSAjrEha1MfEmUMN4FcnnrtTaJ7Qg0tDCOcgpPPQRLGsZqhes0vmx8VA6IqRyScqXvaL7+Q0Uf3A==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
@@ -5030,8 +5026,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-sunos-64/0.15.8:
-    resolution: {integrity: sha512-qMP/jR/FzcIOwKj+W+Lb+8Cfr8GZHbHUJxAPi7DUhNZMQ/6y7sOgRzlOSpRrbbUntrRZh0MqOyDhJ3Gpo6L1QA==}
+  /esbuild-sunos-64/0.15.9:
+    resolution: {integrity: sha512-UKynGSWpzkPmXW3D2UMOD9BZPIuRaSqphxSCwScfEE05Be3KAmvjsBhht1fLzKpiFVJb0BYMd4jEbWMyJ/z1hQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
@@ -5039,16 +5035,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-wasm/0.15.8:
-    resolution: {integrity: sha512-Y7uCl5RNO4URjlemjdx++ukVHEMt5s5AfMWYUnMiK4Sry+pPCvQIctzXq6r6FKCyGKjX6/NGMCqR2OX6aLxj0w==}
-    engines: {node: '>=12'}
-    hasBin: true
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /esbuild-windows-32/0.15.8:
-    resolution: {integrity: sha512-RKR1QHh4iWzjUhkP8Yqi75PPz/KS+b8zw3wUrzw6oAkj+iU5Qtyj61ZDaSG3Qf2vc6hTIUiPqVTqBH0NpXFNwg==}
+  /esbuild-windows-32/0.15.9:
+    resolution: {integrity: sha512-aqXvu4/W9XyTVqO/hw3rNxKE1TcZiEYHPsXM9LwYmKSX9/hjvfIJzXwQBlPcJ/QOxedfoMVH0YnhhQ9Ffb0RGA==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
@@ -5056,8 +5044,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-64/0.15.8:
-    resolution: {integrity: sha512-ag9ptYrsizgsR+PQE8QKeMqnosLvAMonQREpLw4evA4FFgOBMLEat/dY/9txbpozTw9eEOYyD3a4cE9yTu20FA==}
+  /esbuild-windows-64/0.15.9:
+    resolution: {integrity: sha512-zm7h91WUmlS4idMtjvCrEeNhlH7+TNOmqw5dJPJZrgFaxoFyqYG6CKDpdFCQXdyKpD5yvzaQBOMVTCBVKGZDEg==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
@@ -5065,8 +5053,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-arm64/0.15.8:
-    resolution: {integrity: sha512-dbpAb0VyPaUs9mgw65KRfQ9rqiWCHpNzrJusoPu+LpEoswosjt/tFxN7cd2l68AT4qWdBkzAjDLRon7uqMeWcg==}
+  /esbuild-windows-arm64/0.15.9:
+    resolution: {integrity: sha512-yQEVIv27oauAtvtuhJVfSNMztJJX47ismRS6Sv2QMVV9RM+6xjbMWuuwM2nxr5A2/gj/mu2z9YlQxiwoFRCfZA==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
@@ -5074,34 +5062,34 @@ packages:
     dev: true
     optional: true
 
-  /esbuild/0.15.8:
-    resolution: {integrity: sha512-Remsk2dmr1Ia65sU+QasE6svJbsHe62lzR+CnjpUvbZ+uSYo1SitiOWPRfZQkCu82YWZBBKXiD/j0i//XWMZ+Q==}
+  /esbuild/0.15.9:
+    resolution: {integrity: sha512-OnYr1rkMVxtmMHIAKZLMcEUlJmqcbxBz9QoBU8G9v455na0fuzlT/GLu6l+SRghrk0Mm2fSSciMmzV43Q8e0Gg==}
     engines: {node: '>=12'}
     hasBin: true
     requiresBuild: true
     optionalDependencies:
-      '@esbuild/android-arm': 0.15.8
-      '@esbuild/linux-loong64': 0.15.8
-      esbuild-android-64: 0.15.8
-      esbuild-android-arm64: 0.15.8
-      esbuild-darwin-64: 0.15.8
-      esbuild-darwin-arm64: 0.15.8
-      esbuild-freebsd-64: 0.15.8
-      esbuild-freebsd-arm64: 0.15.8
-      esbuild-linux-32: 0.15.8
-      esbuild-linux-64: 0.15.8
-      esbuild-linux-arm: 0.15.8
-      esbuild-linux-arm64: 0.15.8
-      esbuild-linux-mips64le: 0.15.8
-      esbuild-linux-ppc64le: 0.15.8
-      esbuild-linux-riscv64: 0.15.8
-      esbuild-linux-s390x: 0.15.8
-      esbuild-netbsd-64: 0.15.8
-      esbuild-openbsd-64: 0.15.8
-      esbuild-sunos-64: 0.15.8
-      esbuild-windows-32: 0.15.8
-      esbuild-windows-64: 0.15.8
-      esbuild-windows-arm64: 0.15.8
+      '@esbuild/android-arm': 0.15.9
+      '@esbuild/linux-loong64': 0.15.9
+      esbuild-android-64: 0.15.9
+      esbuild-android-arm64: 0.15.9
+      esbuild-darwin-64: 0.15.9
+      esbuild-darwin-arm64: 0.15.9
+      esbuild-freebsd-64: 0.15.9
+      esbuild-freebsd-arm64: 0.15.9
+      esbuild-linux-32: 0.15.9
+      esbuild-linux-64: 0.15.9
+      esbuild-linux-arm: 0.15.9
+      esbuild-linux-arm64: 0.15.9
+      esbuild-linux-mips64le: 0.15.9
+      esbuild-linux-ppc64le: 0.15.9
+      esbuild-linux-riscv64: 0.15.9
+      esbuild-linux-s390x: 0.15.9
+      esbuild-netbsd-64: 0.15.9
+      esbuild-openbsd-64: 0.15.9
+      esbuild-sunos-64: 0.15.9
+      esbuild-windows-32: 0.15.9
+      esbuild-windows-64: 0.15.9
+      esbuild-windows-arm64: 0.15.9
     dev: true
 
   /escalade/3.1.1:
@@ -9160,7 +9148,7 @@ packages:
       terser:
         optional: true
     dependencies:
-      esbuild: 0.15.8
+      esbuild: 0.15.9
       postcss: 8.4.16
       resolve: 1.22.1
       rollup: 2.78.0

From 85c65e9c146bc666cb940644104bb374193dc808 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 09:33:04 +1000
Subject: [PATCH 038/263] build(deps): update dependency react-router-dom to
 v6.4.1 (#4043)

---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 21 +++++++++++----------
 2 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/web/package.json b/web/package.json
index 1a6c4cca2..d2520784a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -41,7 +41,7 @@
     "react-i18next": "11.18.6",
     "react-loading": "2.0.3",
     "react-otp-input": "2.4.0",
-    "react-router-dom": "6.4.0",
+    "react-router-dom": "6.4.1",
     "zxcvbn": "4.4.2"
   },
   "scripts": {
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index c7ea7fad4..4037b3ea2 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -55,7 +55,7 @@ specifiers:
   react-i18next: 11.18.6
   react-loading: 2.0.3
   react-otp-input: 2.4.0
-  react-router-dom: 6.4.0
+  react-router-dom: 6.4.1
   react-test-renderer: 18.2.0
   typescript: 4.8.3
   vite: 3.1.3
@@ -89,7 +89,7 @@ dependencies:
   react-i18next: 11.18.6_ulhmqqxshznzmtuvahdi5nasbq
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
-  react-router-dom: 6.4.0_biqbaboplfbrettd7655fr4n2y
+  react-router-dom: 6.4.1_biqbaboplfbrettd7655fr4n2y
   zxcvbn: 4.4.2
 
 devDependencies:
@@ -3038,8 +3038,8 @@ packages:
     resolution: {integrity: sha512-50/17A98tWUfQ176raKiOGXuYpLyyVMkxxG6oylzL3BPOlA6ADGdK7EYunSa4I064xerltq9TGXs8HmOk5E+vw==}
     dev: false
 
-  /@remix-run/router/1.0.0:
-    resolution: {integrity: sha512-SCR1cxRSMNKjaVYptCzBApPDqGwa3FGdjVHc+rOToocNPHQdIYLZBfv/3f+KvYuXDkUGVIW9IAzmPNZDRL1I4A==}
+  /@remix-run/router/1.0.1:
+    resolution: {integrity: sha512-eBV5rvW4dRFOU1eajN7FmYxjAIVz/mRHgUE9En9mBn6m3mulK3WTR5C3iQhL9MZ14rWAq+xOlEaCkDiW0/heOg==}
     engines: {node: '>=14'}
     dev: false
 
@@ -8005,25 +8005,26 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /react-router-dom/6.4.0_biqbaboplfbrettd7655fr4n2y:
-    resolution: {integrity: sha512-4Aw1xmXKeleYYQ3x0Lcl2undHR6yMjXZjd9DKZd53SGOYqirrUThyUb0wwAX5VZAyvSuzjNJmZlJ3rR9+/vzqg==}
+  /react-router-dom/6.4.1_biqbaboplfbrettd7655fr4n2y:
+    resolution: {integrity: sha512-MY7NJCrGNVJtGp8ODMOBHu20UaIkmwD2V3YsAOUQoCXFk7Ppdwf55RdcGyrSj+ycSL9Uiwrb3gTLYSnzcRoXww==}
     engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
       react-dom: '>=16.8 || 18'
     dependencies:
+      '@remix-run/router': 1.0.1
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
-      react-router: 6.4.0_react@18.2.0
+      react-router: 6.4.1_react@18.2.0
     dev: false
 
-  /react-router/6.4.0_react@18.2.0:
-    resolution: {integrity: sha512-B+5bEXFlgR1XUdHYR6P94g299SjrfCBMmEDJNcFbpAyRH1j1748yt9NdDhW3++nw1lk3zQJ6aOO66zUx3KlTZg==}
+  /react-router/6.4.1_react@18.2.0:
+    resolution: {integrity: sha512-OJASKp5AykDWFewgWUim1vlLr7yfD4vO/h+bSgcP/ix8Md+LMHuAjovA74MQfsfhQJGGN1nHRhwS5qQQbbBt3A==}
     engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
     dependencies:
-      '@remix-run/router': 1.0.0
+      '@remix-run/router': 1.0.1
       react: 18.2.0
     dev: false
 

From d6a30baef0d7db6a5c57de4b709797beec73abf2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 09:51:18 +1000
Subject: [PATCH 039/263] build(deps): update caddy docker tag to v2.6.1
 (#4049)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/caddy/Dockerfile         | 4 ++--
 internal/suites/example/compose/caddy/docker-compose.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/internal/suites/example/compose/caddy/Dockerfile b/internal/suites/example/compose/caddy/Dockerfile
index c8f296990..a99eef3f0 100644
--- a/internal/suites/example/compose/caddy/Dockerfile
+++ b/internal/suites/example/compose/caddy/Dockerfile
@@ -1,7 +1,7 @@
-FROM caddy:2.6.0-builder AS builder
+FROM caddy:2.6.1-builder AS builder
 
 RUN xcaddy build fix-empty-copy-headers
 
-FROM caddy:2.6.0
+FROM caddy:2.6.1
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy
diff --git a/internal/suites/example/compose/caddy/docker-compose.yml b/internal/suites/example/compose/caddy/docker-compose.yml
index c292d4380..428874135 100644
--- a/internal/suites/example/compose/caddy/docker-compose.yml
+++ b/internal/suites/example/compose/caddy/docker-compose.yml
@@ -3,7 +3,7 @@ version: '3'
 services:
   caddy:
     # build: ./example/compose/caddy/ # used for debugging
-    image: caddy:2.6.0-alpine
+    image: caddy:2.6.1-alpine
     volumes:
       - ./example/compose/caddy/Caddyfile:/etc/caddy/Caddyfile
     networks:

From 6a6af84c08dbebd1a283171a898cc3e2bc8dad1b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 11:44:05 +1000
Subject: [PATCH 040/263] build(deps): update module github.com/go-rod/rod to
 v0.110.0 (#4048)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index d1b910ddc..5dae6d84d 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/go-asn1-ber/asn1-ber v1.5.4
 	github.com/go-ldap/ldap/v3 v3.4.4
-	github.com/go-rod/rod v0.109.3
+	github.com/go-rod/rod v0.110.0
 	github.com/go-sql-driver/mysql v1.6.0
 	github.com/go-webauthn/webauthn v0.4.0
 	github.com/golang-jwt/jwt/v4 v4.4.2
diff --git a/go.sum b/go.sum
index b4ff24bab..aa66afe7f 100644
--- a/go.sum
+++ b/go.sum
@@ -311,8 +311,8 @@ github.com/go-openapi/validate v0.19.3/go.mod h1:90Vh6jjkTn+OT1Eefm0ZixWNFjhtOH7
 github.com/go-openapi/validate v0.19.10/go.mod h1:RKEZTUWDkxKQxN2jDT7ZnZi2bhZlbNMAuKvKB+IaGx8=
 github.com/go-redis/redis/v8 v8.11.5 h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI=
 github.com/go-redis/redis/v8 v8.11.5/go.mod h1:gREzHqY1hg6oD9ngVRbLStwAWKhA0FEgq8Jd4h5lpwo=
-github.com/go-rod/rod v0.109.3 h1:MxuSJGK9lEUq07K+QPfnxnuvQpsQT+YI4SoQjSE0LVg=
-github.com/go-rod/rod v0.109.3/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
+github.com/go-rod/rod v0.110.0 h1:YGRMfL+NvYO25N2OzuYOQbmrAb6oOuW6S5jfrU5+y40=
+github.com/go-rod/rod v0.110.0/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.4.1/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.5.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LBy8hT2VhHyBg=

From 31e1ca6b59d8145a118837ffd24331cb6051434b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 20:00:17 +1000
Subject: [PATCH 041/263] build(deps): update haproxy docker tag to v2.6.6
 (#4051)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/haproxy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/haproxy/Dockerfile b/internal/suites/example/compose/haproxy/Dockerfile
index c72470737..c42df2bc3 100644
--- a/internal/suites/example/compose/haproxy/Dockerfile
+++ b/internal/suites/example/compose/haproxy/Dockerfile
@@ -1,4 +1,4 @@
-FROM haproxy:2.6.5-alpine
+FROM haproxy:2.6.6-alpine
 USER root
 
 RUN \

From bf6a41709aa2b39b3ec33969249fde6e92aea6d2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Sep 2022 20:49:21 +1000
Subject: [PATCH 042/263] build(deps): update module github.com/go-rod/rod to
 v0.110.1 (#4055)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 5dae6d84d..965ac2c90 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/go-asn1-ber/asn1-ber v1.5.4
 	github.com/go-ldap/ldap/v3 v3.4.4
-	github.com/go-rod/rod v0.110.0
+	github.com/go-rod/rod v0.110.1
 	github.com/go-sql-driver/mysql v1.6.0
 	github.com/go-webauthn/webauthn v0.4.0
 	github.com/golang-jwt/jwt/v4 v4.4.2
diff --git a/go.sum b/go.sum
index aa66afe7f..c461e63ce 100644
--- a/go.sum
+++ b/go.sum
@@ -311,8 +311,8 @@ github.com/go-openapi/validate v0.19.3/go.mod h1:90Vh6jjkTn+OT1Eefm0ZixWNFjhtOH7
 github.com/go-openapi/validate v0.19.10/go.mod h1:RKEZTUWDkxKQxN2jDT7ZnZi2bhZlbNMAuKvKB+IaGx8=
 github.com/go-redis/redis/v8 v8.11.5 h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI=
 github.com/go-redis/redis/v8 v8.11.5/go.mod h1:gREzHqY1hg6oD9ngVRbLStwAWKhA0FEgq8Jd4h5lpwo=
-github.com/go-rod/rod v0.110.0 h1:YGRMfL+NvYO25N2OzuYOQbmrAb6oOuW6S5jfrU5+y40=
-github.com/go-rod/rod v0.110.0/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
+github.com/go-rod/rod v0.110.1 h1:+e0rCHCsOyWsmbP/6J3TTcO3LiCodFEa9vjdUSOFm5w=
+github.com/go-rod/rod v0.110.1/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.4.1/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.5.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LBy8hT2VhHyBg=

From b25578392fe5afbf8b43c019fc9be687a10bb96b Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 24 Sep 2022 08:27:10 +1000
Subject: [PATCH 043/263] i18n: update translations (#4053)

---
 internal/server/locales/zh-CN/portal.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/internal/server/locales/zh-CN/portal.json b/internal/server/locales/zh-CN/portal.json
index 1f570dddf..70a6d6b13 100644
--- a/internal/server/locales/zh-CN/portal.json
+++ b/internal/server/locales/zh-CN/portal.json
@@ -1,7 +1,7 @@
 {
 	"Accept": "接受",
 	"Access your email addresses": "访问您的电子邮件地址",
-	"Access your group membership": "访问您的群组成员",
+	"Access your group membership": "访问您的所属用户组",
 	"Access your profile information": "访问您的个人资料信息",
 	"An email has been sent to your address to complete the process": "一封电子邮件已经发送到您的地址来完成该进程。",
 	"Authenticated": "已认证",
@@ -22,7 +22,7 @@
 	"Login": "登录",
 	"Logout": "注销",
 	"Lost your device?": "丢失了您的设备？",
-	"Methods": "方法",
+	"Methods": "验证方法",
 	"Must be at least {{len}} characters in length": "长度必须至少为 {{len}} 个字符",
 	"Must have at least one UPPERCASE letter": "必须至少有一个大写字母",
 	"Must have at least one lowercase letter": "必须至少有一个小写字母",
@@ -42,7 +42,7 @@
 	"Push Notification": "推送通知",
 	"Register device": "注册设备",
 	"Register your first device by clicking on the link below": "点击下面的链接来注册您的第一台设备。",
-	"Remember Consent": "记住协议",
+	"Remember Consent": "记住我的选择",
 	"Remember me": "记住我",
 	"Repeat new password": "再次输入新密码",
 	"Reset password": "重置密码",
@@ -54,7 +54,7 @@
 	"Select a Device": "选择一个设备",
 	"Sign in": "登录",
 	"Sign out": "登出",
-	"The above application is requesting the following permissions": "上述应用程序正在请求以下权限",
+	"The above application is requesting the following permissions": "此应用正在请求以下权限",
 	"The password does not meet the password policy": "密码不符合密码策略",
 	"The resource you're attempting to access requires two-factor authentication": "您要访问的资源需要双重身份验证。",
 	"There was a problem initiating the registration process": "启动注册过程时出现了问题",
@@ -62,11 +62,11 @@
 	"There was an issue initiating the password reset process": "启动密码重置过程时出现问题。",
 	"There was an issue resetting the password": "重置密码时出现问题",
 	"There was an issue signing out": "登出时出现问题",
-	"This saves this consent as a pre-configured consent for future use": "这将此同意保存为预配置的同意以供未来使用",
+	"This saves this consent as a pre-configured consent for future use": "以后为此应用自动授权以上权限",
 	"Time-based One-Time Password": "基于时间的一次性密码",
 	"Use OpenID to verify your identity": "使用 OpenID 验证您的身份",
 	"Username": "用户名",
-	"You must open the link from the same device and browser that initiated the registration process": "您必须从启动注册过程的同一设备和浏览器打开链接",
+	"You must open the link from the same device and browser that initiated the registration process": "您必须使用与注册时相同的设备和浏览器打开链接",
 	"You're being signed out and redirected": "您正在登出并重定向",
 	"Your supplied password does not meet the password policy requirements": "您提供的密码不符合密码政策要求。"
 }

From e1e1333f3e7165eb2f6d7f05d06c775c3a586a6a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 24 Sep 2022 10:05:23 +1000
Subject: [PATCH 044/263] build(deps): update golang.org/x/sync digest to
 7f9b162 (#4059)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 965ac2c90..07543cea7 100644
--- a/go.mod
+++ b/go.mod
@@ -36,7 +36,7 @@ require (
 	github.com/stretchr/testify v1.8.0
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
-	golang.org/x/sync v0.0.0-20220907140024-f12130a52804
+	golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7
 	golang.org/x/text v0.3.7
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
diff --git a/go.sum b/go.sum
index c461e63ce..1fdd5ce8a 100644
--- a/go.sum
+++ b/go.sum
@@ -1621,8 +1621,8 @@ golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20220907140024-f12130a52804 h1:0SH2R3f1b1VmIMG7BXbEZCBUu2dKmHschSmjqGUrW8A=
-golang.org/x/sync v0.0.0-20220907140024-f12130a52804/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7 h1:ZrnxWX62AgTKOSagEqxvb3ffipvEDX2pl7E1TdqLqIc=
+golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sys v0.0.0-20180816055513-1c9583448a9c/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=

From 3f7f84ac50529f8cb36bd1e8796ee40cee669d8e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 24 Sep 2022 10:31:26 +1000
Subject: [PATCH 045/263] build(deps): update dependency @types/node to
 v16.11.60 (#4057)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 74 +++++++++++++++++++++++-----------------------
 2 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/web/package.json b/web/package.json
index d2520784a..5df87a292 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.0.3",
-    "@types/node": "16.11.59",
+    "@types/node": "16.11.60",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 4037b3ea2..bf2ab882d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.0.3
-  '@types/node': 16.11.59
+  '@types/node': 16.11.60
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.0.3
-  '@types/node': 16.11.59
+  '@types/node': 16.11.60
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.23.1
   eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
   husky: 8.0.1
-  jest: 29.0.3_@types+node@16.11.59
+  jest: 29.0.3_@types+node@16.11.60
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.0.3
@@ -2507,7 +2507,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       jest-message-util: 29.0.3
       jest-util: 29.0.3
@@ -2528,14 +2528,14 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.0.3_@types+node@16.11.59
+      jest-config: 29.0.3_@types+node@16.11.60
       jest-haste-map: 29.0.3
       jest-message-util: 29.0.3
       jest-regex-util: 29.0.0
@@ -2562,7 +2562,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       jest-mock: 29.0.3
     dev: true
 
@@ -2589,7 +2589,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       jest-message-util: 29.0.3
       jest-mock: 29.0.3
       jest-util: 29.0.3
@@ -2622,7 +2622,7 @@ packages:
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2733,7 +2733,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2745,7 +2745,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3332,7 +3332,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3361,7 +3361,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3382,8 +3382,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/16.11.59:
-    resolution: {integrity: sha512-6u+36Dj3aDzhfBVUf/mfmc92OEdzQ2kx2jcXGdigfl70E/neV21ZHE6UCz4MDzTRcVqGAM27fk+DLXvyDsn3Jw==}
+  /@types/node/16.11.60:
+    resolution: {integrity: sha512-kYIYa1D1L+HDv5M5RXQeEu1o0FKA6yedZIoyugm/MBPROkLpX4L7HRxMrPVyo8bnvjpW/wDlqFNGzXNMb7AdRw==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5292,7 +5292,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
       '@typescript-eslint/experimental-utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
       eslint: 8.23.1
-      jest: 29.0.3_@types+node@16.11.59
+      jest: 29.0.3_@types+node@16.11.60
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6494,7 +6494,7 @@ packages:
       '@jest/expect': 29.0.3
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6513,7 +6513,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.0.3_@types+node@16.11.59:
+  /jest-cli/29.0.3_@types+node@16.11.60:
     resolution: {integrity: sha512-aUy9Gd/Kut1z80eBzG10jAn6BgS3BoBbXyv+uXEqBJ8wnnuZ5RpNfARoskSrTIy1GY4a8f32YGuCMwibtkl9CQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6530,7 +6530,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.0.3_@types+node@16.11.59
+      jest-config: 29.0.3_@types+node@16.11.60
       jest-util: 29.0.3
       jest-validate: 29.0.3
       prompts: 2.4.2
@@ -6541,7 +6541,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.0.3_@types+node@16.11.59:
+  /jest-config/29.0.3_@types+node@16.11.60:
     resolution: {integrity: sha512-U5qkc82HHVYe3fNu2CRXLN4g761Na26rWKf7CjM8LlZB3In1jadEkZdMwsE37rd9RSPV0NfYaCjHdk/gu3v+Ew==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6556,7 +6556,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       babel-jest: 29.0.3_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6616,7 +6616,7 @@ packages:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
       '@types/jsdom': 20.0.0
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       jest-mock: 29.0.3
       jest-util: 29.0.3
       jsdom: 20.0.0
@@ -6634,7 +6634,7 @@ packages:
       '@jest/environment': 29.0.3
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       jest-mock: 29.0.3
       jest-util: 29.0.3
     dev: true
@@ -6650,7 +6650,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6673,7 +6673,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6724,7 +6724,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
     dev: true
 
   /jest-pnp-resolver/1.2.2_jest-resolve@29.0.3:
@@ -6783,7 +6783,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6814,7 +6814,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6837,7 +6837,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       graceful-fs: 4.2.10
     dev: true
 
@@ -6882,7 +6882,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6894,7 +6894,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6921,7 +6921,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.0.3_@types+node@16.11.59
+      jest: 29.0.3_@types+node@16.11.60
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6935,7 +6935,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6947,7 +6947,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6956,12 +6956,12 @@ packages:
     resolution: {integrity: sha512-Tl/YWUugQOjoTYwjKdfJWkSOfhufJHO5LhXTSZC3TRoQKO+fuXnZAdoXXBlpLXKGODBL3OvdUasfDD4PcMe6ng==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 16.11.59
+      '@types/node': 16.11.60
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.0.3_@types+node@16.11.59:
+  /jest/29.0.3_@types+node@16.11.60:
     resolution: {integrity: sha512-ElgUtJBLgXM1E8L6K1RW1T96R897YY/3lRYqq9uVcPWtP2AAl/nQ16IYDh/FzQOOQ12VEuLdcPU83mbhG2C3PQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6974,7 +6974,7 @@ packages:
       '@jest/core': 29.0.3
       '@jest/types': 29.0.3
       import-local: 3.1.0
-      jest-cli: 29.0.3_@types+node@16.11.59
+      jest-cli: 29.0.3_@types+node@16.11.60
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 18d62912a33df6d38f5cbfe40cd15ca400f10327 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 24 Sep 2022 11:14:19 +1000
Subject: [PATCH 046/263] build(deps): update dependency eslint to v8.24.0
 (#4060)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 168 ++++++++++++++++++++++-----------------------
 2 files changed, 85 insertions(+), 85 deletions(-)

diff --git a/web/package.json b/web/package.json
index 5df87a292..288b9c98f 100644
--- a/web/package.json
+++ b/web/package.json
@@ -158,7 +158,7 @@
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.9",
     "esbuild-jest": "0.5.0",
-    "eslint": "8.23.1",
+    "eslint": "8.24.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-config-react-app": "7.0.1",
     "eslint-formatter-rdjson": "1.0.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index bf2ab882d..2ca3af0d9 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -29,7 +29,7 @@ specifiers:
   classnames: 2.3.2
   esbuild: 0.15.9
   esbuild-jest: 0.5.0
-  eslint: 8.23.1
+  eslint: 8.24.0
   eslint-config-prettier: 8.5.0
   eslint-config-react-app: 7.0.1
   eslint-formatter-rdjson: 1.0.5
@@ -103,21 +103,21 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
-  '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
+  '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
+  '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
   '@vitejs/plugin-react': 2.1.0_vite@3.1.3
   esbuild: 0.15.9
   esbuild-jest: 0.5.0_esbuild@0.15.9
-  eslint: 8.23.1
-  eslint-config-prettier: 8.5.0_eslint@8.23.1
-  eslint-config-react-app: 7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4
+  eslint: 8.24.0
+  eslint-config-prettier: 8.5.0_eslint@8.24.0
+  eslint-config-react-app: 7.0.1_6tbxscchz65k4ix64o3f4kxg3m
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
-  eslint-plugin-import: 2.26.0_qidincc6lbiur5hfuez2qbs5ge
-  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
-  eslint-plugin-prettier: 4.2.1_cabrci5exjdaojcvd6xoxgeowu
-  eslint-plugin-react: 7.31.8_eslint@8.23.1
-  eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
+  eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
+  eslint-plugin-import: 2.26.0_ggwdnprjbfokntkrfpgjqs2m4y
+  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
+  eslint-plugin-prettier: 4.2.1_cfn5x6ujhhgzv3423d6k7r2zzm
+  eslint-plugin-react: 7.31.8_eslint@8.24.0
+  eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
   jest: 29.0.3_@types+node@16.11.60
   jest-environment-jsdom: 29.0.3
@@ -127,7 +127,7 @@ devDependencies:
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.3
   vite: 3.1.3
-  vite-plugin-eslint: 1.8.1_eslint@8.23.1+vite@3.1.3
+  vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.3
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1_vite@3.1.3
   vite-tsconfig-paths: 3.5.0_vite@3.1.3
@@ -203,7 +203,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/eslint-parser/7.18.2_i26poghmbi7wetx4acurtjxrle:
+  /@babel/eslint-parser/7.18.2_6hamdueellmfdowr3e64hskol4:
     resolution: {integrity: sha512-oFQYkE8SuH14+uR51JVAmdqwKYXGRjEXx7s+WiagVjqQ+HPE+nnwyF2qlVG8evUsUHmPcA+6YXMEDbIhEyQc5A==}
     engines: {node: ^10.13.0 || ^12.13.0 || >=14.0.0}
     peerDependencies:
@@ -214,7 +214,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      eslint: 8.23.1
+      eslint: 8.24.0
       eslint-scope: 5.1.1
       eslint-visitor-keys: 2.1.0
       semver: 6.3.0
@@ -2462,8 +2462,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@humanwhocodes/config-array/0.10.4:
-    resolution: {integrity: sha512-mXAIHxZT3Vcpg83opl1wGlVZ9xydbfZO3r5YfRSH6Gpp2J/PfdBP0wbDa2sO6/qRbcalpoevVyW6A/fI6LfeMw==}
+  /@humanwhocodes/config-array/0.10.5:
+    resolution: {integrity: sha512-XVVDtp+dVvRxMoxSiSfasYaG02VEe1qH5cKgMQJWhol6HwzbcqoCMJi8dAGoYAO57jhUyhI6cWuRiTcRaDaYug==}
     engines: {node: '>=10.10.0'}
     dependencies:
       '@humanwhocodes/object-schema': 1.2.1
@@ -3468,7 +3468,7 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.38.0_wsb62dxj2oqwgas4kadjymcmry:
+  /@typescript-eslint/eslint-plugin/5.38.0_4gkcvl6qsi23tqqawfqgcwtp54:
     resolution: {integrity: sha512-GgHi/GNuUbTOeoJiEANi0oI6fF3gBQc3bGFYj40nnAPCbhrtEDf2rjBmefFadweBmO1Du1YovHeDP2h5JLhtTQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3479,12 +3479,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
       '@typescript-eslint/scope-manager': 5.38.0
-      '@typescript-eslint/type-utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
-      '@typescript-eslint/utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/type-utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
       debug: 4.3.4
-      eslint: 8.23.1
+      eslint: 8.24.0
       ignore: 5.2.0
       regexpp: 3.2.0
       semver: 7.3.7
@@ -3494,20 +3494,20 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/experimental-utils/5.30.6_irgkl5vooow2ydyo6aokmferha:
+  /@typescript-eslint/experimental-utils/5.30.6_7ilbxdl5iguzcjriqqcg2m5cku:
     resolution: {integrity: sha512-bqvT+0L8IjtW7MCrMgm9oVNxs4g7mESro1mm5c1/SNfTnHuFTf9OUX1WzVkTz75M9cp//UrTrSmGvK48NEKshQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
-      eslint: 8.23.1
+      '@typescript-eslint/utils': 5.30.6_7ilbxdl5iguzcjriqqcg2m5cku
+      eslint: 8.24.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.38.0_irgkl5vooow2ydyo6aokmferha:
+  /@typescript-eslint/parser/5.38.0_7ilbxdl5iguzcjriqqcg2m5cku:
     resolution: {integrity: sha512-/F63giJGLDr0ms1Cr8utDAxP2SPiglaD6V+pCOcG35P2jCqdfR7uuEhz1GIC3oy4hkUF8xA1XSXmd9hOh/a5EA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3521,7 +3521,7 @@ packages:
       '@typescript-eslint/types': 5.38.0
       '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
       debug: 4.3.4
-      eslint: 8.23.1
+      eslint: 8.24.0
       typescript: 4.8.3
     transitivePeerDependencies:
       - supports-color
@@ -3543,7 +3543,7 @@ packages:
       '@typescript-eslint/visitor-keys': 5.38.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.38.0_irgkl5vooow2ydyo6aokmferha:
+  /@typescript-eslint/type-utils/5.38.0_7ilbxdl5iguzcjriqqcg2m5cku:
     resolution: {integrity: sha512-iZq5USgybUcj/lfnbuelJ0j3K9dbs1I3RICAJY9NZZpDgBYXmuUlYQGzftpQA9wC8cKgtS6DASTvF3HrXwwozA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3554,9 +3554,9 @@ packages:
         optional: true
     dependencies:
       '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
-      '@typescript-eslint/utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
       debug: 4.3.4
-      eslint: 8.23.1
+      eslint: 8.24.0
       tsutils: 3.21.0_typescript@4.8.3
       typescript: 4.8.3
     transitivePeerDependencies:
@@ -3615,7 +3615,7 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/utils/5.30.6_irgkl5vooow2ydyo6aokmferha:
+  /@typescript-eslint/utils/5.30.6_7ilbxdl5iguzcjriqqcg2m5cku:
     resolution: {integrity: sha512-xFBLc/esUbLOJLk9jKv0E9gD/OH966M40aY9jJ8GiqpSkP2xOV908cokJqqhVd85WoIvHVHYXxSFE4cCSDzVvA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3625,15 +3625,15 @@ packages:
       '@typescript-eslint/scope-manager': 5.30.6
       '@typescript-eslint/types': 5.30.6
       '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.3
-      eslint: 8.23.1
+      eslint: 8.24.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.23.1
+      eslint-utils: 3.0.0_eslint@8.24.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.38.0_irgkl5vooow2ydyo6aokmferha:
+  /@typescript-eslint/utils/5.38.0_7ilbxdl5iguzcjriqqcg2m5cku:
     resolution: {integrity: sha512-6sdeYaBgk9Fh7N2unEXGz+D+som2QCQGPAf1SxrkEr+Z32gMreQ0rparXTNGRRfYUWk/JzbGdcM8NSSd6oqnTA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3643,9 +3643,9 @@ packages:
       '@typescript-eslint/scope-manager': 5.38.0
       '@typescript-eslint/types': 5.38.0
       '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
-      eslint: 8.23.1
+      eslint: 8.24.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.23.1
+      eslint-utils: 3.0.0_eslint@8.24.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5123,16 +5123,16 @@ packages:
       source-map: 0.6.1
     dev: true
 
-  /eslint-config-prettier/8.5.0_eslint@8.23.1:
+  /eslint-config-prettier/8.5.0_eslint@8.24.0:
     resolution: {integrity: sha512-obmWKLUNCnhtQRKc+tmnYuQl0pFU1ibYJQ5BGhTVB08bHe9wC8qUeG7c08dj9XX+AuPj1YSGSQIHl1pnDHZR0Q==}
     hasBin: true
     peerDependencies:
       eslint: '>=7.0.0'
     dependencies:
-      eslint: 8.23.1
+      eslint: 8.24.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_jtmsnsp46pwebcrxlmbbcwtgs4:
+  /eslint-config-react-app/7.0.1_6tbxscchz65k4ix64o3f4kxg3m:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5143,20 +5143,20 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/eslint-parser': 7.18.2_i26poghmbi7wetx4acurtjxrle
+      '@babel/eslint-parser': 7.18.2_6hamdueellmfdowr3e64hskol4
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
-      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
+      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
-      eslint: 8.23.1
-      eslint-plugin-flowtype: 8.0.3_eslint@8.23.1
-      eslint-plugin-import: 2.26.0_qidincc6lbiur5hfuez2qbs5ge
-      eslint-plugin-jest: 25.7.0_qsk6uocri6piwezqjqcgw24zhq
-      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.23.1
-      eslint-plugin-react: 7.31.8_eslint@8.23.1
-      eslint-plugin-react-hooks: 4.6.0_eslint@8.23.1
-      eslint-plugin-testing-library: 5.5.1_irgkl5vooow2ydyo6aokmferha
+      eslint: 8.24.0
+      eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
+      eslint-plugin-import: 2.26.0_ggwdnprjbfokntkrfpgjqs2m4y
+      eslint-plugin-jest: 25.7.0_2m2ou27oxlec5bzg2xuqbekqly
+      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
+      eslint-plugin-react: 7.31.8_eslint@8.24.0
+      eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
+      eslint-plugin-testing-library: 5.5.1_7ilbxdl5iguzcjriqqcg2m5cku
       typescript: 4.8.3
     transitivePeerDependencies:
       - '@babel/plugin-syntax-flow'
@@ -5180,7 +5180,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-import-resolver-typescript/3.5.1_hdzsmr7kawaomymueo2tso6fjq:
+  /eslint-import-resolver-typescript/3.5.1_dg2pe6kqkrddxbf2funb723kue:
     resolution: {integrity: sha512-U7LUjNJPYjNsHvAUAkt/RU3fcTSpbllA0//35B4eLYTX74frmOepbt7F7J3D1IGtj9k21buOpaqtDd4ZlS/BYQ==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -5189,8 +5189,8 @@ packages:
     dependencies:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
-      eslint: 8.23.1
-      eslint-plugin-import: 2.26.0_qidincc6lbiur5hfuez2qbs5ge
+      eslint: 8.24.0
+      eslint-plugin-import: 2.26.0_ggwdnprjbfokntkrfpgjqs2m4y
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5218,16 +5218,16 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
-      eslint-import-resolver-typescript: 3.5.1_hdzsmr7kawaomymueo2tso6fjq
+      eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
       find-up: 2.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /eslint-plugin-flowtype/8.0.3_eslint@8.23.1:
+  /eslint-plugin-flowtype/8.0.3_eslint@8.24.0:
     resolution: {integrity: sha512-dX8l6qUL6O+fYPtpNRideCFSpmWOUVx5QcaGLVqe/vlDiBSe4vYljDWDETwnyFzpl7By/WVIu6rcrniCgH9BqQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5240,12 +5240,12 @@ packages:
       '@babel/plugin-transform-react-jsx':
         optional: true
     dependencies:
-      eslint: 8.23.1
+      eslint: 8.24.0
       lodash: 4.17.21
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_qidincc6lbiur5hfuez2qbs5ge:
+  /eslint-plugin-import/2.26.0_ggwdnprjbfokntkrfpgjqs2m4y:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5255,12 +5255,12 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.0_irgkl5vooow2ydyo6aokmferha
+      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
-      eslint: 8.23.1
+      eslint: 8.24.0
       eslint-import-resolver-node: 0.3.6
       eslint-module-utils: 2.7.3_ykdyddfakcjre356m77nfkledi
       has: 1.0.3
@@ -5276,7 +5276,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_qsk6uocri6piwezqjqcgw24zhq:
+  /eslint-plugin-jest/25.7.0_2m2ou27oxlec5bzg2xuqbekqly:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5289,16 +5289,16 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.38.0_wsb62dxj2oqwgas4kadjymcmry
-      '@typescript-eslint/experimental-utils': 5.30.6_irgkl5vooow2ydyo6aokmferha
-      eslint: 8.23.1
+      '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
+      '@typescript-eslint/experimental-utils': 5.30.6_7ilbxdl5iguzcjriqqcg2m5cku
+      eslint: 8.24.0
       jest: 29.0.3_@types+node@16.11.60
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.23.1:
+  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.24.0:
     resolution: {integrity: sha512-sXgFVNHiWffBq23uiS/JaP6eVR622DqwB4yTzKvGZGcPq6/yZ3WmOZfuBks/vHWo9GaFOqC2ZK4i6+C35knx7Q==}
     engines: {node: '>=4.0'}
     peerDependencies:
@@ -5312,7 +5312,7 @@ packages:
       axobject-query: 2.2.0
       damerau-levenshtein: 1.0.8
       emoji-regex: 9.2.2
-      eslint: 8.23.1
+      eslint: 8.24.0
       has: 1.0.3
       jsx-ast-utils: 3.3.2
       language-tags: 1.0.5
@@ -5320,7 +5320,7 @@ packages:
       semver: 6.3.0
     dev: true
 
-  /eslint-plugin-prettier/4.2.1_cabrci5exjdaojcvd6xoxgeowu:
+  /eslint-plugin-prettier/4.2.1_cfn5x6ujhhgzv3423d6k7r2zzm:
     resolution: {integrity: sha512-f/0rXLXUt0oFYs8ra4w49wYZBG5GKZpAYsJSm6rnYL5uVDjd+zowwMwVZHnAjf4edNrKpCDYfXDgmRE/Ak7QyQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5331,22 +5331,22 @@ packages:
       eslint-config-prettier:
         optional: true
     dependencies:
-      eslint: 8.23.1
-      eslint-config-prettier: 8.5.0_eslint@8.23.1
+      eslint: 8.24.0
+      eslint-config-prettier: 8.5.0_eslint@8.24.0
       prettier: 2.7.1
       prettier-linter-helpers: 1.0.0
     dev: true
 
-  /eslint-plugin-react-hooks/4.6.0_eslint@8.23.1:
+  /eslint-plugin-react-hooks/4.6.0_eslint@8.24.0:
     resolution: {integrity: sha512-oFc7Itz9Qxh2x4gNHStv3BqJq54ExXmfC+a1NjAta66IAN87Wu0R/QArgIS9qKzX3dXKPI9H5crl9QchNMY9+g==}
     engines: {node: '>=10'}
     peerDependencies:
       eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0
     dependencies:
-      eslint: 8.23.1
+      eslint: 8.24.0
     dev: true
 
-  /eslint-plugin-react/7.31.8_eslint@8.23.1:
+  /eslint-plugin-react/7.31.8_eslint@8.24.0:
     resolution: {integrity: sha512-5lBTZmgQmARLLSYiwI71tiGVTLUuqXantZM6vlSY39OaDSV0M7+32K5DnLkmFrwTe+Ksz0ffuLUC91RUviVZfw==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5355,7 +5355,7 @@ packages:
       array-includes: 3.1.5
       array.prototype.flatmap: 1.3.0
       doctrine: 2.1.0
-      eslint: 8.23.1
+      eslint: 8.24.0
       estraverse: 5.3.0
       jsx-ast-utils: 3.3.2
       minimatch: 3.1.2
@@ -5369,14 +5369,14 @@ packages:
       string.prototype.matchall: 4.0.7
     dev: true
 
-  /eslint-plugin-testing-library/5.5.1_irgkl5vooow2ydyo6aokmferha:
+  /eslint-plugin-testing-library/5.5.1_7ilbxdl5iguzcjriqqcg2m5cku:
     resolution: {integrity: sha512-plLEkkbAKBjPxsLj7x4jNapcHAg2ernkQlKKrN2I8NrQwPISZHyCUNvg5Hv3EDqOQReToQb5bnqXYbkijJPE/g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0, npm: '>=6'}
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.38.0_irgkl5vooow2ydyo6aokmferha
-      eslint: 8.23.1
+      '@typescript-eslint/utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      eslint: 8.24.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5398,13 +5398,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.23.1:
+  /eslint-utils/3.0.0_eslint@8.24.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.23.1
+      eslint: 8.24.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -5418,13 +5418,13 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.23.1:
-    resolution: {integrity: sha512-w7C1IXCc6fNqjpuYd0yPlcTKKmHlHHktRkzmBPZ+7cvNBQuiNjx0xaMTjAJGCafJhQkrFJooREv0CtrVzmHwqg==}
+  /eslint/8.24.0:
+    resolution: {integrity: sha512-dWFaPhGhTAiPcCgm3f6LI2MBWbogMnTJzFBbhXVRQDJPkr9pGZvVjlVfXd+vyDcWPA2Ic9L2AXPIQM0+vk/cSQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
       '@eslint/eslintrc': 1.3.2
-      '@humanwhocodes/config-array': 0.10.4
+      '@humanwhocodes/config-array': 0.10.5
       '@humanwhocodes/gitignore-to-minimatch': 1.0.2
       '@humanwhocodes/module-importer': 1.0.1
       ajv: 6.12.6
@@ -5434,7 +5434,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.23.1
+      eslint-utils: 3.0.0_eslint@8.24.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -9080,7 +9080,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.23.1+vite@3.1.3:
+  /vite-plugin-eslint/1.8.1_eslint@8.24.0+vite@3.1.3:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9088,7 +9088,7 @@ packages:
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@types/eslint': 8.4.5
-      eslint: 8.23.1
+      eslint: 8.24.0
       rollup: 2.78.0
       vite: 3.1.3
     dev: true

From c8325151928ad9c9c1deceb9aea9f4be55304e7f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 24 Sep 2022 12:31:43 +1000
Subject: [PATCH 047/263] build(deps): update traefik docker tag to v2.8.7
 (#4058)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
---
 internal/suites/example/compose/traefik2/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/traefik2/docker-compose.yml b/internal/suites/example/compose/traefik2/docker-compose.yml
index 0b001ddaf..dbfc8ee41 100644
--- a/internal/suites/example/compose/traefik2/docker-compose.yml
+++ b/internal/suites/example/compose/traefik2/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   traefik:
-    image: traefik:v2.8.5
+    image: traefik:v2.8.7
     volumes:
       - '/var/run/docker.sock:/var/run/docker.sock'
     labels:

From 1d16a0c516e4c476f02d9d69ca041151abe827e5 Mon Sep 17 00:00:00 2001
From: Hugo Wehbe <dev.github@wlab.ovh>
Date: Sat, 24 Sep 2022 17:40:48 -0400
Subject: [PATCH 048/263] docs: fix typo in storage introduction file (#4068)

---
 docs/content/en/configuration/storage/introduction.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/en/configuration/storage/introduction.md b/docs/content/en/configuration/storage/introduction.md
index 516e41ce9..412fa9fcb 100644
--- a/docs/content/en/configuration/storage/introduction.md
+++ b/docs/content/en/configuration/storage/introduction.md
@@ -47,7 +47,7 @@ It's __strongly recommended__ this is a
 [Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
 characters.
 
-See [securty measures](../../overview/security/measures.md#storage-security-measures) for more information.
+See [security measures](../../overview/security/measures.md#storage-security-measures) for more information.
 
 ### postgres
 

From 3390dda59bd6fcd7766e1585ff2b2fd793b1cc8c Mon Sep 17 00:00:00 2001
From: stanthewizzard <stanthewizzard@users.noreply.github.com>
Date: Sat, 24 Sep 2022 23:44:00 +0200
Subject: [PATCH 049/263] docs: fix komga integration guide (#4045)

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 docs/content/en/integration/openid-connect/komga/index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/en/integration/openid-connect/komga/index.md b/docs/content/en/integration/openid-connect/komga/index.md
index 1e9ff3911..cf4cf2370 100644
--- a/docs/content/en/integration/openid-connect/komga/index.md
+++ b/docs/content/en/integration/openid-connect/komga/index.md
@@ -78,7 +78,7 @@ which will operate with the above example:
     - https://komga.example.com/login/oauth2/code/authelia
   scopes:
     - openid
-    - preferred_username
+    - profile
     - email
   grant_types:
     - authorization_code

From ebded1d0b92dc6ab22a74e42b5c34372c61e4300 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 25 Sep 2022 10:51:26 +1000
Subject: [PATCH 050/263] build(deps): update dependency vite-tsconfig-paths to
 v3.5.1 (#4067)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 288b9c98f..0dfdcde2e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -180,6 +180,6 @@
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
-    "vite-tsconfig-paths": "3.5.0"
+    "vite-tsconfig-paths": "3.5.1"
   }
 }
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 2ca3af0d9..bdd4e293d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -62,7 +62,7 @@ specifiers:
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
-  vite-tsconfig-paths: 3.5.0
+  vite-tsconfig-paths: 3.5.1
   zxcvbn: 4.4.2
 
 dependencies:
@@ -130,7 +130,7 @@ devDependencies:
   vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.3
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1_vite@3.1.3
-  vite-tsconfig-paths: 3.5.0_vite@3.1.3
+  vite-tsconfig-paths: 3.5.1_vite@3.1.3
 
 packages:
 
@@ -9116,8 +9116,8 @@ packages:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.0_vite@3.1.3:
-    resolution: {integrity: sha512-NKIubr7gXgh/3uniQaOytSg+aKWPrjquP6anAy+zCWEn6h9fB8z2/qdlfQrTgZWaXJ2pHVlllrSdRZltHn9P4g==}
+  /vite-tsconfig-paths/3.5.1_vite@3.1.3:
+    resolution: {integrity: sha512-t7cPvDMDxOCUxxNLqngXiX+L6jPYBr+eMgkeVadknxBb89d2s1aejz+wFEep010VfXjGVAUWGEFPe1fkRYTFvg==}
     peerDependencies:
       vite: '>2.0.0-0'
     dependencies:

From 32d28151f8b2c8e0be3595445a7f23d35a844820 Mon Sep 17 00:00:00 2001
From: Amir Zarrinkafsh <nightah@me.com>
Date: Sun, 25 Sep 2022 20:19:37 +1000
Subject: [PATCH 051/263] ci(renovate): enable auto-merge for minor and patch
 deps (#4070)

* ci(renovate): enable auto-merge for minor and patch deps

* fix: spacing
---
 .renovaterc | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.renovaterc b/.renovaterc
index 09fe00a98..ebbfff41f 100644
--- a/.renovaterc
+++ b/.renovaterc
@@ -24,6 +24,13 @@
     "dependencies"
   ],
   "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchCurrentVersion": "!/^0/",
+      "automerge": true,
+      "automergeType": "pr",
+      "platformAutomerge": true
+    },
     {
       "datasources": [
         "docker"

From 3a65d9af5492aff7dd9a455871f4440ce0ac0cd2 Mon Sep 17 00:00:00 2001
From: boomam <37086258+boomam@users.noreply.github.com>
Date: Sun, 25 Sep 2022 14:50:54 -0400
Subject: [PATCH 052/263] docs: ldap integration guides (#3920)

---
 .../en/integration/ldap/introduction.md       | 131 +++++++++++++++++-
 1 file changed, 129 insertions(+), 2 deletions(-)

diff --git a/docs/content/en/integration/ldap/introduction.md b/docs/content/en/integration/ldap/introduction.md
index 3d20552f3..0fecc0c32 100644
--- a/docs/content/en/integration/ldap/introduction.md
+++ b/docs/content/en/integration/ldap/introduction.md
@@ -12,6 +12,133 @@ weight: 710
 toc: true
 ---
 
-## UNDER CONSTRUCTION
+## Tested Versions
 
-This section of the documentation is under construction.
+* [Authelia]
+  * [v4.36.5](https://github.com/authelia/authelia/releases/tag/v4.36.5)
+
+## Configuration
+
+### OpenLDAP
+#### Tested Version: [Bitnami OpenLDAP - 2.5.13](https://github.com/bitnami/bitnami-docker-openldap/releases/tag/2.5.13-debian-11-r7)  
+Create within OpenLDAP, either via CLI or with a GUI management application like [phpLDAPadmin](http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page) or [LDAP Admin](http://www.ldapadmin.org/) a basic user with a complex password.
+*Make note of its CN.*
+You can also create a group to use within Authelia if you would like granular control of who can login, and reference it within the filters below.
+
+### Authelia
+
+In your Authelia configuration you will need to enter and update the following variables - 
+* url `ldap://OpenLDAP:1389` - servers dns name & port.  
+  *tip: if you have Authelia on a container network that is routable, you can just use the container name*
+* server_name `ldap01.example.com` - servers name
+* base_dn `dc=example,dc=com` - common name of domain root.
+* groups_filter `dc=example,dc=com` - replace relevant section with your own domain in common name format, same as base_dn.
+* user `authelia` - username for Authelia service account
+* password `SUPER_COMPLEX_PASSWORD` - password for Authelia service account
+
+```yaml
+  ldap:
+    implementation: custom
+    url: ldap://OpenLDAP:1389
+    timeout: 5s
+    start_tls: false
+    tls:
+      server_name: ldap01.example.com
+      skip_verify: true
+      minimum_version: TLS1.2
+    base_dn: dc=example,dc=com
+    additional_users_dn: ou=users
+    users_filter: (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
+    username_attribute: uid
+    mail_attribute: mail
+    display_name_attribute: displayName
+    additional_groups_dn: ou=groups
+    groups_filter: (&(member=uid={input},ou=users,dc=example,dc=com)(objectclass=groupofnames))
+    group_name_attribute: cn
+    user: uid=authelia,ou=service accounts,dc=example,dc=com
+    password: "SUPER_COMPLEX_PASSWORD"
+```
+Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.  
+
+### FreeIPA
+#### Tested Version: [FreeIPA - 4.9.9/CentOS]([https://github.com/bitnami/bitnami-docker-openldap/releases/tag/2.5.13-debian-11-r7](https://www.freeipa.org/page/Releases/4.9.9))  
+Create within FreeIPA, either via CLI or within its GUI management application `https://server_ip` a basic user with a complex password.
+*Make note of its CN.*
+You can also create a group to use within Authelia if you would like granular control of who can login, and reference it within the filters below.
+
+### Authelia
+
+In your Authelia configuration you will need to enter and update the following variables - 
+* url `ldap://ldap` - servers dns name. Port will assume 389 as standard. Specify custom port with `:port` if needed.  
+* server_name `ldap01.example.com` - servers name
+* base_dn `dc=example,dc=com` - common name of domain root.
+* groups_filter `dc=example,dc=com` - replace relevant section with your own domain in common name format, same as base_dn.
+* user `authelia` - username for Authelia service account
+* password `SUPER_COMPLEX_PASSWORD` - password for Authelia service account
+
+```yaml
+ ldap:
+    implementation: custom
+    url: ldaps://ldap.example.com
+    timeout: 5s
+    start_tls: false
+    tls:
+      server_name: ldap.example.com
+      skip_verify: true
+      minimum_version: TLS1.2
+    base_dn: dc=example,dc=com
+    username_attribute: uid
+    additional_users_dn: cn=users,cn=accounts
+    users_filter: (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
+    additional_groups_dn: ou=groups
+    groups_filter: (&(member=uid={input},cn=users,cn=accounts,dc=example,dc=com)(objectclass=groupofnames))
+    group_name_attribute: cn
+    mail_attribute: mail
+    display_name_attribute: displayName
+    user: uid=authelia,cn=users,cn=accounts,dc=example,dc=com
+    password: "SUPER_COMPLEX_PASSWORD"
+```
+Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.  
+
+### lldap
+#### Tested Version: [lldap - 0.4.0](https://github.com/nitnelave/lldap/releases/tag/v0.4.07)  
+Create within lldap, a basic user with a complex password, and add to the group "lldap_password_manager"
+You can also create a group to use within Authelia if you would like granular control of who can login, and reference it within the filters below.
+
+### Authelia
+
+In your Authelia configuration you will need to enter and update the following variables - 
+* url `ldap://OpenLDAP:1389` - servers dns name & port.  
+  *tip: if you have Authelia on a container network that is routable, you can just use the container name*
+* base_dn `dc=example,dc=com` - common name of domain root.
+* user `authelia` - username for Authelia service account.
+* password `SUPER_COMPLEX_PASSWORD` - password for Authelia service account,
+
+```yaml
+ldap:
+    implementation: custom
+    url: ldap://lldap:3890
+    timeout: 5s
+    start_tls: false
+    base_dn: dc=example,dc=com
+    username_attribute: uid
+    additional_users_dn: ou=people
+    # To allow sign in both with username and email, one can use a filter like
+    # (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
+    users_filter: (&({username_attribute}={input})(objectClass=person))
+    additional_groups_dn: ou=groups
+    groups_filter: (member={dn})
+    group_name_attribute: cn
+    mail_attribute: mail
+    display_name_attribute: displayName
+    # The username and password of the admin or service user.
+    user: uid=authelia,ou=people,dc=example,dc=com
+    password: "SUPER_COMPLEX_PASSWORD"
+```
+Following this, restart Authelia, and you should be able to begin using lldap integration for your user logins, with Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object. 
+
+## See Also
+[Authelia]: https://www.authelia.com
+[Bitnami OpenLDAP]: https://hub.docker.com/r/bitnami/openldap/
+[FreeIPA]: https://www.freeipa.org/page/Main_Page
+[lldap]: https://github.com/nitnelave/lldap

From f04596b8e00508cd322ab17f2cd7b8c96e67dc2f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 05:02:51 +1000
Subject: [PATCH 053/263] docs: misc roadmap adjustments and fixes (#4073)

---
 docs/content/en/reference/guides/http-archive-file.md     | 4 +---
 docs/content/en/roadmap/active/dashboard-control-panel.md | 2 +-
 docs/content/en/roadmap/active/webauthn.md                | 2 +-
 3 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/docs/content/en/reference/guides/http-archive-file.md b/docs/content/en/reference/guides/http-archive-file.md
index 735676b34..ff18947e5 100644
--- a/docs/content/en/reference/guides/http-archive-file.md
+++ b/docs/content/en/reference/guides/http-archive-file.md
@@ -29,9 +29,7 @@ present in an environment.
 
 The following section outlines some helpful information if you wish to sanitize your HAR file to share it with others.
 
-### Domain
-
-See the dedicated [Domain Sanitization](domain-sanitizaiton.md) reference guide.
+For generic sanitization information see the [Troubleshooting Sanitization guide](troubleshooting-sanitizaiton.md).
 
 ### Security Sensitive Information
 
diff --git a/docs/content/en/roadmap/active/dashboard-control-panel.md b/docs/content/en/roadmap/active/dashboard-control-panel.md
index ff6ae1b8d..4ea61c4c8 100644
--- a/docs/content/en/roadmap/active/dashboard-control-panel.md
+++ b/docs/content/en/roadmap/active/dashboard-control-panel.md
@@ -26,7 +26,7 @@ due to how important or difficult to implement they are.
 
 ### Initial Implementation
 
-{{< roadmap-status >}}
+{{< roadmap-status stage="in-progress" version="v4.38.0" >}}
 
 Add control panel with the ability to control all of the current settings, with the added benefit of being able to
 register multiple WebAuthn keys.
diff --git a/docs/content/en/roadmap/active/webauthn.md b/docs/content/en/roadmap/active/webauthn.md
index 08040a167..65f19262d 100644
--- a/docs/content/en/roadmap/active/webauthn.md
+++ b/docs/content/en/roadmap/active/webauthn.md
@@ -41,7 +41,7 @@ Implement [WebAuthn] as a replacement for [FIDO U2F] with backwards compatibilit
 
 ### Multi Device Registration
 
-{{< roadmap-status >}}
+{{< roadmap-status stage="in-progress" version="v4.38.0" >}}
 
 Implement multi device registration as part of the user interface. This is technically implemented for the most part in
 the backend, it's just the public facing interface elements remaining.

From d67659a4f90e130ac37c911bc31dcc2993c9efd0 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 05:19:11 +1000
Subject: [PATCH 054/263] docs: fix ldap section (#4075)

---
 .../en/integration/ldap/introduction.md       | 64 ++++++++++++-------
 1 file changed, 42 insertions(+), 22 deletions(-)

diff --git a/docs/content/en/integration/ldap/introduction.md b/docs/content/en/integration/ldap/introduction.md
index 0fecc0c32..1ce1172b3 100644
--- a/docs/content/en/integration/ldap/introduction.md
+++ b/docs/content/en/integration/ldap/introduction.md
@@ -12,23 +12,29 @@ weight: 710
 toc: true
 ---
 
-## Tested Versions
+## UNDER CONSTRUCTION
 
-* [Authelia]
-  * [v4.36.5](https://github.com/authelia/authelia/releases/tag/v4.36.5)
+This section is still a work in progress.
 
 ## Configuration
 
 ### OpenLDAP
-#### Tested Version: [Bitnami OpenLDAP - 2.5.13](https://github.com/bitnami/bitnami-docker-openldap/releases/tag/2.5.13-debian-11-r7)  
-Create within OpenLDAP, either via CLI or with a GUI management application like [phpLDAPadmin](http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page) or [LDAP Admin](http://www.ldapadmin.org/) a basic user with a complex password.
-*Make note of its CN.*
-You can also create a group to use within Authelia if you would like granular control of who can login, and reference it within the filters below.
+
+**Tested:**
+* Version: [v2.5.13](https://www.openldap.org/software/release/announce_lts.html)
+* Container `bitnami/openldap:2.5.13-debian-11-r7`
+
+Create within OpenLDAP, either via CLI or with a GUI management application like
+[phpLDAPadmin](http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page) or [LDAP Admin](http://www.ldapadmin.org/)
+a basic user with a complex password.
+
+*Make note of its CN.* You can also create a group to use within Authelia if you would like granular control of who can
+login, and reference it within the filters below.
 
 ### Authelia
 
-In your Authelia configuration you will need to enter and update the following variables - 
-* url `ldap://OpenLDAP:1389` - servers dns name & port.  
+In your Authelia configuration you will need to enter and update the following variables -
+* url `ldap://OpenLDAP:1389` - servers dns name & port.
   *tip: if you have Authelia on a container network that is routable, you can just use the container name*
 * server_name `ldap01.example.com` - servers name
 * base_dn `dc=example,dc=com` - common name of domain root.
@@ -58,18 +64,25 @@ In your Authelia configuration you will need to enter and update the following v
     user: uid=authelia,ou=service accounts,dc=example,dc=com
     password: "SUPER_COMPLEX_PASSWORD"
 ```
-Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.  
+Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with
+Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.
 
 ### FreeIPA
-#### Tested Version: [FreeIPA - 4.9.9/CentOS]([https://github.com/bitnami/bitnami-docker-openldap/releases/tag/2.5.13-debian-11-r7](https://www.freeipa.org/page/Releases/4.9.9))  
-Create within FreeIPA, either via CLI or within its GUI management application `https://server_ip` a basic user with a complex password.
-*Make note of its CN.*
-You can also create a group to use within Authelia if you would like granular control of who can login, and reference it within the filters below.
+
+**Tested:**
+* Version: [v4.9.9](https://www.freeipa.org/page/Releases/4.9.9)
+* Container: `freeipa/freeipa-server:fedora-36-4.9.9`
+
+Create within FreeIPA, either via CLI or within its GUI management application `https://server_ip` a basic user with a
+complex password.
+
+*Make note of its CN.* You can also create a group to use within Authelia if you would like granular control of who can
+login, and reference it within the filters below.
 
 ### Authelia
 
-In your Authelia configuration you will need to enter and update the following variables - 
-* url `ldap://ldap` - servers dns name. Port will assume 389 as standard. Specify custom port with `:port` if needed.  
+In your Authelia configuration you will need to enter and update the following variables -
+* url `ldap://ldap` - servers dns name. Port will assume 389 as standard. Specify custom port with `:port` if needed.
 * server_name `ldap01.example.com` - servers name
 * base_dn `dc=example,dc=com` - common name of domain root.
 * groups_filter `dc=example,dc=com` - replace relevant section with your own domain in common name format, same as base_dn.
@@ -98,17 +111,22 @@ In your Authelia configuration you will need to enter and update the following v
     user: uid=authelia,cn=users,cn=accounts,dc=example,dc=com
     password: "SUPER_COMPLEX_PASSWORD"
 ```
-Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.  
+Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with
+Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.
 
 ### lldap
-#### Tested Version: [lldap - 0.4.0](https://github.com/nitnelave/lldap/releases/tag/v0.4.07)  
+
+**Tested:**
+* Version: [v0.4.0](https://github.com/nitnelave/lldap/releases/tag/v0.4.07)
+
 Create within lldap, a basic user with a complex password, and add to the group "lldap_password_manager"
-You can also create a group to use within Authelia if you would like granular control of who can login, and reference it within the filters below.
+You can also create a group to use within Authelia if you would like granular control of who can login, and reference it
+within the filters below.
 
 ### Authelia
 
-In your Authelia configuration you will need to enter and update the following variables - 
-* url `ldap://OpenLDAP:1389` - servers dns name & port.  
+In your Authelia configuration you will need to enter and update the following variables -
+* url `ldap://OpenLDAP:1389` - servers dns name & port.
   *tip: if you have Authelia on a container network that is routable, you can just use the container name*
 * base_dn `dc=example,dc=com` - common name of domain root.
 * user `authelia` - username for Authelia service account.
@@ -135,9 +153,11 @@ ldap:
     user: uid=authelia,ou=people,dc=example,dc=com
     password: "SUPER_COMPLEX_PASSWORD"
 ```
-Following this, restart Authelia, and you should be able to begin using lldap integration for your user logins, with Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object. 
+Following this, restart Authelia, and you should be able to begin using lldap integration for your user logins, with
+Authelia taking the email attribute for users straight from the 'mail' attribute within the LDAP object.
 
 ## See Also
+
 [Authelia]: https://www.authelia.com
 [Bitnami OpenLDAP]: https://hub.docker.com/r/bitnami/openldap/
 [FreeIPA]: https://www.freeipa.org/page/Main_Page

From 5a28c05b57b2ca357e9d8904c2272a4091c0a863 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 05:21:23 +1000
Subject: [PATCH 055/263] docs(deps): update most dependencies (#4074)

---
 docs/package.json   |   16 +-
 docs/pnpm-lock.yaml | 1187 ++++++++++++++++++++++---------------------
 2 files changed, 607 insertions(+), 596 deletions(-)

diff --git a/docs/package.json b/docs/package.json
index 286d3953b..910bde80c 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -39,21 +39,21 @@
   },
   "devDependencies": {
     "@babel/cli": "7.18.10",
-    "@babel/core": "7.18.13",
-    "@babel/preset-env": "7.18.10",
+    "@babel/core": "7.19.1",
+    "@babel/preset-env": "7.19.1",
     "@fullhuman/postcss-purgecss": "4.1.3",
     "@hyas/images": "0.2.3",
     "@popperjs/core": "2.11.6",
     "auto-changelog": "2.4.0",
-    "autoprefixer": "10.4.8",
-    "bootstrap": "5.2.0",
+    "autoprefixer": "10.4.12",
+    "bootstrap": "5.2.1",
     "bootstrap-icons": "1.9.1",
     "clipboard": "2.0.11",
-    "eslint": "8.23.0",
+    "eslint": "8.24.0",
     "exec-bin": "1.0.0",
     "flexsearch": "0.7.21",
     "highlight.js": "11.6.0",
-    "hugo-installer": "3.1.0",
+    "hugo-installer": "4.0.0",
     "instant.page": "5.1.1",
     "katex": "0.16.2",
     "lazysizes": "5.3.2",
@@ -64,10 +64,10 @@
     "postcss-cli": "10.0.0",
     "purgecss-whitelister": "2.4.0",
     "shx": "0.3.4",
-    "stylelint": "14.11.0",
+    "stylelint": "14.12.1",
     "stylelint-config-standard-scss": "4.0.0"
   },
   "otherDependencies": {
-    "hugo": "0.102.3"
+    "hugo": "0.104.0"
   }
 }
diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml
index 18a8c9690..f09aaebe2 100644
--- a/docs/pnpm-lock.yaml
+++ b/docs/pnpm-lock.yaml
@@ -2,21 +2,21 @@ lockfileVersion: 5.4
 
 specifiers:
   '@babel/cli': 7.18.10
-  '@babel/core': 7.18.13
-  '@babel/preset-env': 7.18.10
+  '@babel/core': 7.19.1
+  '@babel/preset-env': 7.19.1
   '@fullhuman/postcss-purgecss': 4.1.3
   '@hyas/images': 0.2.3
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
-  autoprefixer: 10.4.8
-  bootstrap: 5.2.0
+  autoprefixer: 10.4.12
+  bootstrap: 5.2.1
   bootstrap-icons: 1.9.1
   clipboard: 2.0.11
-  eslint: 8.23.0
+  eslint: 8.24.0
   exec-bin: 1.0.0
   flexsearch: 0.7.21
   highlight.js: 11.6.0
-  hugo-installer: 3.1.0
+  hugo-installer: 4.0.0
   instant.page: 5.1.1
   katex: 0.16.2
   lazysizes: 5.3.2
@@ -27,26 +27,26 @@ specifiers:
   postcss-cli: 10.0.0
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.11.0
+  stylelint: 14.12.1
   stylelint-config-standard-scss: 4.0.0
 
 devDependencies:
-  '@babel/cli': 7.18.10_@babel+core@7.18.13
-  '@babel/core': 7.18.13
-  '@babel/preset-env': 7.18.10_@babel+core@7.18.13
+  '@babel/cli': 7.18.10_@babel+core@7.19.1
+  '@babel/core': 7.19.1
+  '@babel/preset-env': 7.19.1_@babel+core@7.19.1
   '@fullhuman/postcss-purgecss': 4.1.3_postcss@8.4.16
   '@hyas/images': 0.2.3
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
-  autoprefixer: 10.4.8_postcss@8.4.16
-  bootstrap: 5.2.0_@popperjs+core@2.11.6
+  autoprefixer: 10.4.12_postcss@8.4.16
+  bootstrap: 5.2.1_@popperjs+core@2.11.6
   bootstrap-icons: 1.9.1
   clipboard: 2.0.11
-  eslint: 8.23.0
+  eslint: 8.24.0
   exec-bin: 1.0.0
   flexsearch: 0.7.21
   highlight.js: 11.6.0
-  hugo-installer: 3.1.0
+  hugo-installer: 4.0.0
   instant.page: 5.1.1
   katex: 0.16.2
   lazysizes: 5.3.2
@@ -57,8 +57,8 @@ devDependencies:
   postcss-cli: 10.0.0_postcss@8.4.16
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.11.0
-  stylelint-config-standard-scss: 4.0.0_74u2qasxp5mudia6vln5kcfuni
+  stylelint: 14.12.1
+  stylelint-config-standard-scss: 4.0.0_nqmbdxq5redfjw6kdtxj73dev4
 
 packages:
 
@@ -70,14 +70,14 @@ packages:
       '@jridgewell/trace-mapping': 0.3.13
     dev: true
 
-  /@babel/cli/7.18.10_@babel+core@7.18.13:
+  /@babel/cli/7.18.10_@babel+core@7.19.1:
     resolution: {integrity: sha512-dLvWH+ZDFAkd2jPBSghrsFBuXrREvFwjpDycXbmUoeochqKYe4zNSLEJYErpLg8dvxvZYe79/MkN461XCwpnGw==}
     engines: {node: '>=6.9.0'}
     hasBin: true
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@jridgewell/trace-mapping': 0.3.13
       commander: 4.1.1
       convert-source-map: 1.8.0
@@ -97,25 +97,25 @@ packages:
       '@babel/highlight': 7.18.6
     dev: true
 
-  /@babel/compat-data/7.18.8:
-    resolution: {integrity: sha512-HSmX4WZPPK3FUxYp7g2T6EyO8j96HlZJlxmKPSh6KAcqwyDrfx7hKjXpAW/0FhFfTJsR0Yt4lAjLI2coMptIHQ==}
+  /@babel/compat-data/7.19.1:
+    resolution: {integrity: sha512-72a9ghR0gnESIa7jBN53U32FOVCEoztyIlKaNoU05zRhEecduGK9L9c3ww7Mp06JiR+0ls0GBPFJQwwtjn9ksg==}
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/core/7.18.13:
-    resolution: {integrity: sha512-ZisbOvRRusFktksHSG6pjj1CSvkPkcZq/KHD45LAkVP/oiHJkNBZWfpvlLmX8OtHDG8IuzsFlVRWo08w7Qxn0A==}
+  /@babel/core/7.19.1:
+    resolution: {integrity: sha512-1H8VgqXme4UXCRv7/Wa1bq7RVymKOzC7znjyFM8KiEzwFqcKUKYNoQef4GhdklgNvoBXyW4gYhuBNCM5o1zImw==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.18.13
-      '@babel/helper-compilation-targets': 7.18.9_@babel+core@7.18.13
-      '@babel/helper-module-transforms': 7.18.9
-      '@babel/helpers': 7.18.9
-      '@babel/parser': 7.18.13
+      '@babel/generator': 7.19.0
+      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/helper-module-transforms': 7.19.0
+      '@babel/helpers': 7.19.0
+      '@babel/parser': 7.19.1
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/traverse': 7.19.1
+      '@babel/types': 7.19.0
       convert-source-map: 1.8.0
       debug: 4.3.4
       gensync: 1.0.0-beta.2
@@ -125,11 +125,11 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/generator/7.18.13:
-    resolution: {integrity: sha512-CkPg8ySSPuHTYPJYo7IRALdqyjM9HCbt/3uOBEFbzyGVP6Mn8bwFPB0jX6982JVNBlYzM1nnPkfjuXSOPtQeEQ==}
+  /@babel/generator/7.19.0:
+    resolution: {integrity: sha512-S1ahxf1gZ2dpoiFgA+ohK9DIpz50bJ0CWs7Zlzb54Z4sG8qmdIrGrVqmy1sAtTVRb+9CU6U8VqT9L0Zj7hxHVg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
       '@jridgewell/gen-mapping': 0.3.2
       jsesc: 2.5.2
     dev: true
@@ -138,7 +138,7 @@ packages:
     resolution: {integrity: sha512-duORpUiYrEpzKIop6iNbjnwKLAKnJ47csTyRACyEmWj0QdUrm5aqNJGHSSEQSUAvNW0ojX0dOmK9dZduvkfeXA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-builder-binary-assignment-operator-visitor/7.18.6:
@@ -146,33 +146,33 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-explode-assignable-expression': 7.18.6
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
-  /@babel/helper-compilation-targets/7.18.9_@babel+core@7.18.13:
-    resolution: {integrity: sha512-tzLCyVmqUiFlcFoAPLA/gL9TeYrF61VLNtb+hvkuVaB5SUjW7jcfrglBIX1vUIoT7CLP3bBlIMeyEsIl2eFQNg==}
+  /@babel/helper-compilation-targets/7.19.1_@babel+core@7.19.1:
+    resolution: {integrity: sha512-LlLkkqhCMyz2lkQPvJNdIYU7O5YjWRgC2R4omjCTpZd8u8KMQzZvX4qce+/BluN1rcQiV7BoGUpmQ0LeHerbhg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/compat-data': 7.18.8
-      '@babel/core': 7.18.13
+      '@babel/compat-data': 7.19.1
+      '@babel/core': 7.19.1
       '@babel/helper-validator-option': 7.18.6
-      browserslist: 4.21.3
+      browserslist: 4.21.4
       semver: 6.3.0
     dev: true
 
-  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.18.13:
+  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-YfDzdnoxHGV8CzqHGyCbFvXg5QESPFkXlHtvdCkesLjjVMT2Adxe4FGUR5ChIb3DxSaXO12iIOCWoXdsUVwnqw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-function-name': 7.18.9
-      '@babel/helper-member-expression-to-functions': 7.18.6
+      '@babel/helper-function-name': 7.19.0
+      '@babel/helper-member-expression-to-functions': 7.18.9
       '@babel/helper-optimise-call-expression': 7.18.6
       '@babel/helper-replace-supers': 7.18.9
       '@babel/helper-split-export-declaration': 7.18.6
@@ -180,25 +180,36 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/helper-create-regexp-features-plugin/7.18.6_@babel+core@7.18.13:
+  /@babel/helper-create-regexp-features-plugin/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-7LcpH1wnQLGrI+4v+nPp+zUvIkF9x0ddv1Hkdue10tg3gmRnLy97DXh4STiOf1qeIInyD69Qv5kKSZzKD8B/7A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-annotate-as-pure': 7.18.6
       regexpu-core: 5.1.0
     dev: true
 
-  /@babel/helper-define-polyfill-provider/0.3.2_@babel+core@7.18.13:
-    resolution: {integrity: sha512-r9QJJ+uDWrd+94BSPcP6/de67ygLtvVy6cK4luE6MOuDsZIdoaPBnfSpbO/+LTifjPckbKXRuI9BB/Z2/y3iTg==}
+  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.19.1:
+    resolution: {integrity: sha512-htnV+mHX32DF81amCDrwIDr8nrp1PTm+3wfBN9/v8QJOLEioOCOG7qNyq0nHeFiWbT3Eb7gsPwEmV64UCQ1jzw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+    dependencies:
+      '@babel/core': 7.19.1
+      '@babel/helper-annotate-as-pure': 7.18.6
+      regexpu-core: 5.1.0
+    dev: true
+
+  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.19.1:
+    resolution: {integrity: sha512-z5aQKU4IzbqCC1XH0nAqfsFLMVSo22SBKUc0BxGrLkolTdPTructy0ToNnlO2zA4j9Q/7pjMZf0DSY+DSTYzww==}
     peerDependencies:
       '@babel/core': ^7.4.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-compilation-targets': 7.18.9_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
       debug: 4.3.4
       lodash.debounce: 4.0.8
       resolve: 1.22.0
@@ -216,47 +227,40 @@ packages:
     resolution: {integrity: sha512-eyAYAsQmB80jNfg4baAtLeWAQHfHFiR483rzFK+BhETlGZaQC9bsfrugfXDCbRHLQbIA7U5NxhhOxN7p/dWIcg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
-  /@babel/helper-function-name/7.18.9:
-    resolution: {integrity: sha512-fJgWlZt7nxGksJS9a0XdSaI4XvpExnNIgRP+rVefWh5U7BL8pPuir6SJUmFKRfjWQ51OtWSzwOxhaH/EBWWc0A==}
+  /@babel/helper-function-name/7.19.0:
+    resolution: {integrity: sha512-WAwHBINyrpqywkUH0nTnNgI5ina5TFn85HKS0pbPDfxFfhyR/aNQEn4hGi1P1JyT//I0t4OgXUlofzWILRvS5w==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-hoist-variables/7.18.6:
     resolution: {integrity: sha512-UlJQPkFqFULIcyW5sbzgbkxn2FKRgwWiRexcuaR8RNJRy8+LLveqPjwZV/bwrLZCN0eUHD/x8D0heK1ozuoo6Q==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
-    dev: true
-
-  /@babel/helper-member-expression-to-functions/7.18.6:
-    resolution: {integrity: sha512-CeHxqwwipekotzPDUuJOfIMtcIHBuc7WAzLmTYWctVigqS5RktNMQ5bEwQSuGewzYnCtTWa3BARXeiLxDTv+Ng==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-member-expression-to-functions/7.18.9:
     resolution: {integrity: sha512-RxifAh2ZoVU67PyKIO4AMi1wTenGfMR/O/ae0CCRqwgBAt5v7xjdtRw7UoSbsreKrQn5t7r89eruK/9JjYHuDg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-module-imports/7.18.6:
     resolution: {integrity: sha512-0NFvs3VkuSYbFi1x2Vd6tKrywq+z/cLeYC/RJNFrIX/30Bf5aiGYbtvGXolEktzJH8o5E5KJ3tT+nkxuuZFVlA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
-  /@babel/helper-module-transforms/7.18.9:
-    resolution: {integrity: sha512-KYNqY0ICwfv19b31XzvmI/mfcylOzbLtowkw+mfvGPAQ3kfCnMLYbED3YecL5tPd8nAYFQFAd6JHp2LxZk/J1g==}
+  /@babel/helper-module-transforms/7.19.0:
+    resolution: {integrity: sha512-3HBZ377Fe14RbLIA+ac3sY4PTgpxHVkFrESaWhoI5PuyXPBBX8+C34qblV9G89ZtycGJCmCI/Ut+VUDK4bltNQ==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-environment-visitor': 7.18.9
@@ -265,8 +269,8 @@ packages:
       '@babel/helper-split-export-declaration': 7.18.6
       '@babel/helper-validator-identifier': 7.18.6
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/traverse': 7.19.1
+      '@babel/types': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -275,38 +279,25 @@ packages:
     resolution: {integrity: sha512-HP59oD9/fEHQkdcbgFCnbmgH5vIQTJbxh2yf+CdM89/glUNnuzr87Q8GIjGEnOktTROemO0Pe0iPAYbqZuOUiA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
-  /@babel/helper-plugin-utils/7.18.9:
-    resolution: {integrity: sha512-aBXPT3bmtLryXaoJLyYPXPlSD4p1ld9aYeR+sJNOZjJJGiOpb+fKfh3NkcCu7J54nUJwCERPBExCCpyCOHnu/w==}
+  /@babel/helper-plugin-utils/7.19.0:
+    resolution: {integrity: sha512-40Ryx7I8mT+0gaNxm8JGTZFUITNqdLAgdg0hXzeVZxVD6nFsdhQvip6v8dqkRHzsz1VFpFAaOCHNn0vKBL7Czw==}
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.18.13:
+  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-dI7q50YKd8BAv3VEfgg7PS7yD3Rtbi2J1XMXaalXO0W0164hYLnh8zpjRS0mte9MfVp/tltvr/cfdXPvJr1opA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-wrap-function': 7.18.11
-      '@babel/types': 7.18.13
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/helper-replace-supers/7.18.6:
-    resolution: {integrity: sha512-fTf7zoXnUGl9gF25fXCWE26t7Tvtyn6H4hkLSYhATwJvw2uYxd3aoXplMSe0g9XbwK7bmxNes7+FGO0rB/xC0g==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-member-expression-to-functions': 7.18.6
-      '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/traverse': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -318,8 +309,8 @@ packages:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-member-expression-to-functions': 7.18.9
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/traverse': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/traverse': 7.19.1
+      '@babel/types': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -328,21 +319,21 @@ packages:
     resolution: {integrity: sha512-iNpIgTgyAvDQpDj76POqg+YEt8fPxx3yaNBg3S30dxNKm2SWfYhD0TGrK/Eu9wHpUW63VQU894TsTg+GLbUa1g==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-skip-transparent-expression-wrappers/7.18.9:
     resolution: {integrity: sha512-imytd2gHi3cJPsybLRbmFrF7u5BIEuI2cNheyKi3/iOBC63kNn3q8Crn2xVuESli0aM4KYsyEqKyS7lFL8YVtw==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-split-export-declaration/7.18.6:
     resolution: {integrity: sha512-bde1etTx6ZyTmobl9LLMMQsaizFVZrquTEHOqKeQESMKo4PlObf+8+JA25ZsIpZhT/WEd39+vOdLXAFG/nELpA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
   /@babel/helper-string-parser/7.18.10:
@@ -364,21 +355,21 @@ packages:
     resolution: {integrity: sha512-oBUlbv+rjZLh2Ks9SKi4aL7eKaAXBWleHzU89mP0G6BMUlRxSckk9tSIkgDGydhgFxHuGSlBQZfnaD47oBEB7w==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/helper-function-name': 7.18.9
+      '@babel/helper-function-name': 7.19.0
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/traverse': 7.19.1
+      '@babel/types': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/helpers/7.18.9:
-    resolution: {integrity: sha512-Jf5a+rbrLoR4eNdUmnFu8cN5eNJT6qdTdOg5IHIzq87WwyRw9PwguLFOWYgktN/60IP4fgDUawJvs7PjQIzELQ==}
+  /@babel/helpers/7.19.0:
+    resolution: {integrity: sha512-DRBCKGwIEdqY3+rPJgG/dKfQy9+08rHIAJx8q2p+HSWP87s2HCrQmaAMMyMll2kIXKCW0cO1RdQskx15Xakftg==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/traverse': 7.19.1
+      '@babel/types': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -392,415 +383,416 @@ packages:
       js-tokens: 4.0.0
     dev: true
 
-  /@babel/parser/7.18.13:
-    resolution: {integrity: sha512-dgXcIfMuQ0kgzLB2b9tRZs7TTFFaGM2AbtA4fJgUUYukzGH4jwsS7hzQHEGs67jdehpm22vkgKwvbU+aEflgwg==}
+  /@babel/parser/7.19.1:
+    resolution: {integrity: sha512-h7RCSorm1DdTVGJf3P2Mhj3kdnkmF/EiysUkzS2TdgAYqyjFdMQJbVuXOBej2SBJaXan/lIVtT6KkGbyyq753A==}
     engines: {node: '>=6.0.0'}
     hasBin: true
     dependencies:
-      '@babel/types': 7.18.13
+      '@babel/types': 7.19.0
     dev: true
 
-  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-Dgxsyg54Fx1d4Nge8UnvTrED63vrwOdPmyvPzlNN/boaliRP54pm3pGzZD1SJUwrBA+Cs/xdG8kXX6Mn/RfISQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-AHrP9jadvH7qlOj6PINbgSuphjQUAK7AOT7DPjBo9EHoLhQTnnK5u45e1Hd4DbSQEO9nqPWtQ89r+XEOWFScKg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.13.0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.18.13
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-async-generator-functions/7.18.10_@babel+core@7.18.13:
-    resolution: {integrity: sha512-1mFuY2TOsR1hxbjCo4QL+qlIjV07p4H4EUYw2J/WCqsvFV6V9X9z9YhXbWndc/4fw+hYGlDT7egYxliMp5O6Ew==}
+  /@babel/plugin-proposal-async-generator-functions/7.19.1_@babel+core@7.19.1:
+    resolution: {integrity: sha512-0yu8vNATgLy4ivqMNBIwb1HebCelqN7YX8SL3FDXORv/RqT0zEEWUCH4GH44JsSrvCu6GqnAdR5EBFAPeNBB4Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.18.13
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-cumfXOF0+nzZrrN8Rf0t7M+tF6sZc7vhQwYQck9q1/5w2OExlD+b4v4RpMJFaV1Z7WcDRgO6FqvxqxGlwo+RHQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-+I3oIiNxrCpup3Gi8n5IGMwj0gOCAjcJUSQEcotNnCCPMEnixawOQ+KeJPlgfjzx+FKQ1QSyZOWe7wmoJp7vhw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.12.0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-1auuwmK+Rz13SJj36R+jqFPMJWyKEDd7lLSdOj4oJK0UTgGueSAtkrCvz9ewmgyU/P941Rv2fQwZJN8s6QruXw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-k1NtHyOMvlDDFeb9G5PhUXuGj8m/wiwojgQVEhJ/fsVsMCpLyOP4h0uGEjYJKrRI+EVPlb5Jk+Gt9P97lOGwtA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-lr1peyn9kOdbYc0xr0OdHTZ5FMqS6Di+H0Fz2I/JwMzGmzJETNeOFq2pBySw6X/KFL5EWDjlJuMsUGRFb8fQgQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-128YbMpjCrP35IOExw2Fq+x55LMP42DzhOhX2aNNIdI9avSWl2PI0yuBWarr3RYpZBSPtabfadkH2yeRiMD61Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-wQxQzxYeJqHcfppzBDnm1yAY0jSRkUXR2z8RePZYrKwMKgMlE8+Z6LUno+bd6LvbGh8Gltvy74+9pIYkr+XkKA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-ozlZFogPqoLm8WBr5Z8UckIoE4YQ5KESVcNudyXOR8uqIkliTEgJ3RoketfG6pmzLdeZF0H/wjE9/cCEitBl7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-object-rest-spread/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-proposal-object-rest-spread/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-kDDHQ5rflIeY5xl69CEqGEZ0KY369ehsCIEbTGb4siHG5BE9sga/T0r0OUwyZNLMmZE79E1kbsqAjwFCW4ds6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.18.8
-      '@babel/core': 7.18.13
-      '@babel/helper-compilation-targets': 7.18.9_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.18.13
+      '@babel/compat-data': 7.19.1
+      '@babel/core': 7.19.1
+      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-Q40HEhs9DJQyaZfUjjn6vE8Cv4GmMHCYuMGIWUnlxH6400VGxOuwWsPt4FxXxJkC/5eOzgn0z21M9gMT4MOhbw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-v5nwt4IqBXihxGsW2QmCWMDS3B3bzGIk/EQVZz2ei7f3NJl8NzAJVvUmpDW5q1CRNY+Beb/k58UAH1Km1N411w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.18.13
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.1
     dev: true
 
-  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-nutsvktDItsNn4rpGItSNV2sz1XwS+nfU0Rg8aCx3W3NOKVzdMjJRu0O5OkgDp3ZGICSTbgRpxZoWsxoKRvbeA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-9Rysx7FOctvT5ouj5JODjAFAkgGoudQuLPamZb0v1TGLpapdNaftzifU8NTWQm0IRjqoYypdrSmyWgkocDQ8Dw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.18.13
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-2BShG/d5yoZyXZfVePH91urL5wTG6ASZU9M4o03lKK8u8UW1y08OMttBSOADTcJrnPMpvDXRG3G8fyLh4ovs8w==}
     engines: {node: '>=4'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.18.13:
+  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.1:
     resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.18.13:
+  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.1:
     resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.18.13:
+  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.1:
     resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-5gdGbFon+PszYzqs83S3E5mpi7/y/8M9eC90MRTZfduQOYW76ig6SOSPNe41IG5LoP3FGBn2N0RjVDSQiS94kQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-MXf5laXo6c1IbEbegDmzGPwGNTsHZmEy6QGznu5Sh2UCWvueywb2ee+CCE4zQiZstxU9BMoQO9i6zUFSY0Kj0Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-/DU3RXad9+bZwrgWJQKbr39gYbJpLJHezqEzRzi/BHRlJ9zsQb4CK2CA/5apllXNomwA1qHwzvHl+AdEmC5krQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.18.13:
+  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.1:
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.18.13:
+  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.1:
     resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.18.13:
+  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.1:
     resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.18.13:
+  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.1:
     resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.18.13:
+  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.1:
     resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-9S9X9RUefzrsHZmKMbDXxweEH+YlE8JJEuat9FdvW9Qh1cw7W64jELCtWNkPBPX5En45uy28KGvA/AySqUh8CQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-ARE5wZLKnTgPW7/1ftQmSi1CmkqqHo2DNmtztFhvgtOWSDfq0Cq9/9L+KnZNYSNrydBekhW3rwShduf59RoXag==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.18.13
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-ExUcOqpPWnliRcPqves5HJcJOvHvIIWfuS4sroBUenPuMdmW+SMHDakmtS7qOo13sVppmUijqeTv7qqGsvURpQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-block-scoping/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-block-scoping/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-5sDIJRV1KtQVEbt/EIBwGy4T01uYIo4KRB3VUqzkhrAIOGx7AoctL9+Ux88btY0zXdDyPJ9mW+bg+v+XEkGmtw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-classes/7.18.9_@babel+core@7.18.13:
-    resolution: {integrity: sha512-EkRQxsxoytpTlKJmSPYrsOMjCILacAjtSVkd4gChEe2kXjFCun3yohhW5I7plXJhCemM0gKsaGMcO8tinvCA5g==}
+  /@babel/plugin-transform-classes/7.19.0_@babel+core@7.19.1:
+    resolution: {integrity: sha512-YfeEE9kCjqTS9IitkgfJuxjcEtLUHMqa8yUJ6zdz8vR7hKuo6mOy2C05P0F1tdMmDCeuyidKnlrw/iTppHcr2A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-annotate-as-pure': 7.18.6
+      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
       '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-function-name': 7.18.9
+      '@babel/helper-function-name': 7.19.0
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-replace-supers': 7.18.9
       '@babel/helper-split-export-declaration': 7.18.6
       globals: 11.12.0
@@ -808,401 +800,401 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-+i0ZU1bCDymKakLxn5srGHrsAPRELC2WIbzwjLhHW9SIE1cPYkLCL0NlnXMZaM1vhfgA2+M7hySk42VBvrkBRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-destructuring/7.18.9_@babel+core@7.18.13:
-    resolution: {integrity: sha512-p5VCYNddPLkZTq4XymQIaIfZNJwT9YsjkPOhkVEqt6QIpQFZVM9IltqqYpOEkJoN1DPznmxUDyZ5CTZs/ZCuHA==}
+  /@babel/plugin-transform-destructuring/7.18.13_@babel+core@7.19.1:
+    resolution: {integrity: sha512-TodpQ29XekIsex2A+YJPj5ax2plkGa8YYY6mFjCohk/IG9IY42Rtuj1FuDeemfg2ipxIFLzPeA83SIBnlhSIow==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-6S3jpun1eEbAxq7TdjLotAsl4WpQI9DxfkycRcKrjhQYzU87qpXdknpBg/e+TdcMehqGnLFi7tnFUBR02Vq6wg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-d2bmXCtZXYc59/0SanQKbiWINadaJXqtvIQIzd4+hNwkWBgyCd5F/2t1kXoUdvPMrxzPvhK6EMQRROxsue+mfw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-wzEtc0+2c88FVR34aQmiz56dxEkxr2g8DQb/KfaFa1JYXOFVsbhvAonFN6PwVWj++fKmku8NP80plJ5Et4wqHw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-builder-binary-assignment-operator-visitor': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.18.13:
+  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.1:
     resolution: {integrity: sha512-yEfTRnjuskWYo0k1mHUqrVWaZwrdq8AYbfrpqULOJOaucGSp4mNMVps+YtA8byoevxS/urwU75vyhQIxcCgiBQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-WvIBoRPaJQ5yVHzcnJFor7oS5Ls0PYixlTYE63lCj2RtdQEl15M68FXQlxnG6wdraJIXRdR7KI+hQ7q/9QjrCQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-compilation-targets': 7.18.9_@babel+core@7.18.13
-      '@babel/helper-function-name': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/helper-function-name': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-IFQDSRoTPnrAIrI5zoZv73IFeZu2dhu6irxQjY9rNjTT53VmKg9fenjvoiOWOkJ6mm4jKVPtdMzBY98Fp4Z4cg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-qSF1ihLGO3q+/g48k85tUjD033C29TNTVB2paCwZPVmOsjn9pClvYYrM2VeJpBY2bcNkuny0YUyTNRyRxJ54KA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-Pra5aXsmTsOnjM3IajS8rTaLCy++nGM4v3YR4esk5PCsyg9z8NA5oQLwxzMUtDBd8F+UmVza3VxoAaWCbzH1rg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-module-transforms': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-module-transforms': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-Qfv2ZOWikpvmedXQJDSbxNqy7Xr/j2Y8/KfijM0iJyKkBTmWuvCA1yeH1yDM7NJhBW/2aXxeucLj6i80/LAJ/Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-module-transforms': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-module-transforms': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-simple-access': 7.18.6
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-systemjs/7.18.9_@babel+core@7.18.13:
-    resolution: {integrity: sha512-zY/VSIbbqtoRoJKo2cDTewL364jSlZGvn0LKOf9ntbfxOvjfmyrdtEEOAdswOswhZEb8UH3jDkCKHd1sPgsS0A==}
+  /@babel/plugin-transform-modules-systemjs/7.19.0_@babel+core@7.19.1:
+    resolution: {integrity: sha512-x9aiR0WXAWmOWsqcsnrzGR+ieaTMVyGyffPVA7F8cXAGt/UxefYv6uSHZLkAFChN5M5Iy1+wjE+xJuPt22H39A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
+      '@babel/core': 7.19.1
       '@babel/helper-hoist-variables': 7.18.6
-      '@babel/helper-module-transforms': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-module-transforms': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-identifier': 7.18.6
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-dcegErExVeXcRqNtkRU/z8WlBLnvD4MRnHgNs3MytRO1Mn1sHRyhbcpYbVMGclAqOjdW+9cfkdZno9dFdfKLfQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-module-transforms': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-module-transforms': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-named-capturing-groups-regex/7.18.6_@babel+core@7.18.13:
-    resolution: {integrity: sha512-UmEOGF8XgaIqD74bC8g7iV3RYj8lMf0Bw7NJzvnS9qQhM4mg+1WHKotUIdjxgD2RGrgFLZZPCFPFj3P/kVDYhg==}
+  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.19.1:
+    resolution: {integrity: sha512-oWk9l9WItWBQYS4FgXD4Uyy5kq898lvkXpXQxoJEY1RnvPk4R/Dvu2ebXU9q8lP+rlMwUQTFf2Ok6d78ODa0kw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-DjwFA/9Iu3Z+vrAn+8pBUGcjhxKguSMlsFqeCKbhb9BAV756v0krzVK04CRDi/4aqmk8BsHb4a/gFcaA5joXRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-uvGz6zk+pZoS1aTZrOvrbj6Pp/kK2mp45t2B+bTDre2UgsZZ8EZLSJtUg7m/no0zOJUWgFONpB7Zv9W2tSaFlA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/helper-replace-supers': 7.18.6
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-replace-supers': 7.18.9
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.18.13:
+  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.1:
     resolution: {integrity: sha512-ivfbE3X2Ss+Fj8nnXvKJS6sjRG4gzwPMsP+taZC+ZzEGjAYlvENixmt1sZ5Ca6tWls+BlKSGKPJ6OOXvXCbkFg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-cYcs6qlgafTud3PAzrrRNbQtfpQ8+y/+M5tKmksS9+M1ckbH6kzY8MrexEM9mcA6JDsukE19iIRvAyYl463sMg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-poqRI2+qiSdeldcz4wTSTXBRryoq3Gc70ye7m7UD5Ww0nE29IXqMl6r7Nd15WBgRd74vloEMlShtH6CKxVzfmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
       regenerator-transform: 0.15.0
     dev: true
 
-  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-oX/4MyMoypzHjFrT1CdivfKZ+XvIPMFXwwxHp/r0Ddy2Vuomt4HDFGmft1TAY2yiTKiNSsh3kjBAzcM8kSdsjA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-eCLXXJqv8okzg86ywZJbRn19YJHU4XUa55oz2wbHhaQVn/MM+XhukiT7SYqp/7o00dg52Rj51Ny+Ecw4oyoygw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-spread/7.18.9_@babel+core@7.18.13:
-    resolution: {integrity: sha512-39Q814wyoOPtIB/qGopNIL9xDChOE1pNU0ZY5dO0owhiVt/5kFm4li+/bBtwc7QotG0u5EPzqhZdjMtmqBqyQA==}
+  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.19.1:
+    resolution: {integrity: sha512-RsuMk7j6n+r752EtzyScnWkQyuJdli6LdO5Klv8Yx0OfPVTcQkIUfS8clx5e9yHXzlnhOZF3CbQ8C2uP5j074w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
     dev: true
 
-  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-kfiDrDQ+PBsQDO85yj1icueWMfGfJFKN1KCkndygtu/C9+XUfydLC8Iv5UYJqRwy4zk8EcplRxEOeLyjq1gm6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-S8cOWfT82gTezpYOiVaGHrCbhlHgKhQt8XH5ES46P2XWmX92yisoZywf5km75wv5sYcXDUCLMmMxOLCtthDgMA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.18.13:
+  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.19.1:
     resolution: {integrity: sha512-SRfwTtF11G2aemAZWivL7PD+C9z52v9EvMqH9BuYbabyPuKUvSWks3oCg6041pT925L4zVFqaVBeECwsmlguEw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.18.13:
+  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.19.1:
     resolution: {integrity: sha512-kKAdAI+YzPgGY/ftStBFXTI1LZFju38rYThnfMykS+IXy8BVx+res7s2fxf1l8I35DV2T97ezo6+SGrXz6B3iQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.18.13:
+  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.1:
     resolution: {integrity: sha512-gE7A6Lt7YLnNOL3Pb9BNeZvi+d8l7tcRrG4+pwJjK9hD2xX4mEvjlQW60G9EEmfXVYRPv9VRQcyegIVHCql/AA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.1
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/preset-env/7.18.10_@babel+core@7.18.13:
-    resolution: {integrity: sha512-wVxs1yjFdW3Z/XkNfXKoblxoHgbtUF7/l3PvvP4m02Qz9TZ6uZGxRVYjSQeR87oQmHco9zWitW5J82DJ7sCjvA==}
+  /@babel/preset-env/7.19.1_@babel+core@7.19.1:
+    resolution: {integrity: sha512-c8B2c6D16Lp+Nt6HcD+nHl0VbPKVnNPTpszahuxJJnurfMtKeZ80A+qUv48Y7wqvS+dTFuLuaM9oYxyNHbCLWA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.18.8
-      '@babel/core': 7.18.13
-      '@babel/helper-compilation-targets': 7.18.9_@babel+core@7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/compat-data': 7.19.1
+      '@babel/core': 7.19.1
+      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-proposal-async-generator-functions': 7.18.10_@babel+core@7.18.13
-      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-object-rest-spread': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.18.13
-      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.18.13
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.18.13
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.18.13
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.18.13
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.18.13
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.18.13
-      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.18.13
-      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-block-scoping': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-classes': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-destructuring': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.18.13
-      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-modules-systemjs': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.18.13
-      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-spread': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.18.13
-      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.18.13
-      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/preset-modules': 0.1.5_@babel+core@7.18.13
-      '@babel/types': 7.18.10
-      babel-plugin-polyfill-corejs2: 0.3.2_@babel+core@7.18.13
-      babel-plugin-polyfill-corejs3: 0.5.3_@babel+core@7.18.13
-      babel-plugin-polyfill-regenerator: 0.4.0_@babel+core@7.18.13
-      core-js-compat: 3.22.8
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-proposal-async-generator-functions': 7.19.1_@babel+core@7.19.1
+      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-object-rest-spread': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.1
+      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.1
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.1
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.1
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.1
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.1
+      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.1
+      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-block-scoping': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-classes': 7.19.0_@babel+core@7.19.1
+      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-destructuring': 7.18.13_@babel+core@7.19.1
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.1
+      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-modules-systemjs': 7.19.0_@babel+core@7.19.1
+      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.19.1
+      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.1
+      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.19.1
+      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.19.1
+      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.1
+      '@babel/preset-modules': 0.1.5_@babel+core@7.19.1
+      '@babel/types': 7.19.0
+      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.19.1
+      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.19.1
+      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.19.1
+      core-js-compat: 3.25.2
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/preset-modules/0.1.5_@babel+core@7.18.13:
+  /@babel/preset-modules/0.1.5_@babel+core@7.19.1:
     resolution: {integrity: sha512-A57th6YRG7oR3cq/yt/Y84MvGgE0eJG2F1JLhKuyG+jFxEgrd/HAMJatiFtmOiZurz+0DkrvbheCLaV5f2JfjA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.18.13
-      '@babel/types': 7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.1
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.1
+      '@babel/types': 7.19.0
       esutils: 2.0.3
     dev: true
 
@@ -1218,39 +1210,30 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/parser': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/parser': 7.19.1
+      '@babel/types': 7.19.0
     dev: true
 
-  /@babel/traverse/7.18.13:
-    resolution: {integrity: sha512-N6kt9X1jRMLPxxxPYWi7tgvJRH/rtoU+dbKAPDM44RFHiMH8igdsaSBgFeskhSl/kLWLDUvIh1RXCrTmg0/zvA==}
+  /@babel/traverse/7.19.1:
+    resolution: {integrity: sha512-0j/ZfZMxKukDaag2PtOPDbwuELqIar6lLskVPPJDjXMXjfLb1Obo/1yjxIGqqAJrmfaTIY3z2wFLAQ7qSkLsuA==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.18.13
+      '@babel/generator': 7.19.0
       '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-function-name': 7.18.9
+      '@babel/helper-function-name': 7.19.0
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.18.13
-      '@babel/types': 7.18.13
+      '@babel/parser': 7.19.1
+      '@babel/types': 7.19.0
       debug: 4.3.4
       globals: 11.12.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/types/7.18.10:
-    resolution: {integrity: sha512-MJvnbEiiNkpjo+LknnmRrqbY1GPUUggjv+wQVjetM/AONoupqRALB7I6jGqNUAZsKcRIEu2J6FRFvsczljjsaQ==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/helper-string-parser': 7.18.10
-      '@babel/helper-validator-identifier': 7.18.6
-      to-fast-properties: 2.0.0
-    dev: true
-
-  /@babel/types/7.18.13:
-    resolution: {integrity: sha512-ePqfTihzW0W6XAU+aMw2ykilisStJfDnsejDCXRchCcMJ4O0+8DhPXf2YUbZ6wjBlsEmZwLK/sPweWtu8hcJYQ==}
+  /@babel/types/7.19.0:
+    resolution: {integrity: sha512-YuGopBq3ke25BVSiS6fgF49Ul9gH1x70Bcr6bqRLjWCkcX8Hre1/5+z+IiWOIerRMSSEfGZVB9z9kyq7wVs9YA==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-string-parser': 7.18.10
@@ -1269,8 +1252,8 @@ packages:
       postcss-selector-parser: 6.0.10
     dev: true
 
-  /@eslint/eslintrc/1.3.1:
-    resolution: {integrity: sha512-OhSY22oQQdw3zgPOOwdoj01l/Dzl1Z+xyUP33tkSN+aqyEhymJCcPHyXt+ylW8FSe0TfRC2VG+ROQOapD0aZSQ==}
+  /@eslint/eslintrc/1.3.2:
+    resolution: {integrity: sha512-AXYd23w1S/bv3fTs3Lz0vjiYemS08jWkI3hYyS9I1ry+0f+Yjs1wm+sU0BS8qDOPrBIkp4qHYC16I8uVtpLajQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
       ajv: 6.12.6
@@ -1295,8 +1278,8 @@ packages:
       purgecss: 4.1.3
     dev: true
 
-  /@humanwhocodes/config-array/0.10.4:
-    resolution: {integrity: sha512-mXAIHxZT3Vcpg83opl1wGlVZ9xydbfZO3r5YfRSH6Gpp2J/PfdBP0wbDa2sO6/qRbcalpoevVyW6A/fI6LfeMw==}
+  /@humanwhocodes/config-array/0.10.5:
+    resolution: {integrity: sha512-XVVDtp+dVvRxMoxSiSfasYaG02VEe1qH5cKgMQJWhol6HwzbcqoCMJi8dAGoYAO57jhUyhI6cWuRiTcRaDaYug==}
     engines: {node: '>=10.10.0'}
     dependencies:
       '@humanwhocodes/object-schema': 1.2.1
@@ -1392,14 +1375,14 @@ packages:
     resolution: {integrity: sha512-50/17A98tWUfQ176raKiOGXuYpLyyVMkxxG6oylzL3BPOlA6ADGdK7EYunSa4I064xerltq9TGXs8HmOk5E+vw==}
     dev: true
 
-  /@sindresorhus/is/4.6.0:
-    resolution: {integrity: sha512-t09vSN3MdfsyCHoFcTRCH/iUtG7OJ0CsjzB8cjAmKc/va/kIgeDI/TxsigdncE/4be734m0cvIYwNaV4i2XqAw==}
-    engines: {node: '>=10'}
+  /@sindresorhus/is/5.3.0:
+    resolution: {integrity: sha512-CX6t4SYQ37lzxicAqsBtxA3OseeoVrh9cSJ5PFYam0GksYlupRfy1A+Q4aYD3zvcfECLc0zO2u+ZnR2UYKvCrw==}
+    engines: {node: '>=14.16'}
     dev: true
 
-  /@szmarczak/http-timer/4.0.6:
-    resolution: {integrity: sha512-4BAffykYOgO+5nzBWYwE3W90sBgLJoUPRWWcL8wlyiM8IB8ipJz3UMJ9KXQd1RKQXpKp8Tutn80HZtWsu2u76w==}
-    engines: {node: '>=10'}
+  /@szmarczak/http-timer/5.0.1:
+    resolution: {integrity: sha512-+PmQX0PiAYPMeVYe237LJAYvOMYW1j2rH5YROyS3b4CTVJum34HfRvKvAzozHAQG0TnHNdUfY9nCeUyRAs//cw==}
+    engines: {node: '>=14.16'}
     dependencies:
       defer-to-connect: 2.0.1
     dev: true
@@ -1463,12 +1446,12 @@ packages:
     hasBin: true
     dev: true
 
-  /aggregate-error/3.1.0:
-    resolution: {integrity: sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==}
-    engines: {node: '>=8'}
+  /aggregate-error/4.0.1:
+    resolution: {integrity: sha512-0poP0T7el6Vq3rstR8Mn4V/IQrpBLO6POkUSrN7RhyY+GF/InCFShQzsQ39T25gkHhLgSLByyAz+Kjb+c2L98w==}
+    engines: {node: '>=12'}
     dependencies:
-      clean-stack: 2.2.0
-      indent-string: 4.0.0
+      clean-stack: 4.2.0
+      indent-string: 5.0.0
     dev: true
 
   /ajv/6.12.6:
@@ -1549,15 +1532,15 @@ packages:
       - encoding
     dev: true
 
-  /autoprefixer/10.4.8_postcss@8.4.16:
-    resolution: {integrity: sha512-75Jr6Q/XpTqEf6D2ltS5uMewJIx5irCU1oBYJrWjFenq/m12WRRrz6g15L1EIoYvPLXTbEry7rDOwrcYNj77xw==}
+  /autoprefixer/10.4.12_postcss@8.4.16:
+    resolution: {integrity: sha512-WrCGV9/b97Pa+jtwf5UGaRjgQIg7OK3D06GnoYoZNcG1Xb8Gt3EfuKjlhh9i/VtT16g6PYjZ69jdJ2g8FxSC4Q==}
     engines: {node: ^10 || ^12 || >=14}
     hasBin: true
     peerDependencies:
       postcss: ^8.1.0
     dependencies:
-      browserslist: 4.21.3
-      caniuse-lite: 1.0.30001374
+      browserslist: 4.21.4
+      caniuse-lite: 1.0.30001412
       fraction.js: 4.2.0
       normalize-range: 0.1.2
       picocolors: 1.0.0
@@ -1571,38 +1554,38 @@ packages:
       object.assign: 4.1.2
     dev: true
 
-  /babel-plugin-polyfill-corejs2/0.3.2_@babel+core@7.18.13:
-    resolution: {integrity: sha512-LPnodUl3lS0/4wN3Rb+m+UK8s7lj2jcLRrjho4gLw+OJs+I4bvGXshINesY5xx/apM+biTnQ9reDI8yj+0M5+Q==}
+  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.19.1:
+    resolution: {integrity: sha512-8hOdmFYFSZhqg2C/JgLUQ+t52o5nirNwaWM2B9LWteozwIvM14VSwdsCAUET10qT+kmySAlseadmfeeSWFCy+Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.18.8
-      '@babel/core': 7.18.13
-      '@babel/helper-define-polyfill-provider': 0.3.2_@babel+core@7.18.13
+      '@babel/compat-data': 7.19.1
+      '@babel/core': 7.19.1
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.1
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-corejs3/0.5.3_@babel+core@7.18.13:
-    resolution: {integrity: sha512-zKsXDh0XjnrUEW0mxIHLfjBfnXSMr5Q/goMe/fxpQnLm07mcOZiIZHBNWCMx60HmdvjxfXcalac0tfFg0wqxyw==}
+  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.19.1:
+    resolution: {integrity: sha512-+eHqR6OPcBhJOGgsIar7xoAB1GcSwVUA3XjAd7HJNzOXT4wv6/H7KIdA/Nc60cvUlDbKApmqNvD1B1bzOt4nyA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-define-polyfill-provider': 0.3.2_@babel+core@7.18.13
-      core-js-compat: 3.22.8
+      '@babel/core': 7.19.1
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.1
+      core-js-compat: 3.25.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-regenerator/0.4.0_@babel+core@7.18.13:
-    resolution: {integrity: sha512-RW1cnryiADFeHmfLS+WW/G431p1PsW5qdRdz0SDRi7TKcUgc7Oh/uXkT7MZ/+tGsT1BkczEAmD5XjUyJ5SWDTw==}
+  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.19.1:
+    resolution: {integrity: sha512-NtQGmyQDXjQqQ+IzRkBVwEOz9lQ4zxAQZgoAYEtU9dJjnl1Oc98qnN7jcp+bE7O7aYzVpavXE3/VKXNzUbh7aw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.18.13
-      '@babel/helper-define-polyfill-provider': 0.3.2_@babel+core@7.18.13
+      '@babel/core': 7.19.1
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.1
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -1635,10 +1618,10 @@ packages:
     resolution: {integrity: sha512-d4ZkO30MIkAhQ2nNRJqKXJVEQorALGbLWTuRxyCTJF96lRIV6imcgMehWGJUiJMJhglN0o2tqLIeDnMdiQEE9g==}
     dev: true
 
-  /bootstrap/5.2.0_@popperjs+core@2.11.6:
-    resolution: {integrity: sha512-qlnS9GL6YZE6Wnef46GxGv1UpGGzAwO0aPL1yOjzDIJpeApeMvqV24iL+pjr2kU4dduoBA9fINKWKgMToobx9A==}
+  /bootstrap/5.2.1_@popperjs+core@2.11.6:
+    resolution: {integrity: sha512-UQi3v2NpVPEi1n35dmRRzBJFlgvWHYwyem6yHhuT6afYF+sziEt46McRbT//kVXZ7b1YUYEVGdXEH74Nx3xzGA==}
     peerDependencies:
-      '@popperjs/core': ^2.11.5
+      '@popperjs/core': ^2.11.6
     dependencies:
       '@popperjs/core': 2.11.6
     dev: true
@@ -1657,15 +1640,15 @@ packages:
       fill-range: 7.0.1
     dev: true
 
-  /browserslist/4.21.3:
-    resolution: {integrity: sha512-898rgRXLAyRkM1GryrrBHGkqA5hlpkV5MhtZwg9QXeiyLUYs2k00Un05aX5l2/yJIOObYKOpS2JNo8nJDE7fWQ==}
+  /browserslist/4.21.4:
+    resolution: {integrity: sha512-CBHJJdDmgjl3daYjN5Cp5kbTf1mUhZoS+beLklHIvkOWscs83YAhLlF3Wsh/lciQYAcbBJgTOD44VtG31ZM4Hw==}
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
     dependencies:
-      caniuse-lite: 1.0.30001374
-      electron-to-chromium: 1.4.211
+      caniuse-lite: 1.0.30001412
+      electron-to-chromium: 1.4.261
       node-releases: 2.0.6
-      update-browserslist-db: 1.0.5_browserslist@4.21.3
+      update-browserslist-db: 1.0.9_browserslist@4.21.4
     dev: true
 
   /buffer-alloc-unsafe/1.1.0:
@@ -1694,8 +1677,8 @@ packages:
       ieee754: 1.2.1
     dev: true
 
-  /cacheable-lookup/5.0.4:
-    resolution: {integrity: sha512-2/kNscPhpcxrOigMZzbiWF7dz8ilhb/nIHU3EyZiXWXpeq/au8qJ8VhdftMkty3n7Gj6HIGalQG8oiBNB3AJgA==}
+  /cacheable-lookup/6.1.0:
+    resolution: {integrity: sha512-KJ/Dmo1lDDhmW2XDPMo+9oiy/CeqosPguPCrgcVzKyZrL6pM1gU2GmPY/xo6OQPTUaA/c0kwHuywB4E6nmT9ww==}
     engines: {node: '>=10.6.0'}
     dev: true
 
@@ -1738,8 +1721,8 @@ packages:
     engines: {node: '>=6'}
     dev: true
 
-  /caniuse-lite/1.0.30001374:
-    resolution: {integrity: sha512-mWvzatRx3w+j5wx/mpFN5v5twlPrabG8NqX2c6e45LCpymdoGqNvRkRutFUqpRTXKFQFNQJasvK0YT7suW6/Hw==}
+  /caniuse-lite/1.0.30001412:
+    resolution: {integrity: sha512-+TeEIee1gS5bYOiuf+PS/kp2mrXic37Hl66VY6EAfxasIk5fELTktK2oOezYed12H8w7jt3s512PpulQidPjwA==}
     dev: true
 
   /chalk/2.4.2:
@@ -1774,9 +1757,11 @@ packages:
       fsevents: 2.3.2
     dev: true
 
-  /clean-stack/2.2.0:
-    resolution: {integrity: sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==}
-    engines: {node: '>=6'}
+  /clean-stack/4.2.0:
+    resolution: {integrity: sha512-LYv6XPxoyODi36Dp976riBtSY27VmFo+MKqEU9QCCWyTrdEPDog+RWA7xQWHi6Vbp61j5c4cdzzX1NidnwtUWg==}
+    engines: {node: '>=12'}
+    dependencies:
+      escape-string-regexp: 5.0.0
     dev: true
 
   /clipboard/2.0.11:
@@ -1871,11 +1856,10 @@ packages:
       safe-buffer: 5.1.2
     dev: true
 
-  /core-js-compat/3.22.8:
-    resolution: {integrity: sha512-pQnwg4xtuvc2Bs/5zYQPaEYYSuTxsF7LBWF0SvnVhthZo/Qe+rJpcEekrdNK5DWwDJ0gv0oI9NNX5Mppdy0ctg==}
+  /core-js-compat/3.25.2:
+    resolution: {integrity: sha512-TxfyECD4smdn3/CjWxczVtJqVLEEC2up7/82t7vC0AzNogr+4nQ8vyF7abxAuTXWvjTClSbvGhU0RgqA4ToQaQ==}
     dependencies:
-      browserslist: 4.21.3
-      semver: 7.0.0
+      browserslist: 4.21.4
     dev: true
 
   /core-util-is/1.0.3:
@@ -2020,18 +2004,18 @@ packages:
       object-keys: 1.1.1
     dev: true
 
-  /del/6.0.0:
-    resolution: {integrity: sha512-1shh9DQ23L16oXSZKB2JxpL7iMy2E0S9d517ptA1P8iw0alkPtQcrKH7ru31rYtKwF499HkTu+DRzq3TCKDFRQ==}
-    engines: {node: '>=10'}
+  /del/7.0.0:
+    resolution: {integrity: sha512-tQbV/4u5WVB8HMJr08pgw0b6nG4RGt/tj+7Numvq+zqcvUFeMaIWWOUFltiU+6go8BSO2/ogsB4EasDaj0y68Q==}
+    engines: {node: '>=14.16'}
     dependencies:
-      globby: 11.1.0
+      globby: 13.1.2
       graceful-fs: 4.2.10
       is-glob: 4.0.3
-      is-path-cwd: 2.2.0
-      is-path-inside: 3.0.3
-      p-map: 4.0.0
+      is-path-cwd: 3.0.0
+      is-path-inside: 4.0.0
+      p-map: 5.5.0
       rimraf: 3.0.2
-      slash: 3.0.0
+      slash: 4.0.0
     dev: true
 
   /delegate/3.2.0:
@@ -2057,8 +2041,8 @@ packages:
       esutils: 2.0.3
     dev: true
 
-  /electron-to-chromium/1.4.211:
-    resolution: {integrity: sha512-BZSbMpyFQU0KBJ1JG26XGeFI3i4op+qOYGxftmZXFZoHkhLgsSv4DHDJfl8ogII3hIuzGt51PaZ195OVu0yJ9A==}
+  /electron-to-chromium/1.4.261:
+    resolution: {integrity: sha512-fVXliNUGJ7XUVJSAasPseBbVgJIeyw5M1xIkgXdTSRjlmCqBbiSTsEdLOCJS31Fc8B7CaloQ/BFAg8By3ODLdg==}
     dev: true
 
   /emoji-regex/8.0.0:
@@ -2097,6 +2081,11 @@ packages:
     engines: {node: '>=10'}
     dev: true
 
+  /escape-string-regexp/5.0.0:
+    resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==}
+    engines: {node: '>=12'}
+    dev: true
+
   /eslint-scope/7.1.1:
     resolution: {integrity: sha512-QKQM/UXpIiHcLqJ5AOyIW7XZmzjkzQXYE54n1++wb0u9V/abW3l9uQnxX8Z5Xd18xyKIMTUAyQ0k1e8pz6LUrw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -2105,13 +2094,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.23.0:
+  /eslint-utils/3.0.0_eslint@8.24.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.23.0
+      eslint: 8.24.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -2125,13 +2114,13 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.23.0:
-    resolution: {integrity: sha512-pBG/XOn0MsJcKcTRLr27S5HpzQo4kLr+HjLQIyK4EiCsijDl/TB+h5uEuJU6bQ8Edvwz1XWOjpaP2qgnXGpTcA==}
+  /eslint/8.24.0:
+    resolution: {integrity: sha512-dWFaPhGhTAiPcCgm3f6LI2MBWbogMnTJzFBbhXVRQDJPkr9pGZvVjlVfXd+vyDcWPA2Ic9L2AXPIQM0+vk/cSQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@eslint/eslintrc': 1.3.1
-      '@humanwhocodes/config-array': 0.10.4
+      '@eslint/eslintrc': 1.3.2
+      '@humanwhocodes/config-array': 0.10.5
       '@humanwhocodes/gitignore-to-minimatch': 1.0.2
       '@humanwhocodes/module-importer': 1.0.1
       ajv: 6.12.6
@@ -2141,7 +2130,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.23.0
+      eslint-utils: 3.0.0_eslint@8.24.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -2149,7 +2138,6 @@ packages:
       fast-deep-equal: 3.1.3
       file-entry-cache: 6.0.1
       find-up: 5.0.0
-      functional-red-black-tree: 1.0.1
       glob-parent: 6.0.2
       globals: 13.15.0
       globby: 11.1.0
@@ -2158,6 +2146,7 @@ packages:
       import-fresh: 3.3.0
       imurmurhash: 0.1.4
       is-glob: 4.0.3
+      js-sdsl: 4.1.4
       js-yaml: 4.1.0
       json-stable-stringify-without-jsonify: 1.0.1
       levn: 0.4.1
@@ -2226,6 +2215,17 @@ packages:
       micromatch: 4.0.5
     dev: true
 
+  /fast-glob/3.2.12:
+    resolution: {integrity: sha512-DVj4CQIYYow0BlaelwK1pHl5n5cRSJfM60UA0zK891sVInoPri2Ekj7+e1CT3/3qxXenpI+nBBmQAcJPJgaj4w==}
+    engines: {node: '>=8.6.0'}
+    dependencies:
+      '@nodelib/fs.stat': 2.0.5
+      '@nodelib/fs.walk': 1.2.8
+      glob-parent: 5.1.2
+      merge2: 1.4.1
+      micromatch: 4.0.5
+    dev: true
+
   /fast-json-stable-stringify/2.1.0:
     resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==}
     dev: true
@@ -2320,6 +2320,11 @@ packages:
     resolution: {integrity: sha512-W7cHV7Hrwjid6lWmy0IhsWDFQboWSng25U3VVywpHOTJnnAZNPScog67G+cVpeX9f7yDD21ih0WDrMMT+JoaYg==}
     dev: true
 
+  /form-data-encoder/2.1.2:
+    resolution: {integrity: sha512-FCaIOVTRA9E0siY6FeXid7D5yrCqpsErplUkE2a1BEiKj1BE9z6FbKB4ntDTwC4NVLie9p+4E9nX4mWwEOT05A==}
+    engines: {node: '>= 14.17'}
+    dev: true
+
   /formdata-polyfill/4.0.10:
     resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
     engines: {node: '>=12.20.0'}
@@ -2364,10 +2369,6 @@ packages:
     resolution: {integrity: sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A==}
     dev: true
 
-  /functional-red-black-tree/1.0.1:
-    resolution: {integrity: sha512-dsKNQNdj6xA3T+QlADDA7mOSlX0qiMINjn0cgr+eGHGsbSHzTabcIogz2+p/iqP1Xs6EP/sS2SbqH+brGTbq0g==}
-    dev: true
-
   /gensync/1.0.0-beta.2:
     resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
     engines: {node: '>=6.9.0'}
@@ -2406,6 +2407,11 @@ packages:
       pump: 3.0.0
     dev: true
 
+  /get-stream/6.0.1:
+    resolution: {integrity: sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==}
+    engines: {node: '>=10'}
+    dev: true
+
   /glob-all/3.3.0:
     resolution: {integrity: sha512-30gCh9beSb+YSAh0vsoIlBRm4bSlyMa+5nayax1EJhjwYrCohX0aDxcxvWVe3heOrJikbHgRs75Af6kPLcumew==}
     hasBin: true
@@ -2473,7 +2479,7 @@ packages:
     dependencies:
       array-union: 2.1.0
       dir-glob: 3.0.1
-      fast-glob: 3.2.11
+      fast-glob: 3.2.12
       ignore: 5.2.0
       merge2: 1.4.1
       slash: 3.0.0
@@ -2508,21 +2514,22 @@ packages:
       delegate: 3.2.0
     dev: true
 
-  /got/11.8.5:
-    resolution: {integrity: sha512-o0Je4NvQObAuZPHLFoRSkdG2lTgtcynqymzg2Vupdx6PorhaT5MCbIyXG6d4D94kk8ZG57QeosgdiqfJWhEhlQ==}
-    engines: {node: '>=10.19.0'}
+  /got/12.4.1:
+    resolution: {integrity: sha512-Sz1ojLt4zGNkcftIyJKnulZT/yEDvifhUjccHA8QzOuTgPs/+njXYNMFE3jR4/2OODQSSbH8SdnoLCkbh41ieA==}
+    engines: {node: '>=14.16'}
     dependencies:
-      '@sindresorhus/is': 4.6.0
-      '@szmarczak/http-timer': 4.0.6
+      '@sindresorhus/is': 5.3.0
+      '@szmarczak/http-timer': 5.0.1
       '@types/cacheable-request': 6.0.2
-      '@types/responselike': 1.0.0
-      cacheable-lookup: 5.0.4
+      cacheable-lookup: 6.1.0
       cacheable-request: 7.0.2
       decompress-response: 6.0.0
-      http2-wrapper: 1.0.3
-      lowercase-keys: 2.0.0
-      p-cancelable: 2.1.1
-      responselike: 2.0.0
+      form-data-encoder: 2.1.2
+      get-stream: 6.0.1
+      http2-wrapper: 2.1.11
+      lowercase-keys: 3.0.0
+      p-cancelable: 3.0.0
+      responselike: 3.0.0
     dev: true
 
   /graceful-fs/4.2.10:
@@ -2595,8 +2602,9 @@ packages:
       lru-cache: 6.0.0
     dev: true
 
-  /hpagent/0.1.2:
-    resolution: {integrity: sha512-ePqFXHtSQWAFXYmj+JtOTHr84iNrII4/QRlAAPPE+zqnKy4xJo7Ie1Y4kC7AdB+LxLxSTTzBMASsEcy0q8YyvQ==}
+  /hpagent/1.0.0:
+    resolution: {integrity: sha512-SCleE2Uc1bM752ymxg8QXYGW0TWtAV4ZW3TqH1aOnyi6T6YW2xadCcclm5qeVjvMvfQ2RKNtZxO7uVb9CTPt1A==}
+    engines: {node: '>=14'}
     dev: true
 
   /html-tags/3.2.0:
@@ -2608,25 +2616,25 @@ packages:
     resolution: {integrity: sha512-carPklcUh7ROWRK7Cv27RPtdhYhUsela/ue5/jKzjegVvXDqM2ILE9Q2BGn9JZJh1g87cp56su/FgQSzcWS8cQ==}
     dev: true
 
-  /http2-wrapper/1.0.3:
-    resolution: {integrity: sha512-V+23sDMr12Wnz7iTcDeJr3O6AIxlnvT/bmaAAAP/Xda35C90p9599p0F1eHR/N1KILWSoWVAiOMFjBBXaXSMxg==}
+  /http2-wrapper/2.1.11:
+    resolution: {integrity: sha512-aNAk5JzLturWEUiuhAN73Jcbq96R7rTitAoXV54FYMatvihnpD2+6PUgU4ce3D/m5VDbw+F5CsyKSF176ptitQ==}
     engines: {node: '>=10.19.0'}
     dependencies:
       quick-lru: 5.1.1
       resolve-alpn: 1.2.1
     dev: true
 
-  /hugo-installer/3.1.0:
-    resolution: {integrity: sha512-E3yc8m1NRZBROOx0tx5WtUfAa9EcBbjbM4YSfy3KLGXQfHXIpbfD3oQ5YIKvih8aKuyyRtKzBZIdiOHfWAvvtg==}
+  /hugo-installer/4.0.0:
+    resolution: {integrity: sha512-aYVAsG6r1W82Atek4pA0xvQ8elfdeEW9gEsseXWJRQOWE9pwKgBUgjres0Dt2duKjdtUsrll1scn5YKoTxzG3Q==}
     hasBin: true
     dependencies:
       decompress: 4.2.1
-      del: 6.0.0
-      got: 11.8.5
-      hpagent: 0.1.2
+      del: 7.0.0
+      got: 12.4.1
+      hpagent: 1.0.0
       object-path: 0.11.8
       semver: 7.3.7
-      yargs: 16.2.0
+      yargs: 17.5.1
     dev: true
 
   /ieee754/1.2.1:
@@ -2661,6 +2669,11 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
+  /indent-string/5.0.0:
+    resolution: {integrity: sha512-m6FAo/spmsW2Ab2fU35JTYwtOKa2yAwXSwgjSv1TJzh4Mh7mC3lzAOVLBprb72XsTrgkEIsl7YrFNAiDiRhIGg==}
+    engines: {node: '>=12'}
+    dev: true
+
   /inflight/1.0.6:
     resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
     dependencies:
@@ -2734,14 +2747,14 @@ packages:
     engines: {node: '>=0.12.0'}
     dev: true
 
-  /is-path-cwd/2.2.0:
-    resolution: {integrity: sha512-w942bTcih8fdJPJmQHFzkS76NEP8Kzzvmw92cXsazb8intwLqPibPPdXf4ANdKV3rYMuuQYGIWtvz9JilB3NFQ==}
-    engines: {node: '>=6'}
+  /is-path-cwd/3.0.0:
+    resolution: {integrity: sha512-kyiNFFLU0Ampr6SDZitD/DwUo4Zs1nSdnygUBqsu3LooL00Qvb5j+UnvApUn/TTj1J3OuE6BTdQ5rudKmU2ZaA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     dev: true
 
-  /is-path-inside/3.0.3:
-    resolution: {integrity: sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==}
-    engines: {node: '>=8'}
+  /is-path-inside/4.0.0:
+    resolution: {integrity: sha512-lJJV/5dYS+RcL8uQdBDW9c9uWFLLBNRyFhnAKXw5tVqLlKZ4RMGZKv+YQ/IA3OhD+RpbJa1LLFM1FQPGyIXvOA==}
+    engines: {node: '>=12'}
     dev: true
 
   /is-plain-obj/1.1.0:
@@ -2767,6 +2780,10 @@ packages:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
     dev: true
 
+  /js-sdsl/4.1.4:
+    resolution: {integrity: sha512-Y2/yD55y5jteOAmY50JbUZYwk3CP3wnLPEZnlR1w9oKhITrBEtAxwuWKebFf8hMrPMgbYwFoWK/lH2sBkErELw==}
+    dev: true
+
   /js-tokens/4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
     dev: true
@@ -2915,6 +2932,11 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
+  /lowercase-keys/3.0.0:
+    resolution: {integrity: sha512-ozCC6gdQ+glXOQsveKD0YsDy8DSQFjDTz4zyzEHNV5+JP5D62LmfDZ6o1cycFx9ouG940M5dE8C8CTewdj2YWQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+    dev: true
+
   /lru-cache/6.0.0:
     resolution: {integrity: sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==}
     engines: {node: '>=10'}
@@ -3190,9 +3212,9 @@ packages:
       word-wrap: 1.2.3
     dev: true
 
-  /p-cancelable/2.1.1:
-    resolution: {integrity: sha512-BZOr3nRQHOntUjTrH8+Lh54smKHoHyur8We1V8DSMVrl5A2malOOwuJRnKRDjSnkoeBh4at6BwEnb5I7Jl31wg==}
-    engines: {node: '>=8'}
+  /p-cancelable/3.0.0:
+    resolution: {integrity: sha512-mlVgR3PGuzlo0MmTdk4cXqXWlwQDLnONTAg6sm62XkMJEiRxN3GL3SffkYvqwonbkJBcrI7Uvv5Zh9yjvn2iUw==}
+    engines: {node: '>=12.20'}
     dev: true
 
   /p-limit/2.3.0:
@@ -3223,11 +3245,11 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /p-map/4.0.0:
-    resolution: {integrity: sha512-/bjOqmgETBYB5BoEeGVea8dmvHb2m9GLy1E9W43yeyfP6QQCZGFNa+XRceJEuDB6zqr+gKpIAmlLebMpykw/MQ==}
-    engines: {node: '>=10'}
+  /p-map/5.5.0:
+    resolution: {integrity: sha512-VFqfGDHlx87K66yZrNdI4YGtD70IRyd+zSvgks6mzHPRNkoKy+9EKP4SFC77/vTTQYmRmti7dvqC+m5jBrBAcg==}
+    engines: {node: '>=12'}
     dependencies:
-      aggregate-error: 3.1.0
+      aggregate-error: 4.0.1
     dev: true
 
   /p-try/2.2.0:
@@ -3630,6 +3652,13 @@ packages:
       lowercase-keys: 2.0.0
     dev: true
 
+  /responselike/3.0.0:
+    resolution: {integrity: sha512-40yHxbNcl2+rzXvZuVkrYohathsSJlMTXKryG5y8uciHv1+xDLHQpgjG64JUO9nrEq2jGLH6IZ8BcZyw3wrweg==}
+    engines: {node: '>=14.16'}
+    dependencies:
+      lowercase-keys: 3.0.0
+    dev: true
+
   /reusify/1.0.4:
     resolution: {integrity: sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==}
     engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
@@ -3685,11 +3714,6 @@ packages:
     hasBin: true
     dev: true
 
-  /semver/7.0.0:
-    resolution: {integrity: sha512-+GB6zVA9LWh6zovYQLALHwv5rb2PHGlJi3lfiqIHxR0uuwCgefcOJc59v9fv1w8GbStwxuuqqAjI9NMAOOgq1A==}
-    hasBin: true
-    dev: true
-
   /semver/7.3.7:
     resolution: {integrity: sha512-QlYTucUYOews+WeEujDoEGziz4K6c47V/Bd+LjSSYcA94p+DmINdf7ncaUinThfvZyu13lN9OY1XDxt8C0Tw0g==}
     engines: {node: '>=10'}
@@ -3842,49 +3866,49 @@ packages:
     resolution: {integrity: sha512-Dj1Okke1C3uKKwQcetra4jSuk0DqbzbYtXipzFlFMZtowbF1x7BKJwB9AayVMyFARvU8EDrZdcax4At/452cAg==}
     dev: true
 
-  /stylelint-config-recommended-scss/6.0.0_74u2qasxp5mudia6vln5kcfuni:
+  /stylelint-config-recommended-scss/6.0.0_nqmbdxq5redfjw6kdtxj73dev4:
     resolution: {integrity: sha512-6QOe2/OzXV2AP5FE12A7+qtKdZik7Saf42SMMl84ksVBBPpTdrV+9HaCbPYiRMiwELY9hXCVdH4wlJ+YJb5eig==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
       postcss-scss: 4.0.4_postcss@8.4.16
-      stylelint: 14.11.0
-      stylelint-config-recommended: 7.0.0_stylelint@14.11.0
-      stylelint-scss: 4.2.0_stylelint@14.11.0
+      stylelint: 14.12.1
+      stylelint-config-recommended: 7.0.0_stylelint@14.12.1
+      stylelint-scss: 4.2.0_stylelint@14.12.1
     transitivePeerDependencies:
       - postcss
     dev: true
 
-  /stylelint-config-recommended/7.0.0_stylelint@14.11.0:
+  /stylelint-config-recommended/7.0.0_stylelint@14.12.1:
     resolution: {integrity: sha512-yGn84Bf/q41J4luis1AZ95gj0EQwRX8lWmGmBwkwBNSkpGSpl66XcPTulxGa/Z91aPoNGuIGBmFkcM1MejMo9Q==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      stylelint: 14.11.0
+      stylelint: 14.12.1
     dev: true
 
-  /stylelint-config-standard-scss/4.0.0_74u2qasxp5mudia6vln5kcfuni:
+  /stylelint-config-standard-scss/4.0.0_nqmbdxq5redfjw6kdtxj73dev4:
     resolution: {integrity: sha512-xizu8PTEyB6zYXBiVg6VtvUYn9m57x+6ZtaOdaxsfpbe5eagLPGNlbYnKfm/CfN69ArUpnwR6LjgsTHzlGbtXQ==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      stylelint: 14.11.0
-      stylelint-config-recommended-scss: 6.0.0_74u2qasxp5mudia6vln5kcfuni
-      stylelint-config-standard: 25.0.0_stylelint@14.11.0
+      stylelint: 14.12.1
+      stylelint-config-recommended-scss: 6.0.0_nqmbdxq5redfjw6kdtxj73dev4
+      stylelint-config-standard: 25.0.0_stylelint@14.12.1
     transitivePeerDependencies:
       - postcss
     dev: true
 
-  /stylelint-config-standard/25.0.0_stylelint@14.11.0:
+  /stylelint-config-standard/25.0.0_stylelint@14.12.1:
     resolution: {integrity: sha512-21HnP3VSpaT1wFjFvv9VjvOGDtAviv47uTp3uFmzcN+3Lt+RYRv6oAplLaV51Kf792JSxJ6svCJh/G18E9VnCA==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      stylelint: 14.11.0
-      stylelint-config-recommended: 7.0.0_stylelint@14.11.0
+      stylelint: 14.12.1
+      stylelint-config-recommended: 7.0.0_stylelint@14.12.1
     dev: true
 
-  /stylelint-scss/4.2.0_stylelint@14.11.0:
+  /stylelint-scss/4.2.0_stylelint@14.12.1:
     resolution: {integrity: sha512-HHHMVKJJ5RM9pPIbgJ/XA67h9H0407G68Rm69H4fzFbFkyDMcTV1Byep3qdze5+fJ3c0U7mJrbj6S0Fg072uZA==}
     peerDependencies:
       stylelint: ^14.5.1
@@ -3894,11 +3918,11 @@ packages:
       postcss-resolve-nested-selector: 0.1.1
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
-      stylelint: 14.11.0
+      stylelint: 14.12.1
     dev: true
 
-  /stylelint/14.11.0:
-    resolution: {integrity: sha512-OTLjLPxpvGtojEfpESWM8Ir64Z01E89xsisaBMUP/ngOx1+4VG2DPRcUyCCiin9Rd3kPXPsh/uwHd9eqnvhsYA==}
+  /stylelint/14.12.1:
+    resolution: {integrity: sha512-ZEM4TuksChMBfuPadQsHUkbOoRySAT9QMfDvvYxdAchOJl0p+csTMBXOu6ORAAxKhwBmxqJiep8V88bXfNs3EQ==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     hasBin: true
     dependencies:
@@ -3908,7 +3932,7 @@ packages:
       cosmiconfig: 7.0.1
       css-functions-list: 3.1.0
       debug: 4.3.4
-      fast-glob: 3.2.11
+      fast-glob: 3.2.12
       fastest-levenshtein: 1.0.16
       file-entry-cache: 6.0.1
       global-modules: 2.0.0
@@ -3935,7 +3959,7 @@ packages:
       string-width: 4.2.3
       strip-ansi: 6.0.1
       style-search: 0.1.0
-      supports-hyperlinks: 2.2.0
+      supports-hyperlinks: 2.3.0
       svg-tags: 1.0.0
       table: 6.8.0
       v8-compile-cache: 2.3.0
@@ -3958,8 +3982,8 @@ packages:
       has-flag: 4.0.0
     dev: true
 
-  /supports-hyperlinks/2.2.0:
-    resolution: {integrity: sha512-6sXEzV5+I5j8Bmq9/vUphGRM/RJNT9SCURJLjwfOg51heRtguGWDzcaBlgAzKhQa0EVNpPEKzQuBwZ8S8WaCeQ==}
+  /supports-hyperlinks/2.3.0:
+    resolution: {integrity: sha512-RpsAZlpWcDwOPQA22aCH4J0t7L8JmAvsCxfOSEwm7cQs3LshN36QaTkwd70DnBOXDWGssw2eUoc8CaRWT0XunA==}
     engines: {node: '>=8'}
     dependencies:
       has-flag: 4.0.0
@@ -4008,7 +4032,7 @@ packages:
     dev: true
 
   /through/2.3.8:
-    resolution: {integrity: sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU=}
+    resolution: {integrity: sha512-w89qg7PI8wAdvX60bMDP+bFoD5Dvhm9oLheFp5O4a2QF0cSBGsBX4qZmadPMvVqlLJBBci+WqGGOAPvcDeNSVg==}
     dev: true
 
   /tiny-emitter/2.1.0:
@@ -4114,13 +4138,13 @@ packages:
     engines: {node: '>= 10.0.0'}
     dev: true
 
-  /update-browserslist-db/1.0.5_browserslist@4.21.3:
-    resolution: {integrity: sha512-dteFFpCyvuDdr9S/ff1ISkKt/9YZxKjI9WlRR99c180GaztJtRa/fn18FdxGVKVsnPY7/a/FDN68mcvUmP4U7Q==}
+  /update-browserslist-db/1.0.9_browserslist@4.21.4:
+    resolution: {integrity: sha512-/xsqn21EGVdXI3EXSum1Yckj3ZVZugqyOZQ/CxYPBD/R+ko9NSUScf8tFF4dOKY+2pvSSJA/S+5B8s4Zr4kyvg==}
     hasBin: true
     peerDependencies:
       browserslist: '>= 4.21.0'
     dependencies:
-      browserslist: 4.21.3
+      browserslist: 4.21.4
       escalade: 3.1.1
       picocolors: 1.0.0
     dev: true
@@ -4283,19 +4307,6 @@ packages:
       yargs-parser: 18.1.3
     dev: true
 
-  /yargs/16.2.0:
-    resolution: {integrity: sha512-D1mvvtDG0L5ft/jGWkLpG1+m0eQxOfaBvTNELraWj22wSVUMWxZUvYgJYcKh6jGGIkJFhH4IZPQhR4TKpc8mBw==}
-    engines: {node: '>=10'}
-    dependencies:
-      cliui: 7.0.4
-      escalade: 3.1.1
-      get-caller-file: 2.0.5
-      require-directory: 2.1.1
-      string-width: 4.2.3
-      y18n: 5.0.8
-      yargs-parser: 20.2.9
-    dev: true
-
   /yargs/17.5.1:
     resolution: {integrity: sha512-t6YAJcxDkNX7NFYiVtKvWUz8l+PaKTLiL63mJYWR2GnHq2gjEWISzsLp9wg3aY36dY1j+gfIEL3pIF+XlJJfbA==}
     engines: {node: '>=12'}
@@ -4310,7 +4321,7 @@ packages:
     dev: true
 
   /yauzl/2.10.0:
-    resolution: {integrity: sha1-x+sXyT4RLLEIb6bY5R+wZnt5pfk=}
+    resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
     dependencies:
       buffer-crc32: 0.2.13
       fd-slicer: 1.1.0

From edae3e06997b886ea6ca7a8d569736a455d1b781 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 06:55:09 +1000
Subject: [PATCH 056/263] docs: add blog pre-release notes (#4076)

---
 docs/content/en/blog/release-4.37/index.md | 132 +++++++++++++++++++++
 1 file changed, 132 insertions(+)
 create mode 100644 docs/content/en/blog/release-4.37/index.md

diff --git a/docs/content/en/blog/release-4.37/index.md b/docs/content/en/blog/release-4.37/index.md
new file mode 100644
index 000000000..f86fd0073
--- /dev/null
+++ b/docs/content/en/blog/release-4.37/index.md
@@ -0,0 +1,132 @@
+---
+title: "4.37: Pre-Release Notes"
+description: "Pre-Release Notes for Authelia 4.37"
+lead: "Pre-Release Notes for 4.37"
+excerpt: "Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing features. In this blog post we'll discuss the new features and roughly what it means for users."
+date: 2022-09-26T05:48:22+10:00
+draft: false
+images: []
+categories: ["News", "Release Notes"]
+tags: ["releases", "pre-release-notes"]
+contributors: ["James Elliott"]
+pinned: false
+homepage: false
+---
+
+Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing
+features. In this blog post we'll discuss the new features and roughly what it means for users.
+
+_**Note:** These features are still subject to change however it represents the most likely features._
+
+This blog entry (and technically the blog itself) is part of a new effort I'm making for which I'm not entirely sure how
+useful it'll be but I'd love to hear your feedback regardless. We don't use any analytics or interactive components to
+gauge the consumption or reception of the website so it is invaluable to get this feedback.
+
+## Envoy Support
+
+We'll be supporting [Envoy] and [Istio] in this release. Support for this proxy mostly completes our proxy support status
+with all major proxies supported excluding Microsoft IIS.
+
+[Envoy]: https://www.envoyproxy.io/
+[Istio]: https://istio.io/
+
+## OpenID Connect Improvements
+
+Several items from the [OpenID Connect Roadmap](../../roadmap/active/openid-connect.md) are being checked off in this
+release.
+
+### Hashed Client Secrets
+
+We'll be supporting hashed OpenID Connect client secrets in this release. People will still be able to use plaintext
+secrets if they wish however we'll be recommending people utilize PBKDF2, BCrypt or SHA512 SHA2CRYPT (see
+[Password Algorithms](#password-algorithms) for a full compatibility list). This doesn't change anything for OpenID
+Connect Relying Parties, it only requires a change in the Authelia configuration.
+
+### Consent Modes
+
+Currently we support an explicit consent mode, and a pre-configured consent mode if the pre-configured duration is set.
+In this release we're planning to support an implicit consent mode which will never ask users for any consent. In
+addition it will make the consent mode configuration slightly more explicit.
+
+### JWKS Certificate Chain
+
+Currently we do not support JWKS certificates, we only support private keys. We will support advertising the Certificate
+Chain via the JWKS endpoint in this release. This means when provided with a Certificate Chain will be able to
+theoretically validate the level of trust associated with the JWKS.
+
+Some applications theoretically require this, most probably don't support it at all. However the beauty of this change
+is that if it's not supported by the other party they can just ignore it. We've yet to have users request this but it's
+likely inevitable that someone will ask or some third party will require it at some point, so we're preemptively
+implementing it.
+
+## Container Annotations / Labels
+
+In this release we're going to start adding the [OCI Image Format Specification]'s set of [Annotations] to all of our
+images.
+
+These for the time being will be added as container labels as [Annotations] are a relatively unsupported specification
+at this stage. However a majority of use cases for the [Annotations] either actually use labels or fallback to labels.
+
+[OCI Image Format Specification]: https://github.com/opencontainers/image-spec
+[Annotations]: https://github.com/opencontainers/image-spec/blob/main/annotations.md
+
+## Password Algorithms
+
+Several new password hashing algorithms will be supported in this release. The list of supported algorithms will become:
+
+* Argon2:
+  * Argon2id (previously supported)
+  * Argon2i
+  * Argon2d
+* PBKDF2:
+  * SHA1
+  * SHA224
+  * SHA256
+  * SHA384
+  * SHA512
+* SCrypt
+* BCrypt
+* SHA2 CRYPT:
+  * SHA256
+  * SHA512 (previously supported)
+
+## Users YAML File Authentication Backend
+
+In addition to the [Password Algorithms](#password-algorithms) changes we'll also be adding a few major features to the
+Users YAML File Authentication Backend.
+
+### Automatic Reload
+
+Administrators will be able to allow automatic reload the YAML file with the users database for deployments of the YAML
+File backend. This change will not extend to the main configuration file at this time.
+
+### Email Lookup
+
+Administrators will be able to allow users to use their email or their username to login similar to how this can be done
+with an LDAP filter already, bringing feature parity to the YAML File backend.
+
+## Mutual TLS Support
+
+This release will add support for Mutual TLS for Redis, LDAP, and SMTP. This improves compatibility with these systems
+when password authentication is not desired.
+
+## Query Parameter Authorization Criteria
+
+We'll be adding a very specific query parameter matcher to the access control rules in this release. It will allow
+individually targeting specific query arguments and testing if they exist/don't exist, equal/don't equal a value, or if
+they match/don't match a specific Regular Expression.
+
+This rule type takes a performance hit when compared to the resources rule type, so the resources rule type is generally
+encouraged. However for complex matching of query parameters a Regular Expression is hard to get exactly right. This
+feature alleviates this issue.
+
+## Compatibility Features
+
+Compatibility Features are toggle on features which allows operation with a third party. Usually they're implemented to
+allow ignoring a specific specification the third party has not implemented correctly.
+
+We'll be adding the following compatibility features in this release:
+
+* LDAP Servers which do not support querying the RootDSE for supported controls or extensions.
+* SMTP Servers which advertise support for STARTTLS but do not actually support it.
+

From 841bf6d42f20da7c05e293629a074a3274874a1f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 09:00:47 +1000
Subject: [PATCH 057/263] docs: fix blog wording to match the actual feature
 (#4077)

---
 .../blog/{release-4.37 => pre-release-notes-4.37}/index.md   | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)
 rename docs/content/en/blog/{release-4.37 => pre-release-notes-4.37}/index.md (95%)

diff --git a/docs/content/en/blog/release-4.37/index.md b/docs/content/en/blog/pre-release-notes-4.37/index.md
similarity index 95%
rename from docs/content/en/blog/release-4.37/index.md
rename to docs/content/en/blog/pre-release-notes-4.37/index.md
index f86fd0073..274b85678 100644
--- a/docs/content/en/blog/release-4.37/index.md
+++ b/docs/content/en/blog/pre-release-notes-4.37/index.md
@@ -64,8 +64,9 @@ implementing it.
 In this release we're going to start adding the [OCI Image Format Specification]'s set of [Annotations] to all of our
 images.
 
-These for the time being will be added as container labels as [Annotations] are a relatively unsupported specification
-at this stage. However a majority of use cases for the [Annotations] either actually use labels or fallback to labels.
+These for the time being will also be added as container labels as [Annotations] are a relatively unsupported
+specification at this stage. However a majority of use cases for the [Annotations] either actually use labels or fallback
+to labels.
 
 [OCI Image Format Specification]: https://github.com/opencontainers/image-spec
 [Annotations]: https://github.com/opencontainers/image-spec/blob/main/annotations.md

From a7a217a0365e776715da53af5581bcc4ea6aa18a Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 09:16:22 +1000
Subject: [PATCH 058/263] docs: fix grammar and og proto (#4078)

---
 docs/content/en/blog/pre-release-notes-4.37/index.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/docs/content/en/blog/pre-release-notes-4.37/index.md b/docs/content/en/blog/pre-release-notes-4.37/index.md
index 274b85678..ffd5d5e14 100644
--- a/docs/content/en/blog/pre-release-notes-4.37/index.md
+++ b/docs/content/en/blog/pre-release-notes-4.37/index.md
@@ -1,6 +1,6 @@
 ---
 title: "4.37: Pre-Release Notes"
-description: "Pre-Release Notes for Authelia 4.37"
+description: "Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing features. In this blog post we'll discuss the new features and roughly what it means for users."
 lead: "Pre-Release Notes for 4.37"
 excerpt: "Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing features. In this blog post we'll discuss the new features and roughly what it means for users."
 date: 2022-09-26T05:48:22+10:00
@@ -64,9 +64,9 @@ implementing it.
 In this release we're going to start adding the [OCI Image Format Specification]'s set of [Annotations] to all of our
 images.
 
-These for the time being will also be added as container labels as [Annotations] are a relatively unsupported
-specification at this stage. However a majority of use cases for the [Annotations] either actually use labels or fallback
-to labels.
+For the time being we will also add the [Annotations] as container labels. This is because [Annotations] are a
+relatively unsupported specification at this stage. A majority of use cases for the [Annotations] either actually use
+labels or fallback to labels.
 
 [OCI Image Format Specification]: https://github.com/opencontainers/image-spec
 [Annotations]: https://github.com/opencontainers/image-spec/blob/main/annotations.md
@@ -130,4 +130,3 @@ We'll be adding the following compatibility features in this release:
 
 * LDAP Servers which do not support querying the RootDSE for supported controls or extensions.
 * SMTP Servers which advertise support for STARTTLS but do not actually support it.
-

From e3f5a574fee6c9e44d03afdacc0ff3776f26821d Mon Sep 17 00:00:00 2001
From: Amir Zarrinkafsh <nightah@me.com>
Date: Mon, 26 Sep 2022 10:05:59 +1000
Subject: [PATCH 059/263] build: add container labels and annotations (#4071)

This adds a new helper which retrieves the build metadata, uses it to generate container labels, and refactors XFlags uses to utilize the same machinery.

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 cmd/authelia-scripts/cmd/build.go          |   6 +-
 cmd/authelia-scripts/cmd/docker.go         |  25 +++--
 cmd/authelia-scripts/cmd/helpers.go        |  75 ++++++-------
 cmd/authelia-scripts/cmd/helpers_docker.go | 119 +++++++++++++++++++-
 cmd/authelia-scripts/cmd/types.go          | 123 +++++++++++++++++++++
 cmd/authelia-scripts/cmd/xflags.go         |   4 +-
 internal/utils/version.go                  |   5 +-
 internal/utils/version_test.go             |  16 +--
 8 files changed, 301 insertions(+), 72 deletions(-)

diff --git a/cmd/authelia-scripts/cmd/build.go b/cmd/authelia-scripts/cmd/build.go
index 337b5ccb8..fa72b83f6 100644
--- a/cmd/authelia-scripts/cmd/build.go
+++ b/cmd/authelia-scripts/cmd/build.go
@@ -40,7 +40,7 @@ func cmdBuildRun(cobraCmd *cobra.Command, args []string) {
 
 	cmdCleanRun(cobraCmd, args)
 
-	xflags, err := getXFlags(branch, os.Getenv("BUILDKITE_BUILD_NUMBER"), "")
+	buildMetaData, err := getBuild(branch, os.Getenv("BUILDKITE_BUILD_NUMBER"), "")
 	if err != nil {
 		log.Fatal(err)
 	}
@@ -62,11 +62,11 @@ func cmdBuildRun(cobraCmd *cobra.Command, args []string) {
 	if buildkite {
 		log.Info("Building Authelia Go binaries with gox...")
 
-		buildAutheliaBinaryGOX(xflags)
+		buildAutheliaBinaryGOX(buildMetaData.XFlags())
 	} else {
 		log.Info("Building Authelia Go binary...")
 
-		buildAutheliaBinaryGO(xflags)
+		buildAutheliaBinaryGO(buildMetaData.XFlags())
 	}
 
 	cleanAssets()
diff --git a/cmd/authelia-scripts/cmd/docker.go b/cmd/authelia-scripts/cmd/docker.go
index d37b12285..c06385a80 100644
--- a/cmd/authelia-scripts/cmd/docker.go
+++ b/cmd/authelia-scripts/cmd/docker.go
@@ -13,15 +13,17 @@ import (
 
 var container string
 
-var containers = []string{"dev", "coverage"}
-var defaultContainer = "dev"
-var ciBranch = os.Getenv("BUILDKITE_BRANCH")
-var ciPullRequest = os.Getenv("BUILDKITE_PULL_REQUEST")
-var ciTag = os.Getenv("BUILDKITE_TAG")
-var dockerTags = regexp.MustCompile(`v(?P<Patch>(?P<Minor>(?P<Major>\d+)\.\d+)\.\d+.*)`)
-var ignoredSuffixes = regexp.MustCompile("alpha|beta")
-var publicRepo = regexp.MustCompile(`.*:.*`)
-var tags = dockerTags.FindStringSubmatch(ciTag)
+var (
+	containers       = []string{"dev", "coverage"}
+	defaultContainer = "dev"
+	ciBranch         = os.Getenv("BUILDKITE_BRANCH")
+	ciPullRequest    = os.Getenv("BUILDKITE_PULL_REQUEST")
+	ciTag            = os.Getenv("BUILDKITE_TAG")
+	dockerTags       = regexp.MustCompile(`v(?P<Patch>(?P<Minor>(?P<Major>\d+)\.\d+)\.\d+.*)`)
+	ignoredSuffixes  = regexp.MustCompile("alpha|beta")
+	publicRepo       = regexp.MustCompile(`.*:.*`)
+	tags             = dockerTags.FindStringSubmatch(ciTag)
+)
 
 func newDockerCmd() (cmd *cobra.Command) {
 	cmd = &cobra.Command{
@@ -143,13 +145,12 @@ func dockerBuildOfficialImage(arch string) error {
 	filename := "Dockerfile"
 	dockerfile := fmt.Sprintf("%s.%s", filename, arch)
 
-	flags, err := getXFlags(ciBranch, os.Getenv("BUILDKITE_BUILD_NUMBER"), "")
+	buildMetaData, err := getBuild(ciBranch, os.Getenv("BUILDKITE_BUILD_NUMBER"), "")
 	if err != nil {
 		log.Fatal(err)
 	}
 
-	return docker.Build(IntermediateDockerImageName, dockerfile, ".",
-		strings.Join(flags, " "))
+	return docker.Build(IntermediateDockerImageName, dockerfile, ".", buildMetaData)
 }
 
 func login(docker *Docker, registry string) {
diff --git a/cmd/authelia-scripts/cmd/helpers.go b/cmd/authelia-scripts/cmd/helpers.go
index 728ade11e..12f7e7dc8 100644
--- a/cmd/authelia-scripts/cmd/helpers.go
+++ b/cmd/authelia-scripts/cmd/helpers.go
@@ -2,66 +2,63 @@ package cmd
 
 import (
 	"fmt"
-	"strings"
+	"strconv"
 	"time"
 
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
-func getXFlags(branch, build, extra string) (flags []string, err error) {
-	if branch == "" {
-		out, _, err := utils.RunCommandAndReturnOutput("git rev-parse --abbrev-ref HEAD")
-		if err != nil {
-			return flags, fmt.Errorf("error getting branch with git rev-parse: %w", err)
+func getBuild(branch, buildNumber, extra string) (b *Build, err error) {
+	var out string
+
+	b = &Build{
+		Branch: branch,
+		Extra:  extra,
+	}
+
+	if buildNumber != "" {
+		if b.Number, err = strconv.Atoi(buildNumber); err != nil {
+			return nil, fmt.Errorf("error parsing provided build number: %w", err)
+		}
+	}
+
+	if b.Branch == "" {
+		if out, _, err = utils.RunCommandAndReturnOutput("git rev-parse --abbrev-ref HEAD"); err != nil {
+			return nil, fmt.Errorf("error getting branch with git rev-parse: %w", err)
 		}
 
 		if out == "" {
-			branch = "master"
+			b.Branch = "master"
 		} else {
-			branch = out
+			b.Branch = out
 		}
 	}
 
-	gitTagCommit, _, err := utils.RunCommandAndReturnOutput("git rev-list --tags --max-count=1")
-	if err != nil {
-		return flags, fmt.Errorf("error getting tag commit with git rev-list: %w", err)
+	var (
+		gitTagCommit string
+	)
+
+	if gitTagCommit, _, err = utils.RunCommandAndReturnOutput("git rev-list --tags --max-count=1"); err != nil {
+		return nil, fmt.Errorf("error getting tag commit with git rev-list: %w", err)
 	}
 
-	tag, _, err := utils.RunCommandAndReturnOutput(fmt.Sprintf("git describe --tags --abbrev=0 %s", gitTagCommit))
-	if err != nil {
-		return flags, fmt.Errorf("error getting tag with git describe: %w", err)
+	if b.Tag, _, err = utils.RunCommandAndReturnOutput(fmt.Sprintf("git describe --tags --abbrev=0 %s", gitTagCommit)); err != nil {
+		return nil, fmt.Errorf("error getting tag with git describe: %w", err)
 	}
 
-	commit, _, err := utils.RunCommandAndReturnOutput("git rev-parse HEAD")
-	if err != nil {
-		return flags, fmt.Errorf("error getting commit with git rev-parse: %w", err)
+	if b.Commit, _, err = utils.RunCommandAndReturnOutput("git rev-parse HEAD"); err != nil {
+		return nil, fmt.Errorf("error getting commit with git rev-parse: %w", err)
 	}
 
-	var states []string
-
-	if gitTagCommit == commit {
-		states = append(states, "tagged")
-	} else {
-		states = append(states, "untagged")
+	if gitTagCommit == b.Commit {
+		b.Tagged = true
 	}
 
-	if _, exitCode, _ := utils.RunCommandAndReturnOutput("git diff --quiet"); exitCode != 0 {
-		states = append(states, "dirty")
-	} else {
-		states = append(states, "clean")
+	if _, exitCode, _ := utils.RunCommandAndReturnOutput("git diff --quiet"); exitCode == 0 {
+		b.Clean = true
 	}
 
-	if build == "" {
-		build = "manual"
-	}
+	b.Date = time.Now()
 
-	return []string{
-		fmt.Sprintf(fmtLDFLAGSX, "BuildBranch", branch),
-		fmt.Sprintf(fmtLDFLAGSX, "BuildTag", tag),
-		fmt.Sprintf(fmtLDFLAGSX, "BuildCommit", commit),
-		fmt.Sprintf(fmtLDFLAGSX, "BuildDate", time.Now().Format("Mon, 02 Jan 2006 15:04:05 -0700")),
-		fmt.Sprintf(fmtLDFLAGSX, "BuildState", strings.Join(states, " ")),
-		fmt.Sprintf(fmtLDFLAGSX, "BuildExtra", extra),
-		fmt.Sprintf(fmtLDFLAGSX, "BuildNumber", build),
-	}, nil
+	return b, nil
 }
diff --git a/cmd/authelia-scripts/cmd/helpers_docker.go b/cmd/authelia-scripts/cmd/helpers_docker.go
index 89d098238..11fd93fe8 100644
--- a/cmd/authelia-scripts/cmd/helpers_docker.go
+++ b/cmd/authelia-scripts/cmd/helpers_docker.go
@@ -1,6 +1,13 @@
 package cmd
 
 import (
+	"bufio"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"os"
+	"strings"
+
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
@@ -8,11 +15,20 @@ import (
 type Docker struct{}
 
 // Build build a docker image.
-func (d *Docker) Build(tag, dockerfile, target, ldflags string) error {
-	return utils.CommandWithStdout(
-		"docker", "build", "-t", tag, "-f", dockerfile,
-		"--progress=plain", "--build-arg", "LDFLAGS_EXTRA="+ldflags,
-		target).Run()
+func (d *Docker) Build(tag, dockerfile, target string, buildMetaData *Build) error {
+	args := []string{"build", "-t", tag, "-f", dockerfile, "--progress=plain"}
+
+	for label, value := range buildMetaData.ContainerLabels() {
+		if value == "" {
+			continue
+		}
+
+		args = append(args, "--label", fmt.Sprintf("%s=%s", label, value))
+	}
+
+	args = append(args, "--build-arg", "LDFLAGS_EXTRA="+strings.Join(buildMetaData.XFlags(), " "), target)
+
+	return utils.CommandWithStdout("docker", args...).Run()
 }
 
 // Tag tag a docker image.
@@ -27,10 +43,101 @@ func (d *Docker) Login(username, password, registry string) error {
 
 // Manifest push a docker manifest to dockerhub.
 func (d *Docker) Manifest(tag1, tag2 string) error {
-	return utils.CommandWithStdout("docker", "build", "-t", tag1, "-t", tag2, "--platform", "linux/amd64,linux/arm/v7,linux/arm64", "--builder", "buildx", "--push", ".").Run()
+	args := []string{"build", "-t", tag1, "-t", tag2}
+	annotations := ""
+
+	buildMetaData, err := getBuild(ciBranch, os.Getenv("BUILDKITE_BUILD_NUMBER"), "")
+	if err != nil {
+		return err
+	}
+
+	for label, value := range buildMetaData.ContainerLabels() {
+		if value == "" {
+			continue
+		}
+
+		annotations += fmt.Sprintf("annotation.%s=%s,", label, value)
+		args = append(args, "--label", fmt.Sprintf("%s=%s", label, value))
+	}
+
+	var baseImageTag string
+
+	from, err := getDockerfileDirective("Dockerfile", "FROM")
+	if err == nil {
+		baseImageTag = from[strings.IndexRune(from, ':')+1:]
+		args = append(args, "--label", "org.opencontainers.image.base.name=docker.io/library/alpine:"+baseImageTag)
+	}
+
+	resp, err := http.Get("https://hub.docker.com/v2/repositories/library/alpine/tags/" + baseImageTag + "/images")
+	if err != nil {
+		return err
+	}
+
+	defer resp.Body.Close()
+
+	images := DockerImages{}
+
+	if err = json.NewDecoder(resp.Body).Decode(&images); err != nil {
+		return err
+	}
+
+	var (
+		digestAMD64, digestARM, digestARM64 string
+	)
+
+	for _, platform := range []string{"linux/amd64", "linux/arm/v7", "linux/arm64"} {
+		for _, image := range images {
+			if !image.Match(platform) {
+				continue
+			}
+
+			switch platform {
+			case "linux/amd64":
+				digestAMD64 = image.Digest
+			case "linux/arm/v7":
+				digestARM = image.Digest
+			case "linux/arm64":
+				digestARM64 = image.Digest
+			}
+		}
+	}
+
+	finalArgs := make([]string, len(args))
+
+	copy(finalArgs, args)
+
+	finalArgs = append(finalArgs, "--output", "type=image,\"name="+dockerhub+"/"+DockerImageName+","+ghcr+"/"+DockerImageName+"\","+annotations+"annotation.org.opencontainers.image.base.name=docker.io/library/alpine:"+baseImageTag+",annotation[linux/amd64].org.opencontainers.image.base.digest="+digestAMD64+",annotation[linux/arm/v7].org.opencontainers.image.base.digest="+digestARM+",annotation[linux/arm64].org.opencontainers.image.base.digest="+digestARM64, "--platform", "linux/amd64,linux/arm/v7,linux/arm64", "--builder", "buildx", "--push", ".")
+
+	if err = utils.CommandWithStdout("docker", finalArgs...).Run(); err != nil {
+		return err
+	}
+
+	return nil
 }
 
 // PublishReadme push README.md to dockerhub.
 func (d *Docker) PublishReadme() error {
 	return utils.CommandWithStdout("bash", "-c", `token=$(curl -fs --retry 3 -H "Content-Type: application/json" -X "POST" -d '{"username": "'$DOCKER_USERNAME'", "password": "'$DOCKER_PASSWORD'"}' https://hub.docker.com/v2/users/login/ | jq -r .token) && jq -n --arg msg "$(cat README.md | sed -r 's/(\<img\ src\=\")(\.\/)/\1https:\/\/github.com\/authelia\/authelia\/raw\/master\//' | sed 's/\.\//https:\/\/github.com\/authelia\/authelia\/blob\/master\//g' | sed '/start \[contributing\]/ a <a href="https://github.com/authelia/authelia/graphs/contributors"><img src="https://opencollective.com/authelia-sponsors/contributors.svg?width=890" /></a>' | sed '/Thanks goes to/,/### Backers/{/### Backers/!d}')" '{"registry":"registry-1.docker.io","full_description": $msg }' | curl -fs --retry 3 -o /dev/null -L -X "PATCH" -H "Content-Type: application/json" -H "Authorization: JWT $token" -d @- https://hub.docker.com/v2/repositories/authelia/authelia/`).Run()
 }
+
+func getDockerfileDirective(filePath, directive string) (from string, err error) {
+	var f *os.File
+
+	if f, err = os.Open(filePath); err != nil {
+		return "", err
+	}
+
+	defer f.Close()
+
+	s := bufio.NewScanner(f)
+
+	for s.Scan() {
+		data := s.Text()
+
+		if strings.HasPrefix(data, directive+" ") {
+			return data[5:], nil
+		}
+	}
+
+	return "", nil
+}
diff --git a/cmd/authelia-scripts/cmd/types.go b/cmd/authelia-scripts/cmd/types.go
index 4da3d28fc..a2712908c 100644
--- a/cmd/authelia-scripts/cmd/types.go
+++ b/cmd/authelia-scripts/cmd/types.go
@@ -1,7 +1,130 @@
 package cmd
 
+import (
+	"fmt"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/authelia/authelia/v4/internal/utils"
+)
+
 // HostEntry represents an entry in /etc/hosts.
 type HostEntry struct {
 	Domain string
 	IP     string
 }
+
+// DockerImages represents some of the data from the docker images API.
+type DockerImages []DockerImage
+
+// DockerImage represents some of the data from the docker images API.
+type DockerImage struct {
+	Architecture string      `json:"architecture"`
+	Variant      interface{} `json:"variant"`
+	Digest       string      `json:"digest"`
+	OS           string      `json:"os"`
+}
+
+// Match returns true if this image matches the platform.
+func (d DockerImage) Match(platform string) bool {
+	parts := []string{d.OS, d.Architecture}
+
+	if strings.Join(parts, "/") == platform {
+		return true
+	}
+
+	if d.Variant == nil {
+		return false
+	}
+
+	parts = append(parts, d.Variant.(string))
+
+	return strings.Join(parts, "/") == platform
+}
+
+// Build represents a builds metadata.
+type Build struct {
+	Branch string
+	Tag    string
+	Commit string
+	Tagged bool
+	Clean  bool
+	Extra  string
+	Number int
+	Date   time.Time
+}
+
+// States returns the state tags for this Build.
+func (b Build) States() []string {
+	var states []string
+
+	if b.Tagged {
+		states = append(states, "tagged")
+	} else {
+		states = append(states, "untagged")
+	}
+
+	if b.Clean {
+		states = append(states, "clean")
+	} else {
+		states = append(states, "dirty")
+	}
+
+	return states
+}
+
+// State returns the state tags string for this Build.
+func (b Build) State() string {
+	return strings.Join(b.States(), " ")
+}
+
+// XFlags returns the XFlags for this Build.
+func (b Build) XFlags() []string {
+	return []string{
+		fmt.Sprintf(fmtLDFLAGSX, "BuildBranch", b.Branch),
+		fmt.Sprintf(fmtLDFLAGSX, "BuildTag", b.Tag),
+		fmt.Sprintf(fmtLDFLAGSX, "BuildCommit", b.Commit),
+		fmt.Sprintf(fmtLDFLAGSX, "BuildDate", b.Date.Format("Mon, 02 Jan 2006 15:04:05 -0700")),
+		fmt.Sprintf(fmtLDFLAGSX, "BuildState", b.State()),
+		fmt.Sprintf(fmtLDFLAGSX, "BuildExtra", b.Extra),
+		fmt.Sprintf(fmtLDFLAGSX, "BuildNumber", strconv.Itoa(b.Number)),
+	}
+}
+
+// ContainerLabels returns the container labels for this Build.
+func (b Build) ContainerLabels() (labels map[string]string) {
+	var version string
+
+	switch {
+	case b.Clean && b.Tagged:
+		version = utils.VersionAdv(b.Tag, b.State(), b.Commit, b.Branch, b.Extra)
+	case b.Clean:
+		version = fmt.Sprintf("%s-pre+%s.%s", b.Tag, b.Branch, b.Commit)
+	case b.Tagged:
+		version = fmt.Sprintf("%s-dirty", b.Tag)
+	default:
+		version = fmt.Sprintf("%s-dirty+%s.%s", b.Tag, b.Branch, b.Commit)
+	}
+
+	if strings.HasPrefix(version, "v") && len(version) > 1 {
+		version = version[1:]
+	}
+
+	labels = map[string]string{
+		"org.opencontainers.image.created":       b.Date.Format(time.RFC3339),
+		"org.opencontainers.image.authors":       "",
+		"org.opencontainers.image.url":           "https://github.com/authelia/authelia/pkgs/container/authelia",
+		"org.opencontainers.image.documentation": "https://www.authelia.com",
+		"org.opencontainers.image.source":        fmt.Sprintf("https://github.com/authelia/authelia/tree/%s", b.Commit),
+		"org.opencontainers.image.version":       version,
+		"org.opencontainers.image.revision":      b.Commit,
+		"org.opencontainers.image.vendor":        "Authelia",
+		"org.opencontainers.image.licenses":      "Apache-2.0",
+		"org.opencontainers.image.ref.name":      "",
+		"org.opencontainers.image.title":         "authelia",
+		"org.opencontainers.image.description":   "Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal.",
+	}
+
+	return labels
+}
diff --git a/cmd/authelia-scripts/cmd/xflags.go b/cmd/authelia-scripts/cmd/xflags.go
index a2876211f..f9f91f735 100644
--- a/cmd/authelia-scripts/cmd/xflags.go
+++ b/cmd/authelia-scripts/cmd/xflags.go
@@ -37,10 +37,10 @@ func cmdXFlagsRun(cobraCmd *cobra.Command, _ []string) {
 		log.Fatal(err)
 	}
 
-	flags, err := getXFlags("", build, extra)
+	buildMetaData, err := getBuild("", build, extra)
 	if err != nil {
 		log.Fatal(err)
 	}
 
-	fmt.Println(strings.Join(flags, " "))
+	fmt.Println(strings.Join(buildMetaData.XFlags(), " "))
 }
diff --git a/internal/utils/version.go b/internal/utils/version.go
index 3e051d708..24fa855a5 100644
--- a/internal/utils/version.go
+++ b/internal/utils/version.go
@@ -35,10 +35,11 @@ var BuildNumber = "0"
 // BuildTag i.e. v1.0.0. If dirty and tagged are present it returns <BuildTag>-dirty. Otherwise, the following is the
 // format: untagged-<BuildTag>-dirty-<BuildExtra> (<BuildBranch>, <BuildCommit>).
 func Version() (versionString string) {
-	return version(BuildTag, BuildState, BuildCommit, BuildBranch, BuildExtra)
+	return VersionAdv(BuildTag, BuildState, BuildCommit, BuildBranch, BuildExtra)
 }
 
-func version(tag, state, commit, branch, extra string) (version string) {
+// VersionAdv takes inputs to generate the version.
+func VersionAdv(tag, state, commit, branch, extra string) (version string) {
 	b := strings.Builder{}
 
 	states := strings.Split(state, " ")
diff --git a/internal/utils/version_test.go b/internal/utils/version_test.go
index 3b8aed08a..68aa9f522 100644
--- a/internal/utils/version_test.go
+++ b/internal/utils/version_test.go
@@ -15,27 +15,27 @@ func TestVersionDefault(t *testing.T) {
 func TestVersion(t *testing.T) {
 	var v string
 
-	v = version("v4.90.0", "tagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
+	v = VersionAdv("v4.90.0", "tagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
 	assert.Equal(t, "v4.90.0", v)
 
-	v = version("v4.90.0", "tagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "freshports")
+	v = VersionAdv("v4.90.0", "tagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "freshports")
 	assert.Equal(t, "v4.90.0-freshports", v)
 
-	v = version("v4.90.0", "tagged dirty", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
+	v = VersionAdv("v4.90.0", "tagged dirty", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
 	assert.Equal(t, "v4.90.0-dirty", v)
 
-	v = version("v4.90.0", "untagged dirty", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
+	v = VersionAdv("v4.90.0", "untagged dirty", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
 	assert.Equal(t, "untagged-v4.90.0-dirty (master, 50d8b4a)", v)
 
-	v = version("v4.90.0", "untagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
+	v = VersionAdv("v4.90.0", "untagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
 	assert.Equal(t, "untagged-v4.90.0 (master, 50d8b4a)", v)
 
-	v = version("v4.90.0", "untagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "freshports")
+	v = VersionAdv("v4.90.0", "untagged clean", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "freshports")
 	assert.Equal(t, "untagged-v4.90.0-freshports (master, 50d8b4a)", v)
 
-	v = version("v4.90.0", "untagged clean", "", "master", "")
+	v = VersionAdv("v4.90.0", "untagged clean", "", "master", "")
 	assert.Equal(t, "untagged-v4.90.0 (master, unknown)", v)
 
-	v = version("v4.90.0", "", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
+	v = VersionAdv("v4.90.0", "", "50d8b4a941c26b89482c94ab324b5a274f9ced66", "master", "")
 	assert.Equal(t, "untagged-v4.90.0-dirty (master, 50d8b4a)", v)
 }

From 931f963cc8e48eb38e8ff990cb2f795650bb369f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 11:57:51 +1000
Subject: [PATCH 060/263] docs: fix bug report and feature request links
 (#4079)

---
 docs/layouts/index.redirects | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/layouts/index.redirects b/docs/layouts/index.redirects
index 9ae778ce3..7ab74319e 100644
--- a/docs/layouts/index.redirects
+++ b/docs/layouts/index.redirects
@@ -8,8 +8,8 @@
 /l/charts               https://charts.authelia.com
 /l/translate            https://translate.authelia.com
 /l/github               https://github.com/authelia/authelia
-/l/bug                  https://github.com/authelia/authelia/issues/new?assignees=&labels=Possible+Bug&template=bug_report.md
-/l/fr                   https://github.com/authelia/authelia/issues/new?assignees=&labels=Feature+Request&template=feature_request.md
+/l/bug                  https://github.com/authelia/authelia/issues/new?assignees=&labels=type%2Fbug%2Funconfirmed%2Cstatus%2Fneeds-triage%2Cpriority%2F4%2Fnormal&template=bug-report.yml
+/l/fr                   https://github.com/authelia/authelia/issues/new?assignees=&labels=type%2Ffeature%2Cstatus%2Fneeds-design%2Cpriority%2F4%2Fnormal&template=feature-request.yml
 
 ## The following maps the old site to the new one.
 /docs/						                                  /

From d8f8f74dcef83c2e4f85a634b90aa6f0533394f1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 26 Sep 2022 13:10:37 +1000
Subject: [PATCH 061/263] build(deps): update module github.com/go-rod/rod to
 v0.111.0 (#4056)

* build(deps): update module github.com/go-rod/rod to v0.111.0

* fix(suites): update click to include click count

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
---
 go.mod                                             |  2 +-
 go.sum                                             |  4 ++--
 internal/suites/action_2fa_methods.go              | 10 +++++-----
 internal/suites/action_login.go                    |  4 ++--
 internal/suites/action_reset_password.go           |  6 +++---
 internal/suites/action_totp.go                     |  2 +-
 internal/suites/scenario_available_methods_test.go |  2 +-
 internal/suites/scenario_oidc_test.go              |  8 ++++----
 internal/suites/scenario_regulation_test.go        |  6 +++---
 internal/suites/suite_duo_push_test.go             |  2 +-
 10 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/go.mod b/go.mod
index 07543cea7..dc796a1ec 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/go-asn1-ber/asn1-ber v1.5.4
 	github.com/go-ldap/ldap/v3 v3.4.4
-	github.com/go-rod/rod v0.110.1
+	github.com/go-rod/rod v0.111.0
 	github.com/go-sql-driver/mysql v1.6.0
 	github.com/go-webauthn/webauthn v0.4.0
 	github.com/golang-jwt/jwt/v4 v4.4.2
diff --git a/go.sum b/go.sum
index 1fdd5ce8a..88b401215 100644
--- a/go.sum
+++ b/go.sum
@@ -311,8 +311,8 @@ github.com/go-openapi/validate v0.19.3/go.mod h1:90Vh6jjkTn+OT1Eefm0ZixWNFjhtOH7
 github.com/go-openapi/validate v0.19.10/go.mod h1:RKEZTUWDkxKQxN2jDT7ZnZi2bhZlbNMAuKvKB+IaGx8=
 github.com/go-redis/redis/v8 v8.11.5 h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI=
 github.com/go-redis/redis/v8 v8.11.5/go.mod h1:gREzHqY1hg6oD9ngVRbLStwAWKhA0FEgq8Jd4h5lpwo=
-github.com/go-rod/rod v0.110.1 h1:+e0rCHCsOyWsmbP/6J3TTcO3LiCodFEa9vjdUSOFm5w=
-github.com/go-rod/rod v0.110.1/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
+github.com/go-rod/rod v0.111.0 h1:aMNNdz10GYPYec9z1WsFqwAdRYVsuufVTOrah7whG3I=
+github.com/go-rod/rod v0.111.0/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.4.1/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.5.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LBy8hT2VhHyBg=
diff --git a/internal/suites/action_2fa_methods.go b/internal/suites/action_2fa_methods.go
index b012c1107..5e8990a95 100644
--- a/internal/suites/action_2fa_methods.go
+++ b/internal/suites/action_2fa_methods.go
@@ -9,26 +9,26 @@ import (
 )
 
 func (rs *RodSession) doChangeMethod(t *testing.T, page *rod.Page, method string) {
-	err := rs.WaitElementLocatedByID(t, page, "methods-button").Click("left")
+	err := rs.WaitElementLocatedByID(t, page, "methods-button").Click("left", 1)
 	require.NoError(t, err)
 	rs.WaitElementLocatedByID(t, page, "methods-dialog")
-	err = rs.WaitElementLocatedByID(t, page, fmt.Sprintf("%s-option", method)).Click("left")
+	err = rs.WaitElementLocatedByID(t, page, fmt.Sprintf("%s-option", method)).Click("left", 1)
 	require.NoError(t, err)
 }
 
 func (rs *RodSession) doChangeDevice(t *testing.T, page *rod.Page, deviceID string) {
-	err := rs.WaitElementLocatedByID(t, page, "selection-link").Click("left")
+	err := rs.WaitElementLocatedByID(t, page, "selection-link").Click("left", 1)
 	require.NoError(t, err)
 	rs.doSelectDevice(t, page, deviceID)
 }
 
 func (rs *RodSession) doSelectDevice(t *testing.T, page *rod.Page, deviceID string) {
 	rs.WaitElementLocatedByID(t, page, "device-selection")
-	err := rs.WaitElementLocatedByID(t, page, fmt.Sprintf("device-%s", deviceID)).Click("left")
+	err := rs.WaitElementLocatedByID(t, page, fmt.Sprintf("device-%s", deviceID)).Click("left", 1)
 	require.NoError(t, err)
 }
 
 func (rs *RodSession) doClickButton(t *testing.T, page *rod.Page, buttonID string) {
-	err := rs.WaitElementLocatedByID(t, page, buttonID).Click("left")
+	err := rs.WaitElementLocatedByID(t, page, buttonID).Click("left", 1)
 	require.NoError(t, err)
 }
diff --git a/internal/suites/action_login.go b/internal/suites/action_login.go
index 73e7b8073..cb327b2d4 100644
--- a/internal/suites/action_login.go
+++ b/internal/suites/action_login.go
@@ -19,12 +19,12 @@ func (rs *RodSession) doFillLoginPageAndClick(t *testing.T, page *rod.Page, user
 
 	if keepMeLoggedIn {
 		keepMeLoggedInElement := rs.WaitElementLocatedByID(t, page, "remember-checkbox")
-		err = keepMeLoggedInElement.Click("left")
+		err = keepMeLoggedInElement.Click("left", 1)
 		require.NoError(t, err)
 	}
 
 	buttonElement := rs.WaitElementLocatedByID(t, page, "sign-in-button")
-	err = buttonElement.Click("left")
+	err = buttonElement.Click("left", 1)
 	require.NoError(t, err)
 }
 
diff --git a/internal/suites/action_reset_password.go b/internal/suites/action_reset_password.go
index 5a3ca5d5b..112771ed4 100644
--- a/internal/suites/action_reset_password.go
+++ b/internal/suites/action_reset_password.go
@@ -9,13 +9,13 @@ import (
 )
 
 func (rs *RodSession) doInitiatePasswordReset(t *testing.T, page *rod.Page, username string) {
-	err := rs.WaitElementLocatedByID(t, page, "reset-password-button").Click("left")
+	err := rs.WaitElementLocatedByID(t, page, "reset-password-button").Click("left", 1)
 	require.NoError(t, err)
 	// Fill in username.
 	err = rs.WaitElementLocatedByID(t, page, "username-textfield").Input(username)
 	require.NoError(t, err)
 	// And click on the reset button.
-	err = rs.WaitElementLocatedByID(t, page, "reset-button").Click("left")
+	err = rs.WaitElementLocatedByID(t, page, "reset-button").Click("left", 1)
 	require.NoError(t, err)
 }
 
@@ -33,7 +33,7 @@ func (rs *RodSession) doCompletePasswordReset(t *testing.T, page *rod.Page, newP
 	err = rs.WaitElementLocatedByID(t, page, "password2-textfield").Input(newPassword2)
 	require.NoError(t, err)
 
-	err = rs.WaitElementLocatedByID(t, page, "reset-button").Click("left")
+	err = rs.WaitElementLocatedByID(t, page, "reset-button").Click("left", 1)
 	require.NoError(t, err)
 }
 
diff --git a/internal/suites/action_totp.go b/internal/suites/action_totp.go
index c4cf63a31..78636eafb 100644
--- a/internal/suites/action_totp.go
+++ b/internal/suites/action_totp.go
@@ -12,7 +12,7 @@ import (
 )
 
 func (rs *RodSession) doRegisterTOTP(t *testing.T, page *rod.Page) string {
-	err := rs.WaitElementLocatedByID(t, page, "register-link").Click("left")
+	err := rs.WaitElementLocatedByID(t, page, "register-link").Click("left", 1)
 	require.NoError(t, err)
 	rs.verifyMailNotificationDisplayed(t, page)
 	link := doGetLinkFromLastMail(t)
diff --git a/internal/suites/scenario_available_methods_test.go b/internal/suites/scenario_available_methods_test.go
index 7135f7afa..4fcaf35bf 100644
--- a/internal/suites/scenario_available_methods_test.go
+++ b/internal/suites/scenario_available_methods_test.go
@@ -59,7 +59,7 @@ func (s *AvailableMethodsScenario) TestShouldCheckAvailableMethods() {
 	s.doLoginOneFactor(s.T(), s.Context(ctx), "john", "password", false, "")
 
 	methodsButton := s.WaitElementLocatedByID(s.T(), s.Context(ctx), "methods-button")
-	err := methodsButton.Click("left")
+	err := methodsButton.Click("left", 1)
 	s.Assert().NoError(err)
 
 	methodsDialog := s.WaitElementLocatedByID(s.T(), s.Context(ctx), "methods-dialog")
diff --git a/internal/suites/scenario_oidc_test.go b/internal/suites/scenario_oidc_test.go
index 7add41b48..f303d4615 100644
--- a/internal/suites/scenario_oidc_test.go
+++ b/internal/suites/scenario_oidc_test.go
@@ -86,11 +86,11 @@ func (s *OIDCScenario) TestShouldAuthorizeAccessToOIDCApp() {
 	s.waitBodyContains(s.T(), s.Context(ctx), "Not logged yet...")
 
 	// Search for the 'login' link.
-	err := s.Page.MustSearch("Log in").Click("left")
+	err := s.Page.MustSearch("Log in").Click("left", 1)
 	assert.NoError(s.T(), err)
 
 	s.verifyIsConsentPage(s.T(), s.Context(ctx))
-	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "accept-button").Click("left")
+	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "accept-button").Click("left", 1)
 	assert.NoError(s.T(), err)
 
 	// Verify that the app is showing the info related to the user stored in the JWT token.
@@ -152,12 +152,12 @@ func (s *OIDCScenario) TestShouldDenyConsent() {
 	s.waitBodyContains(s.T(), s.Context(ctx), "Not logged yet...")
 
 	// Search for the 'login' link.
-	err := s.Page.MustSearch("Log in").Click("left")
+	err := s.Page.MustSearch("Log in").Click("left", 1)
 	assert.NoError(s.T(), err)
 
 	s.verifyIsConsentPage(s.T(), s.Context(ctx))
 
-	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "deny-button").Click("left")
+	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "deny-button").Click("left", 1)
 	assert.NoError(s.T(), err)
 
 	s.verifyIsOIDC(s.T(), s.Context(ctx), "access_denied", "https://oidc.example.com:8080/error?error=access_denied&error_description=The+resource+owner+or+authorization+server+denied+the+request.+Make+sure+that+the+request+you+are+making+is+valid.+Maybe+the+credential+or+request+parameters+you+are+using+are+limited+in+scope+or+otherwise+restricted.&state=random-string-here")
diff --git a/internal/suites/scenario_regulation_test.go b/internal/suites/scenario_regulation_test.go
index 0eba4661d..92404fdd2 100644
--- a/internal/suites/scenario_regulation_test.go
+++ b/internal/suites/scenario_regulation_test.go
@@ -62,14 +62,14 @@ func (s *RegulationScenario) TestShouldBanUserAfterTooManyAttempt() {
 	for i := 0; i < 3; i++ {
 		err := s.WaitElementLocatedByID(s.T(), s.Context(ctx), "password-textfield").Input("bad-password")
 		require.NoError(s.T(), err)
-		err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "sign-in-button").Click("left")
+		err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "sign-in-button").Click("left", 1)
 		require.NoError(s.T(), err)
 	}
 
 	// Enter the correct password and test the regulation lock out.
 	err := s.WaitElementLocatedByID(s.T(), s.Context(ctx), "password-textfield").Input("password")
 	require.NoError(s.T(), err)
-	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "sign-in-button").Click("left")
+	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "sign-in-button").Click("left", 1)
 	require.NoError(s.T(), err)
 	s.verifyNotificationDisplayed(s.T(), s.Context(ctx), "Incorrect username or password.")
 
@@ -79,7 +79,7 @@ func (s *RegulationScenario) TestShouldBanUserAfterTooManyAttempt() {
 	// Enter the correct password and test a successful login.
 	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "password-textfield").Input("password")
 	require.NoError(s.T(), err)
-	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "sign-in-button").Click("left")
+	err = s.WaitElementLocatedByID(s.T(), s.Context(ctx), "sign-in-button").Click("left", 1)
 	require.NoError(s.T(), err)
 	s.verifyIsSecondFactorPage(s.T(), s.Context(ctx))
 }
diff --git a/internal/suites/suite_duo_push_test.go b/internal/suites/suite_duo_push_test.go
index 4573c5b06..56a2c4400 100644
--- a/internal/suites/suite_duo_push_test.go
+++ b/internal/suites/suite_duo_push_test.go
@@ -303,7 +303,7 @@ func (s *DuoPushWebDriverSuite) TestShouldFailSelectionBecauseOfSelectionDenied(
 
 	s.doLoginOneFactor(s.T(), s.Context(ctx), "john", "password", false, "")
 	s.doChangeMethod(s.T(), s.Context(ctx), "push-notification")
-	err := s.WaitElementLocatedByID(s.T(), s.Context(ctx), "selection-link").Click("left")
+	err := s.WaitElementLocatedByID(s.T(), s.Context(ctx), "selection-link").Click("left", 1)
 	require.NoError(s.T(), err)
 	s.verifyNotificationDisplayed(s.T(), s.Context(ctx), "Device selection was denied by Duo policy")
 }

From 8cdf4a5624855fd137798954fd4de63bb151ccca Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 14:33:08 +1000
Subject: [PATCH 062/263] fix(authorization): regex subj doesn't redirect anon
 user (#4037)

This fixes an issue with the authorization policies where if the Domain Regex or Resources criteria would incorrectly return 403 Forbidden statuses instead of 302 Found statuses.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
---
 .../authorization/access_control_domain.go    |  6 ++--
 .../authorization/access_control_resource.go  |  6 ++--
 internal/authorization/access_control_rule.go | 26 +++++++++-----
 internal/authorization/authorizer.go          | 35 +++++++++---------
 internal/authorization/authorizer_test.go     | 36 +++++++++----------
 internal/authorization/const.go               |  2 +-
 internal/authorization/regexp.go              |  8 +++++
 internal/authorization/util.go                | 32 +++++++++++------
 internal/handlers/handler_verify_test.go      | 31 ++++++++++++++++
 9 files changed, 122 insertions(+), 60 deletions(-)

diff --git a/internal/authorization/access_control_domain.go b/internal/authorization/access_control_domain.go
index dfe72264b..d19bdf3dd 100644
--- a/internal/authorization/access_control_domain.go
+++ b/internal/authorization/access_control_domain.go
@@ -32,7 +32,7 @@ func NewAccessControlDomain(domain string) AccessControlDomain {
 
 // NewAccessControlDomainRegex creates a new SubjectObjectMatcher that matches the domain either in a basic way or
 // dynamic User/Group subexpression group way.
-func NewAccessControlDomainRegex(pattern regexp.Regexp) AccessControlDomain {
+func NewAccessControlDomainRegex(pattern regexp.Regexp) (subjects bool, rule AccessControlDomain) {
 	var iuser, igroup = -1, -1
 
 	for i, group := range pattern.SubexpNames() {
@@ -45,10 +45,10 @@ func NewAccessControlDomainRegex(pattern regexp.Regexp) AccessControlDomain {
 	}
 
 	if iuser != -1 || igroup != -1 {
-		return AccessControlDomain{RegexpGroupStringSubjectMatcher{pattern, iuser, igroup}}
+		return true, AccessControlDomain{RegexpGroupStringSubjectMatcher{pattern, iuser, igroup}}
 	}
 
-	return AccessControlDomain{RegexpStringSubjectMatcher{pattern}}
+	return false, AccessControlDomain{RegexpStringSubjectMatcher{pattern}}
 }
 
 // AccessControlDomainMatcher is the basic domain matcher.
diff --git a/internal/authorization/access_control_resource.go b/internal/authorization/access_control_resource.go
index c9141f863..2c4aa9d1c 100644
--- a/internal/authorization/access_control_resource.go
+++ b/internal/authorization/access_control_resource.go
@@ -5,7 +5,7 @@ import (
 )
 
 // NewAccessControlResource creates a AccessControlResource or AccessControlResourceGroup.
-func NewAccessControlResource(pattern regexp.Regexp) AccessControlResource {
+func NewAccessControlResource(pattern regexp.Regexp) (subjects bool, rule AccessControlResource) {
 	var iuser, igroup = -1, -1
 
 	for i, group := range pattern.SubexpNames() {
@@ -18,10 +18,10 @@ func NewAccessControlResource(pattern regexp.Regexp) AccessControlResource {
 	}
 
 	if iuser != -1 || igroup != -1 {
-		return AccessControlResource{RegexpGroupStringSubjectMatcher{pattern, iuser, igroup}}
+		return true, AccessControlResource{RegexpGroupStringSubjectMatcher{pattern, iuser, igroup}}
 	}
 
-	return AccessControlResource{RegexpStringSubjectMatcher{pattern}}
+	return false, AccessControlResource{RegexpStringSubjectMatcher{pattern}}
 }
 
 // AccessControlResource represents an ACL resource that matches without named groups.
diff --git a/internal/authorization/access_control_rule.go b/internal/authorization/access_control_rule.go
index 077e8fe8d..7b2989e8a 100644
--- a/internal/authorization/access_control_rule.go
+++ b/internal/authorization/access_control_rule.go
@@ -20,19 +20,29 @@ func NewAccessControlRules(config schema.AccessControlConfiguration) (rules []*A
 
 // NewAccessControlRule parses a schema ACL and generates an internal ACL.
 func NewAccessControlRule(pos int, rule schema.ACLRule, networksMap map[string][]*net.IPNet, networksCacheMap map[string]*net.IPNet) *AccessControlRule {
-	return &AccessControlRule{
-		Position:  pos,
-		Domains:   schemaDomainsToACL(rule.Domains, rule.DomainsRegex),
-		Resources: schemaResourcesToACL(rule.Resources),
-		Methods:   schemaMethodsToACL(rule.Methods),
-		Networks:  schemaNetworksToACL(rule.Networks, networksMap, networksCacheMap),
-		Subjects:  schemaSubjectsToACL(rule.Subjects),
-		Policy:    StringToLevel(rule.Policy),
+	r := &AccessControlRule{
+		Position: pos,
+		Domains:  schemaDomainsToACL(rule.Domains),
+		Methods:  schemaMethodsToACL(rule.Methods),
+		Networks: schemaNetworksToACL(rule.Networks, networksMap, networksCacheMap),
+		Subjects: schemaSubjectsToACL(rule.Subjects),
+		Policy:   StringToLevel(rule.Policy),
 	}
+
+	if len(r.Subjects) != 0 {
+		r.HasSubjects = true
+	}
+
+	ruleAddDomainRegex(rule.DomainsRegex, r)
+	ruleAddResources(rule.Resources, r)
+
+	return r
 }
 
 // AccessControlRule controls and represents an ACL internally.
 type AccessControlRule struct {
+	HasSubjects bool
+
 	Position  int
 	Domains   []AccessControlDomain
 	Resources []AccessControlResource
diff --git a/internal/authorization/authorizer.go b/internal/authorization/authorizer.go
index d08ec3a5b..6ce4dbbbc 100644
--- a/internal/authorization/authorizer.go
+++ b/internal/authorization/authorizer.go
@@ -1,6 +1,8 @@
 package authorization
 
 import (
+	"github.com/sirupsen/logrus"
+
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 	"github.com/authelia/authelia/v4/internal/logging"
 )
@@ -10,15 +12,17 @@ type Authorizer struct {
 	defaultPolicy Level
 	rules         []*AccessControlRule
 	mfa           bool
-	configuration *schema.Configuration
+	config        *schema.Configuration
+	log           *logrus.Logger
 }
 
-// NewAuthorizer create an instance of authorizer with a given access control configuration.
-func NewAuthorizer(configuration *schema.Configuration) (authorizer *Authorizer) {
+// NewAuthorizer create an instance of authorizer with a given access control config.
+func NewAuthorizer(config *schema.Configuration) (authorizer *Authorizer) {
 	authorizer = &Authorizer{
-		defaultPolicy: StringToLevel(configuration.AccessControl.DefaultPolicy),
-		rules:         NewAccessControlRules(configuration.AccessControl),
-		configuration: configuration,
+		defaultPolicy: StringToLevel(config.AccessControl.DefaultPolicy),
+		rules:         NewAccessControlRules(config.AccessControl),
+		config:        config,
+		log:           logging.Logger(),
 	}
 
 	if authorizer.defaultPolicy == TwoFactor {
@@ -35,8 +39,8 @@ func NewAuthorizer(configuration *schema.Configuration) (authorizer *Authorizer)
 		}
 	}
 
-	if authorizer.configuration.IdentityProviders.OIDC != nil {
-		for _, client := range authorizer.configuration.IdentityProviders.OIDC.Clients {
+	if authorizer.config.IdentityProviders.OIDC != nil {
+		for _, client := range authorizer.config.IdentityProviders.OIDC.Clients {
 			if client.Policy == twoFactor {
 				authorizer.mfa = true
 
@@ -54,24 +58,21 @@ func (p Authorizer) IsSecondFactorEnabled() bool {
 }
 
 // GetRequiredLevel retrieve the required level of authorization to access the object.
-func (p Authorizer) GetRequiredLevel(subject Subject, object Object) (bool, Level) {
-	logger := logging.Logger()
-
-	logger.Debugf("Check authorization of subject %s and object %s (method %s).",
+func (p Authorizer) GetRequiredLevel(subject Subject, object Object) (hasSubjects bool, level Level) {
+	p.log.Debugf("Check authorization of subject %s and object %s (method %s).",
 		subject.String(), object.String(), object.Method)
 
 	for _, rule := range p.rules {
 		if rule.IsMatch(subject, object) {
-			logger.Tracef(traceFmtACLHitMiss, "HIT", rule.Position, subject.String(), object.String(), object.Method)
+			p.log.Tracef(traceFmtACLHitMiss, "HIT", rule.Position, subject, object, object.Method)
 
-			return len(rule.Subjects) > 0, rule.Policy
+			return rule.HasSubjects, rule.Policy
 		}
 
-		logger.Tracef(traceFmtACLHitMiss, "MISS", rule.Position, subject.String(), object.String(), object.Method)
+		p.log.Tracef(traceFmtACLHitMiss, "MISS", rule.Position, subject, object, object.Method)
 	}
 
-	logger.Debugf("No matching rule for subject %s and url %s... Applying default policy.",
-		subject.String(), object.String())
+	p.log.Debugf("No matching rule for subject %s and url %s (method %s) applying default policy", subject, object, object.Method)
 
 	return false, p.defaultPolicy
 }
diff --git a/internal/authorization/authorizer_test.go b/internal/authorization/authorizer_test.go
index 264d940c2..ff303f9d5 100644
--- a/internal/authorization/authorizer_test.go
+++ b/internal/authorization/authorizer_test.go
@@ -278,7 +278,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainMatching() {
 
 	s.Require().Len(tester.rules[0].Domains, 1)
 
-	s.Assert().Equal("public.example.com", tester.configuration.AccessControl.Rules[0].Domains[0])
+	s.Assert().Equal("public.example.com", tester.config.AccessControl.Rules[0].Domains[0])
 
 	ruleMatcher0, ok := tester.rules[0].Domains[0].Matcher.(*AccessControlDomainMatcher)
 	s.Require().True(ok)
@@ -289,7 +289,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainMatching() {
 
 	s.Require().Len(tester.rules[1].Domains, 1)
 
-	s.Assert().Equal("one-factor.example.com", tester.configuration.AccessControl.Rules[1].Domains[0])
+	s.Assert().Equal("one-factor.example.com", tester.config.AccessControl.Rules[1].Domains[0])
 
 	ruleMatcher1, ok := tester.rules[1].Domains[0].Matcher.(*AccessControlDomainMatcher)
 	s.Require().True(ok)
@@ -300,7 +300,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainMatching() {
 
 	s.Require().Len(tester.rules[2].Domains, 1)
 
-	s.Assert().Equal("two-factor.example.com", tester.configuration.AccessControl.Rules[2].Domains[0])
+	s.Assert().Equal("two-factor.example.com", tester.config.AccessControl.Rules[2].Domains[0])
 
 	ruleMatcher2, ok := tester.rules[2].Domains[0].Matcher.(*AccessControlDomainMatcher)
 	s.Require().True(ok)
@@ -311,7 +311,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainMatching() {
 
 	s.Require().Len(tester.rules[3].Domains, 1)
 
-	s.Assert().Equal("*.example.com", tester.configuration.AccessControl.Rules[3].Domains[0])
+	s.Assert().Equal("*.example.com", tester.config.AccessControl.Rules[3].Domains[0])
 
 	ruleMatcher3, ok := tester.rules[3].Domains[0].Matcher.(*AccessControlDomainMatcher)
 	s.Require().True(ok)
@@ -322,7 +322,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainMatching() {
 
 	s.Require().Len(tester.rules[4].Domains, 1)
 
-	s.Assert().Equal("*.example.com", tester.configuration.AccessControl.Rules[4].Domains[0])
+	s.Assert().Equal("*.example.com", tester.config.AccessControl.Rules[4].Domains[0])
 
 	ruleMatcher4, ok := tester.rules[4].Domains[0].Matcher.(*AccessControlDomainMatcher)
 	s.Require().True(ok)
@@ -375,7 +375,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainRegexMatching() {
 
 	s.Require().Len(tester.rules[0].Domains, 1)
 
-	s.Assert().Equal("^.*\\.example.com$", tester.configuration.AccessControl.Rules[0].DomainsRegex[0].String())
+	s.Assert().Equal("^.*\\.example.com$", tester.config.AccessControl.Rules[0].DomainsRegex[0].String())
 
 	ruleMatcher0, ok := tester.rules[0].Domains[0].Matcher.(RegexpStringSubjectMatcher)
 	s.Require().True(ok)
@@ -383,7 +383,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainRegexMatching() {
 
 	s.Require().Len(tester.rules[1].Domains, 1)
 
-	s.Assert().Equal("^.*\\.example2.com$", tester.configuration.AccessControl.Rules[1].DomainsRegex[0].String())
+	s.Assert().Equal("^.*\\.example2.com$", tester.config.AccessControl.Rules[1].DomainsRegex[0].String())
 
 	ruleMatcher1, ok := tester.rules[1].Domains[0].Matcher.(RegexpStringSubjectMatcher)
 	s.Require().True(ok)
@@ -391,7 +391,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainRegexMatching() {
 
 	s.Require().Len(tester.rules[2].Domains, 1)
 
-	s.Assert().Equal("^(?P<User>[a-zA-Z0-9]+)\\.regex.com$", tester.configuration.AccessControl.Rules[2].DomainsRegex[0].String())
+	s.Assert().Equal("^(?P<User>[a-zA-Z0-9]+)\\.regex.com$", tester.config.AccessControl.Rules[2].DomainsRegex[0].String())
 
 	ruleMatcher2, ok := tester.rules[2].Domains[0].Matcher.(RegexpGroupStringSubjectMatcher)
 	s.Require().True(ok)
@@ -399,7 +399,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainRegexMatching() {
 
 	s.Require().Len(tester.rules[3].Domains, 1)
 
-	s.Assert().Equal("^group-(?P<Group>[a-zA-Z0-9]+)\\.regex.com$", tester.configuration.AccessControl.Rules[3].DomainsRegex[0].String())
+	s.Assert().Equal("^group-(?P<Group>[a-zA-Z0-9]+)\\.regex.com$", tester.config.AccessControl.Rules[3].DomainsRegex[0].String())
 
 	ruleMatcher3, ok := tester.rules[3].Domains[0].Matcher.(RegexpGroupStringSubjectMatcher)
 	s.Require().True(ok)
@@ -407,7 +407,7 @@ func (s *AuthorizerSuite) TestShouldCheckDomainRegexMatching() {
 
 	s.Require().Len(tester.rules[4].Domains, 1)
 
-	s.Assert().Equal("^.*\\.(one|two).com$", tester.configuration.AccessControl.Rules[4].DomainsRegex[0].String())
+	s.Assert().Equal("^.*\\.(one|two).com$", tester.config.AccessControl.Rules[4].DomainsRegex[0].String())
 
 	ruleMatcher4, ok := tester.rules[4].Domains[0].Matcher.(RegexpStringSubjectMatcher)
 	s.Require().True(ok)
@@ -454,30 +454,30 @@ func (s *AuthorizerSuite) TestShouldCheckResourceSubjectMatching() {
 	// Accessing an invalid users Personal page.
 	tester.CheckAuthorizations(s.T(), John, "https://id.example.com/invaliduser/personal", "GET", Denied)
 	tester.CheckAuthorizations(s.T(), Bob, "https://id.example.com/invaliduser/personal", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/invaliduser/personal", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/invaliduser/personal", "GET", OneFactor)
 
 	// Accessing another users Personal page.
 	tester.CheckAuthorizations(s.T(), John, "https://id.example.com/bob/personal", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/bob/personal", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/bob/personal", "GET", OneFactor)
 	tester.CheckAuthorizations(s.T(), John, "https://id.example.com/Bob/personal", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/Bob/personal", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/Bob/personal", "GET", OneFactor)
 	tester.CheckAuthorizations(s.T(), Bob, "https://id.example.com/john/personal", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/john/personal", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/john/personal", "GET", OneFactor)
 	tester.CheckAuthorizations(s.T(), Bob, "https://id.example.com/John/personal", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/John/personal", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/John/personal", "GET", OneFactor)
 
 	// Accessing a Group page.
 	tester.CheckAuthorizations(s.T(), John, "https://id.example.com/dev/group", "GET", OneFactor)
 	tester.CheckAuthorizations(s.T(), John, "https://id.example.com/admins/group", "GET", OneFactor)
 	tester.CheckAuthorizations(s.T(), Bob, "https://id.example.com/dev/group", "GET", Denied)
 	tester.CheckAuthorizations(s.T(), Bob, "https://id.example.com/admins/group", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/dev/group", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/admins/group", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/dev/group", "GET", OneFactor)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/admins/group", "GET", OneFactor)
 
 	// Accessing an invalid group's Group page.
 	tester.CheckAuthorizations(s.T(), John, "https://id.example.com/invalidgroup/group", "GET", Denied)
 	tester.CheckAuthorizations(s.T(), Bob, "https://id.example.com/invalidgroup/group", "GET", Denied)
-	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/invalidgroup/group", "GET", Denied)
+	tester.CheckAuthorizations(s.T(), AnonymousUser, "https://id.example.com/invalidgroup/group", "GET", OneFactor)
 
 	s.Require().Len(tester.rules, 3)
 
diff --git a/internal/authorization/const.go b/internal/authorization/const.go
index c86440207..dcf991563 100644
--- a/internal/authorization/const.go
+++ b/internal/authorization/const.go
@@ -36,4 +36,4 @@ var (
 	IdentitySubexpNames = []string{subexpNameUser, subexpNameGroup}
 )
 
-const traceFmtACLHitMiss = "ACL %s Position %d for subject %s and object %s (Method %s)"
+const traceFmtACLHitMiss = "ACL %s Position %d for subject %s and object %s (method %s)"
diff --git a/internal/authorization/regexp.go b/internal/authorization/regexp.go
index 7983d842f..f26c5fcbf 100644
--- a/internal/authorization/regexp.go
+++ b/internal/authorization/regexp.go
@@ -16,6 +16,14 @@ type RegexpGroupStringSubjectMatcher struct {
 
 // IsMatch returns true if the underlying pattern matches the input given the subject.
 func (r RegexpGroupStringSubjectMatcher) IsMatch(input string, subject Subject) (match bool) {
+	if !r.Pattern.MatchString(input) {
+		return false
+	}
+
+	if subject.IsAnonymous() {
+		return true
+	}
+
 	matches := r.Pattern.FindAllStringSubmatch(input, -1)
 	if matches == nil {
 		return false
diff --git a/internal/authorization/util.go b/internal/authorization/util.go
index 877e46ca5..cfcd1a5f2 100644
--- a/internal/authorization/util.go
+++ b/internal/authorization/util.go
@@ -70,24 +70,36 @@ func schemaSubjectToACLSubject(subjectRule string) (subject SubjectMatcher) {
 	return nil
 }
 
-func schemaDomainsToACL(domainRules []string, domainRegexRules []regexp.Regexp) (domains []AccessControlDomain) {
+func schemaDomainsToACL(domainRules []string) (domains []AccessControlDomain) {
 	for _, domainRule := range domainRules {
 		domains = append(domains, NewAccessControlDomain(domainRule))
 	}
 
-	for _, domainRegexRule := range domainRegexRules {
-		domains = append(domains, NewAccessControlDomainRegex(domainRegexRule))
-	}
-
 	return domains
 }
 
-func schemaResourcesToACL(resourceRules []regexp.Regexp) (resources []AccessControlResource) {
-	for _, resourceRule := range resourceRules {
-		resources = append(resources, NewAccessControlResource(resourceRule))
-	}
+func ruleAddDomainRegex(exps []regexp.Regexp, rule *AccessControlRule) {
+	for _, exp := range exps {
+		subjects, r := NewAccessControlDomainRegex(exp)
 
-	return resources
+		rule.Domains = append(rule.Domains, r)
+
+		if !rule.HasSubjects && subjects {
+			rule.HasSubjects = true
+		}
+	}
+}
+
+func ruleAddResources(exps []regexp.Regexp, rule *AccessControlRule) {
+	for _, exp := range exps {
+		subjects, r := NewAccessControlResource(exp)
+
+		rule.Resources = append(rule.Resources, r)
+
+		if !rule.HasSubjects && subjects {
+			rule.HasSubjects = true
+		}
+	}
 }
 
 func schemaMethodsToACL(methodRules []string) (methods []string) {
diff --git a/internal/handlers/handler_verify_test.go b/internal/handlers/handler_verify_test.go
index 6ae6e2932..42e66fee2 100644
--- a/internal/handlers/handler_verify_test.go
+++ b/internal/handlers/handler_verify_test.go
@@ -429,6 +429,37 @@ func TestShouldVerifyWrongCredentialsInBasicAuth(t *testing.T) {
 		"https://test.example.com", actualStatus, expStatus)
 }
 
+func TestShouldRedirectWithGroups(t *testing.T) {
+	mock := mocks.NewMockAutheliaCtx(t)
+	defer mock.Close()
+
+	mock.Ctx.Providers.Authorizer = authorization.NewAuthorizer(&schema.Configuration{
+		AccessControl: schema.AccessControlConfiguration{
+			DefaultPolicy: "deny",
+			Rules: []schema.ACLRule{
+				{
+					Domains: []string{"app.example.com"},
+					Policy:  "one_factor",
+					Resources: []regexp.Regexp{
+						*regexp.MustCompile(`^/code-(?P<User>\w+)([/?].*)?$`),
+					},
+				},
+			},
+		},
+	})
+
+	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
+	mock.Ctx.Request.Header.Set(fasthttp.HeaderXForwardedProto, "https")
+	mock.Ctx.Request.Header.Set(fasthttp.HeaderXForwardedHost, "app.example.com")
+	mock.Ctx.Request.Header.Set("X-Forwarded-Uri", "/code-test/login")
+
+	mock.Ctx.Request.SetRequestURI("/?rd=https://auth.mydomain.com")
+
+	VerifyGET(verifyGetCfg)(mock.Ctx)
+
+	assert.Equal(t, fasthttp.StatusFound, mock.Ctx.Response.StatusCode())
+}
+
 func TestShouldVerifyFailingPasswordCheckingInBasicAuth(t *testing.T) {
 	mock := mocks.NewMockAutheliaCtx(t)
 	defer mock.Close()

From e508b7458a3534ab61c8d8f99c54f12e71ff4d78 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 14:56:20 +1000
Subject: [PATCH 063/263] release: v4.36.9 (#4081)

---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index 0dfdcde2e..7aca5114d 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "authelia",
-  "version": "4.36.8",
+  "version": "4.36.9",
   "private": true,
   "pnpm": {
     "peerDependencyRules": {

From ff13fe65a1ab4a53008f2a0ce3b4cd7692985e52 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 26 Sep 2022 22:06:48 +1000
Subject: [PATCH 064/263] refactor(web): adjust special char regex (#4082)

This adjusts the special character regex to consider all characters which are not alphanumeric as special, including the underscore.
---
 web/src/components/PasswordMeter.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/components/PasswordMeter.tsx b/web/src/components/PasswordMeter.tsx
index 52c6551c3..c274eeaac 100644
--- a/web/src/components/PasswordMeter.tsx
+++ b/web/src/components/PasswordMeter.tsx
@@ -77,7 +77,7 @@ const PasswordMeter = function (props: Props) {
 
             if (props.policy.require_special) {
                 required++;
-                const hasSpecial = /[^0-9\w]/i.test(password);
+                const hasSpecial = /[^a-z0-9]/i.test(password);
                 if (hasSpecial) {
                     hits++;
                 } else {

From 61943f6986620e717702dc5594428e2edb28f553 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 27 Sep 2022 11:12:18 +1000
Subject: [PATCH 065/263] test(notification): unit testing for mime
 characteristics (#4092)

* test: unit testing for mime characteristics

* test: improve reliability

* test: improve readability
---
 internal/notification/const.go          |  8 +-
 internal/notification/smtp_util_test.go | 97 +++++++++++++++++++++++++
 2 files changed, 103 insertions(+), 2 deletions(-)
 create mode 100644 internal/notification/smtp_util_test.go

diff --git a/internal/notification/const.go b/internal/notification/const.go
index aee69c680..3534ee359 100644
--- a/internal/notification/const.go
+++ b/internal/notification/const.go
@@ -40,6 +40,10 @@ const (
 	fmtSMTPDialError    = "error dialing the SMTP server: %w"
 )
 
-var (
-	rfc2822DoubleNewLine = []byte("\r\n\r\n")
+const (
+	rfc2822NewLine = "\r\n"
+)
+
+var (
+	rfc2822DoubleNewLine = []byte(rfc2822NewLine + rfc2822NewLine)
 )
diff --git a/internal/notification/smtp_util_test.go b/internal/notification/smtp_util_test.go
new file mode 100644
index 000000000..62c33fd09
--- /dev/null
+++ b/internal/notification/smtp_util_test.go
@@ -0,0 +1,97 @@
+package notification
+
+import (
+	"bytes"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+
+	"github.com/authelia/authelia/v4/internal/utils"
+)
+
+func TestNewMIMECharacteristics(t *testing.T) {
+	testCases := []struct {
+		name     string
+		expected MIMECharacteristics
+		have     []byte
+	}{
+		{
+			"ShouldDetectMessageCharacteristics7Bit",
+			MIMECharacteristics{},
+			createMIMEBytes(false, true, 5, 150),
+		},
+		{
+			"ShouldDetectMessageCharacteristicsLongLine",
+			MIMECharacteristics{LongLines: true},
+			createMIMEBytes(false, true, 3, 1200),
+		},
+		{
+			"ShouldDetectMessageCharacteristicsLF",
+			MIMECharacteristics{LineFeeds: true},
+			createMIMEBytes(false, false, 5, 150),
+		},
+		{
+			"ShouldDetectMessageCharacteristics8Bit",
+			MIMECharacteristics{Characters8BIT: true},
+			createMIMEBytes(true, true, 3, 150),
+		},
+		{
+			"ShouldDetectMessageCharacteristicsLongLineAndLF",
+			MIMECharacteristics{true, true, false},
+			createMIMEBytes(false, false, 3, 1200),
+		},
+		{
+			"ShouldDetectMessageCharacteristicsLongLineAnd8Bit",
+			MIMECharacteristics{true, false, true},
+			createMIMEBytes(true, true, 3, 1200),
+		},
+		{
+			"ShouldDetectMessageCharacteristics8BitAndLF",
+			MIMECharacteristics{false, true, true},
+			createMIMEBytes(true, false, 3, 150),
+		},
+		{
+			"ShouldDetectMessageCharacteristicsAll",
+			MIMECharacteristics{true, true, true},
+			createMIMEBytes(true, false, 3, 1200),
+		},
+	}
+
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			actual := NewMIMECharacteristics(tc.have)
+
+			assert.Equal(t, tc.expected, actual)
+		})
+	}
+}
+
+func createMIMEBytes(include8bit, crlf bool, lines, length int) []byte {
+	buf := &bytes.Buffer{}
+
+	for i := 0; i < lines; i++ {
+		for j := 0; j < length/100; j++ {
+			switch {
+			case include8bit:
+				buf.Write(utils.RandomBytes(50, utils.AlphaNumericCharacters, false))
+				buf.Write([]byte("£"))
+				buf.Write(utils.RandomBytes(49, utils.AlphaNumericCharacters, false))
+			default:
+				buf.Write(utils.RandomBytes(100, utils.AlphaNumericCharacters, false))
+			}
+		}
+
+		if n := length % 100; n != 0 {
+			buf.Write(utils.RandomBytes(n, utils.AlphaNumericCharacters, false))
+		}
+
+		switch {
+		case crlf:
+			buf.Write([]byte(rfc2822NewLine))
+		default:
+			buf.Write([]byte("\n"))
+		}
+	}
+
+	return buf.Bytes()
+}

From 4d35b7ddf7f5ba47d08bdb10e800a873d1621489 Mon Sep 17 00:00:00 2001
From: Constantin Kraft <gruentee@users.noreply.github.com>
Date: Tue, 27 Sep 2022 02:13:06 +0000
Subject: [PATCH 066/263] docs: fix misc grammar issues (#4062)

Closes #4063

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 docs/content/en/integration/prologue/get-started.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/content/en/integration/prologue/get-started.md b/docs/content/en/integration/prologue/get-started.md
index 48746cae3..5d41d4c7c 100644
--- a/docs/content/en/integration/prologue/get-started.md
+++ b/docs/content/en/integration/prologue/get-started.md
@@ -22,12 +22,12 @@ obviously choose a different path if you are so inclined.
 Forwarded Authentication is a simple per-request authorization flow that checks the metadata of a request and a session
 cookie to determine if a user must be forwarded to the authentication portal.
 
-Due to the fact a cookie is use, it's an intentional design decision that *__ALL__* applications/domains protected via
+Due to the fact a cookie is used, it's an intentional design decision that *__ALL__* applications/domains protected via
 this method *__MUST__* use secure schemes (`https` and `wss`) for all of their communication.
 
 ### OpenID Connect
 
-Only requires Authelia to be use a secure scheme (`https`).
+Only requires Authelia to be accessible via a secure scheme (`https`).
 
 ## Configuration
 

From f33ee265b1077011a76fa1c18a405f35ca43d3cc Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 27 Sep 2022 07:51:07 +0000
Subject: [PATCH 067/263] build(deps): update material-ui monorepo to v5.10.7
 (#4093)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  4 +--
 web/pnpm-lock.yaml | 64 ++++++++++++++++++++++++----------------------
 2 files changed, 36 insertions(+), 32 deletions(-)

diff --git a/web/package.json b/web/package.json
index 7aca5114d..6a951df12 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,8 +26,8 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.6",
-    "@mui/material": "5.10.6",
-    "@mui/styles": "5.10.6",
+    "@mui/material": "5.10.7",
+    "@mui/styles": "5.10.7",
     "axios": "0.27.2",
     "broadcast-channel": "4.17.0",
     "classnames": "2.3.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index bdd4e293d..c259a96f3 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,8 +11,8 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.6
-  '@mui/material': 5.10.6
-  '@mui/styles': 5.10.6
+  '@mui/material': 5.10.7
+  '@mui/styles': 5.10.7
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.0.3
@@ -73,9 +73,9 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.6_zggcj3xc6dksem2wq5c4poxkne
-  '@mui/material': 5.10.6_ikcgkdnp4bn3rgptamntbhbo7e
-  '@mui/styles': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
+  '@mui/icons-material': 5.10.6_z3nvdgs6va3zf6yslsds3tshui
+  '@mui/material': 5.10.7_ikcgkdnp4bn3rgptamntbhbo7e
+  '@mui/styles': 5.10.7_iapumuv4e6jcjznwuxpf4tt22e
   axios: 0.27.2
   broadcast-channel: 4.17.0
   classnames: 2.3.2
@@ -2335,7 +2335,7 @@ packages:
       '@emotion/memoize': 0.8.0
       '@emotion/unitless': 0.8.0
       '@emotion/utils': 1.2.0
-      csstype: 3.1.0
+      csstype: 3.1.1
     dev: false
 
   /@emotion/sheet/1.2.0:
@@ -2795,8 +2795,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.98_rj7ozvcq3uehdlnj3cbwzbi5ce:
-    resolution: {integrity: sha512-c0U51+K2m57MASpRrmNs6qTXSvktDbVcSjD8zCRPbfuwYWERGGwNxwM3/jsBa4dSojTSmLPnOBFDypl74Ds6yQ==}
+  /@mui/base/5.0.0-alpha.99_rj7ozvcq3uehdlnj3cbwzbi5ce:
+    resolution: {integrity: sha512-D04H6O1c0Jv561yI0SVbpa8MpqpW3G43CwJxV2o6ALfI0DMJ45w07dGafmDchb6aCWTRTdggd3rjgmuzyNwPiQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2819,11 +2819,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.6:
-    resolution: {integrity: sha512-dmyQBqrKmVU6yCSM4GGal5qNXpViXX+/V1t0GA1A5i9QF5Gx6noV/cw0hrSS2ffLT8L2oScq1oTdA6NVIiQ8lg==}
+  /@mui/core-downloads-tracker/5.10.7:
+    resolution: {integrity: sha512-3N0UYVy3MbrHzM3j6f7fIUCZ+bQ1/sSZq143tLxwSssW3Z4AqE83brpr5flEY1Lx+Aowv/cPyQMmZxzRlFCGqw==}
     dev: false
 
-  /@mui/icons-material/5.10.6_zggcj3xc6dksem2wq5c4poxkne:
+  /@mui/icons-material/5.10.6_z3nvdgs6va3zf6yslsds3tshui:
     resolution: {integrity: sha512-QwxdRmLA46S94B0hExPDx0td+A2unF+33bQ6Cs+lNpJKVsm1YeHwNdYXYcnpWeHeQQ07055OXl7IB2GKDd0MfA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2835,13 +2835,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.6_ikcgkdnp4bn3rgptamntbhbo7e
+      '@mui/material': 5.10.7_ikcgkdnp4bn3rgptamntbhbo7e
       '@types/react': 18.0.21
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.6_ikcgkdnp4bn3rgptamntbhbo7e:
-    resolution: {integrity: sha512-QilW5PAAGSQdN7Cpp4rwSQ1doJAt3ca1a2PHZtr8RLVlpHnXb+qQ8CeDo9+9V2fK5CDNdtTN1F+iJKO43aFBpQ==}
+  /@mui/material/5.10.7_ikcgkdnp4bn3rgptamntbhbo7e:
+    resolution: {integrity: sha512-o1jcQGii+q7ORrXhBiMmGzFDaboc1qTgOOC3zDW+NR9ryVzWzL7qEeqoORbgDB5zk9OBsXCjB91fUH/ls5xMwg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2860,15 +2860,15 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/base': 5.0.0-alpha.98_rj7ozvcq3uehdlnj3cbwzbi5ce
-      '@mui/core-downloads-tracker': 5.10.6
-      '@mui/system': 5.10.6_h33l6npc22g7vcra72cibfsrvm
+      '@mui/base': 5.0.0-alpha.99_rj7ozvcq3uehdlnj3cbwzbi5ce
+      '@mui/core-downloads-tracker': 5.10.7
+      '@mui/system': 5.10.7_h33l6npc22g7vcra72cibfsrvm
       '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.21
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
-      csstype: 3.1.0
+      csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
@@ -2893,8 +2893,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styled-engine/5.10.6_hfzxdiydbrbhhfpkwuv3jhvwmq:
-    resolution: {integrity: sha512-OnVw5xnO4l0XzlJFhKif/RlLenBNhyEQQlSTwB9ApSWB05UAU5ZSbjNsRfyEKvgmQ/fPa+MqPD/dzxbIRCwyeg==}
+  /@mui/styled-engine/5.10.7_hfzxdiydbrbhhfpkwuv3jhvwmq:
+    resolution: {integrity: sha512-CCrtW+vvCKEm6pOE/QcutQ+ORC/iE6D1ghscN4l7LE2JXPvTXO/z0yu8Wxug1JEDlWm4r1Qa0PzJe1P9bjKzNA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.4.1
@@ -2910,13 +2910,13 @@ packages:
       '@emotion/cache': 11.10.3
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      csstype: 3.1.0
+      csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.6_iapumuv4e6jcjznwuxpf4tt22e:
-    resolution: {integrity: sha512-QmT/PXDKOSttkSWV97SVw1isfmc+iNMQBUtVwafRju1T6+O26tf9Hz0QjILuXIk74lg/nrbQn5S5c9h6FZWPXQ==}
+  /@mui/styles/5.10.7_iapumuv4e6jcjznwuxpf4tt22e:
+    resolution: {integrity: sha512-veBd1ldZL3OEl2+V1J+zSfGPKzag8tONqLVITnvt31PVejztzrwDDllUG+Mo86tF5709zsfFo6Va7qK4+MK05g==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || 18
@@ -2932,7 +2932,7 @@ packages:
       '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.21
       clsx: 1.2.1
-      csstype: 3.1.0
+      csstype: 3.1.1
       hoist-non-react-statics: 3.3.2
       jss: 10.9.2
       jss-plugin-camel-case: 10.9.2
@@ -2946,8 +2946,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.6_h33l6npc22g7vcra72cibfsrvm:
-    resolution: {integrity: sha512-HfQVX7e2xpQ3jtdB/WwtkFVtozMOozyN575/63u8ILHkE8wGDhblmCieAsnyJPFbm7WBW5PCMyzmfr4QyKLaYg==}
+  /@mui/system/5.10.7_h33l6npc22g7vcra72cibfsrvm:
+    resolution: {integrity: sha512-kwyhjjKGsgtBRFl6vSqidDZcNKU5S1juTgm4Xi2fyWxaEbIQb9Sh9y0iVP2bNCJzgDr0alLaENOZOEaDWHISAQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2966,12 +2966,12 @@ packages:
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
       '@mui/private-theming': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
-      '@mui/styled-engine': 5.10.6_hfzxdiydbrbhhfpkwuv3jhvwmq
+      '@mui/styled-engine': 5.10.7_hfzxdiydbrbhhfpkwuv3jhvwmq
       '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.21
       clsx: 1.2.1
-      csstype: 3.1.0
+      csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -4594,6 +4594,10 @@ packages:
   /csstype/3.1.0:
     resolution: {integrity: sha512-uX1KG+x9h5hIJsaKR9xHUeUraxf8IODOwq9JLNPq6BwB04a/xgpq3rcx47l5BZu5zBPlgD342tdke3Hom/nJRA==}
 
+  /csstype/3.1.1:
+    resolution: {integrity: sha512-DJR/VvkAvSZW9bTouZue2sSxDwdTN92uHjqeKVm+0dAqdfNykRzQ95tay8aXMBAAPpUiq4Qcug2L7neoRh2Egw==}
+    dev: false
+
   /damerau-levenshtein/1.0.8:
     resolution: {integrity: sha512-sdQSFB7+llfUcQHUQO3+B8ERRj0Oa4w9POWMI/puGtuf7gFywGmkaLCElnudfTiKZV+NvHqL0ifzdrI8Ro7ESA==}
     dev: true
@@ -4767,7 +4771,7 @@ packages:
     resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
     dependencies:
       '@babel/runtime': 7.19.0
-      csstype: 3.1.0
+      csstype: 3.1.1
     dev: false
 
   /domexception/4.0.0:
@@ -7154,7 +7158,7 @@ packages:
     resolution: {integrity: sha512-b8G6rWpYLR4teTUbGd4I4EsnWjg7MN0Q5bSsjKhVkJVjhQDy2KzkbD2AW3TuT0RYZVmZZHKIrXDn6kjU14qkUg==}
     dependencies:
       '@babel/runtime': 7.19.0
-      csstype: 3.1.0
+      csstype: 3.1.1
       is-in-browser: 1.1.3
       tiny-warning: 1.0.3
     dev: false

From f2379a910738964e4c623ee2f232c0e91d5331cb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 27 Sep 2022 13:51:18 +0000
Subject: [PATCH 068/263] build(deps): update dependency @types/node to
 v16.11.62 (#4084)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 74 +++++++++++++++++++++++-----------------------
 2 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6a951df12..6c021041c 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.0.3",
-    "@types/node": "16.11.60",
+    "@types/node": "16.11.62",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index c259a96f3..701cffb8b 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.0.3
-  '@types/node': 16.11.60
+  '@types/node': 16.11.62
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.0.3
-  '@types/node': 16.11.60
+  '@types/node': 16.11.62
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.0.3_@types+node@16.11.60
+  jest: 29.0.3_@types+node@16.11.62
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.0.3
@@ -2507,7 +2507,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       jest-message-util: 29.0.3
       jest-util: 29.0.3
@@ -2528,14 +2528,14 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.0.3_@types+node@16.11.60
+      jest-config: 29.0.3_@types+node@16.11.62
       jest-haste-map: 29.0.3
       jest-message-util: 29.0.3
       jest-regex-util: 29.0.0
@@ -2562,7 +2562,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       jest-mock: 29.0.3
     dev: true
 
@@ -2589,7 +2589,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       jest-message-util: 29.0.3
       jest-mock: 29.0.3
       jest-util: 29.0.3
@@ -2622,7 +2622,7 @@ packages:
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2733,7 +2733,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2745,7 +2745,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3332,7 +3332,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3361,7 +3361,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3382,8 +3382,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/16.11.60:
-    resolution: {integrity: sha512-kYIYa1D1L+HDv5M5RXQeEu1o0FKA6yedZIoyugm/MBPROkLpX4L7HRxMrPVyo8bnvjpW/wDlqFNGzXNMb7AdRw==}
+  /@types/node/16.11.62:
+    resolution: {integrity: sha512-K/ggecSdwAAy2NUW4WKmF4Rc03GKbsfP+k326UWgckoS+Rzd2PaWbjk76dSmqdLQvLTJAO9axiTUJ6488mFsYQ==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5296,7 +5296,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
       '@typescript-eslint/experimental-utils': 5.30.6_7ilbxdl5iguzcjriqqcg2m5cku
       eslint: 8.24.0
-      jest: 29.0.3_@types+node@16.11.60
+      jest: 29.0.3_@types+node@16.11.62
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6498,7 +6498,7 @@ packages:
       '@jest/expect': 29.0.3
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6517,7 +6517,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.0.3_@types+node@16.11.60:
+  /jest-cli/29.0.3_@types+node@16.11.62:
     resolution: {integrity: sha512-aUy9Gd/Kut1z80eBzG10jAn6BgS3BoBbXyv+uXEqBJ8wnnuZ5RpNfARoskSrTIy1GY4a8f32YGuCMwibtkl9CQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6534,7 +6534,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.0.3_@types+node@16.11.60
+      jest-config: 29.0.3_@types+node@16.11.62
       jest-util: 29.0.3
       jest-validate: 29.0.3
       prompts: 2.4.2
@@ -6545,7 +6545,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.0.3_@types+node@16.11.60:
+  /jest-config/29.0.3_@types+node@16.11.62:
     resolution: {integrity: sha512-U5qkc82HHVYe3fNu2CRXLN4g761Na26rWKf7CjM8LlZB3In1jadEkZdMwsE37rd9RSPV0NfYaCjHdk/gu3v+Ew==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6560,7 +6560,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       babel-jest: 29.0.3_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6620,7 +6620,7 @@ packages:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
       '@types/jsdom': 20.0.0
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       jest-mock: 29.0.3
       jest-util: 29.0.3
       jsdom: 20.0.0
@@ -6638,7 +6638,7 @@ packages:
       '@jest/environment': 29.0.3
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       jest-mock: 29.0.3
       jest-util: 29.0.3
     dev: true
@@ -6654,7 +6654,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6677,7 +6677,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6728,7 +6728,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
     dev: true
 
   /jest-pnp-resolver/1.2.2_jest-resolve@29.0.3:
@@ -6787,7 +6787,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6818,7 +6818,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6841,7 +6841,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       graceful-fs: 4.2.10
     dev: true
 
@@ -6886,7 +6886,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6898,7 +6898,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6925,7 +6925,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.0.3_@types+node@16.11.60
+      jest: 29.0.3_@types+node@16.11.62
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6939,7 +6939,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6951,7 +6951,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6960,12 +6960,12 @@ packages:
     resolution: {integrity: sha512-Tl/YWUugQOjoTYwjKdfJWkSOfhufJHO5LhXTSZC3TRoQKO+fuXnZAdoXXBlpLXKGODBL3OvdUasfDD4PcMe6ng==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 16.11.60
+      '@types/node': 16.11.62
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.0.3_@types+node@16.11.60:
+  /jest/29.0.3_@types+node@16.11.62:
     resolution: {integrity: sha512-ElgUtJBLgXM1E8L6K1RW1T96R897YY/3lRYqq9uVcPWtP2AAl/nQ16IYDh/FzQOOQ12VEuLdcPU83mbhG2C3PQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6978,7 +6978,7 @@ packages:
       '@jest/core': 29.0.3
       '@jest/types': 29.0.3
       import-local: 3.1.0
-      jest-cli: 29.0.3_@types+node@16.11.60
+      jest-cli: 29.0.3_@types+node@16.11.62
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From a5492354db4bd7ffb8b39d7c71ba6524087dd681 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 27 Sep 2022 17:48:49 +0000
Subject: [PATCH 069/263] build(deps): update typescript-eslint monorepo to
 v5.38.1 (#4085)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 102 ++++++++++++++++++++++-----------------------
 2 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6c021041c..532eb0ec0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.38.0",
-    "@typescript-eslint/parser": "5.38.0",
+    "@typescript-eslint/eslint-plugin": "5.38.1",
+    "@typescript-eslint/parser": "5.38.1",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.9",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 701cffb8b..e837924af 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.38.0
-  '@typescript-eslint/parser': 5.38.0
+  '@typescript-eslint/eslint-plugin': 5.38.1
+  '@typescript-eslint/parser': 5.38.1
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   broadcast-channel: 4.17.0
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
-  '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+  '@typescript-eslint/eslint-plugin': 5.38.1_qatzzi2vqzjqg2tq57nszrvcfi
+  '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
   '@vitejs/plugin-react': 2.1.0_vite@3.1.3
   esbuild: 0.15.9
   esbuild-jest: 0.5.0_esbuild@0.15.9
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_6tbxscchz65k4ix64o3f4kxg3m
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
-  eslint-plugin-import: 2.26.0_ggwdnprjbfokntkrfpgjqs2m4y
+  eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
   eslint-plugin-prettier: 4.2.1_cfn5x6ujhhgzv3423d6k7r2zzm
   eslint-plugin-react: 7.31.8_eslint@8.24.0
@@ -3468,8 +3468,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.38.0_4gkcvl6qsi23tqqawfqgcwtp54:
-    resolution: {integrity: sha512-GgHi/GNuUbTOeoJiEANi0oI6fF3gBQc3bGFYj40nnAPCbhrtEDf2rjBmefFadweBmO1Du1YovHeDP2h5JLhtTQ==}
+  /@typescript-eslint/eslint-plugin/5.38.1_qatzzi2vqzjqg2tq57nszrvcfi:
+    resolution: {integrity: sha512-ky7EFzPhqz3XlhS7vPOoMDaQnQMn+9o5ICR9CPr/6bw8HrFkzhMSxuA3gRfiJVvs7geYrSeawGJjZoZQKCOglQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3479,10 +3479,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
-      '@typescript-eslint/scope-manager': 5.38.0
-      '@typescript-eslint/type-utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
-      '@typescript-eslint/utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/scope-manager': 5.38.1
+      '@typescript-eslint/type-utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
       debug: 4.3.4
       eslint: 8.24.0
       ignore: 5.2.0
@@ -3507,8 +3507,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.38.0_7ilbxdl5iguzcjriqqcg2m5cku:
-    resolution: {integrity: sha512-/F63giJGLDr0ms1Cr8utDAxP2SPiglaD6V+pCOcG35P2jCqdfR7uuEhz1GIC3oy4hkUF8xA1XSXmd9hOh/a5EA==}
+  /@typescript-eslint/parser/5.38.1_7ilbxdl5iguzcjriqqcg2m5cku:
+    resolution: {integrity: sha512-LDqxZBVFFQnQRz9rUZJhLmox+Ep5kdUmLatLQnCRR6523YV+XhRjfYzStQ4MheFA8kMAfUlclHSbu+RKdRwQKw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3517,9 +3517,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.38.0
-      '@typescript-eslint/types': 5.38.0
-      '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
+      '@typescript-eslint/scope-manager': 5.38.1
+      '@typescript-eslint/types': 5.38.1
+      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.3
       debug: 4.3.4
       eslint: 8.24.0
       typescript: 4.8.3
@@ -3535,16 +3535,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.38.0:
-    resolution: {integrity: sha512-ByhHIuNyKD9giwkkLqzezZ9y5bALW8VNY6xXcP+VxoH4JBDKjU5WNnsiD4HJdglHECdV+lyaxhvQjTUbRboiTA==}
+  /@typescript-eslint/scope-manager/5.38.1:
+    resolution: {integrity: sha512-BfRDq5RidVU3RbqApKmS7RFMtkyWMM50qWnDAkKgQiezRtLKsoyRKIvz1Ok5ilRWeD9IuHvaidaLxvGx/2eqTQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.38.0
-      '@typescript-eslint/visitor-keys': 5.38.0
+      '@typescript-eslint/types': 5.38.1
+      '@typescript-eslint/visitor-keys': 5.38.1
     dev: true
 
-  /@typescript-eslint/type-utils/5.38.0_7ilbxdl5iguzcjriqqcg2m5cku:
-    resolution: {integrity: sha512-iZq5USgybUcj/lfnbuelJ0j3K9dbs1I3RICAJY9NZZpDgBYXmuUlYQGzftpQA9wC8cKgtS6DASTvF3HrXwwozA==}
+  /@typescript-eslint/type-utils/5.38.1_7ilbxdl5iguzcjriqqcg2m5cku:
+    resolution: {integrity: sha512-UU3j43TM66gYtzo15ivK2ZFoDFKKP0k03MItzLdq0zV92CeGCXRfXlfQX5ILdd4/DSpHkSjIgLLLh1NtkOJOAw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3553,8 +3553,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
-      '@typescript-eslint/utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.3
+      '@typescript-eslint/utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
       debug: 4.3.4
       eslint: 8.24.0
       tsutils: 3.21.0_typescript@4.8.3
@@ -3568,8 +3568,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.38.0:
-    resolution: {integrity: sha512-HHu4yMjJ7i3Cb+8NUuRCdOGu2VMkfmKyIJsOr9PfkBVYLYrtMCK/Ap50Rpov+iKpxDTfnqvDbuPLgBE5FwUNfA==}
+  /@typescript-eslint/types/5.38.1:
+    resolution: {integrity: sha512-QTW1iHq1Tffp9lNfbfPm4WJabbvpyaehQ0SrvVK2yfV79SytD9XDVxqiPvdrv2LK7DGSFo91TB2FgWanbJAZXg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3594,8 +3594,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.38.0_typescript@4.8.3:
-    resolution: {integrity: sha512-6P0RuphkR+UuV7Avv7MU3hFoWaGcrgOdi8eTe1NwhMp2/GjUJoODBTRWzlHpZh6lFOaPmSvgxGlROa0Sg5Zbyg==}
+  /@typescript-eslint/typescript-estree/5.38.1_typescript@4.8.3:
+    resolution: {integrity: sha512-99b5e/Enoe8fKMLdSuwrfH/C0EIbpUWmeEKHmQlGZb8msY33qn1KlkFww0z26o5Omx7EVjzVDCWEfrfCDHfE7g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3603,8 +3603,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.38.0
-      '@typescript-eslint/visitor-keys': 5.38.0
+      '@typescript-eslint/types': 5.38.1
+      '@typescript-eslint/visitor-keys': 5.38.1
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3633,16 +3633,16 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.38.0_7ilbxdl5iguzcjriqqcg2m5cku:
-    resolution: {integrity: sha512-6sdeYaBgk9Fh7N2unEXGz+D+som2QCQGPAf1SxrkEr+Z32gMreQ0rparXTNGRRfYUWk/JzbGdcM8NSSd6oqnTA==}
+  /@typescript-eslint/utils/5.38.1_7ilbxdl5iguzcjriqqcg2m5cku:
+    resolution: {integrity: sha512-oIuUiVxPBsndrN81oP8tXnFa/+EcZ03qLqPDfSZ5xIJVm7A9V0rlkQwwBOAGtrdN70ZKDlKv+l1BeT4eSFxwXA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
-      '@typescript-eslint/scope-manager': 5.38.0
-      '@typescript-eslint/types': 5.38.0
-      '@typescript-eslint/typescript-estree': 5.38.0_typescript@4.8.3
+      '@typescript-eslint/scope-manager': 5.38.1
+      '@typescript-eslint/types': 5.38.1
+      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.3
       eslint: 8.24.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.24.0
@@ -3659,11 +3659,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.38.0:
-    resolution: {integrity: sha512-MxnrdIyArnTi+XyFLR+kt/uNAcdOnmT+879os7qDRI+EYySR4crXJq9BXPfRzzLGq0wgxkwidrCJ9WCAoacm1w==}
+  /@typescript-eslint/visitor-keys/5.38.1:
+    resolution: {integrity: sha512-bSHr1rRxXt54+j2n4k54p4fj8AHJ49VDWtjpImOpzQj4qjAiOpPni+V1Tyajh19Api1i844F757cur8wH3YvOA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.38.0
+      '@typescript-eslint/types': 5.38.1
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5149,14 +5149,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_6hamdueellmfdowr3e64hskol4
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
-      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/eslint-plugin': 5.38.1_qatzzi2vqzjqg2tq57nszrvcfi
+      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.24.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
-      eslint-plugin-import: 2.26.0_ggwdnprjbfokntkrfpgjqs2m4y
-      eslint-plugin-jest: 25.7.0_2m2ou27oxlec5bzg2xuqbekqly
+      eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
+      eslint-plugin-jest: 25.7.0_btnqirahbzpfcoctdob7k6cb3a
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
       eslint-plugin-react: 7.31.8_eslint@8.24.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
@@ -5194,7 +5194,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.24.0
-      eslint-plugin-import: 2.26.0_ggwdnprjbfokntkrfpgjqs2m4y
+      eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5204,7 +5204,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_ykdyddfakcjre356m77nfkledi:
+  /eslint-module-utils/2.7.3_z2h2qcjieaa7l5lnd6b2cqvlgy:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5222,7 +5222,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
@@ -5249,7 +5249,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_ggwdnprjbfokntkrfpgjqs2m4y:
+  /eslint-plugin-import/2.26.0_3vub7fqunrjizhghsam4lcr2pi:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5259,14 +5259,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.24.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_ykdyddfakcjre356m77nfkledi
+      eslint-module-utils: 2.7.3_z2h2qcjieaa7l5lnd6b2cqvlgy
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5280,7 +5280,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_2m2ou27oxlec5bzg2xuqbekqly:
+  /eslint-plugin-jest/25.7.0_btnqirahbzpfcoctdob7k6cb3a:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5293,7 +5293,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.38.0_4gkcvl6qsi23tqqawfqgcwtp54
+      '@typescript-eslint/eslint-plugin': 5.38.1_qatzzi2vqzjqg2tq57nszrvcfi
       '@typescript-eslint/experimental-utils': 5.30.6_7ilbxdl5iguzcjriqqcg2m5cku
       eslint: 8.24.0
       jest: 29.0.3_@types+node@16.11.62
@@ -5379,7 +5379,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.38.0_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
       eslint: 8.24.0
     transitivePeerDependencies:
       - supports-color

From 500ea178bbb99aa6e30683a211bc9da5d96abbaa Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 28 Sep 2022 06:35:39 +1000
Subject: [PATCH 070/263] build(deps): update
 github.com/duosecurity/duo_api_golang digest to f4576e8 (#4096)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index dc796a1ec..d089cb66d 100644
--- a/go.mod
+++ b/go.mod
@@ -6,7 +6,7 @@ require (
 	github.com/Gurpartap/logrus-stack v0.0.0-20170710170904-89c00d8a28f4
 	github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
 	github.com/deckarep/golang-set v1.8.0
-	github.com/duosecurity/duo_api_golang v0.0.0-20220902131320-61f4e624f85c
+	github.com/duosecurity/duo_api_golang v0.0.0-20220927171823-f4576e85b96c
 	github.com/fasthttp/router v1.4.12
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/go-asn1-ber/asn1-ber v1.5.4
diff --git a/go.sum b/go.sum
index 88b401215..bdd9d9485 100644
--- a/go.sum
+++ b/go.sum
@@ -190,8 +190,8 @@ github.com/docker/docker v17.12.0-ce-rc1.0.20201201034508-7d75c1d40d88+incompati
 github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-units v0.3.3/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/docker/go-units v0.4.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
-github.com/duosecurity/duo_api_golang v0.0.0-20220902131320-61f4e624f85c h1:WzcpjPMDu3E/aPDXFFDuHQcrBAdiAMSgHl1CwAQ/yE0=
-github.com/duosecurity/duo_api_golang v0.0.0-20220902131320-61f4e624f85c/go.mod h1:jI+QUTOK3wqIOrUl0Cwnwlgc/P6vs6pZOuQY3aKggwg=
+github.com/duosecurity/duo_api_golang v0.0.0-20220927171823-f4576e85b96c h1:SndVaMnkMWHtn0TyWx8kX7Oees7wPhCCx+wFDWHXsac=
+github.com/duosecurity/duo_api_golang v0.0.0-20220927171823-f4576e85b96c/go.mod h1:jI+QUTOK3wqIOrUl0Cwnwlgc/P6vs6pZOuQY3aKggwg=
 github.com/dustin/go-humanize v0.0.0-20171111073723-bb3d318650d4/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/dustin/go-humanize v0.0.0-20180713052910-9f541cc9db5d/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=

From e290a9f563b782380bc1e5da67c4f1c4f8ca59b7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 27 Sep 2022 23:56:27 +0000
Subject: [PATCH 071/263] build(deps): update dependency typescript to v4.8.4
 (#4097)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 112 ++++++++++++++++++++++-----------------------
 2 files changed, 57 insertions(+), 57 deletions(-)

diff --git a/web/package.json b/web/package.json
index 532eb0ec0..d3e613e71 100644
--- a/web/package.json
+++ b/web/package.json
@@ -175,7 +175,7 @@
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
-    "typescript": "4.8.3",
+    "typescript": "4.8.4",
     "vite": "3.1.3",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e837924af..e27ced67a 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -57,7 +57,7 @@ specifiers:
   react-otp-input: 2.4.0
   react-router-dom: 6.4.1
   react-test-renderer: 18.2.0
-  typescript: 4.8.3
+  typescript: 4.8.4
   vite: 3.1.3
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
@@ -103,14 +103,14 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.38.1_qatzzi2vqzjqg2tq57nszrvcfi
-  '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+  '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
+  '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
   '@vitejs/plugin-react': 2.1.0_vite@3.1.3
   esbuild: 0.15.9
   esbuild-jest: 0.5.0_esbuild@0.15.9
   eslint: 8.24.0
   eslint-config-prettier: 8.5.0_eslint@8.24.0
-  eslint-config-react-app: 7.0.1_6tbxscchz65k4ix64o3f4kxg3m
+  eslint-config-react-app: 7.0.1_7a7oqeu5knk6kwqea2dft2oolq
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
   eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
@@ -125,7 +125,7 @@ devDependencies:
   jest-watch-typeahead: 2.2.0_jest@29.0.3
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
-  typescript: 4.8.3
+  typescript: 4.8.4
   vite: 3.1.3
   vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.3
   vite-plugin-istanbul: 3.0.1
@@ -2170,11 +2170,11 @@ packages:
       '@types/node': 14.18.26
       chalk: 4.1.2
       cosmiconfig: 7.0.1
-      cosmiconfig-typescript-loader: 4.0.0_phiamshn6hdmqb4hbjl227ychy
+      cosmiconfig-typescript-loader: 4.0.0_6y7t74n3veizl5rsceyhsjfzxy
       lodash: 4.17.21
       resolve-from: 5.0.0
-      ts-node: 10.9.0_xwfh4scogix3vdbcy4yenbcgby
-      typescript: 4.8.3
+      ts-node: 10.9.0_kvex4k72pyqcsdotmwd3oetkri
+      typescript: 4.8.4
     transitivePeerDependencies:
       - '@swc/core'
       - '@swc/wasm'
@@ -3468,7 +3468,7 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.38.1_qatzzi2vqzjqg2tq57nszrvcfi:
+  /@typescript-eslint/eslint-plugin/5.38.1_c7qepppml3d4ahu5cnfwqe6ltq:
     resolution: {integrity: sha512-ky7EFzPhqz3XlhS7vPOoMDaQnQMn+9o5ICR9CPr/6bw8HrFkzhMSxuA3gRfiJVvs7geYrSeawGJjZoZQKCOglQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3479,35 +3479,35 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       '@typescript-eslint/scope-manager': 5.38.1
-      '@typescript-eslint/type-utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
-      '@typescript-eslint/utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/type-utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       debug: 4.3.4
       eslint: 8.24.0
       ignore: 5.2.0
       regexpp: 3.2.0
       semver: 7.3.7
-      tsutils: 3.21.0_typescript@4.8.3
-      typescript: 4.8.3
+      tsutils: 3.21.0_typescript@4.8.4
+      typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@typescript-eslint/experimental-utils/5.30.6_7ilbxdl5iguzcjriqqcg2m5cku:
+  /@typescript-eslint/experimental-utils/5.30.6_ypn2ylkkyfa5i233caldtndbqa:
     resolution: {integrity: sha512-bqvT+0L8IjtW7MCrMgm9oVNxs4g7mESro1mm5c1/SNfTnHuFTf9OUX1WzVkTz75M9cp//UrTrSmGvK48NEKshQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.30.6_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.38.1_7ilbxdl5iguzcjriqqcg2m5cku:
+  /@typescript-eslint/parser/5.38.1_ypn2ylkkyfa5i233caldtndbqa:
     resolution: {integrity: sha512-LDqxZBVFFQnQRz9rUZJhLmox+Ep5kdUmLatLQnCRR6523YV+XhRjfYzStQ4MheFA8kMAfUlclHSbu+RKdRwQKw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3519,10 +3519,10 @@ packages:
     dependencies:
       '@typescript-eslint/scope-manager': 5.38.1
       '@typescript-eslint/types': 5.38.1
-      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.3
+      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.24.0
-      typescript: 4.8.3
+      typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -3543,7 +3543,7 @@ packages:
       '@typescript-eslint/visitor-keys': 5.38.1
     dev: true
 
-  /@typescript-eslint/type-utils/5.38.1_7ilbxdl5iguzcjriqqcg2m5cku:
+  /@typescript-eslint/type-utils/5.38.1_ypn2ylkkyfa5i233caldtndbqa:
     resolution: {integrity: sha512-UU3j43TM66gYtzo15ivK2ZFoDFKKP0k03MItzLdq0zV92CeGCXRfXlfQX5ILdd4/DSpHkSjIgLLLh1NtkOJOAw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3553,12 +3553,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.3
-      '@typescript-eslint/utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.4
+      '@typescript-eslint/utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       debug: 4.3.4
       eslint: 8.24.0
-      tsutils: 3.21.0_typescript@4.8.3
-      typescript: 4.8.3
+      tsutils: 3.21.0_typescript@4.8.4
+      typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -3573,7 +3573,7 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.30.6_typescript@4.8.3:
+  /@typescript-eslint/typescript-estree/5.30.6_typescript@4.8.4:
     resolution: {integrity: sha512-Z7TgPoeYUm06smfEfYF0RBkpF8csMyVnqQbLYiGgmUSTaSXTP57bt8f0UFXstbGxKIreTwQCujtaH0LY9w9B+A==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3588,13 +3588,13 @@ packages:
       globby: 11.1.0
       is-glob: 4.0.3
       semver: 7.3.7
-      tsutils: 3.21.0_typescript@4.8.3
-      typescript: 4.8.3
+      tsutils: 3.21.0_typescript@4.8.4
+      typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.38.1_typescript@4.8.3:
+  /@typescript-eslint/typescript-estree/5.38.1_typescript@4.8.4:
     resolution: {integrity: sha512-99b5e/Enoe8fKMLdSuwrfH/C0EIbpUWmeEKHmQlGZb8msY33qn1KlkFww0z26o5Omx7EVjzVDCWEfrfCDHfE7g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3609,13 +3609,13 @@ packages:
       globby: 11.1.0
       is-glob: 4.0.3
       semver: 7.3.7
-      tsutils: 3.21.0_typescript@4.8.3
-      typescript: 4.8.3
+      tsutils: 3.21.0_typescript@4.8.4
+      typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@typescript-eslint/utils/5.30.6_7ilbxdl5iguzcjriqqcg2m5cku:
+  /@typescript-eslint/utils/5.30.6_ypn2ylkkyfa5i233caldtndbqa:
     resolution: {integrity: sha512-xFBLc/esUbLOJLk9jKv0E9gD/OH966M40aY9jJ8GiqpSkP2xOV908cokJqqhVd85WoIvHVHYXxSFE4cCSDzVvA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3624,7 +3624,7 @@ packages:
       '@types/json-schema': 7.0.11
       '@typescript-eslint/scope-manager': 5.30.6
       '@typescript-eslint/types': 5.30.6
-      '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.3
+      '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.4
       eslint: 8.24.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.24.0
@@ -3633,7 +3633,7 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.38.1_7ilbxdl5iguzcjriqqcg2m5cku:
+  /@typescript-eslint/utils/5.38.1_ypn2ylkkyfa5i233caldtndbqa:
     resolution: {integrity: sha512-oIuUiVxPBsndrN81oP8tXnFa/+EcZ03qLqPDfSZ5xIJVm7A9V0rlkQwwBOAGtrdN70ZKDlKv+l1BeT4eSFxwXA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3642,7 +3642,7 @@ packages:
       '@types/json-schema': 7.0.11
       '@typescript-eslint/scope-manager': 5.38.1
       '@typescript-eslint/types': 5.38.1
-      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.3
+      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.4
       eslint: 8.24.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.24.0
@@ -4508,7 +4508,7 @@ packages:
     requiresBuild: true
     dev: true
 
-  /cosmiconfig-typescript-loader/4.0.0_phiamshn6hdmqb4hbjl227ychy:
+  /cosmiconfig-typescript-loader/4.0.0_6y7t74n3veizl5rsceyhsjfzxy:
     resolution: {integrity: sha512-cVpucSc2Tf+VPwCCR7SZzmQTQkPbkk4O01yXsYqXBIbjE1bhwqSyAgYQkRK1un4i0OPziTleqFhdkmOc4RQ/9g==}
     engines: {node: '>=12', npm: '>=6'}
     peerDependencies:
@@ -4519,8 +4519,8 @@ packages:
     dependencies:
       '@types/node': 14.18.26
       cosmiconfig: 7.0.1
-      ts-node: 10.9.0_xwfh4scogix3vdbcy4yenbcgby
-      typescript: 4.8.3
+      ts-node: 10.9.0_kvex4k72pyqcsdotmwd3oetkri
+      typescript: 4.8.4
     dev: true
 
   /cosmiconfig/7.0.1:
@@ -5136,7 +5136,7 @@ packages:
       eslint: 8.24.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_6tbxscchz65k4ix64o3f4kxg3m:
+  /eslint-config-react-app/7.0.1_7a7oqeu5knk6kwqea2dft2oolq:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5149,19 +5149,19 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_6hamdueellmfdowr3e64hskol4
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.38.1_qatzzi2vqzjqg2tq57nszrvcfi
-      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
+      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.24.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
       eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
-      eslint-plugin-jest: 25.7.0_btnqirahbzpfcoctdob7k6cb3a
+      eslint-plugin-jest: 25.7.0_vlu7oakx4qbevf2qrbswalssam
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
       eslint-plugin-react: 7.31.8_eslint@8.24.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
-      eslint-plugin-testing-library: 5.5.1_7ilbxdl5iguzcjriqqcg2m5cku
-      typescript: 4.8.3
+      eslint-plugin-testing-library: 5.5.1_ypn2ylkkyfa5i233caldtndbqa
+      typescript: 4.8.4
     transitivePeerDependencies:
       - '@babel/plugin-syntax-flow'
       - '@babel/plugin-transform-react-jsx'
@@ -5222,7 +5222,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
@@ -5259,7 +5259,7 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
@@ -5280,7 +5280,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_btnqirahbzpfcoctdob7k6cb3a:
+  /eslint-plugin-jest/25.7.0_vlu7oakx4qbevf2qrbswalssam:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5293,8 +5293,8 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.38.1_qatzzi2vqzjqg2tq57nszrvcfi
-      '@typescript-eslint/experimental-utils': 5.30.6_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
+      '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
       jest: 29.0.3_@types+node@16.11.62
     transitivePeerDependencies:
@@ -5373,13 +5373,13 @@ packages:
       string.prototype.matchall: 4.0.7
     dev: true
 
-  /eslint-plugin-testing-library/5.5.1_7ilbxdl5iguzcjriqqcg2m5cku:
+  /eslint-plugin-testing-library/5.5.1_ypn2ylkkyfa5i233caldtndbqa:
     resolution: {integrity: sha512-plLEkkbAKBjPxsLj7x4jNapcHAg2ernkQlKKrN2I8NrQwPISZHyCUNvg5Hv3EDqOQReToQb5bnqXYbkijJPE/g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0, npm: '>=6'}
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.38.1_7ilbxdl5iguzcjriqqcg2m5cku
+      '@typescript-eslint/utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
     transitivePeerDependencies:
       - supports-color
@@ -8839,7 +8839,7 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /ts-node/10.9.0_xwfh4scogix3vdbcy4yenbcgby:
+  /ts-node/10.9.0_kvex4k72pyqcsdotmwd3oetkri:
     resolution: {integrity: sha512-bunW18GUyaCSYRev4DPf4SQpom3pWH29wKl0sDk5zE7ze19RImEVhCW7K4v3hHKkUyfWotU08ToE2RS+Y49aug==}
     hasBin: true
     peerDependencies:
@@ -8865,7 +8865,7 @@ packages:
       create-require: 1.1.1
       diff: 4.0.2
       make-error: 1.3.6
-      typescript: 4.8.3
+      typescript: 4.8.4
       v8-compile-cache-lib: 3.0.1
       yn: 3.1.1
     dev: true
@@ -8895,14 +8895,14 @@ packages:
     resolution: {integrity: sha512-d6xOpEDfsi2CZVlPQzGeux8XMwLT9hssAsaPYExaQMuYskwb+x1x7J371tWlbBdWHroy99KnVB6qIkUbs5X3UQ==}
     dev: true
 
-  /tsutils/3.21.0_typescript@4.8.3:
+  /tsutils/3.21.0_typescript@4.8.4:
     resolution: {integrity: sha512-mHKK3iUXL+3UF6xL5k0PEhKRUBKPBCv/+RkEOpjRWxxx27KKRBmmA60A9pgOUvMi8GKhRMPEmjBRPzs2W7O1OA==}
     engines: {node: '>= 6'}
     peerDependencies:
       typescript: '>=2.8.0 || >= 3.2.0-dev || >= 3.3.0-dev || >= 3.4.0-dev || >= 3.5.0-dev || >= 3.6.0-dev || >= 3.6.0-beta || >= 3.7.0-dev || >= 3.7.0-beta'
     dependencies:
       tslib: 1.14.1
-      typescript: 4.8.3
+      typescript: 4.8.4
     dev: true
 
   /type-check/0.3.2:
@@ -8960,8 +8960,8 @@ packages:
       is-typedarray: 1.0.0
     dev: true
 
-  /typescript/4.8.3:
-    resolution: {integrity: sha512-goMHfm00nWPa8UvR/CPSvykqf6dVV8x/dp0c5mFTMTIu0u0FlGWRioyy7Nn0PGAdHxpJZnuO/ut+PpQ8UiHAig==}
+  /typescript/4.8.4:
+    resolution: {integrity: sha512-QCh+85mCy+h0IGff8r5XWzOVSbBO+KfeYrMQh7NJ58QujwcE22u+NUSmUxqF+un70P9GXKxa2HCNiTTMJknyjQ==}
     engines: {node: '>=4.2.0'}
     hasBin: true
     dev: true

From 598584b042c657e393a0c72dfb3229176d4fd336 Mon Sep 17 00:00:00 2001
From: Amir Zarrinkafsh <nightah@me.com>
Date: Wed, 28 Sep 2022 10:26:51 +1000
Subject: [PATCH 072/263] build(deps): update traefik docker tag to v2.8.7
 (#4099)

---
 examples/compose/lite/docker-compose.yml  | 2 +-
 examples/compose/local/docker-compose.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/compose/lite/docker-compose.yml b/examples/compose/lite/docker-compose.yml
index 4bef2c181..f856b6089 100644
--- a/examples/compose/lite/docker-compose.yml
+++ b/examples/compose/lite/docker-compose.yml
@@ -44,7 +44,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.8
+    image: traefik:v2.8.7
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/examples/compose/local/docker-compose.yml b/examples/compose/local/docker-compose.yml
index 7ac79f340..3d3821a2b 100644
--- a/examples/compose/local/docker-compose.yml
+++ b/examples/compose/local/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.8
+    image: traefik:v2.8.7
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik

From ce31315d3ee5c3f9dc1c2c957f3fa2ed9e177b90 Mon Sep 17 00:00:00 2001
From: Amir Zarrinkafsh <nightah@me.com>
Date: Wed, 28 Sep 2022 10:46:29 +1000
Subject: [PATCH 073/263] ci(renovate): update renovate presets and auto-merge
 digests (#4098)

---
 .renovaterc        | 18 ++++-------
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 74 +++++++++++++++++++++++-----------------------
 3 files changed, 43 insertions(+), 51 deletions(-)

diff --git a/.renovaterc b/.renovaterc
index ebbfff41f..9ddef69e8 100644
--- a/.renovaterc
+++ b/.renovaterc
@@ -2,16 +2,16 @@
   "extends": [
     "config:base",
     ":semanticCommitTypeAll(build)",
-    ":separatePatchReleases"
+    ":separatePatchReleases",
+    "workarounds:doNotUpgradeFromAlpineStableToEdge"
   ],
   "ignorePaths": [
   	"docs/**"
   ],
   "ignorePresets": [
-    ":combinePatchMinorReleases",
-    "helpers:disableTypesNodeMajor",
     ":prHourlyLimit2",
-    ":semanticPrefixFixDepsChoreOthers"
+    ":semanticPrefixFixDepsChoreOthers",
+    "workarounds:all"
   ],
   "enabledManagers": [
     "bundler",
@@ -25,7 +25,7 @@
   ],
   "packageRules": [
     {
-      "matchUpdateTypes": ["minor", "patch"],
+      "matchUpdateTypes": ["digest", "minor", "patch"],
       "matchCurrentVersion": "!/^0/",
       "automerge": true,
       "automergeType": "pr",
@@ -54,14 +54,6 @@
       "addLabels": [
         "javascript"
       ]
-    },
-    {
-      "datasources": [
-        "rubygems"
-      ],
-      "addLabels": [
-        "ruby"
-      ]
     }
   ],
   "postUpdateOptions": [
diff --git a/web/package.json b/web/package.json
index d3e613e71..795704cee 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.0.3",
-    "@types/node": "16.11.62",
+    "@types/node": "18.7.23",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e27ced67a..6fa4ea424 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.0.3
-  '@types/node': 16.11.62
+  '@types/node': 18.7.23
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.0.3
-  '@types/node': 16.11.62
+  '@types/node': 18.7.23
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.0.3_@types+node@16.11.62
+  jest: 29.0.3_@types+node@18.7.23
   jest-environment-jsdom: 29.0.3
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.0.3
@@ -2507,7 +2507,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       jest-message-util: 29.0.3
       jest-util: 29.0.3
@@ -2528,14 +2528,14 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.0.3_@types+node@16.11.62
+      jest-config: 29.0.3_@types+node@18.7.23
       jest-haste-map: 29.0.3
       jest-message-util: 29.0.3
       jest-regex-util: 29.0.0
@@ -2562,7 +2562,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       jest-mock: 29.0.3
     dev: true
 
@@ -2589,7 +2589,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       jest-message-util: 29.0.3
       jest-mock: 29.0.3
       jest-util: 29.0.3
@@ -2622,7 +2622,7 @@ packages:
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2733,7 +2733,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2745,7 +2745,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3332,7 +3332,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3361,7 +3361,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3382,8 +3382,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/16.11.62:
-    resolution: {integrity: sha512-K/ggecSdwAAy2NUW4WKmF4Rc03GKbsfP+k326UWgckoS+Rzd2PaWbjk76dSmqdLQvLTJAO9axiTUJ6488mFsYQ==}
+  /@types/node/18.7.23:
+    resolution: {integrity: sha512-DWNcCHolDq0ZKGizjx2DZjR/PqsYwAcYUJmfMWqtVU2MBMG5Mo+xFZrhGId5r/O5HOuMPyQEcM6KUBp5lBZZBg==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5296,7 +5296,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
-      jest: 29.0.3_@types+node@16.11.62
+      jest: 29.0.3_@types+node@18.7.23
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6498,7 +6498,7 @@ packages:
       '@jest/expect': 29.0.3
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6517,7 +6517,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.0.3_@types+node@16.11.62:
+  /jest-cli/29.0.3_@types+node@18.7.23:
     resolution: {integrity: sha512-aUy9Gd/Kut1z80eBzG10jAn6BgS3BoBbXyv+uXEqBJ8wnnuZ5RpNfARoskSrTIy1GY4a8f32YGuCMwibtkl9CQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6534,7 +6534,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.0.3_@types+node@16.11.62
+      jest-config: 29.0.3_@types+node@18.7.23
       jest-util: 29.0.3
       jest-validate: 29.0.3
       prompts: 2.4.2
@@ -6545,7 +6545,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.0.3_@types+node@16.11.62:
+  /jest-config/29.0.3_@types+node@18.7.23:
     resolution: {integrity: sha512-U5qkc82HHVYe3fNu2CRXLN4g761Na26rWKf7CjM8LlZB3In1jadEkZdMwsE37rd9RSPV0NfYaCjHdk/gu3v+Ew==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6560,7 +6560,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       babel-jest: 29.0.3_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6620,7 +6620,7 @@ packages:
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
       '@types/jsdom': 20.0.0
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       jest-mock: 29.0.3
       jest-util: 29.0.3
       jsdom: 20.0.0
@@ -6638,7 +6638,7 @@ packages:
       '@jest/environment': 29.0.3
       '@jest/fake-timers': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       jest-mock: 29.0.3
       jest-util: 29.0.3
     dev: true
@@ -6654,7 +6654,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6677,7 +6677,7 @@ packages:
     dependencies:
       '@jest/types': 29.0.3
       '@types/graceful-fs': 4.1.5
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6728,7 +6728,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
     dev: true
 
   /jest-pnp-resolver/1.2.2_jest-resolve@29.0.3:
@@ -6787,7 +6787,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6818,7 +6818,7 @@ packages:
       '@jest/test-result': 29.0.3
       '@jest/transform': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6841,7 +6841,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       graceful-fs: 4.2.10
     dev: true
 
@@ -6886,7 +6886,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6898,7 +6898,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6925,7 +6925,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.0.3_@types+node@16.11.62
+      jest: 29.0.3_@types+node@18.7.23
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6939,7 +6939,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.0.3
       '@jest/types': 29.0.3
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6951,7 +6951,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6960,12 +6960,12 @@ packages:
     resolution: {integrity: sha512-Tl/YWUugQOjoTYwjKdfJWkSOfhufJHO5LhXTSZC3TRoQKO+fuXnZAdoXXBlpLXKGODBL3OvdUasfDD4PcMe6ng==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 16.11.62
+      '@types/node': 18.7.23
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.0.3_@types+node@16.11.62:
+  /jest/29.0.3_@types+node@18.7.23:
     resolution: {integrity: sha512-ElgUtJBLgXM1E8L6K1RW1T96R897YY/3lRYqq9uVcPWtP2AAl/nQ16IYDh/FzQOOQ12VEuLdcPU83mbhG2C3PQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6978,7 +6978,7 @@ packages:
       '@jest/core': 29.0.3
       '@jest/types': 29.0.3
       import-local: 3.1.0
-      jest-cli: 29.0.3_@types+node@16.11.62
+      jest-cli: 29.0.3_@types+node@18.7.23
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 7a530257fa213b7af49e8d2e724c32ddac3626f9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 28 Sep 2022 18:08:56 +0000
Subject: [PATCH 074/263] build(deps): update dependency vite to v3.1.4 (#4103)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 795704cee..922706a06 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.1.3",
+    "vite": "3.1.4",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 6fa4ea424..fc38b838d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.1
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.1.3
+  vite: 3.1.4
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
   '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.3
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.4
   esbuild: 0.15.9
   esbuild-jest: 0.5.0_esbuild@0.15.9
   eslint: 8.24.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.1.3
-  vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.3
+  vite: 3.1.4
+  vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.4
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.3
-  vite-tsconfig-paths: 3.5.1_vite@3.1.3
+  vite-plugin-svgr: 2.2.1_vite@3.1.4
+  vite-tsconfig-paths: 3.5.1_vite@3.1.4
 
 packages:
 
@@ -3667,7 +3667,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.3:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.4:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3680,7 +3680,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.3
+      vite: 3.1.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9084,7 +9084,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.24.0+vite@3.1.3:
+  /vite-plugin-eslint/1.8.1_eslint@8.24.0+vite@3.1.4:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9094,7 +9094,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.24.0
       rollup: 2.78.0
-      vite: 3.1.3
+      vite: 3.1.4
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9108,19 +9108,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.3:
+  /vite-plugin-svgr/2.2.1_vite@3.1.4:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.3
+      vite: 3.1.4
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.1_vite@3.1.3:
+  /vite-tsconfig-paths/3.5.1_vite@3.1.4:
     resolution: {integrity: sha512-t7cPvDMDxOCUxxNLqngXiX+L6jPYBr+eMgkeVadknxBb89d2s1aejz+wFEep010VfXjGVAUWGEFPe1fkRYTFvg==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9129,13 +9129,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.3
+      vite: 3.1.4
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.3:
-    resolution: {integrity: sha512-/3XWiktaopByM5bd8dqvHxRt5EEgRikevnnrpND0gRfNkrMrPaGGexhtLCzv15RcCMtV2CLw+BPas8YFeSG0KA==}
+  /vite/3.1.4:
+    resolution: {integrity: sha512-JoQI08aBjY9lycL7jcEq4p9o1xUjq5aRvdH4KWaXtkSx7e7RpAh9D3IjzDWRD4Fg44LS3oDAIOG/Kq1L+82psA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From aa77a6321cf86582230b2b64dd72faaee6d6cd56 Mon Sep 17 00:00:00 2001
From: Amir Zarrinkafsh <nightah@me.com>
Date: Thu, 29 Sep 2022 10:57:19 +1000
Subject: [PATCH 075/263] ci(codecov): add thresholds for flaky tests (#4104)

---
 .codecov.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.codecov.yml b/.codecov.yml
index 4287a1ca8..6fec44956 100644
--- a/.codecov.yml
+++ b/.codecov.yml
@@ -16,10 +16,12 @@ coverage:
       default: false
       backend:
         base: auto
+        threshold: 0.15%
         flags:
           - backend
       frontend:
         base: auto
+        threshold: 0.15%
         flags:
           - frontend
 

From 104648e0c5f16372db1305ab4d886ee05163ee70 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 30 Sep 2022 07:56:56 +1000
Subject: [PATCH 076/263] build(deps): update dependency esbuild to v0.15.10
 (#4105)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 148 ++++++++++++++++++++++-----------------------
 2 files changed, 75 insertions(+), 75 deletions(-)

diff --git a/web/package.json b/web/package.json
index 922706a06..fffa167c9 100644
--- a/web/package.json
+++ b/web/package.json
@@ -156,7 +156,7 @@
     "@typescript-eslint/eslint-plugin": "5.38.1",
     "@typescript-eslint/parser": "5.38.1",
     "@vitejs/plugin-react": "2.1.0",
-    "esbuild": "0.15.9",
+    "esbuild": "0.15.10",
     "esbuild-jest": "0.5.0",
     "eslint": "8.24.0",
     "eslint-config-prettier": "8.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index fc38b838d..5edce8d35 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -27,7 +27,7 @@ specifiers:
   axios: 0.27.2
   broadcast-channel: 4.17.0
   classnames: 2.3.2
-  esbuild: 0.15.9
+  esbuild: 0.15.10
   esbuild-jest: 0.5.0
   eslint: 8.24.0
   eslint-config-prettier: 8.5.0
@@ -106,8 +106,8 @@ devDependencies:
   '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
   '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
   '@vitejs/plugin-react': 2.1.0_vite@3.1.4
-  esbuild: 0.15.9
-  esbuild-jest: 0.5.0_esbuild@0.15.9
+  esbuild: 0.15.10
+  esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.24.0
   eslint-config-prettier: 8.5.0_eslint@8.24.0
   eslint-config-react-app: 7.0.1_7a7oqeu5knk6kwqea2dft2oolq
@@ -2386,8 +2386,8 @@ packages:
     resolution: {integrity: sha512-AHPmaAx+RYfZz0eYu6Gviiagpmiyw98ySSlQvCUhVGDRtDFe4DBS0x1bSjdF3gqUDYOczB+yYvBTtEylYSdRhg==}
     dev: false
 
-  /@esbuild/android-arm/0.15.9:
-    resolution: {integrity: sha512-VZPy/ETF3fBG5PiinIkA0W/tlsvlEgJccyN2DzWZEl0DlVKRbu91PvY2D6Lxgluj4w9QtYHjOWjAT44C+oQ+EQ==}
+  /@esbuild/android-arm/0.15.10:
+    resolution: {integrity: sha512-FNONeQPy/ox+5NBkcSbYJxoXj9GWu8gVGJTVmUyoOCKQFDTrHVKgNSzChdNt0I8Aj/iKcsDf2r9BFwv+FSNUXg==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [android]
@@ -2395,8 +2395,8 @@ packages:
     dev: true
     optional: true
 
-  /@esbuild/linux-loong64/0.15.9:
-    resolution: {integrity: sha512-O+NfmkfRrb3uSsTa4jE3WApidSe3N5++fyOVGP1SmMZi4A3BZELkhUUvj5hwmMuNdlpzAZ8iAPz2vmcR7DCFQA==}
+  /@esbuild/linux-loong64/0.15.10:
+    resolution: {integrity: sha512-w0Ou3Z83LOYEkwaui2M8VwIp+nLi/NA60lBLMvaJ+vXVMcsARYdEzLNE7RSm4+lSg4zq4d7fAVuzk7PNQ5JFgg==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
@@ -4873,8 +4873,8 @@ packages:
       is-symbol: 1.0.4
     dev: true
 
-  /esbuild-android-64/0.15.9:
-    resolution: {integrity: sha512-HQCX7FJn9T4kxZQkhPjNZC7tBWZqJvhlLHPU2SFzrQB/7nDXjmTIFpFTjt7Bd1uFpeXmuwf5h5fZm+x/hLnhbw==}
+  /esbuild-android-64/0.15.10:
+    resolution: {integrity: sha512-UI7krF8OYO1N7JYTgLT9ML5j4+45ra3amLZKx7LO3lmLt1Ibn8t3aZbX5Pu4BjWiqDuJ3m/hsvhPhK/5Y/YpnA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
@@ -4882,8 +4882,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-android-arm64/0.15.9:
-    resolution: {integrity: sha512-E6zbLfqbFVCNEKircSHnPiSTsm3fCRxeIMPfrkS33tFjIAoXtwegQfVZqMGR0FlsvVxp2NEDOUz+WW48COCjSg==}
+  /esbuild-android-arm64/0.15.10:
+    resolution: {integrity: sha512-EOt55D6xBk5O05AK8brXUbZmoFj4chM8u3riGflLa6ziEoVvNjRdD7Cnp82NHQGfSHgYR06XsPI8/sMuA/cUwg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
@@ -4891,8 +4891,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-64/0.15.9:
-    resolution: {integrity: sha512-gI7dClcDN/HHVacZhTmGjl0/TWZcGuKJ0I7/xDGJwRQQn7aafZGtvagOFNmuOq+OBFPhlPv1T6JElOXb0unkSQ==}
+  /esbuild-darwin-64/0.15.10:
+    resolution: {integrity: sha512-hbDJugTicqIm+WKZgp208d7FcXcaK8j2c0l+fqSJ3d2AzQAfjEYDRM3Z2oMeqSJ9uFxyj/muSACLdix7oTstRA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
@@ -4900,8 +4900,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-arm64/0.15.9:
-    resolution: {integrity: sha512-VZIMlcRN29yg/sv7DsDwN+OeufCcoTNaTl3Vnav7dL/nvsApD7uvhVRbgyMzv0zU/PP0xRhhIpTyc7lxEzHGSw==}
+  /esbuild-darwin-arm64/0.15.10:
+    resolution: {integrity: sha512-M1t5+Kj4IgSbYmunf2BB6EKLkWUq+XlqaFRiGOk8bmBapu9bCDrxjf4kUnWn59Dka3I27EiuHBKd1rSO4osLFQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
@@ -4909,8 +4909,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-64/0.15.9:
-    resolution: {integrity: sha512-uM4z5bTvuAXqPxrI204txhlsPIolQPWRMLenvGuCPZTnnGlCMF2QLs0Plcm26gcskhxewYo9LkkmYSS5Czrb5A==}
+  /esbuild-freebsd-64/0.15.10:
+    resolution: {integrity: sha512-KMBFMa7C8oc97nqDdoZwtDBX7gfpolkk6Bcmj6YFMrtCMVgoU/x2DI1p74DmYl7CSS6Ppa3xgemrLrr5IjIn0w==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
@@ -4918,8 +4918,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-arm64/0.15.9:
-    resolution: {integrity: sha512-HHDjT3O5gWzicGdgJ5yokZVN9K9KG05SnERwl9nBYZaCjcCgj/sX8Ps1jvoFSfNCO04JSsHSOWo4qvxFuj8FoA==}
+  /esbuild-freebsd-arm64/0.15.10:
+    resolution: {integrity: sha512-m2KNbuCX13yQqLlbSojFMHpewbn8wW5uDS6DxRpmaZKzyq8Dbsku6hHvh2U+BcLwWY4mpgXzFUoENEf7IcioGg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
@@ -4927,7 +4927,7 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-jest/0.5.0_esbuild@0.15.9:
+  /esbuild-jest/0.5.0_esbuild@0.15.10:
     resolution: {integrity: sha512-AMZZCdEpXfNVOIDvURlqYyHwC8qC1/BFjgsrOiSL1eyiIArVtHL8YAC83Shhn16cYYoAWEW17yZn0W/RJKJKHQ==}
     peerDependencies:
       esbuild: '>=0.8.50'
@@ -4935,13 +4935,13 @@ packages:
       '@babel/core': 7.18.6
       '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.6
       babel-jest: 26.6.3_@babel+core@7.18.6
-      esbuild: 0.15.9
+      esbuild: 0.15.10
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /esbuild-linux-32/0.15.9:
-    resolution: {integrity: sha512-AQIdE8FugGt1DkcekKi5ycI46QZpGJ/wqcMr7w6YUmOmp2ohQ8eO4sKUsOxNOvYL7hGEVwkndSyszR6HpVHLFg==}
+  /esbuild-linux-32/0.15.10:
+    resolution: {integrity: sha512-guXrwSYFAvNkuQ39FNeV4sNkNms1bLlA5vF1H0cazZBOLdLFIny6BhT+TUbK/hdByMQhtWQ5jI9VAmPKbVPu1w==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
@@ -4949,8 +4949,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-64/0.15.9:
-    resolution: {integrity: sha512-4RXjae7g6Qs7StZyiYyXTZXBlfODhb1aBVAjd+ANuPmMhWthQilWo7rFHwJwL7DQu1Fjej2sODAVwLbcIVsAYQ==}
+  /esbuild-linux-64/0.15.10:
+    resolution: {integrity: sha512-jd8XfaSJeucMpD63YNMO1JCrdJhckHWcMv6O233bL4l6ogQKQOxBYSRP/XLWP+6kVTu0obXovuckJDcA0DKtQA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
@@ -4958,8 +4958,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm/0.15.9:
-    resolution: {integrity: sha512-3Zf2GVGUOI7XwChH3qrnTOSqfV1V4CAc/7zLVm4lO6JT6wbJrTgEYCCiNSzziSju+J9Jhf9YGWk/26quWPC6yQ==}
+  /esbuild-linux-arm/0.15.10:
+    resolution: {integrity: sha512-6N8vThLL/Lysy9y4Ex8XoLQAlbZKUyExCWyayGi2KgTBelKpPgj6RZnUaKri0dHNPGgReJriKVU6+KDGQwn10A==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
@@ -4967,8 +4967,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm64/0.15.9:
-    resolution: {integrity: sha512-a+bTtxJmYmk9d+s2W4/R1SYKDDAldOKmWjWP0BnrWtDbvUBNOm++du0ysPju4mZVoEFgS1yLNW+VXnG/4FNwdQ==}
+  /esbuild-linux-arm64/0.15.10:
+    resolution: {integrity: sha512-GByBi4fgkvZFTHFDYNftu1DQ1GzR23jws0oWyCfhnI7eMOe+wgwWrc78dbNk709Ivdr/evefm2PJiUBMiusS1A==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
@@ -4976,8 +4976,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-mips64le/0.15.9:
-    resolution: {integrity: sha512-Zn9HSylDp89y+TRREMDoGrc3Z4Hs5u56ozZLQCiZAUx2+HdbbXbWdjmw3FdTJ/i7t5Cew6/Q+6kfO3KCcFGlyw==}
+  /esbuild-linux-mips64le/0.15.10:
+    resolution: {integrity: sha512-BxP+LbaGVGIdQNJUNF7qpYjEGWb0YyHVSKqYKrn+pTwH/SiHUxFyJYSP3pqkku61olQiSBnSmWZ+YUpj78Tw7Q==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
@@ -4985,8 +4985,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-ppc64le/0.15.9:
-    resolution: {integrity: sha512-OEiOxNAMH9ENFYqRsWUj3CWyN3V8P3ZXyfNAtX5rlCEC/ERXrCEFCJji/1F6POzsXAzxvUJrTSTCy7G6BhA6Fw==}
+  /esbuild-linux-ppc64le/0.15.10:
+    resolution: {integrity: sha512-LoSQCd6498PmninNgqd/BR7z3Bsk/mabImBWuQ4wQgmQEeanzWd5BQU2aNi9mBURCLgyheuZS6Xhrw5luw3OkQ==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
@@ -4994,8 +4994,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-riscv64/0.15.9:
-    resolution: {integrity: sha512-ukm4KsC3QRausEFjzTsOZ/qqazw0YvJsKmfoZZm9QW27OHjk2XKSQGGvx8gIEswft/Sadp03/VZvAaqv5AIwNA==}
+  /esbuild-linux-riscv64/0.15.10:
+    resolution: {integrity: sha512-Lrl9Cr2YROvPV4wmZ1/g48httE8z/5SCiXIyebiB5N8VT7pX3t6meI7TQVHw/wQpqP/AF4SksDuFImPTM7Z32Q==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
@@ -5003,8 +5003,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-s390x/0.15.9:
-    resolution: {integrity: sha512-uDOQEH55wQ6ahcIKzQr3VyjGc6Po/xblLGLoUk3fVL1qjlZAibtQr6XRfy5wPJLu/M2o0vQKLq4lyJ2r1tWKcw==}
+  /esbuild-linux-s390x/0.15.10:
+    resolution: {integrity: sha512-ReP+6q3eLVVP2lpRrvl5EodKX7EZ1bS1/z5j6hsluAlZP5aHhk6ghT6Cq3IANvvDdscMMCB4QEbI+AjtvoOFpA==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
@@ -5012,8 +5012,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-netbsd-64/0.15.9:
-    resolution: {integrity: sha512-yWgxaYTQz+TqX80wXRq6xAtb7GSBAp6gqLKfOdANg9qEmAI1Bxn04IrQr0Mzm4AhxvGKoHzjHjMgXbCCSSDxcw==}
+  /esbuild-netbsd-64/0.15.10:
+    resolution: {integrity: sha512-iGDYtJCMCqldMskQ4eIV+QSS/CuT7xyy9i2/FjpKvxAuCzrESZXiA1L64YNj6/afuzfBe9i8m/uDkFHy257hTw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
@@ -5021,8 +5021,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-openbsd-64/0.15.9:
-    resolution: {integrity: sha512-JmS18acQl4iSAjrEha1MfEmUMN4FcnnrtTaJ7Qg0tDCOcgpPPQRLGsZqhes0vmx8VA6IqRyScqXvaL7+Q0Uf3A==}
+  /esbuild-openbsd-64/0.15.10:
+    resolution: {integrity: sha512-ftMMIwHWrnrYnvuJQRJs/Smlcb28F9ICGde/P3FUTCgDDM0N7WA0o9uOR38f5Xe2/OhNCgkjNeb7QeaE3cyWkQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
@@ -5030,8 +5030,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-sunos-64/0.15.9:
-    resolution: {integrity: sha512-UKynGSWpzkPmXW3D2UMOD9BZPIuRaSqphxSCwScfEE05Be3KAmvjsBhht1fLzKpiFVJb0BYMd4jEbWMyJ/z1hQ==}
+  /esbuild-sunos-64/0.15.10:
+    resolution: {integrity: sha512-mf7hBL9Uo2gcy2r3rUFMjVpTaGpFJJE5QTDDqUFf1632FxteYANffDZmKbqX0PfeQ2XjUDE604IcE7OJeoHiyg==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
@@ -5039,8 +5039,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-32/0.15.9:
-    resolution: {integrity: sha512-aqXvu4/W9XyTVqO/hw3rNxKE1TcZiEYHPsXM9LwYmKSX9/hjvfIJzXwQBlPcJ/QOxedfoMVH0YnhhQ9Ffb0RGA==}
+  /esbuild-windows-32/0.15.10:
+    resolution: {integrity: sha512-ttFVo+Cg8b5+qHmZHbEc8Vl17kCleHhLzgT8X04y8zudEApo0PxPg9Mz8Z2cKH1bCYlve1XL8LkyXGFjtUYeGg==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
@@ -5048,8 +5048,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-64/0.15.9:
-    resolution: {integrity: sha512-zm7h91WUmlS4idMtjvCrEeNhlH7+TNOmqw5dJPJZrgFaxoFyqYG6CKDpdFCQXdyKpD5yvzaQBOMVTCBVKGZDEg==}
+  /esbuild-windows-64/0.15.10:
+    resolution: {integrity: sha512-2H0gdsyHi5x+8lbng3hLbxDWR7mKHWh5BXZGKVG830KUmXOOWFE2YKJ4tHRkejRduOGDrBvHBriYsGtmTv3ntA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
@@ -5057,8 +5057,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-arm64/0.15.9:
-    resolution: {integrity: sha512-yQEVIv27oauAtvtuhJVfSNMztJJX47ismRS6Sv2QMVV9RM+6xjbMWuuwM2nxr5A2/gj/mu2z9YlQxiwoFRCfZA==}
+  /esbuild-windows-arm64/0.15.10:
+    resolution: {integrity: sha512-S+th4F+F8VLsHLR0zrUcG+Et4hx0RKgK1eyHc08kztmLOES8BWwMiaGdoW9hiXuzznXQ0I/Fg904MNbr11Nktw==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
@@ -5066,34 +5066,34 @@ packages:
     dev: true
     optional: true
 
-  /esbuild/0.15.9:
-    resolution: {integrity: sha512-OnYr1rkMVxtmMHIAKZLMcEUlJmqcbxBz9QoBU8G9v455na0fuzlT/GLu6l+SRghrk0Mm2fSSciMmzV43Q8e0Gg==}
+  /esbuild/0.15.10:
+    resolution: {integrity: sha512-N7wBhfJ/E5fzn/SpNgX+oW2RLRjwaL8Y0ezqNqhjD6w0H2p0rDuEz2FKZqpqLnO8DCaWumKe8dsC/ljvVSSxng==}
     engines: {node: '>=12'}
     hasBin: true
     requiresBuild: true
     optionalDependencies:
-      '@esbuild/android-arm': 0.15.9
-      '@esbuild/linux-loong64': 0.15.9
-      esbuild-android-64: 0.15.9
-      esbuild-android-arm64: 0.15.9
-      esbuild-darwin-64: 0.15.9
-      esbuild-darwin-arm64: 0.15.9
-      esbuild-freebsd-64: 0.15.9
-      esbuild-freebsd-arm64: 0.15.9
-      esbuild-linux-32: 0.15.9
-      esbuild-linux-64: 0.15.9
-      esbuild-linux-arm: 0.15.9
-      esbuild-linux-arm64: 0.15.9
-      esbuild-linux-mips64le: 0.15.9
-      esbuild-linux-ppc64le: 0.15.9
-      esbuild-linux-riscv64: 0.15.9
-      esbuild-linux-s390x: 0.15.9
-      esbuild-netbsd-64: 0.15.9
-      esbuild-openbsd-64: 0.15.9
-      esbuild-sunos-64: 0.15.9
-      esbuild-windows-32: 0.15.9
-      esbuild-windows-64: 0.15.9
-      esbuild-windows-arm64: 0.15.9
+      '@esbuild/android-arm': 0.15.10
+      '@esbuild/linux-loong64': 0.15.10
+      esbuild-android-64: 0.15.10
+      esbuild-android-arm64: 0.15.10
+      esbuild-darwin-64: 0.15.10
+      esbuild-darwin-arm64: 0.15.10
+      esbuild-freebsd-64: 0.15.10
+      esbuild-freebsd-arm64: 0.15.10
+      esbuild-linux-32: 0.15.10
+      esbuild-linux-64: 0.15.10
+      esbuild-linux-arm: 0.15.10
+      esbuild-linux-arm64: 0.15.10
+      esbuild-linux-mips64le: 0.15.10
+      esbuild-linux-ppc64le: 0.15.10
+      esbuild-linux-riscv64: 0.15.10
+      esbuild-linux-s390x: 0.15.10
+      esbuild-netbsd-64: 0.15.10
+      esbuild-openbsd-64: 0.15.10
+      esbuild-sunos-64: 0.15.10
+      esbuild-windows-32: 0.15.10
+      esbuild-windows-64: 0.15.10
+      esbuild-windows-arm64: 0.15.10
     dev: true
 
   /escalade/3.1.1:
@@ -9153,7 +9153,7 @@ packages:
       terser:
         optional: true
     dependencies:
-      esbuild: 0.15.9
+      esbuild: 0.15.10
       postcss: 8.4.16
       resolve: 1.22.1
       rollup: 2.78.0

From be3c593993d5e4192d8fb4c4c07665ab182da1bd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 30 Sep 2022 09:18:23 +1000
Subject: [PATCH 077/263] build(deps): update golang.org/x/sync digest to
 8fcdb60 (#4106)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index d089cb66d..4255cddcc 100644
--- a/go.mod
+++ b/go.mod
@@ -36,7 +36,7 @@ require (
 	github.com/stretchr/testify v1.8.0
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
-	golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7
+	golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
 	golang.org/x/text v0.3.7
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
diff --git a/go.sum b/go.sum
index bdd9d9485..2a15decb3 100644
--- a/go.sum
+++ b/go.sum
@@ -1621,8 +1621,8 @@ golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7 h1:ZrnxWX62AgTKOSagEqxvb3ffipvEDX2pl7E1TdqLqIc=
-golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0 h1:cu5kTvlzcw1Q5S9f5ip1/cpiB4nXvw1XYzFPGgzLUOY=
+golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sys v0.0.0-20180816055513-1c9583448a9c/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=

From 9797d73927b50f99c2dd34286caaed0ae039a4d6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 30 Sep 2022 09:52:53 +1000
Subject: [PATCH 078/263] build(deps): update jest monorepo (#4102)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   6 +-
 web/pnpm-lock.yaml | 533 ++++++++++++++++++++++++++-------------------
 2 files changed, 308 insertions(+), 231 deletions(-)

diff --git a/web/package.json b/web/package.json
index fffa167c9..d75e3f825 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.0.3",
+    "@types/jest": "29.1.0",
     "@types/node": "18.7.23",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.8",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.0.3",
-    "jest-environment-jsdom": "29.0.3",
+    "jest": "29.1.1",
+    "jest-environment-jsdom": "29.1.1",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 5edce8d35..f4bc9ec5d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.7
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.0.3
+  '@types/jest': 29.1.0
   '@types/node': 18.7.23
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -43,8 +43,8 @@ specifiers:
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.4
-  jest: 29.0.3
-  jest-environment-jsdom: 29.0.3
+  jest: 29.1.1
+  jest-environment-jsdom: 29.1.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -97,7 +97,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.0.3
+  '@types/jest': 29.1.0
   '@types/node': 18.7.23
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.24.0
   eslint-config-prettier: 8.5.0_eslint@8.24.0
-  eslint-config-react-app: 7.0.1_7a7oqeu5knk6kwqea2dft2oolq
+  eslint-config-react-app: 7.0.1_6t74nvisbf4pgujetkfzk5tbmy
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
   eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.0.3_@types+node@18.7.23
-  jest-environment-jsdom: 29.0.3
+  jest: 29.1.1_@types+node@18.7.23
+  jest-environment-jsdom: 29.1.1
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.0.3
+  jest-watch-typeahead: 2.2.0_jest@29.1.1
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -2502,20 +2502,20 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /@jest/console/29.0.3:
-    resolution: {integrity: sha512-cGg0r+klVHSYnfE977S9wmpuQ9L+iYuYgL+5bPXiUlUynLLYunRxswEmhBzvrSKGof5AKiHuTTmUKAqRcDY9dg==}
+  /@jest/console/29.1.0:
+    resolution: {integrity: sha512-yNoFMuAsXTP8OyweaMaIoa6Px6rJkbbG7HtgYKGP3CY7lE7ADRA0Fn5ad9O+KefKcaf6W9rywKpCWOw21WMsAw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       chalk: 4.1.2
-      jest-message-util: 29.0.3
-      jest-util: 29.0.3
+      jest-message-util: 29.1.0
+      jest-util: 29.1.0
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.0.3:
-    resolution: {integrity: sha512-1d0hLbOrM1qQE3eP3DtakeMbKTcXiXP3afWxqz103xPyddS2NhnNghS7MaXx1dcDt4/6p4nlhmeILo2ofgi8cQ==}
+  /@jest/core/29.1.1:
+    resolution: {integrity: sha512-ppym+PLiuSmvU9ufXVb/8OtHUPcjW+bBlb8CLh6oMATgJtCE3fjDYrzJi5u1uX8q9jbmtQ7VADKJKIlp68zi3A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2523,11 +2523,11 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/console': 29.0.3
-      '@jest/reporters': 29.0.3
-      '@jest/test-result': 29.0.3
-      '@jest/transform': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/console': 29.1.0
+      '@jest/reporters': 29.1.0
+      '@jest/test-result': 29.1.0
+      '@jest/transform': 29.1.0
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
@@ -2535,20 +2535,20 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.0.3_@types+node@18.7.23
-      jest-haste-map: 29.0.3
-      jest-message-util: 29.0.3
+      jest-config: 29.1.1_@types+node@18.7.23
+      jest-haste-map: 29.1.0
+      jest-message-util: 29.1.0
       jest-regex-util: 29.0.0
-      jest-resolve: 29.0.3
-      jest-resolve-dependencies: 29.0.3
-      jest-runner: 29.0.3
-      jest-runtime: 29.0.3
-      jest-snapshot: 29.0.3
-      jest-util: 29.0.3
-      jest-validate: 29.0.3
-      jest-watcher: 29.0.3
+      jest-resolve: 29.1.0
+      jest-resolve-dependencies: 29.1.1
+      jest-runner: 29.1.1
+      jest-runtime: 29.1.1
+      jest-snapshot: 29.1.0
+      jest-util: 29.1.0
+      jest-validate: 29.1.0
+      jest-watcher: 29.1.0
       micromatch: 4.0.5
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
       slash: 3.0.0
       strip-ansi: 6.0.1
     transitivePeerDependencies:
@@ -2556,14 +2556,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.0.3:
-    resolution: {integrity: sha512-iKl272NKxYNQNqXMQandAIwjhQaGw5uJfGXduu8dS9llHi8jV2ChWrtOAVPnMbaaoDhnI3wgUGNDvZgHeEJQCA==}
+  /@jest/environment/29.1.1:
+    resolution: {integrity: sha512-69WULhTD38UcjvLGRAnnwC5hDt35ZC91ZwnvWipNOAOSaQNT32uKYL/TVCT3tncB9L1D++LOmBbYhTYP4TLuuQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/fake-timers': 29.1.1
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
-      jest-mock: 29.0.3
+      jest-mock: 29.1.1
     dev: true
 
   /@jest/expect-utils/29.0.3:
@@ -2573,42 +2573,49 @@ packages:
       jest-get-type: 29.0.0
     dev: true
 
-  /@jest/expect/29.0.3:
-    resolution: {integrity: sha512-6W7K+fsI23FQ01H/BWccPyDZFrnU9QlzDcKOjrNVU5L8yUORFAJJIpmyxWPW70+X624KUNqzZwPThPMX28aXEQ==}
+  /@jest/expect-utils/29.1.0:
+    resolution: {integrity: sha512-YcD5CF2beqfoB07WqejPzWq1/l+zT3SgGwcqqIaPPG1DHFn/ea8MWWXeqV3KKMhTaOM1rZjlYplj1GQxR0XxKA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.0.3
-      jest-snapshot: 29.0.3
+      jest-get-type: 29.0.0
+    dev: true
+
+  /@jest/expect/29.1.0:
+    resolution: {integrity: sha512-qWQttxE5rEwzvDW9G3f0o8chu1EKvIfsMQDeRlXMLCtsDS94ckcqEMNgbKKz0NYlZ45xrIoy+/pngt3ZFr/2zw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      expect: 29.1.0
+      jest-snapshot: 29.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.0.3:
-    resolution: {integrity: sha512-tmbUIo03x0TdtcZCESQ0oQSakPCpo7+s6+9mU19dd71MptkP4zCwoeZqna23//pgbhtT1Wq02VmA9Z9cNtvtCQ==}
+  /@jest/fake-timers/29.1.1:
+    resolution: {integrity: sha512-5wTGObRfL/OjzEz0v2ShXlzeJFJw8mO6ByMBwmPLd6+vkdPcmIpCvASG/PR/g8DpchSIEeDXCxQADojHxuhX8g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.7.23
-      jest-message-util: 29.0.3
-      jest-mock: 29.0.3
-      jest-util: 29.0.3
+      jest-message-util: 29.1.0
+      jest-mock: 29.1.1
+      jest-util: 29.1.0
     dev: true
 
-  /@jest/globals/29.0.3:
-    resolution: {integrity: sha512-YqGHT65rFY2siPIHHFjuCGUsbzRjdqkwbat+Of6DmYRg5shIXXrLdZoVE/+TJ9O1dsKsFmYhU58JvIbZRU1Z9w==}
+  /@jest/globals/29.1.1:
+    resolution: {integrity: sha512-yTiusxeEHjXwmo3guWlN31a1harU8zekLBMlZpOZ+84rfO3HDrkNZLTfd/YaHF8CrwlNCFpDGNSQCH8WkklH/Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.3
-      '@jest/expect': 29.0.3
-      '@jest/types': 29.0.3
-      jest-mock: 29.0.3
+      '@jest/environment': 29.1.1
+      '@jest/expect': 29.1.0
+      '@jest/types': 29.1.0
+      jest-mock: 29.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.0.3:
-    resolution: {integrity: sha512-3+QU3d4aiyOWfmk1obDerie4XNCaD5Xo1IlKNde2yGEi02WQD+ZQD0i5Hgqm1e73sMV7kw6pMlCnprtEwEVwxw==}
+  /@jest/reporters/29.1.0:
+    resolution: {integrity: sha512-szSjHjVuBQ7aZUdBzTicCoQAAQsQFLk+/PtMfO0RQxL5mQ1iw+PSKOpyvMZcA5T6bH9pIapue5U9UCrxfOtL3w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2617,10 +2624,10 @@ packages:
         optional: true
     dependencies:
       '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.0.3
-      '@jest/test-result': 29.0.3
-      '@jest/transform': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/console': 29.1.0
+      '@jest/test-result': 29.1.0
+      '@jest/transform': 29.1.0
+      '@jest/types': 29.1.0
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.7.23
       chalk: 4.1.2
@@ -2633,9 +2640,9 @@ packages:
       istanbul-lib-report: 3.0.0
       istanbul-lib-source-maps: 4.0.1
       istanbul-reports: 3.1.5
-      jest-message-util: 29.0.3
-      jest-util: 29.0.3
-      jest-worker: 29.0.3
+      jest-message-util: 29.1.0
+      jest-util: 29.1.0
+      jest-worker: 29.1.0
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
@@ -2661,23 +2668,23 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /@jest/test-result/29.0.3:
-    resolution: {integrity: sha512-vViVnQjCgTmbhDKEonKJPtcFe9G/CJO4/Np4XwYJah+lF2oI7KKeRp8t1dFvv44wN2NdbDb/qC6pi++Vpp0Dlg==}
+  /@jest/test-result/29.1.0:
+    resolution: {integrity: sha512-RMBhPlw1Qfc2bKSf3RFPCyFSN7cfWVSTxRD8JrnvqdqgaDgrq4aGJT1A/V2+5Vq9bqBd187FpaxGTQ4zLrt08g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/console': 29.1.0
+      '@jest/types': 29.1.0
       '@types/istanbul-lib-coverage': 2.0.4
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.0.3:
-    resolution: {integrity: sha512-Hf4+xYSWZdxTNnhDykr8JBs0yBN/nxOXyUQWfotBUqqy0LF9vzcFB0jm/EDNZCx587znLWTIgxcokW7WeZMobQ==}
+  /@jest/test-sequencer/29.1.0:
+    resolution: {integrity: sha512-1diQfwNhBAte+x3TmyfWloxT1C8GcPEPEZ4BZjmELBK2j3cdqi0DofoJUxBDDUBBnakbv8ce0B7CIzprsupPSA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.0.3
+      '@jest/test-result': 29.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.3
+      jest-haste-map: 29.1.0
       slash: 3.0.0
     dev: true
 
@@ -2704,21 +2711,21 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.0.3:
-    resolution: {integrity: sha512-C5ihFTRYaGDbi/xbRQRdbo5ddGtI4VSpmL6AIcZxdhwLbXMa7PcXxxqyI91vGOFHnn5aVM3WYnYKCHEqmLVGzg==}
+  /@jest/transform/29.1.0:
+    resolution: {integrity: sha512-NI1zd62KgM0lW6rWMIZDx52dfTIDd+cnLQNahH0YhH7TVmQVigumJ6jszuhAzvKHGm55P2Fozcglb5sGMfFp3Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 1.8.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.3
+      jest-haste-map: 29.1.0
       jest-regex-util: 29.0.0
-      jest-util: 29.0.3
+      jest-util: 29.1.0
       micromatch: 4.0.5
       pirates: 4.0.5
       slash: 3.0.0
@@ -2738,8 +2745,8 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@jest/types/29.0.3:
-    resolution: {integrity: sha512-coBJmOQvurXjN1Hh5PzF7cmsod0zLIOXpP8KD161mqNlroMhLcwpODiEzi7ZsRl5Z/AIuxpeNm8DCl43F4kz8A==}
+  /@jest/types/29.1.0:
+    resolution: {integrity: sha512-lE30u3z4lbTOqf5D7fDdoco3Qd8H6F/t73nLOswU4x+7VhgDQMX5y007IMqrKjFHdnpslaYymVFhWX+ttXNARQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -3351,8 +3358,8 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.0.3:
-    resolution: {integrity: sha512-F6ukyCTwbfsEX5F2YmVYmM5TcTHy1q9P5rWlRbrk56KyMh3v9xRGUO3aa8+SkvMi0SHXtASJv1283enXimC0Og==}
+  /@types/jest/29.1.0:
+    resolution: {integrity: sha512-CqlKkMNaUhFSRvqVKniNhbcy9fc/Rj2cmFD5t8Jtu4HlHzSit27h7XKfP5kkxBeROQ8WAvQQmy93FIz9or8jKg==}
     dependencies:
       expect: 29.0.3
       pretty-format: 29.0.3
@@ -3441,7 +3448,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.0.3
+      '@types/jest': 29.1.0
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -3970,8 +3977,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.0.3_@babel+core@7.19.0:
-    resolution: {integrity: sha512-ApPyHSOhS/sVzwUOQIWJmdvDhBsMG01HX9z7ogtkp1TToHGGUWFlnXJUIzCgKPSfiYLn3ibipCYzsKSURHEwLg==}
+  /babel-jest/29.1.0_@babel+core@7.19.0:
+    resolution: {integrity: sha512-0XiBgPRhMSng+ThuXz0M/WpOeml/q5S4BFIaDS5uQb+lCjOzd0OfYEN4hWte5fDy7SZ6rNmEi16UpWGurSg2nQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -3980,7 +3987,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/transform': 29.0.3
+      '@jest/transform': 29.1.0
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.0.2_@babel+core@7.19.0
@@ -5136,7 +5143,7 @@ packages:
       eslint: 8.24.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_7a7oqeu5knk6kwqea2dft2oolq:
+  /eslint-config-react-app/7.0.1_6t74nvisbf4pgujetkfzk5tbmy:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5156,7 +5163,7 @@ packages:
       eslint: 8.24.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
       eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
-      eslint-plugin-jest: 25.7.0_vlu7oakx4qbevf2qrbswalssam
+      eslint-plugin-jest: 25.7.0_uavozi2kzgf3sm5idxz25jl4nm
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
       eslint-plugin-react: 7.31.8_eslint@8.24.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
@@ -5280,7 +5287,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_vlu7oakx4qbevf2qrbswalssam:
+  /eslint-plugin-jest/25.7.0_uavozi2kzgf3sm5idxz25jl4nm:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5296,7 +5303,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
-      jest: 29.0.3_@types+node@18.7.23
+      jest: 29.1.1_@types+node@18.7.23
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5582,7 +5589,18 @@ packages:
       jest-get-type: 29.0.0
       jest-matcher-utils: 29.0.3
       jest-message-util: 29.0.3
-      jest-util: 29.0.3
+      jest-util: 29.1.0
+    dev: true
+
+  /expect/29.1.0:
+    resolution: {integrity: sha512-1NCfR0FEArn9Vq1KEjhPd1rggRLiWgo87gfMK4iKn6DcVzJBRMyDNX22hyND5KiSRPIPQ5KtsY6HLxsQ0MU86w==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/expect-utils': 29.1.0
+      jest-get-type: 29.0.0
+      jest-matcher-utils: 29.1.0
+      jest-message-util: 29.1.0
+      jest-util: 29.1.0
     dev: true
 
   /extend-shallow/2.0.1:
@@ -6490,35 +6508,35 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.0.3:
-    resolution: {integrity: sha512-QeGzagC6Hw5pP+df1+aoF8+FBSgkPmraC1UdkeunWh0jmrp7wC0Hr6umdUAOELBQmxtKAOMNC3KAdjmCds92Zg==}
+  /jest-circus/29.1.1:
+    resolution: {integrity: sha512-Ii+3JIeLF3z8j2E7fPSjPjXJLBdbAcZyfEiALRQ1Fk+FWTIfuEfZrZcjSaBdz/k/waoq+bPf9x/vBCXIAyLLEQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.3
-      '@jest/expect': 29.0.3
-      '@jest/test-result': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/environment': 29.1.1
+      '@jest/expect': 29.1.0
+      '@jest/test-result': 29.1.0
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
       is-generator-fn: 2.1.0
-      jest-each: 29.0.3
-      jest-matcher-utils: 29.0.3
-      jest-message-util: 29.0.3
-      jest-runtime: 29.0.3
-      jest-snapshot: 29.0.3
-      jest-util: 29.0.3
+      jest-each: 29.1.0
+      jest-matcher-utils: 29.1.0
+      jest-message-util: 29.1.0
+      jest-runtime: 29.1.1
+      jest-snapshot: 29.1.0
+      jest-util: 29.1.0
       p-limit: 3.1.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
       slash: 3.0.0
       stack-utils: 2.0.5
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-cli/29.0.3_@types+node@18.7.23:
-    resolution: {integrity: sha512-aUy9Gd/Kut1z80eBzG10jAn6BgS3BoBbXyv+uXEqBJ8wnnuZ5RpNfARoskSrTIy1GY4a8f32YGuCMwibtkl9CQ==}
+  /jest-cli/29.1.1_@types+node@18.7.23:
+    resolution: {integrity: sha512-nz/JNtqDFf49R2KgeZ9+6Zl1uxSuRsg/tICC+DHMh+bQ0co6QqBPWKg3FtW4534bs8/J2YqFC2Lct9DZR24z0Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6527,16 +6545,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.0.3
-      '@jest/test-result': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/core': 29.1.1
+      '@jest/test-result': 29.1.0
+      '@jest/types': 29.1.0
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.0.3_@types+node@18.7.23
-      jest-util: 29.0.3
-      jest-validate: 29.0.3
+      jest-config: 29.1.1_@types+node@18.7.23
+      jest-util: 29.1.0
+      jest-validate: 29.1.0
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6545,8 +6563,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.0.3_@types+node@18.7.23:
-    resolution: {integrity: sha512-U5qkc82HHVYe3fNu2CRXLN4g761Na26rWKf7CjM8LlZB3In1jadEkZdMwsE37rd9RSPV0NfYaCjHdk/gu3v+Ew==}
+  /jest-config/29.1.1_@types+node@18.7.23:
+    resolution: {integrity: sha512-o2iZrQMOiF54zOw1kOcJGmfKzAW+V2ajZVWxbt+Ex+g0fVaTkk215BD/GFhrviuic+Xk7DpzUmdTT9c1QfsPqg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6558,26 +6576,26 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/test-sequencer': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/test-sequencer': 29.1.0
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
-      babel-jest: 29.0.3_@babel+core@7.19.0
+      babel-jest: 29.1.0_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.0.3
-      jest-environment-node: 29.0.3
+      jest-circus: 29.1.1
+      jest-environment-node: 29.1.1
       jest-get-type: 29.0.0
       jest-regex-util: 29.0.0
-      jest-resolve: 29.0.3
-      jest-runner: 29.0.3
-      jest-util: 29.0.3
-      jest-validate: 29.0.3
+      jest-resolve: 29.1.0
+      jest-runner: 29.1.1
+      jest-util: 29.1.0
+      jest-validate: 29.1.0
       micromatch: 4.0.5
       parse-json: 5.2.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
       slash: 3.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -6591,7 +6609,17 @@ packages:
       chalk: 4.1.2
       diff-sequences: 29.0.0
       jest-get-type: 29.0.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
+    dev: true
+
+  /jest-diff/29.1.0:
+    resolution: {integrity: sha512-ZJyWG30jpVHwxLs8xxR1so4tz6lFARNztnFlxssFpQdakaW0isSx9rAKs/6aQUKQDZ/DgSpY6HjUGLO9xkNdRw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      diff-sequences: 29.0.0
+      jest-get-type: 29.0.0
+      pretty-format: 29.1.0
     dev: true
 
   /jest-docblock/29.0.0:
@@ -6601,28 +6629,28 @@ packages:
       detect-newline: 3.1.0
     dev: true
 
-  /jest-each/29.0.3:
-    resolution: {integrity: sha512-wILhZfESURHHBNvPMJ0lZlYZrvOQJxAo3wNHi+ycr90V7M+uGR9Gh4+4a/BmaZF0XTyZsk4OiYEf3GJN7Ltqzg==}
+  /jest-each/29.1.0:
+    resolution: {integrity: sha512-ELSZV/L4yjqKU2O0bnDTNHlizD4IRS9DX94iAB6QpiPIJsR453dJW7Ka7TXSmxQdc66HNNOhUcQ5utIeVCKGyA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       chalk: 4.1.2
       jest-get-type: 29.0.0
-      jest-util: 29.0.3
-      pretty-format: 29.0.3
+      jest-util: 29.1.0
+      pretty-format: 29.1.0
     dev: true
 
-  /jest-environment-jsdom/29.0.3:
-    resolution: {integrity: sha512-KIGvpm12c71hoYTjL4wC2c8K6KfhOHJqJtaHc1IApu5rG047YWZoEP13BlbucWfzGISBrmli8KFqdhdQEa8Wnw==}
+  /jest-environment-jsdom/29.1.1:
+    resolution: {integrity: sha512-bXmOu26O4W/pszWgaUNCfFBMy8hqSz/SOcGKhqJ2ICYlNEUAXBk77eYkO57/Pmn9kNXVG18A8xwVQlZAzZzJ7Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.3
-      '@jest/fake-timers': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/environment': 29.1.1
+      '@jest/fake-timers': 29.1.1
+      '@jest/types': 29.1.0
       '@types/jsdom': 20.0.0
       '@types/node': 18.7.23
-      jest-mock: 29.0.3
-      jest-util: 29.0.3
+      jest-mock: 29.1.1
+      jest-util: 29.1.0
       jsdom: 20.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -6631,16 +6659,16 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.0.3:
-    resolution: {integrity: sha512-cdZqRCnmIlTXC+9vtvmfiY/40Cj6s2T0czXuq1whvQdmpzAnj4sbqVYuZ4zFHk766xTTJ+Ij3uUqkk8KCfXoyg==}
+  /jest-environment-node/29.1.1:
+    resolution: {integrity: sha512-0nwTca4L2N8iM33A+JMfBdygR6B3N/bcPoLe1hEd9o87KLxDZwKGvpTGSfXpjtyqNQXiaL/3G+YOcSoeq/syPw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.3
-      '@jest/fake-timers': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/environment': 29.1.1
+      '@jest/fake-timers': 29.1.1
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
-      jest-mock: 29.0.3
-      jest-util: 29.0.3
+      jest-mock: 29.1.1
+      jest-util: 29.1.0
     dev: true
 
   /jest-get-type/29.0.0:
@@ -6671,31 +6699,31 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.0.3:
-    resolution: {integrity: sha512-uMqR99+GuBHo0RjRhOE4iA6LmsxEwRdgiIAQgMU/wdT2XebsLDz5obIwLZm/Psj+GwSEQhw9AfAVKGYbh2G55A==}
+  /jest-haste-map/29.1.0:
+    resolution: {integrity: sha512-qn+QVZ6JHzzx6g8XrMrNNvvIWrgVT6FzOoxTP5hQ1vEu6r9use2gOb0sSeC3Xle7eaDLN4DdAazSKnWskK3B/g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       '@types/graceful-fs': 4.1.5
       '@types/node': 18.7.23
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
       jest-regex-util: 29.0.0
-      jest-util: 29.0.3
-      jest-worker: 29.0.3
+      jest-util: 29.1.0
+      jest-worker: 29.1.0
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.2
     dev: true
 
-  /jest-leak-detector/29.0.3:
-    resolution: {integrity: sha512-YfW/G63dAuiuQ3QmQlh8hnqLDe25WFY3eQhuc/Ev1AGmkw5zREblTh7TCSKLoheyggu6G9gxO2hY8p9o6xbaRQ==}
+  /jest-leak-detector/29.1.0:
+    resolution: {integrity: sha512-7ZdlIA2UXBIzXBNadta7pohrrvbD/Jp5T55Ux2DE1BSGul4RglIPHt7cZ0V3ll+ppBC1pGaBiWPBfLcQ2dDc3Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-get-type: 29.0.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
     dev: true
 
   /jest-matcher-utils/29.0.3:
@@ -6705,7 +6733,17 @@ packages:
       chalk: 4.1.2
       jest-diff: 29.0.3
       jest-get-type: 29.0.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
+    dev: true
+
+  /jest-matcher-utils/29.1.0:
+    resolution: {integrity: sha512-pfthsLu27kZg+T1XTUGvox0r3gP3KtqdMPliVd/bs6iDrZ9Z6yJgLbw6zNc4DHtCcyzq9UW0jmszCX8DdFU/wA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      jest-diff: 29.1.0
+      jest-get-type: 29.0.0
+      pretty-format: 29.1.0
     dev: true
 
   /jest-message-util/29.0.3:
@@ -6713,25 +6751,41 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       '@types/stack-utils': 2.0.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
       micromatch: 4.0.5
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
       slash: 3.0.0
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.0.3:
-    resolution: {integrity: sha512-ort9pYowltbcrCVR43wdlqfAiFJXBx8l4uJDsD8U72LgBcetvEp+Qxj1W9ZYgMRoeAo+ov5cnAGF2B6+Oth+ww==}
+  /jest-message-util/29.1.0:
+    resolution: {integrity: sha512-NzGXD9wgCxUy20sIvyOsSA/KzQmkmagOVGE5LnT2juWn+hB88gCQr8N/jpu34CXRIXmV7INwrQVVwhnh72pY5A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
-      '@types/node': 18.7.23
+      '@babel/code-frame': 7.18.6
+      '@jest/types': 29.1.0
+      '@types/stack-utils': 2.0.1
+      chalk: 4.1.2
+      graceful-fs: 4.2.10
+      micromatch: 4.0.5
+      pretty-format: 29.1.0
+      slash: 3.0.0
+      stack-utils: 2.0.5
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.0.3:
+  /jest-mock/29.1.1:
+    resolution: {integrity: sha512-vDe56JmImqt3j8pHcEIkahQbSCnBS49wda0spIl0bkrIM7VDZXjKaes6W28vKZye0atNAcFaj3dxXh0XWjBW4Q==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.1.0
+      '@types/node': 18.7.23
+      jest-util: 29.1.0
+    dev: true
+
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.1.0:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6740,7 +6794,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.0.3
+      jest-resolve: 29.1.0
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6753,84 +6807,84 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.0.3:
-    resolution: {integrity: sha512-KzuBnXqNvbuCdoJpv8EanbIGObk7vUBNt/PwQPPx2aMhlv/jaXpUJsqWYRpP/0a50faMBY7WFFP8S3/CCzwfDw==}
+  /jest-resolve-dependencies/29.1.1:
+    resolution: {integrity: sha512-AMRTJyiK8caRXq3pa9i4oXX6yH+am5v0HwCUq1yk9lxI3ARihyT2OfEySJJo3ER7xpxf3b6isfp1sO6PQY3N0Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.0.0
-      jest-snapshot: 29.0.3
+      jest-snapshot: 29.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.0.3:
-    resolution: {integrity: sha512-toVkia85Y/BPAjJasTC9zIPY6MmVXQPtrCk8SmiheC4MwVFE/CMFlOtMN6jrwPMC6TtNh8+sTMllasFeu1wMPg==}
+  /jest-resolve/29.1.0:
+    resolution: {integrity: sha512-0IETuMI58nbAWwCrtX1QQmenstlWOEdwNS5FXxpEMAs6S5tttFiEoXUwGTAiI152nqoWRUckAgt21FP4wqeZWA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.3
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.0.3
-      jest-util: 29.0.3
-      jest-validate: 29.0.3
+      jest-haste-map: 29.1.0
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.1.0
+      jest-util: 29.1.0
+      jest-validate: 29.1.0
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.0.3:
-    resolution: {integrity: sha512-Usu6VlTOZlCZoNuh3b2Tv/yzDpKqtiNAetG9t3kJuHfUyVMNW7ipCCJOUojzKkjPoaN7Bl1f7Buu6PE0sGpQxw==}
+  /jest-runner/29.1.1:
+    resolution: {integrity: sha512-HqazsMPXB62Zi2oJEl+Ta9aUWAaR4WdT7ow25pcS99PkOsWQoYH+yyaKbAHBUf8NOqPbZ8T4Q8gt8ZBFEJJdVQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.0.3
-      '@jest/environment': 29.0.3
-      '@jest/test-result': 29.0.3
-      '@jest/transform': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/console': 29.1.0
+      '@jest/environment': 29.1.1
+      '@jest/test-result': 29.1.0
+      '@jest/transform': 29.1.0
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
       jest-docblock: 29.0.0
-      jest-environment-node: 29.0.3
-      jest-haste-map: 29.0.3
-      jest-leak-detector: 29.0.3
-      jest-message-util: 29.0.3
-      jest-resolve: 29.0.3
-      jest-runtime: 29.0.3
-      jest-util: 29.0.3
-      jest-watcher: 29.0.3
-      jest-worker: 29.0.3
+      jest-environment-node: 29.1.1
+      jest-haste-map: 29.1.0
+      jest-leak-detector: 29.1.0
+      jest-message-util: 29.1.0
+      jest-resolve: 29.1.0
+      jest-runtime: 29.1.1
+      jest-util: 29.1.0
+      jest-watcher: 29.1.0
+      jest-worker: 29.1.0
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.0.3:
-    resolution: {integrity: sha512-12gZXRQ7ozEeEHKTY45a+YLqzNDR/x4c//X6AqwKwKJPpWM8FY4vwn4VQJOcLRS3Nd1fWwgP7LU4SoynhuUMHQ==}
+  /jest-runtime/29.1.1:
+    resolution: {integrity: sha512-DA2nW5GUAEFUOFztVqX6BOHbb1tUO1iDzlx+bOVdw870UIkv09u3P5nTfK3N+xtqy/fGlLsg7UCzhpEJnwKilg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.0.3
-      '@jest/fake-timers': 29.0.3
-      '@jest/globals': 29.0.3
+      '@jest/environment': 29.1.1
+      '@jest/fake-timers': 29.1.1
+      '@jest/globals': 29.1.1
       '@jest/source-map': 29.0.0
-      '@jest/test-result': 29.0.3
-      '@jest/transform': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/test-result': 29.1.0
+      '@jest/transform': 29.1.0
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.0.3
-      jest-message-util: 29.0.3
-      jest-mock: 29.0.3
+      jest-haste-map: 29.1.0
+      jest-message-util: 29.1.0
+      jest-mock: 29.1.1
       jest-regex-util: 29.0.0
-      jest-resolve: 29.0.3
-      jest-snapshot: 29.0.3
-      jest-util: 29.0.3
+      jest-resolve: 29.1.0
+      jest-snapshot: 29.1.0
+      jest-util: 29.1.0
       slash: 3.0.0
       strip-bom: 4.0.0
     transitivePeerDependencies:
@@ -6845,8 +6899,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.0.3:
-    resolution: {integrity: sha512-52q6JChm04U3deq+mkQ7R/7uy7YyfVIrebMi6ZkBoDJ85yEjm/sJwdr1P0LOIEHmpyLlXrxy3QP0Zf5J2kj0ew==}
+  /jest-snapshot/29.1.0:
+    resolution: {integrity: sha512-nHZoA+hpbFlkyV8uLoLJQ/80DLi3c6a5zeELgfSZ5bZj+eljqULr79KBQakp5xyH3onezf4k+K+2/Blk5/1O+g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -6855,23 +6909,23 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
       '@babel/traverse': 7.19.0
       '@babel/types': 7.19.0
-      '@jest/expect-utils': 29.0.3
-      '@jest/transform': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/expect-utils': 29.1.0
+      '@jest/transform': 29.1.0
+      '@jest/types': 29.1.0
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
       chalk: 4.1.2
-      expect: 29.0.3
+      expect: 29.1.0
       graceful-fs: 4.2.10
-      jest-diff: 29.0.3
+      jest-diff: 29.1.0
       jest-get-type: 29.0.0
-      jest-haste-map: 29.0.3
-      jest-matcher-utils: 29.0.3
-      jest-message-util: 29.0.3
-      jest-util: 29.0.3
+      jest-haste-map: 29.1.0
+      jest-matcher-utils: 29.1.0
+      jest-message-util: 29.1.0
+      jest-util: 29.1.0
       natural-compare: 1.4.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -6893,11 +6947,11 @@ packages:
       micromatch: 4.0.5
     dev: true
 
-  /jest-util/29.0.3:
-    resolution: {integrity: sha512-Q0xaG3YRG8QiTC4R6fHjHQPaPpz9pJBEi0AeOE4mQh/FuWOijFjGXMMOfQEaU9i3z76cNR7FobZZUQnL6IyfdQ==}
+  /jest-util/29.1.0:
+    resolution: {integrity: sha512-5haD8egMAEAq/e8ritN2Gr1WjLYtXi4udAIZB22GnKlv/2MHkbCjcyjgDBmyezAMMeQKGfoaaDsWCmVlnHZ1WQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6905,19 +6959,19 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.0.3:
-    resolution: {integrity: sha512-OebiqqT6lK8cbMPtrSoS3aZP4juID762lZvpf1u+smZnwTEBCBInan0GAIIhv36MxGaJvmq5uJm7dl5gVt+Zrw==}
+  /jest-validate/29.1.0:
+    resolution: {integrity: sha512-EQKRweSxmIJelCdirpuVkeCS1rSNXJFtSGEeSRFwH39QGioy7qKRSY8XBB4qFiappbsvgHnH0V6Iq5ASs11knA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.0.3
+      '@jest/types': 29.1.0
       camelcase: 6.3.0
       chalk: 4.1.2
       jest-get-type: 29.0.0
       leven: 3.1.0
-      pretty-format: 29.0.3
+      pretty-format: 29.1.0
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.0.3:
+  /jest-watch-typeahead/2.2.0_jest@29.1.1:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6925,7 +6979,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.0.3_@types+node@18.7.23
+      jest: 29.1.1_@types+node@18.7.23
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6937,13 +6991,27 @@ packages:
     resolution: {integrity: sha512-tQX9lU91A+9tyUQKUMp0Ns8xAcdhC9fo73eqA3LFxP2bSgiF49TNcc+vf3qgGYYK9qRjFpXW9+4RgF/mbxyOOw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/test-result': 29.1.0
+      '@jest/types': 29.1.0
       '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.0.3
+      jest-util: 29.1.0
+      string-length: 4.0.2
+    dev: true
+
+  /jest-watcher/29.1.0:
+    resolution: {integrity: sha512-JXw7+VpLSf+2yfXlux1/xR65fMn//0pmiXd6EtQWySS9233aA+eGS+8Y5o2imiJ25JBKdG8T45+s78CNQ71Fbg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/test-result': 29.1.0
+      '@jest/types': 29.1.0
+      '@types/node': 18.7.23
+      ansi-escapes: 4.3.2
+      chalk: 4.1.2
+      emittery: 0.10.2
+      jest-util: 29.1.0
       string-length: 4.0.2
     dev: true
 
@@ -6956,8 +7024,8 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.0.3:
-    resolution: {integrity: sha512-Tl/YWUugQOjoTYwjKdfJWkSOfhufJHO5LhXTSZC3TRoQKO+fuXnZAdoXXBlpLXKGODBL3OvdUasfDD4PcMe6ng==}
+  /jest-worker/29.1.0:
+    resolution: {integrity: sha512-yr7RFRAxI+vhL/cGB9B0FhD+QfaWh1qSxurx7gLP16dfmqhG8w75D/CQFU8ZetvhiQqLZh8X0C4rxwsZy6HITQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 18.7.23
@@ -6965,8 +7033,8 @@ packages:
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.0.3_@types+node@18.7.23:
-    resolution: {integrity: sha512-ElgUtJBLgXM1E8L6K1RW1T96R897YY/3lRYqq9uVcPWtP2AAl/nQ16IYDh/FzQOOQ12VEuLdcPU83mbhG2C3PQ==}
+  /jest/29.1.1_@types+node@18.7.23:
+    resolution: {integrity: sha512-Doe41PZ8MvGLtOZIW2RIVu94wa7jm/N775BBloVXk/G/vV6VYnDCOxBwrqekEgrd3Pn/bv8b5UdB2x0pAoQpwQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6975,10 +7043,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.0.3
-      '@jest/types': 29.0.3
+      '@jest/core': 29.1.1
+      '@jest/types': 29.1.0
       import-local: 3.1.0
-      jest-cli: 29.0.3_@types+node@18.7.23
+      jest-cli: 29.1.1_@types+node@18.7.23
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -7880,6 +7948,15 @@ packages:
       react-is: 18.2.0
     dev: true
 
+  /pretty-format/29.1.0:
+    resolution: {integrity: sha512-dZ21z0UjKVSiEkrPAt2nJnGfrtYMFBlNW4wTkJsIp9oB5A8SUQ8DuJ9EUgAvYyNfMeoGmKiDnpJvM489jkzdSQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/schemas': 29.0.0
+      ansi-styles: 5.2.0
+      react-is: 18.2.0
+    dev: true
+
   /prompts/2.4.2:
     resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
     engines: {node: '>= 6'}

From 70bf33c9e3b65844267ae1b6831d18ed561e1754 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Oct 2022 06:31:19 +1000
Subject: [PATCH 079/263] build(deps): update jest monorepo (#4108)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   6 +-
 web/pnpm-lock.yaml | 573 +++++++++++++++++++++++----------------------
 2 files changed, 290 insertions(+), 289 deletions(-)

diff --git a/web/package.json b/web/package.json
index d75e3f825..f7c6a17c5 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.1.0",
+    "@types/jest": "29.1.1",
     "@types/node": "18.7.23",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.8",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.1.1",
-    "jest-environment-jsdom": "29.1.1",
+    "jest": "29.1.2",
+    "jest-environment-jsdom": "29.1.2",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index f4bc9ec5d..bbe0a0d2d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.7
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.1.0
+  '@types/jest': 29.1.1
   '@types/node': 18.7.23
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -43,8 +43,8 @@ specifiers:
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.4
-  jest: 29.1.1
-  jest-environment-jsdom: 29.1.1
+  jest: 29.1.2
+  jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -97,7 +97,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.1.0
+  '@types/jest': 29.1.1
   '@types/node': 18.7.23
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.24.0
   eslint-config-prettier: 8.5.0_eslint@8.24.0
-  eslint-config-react-app: 7.0.1_6t74nvisbf4pgujetkfzk5tbmy
+  eslint-config-react-app: 7.0.1_wolz5gfpehnta75zn5jkwtivci
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
   eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.1.1_@types+node@18.7.23
-  jest-environment-jsdom: 29.1.1
+  jest: 29.1.2_@types+node@18.7.23
+  jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.1.1
+  jest-watch-typeahead: 2.2.0_jest@29.1.2
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -2502,20 +2502,20 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /@jest/console/29.1.0:
-    resolution: {integrity: sha512-yNoFMuAsXTP8OyweaMaIoa6Px6rJkbbG7HtgYKGP3CY7lE7ADRA0Fn5ad9O+KefKcaf6W9rywKpCWOw21WMsAw==}
+  /@jest/console/29.1.2:
+    resolution: {integrity: sha512-ujEBCcYs82BTmRxqfHMQggSlkUZP63AE5YEaTPj7eFyJOzukkTorstOUC7L6nE3w5SYadGVAnTsQ/ZjTGL0qYQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       chalk: 4.1.2
-      jest-message-util: 29.1.0
-      jest-util: 29.1.0
+      jest-message-util: 29.1.2
+      jest-util: 29.1.2
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.1.1:
-    resolution: {integrity: sha512-ppym+PLiuSmvU9ufXVb/8OtHUPcjW+bBlb8CLh6oMATgJtCE3fjDYrzJi5u1uX8q9jbmtQ7VADKJKIlp68zi3A==}
+  /@jest/core/29.1.2:
+    resolution: {integrity: sha512-sCO2Va1gikvQU2ynDN8V4+6wB7iVrD2CvT0zaRst4rglf56yLly0NQ9nuRRAWFeimRf+tCdFsb1Vk1N9LrrMPA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2523,11 +2523,11 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/console': 29.1.0
-      '@jest/reporters': 29.1.0
-      '@jest/test-result': 29.1.0
-      '@jest/transform': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/console': 29.1.2
+      '@jest/reporters': 29.1.2
+      '@jest/test-result': 29.1.2
+      '@jest/transform': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
@@ -2535,20 +2535,20 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.1.1_@types+node@18.7.23
-      jest-haste-map: 29.1.0
-      jest-message-util: 29.1.0
+      jest-config: 29.1.2_@types+node@18.7.23
+      jest-haste-map: 29.1.2
+      jest-message-util: 29.1.2
       jest-regex-util: 29.0.0
-      jest-resolve: 29.1.0
-      jest-resolve-dependencies: 29.1.1
-      jest-runner: 29.1.1
-      jest-runtime: 29.1.1
-      jest-snapshot: 29.1.0
-      jest-util: 29.1.0
-      jest-validate: 29.1.0
-      jest-watcher: 29.1.0
+      jest-resolve: 29.1.2
+      jest-resolve-dependencies: 29.1.2
+      jest-runner: 29.1.2
+      jest-runtime: 29.1.2
+      jest-snapshot: 29.1.2
+      jest-util: 29.1.2
+      jest-validate: 29.1.2
+      jest-watcher: 29.1.2
       micromatch: 4.0.5
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
       slash: 3.0.0
       strip-ansi: 6.0.1
     transitivePeerDependencies:
@@ -2556,21 +2556,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.1.1:
-    resolution: {integrity: sha512-69WULhTD38UcjvLGRAnnwC5hDt35ZC91ZwnvWipNOAOSaQNT32uKYL/TVCT3tncB9L1D++LOmBbYhTYP4TLuuQ==}
+  /@jest/environment/29.1.2:
+    resolution: {integrity: sha512-rG7xZ2UeOfvOVzoLIJ0ZmvPl4tBEQ2n73CZJSlzUjPw4or1oSWC0s0Rk0ZX+pIBJ04aVr6hLWFn1DFtrnf8MhQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.1.1
-      '@jest/types': 29.1.0
+      '@jest/fake-timers': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
-      jest-mock: 29.1.1
-    dev: true
-
-  /@jest/expect-utils/29.0.3:
-    resolution: {integrity: sha512-i1xUkau7K/63MpdwiRqaxgZOjxYs4f0WMTGJnYwUKubsNRZSeQbLorS7+I4uXVF9KQ5r61BUPAUMZ7Lf66l64Q==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      jest-get-type: 29.0.0
+      jest-mock: 29.1.2
     dev: true
 
   /@jest/expect-utils/29.1.0:
@@ -2580,42 +2573,49 @@ packages:
       jest-get-type: 29.0.0
     dev: true
 
-  /@jest/expect/29.1.0:
-    resolution: {integrity: sha512-qWQttxE5rEwzvDW9G3f0o8chu1EKvIfsMQDeRlXMLCtsDS94ckcqEMNgbKKz0NYlZ45xrIoy+/pngt3ZFr/2zw==}
+  /@jest/expect-utils/29.1.2:
+    resolution: {integrity: sha512-4a48bhKfGj/KAH39u0ppzNTABXQ8QPccWAFUFobWBaEMSMp+sB31Z2fK/l47c4a/Mu1po2ffmfAIPxXbVTXdtg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.1.0
-      jest-snapshot: 29.1.0
+      jest-get-type: 29.0.0
+    dev: true
+
+  /@jest/expect/29.1.2:
+    resolution: {integrity: sha512-FXw/UmaZsyfRyvZw3M6POgSNqwmuOXJuzdNiMWW9LCYo0GRoRDhg+R5iq5higmRTHQY7hx32+j7WHwinRmoILQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      expect: 29.1.2
+      jest-snapshot: 29.1.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.1.1:
-    resolution: {integrity: sha512-5wTGObRfL/OjzEz0v2ShXlzeJFJw8mO6ByMBwmPLd6+vkdPcmIpCvASG/PR/g8DpchSIEeDXCxQADojHxuhX8g==}
+  /@jest/fake-timers/29.1.2:
+    resolution: {integrity: sha512-GppaEqS+QQYegedxVMpCe2xCXxxeYwQ7RsNx55zc8f+1q1qevkZGKequfTASI7ejmg9WwI+SJCrHe9X11bLL9Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.7.23
-      jest-message-util: 29.1.0
-      jest-mock: 29.1.1
-      jest-util: 29.1.0
+      jest-message-util: 29.1.2
+      jest-mock: 29.1.2
+      jest-util: 29.1.2
     dev: true
 
-  /@jest/globals/29.1.1:
-    resolution: {integrity: sha512-yTiusxeEHjXwmo3guWlN31a1harU8zekLBMlZpOZ+84rfO3HDrkNZLTfd/YaHF8CrwlNCFpDGNSQCH8WkklH/Q==}
+  /@jest/globals/29.1.2:
+    resolution: {integrity: sha512-uMgfERpJYoQmykAd0ffyMq8wignN4SvLUG6orJQRe9WAlTRc9cdpCaE/29qurXixYJVZWUqIBXhSk8v5xN1V9g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.1
-      '@jest/expect': 29.1.0
-      '@jest/types': 29.1.0
-      jest-mock: 29.1.1
+      '@jest/environment': 29.1.2
+      '@jest/expect': 29.1.2
+      '@jest/types': 29.1.2
+      jest-mock: 29.1.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.1.0:
-    resolution: {integrity: sha512-szSjHjVuBQ7aZUdBzTicCoQAAQsQFLk+/PtMfO0RQxL5mQ1iw+PSKOpyvMZcA5T6bH9pIapue5U9UCrxfOtL3w==}
+  /@jest/reporters/29.1.2:
+    resolution: {integrity: sha512-X4fiwwyxy9mnfpxL0g9DD0KcTmEIqP0jUdnc2cfa9riHy+I6Gwwp5vOZiwyg0vZxfSDxrOlK9S4+340W4d+DAA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2624,10 +2624,10 @@ packages:
         optional: true
     dependencies:
       '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.1.0
-      '@jest/test-result': 29.1.0
-      '@jest/transform': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/console': 29.1.2
+      '@jest/test-result': 29.1.2
+      '@jest/transform': 29.1.2
+      '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.7.23
       chalk: 4.1.2
@@ -2640,9 +2640,9 @@ packages:
       istanbul-lib-report: 3.0.0
       istanbul-lib-source-maps: 4.0.1
       istanbul-reports: 3.1.5
-      jest-message-util: 29.1.0
-      jest-util: 29.1.0
-      jest-worker: 29.1.0
+      jest-message-util: 29.1.2
+      jest-util: 29.1.2
+      jest-worker: 29.1.2
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
@@ -2668,23 +2668,23 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /@jest/test-result/29.1.0:
-    resolution: {integrity: sha512-RMBhPlw1Qfc2bKSf3RFPCyFSN7cfWVSTxRD8JrnvqdqgaDgrq4aGJT1A/V2+5Vq9bqBd187FpaxGTQ4zLrt08g==}
+  /@jest/test-result/29.1.2:
+    resolution: {integrity: sha512-jjYYjjumCJjH9hHCoMhA8PCl1OxNeGgAoZ7yuGYILRJX9NjgzTN0pCT5qAoYR4jfOP8htIByvAlz9vfNSSBoVg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/console': 29.1.2
+      '@jest/types': 29.1.2
       '@types/istanbul-lib-coverage': 2.0.4
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.1.0:
-    resolution: {integrity: sha512-1diQfwNhBAte+x3TmyfWloxT1C8GcPEPEZ4BZjmELBK2j3cdqi0DofoJUxBDDUBBnakbv8ce0B7CIzprsupPSA==}
+  /@jest/test-sequencer/29.1.2:
+    resolution: {integrity: sha512-fU6dsUqqm8sA+cd85BmeF7Gu9DsXVWFdGn9taxM6xN1cKdcP/ivSgXh5QucFRFz1oZxKv3/9DYYbq0ULly3P/Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.1.0
+      '@jest/test-result': 29.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.0
+      jest-haste-map: 29.1.2
       slash: 3.0.0
     dev: true
 
@@ -2711,21 +2711,21 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.1.0:
-    resolution: {integrity: sha512-NI1zd62KgM0lW6rWMIZDx52dfTIDd+cnLQNahH0YhH7TVmQVigumJ6jszuhAzvKHGm55P2Fozcglb5sGMfFp3Q==}
+  /@jest/transform/29.1.2:
+    resolution: {integrity: sha512-2uaUuVHTitmkx1tHF+eBjb4p7UuzBG7SXIaA/hNIkaMP6K+gXYGxP38ZcrofzqN0HeZ7A90oqsOa97WU7WZkSw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 1.8.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.0
+      jest-haste-map: 29.1.2
       jest-regex-util: 29.0.0
-      jest-util: 29.1.0
+      jest-util: 29.1.2
       micromatch: 4.0.5
       pirates: 4.0.5
       slash: 3.0.0
@@ -2745,8 +2745,8 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@jest/types/29.1.0:
-    resolution: {integrity: sha512-lE30u3z4lbTOqf5D7fDdoco3Qd8H6F/t73nLOswU4x+7VhgDQMX5y007IMqrKjFHdnpslaYymVFhWX+ttXNARQ==}
+  /@jest/types/29.1.2:
+    resolution: {integrity: sha512-DcXGtoTykQB5jiwCmVr8H4vdg2OJhQex3qPkG+ISyDO7xQXbt/4R6dowcRyPemRnkH7JoHvZuxPBdlq+9JxFCg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -3358,11 +3358,11 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.1.0:
-    resolution: {integrity: sha512-CqlKkMNaUhFSRvqVKniNhbcy9fc/Rj2cmFD5t8Jtu4HlHzSit27h7XKfP5kkxBeROQ8WAvQQmy93FIz9or8jKg==}
+  /@types/jest/29.1.1:
+    resolution: {integrity: sha512-U9Ey07dGWl6fUFaIaUQUKWG5NoKi/zizeVQCGV8s4nSU0jPgqphVZvS64+8BtWYvrc3ZGw6wo943NSYPxkrp/g==}
     dependencies:
-      expect: 29.0.3
-      pretty-format: 29.0.3
+      expect: 29.1.0
+      pretty-format: 29.1.0
     dev: true
 
   /@types/jsdom/20.0.0:
@@ -3448,7 +3448,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.1.0
+      '@types/jest': 29.1.1
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -3977,8 +3977,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.1.0_@babel+core@7.19.0:
-    resolution: {integrity: sha512-0XiBgPRhMSng+ThuXz0M/WpOeml/q5S4BFIaDS5uQb+lCjOzd0OfYEN4hWte5fDy7SZ6rNmEi16UpWGurSg2nQ==}
+  /babel-jest/29.1.2_@babel+core@7.19.0:
+    resolution: {integrity: sha512-IuG+F3HTHryJb7gacC7SQ59A9kO56BctUsT67uJHp1mMCHUOMXpDwOHWGifWqdWVknN2WNkCVQELPjXx0aLJ9Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -3987,7 +3987,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/transform': 29.1.0
+      '@jest/transform': 29.1.2
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.0.2_@babel+core@7.19.0
@@ -5143,7 +5143,7 @@ packages:
       eslint: 8.24.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_6t74nvisbf4pgujetkfzk5tbmy:
+  /eslint-config-react-app/7.0.1_wolz5gfpehnta75zn5jkwtivci:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5163,7 +5163,7 @@ packages:
       eslint: 8.24.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
       eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
-      eslint-plugin-jest: 25.7.0_uavozi2kzgf3sm5idxz25jl4nm
+      eslint-plugin-jest: 25.7.0_xos47mdsd2fezepdqjjkf4gw5u
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
       eslint-plugin-react: 7.31.8_eslint@8.24.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
@@ -5287,7 +5287,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_uavozi2kzgf3sm5idxz25jl4nm:
+  /eslint-plugin-jest/25.7.0_xos47mdsd2fezepdqjjkf4gw5u:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5303,7 +5303,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
-      jest: 29.1.1_@types+node@18.7.23
+      jest: 29.1.2_@types+node@18.7.23
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5581,17 +5581,6 @@ packages:
       - supports-color
     dev: true
 
-  /expect/29.0.3:
-    resolution: {integrity: sha512-t8l5DTws3212VbmPL+tBFXhjRHLmctHB0oQbL8eUc6S7NzZtYUhycrFO9mkxA0ZUC6FAWdNi7JchJSkODtcu1Q==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/expect-utils': 29.0.3
-      jest-get-type: 29.0.0
-      jest-matcher-utils: 29.0.3
-      jest-message-util: 29.0.3
-      jest-util: 29.1.0
-    dev: true
-
   /expect/29.1.0:
     resolution: {integrity: sha512-1NCfR0FEArn9Vq1KEjhPd1rggRLiWgo87gfMK4iKn6DcVzJBRMyDNX22hyND5KiSRPIPQ5KtsY6HLxsQ0MU86w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -5600,7 +5589,18 @@ packages:
       jest-get-type: 29.0.0
       jest-matcher-utils: 29.1.0
       jest-message-util: 29.1.0
-      jest-util: 29.1.0
+      jest-util: 29.1.2
+    dev: true
+
+  /expect/29.1.2:
+    resolution: {integrity: sha512-AuAGn1uxva5YBbBlXb+2JPxJRuemZsmlGcapPXWNSBNsQtAULfjioREGBWuI0EOvYUKjDnrCy8PW5Zlr1md5mw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/expect-utils': 29.1.2
+      jest-get-type: 29.0.0
+      jest-matcher-utils: 29.1.2
+      jest-message-util: 29.1.2
+      jest-util: 29.1.2
     dev: true
 
   /extend-shallow/2.0.1:
@@ -6508,35 +6508,35 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.1.1:
-    resolution: {integrity: sha512-Ii+3JIeLF3z8j2E7fPSjPjXJLBdbAcZyfEiALRQ1Fk+FWTIfuEfZrZcjSaBdz/k/waoq+bPf9x/vBCXIAyLLEQ==}
+  /jest-circus/29.1.2:
+    resolution: {integrity: sha512-ajQOdxY6mT9GtnfJRZBRYS7toNIJayiiyjDyoZcnvPRUPwJ58JX0ci0PKAKUo2C1RyzlHw0jabjLGKksO42JGA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.1
-      '@jest/expect': 29.1.0
-      '@jest/test-result': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/environment': 29.1.2
+      '@jest/expect': 29.1.2
+      '@jest/test-result': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
       is-generator-fn: 2.1.0
-      jest-each: 29.1.0
-      jest-matcher-utils: 29.1.0
-      jest-message-util: 29.1.0
-      jest-runtime: 29.1.1
-      jest-snapshot: 29.1.0
-      jest-util: 29.1.0
+      jest-each: 29.1.2
+      jest-matcher-utils: 29.1.2
+      jest-message-util: 29.1.2
+      jest-runtime: 29.1.2
+      jest-snapshot: 29.1.2
+      jest-util: 29.1.2
       p-limit: 3.1.0
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
       slash: 3.0.0
       stack-utils: 2.0.5
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.1_@types+node@18.7.23:
-    resolution: {integrity: sha512-nz/JNtqDFf49R2KgeZ9+6Zl1uxSuRsg/tICC+DHMh+bQ0co6QqBPWKg3FtW4534bs8/J2YqFC2Lct9DZR24z0Q==}
+  /jest-cli/29.1.2_@types+node@18.7.23:
+    resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6545,16 +6545,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.1.1
-      '@jest/test-result': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/core': 29.1.2
+      '@jest/test-result': 29.1.2
+      '@jest/types': 29.1.2
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.1_@types+node@18.7.23
-      jest-util: 29.1.0
-      jest-validate: 29.1.0
+      jest-config: 29.1.2_@types+node@18.7.23
+      jest-util: 29.1.2
+      jest-validate: 29.1.2
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6563,8 +6563,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.1_@types+node@18.7.23:
-    resolution: {integrity: sha512-o2iZrQMOiF54zOw1kOcJGmfKzAW+V2ajZVWxbt+Ex+g0fVaTkk215BD/GFhrviuic+Xk7DpzUmdTT9c1QfsPqg==}
+  /jest-config/29.1.2_@types+node@18.7.23:
+    resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6576,42 +6576,32 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/test-sequencer': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/test-sequencer': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
-      babel-jest: 29.1.0_@babel+core@7.19.0
+      babel-jest: 29.1.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.1.1
-      jest-environment-node: 29.1.1
+      jest-circus: 29.1.2
+      jest-environment-node: 29.1.2
       jest-get-type: 29.0.0
       jest-regex-util: 29.0.0
-      jest-resolve: 29.1.0
-      jest-runner: 29.1.1
-      jest-util: 29.1.0
-      jest-validate: 29.1.0
+      jest-resolve: 29.1.2
+      jest-runner: 29.1.2
+      jest-util: 29.1.2
+      jest-validate: 29.1.2
       micromatch: 4.0.5
       parse-json: 5.2.0
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
       slash: 3.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-diff/29.0.3:
-    resolution: {integrity: sha512-+X/AIF5G/vX9fWK+Db9bi9BQas7M9oBME7egU7psbn4jlszLFCu0dW63UgeE6cs/GANq4fLaT+8sGHQQ0eCUfg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      diff-sequences: 29.0.0
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.0
-    dev: true
-
   /jest-diff/29.1.0:
     resolution: {integrity: sha512-ZJyWG30jpVHwxLs8xxR1so4tz6lFARNztnFlxssFpQdakaW0isSx9rAKs/6aQUKQDZ/DgSpY6HjUGLO9xkNdRw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6619,7 +6609,17 @@ packages:
       chalk: 4.1.2
       diff-sequences: 29.0.0
       jest-get-type: 29.0.0
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
+    dev: true
+
+  /jest-diff/29.1.2:
+    resolution: {integrity: sha512-4GQts0aUopVvecIT4IwD/7xsBaMhKTYoM4/njE/aVw9wpw+pIUVp8Vab/KnSzSilr84GnLBkaP3JLDnQYCKqVQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      diff-sequences: 29.0.0
+      jest-get-type: 29.0.0
+      pretty-format: 29.1.2
     dev: true
 
   /jest-docblock/29.0.0:
@@ -6629,28 +6629,28 @@ packages:
       detect-newline: 3.1.0
     dev: true
 
-  /jest-each/29.1.0:
-    resolution: {integrity: sha512-ELSZV/L4yjqKU2O0bnDTNHlizD4IRS9DX94iAB6QpiPIJsR453dJW7Ka7TXSmxQdc66HNNOhUcQ5utIeVCKGyA==}
+  /jest-each/29.1.2:
+    resolution: {integrity: sha512-AmTQp9b2etNeEwMyr4jc0Ql/LIX/dhbgP21gHAizya2X6rUspHn2gysMXaj6iwWuOJ2sYRgP8c1P4cXswgvS1A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       chalk: 4.1.2
       jest-get-type: 29.0.0
-      jest-util: 29.1.0
-      pretty-format: 29.1.0
+      jest-util: 29.1.2
+      pretty-format: 29.1.2
     dev: true
 
-  /jest-environment-jsdom/29.1.1:
-    resolution: {integrity: sha512-bXmOu26O4W/pszWgaUNCfFBMy8hqSz/SOcGKhqJ2ICYlNEUAXBk77eYkO57/Pmn9kNXVG18A8xwVQlZAzZzJ7Q==}
+  /jest-environment-jsdom/29.1.2:
+    resolution: {integrity: sha512-D+XNIKia5+uDjSMwL/G1l6N9MCb7LymKI8FpcLo7kkISjc/Sa9w+dXXEa7u1Wijo3f8sVLqfxdGqYtRhmca+Xw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.1
-      '@jest/fake-timers': 29.1.1
-      '@jest/types': 29.1.0
+      '@jest/environment': 29.1.2
+      '@jest/fake-timers': 29.1.2
+      '@jest/types': 29.1.2
       '@types/jsdom': 20.0.0
       '@types/node': 18.7.23
-      jest-mock: 29.1.1
-      jest-util: 29.1.0
+      jest-mock: 29.1.2
+      jest-util: 29.1.2
       jsdom: 20.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -6659,16 +6659,16 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.1.1:
-    resolution: {integrity: sha512-0nwTca4L2N8iM33A+JMfBdygR6B3N/bcPoLe1hEd9o87KLxDZwKGvpTGSfXpjtyqNQXiaL/3G+YOcSoeq/syPw==}
+  /jest-environment-node/29.1.2:
+    resolution: {integrity: sha512-C59yVbdpY8682u6k/lh8SUMDJPbOyCHOTgLVVi1USWFxtNV+J8fyIwzkg+RJIVI30EKhKiAGNxYaFr3z6eyNhQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.1
-      '@jest/fake-timers': 29.1.1
-      '@jest/types': 29.1.0
+      '@jest/environment': 29.1.2
+      '@jest/fake-timers': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
-      jest-mock: 29.1.1
-      jest-util: 29.1.0
+      jest-mock: 29.1.2
+      jest-util: 29.1.2
     dev: true
 
   /jest-get-type/29.0.0:
@@ -6699,41 +6699,31 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.1.0:
-    resolution: {integrity: sha512-qn+QVZ6JHzzx6g8XrMrNNvvIWrgVT6FzOoxTP5hQ1vEu6r9use2gOb0sSeC3Xle7eaDLN4DdAazSKnWskK3B/g==}
+  /jest-haste-map/29.1.2:
+    resolution: {integrity: sha512-xSjbY8/BF11Jh3hGSPfYTa/qBFrm3TPM7WU8pU93m2gqzORVLkHFWvuZmFsTEBPRKndfewXhMOuzJNHyJIZGsw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       '@types/graceful-fs': 4.1.5
       '@types/node': 18.7.23
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
       jest-regex-util: 29.0.0
-      jest-util: 29.1.0
-      jest-worker: 29.1.0
+      jest-util: 29.1.2
+      jest-worker: 29.1.2
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.2
     dev: true
 
-  /jest-leak-detector/29.1.0:
-    resolution: {integrity: sha512-7ZdlIA2UXBIzXBNadta7pohrrvbD/Jp5T55Ux2DE1BSGul4RglIPHt7cZ0V3ll+ppBC1pGaBiWPBfLcQ2dDc3Q==}
+  /jest-leak-detector/29.1.2:
+    resolution: {integrity: sha512-TG5gAZJpgmZtjb6oWxBLf2N6CfQ73iwCe6cofu/Uqv9iiAm6g502CAnGtxQaTfpHECBdVEMRBhomSXeLnoKjiQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-get-type: 29.0.0
-      pretty-format: 29.1.0
-    dev: true
-
-  /jest-matcher-utils/29.0.3:
-    resolution: {integrity: sha512-RsR1+cZ6p1hDV4GSCQTg+9qjeotQCgkaleIKLK7dm+U4V/H2bWedU3RAtLm8+mANzZ7eDV33dMar4pejd7047w==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.0.3
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
     dev: true
 
   /jest-matcher-utils/29.1.0:
@@ -6746,19 +6736,14 @@ packages:
       pretty-format: 29.1.0
     dev: true
 
-  /jest-message-util/29.0.3:
-    resolution: {integrity: sha512-7T8JiUTtDfppojosORAflABfLsLKMLkBHSWkjNQrjIltGoDzNGn7wEPOSfjqYAGTYME65esQzMJxGDjuLBKdOg==}
+  /jest-matcher-utils/29.1.2:
+    resolution: {integrity: sha512-MV5XrD3qYSW2zZSHRRceFzqJ39B2z11Qv0KPyZYxnzDHFeYZGJlgGi0SW+IXSJfOewgJp/Km/7lpcFT+cgZypw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@babel/code-frame': 7.18.6
-      '@jest/types': 29.1.0
-      '@types/stack-utils': 2.0.1
       chalk: 4.1.2
-      graceful-fs: 4.2.10
-      micromatch: 4.0.5
-      pretty-format: 29.1.0
-      slash: 3.0.0
-      stack-utils: 2.0.5
+      jest-diff: 29.1.2
+      jest-get-type: 29.0.0
+      pretty-format: 29.1.2
     dev: true
 
   /jest-message-util/29.1.0:
@@ -6766,7 +6751,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       '@types/stack-utils': 2.0.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
@@ -6776,16 +6761,31 @@ packages:
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.1.1:
-    resolution: {integrity: sha512-vDe56JmImqt3j8pHcEIkahQbSCnBS49wda0spIl0bkrIM7VDZXjKaes6W28vKZye0atNAcFaj3dxXh0XWjBW4Q==}
+  /jest-message-util/29.1.2:
+    resolution: {integrity: sha512-9oJ2Os+Qh6IlxLpmvshVbGUiSkZVc2FK+uGOm6tghafnB2RyjKAxMZhtxThRMxfX1J1SOMhTn9oK3/MutRWQJQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
-      '@types/node': 18.7.23
-      jest-util: 29.1.0
+      '@babel/code-frame': 7.18.6
+      '@jest/types': 29.1.2
+      '@types/stack-utils': 2.0.1
+      chalk: 4.1.2
+      graceful-fs: 4.2.10
+      micromatch: 4.0.5
+      pretty-format: 29.1.2
+      slash: 3.0.0
+      stack-utils: 2.0.5
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.1.0:
+  /jest-mock/29.1.2:
+    resolution: {integrity: sha512-PFDAdjjWbjPUtQPkQufvniXIS3N9Tv7tbibePEjIIprzjgo0qQlyUiVMrT4vL8FaSJo1QXifQUOuPH3HQC/aMA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.1.2
+      '@types/node': 18.7.23
+      jest-util: 29.1.2
+    dev: true
+
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.1.2:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6794,7 +6794,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.1.0
+      jest-resolve: 29.1.2
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6807,84 +6807,84 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.1.1:
-    resolution: {integrity: sha512-AMRTJyiK8caRXq3pa9i4oXX6yH+am5v0HwCUq1yk9lxI3ARihyT2OfEySJJo3ER7xpxf3b6isfp1sO6PQY3N0Q==}
+  /jest-resolve-dependencies/29.1.2:
+    resolution: {integrity: sha512-44yYi+yHqNmH3OoWZvPgmeeiwKxhKV/0CfrzaKLSkZG9gT973PX8i+m8j6pDrTYhhHoiKfF3YUFg/6AeuHw4HQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.0.0
-      jest-snapshot: 29.1.0
+      jest-snapshot: 29.1.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.1.0:
-    resolution: {integrity: sha512-0IETuMI58nbAWwCrtX1QQmenstlWOEdwNS5FXxpEMAs6S5tttFiEoXUwGTAiI152nqoWRUckAgt21FP4wqeZWA==}
+  /jest-resolve/29.1.2:
+    resolution: {integrity: sha512-7fcOr+k7UYSVRJYhSmJHIid3AnDBcLQX3VmT9OSbPWsWz1MfT7bcoerMhADKGvKCoMpOHUQaDHtQoNp/P9JMGg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.0
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.1.0
-      jest-util: 29.1.0
-      jest-validate: 29.1.0
+      jest-haste-map: 29.1.2
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.1.2
+      jest-util: 29.1.2
+      jest-validate: 29.1.2
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.1.1:
-    resolution: {integrity: sha512-HqazsMPXB62Zi2oJEl+Ta9aUWAaR4WdT7ow25pcS99PkOsWQoYH+yyaKbAHBUf8NOqPbZ8T4Q8gt8ZBFEJJdVQ==}
+  /jest-runner/29.1.2:
+    resolution: {integrity: sha512-yy3LEWw8KuBCmg7sCGDIqKwJlULBuNIQa2eFSVgVASWdXbMYZ9H/X0tnXt70XFoGf92W2sOQDOIFAA6f2BG04Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.1.0
-      '@jest/environment': 29.1.1
-      '@jest/test-result': 29.1.0
-      '@jest/transform': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/console': 29.1.2
+      '@jest/environment': 29.1.2
+      '@jest/test-result': 29.1.2
+      '@jest/transform': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
       jest-docblock: 29.0.0
-      jest-environment-node: 29.1.1
-      jest-haste-map: 29.1.0
-      jest-leak-detector: 29.1.0
-      jest-message-util: 29.1.0
-      jest-resolve: 29.1.0
-      jest-runtime: 29.1.1
-      jest-util: 29.1.0
-      jest-watcher: 29.1.0
-      jest-worker: 29.1.0
+      jest-environment-node: 29.1.2
+      jest-haste-map: 29.1.2
+      jest-leak-detector: 29.1.2
+      jest-message-util: 29.1.2
+      jest-resolve: 29.1.2
+      jest-runtime: 29.1.2
+      jest-util: 29.1.2
+      jest-watcher: 29.1.2
+      jest-worker: 29.1.2
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.1.1:
-    resolution: {integrity: sha512-DA2nW5GUAEFUOFztVqX6BOHbb1tUO1iDzlx+bOVdw870UIkv09u3P5nTfK3N+xtqy/fGlLsg7UCzhpEJnwKilg==}
+  /jest-runtime/29.1.2:
+    resolution: {integrity: sha512-jr8VJLIf+cYc+8hbrpt412n5jX3tiXmpPSYTGnwcvNemY+EOuLNiYnHJ3Kp25rkaAcTWOEI4ZdOIQcwYcXIAZw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.1
-      '@jest/fake-timers': 29.1.1
-      '@jest/globals': 29.1.1
+      '@jest/environment': 29.1.2
+      '@jest/fake-timers': 29.1.2
+      '@jest/globals': 29.1.2
       '@jest/source-map': 29.0.0
-      '@jest/test-result': 29.1.0
-      '@jest/transform': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/test-result': 29.1.2
+      '@jest/transform': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.0
-      jest-message-util: 29.1.0
-      jest-mock: 29.1.1
+      jest-haste-map: 29.1.2
+      jest-message-util: 29.1.2
+      jest-mock: 29.1.2
       jest-regex-util: 29.0.0
-      jest-resolve: 29.1.0
-      jest-snapshot: 29.1.0
-      jest-util: 29.1.0
+      jest-resolve: 29.1.2
+      jest-snapshot: 29.1.2
+      jest-util: 29.1.2
       slash: 3.0.0
       strip-bom: 4.0.0
     transitivePeerDependencies:
@@ -6899,8 +6899,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.1.0:
-    resolution: {integrity: sha512-nHZoA+hpbFlkyV8uLoLJQ/80DLi3c6a5zeELgfSZ5bZj+eljqULr79KBQakp5xyH3onezf4k+K+2/Blk5/1O+g==}
+  /jest-snapshot/29.1.2:
+    resolution: {integrity: sha512-rYFomGpVMdBlfwTYxkUp3sjD6usptvZcONFYNqVlaz4EpHPnDvlWjvmOQ9OCSNKqYZqLM2aS3wq01tWujLg7gg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -6909,23 +6909,23 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
       '@babel/traverse': 7.19.0
       '@babel/types': 7.19.0
-      '@jest/expect-utils': 29.1.0
-      '@jest/transform': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/expect-utils': 29.1.2
+      '@jest/transform': 29.1.2
+      '@jest/types': 29.1.2
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
       chalk: 4.1.2
-      expect: 29.1.0
+      expect: 29.1.2
       graceful-fs: 4.2.10
-      jest-diff: 29.1.0
+      jest-diff: 29.1.2
       jest-get-type: 29.0.0
-      jest-haste-map: 29.1.0
-      jest-matcher-utils: 29.1.0
-      jest-message-util: 29.1.0
-      jest-util: 29.1.0
+      jest-haste-map: 29.1.2
+      jest-matcher-utils: 29.1.2
+      jest-message-util: 29.1.2
+      jest-util: 29.1.2
       natural-compare: 1.4.0
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -6947,11 +6947,11 @@ packages:
       micromatch: 4.0.5
     dev: true
 
-  /jest-util/29.1.0:
-    resolution: {integrity: sha512-5haD8egMAEAq/e8ritN2Gr1WjLYtXi4udAIZB22GnKlv/2MHkbCjcyjgDBmyezAMMeQKGfoaaDsWCmVlnHZ1WQ==}
+  /jest-util/29.1.2:
+    resolution: {integrity: sha512-vPCk9F353i0Ymx3WQq3+a4lZ07NXu9Ca8wya6o4Fe4/aO1e1awMMprZ3woPFpKwghEOW+UXgd15vVotuNN9ONQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6959,19 +6959,19 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.1.0:
-    resolution: {integrity: sha512-EQKRweSxmIJelCdirpuVkeCS1rSNXJFtSGEeSRFwH39QGioy7qKRSY8XBB4qFiappbsvgHnH0V6Iq5ASs11knA==}
+  /jest-validate/29.1.2:
+    resolution: {integrity: sha512-k71pOslNlV8fVyI+mEySy2pq9KdXdgZtm7NHrBX8LghJayc3wWZH0Yr0mtYNGaCU4F1OLPXRkwZR0dBm/ClshA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.0
+      '@jest/types': 29.1.2
       camelcase: 6.3.0
       chalk: 4.1.2
       jest-get-type: 29.0.0
       leven: 3.1.0
-      pretty-format: 29.1.0
+      pretty-format: 29.1.2
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.1.1:
+  /jest-watch-typeahead/2.2.0_jest@29.1.2:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6979,7 +6979,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.1_@types+node@18.7.23
+      jest: 29.1.2_@types+node@18.7.23
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6991,27 +6991,27 @@ packages:
     resolution: {integrity: sha512-tQX9lU91A+9tyUQKUMp0Ns8xAcdhC9fo73eqA3LFxP2bSgiF49TNcc+vf3qgGYYK9qRjFpXW9+4RgF/mbxyOOw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/test-result': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.1.0
+      jest-util: 29.1.2
       string-length: 4.0.2
     dev: true
 
-  /jest-watcher/29.1.0:
-    resolution: {integrity: sha512-JXw7+VpLSf+2yfXlux1/xR65fMn//0pmiXd6EtQWySS9233aA+eGS+8Y5o2imiJ25JBKdG8T45+s78CNQ71Fbg==}
+  /jest-watcher/29.1.2:
+    resolution: {integrity: sha512-6JUIUKVdAvcxC6bM8/dMgqY2N4lbT+jZVsxh0hCJRbwkIEnbr/aPjMQ28fNDI5lB51Klh00MWZZeVf27KBUj5w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.1.0
-      '@jest/types': 29.1.0
+      '@jest/test-result': 29.1.2
+      '@jest/types': 29.1.2
       '@types/node': 18.7.23
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.1.0
+      jest-util: 29.1.2
       string-length: 4.0.2
     dev: true
 
@@ -7024,17 +7024,18 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.1.0:
-    resolution: {integrity: sha512-yr7RFRAxI+vhL/cGB9B0FhD+QfaWh1qSxurx7gLP16dfmqhG8w75D/CQFU8ZetvhiQqLZh8X0C4rxwsZy6HITQ==}
+  /jest-worker/29.1.2:
+    resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 18.7.23
+      jest-util: 29.1.2
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.1_@types+node@18.7.23:
-    resolution: {integrity: sha512-Doe41PZ8MvGLtOZIW2RIVu94wa7jm/N775BBloVXk/G/vV6VYnDCOxBwrqekEgrd3Pn/bv8b5UdB2x0pAoQpwQ==}
+  /jest/29.1.2_@types+node@18.7.23:
+    resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7043,10 +7044,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.1.1
-      '@jest/types': 29.1.0
+      '@jest/core': 29.1.2
+      '@jest/types': 29.1.2
       import-local: 3.1.0
-      jest-cli: 29.1.1_@types+node@18.7.23
+      jest-cli: 29.1.2_@types+node@18.7.23
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -7939,8 +7940,8 @@ packages:
       react-is: 17.0.2
     dev: true
 
-  /pretty-format/29.0.3:
-    resolution: {integrity: sha512-cHudsvQr1K5vNVLbvYF/nv3Qy/F/BcEKxGuIeMiVMRHxPOO1RxXooP8g/ZrwAp7Dx+KdMZoOc7NxLHhMrP2f9Q==}
+  /pretty-format/29.1.0:
+    resolution: {integrity: sha512-dZ21z0UjKVSiEkrPAt2nJnGfrtYMFBlNW4wTkJsIp9oB5A8SUQ8DuJ9EUgAvYyNfMeoGmKiDnpJvM489jkzdSQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -7948,8 +7949,8 @@ packages:
       react-is: 18.2.0
     dev: true
 
-  /pretty-format/29.1.0:
-    resolution: {integrity: sha512-dZ21z0UjKVSiEkrPAt2nJnGfrtYMFBlNW4wTkJsIp9oB5A8SUQ8DuJ9EUgAvYyNfMeoGmKiDnpJvM489jkzdSQ==}
+  /pretty-format/29.1.2:
+    resolution: {integrity: sha512-CGJ6VVGXVRP2o2Dorl4mAwwvDWT25luIsYhkyVQW32E4nL+TgW939J7LlKT/npq5Cpq6j3s+sy+13yk7xYpBmg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0

From fea3bd108bceb0041cee9716861768fd81cf6f82 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Oct 2022 06:53:57 +1000
Subject: [PATCH 080/263] build(deps): update traefik docker tag to v2.8.8
 (#4109)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 examples/compose/lite/docker-compose.yml                    | 2 +-
 examples/compose/local/docker-compose.yml                   | 2 +-
 internal/suites/example/compose/traefik2/docker-compose.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/compose/lite/docker-compose.yml b/examples/compose/lite/docker-compose.yml
index f856b6089..b4187cd6c 100644
--- a/examples/compose/lite/docker-compose.yml
+++ b/examples/compose/lite/docker-compose.yml
@@ -44,7 +44,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.8.7
+    image: traefik:v2.8.8
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/examples/compose/local/docker-compose.yml b/examples/compose/local/docker-compose.yml
index 3d3821a2b..11bc35bc7 100644
--- a/examples/compose/local/docker-compose.yml
+++ b/examples/compose/local/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.8.7
+    image: traefik:v2.8.8
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/internal/suites/example/compose/traefik2/docker-compose.yml b/internal/suites/example/compose/traefik2/docker-compose.yml
index dbfc8ee41..dc293e171 100644
--- a/internal/suites/example/compose/traefik2/docker-compose.yml
+++ b/internal/suites/example/compose/traefik2/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   traefik:
-    image: traefik:v2.8.7
+    image: traefik:v2.8.8
     volumes:
       - '/var/run/docker.sock:/var/run/docker.sock'
     labels:

From 034876a2e3923996b6f5be00f882915fd79382fc Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 1 Oct 2022 20:24:31 +1000
Subject: [PATCH 081/263] docs: misc fixes (#4111)

* docs: misc adjustments

* docs: misc adjustments
---
 README.md                                 | 10 +++++-----
 examples/compose/lite/docker-compose.yml  |  1 +
 examples/compose/local/docker-compose.yml |  1 +
 3 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 589de509e..ada435e5e 100644
--- a/README.md
+++ b/README.md
@@ -17,7 +17,7 @@
 
 **Authelia** is an open-source authentication and authorization server providing two-factor authentication and single
 sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies like [nginx],
-[Traefik], [caddy] or [HAProxy] to let them know whether requests should either be allowed or redirected to Authelia's
+[Traefik], [Caddy] or [HAProxy] to let them know whether requests should either be allowed or redirected to Authelia's
 portal for authentication.
 
 Documentation is available at [https://www.authelia.com/](https://www.authelia.com/).
@@ -31,7 +31,7 @@ The following is a simple diagram of the architecture:
 **Authelia** can be installed as a standalone service from the [AUR](https://aur.archlinux.org/packages/authelia/),
 [APT](https://apt.authelia.com/stable/debian/packages/authelia/),
 [FreeBSD Ports](https://svnweb.freebsd.org/ports/head/www/authelia/), or using a
-[Static binary](https://github.com/authelia/authelia/releases/latest),
+[static binary](https://github.com/authelia/authelia/releases/latest),
 [.deb package]((https://github.com/authelia/authelia/releases/latest)), [Docker] or [Kubernetes] either manually or via
 the Helm [Chart](https://charts.authelia.com) (beta) leveraging ingress controllers and ingress configurations.
 
@@ -70,7 +70,7 @@ This is a list of the key features of Authelia:
 * Curated configuration from [LinuxServer](https://www.linuxserver.io/) via their
   [Swag](https://docs.linuxserver.io/general/swag) container as well as a
   [guide](https://blog.linuxserver.io/2020/08/26/setting-up-authelia/).
-* Compatible with [caddy] using the [forward_auth](https://caddyserver.com/docs/caddyfile/directives/forward_auth)
+* Compatible with [Caddy] using the [forward_auth](https://caddyserver.com/docs/caddyfile/directives/forward_auth)
   directive.
 * Kubernetes Support:
   * Compatible with the [ingress-nginx](https://github.com/kubernetes/ingress-nginx), the
@@ -86,7 +86,7 @@ If you want to know more about the roadmap, follow [Roadmap](https://www.autheli
 
 ## Proxy support
 
-Authelia works in combination with [nginx], [Traefik], [caddy] or [HAProxy]. It can be deployed on bare metal with
+Authelia works in combination with [nginx], [Traefik], [Caddy] or [HAProxy]. It can be deployed on bare metal with
 Docker or on top of [Kubernetes].
 
 <p align="center">
@@ -391,7 +391,7 @@ Companies contributing to Authelia via Open Collective will have a special menti
 [config.template.yml]: ./config.template.yml
 [nginx]: https://www.nginx.com/
 [Traefik]: https://traefik.io/
-[caddy]: https://caddyserver.com/
+[Caddy]: https://caddyserver.com/
 [HAProxy]: https://www.haproxy.org/
 [Docker]: https://docker.com/
 [Kubernetes]: https://kubernetes.io/
diff --git a/examples/compose/lite/docker-compose.yml b/examples/compose/lite/docker-compose.yml
index b4187cd6c..061e7e79f 100644
--- a/examples/compose/lite/docker-compose.yml
+++ b/examples/compose/lite/docker-compose.yml
@@ -26,6 +26,7 @@ services:
       - 9091
     restart: unless-stopped
     healthcheck:
+      ## In production the healthcheck section should be commented.
       disable: true
     environment:
       - TZ=Australia/Melbourne
diff --git a/examples/compose/local/docker-compose.yml b/examples/compose/local/docker-compose.yml
index 11bc35bc7..04693a7d0 100644
--- a/examples/compose/local/docker-compose.yml
+++ b/examples/compose/local/docker-compose.yml
@@ -26,6 +26,7 @@ services:
       - 9091
     restart: unless-stopped
     healthcheck:
+      ## In production the healthcheck section should be commented.
       disable: true
     environment:
       - TZ=Australia/Melbourne

From 18a2bde62e10c2221445f13d5ade6424a70c6338 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 1 Oct 2022 20:58:53 +1000
Subject: [PATCH 082/263] feat(web): i18n local storage detector (#3968)

This adds a local storage detector to the language detector. It's a copy of the official localStorage detector without the ability to set the value. The advantage here is the official localStorage detector always sets the localStorage lookup, which means the most appropriate detected language will be set. If newer languages more appropriate appear this would represent a bad UX.
---
 web/src/i18n/detectors/localStorageCustom.ts | 41 ++++++++++++++++++++
 web/src/i18n/index.ts                        | 10 ++++-
 2 files changed, 49 insertions(+), 2 deletions(-)
 create mode 100644 web/src/i18n/detectors/localStorageCustom.ts

diff --git a/web/src/i18n/detectors/localStorageCustom.ts b/web/src/i18n/detectors/localStorageCustom.ts
new file mode 100644
index 000000000..6c48de244
--- /dev/null
+++ b/web/src/i18n/detectors/localStorageCustom.ts
@@ -0,0 +1,41 @@
+import { CustomDetector, DetectorOptions } from "i18next-browser-languagedetector";
+
+let hasLocalStorageSupport: null | boolean = null;
+const testKey = "authelia.test";
+const testValue = "foo";
+
+const localStorageAvailable = () => {
+    if (hasLocalStorageSupport !== null) return hasLocalStorageSupport;
+
+    if (typeof window !== "undefined" && window.localStorage !== null) {
+        hasLocalStorageSupport = true;
+
+        try {
+            window.localStorage.setItem(testKey, testValue);
+            window.localStorage.removeItem(testKey);
+        } catch (e) {
+            hasLocalStorageSupport = false;
+        }
+    }
+
+    return hasLocalStorageSupport;
+};
+
+const LocalStorageCustomDetector: CustomDetector = {
+    name: "localStorageCustom",
+
+    lookup(options: DetectorOptions): string | undefined {
+        let found;
+
+        if (options.lookupLocalStorage && localStorageAvailable()) {
+            const lng = window.localStorage.getItem(options.lookupLocalStorage);
+            if (lng && lng !== "") {
+                found = lng;
+            }
+        }
+
+        return found;
+    },
+};
+
+export default LocalStorageCustomDetector;
diff --git a/web/src/i18n/index.ts b/web/src/i18n/index.ts
index a5cad3724..63cfd5edf 100644
--- a/web/src/i18n/index.ts
+++ b/web/src/i18n/index.ts
@@ -9,17 +9,23 @@ import LanguageDetector from "i18next-browser-languagedetector";
 import Backend from "i18next-http-backend";
 import { initReactI18next } from "react-i18next";
 
+import LocalStorageCustomDetector from "@i18n/detectors/localStorageCustom";
 import { getBasePath } from "@utils/BasePath";
 
 const basePath = getBasePath();
 
+const CustomLanguageDetector = new LanguageDetector();
+
+CustomLanguageDetector.addDetector(LocalStorageCustomDetector);
+
 i18n.use(Backend)
-    .use(LanguageDetector)
+    .use(CustomLanguageDetector)
     .use(initReactI18next)
     .init({
         detection: {
-            order: ["querystring", "navigator"],
+            order: ["querystring", "localStorageCustom", "navigator"],
             lookupQuerystring: "lng",
+            lookupLocalStorage: "lng",
         },
         backend: {
             loadPath: basePath + "/locales/{{lng}}/{{ns}}.json",

From ed7092c59a1059f4f0e40379102f6caedd48ed69 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 1 Oct 2022 21:47:09 +1000
Subject: [PATCH 083/263] feat: envoy support (#3793)

Adds support for Envoy and Istio using the X-Authelia-URL header. The documentation will be published just before the release.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
---
 cmd/authelia-gen/cmd_github.go                |   2 +-
 config.template.yml                           |   2 +-
 internal/configuration/config.template.yml    |   2 +-
 internal/handlers/handler_sign_duo_test.go    |   8 +-
 internal/handlers/handler_sign_totp_test.go   |   6 +-
 internal/handlers/handler_verify.go           |  36 +--
 internal/handlers/handler_verify_test.go      | 135 +++++++++-
 internal/handlers/util.go                     |  26 ++
 internal/middlewares/authelia_context.go      |  10 +
 internal/middlewares/const.go                 |   4 +
 internal/server/handlers.go                   |   3 +
 internal/suites/Envoy/configuration.yml       |  54 ++++
 internal/suites/Envoy/docker-compose.yml      |   9 +
 internal/suites/Envoy/users.yml               |  35 +++
 .../example/compose/envoy/docker-compose.yml  |  12 +
 .../suites/example/compose/envoy/envoy.yaml   | 236 ++++++++++++++++++
 internal/suites/suite_envoy.go                |  84 +++++++
 internal/suites/suite_envoy_test.go           |  39 +++
 18 files changed, 676 insertions(+), 27 deletions(-)
 create mode 100644 internal/handlers/util.go
 create mode 100644 internal/suites/Envoy/configuration.yml
 create mode 100644 internal/suites/Envoy/docker-compose.yml
 create mode 100644 internal/suites/Envoy/users.yml
 create mode 100644 internal/suites/example/compose/envoy/docker-compose.yml
 create mode 100644 internal/suites/example/compose/envoy/envoy.yaml
 create mode 100644 internal/suites/suite_envoy.go
 create mode 100644 internal/suites/suite_envoy_test.go

diff --git a/cmd/authelia-gen/cmd_github.go b/cmd/authelia-gen/cmd_github.go
index 8d8ec2f49..99d80378a 100644
--- a/cmd/authelia-gen/cmd_github.go
+++ b/cmd/authelia-gen/cmd_github.go
@@ -204,7 +204,7 @@ func cmdGitHubIssueTemplatesBugReportRunE(cmd *cobra.Command, args []string) (er
 	data := &tmplIssueTemplateData{
 		Labels:   []string{labelTypeBugUnconfirmed.String(), labelStatusNeedsTriage.String(), labelPriorityNormal.String()},
 		Versions: tagsRecent,
-		Proxies:  []string{"Caddy", "Traefik", "Envoy", "NGINX", "SWAG", "NGINX Proxy Manager", "HAProxy"},
+		Proxies:  []string{"Caddy", "Traefik", "Envoy", "Istio", "NGINX", "SWAG", "NGINX Proxy Manager", "HAProxy"},
 	}
 
 	if err = tmplGitHubIssueTemplateBug.Execute(f, data); err != nil {
diff --git a/config.template.yml b/config.template.yml
index a878e05f4..85f1bea72 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -443,7 +443,7 @@ password_policy:
 ## to anyone. Otherwise restrictions follow the rules defined.
 ##
 ## Note: One can use the wildcard * to match any subdomain.
-## It must stand at the beginning of the pattern. (example: *.mydomain.com)
+## It must stand at the beginning of the pattern. (example: *.example.com)
 ##
 ## Note: You must put patterns containing wildcards between simple quotes for the YAML to be syntactically correct.
 ##
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index a878e05f4..85f1bea72 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -443,7 +443,7 @@ password_policy:
 ## to anyone. Otherwise restrictions follow the rules defined.
 ##
 ## Note: One can use the wildcard * to match any subdomain.
-## It must stand at the beginning of the pattern. (example: *.mydomain.com)
+## It must stand at the beginning of the pattern. (example: *.example.com)
 ##
 ## Note: You must put patterns containing wildcards between simple quotes for the YAML to be syntactically correct.
 ##
diff --git a/internal/handlers/handler_sign_duo_test.go b/internal/handlers/handler_sign_duo_test.go
index 201bb521f..771fc49bf 100644
--- a/internal/handlers/handler_sign_duo_test.go
+++ b/internal/handlers/handler_sign_duo_test.go
@@ -614,14 +614,14 @@ func (s *SecondFactorDuoPostSuite) TestShouldRedirectUserToSafeTargetURL() {
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
 	bodyBytes, err := json.Marshal(signDuoRequestBody{
-		TargetURL: "https://example.com",
+		TargetURL: "https://mydomain.example.com",
 	})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
 	DuoPOST(duoMock)(s.mock.Ctx)
 	s.mock.Assert200OK(s.T(), redirectResponse{
-		Redirect: "https://example.com",
+		Redirect: "https://mydomain.example.com",
 	})
 }
 
@@ -663,7 +663,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldNotRedirectToUnsafeURL() {
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
 	bodyBytes, err := json.Marshal(signDuoRequestBody{
-		TargetURL: "http://example.com",
+		TargetURL: "http://mydomain.example.com",
 	})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
@@ -710,7 +710,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldRegenerateSessionForPreventingSessi
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
 	bodyBytes, err := json.Marshal(signDuoRequestBody{
-		TargetURL: "http://example.com",
+		TargetURL: "http://mydomain.example.com",
 	})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
diff --git a/internal/handlers/handler_sign_totp_test.go b/internal/handlers/handler_sign_totp_test.go
index e5e38e9f3..13b84c351 100644
--- a/internal/handlers/handler_sign_totp_test.go
+++ b/internal/handlers/handler_sign_totp_test.go
@@ -167,7 +167,7 @@ func (s *HandlerSignTOTPSuite) TestShouldRedirectUserToSafeTargetURL() {
 
 	bodyBytes, err := json.Marshal(signTOTPRequestBody{
 		Token:     "abc",
-		TargetURL: "https://example.com",
+		TargetURL: "https://mydomain.example.com",
 	})
 
 	s.Require().NoError(err)
@@ -175,7 +175,7 @@ func (s *HandlerSignTOTPSuite) TestShouldRedirectUserToSafeTargetURL() {
 
 	TimeBasedOneTimePasswordPOST(s.mock.Ctx)
 	s.mock.Assert200OK(s.T(), redirectResponse{
-		Redirect: "https://example.com",
+		Redirect: "https://mydomain.example.com",
 	})
 }
 
@@ -205,7 +205,7 @@ func (s *HandlerSignTOTPSuite) TestShouldNotRedirectToUnsafeURL() {
 
 	bodyBytes, err := json.Marshal(signTOTPRequestBody{
 		Token:     "abc",
-		TargetURL: "http://example.com",
+		TargetURL: "http://mydomain.example.com",
 	})
 
 	s.Require().NoError(err)
diff --git a/internal/handlers/handler_verify.go b/internal/handlers/handler_verify.go
index a78d699ca..eacd23b43 100644
--- a/internal/handlers/handler_verify.go
+++ b/internal/handlers/handler_verify.go
@@ -180,7 +180,6 @@ func verifySessionCookie(ctx *middlewares.AutheliaCtx, targetURL *url.URL, userS
 func handleUnauthorized(ctx *middlewares.AutheliaCtx, targetURL fmt.Stringer, isBasicAuth bool, username string, method []byte) {
 	var (
 		statusCode            int
-		redirectionURL        string
 		friendlyUsername      string
 		friendlyRequestMethod string
 	)
@@ -200,10 +199,6 @@ func handleUnauthorized(ctx *middlewares.AutheliaCtx, targetURL fmt.Stringer, is
 		return
 	}
 
-	// Kubernetes ingress controller and Traefik use the rd parameter of the verify
-	// endpoint to provide the URL of the login portal. The target URL of the user
-	// is computed from X-Forwarded-* headers or X-Original-URL.
-	rd := string(ctx.QueryArgs().Peek("rd"))
 	rm := string(method)
 
 	switch rm {
@@ -213,17 +208,30 @@ func handleUnauthorized(ctx *middlewares.AutheliaCtx, targetURL fmt.Stringer, is
 		friendlyRequestMethod = rm
 	}
 
-	if rd != "" {
-		switch rm {
-		case "":
-			redirectionURL = fmt.Sprintf("%s?rd=%s", rd, url.QueryEscape(targetURL.String()))
-		default:
-			redirectionURL = fmt.Sprintf("%s?rd=%s&rm=%s", rd, url.QueryEscape(targetURL.String()), rm)
+	redirectionURL := ctxGetPortalURL(ctx)
+
+	if redirectionURL != nil {
+		if !utils.IsURISafeRedirection(redirectionURL, ctx.Configuration.Session.Domain) {
+			ctx.Logger.Errorf("Configured Portal URL '%s' does not appear to be able to write cookies for the '%s' domain", redirectionURL, ctx.Configuration.Session.Domain)
+
+			ctx.ReplyUnauthorized()
+
+			return
 		}
+
+		qry := redirectionURL.Query()
+
+		qry.Set("rd", targetURL.String())
+
+		if rm != "" {
+			qry.Set("rm", rm)
+		}
+
+		redirectionURL.RawQuery = qry.Encode()
 	}
 
 	switch {
-	case ctx.IsXHR() || !ctx.AcceptsMIME("text/html") || rd == "":
+	case ctx.IsXHR() || !ctx.AcceptsMIME("text/html") || redirectionURL == nil:
 		statusCode = fasthttp.StatusUnauthorized
 	default:
 		switch rm {
@@ -234,9 +242,9 @@ func handleUnauthorized(ctx *middlewares.AutheliaCtx, targetURL fmt.Stringer, is
 		}
 	}
 
-	if redirectionURL != "" {
+	if redirectionURL != nil {
 		ctx.Logger.Infof("Access to %s (method %s) is not authorized to user %s, responding with status code %d with location redirect to %s", targetURL.String(), friendlyRequestMethod, friendlyUsername, statusCode, redirectionURL)
-		ctx.SpecialRedirect(redirectionURL, statusCode)
+		ctx.SpecialRedirect(redirectionURL.String(), statusCode)
 	} else {
 		ctx.Logger.Infof("Access to %s (method %s) is not authorized to user %s, responding with status code %d", targetURL.String(), friendlyRequestMethod, friendlyUsername, statusCode)
 		ctx.ReplyUnauthorized()
diff --git a/internal/handlers/handler_verify_test.go b/internal/handlers/handler_verify_test.go
index 42e66fee2..ae2cc9d25 100644
--- a/internal/handlers/handler_verify_test.go
+++ b/internal/handlers/handler_verify_test.go
@@ -453,7 +453,7 @@ func TestShouldRedirectWithGroups(t *testing.T) {
 	mock.Ctx.Request.Header.Set(fasthttp.HeaderXForwardedHost, "app.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Uri", "/code-test/login")
 
-	mock.Ctx.Request.SetRequestURI("/?rd=https://auth.mydomain.com")
+	mock.Ctx.Request.SetRequestURI("/api/verify/?rd=https://auth.example.com")
 
 	VerifyGET(verifyGetCfg)(mock.Ctx)
 
@@ -537,6 +537,110 @@ func (p Pair) String() string {
 		p.URL, p.Username, p.AuthenticationLevel, p.ExpectedStatusCode)
 }
 
+//nolint:gocyclo // This is a test.
+func TestShouldRedirectAuthorizations(t *testing.T) {
+	testCases := []struct {
+		name string
+
+		method, originalURL, autheliaURL string
+
+		expected int
+	}{
+		{"ShouldReturnFoundMethodNone", "", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusFound},
+		{"ShouldReturnFoundMethodGET", "GET", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusFound},
+		{"ShouldReturnFoundMethodOPTIONS", "OPTIONS", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusFound},
+		{"ShouldReturnSeeOtherMethodPOST", "POST", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusSeeOther},
+		{"ShouldReturnSeeOtherMethodPATCH", "PATCH", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusSeeOther},
+		{"ShouldReturnSeeOtherMethodPUT", "PUT", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusSeeOther},
+		{"ShouldReturnSeeOtherMethodDELETE", "DELETE", "https://one-factor.example.com/", "https://auth.example.com/", fasthttp.StatusSeeOther},
+		{"ShouldReturnUnauthorizedBadDomain", "GET", "https://one-factor.example.com/", "https://auth.notexample.com/", fasthttp.StatusUnauthorized},
+	}
+
+	handler := VerifyGET(verifyGetCfg)
+
+	for _, tc := range testCases {
+		var (
+			suffix string
+			xhr    bool
+		)
+
+		for i := 0; i < 2; i++ {
+			switch i {
+			case 0:
+				suffix += "QueryParameter"
+			default:
+				suffix += "RequestHeader"
+			}
+
+			for j := 0; j < 2; j++ {
+				switch j {
+				case 0:
+					xhr = false
+				case 1:
+					xhr = true
+					suffix += "XHR"
+				}
+
+				t.Run(tc.name+suffix, func(t *testing.T) {
+					mock := mocks.NewMockAutheliaCtx(t)
+					defer mock.Close()
+
+					mock.Clock.Set(time.Now())
+
+					autheliaURL, err := url.ParseRequestURI(tc.autheliaURL)
+
+					require.NoError(t, err)
+
+					originalURL, err := url.ParseRequestURI(tc.originalURL)
+
+					require.NoError(t, err)
+
+					if xhr {
+						mock.Ctx.Request.Header.Set(fasthttp.HeaderXRequestedWith, "XMLHttpRequest")
+					}
+
+					var rm string
+
+					if tc.method != "" {
+						rm = fmt.Sprintf("&rm=%s", tc.method)
+						mock.Ctx.Request.Header.Set("X-Forwarded-Method", tc.method)
+					}
+
+					mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
+					mock.Ctx.Request.Header.Set("X-Original-URL", originalURL.String())
+
+					if i == 0 {
+						mock.Ctx.Request.SetRequestURI(fmt.Sprintf("/?rd=%s", url.QueryEscape(autheliaURL.String())))
+					} else {
+						mock.Ctx.Request.Header.Set("X-Authelia-URL", autheliaURL.String())
+					}
+
+					handler(mock.Ctx)
+
+					if xhr && tc.expected != fasthttp.StatusUnauthorized {
+						assert.Equal(t, fasthttp.StatusUnauthorized, mock.Ctx.Response.StatusCode())
+					} else {
+						assert.Equal(t, tc.expected, mock.Ctx.Response.StatusCode())
+					}
+
+					switch {
+					case xhr && tc.expected != fasthttp.StatusUnauthorized:
+						href := utils.StringHTMLEscape(fmt.Sprintf("%s?rd=%s%s", autheliaURL.String(), url.QueryEscape(originalURL.String()), rm))
+						assert.Equal(t, fmt.Sprintf("<a href=\"%s\">%d %s</a>", href, fasthttp.StatusUnauthorized, fasthttp.StatusMessage(fasthttp.StatusUnauthorized)), string(mock.Ctx.Response.Body()))
+					case tc.expected >= fasthttp.StatusMultipleChoices && tc.expected < fasthttp.StatusBadRequest:
+						href := utils.StringHTMLEscape(fmt.Sprintf("%s?rd=%s%s", autheliaURL.String(), url.QueryEscape(originalURL.String()), rm))
+						assert.Equal(t, fmt.Sprintf("<a href=\"%s\">%d %s</a>", href, tc.expected, fasthttp.StatusMessage(tc.expected)), string(mock.Ctx.Response.Body()))
+					case tc.expected < fasthttp.StatusMultipleChoices:
+						assert.Equal(t, utils.StringHTMLEscape(fmt.Sprintf("%d %s", tc.expected, fasthttp.StatusMessage(tc.expected))), string(mock.Ctx.Response.Body()))
+					default:
+						assert.Equal(t, utils.StringHTMLEscape(fmt.Sprintf("%d %s", tc.expected, fasthttp.StatusMessage(tc.expected))), string(mock.Ctx.Response.Body()))
+					}
+				})
+			}
+		}
+	}
+}
+
 func TestShouldVerifyAuthorizationsUsingSessionCookie(t *testing.T) {
 	testCases := []Pair{
 		// should apply default policy.
@@ -837,11 +941,36 @@ func TestShouldURLEncodeRedirectionURLParameter(t *testing.T) {
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
 	mock.Ctx.Request.SetHost("mydomain.com")
-	mock.Ctx.Request.SetRequestURI("/?rd=https://auth.mydomain.com")
+	mock.Ctx.Request.SetRequestURI("/?rd=https://auth.example.com")
 
 	VerifyGET(verifyGetCfg)(mock.Ctx)
 
-	assert.Equal(t, "<a href=\"https://auth.mydomain.com/?rd=https%3A%2F%2Ftwo-factor.example.com\">302 Found</a>",
+	assert.Equal(t, "<a href=\"https://auth.example.com/?rd=https%3A%2F%2Ftwo-factor.example.com\">302 Found</a>",
+		string(mock.Ctx.Response.Body()))
+}
+
+func TestShouldURLEncodeRedirectionHeader(t *testing.T) {
+	mock := mocks.NewMockAutheliaCtx(t)
+	defer mock.Close()
+
+	mock.Clock.Set(time.Now())
+
+	userSession := mock.Ctx.GetSession()
+	userSession.Username = testUsername
+	userSession.AuthenticationLevel = authentication.NotAuthenticated
+	userSession.RefreshTTL = mock.Clock.Now().Add(5 * time.Minute)
+
+	err := mock.Ctx.SaveSession(userSession)
+	require.NoError(t, err)
+
+	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
+	mock.Ctx.Request.Header.Set("X-Authelia-URL", "https://auth.example.com")
+	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
+	mock.Ctx.Request.SetHost("mydomain.com")
+
+	VerifyGET(verifyGetCfg)(mock.Ctx)
+
+	assert.Equal(t, "<a href=\"https://auth.example.com/?rd=https%3A%2F%2Ftwo-factor.example.com\">302 Found</a>",
 		string(mock.Ctx.Response.Body()))
 }
 
diff --git a/internal/handlers/util.go b/internal/handlers/util.go
new file mode 100644
index 000000000..3117b74bf
--- /dev/null
+++ b/internal/handlers/util.go
@@ -0,0 +1,26 @@
+package handlers
+
+import (
+	"bytes"
+	"net/url"
+
+	"github.com/authelia/authelia/v4/internal/middlewares"
+)
+
+var bytesEmpty = []byte("")
+
+func ctxGetPortalURL(ctx *middlewares.AutheliaCtx) (portalURL *url.URL) {
+	var rawURL []byte
+
+	if rawURL = ctx.QueryArgRedirect(); rawURL != nil && !bytes.Equal(rawURL, bytesEmpty) {
+		portalURL, _ = url.ParseRequestURI(string(rawURL))
+
+		return portalURL
+	} else if rawURL = ctx.XAutheliaURL(); rawURL != nil && !bytes.Equal(rawURL, bytesEmpty) {
+		portalURL, _ = url.ParseRequestURI(string(rawURL))
+
+		return portalURL
+	}
+
+	return nil
+}
diff --git a/internal/middlewares/authelia_context.go b/internal/middlewares/authelia_context.go
index 5189e1435..aa7fd4926 100644
--- a/internal/middlewares/authelia_context.go
+++ b/internal/middlewares/authelia_context.go
@@ -171,6 +171,16 @@ func (ctx *AutheliaCtx) XForwardedURI() (uri []byte) {
 	return uri
 }
 
+// XAutheliaURL return the content of the X-Authelia-URL header.
+func (ctx *AutheliaCtx) XAutheliaURL() (autheliaURL []byte) {
+	return ctx.RequestCtx.Request.Header.PeekBytes(headerXAutheliaURL)
+}
+
+// QueryArgRedirect return the content of the rd query argument.
+func (ctx *AutheliaCtx) QueryArgRedirect() (val []byte) {
+	return ctx.RequestCtx.QueryArgs().PeekBytes(queryArgRedirect)
+}
+
 // BasePath returns the base_url as per the path visited by the client.
 func (ctx *AutheliaCtx) BasePath() (base string) {
 	if baseURL := ctx.UserValueBytes(UserValueKeyBaseURL); baseURL != nil {
diff --git a/internal/middlewares/const.go b/internal/middlewares/const.go
index bbbbb8235..88ef4472b 100644
--- a/internal/middlewares/const.go
+++ b/internal/middlewares/const.go
@@ -7,6 +7,8 @@ import (
 )
 
 var (
+	headerXAutheliaURL = []byte("X-Authelia-URL")
+
 	headerAccept        = []byte(fasthttp.HeaderAccept)
 	headerContentLength = []byte(fasthttp.HeaderContentLength)
 	headerLocation      = []byte(fasthttp.HeaderLocation)
@@ -71,6 +73,8 @@ var (
 	protoHTTPS = []byte(strProtoHTTPS)
 	protoHTTP  = []byte(strProtoHTTP)
 
+	queryArgRedirect = []byte("rd")
+
 	// UserValueKeyBaseURL is the User Value key where we store the Base URL.
 	UserValueKeyBaseURL = []byte("base_url")
 
diff --git a/internal/server/handlers.go b/internal/server/handlers.go
index 9f77e0bbb..b9c9c95da 100644
--- a/internal/server/handlers.go
+++ b/internal/server/handlers.go
@@ -167,6 +167,9 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 	r.GET("/api/verify", middlewares.Wrap(metricsVRMW, middleware(handlers.VerifyGET(config.AuthenticationBackend))))
 	r.HEAD("/api/verify", middlewares.Wrap(metricsVRMW, middleware(handlers.VerifyGET(config.AuthenticationBackend))))
 
+	r.GET("/api/verify/{path:*}", middlewares.Wrap(metricsVRMW, middleware(handlers.VerifyGET(config.AuthenticationBackend))))
+	r.HEAD("/api/verify/{path:*}", middlewares.Wrap(metricsVRMW, middleware(handlers.VerifyGET(config.AuthenticationBackend))))
+
 	r.POST("/api/checks/safe-redirection", middlewareAPI(handlers.CheckSafeRedirectionPOST))
 
 	delayFunc := middlewares.TimingAttackDelay(10, 250, 85, time.Second, true)
diff --git a/internal/suites/Envoy/configuration.yml b/internal/suites/Envoy/configuration.yml
new file mode 100644
index 000000000..7a5f55448
--- /dev/null
+++ b/internal/suites/Envoy/configuration.yml
@@ -0,0 +1,54 @@
+---
+###############################################################
+#                Authelia minimal configuration               #
+###############################################################
+
+jwt_secret: unsecure_secret
+
+server:
+  port: 9091
+  asset_path: /config/assets/
+  tls:
+    certificate: /config/ssl/cert.pem
+    key: /config/ssl/key.pem
+
+log:
+  level: debug
+
+authentication_backend:
+  file:
+    path: /config/users.yml
+
+session:
+  secret: unsecure_session_secret
+  domain: example.com
+  expiration: 3600  # 1 hour
+  inactivity: 300  # 5 minutes
+  remember_me_duration: 1y
+
+storage:
+  encryption_key: a_not_so_secure_encryption_key
+  local:
+    path: /config/db.sqlite
+
+access_control:
+  default_policy: bypass
+  rules:
+    - domain: "login.example.com"
+      policy: bypass
+    - domain: "public.example.com"
+      policy: bypass
+    - domain: "admin.example.com"
+      policy: two_factor
+    - domain: "secure.example.com"
+      policy: two_factor
+    - domain: "singlefactor.example.com"
+      policy: one_factor
+
+notifier:
+  smtp:
+    host: smtp
+    port: 1025
+    sender: admin@example.com
+    disable_require_tls: true
+...
diff --git a/internal/suites/Envoy/docker-compose.yml b/internal/suites/Envoy/docker-compose.yml
new file mode 100644
index 000000000..194d32ab4
--- /dev/null
+++ b/internal/suites/Envoy/docker-compose.yml
@@ -0,0 +1,9 @@
+---
+version: '3'
+services:
+  authelia-backend:
+    volumes:
+      - './Envoy/configuration.yml:/config/configuration.yml:ro'
+      - './Envoy/users.yml:/config/users.yml'
+      - './common/ssl:/config/ssl:ro'
+...
diff --git a/internal/suites/Envoy/users.yml b/internal/suites/Envoy/users.yml
new file mode 100644
index 000000000..a52978b20
--- /dev/null
+++ b/internal/suites/Envoy/users.yml
@@ -0,0 +1,35 @@
+---
+###############################################################
+#                         Users Database                      #
+###############################################################
+
+# This file can be used if you do not have an LDAP set up.
+
+# List of users
+users:
+  john:
+    displayname: "John Doe"
+    password: "$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"  # yamllint disable-line rule:line-length
+    email: john.doe@authelia.com
+    groups:
+      - admins
+      - dev
+
+  harry:
+    displayname: "Harry Potter"
+    password: "$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"  # yamllint disable-line rule:line-length
+    email: harry.potter@authelia.com
+    groups: []
+
+  bob:
+    displayname: "Bob Dylan"
+    password: "$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"  # yamllint disable-line rule:line-length
+    email: bob.dylan@authelia.com
+    groups:
+      - dev
+
+  james:
+    displayname: "James Dean"
+    password: "$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"  # yamllint disable-line rule:line-length
+    email: james.dean@authelia.com
+...
diff --git a/internal/suites/example/compose/envoy/docker-compose.yml b/internal/suites/example/compose/envoy/docker-compose.yml
new file mode 100644
index 000000000..691c93599
--- /dev/null
+++ b/internal/suites/example/compose/envoy/docker-compose.yml
@@ -0,0 +1,12 @@
+---
+version: '3'
+services:
+  envoy:
+    image: envoyproxy/envoy:v1.23.0
+    volumes:
+      - ./example/compose/envoy/envoy.yaml:/etc/envoy/envoy.yaml
+      - ./example/compose/nginx/portal/ssl:/etc/ssl
+    networks:
+      authelianet:
+        ipv4_address: 192.168.240.100
+...
diff --git a/internal/suites/example/compose/envoy/envoy.yaml b/internal/suites/example/compose/envoy/envoy.yaml
new file mode 100644
index 000000000..fc5039ebe
--- /dev/null
+++ b/internal/suites/example/compose/envoy/envoy.yaml
@@ -0,0 +1,236 @@
+---
+static_resources:
+  listeners:
+    - name: listener_0
+      address:
+        socket_address:
+          address: 0.0.0.0
+          port_value: 8080
+      filter_chains:
+        - filters:
+            - name: envoy.filters.network.http_connection_manager
+              typed_config:
+                "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager  # yamllint disable-line rule:line-length
+                stat_prefix: ingress_http
+                use_remote_address: true
+                skip_xff_append: false
+                access_log:
+                  - name: envoy.access_loggers.stdout
+                    typed_config:
+                      "@type": type.googleapis.com/envoy.extensions.access_loggers.stream.v3.StdoutAccessLog
+                route_config:
+                  name: local_route
+                  virtual_hosts:
+                    - name: login_service
+                      domains: ["login.example.com:8080"]
+                      typed_per_filter_config:
+                        envoy.filters.http.ext_authz:
+                          "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthzPerRoute
+                          disabled: true
+                      routes:
+                        - match:
+                            prefix: "/.well-known/"
+                          route:
+                            cluster: authelia-backend
+                        - match:
+                            prefix: "/api/"
+                          route:
+                            cluster: authelia-backend
+                        - match:
+                            prefix: "/locales/"
+                          route:
+                            cluster: authelia-backend
+                        - match:
+                            path: "/jwks.json"
+                          route:
+                            cluster: authelia-backend
+                        - match:
+                            prefix: "/"
+                          route:
+                            cluster: authelia-frontend
+                    - name: mail_service
+                      domains: ["mail.example.com:8080"]
+                      typed_per_filter_config:
+                        envoy.filters.http.ext_authz:
+                          "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthzPerRoute
+                          disabled: true
+                      routes:
+                        - match:
+                            prefix: "/"
+                          route:
+                            cluster: smtp
+                    - name: http_service
+                      domains: ["*.example.com:8080"]
+                      routes:
+                        - match:
+                            prefix: "/headers"
+                          route:
+                            cluster: httpbin
+                        - match:
+                            prefix: "/"
+                          route:
+                            cluster: nginx-backend
+                http_filters:
+                  - name: envoy.filters.http.ext_authz
+                    typed_config:
+                      "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
+                      http_service:
+                        path_prefix: /api/verify/
+                        server_uri:
+                          uri: authelia-backend:9091
+                          cluster: authelia-backend
+                          timeout: 0.25s
+                        authorization_request:
+                          allowed_headers:
+                            patterns:
+                              - exact: accept
+                              - exact: cookie
+                              - exact: proxy-authorization
+                          headers_to_add:
+                            - key: X-Authelia-URL
+                              value: 'https://login.example.com:8080/'
+                            - key: X-Forwarded-Method
+                              value: '%REQ(:METHOD)%'
+                            - key: X-Forwarded-Proto
+                              value: '%REQ(:SCHEME)%'
+                            - key: X-Forwarded-Host
+                              value: '%REQ(:AUTHORITY)%'
+                            - key: X-Forwarded-URI
+                              value: '%REQ(:PATH)%'
+                            - key: X-Forwarded-For
+                              value: '%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%'
+                        authorization_response:
+                          allowed_upstream_headers:
+                            patterns:
+                              - prefix: remote-
+                          allowed_client_headers:
+                            patterns:
+                              - exact: set-cookie
+                          allowed_client_headers_on_success:
+                            patterns:
+                              - exact: set-cookie
+                      failure_mode_allow: false
+                  - name: envoy.filters.http.router
+                    typed_config:
+                      "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
+          transport_socket:
+            name: envoy.transport_sockets.tls
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
+              common_tls_context:
+                tls_certificates:
+                  - certificate_chain:
+                      filename: /etc/ssl/server.cert
+                    private_key:
+                      filename: /etc/ssl/server.key
+  clusters:
+    - name: authelia-frontend
+      transport_socket_matches:
+        - name: "enableTLS"
+          match:
+            enableTLS: true
+          transport_socket:
+            name: envoy.transport_sockets.tls
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
+              common_tls_context: {}
+        - name: "defaultTLSDisabled"
+          match: {}
+          transport_socket:
+            name: envoy.transport_sockets.raw_buffer
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
+      connect_timeout: 0.25s
+      type: STRICT_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: authelia-frontend
+        endpoints:
+          - locality:
+              region: dev
+            priority: 0
+            lb_endpoints:
+              - endpoint:
+                  health_check_config:
+                    hostname: authelia-frontend
+                    port_value: 3000
+                  address:
+                    socket_address:
+                      address: authelia-frontend
+                      port_value: 3000
+          - locality:
+              region: ci
+            priority: 1
+            lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: authelia-backend
+                      port_value: 9091
+                metadata:
+                  filter_metadata:
+                    envoy.transport_socket_match:
+                      enableTLS: true
+    - name: authelia-backend
+      connect_timeout: 0.25s
+      type: LOGICAL_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: authelia-backend
+        endpoints:
+          - lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: authelia-backend
+                      port_value: 9091
+      transport_socket:
+        name: envoy.transport_sockets.tls
+        typed_config:
+          "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
+          common_tls_context: {}
+    - name: smtp
+      connect_timeout: 0.25s
+      type: LOGICAL_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: smtp
+        endpoints:
+          - lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: smtp
+                      port_value: 1080
+    - name: httpbin
+      connect_timeout: 0.25s
+      type: LOGICAL_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: httpbin
+        endpoints:
+          - lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: httpbin
+                      port_value: 8000
+    - name: nginx-backend
+      connect_timeout: 0.25s
+      type: LOGICAL_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: nginx-backend
+        endpoints:
+          - lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: nginx-backend
+                      port_value: 80
+...
diff --git a/internal/suites/suite_envoy.go b/internal/suites/suite_envoy.go
new file mode 100644
index 000000000..9b9ff3916
--- /dev/null
+++ b/internal/suites/suite_envoy.go
@@ -0,0 +1,84 @@
+package suites
+
+import (
+	"fmt"
+	"os"
+	"time"
+)
+
+var envoySuiteName = "Envoy"
+
+func init() {
+	dockerEnvironment := NewDockerEnvironment([]string{
+		"internal/suites/docker-compose.yml",
+		"internal/suites/Envoy/docker-compose.yml",
+		"internal/suites/example/compose/authelia/docker-compose.backend.{}.yml",
+		"internal/suites/example/compose/authelia/docker-compose.frontend.{}.yml",
+		"internal/suites/example/compose/nginx/backend/docker-compose.yml",
+		"internal/suites/example/compose/envoy/docker-compose.yml",
+		"internal/suites/example/compose/smtp/docker-compose.yml",
+		"internal/suites/example/compose/httpbin/docker-compose.yml",
+	})
+
+	if os.Getenv("CI") == t {
+		dockerEnvironment = NewDockerEnvironment([]string{
+			"internal/suites/docker-compose.yml",
+			"internal/suites/Envoy/docker-compose.yml",
+			"internal/suites/example/compose/authelia/docker-compose.backend.{}.yml",
+			"internal/suites/example/compose/nginx/backend/docker-compose.yml",
+			"internal/suites/example/compose/envoy/docker-compose.yml",
+			"internal/suites/example/compose/smtp/docker-compose.yml",
+			"internal/suites/example/compose/httpbin/docker-compose.yml",
+		})
+	}
+
+	setup := func(suitePath string) error {
+		if err := dockerEnvironment.Up(); err != nil {
+			return err
+		}
+
+		return waitUntilAutheliaIsReady(dockerEnvironment, envoySuiteName)
+	}
+
+	displayAutheliaLogs := func() error {
+		backendLogs, err := dockerEnvironment.Logs("authelia-backend", nil)
+		if err != nil {
+			return err
+		}
+
+		fmt.Println(backendLogs)
+
+		if os.Getenv("CI") != t {
+			frontendLogs, err := dockerEnvironment.Logs("authelia-frontend", nil)
+			if err != nil {
+				return err
+			}
+
+			fmt.Println(frontendLogs)
+		}
+
+		envoyLogs, err := dockerEnvironment.Logs("envoy", nil)
+		if err != nil {
+			return err
+		}
+
+		fmt.Println(envoyLogs)
+
+		return nil
+	}
+
+	teardown := func(suitePath string) error {
+		err := dockerEnvironment.Down()
+		return err
+	}
+
+	GlobalRegistry.Register(envoySuiteName, Suite{
+		SetUp:           setup,
+		SetUpTimeout:    5 * time.Minute,
+		OnSetupTimeout:  displayAutheliaLogs,
+		OnError:         displayAutheliaLogs,
+		TestTimeout:     2 * time.Minute,
+		TearDown:        teardown,
+		TearDownTimeout: 2 * time.Minute,
+	})
+}
diff --git a/internal/suites/suite_envoy_test.go b/internal/suites/suite_envoy_test.go
new file mode 100644
index 000000000..ca7cb1149
--- /dev/null
+++ b/internal/suites/suite_envoy_test.go
@@ -0,0 +1,39 @@
+package suites
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/suite"
+)
+
+type EnvoySuite struct {
+	*RodSuite
+}
+
+func NewEnvoySuite() *EnvoySuite {
+	return &EnvoySuite{RodSuite: new(RodSuite)}
+}
+
+func (s *EnvoySuite) Test1FAScenario() {
+	suite.Run(s.T(), New1FAScenario())
+}
+
+func (s *EnvoySuite) Test2FAScenario() {
+	suite.Run(s.T(), New2FAScenario())
+}
+
+func (s *EnvoySuite) TestCustomHeaders() {
+	suite.Run(s.T(), NewCustomHeadersScenario())
+}
+
+func (s *EnvoySuite) TestResetPasswordScenario() {
+	suite.Run(s.T(), NewResetPasswordScenario())
+}
+
+func TestEnvoySuite(t *testing.T) {
+	if testing.Short() {
+		t.Skip("skipping suite test in short mode")
+	}
+
+	suite.Run(t, NewEnvoySuite())
+}

From 56b6fd615b7880d46c7860413ed57ec37d0106a8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Oct 2022 14:59:21 +0000
Subject: [PATCH 084/263] build(deps): update envoyproxy/envoy docker tag to
 v1.23.1 (#4112)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/envoy/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/envoy/docker-compose.yml b/internal/suites/example/compose/envoy/docker-compose.yml
index 691c93599..16e0d7d5e 100644
--- a/internal/suites/example/compose/envoy/docker-compose.yml
+++ b/internal/suites/example/compose/envoy/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   envoy:
-    image: envoyproxy/envoy:v1.23.0
+    image: envoyproxy/envoy:v1.23.1
     volumes:
       - ./example/compose/envoy/envoy.yaml:/etc/envoy/envoy.yaml
       - ./example/compose/nginx/portal/ssl:/etc/ssl

From 66ea374227fde256adc95c084b4e18cba343c774 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 2 Oct 2022 07:44:18 +1100
Subject: [PATCH 085/263] feat(authentication): permit feature detection
 failures (#4061)

This adds a configuration option which permits the failure of feature detection (control type OIDs and extension OIDs).
---
 .github/ISSUE_TEMPLATE/bug-report.yml                 |  2 ++
 cmd/authelia-gen/templates/web_i18n_index.ts.tmpl     | 10 ++++++++--
 cmd/authelia-scripts/cmd/gen.go                       |  2 +-
 docs/content/en/blog/pre-release-notes-4.37/index.md  |  2 +-
 docs/data/configkeys.json                             |  2 +-
 internal/authentication/ldap_user_provider_startup.go |  9 ++++++++-
 internal/authentication/ldap_user_provider_test.go    |  2 +-
 internal/configuration/schema/authentication.go       |  5 +++--
 internal/configuration/schema/keys.go                 |  1 +
 9 files changed, 26 insertions(+), 9 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
index e30299cd7..52745d7fa 100644
--- a/.github/ISSUE_TEMPLATE/bug-report.yml
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -26,6 +26,7 @@ body:
       description: What version(s) of Authelia can you reproduce this bug on?
       multiple: true
       options:
+        - v4.36.9
         - v4.36.8
         - v4.36.7
         - v4.36.6
@@ -79,6 +80,7 @@ body:
         - Caddy
         - Traefik
         - Envoy
+        - Istio
         - NGINX
         - SWAG
         - NGINX Proxy Manager
diff --git a/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl b/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
index 342c410ba..e7180fb36 100644
--- a/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
+++ b/cmd/authelia-gen/templates/web_i18n_index.ts.tmpl
@@ -9,17 +9,23 @@ import LanguageDetector from "i18next-browser-languagedetector";
 import Backend from "i18next-http-backend";
 import { initReactI18next } from "react-i18next";
 
+import LocalStorageCustomDetector from "@i18n/detectors/localStorageCustom";
 import { getBasePath } from "@utils/BasePath";
 
 const basePath = getBasePath();
 
+const CustomLanguageDetector = new LanguageDetector();
+
+CustomLanguageDetector.addDetector(LocalStorageCustomDetector);
+
 i18n.use(Backend)
-    .use(LanguageDetector)
+    .use(CustomLanguageDetector)
     .use(initReactI18next)
     .init({
         detection: {
-            order: ["querystring", "navigator"],
+            order: ["querystring", "localStorageCustom", "navigator"],
             lookupQuerystring: "lng",
+            lookupLocalStorage: "lng",
         },
         backend: {
             loadPath: basePath + "/locales/{{"{{lng}}"}}/{{"{{ns}}"}}.json",
diff --git a/cmd/authelia-scripts/cmd/gen.go b/cmd/authelia-scripts/cmd/gen.go
index 5fe6a5e49..f20f2dddc 100644
--- a/cmd/authelia-scripts/cmd/gen.go
+++ b/cmd/authelia-scripts/cmd/gen.go
@@ -7,5 +7,5 @@
 package cmd
 
 const (
-	versionSwaggerUI = "4.14.0"
+	versionSwaggerUI = "4.14.2"
 )
diff --git a/docs/content/en/blog/pre-release-notes-4.37/index.md b/docs/content/en/blog/pre-release-notes-4.37/index.md
index ffd5d5e14..71579e3a0 100644
--- a/docs/content/en/blog/pre-release-notes-4.37/index.md
+++ b/docs/content/en/blog/pre-release-notes-4.37/index.md
@@ -3,7 +3,7 @@ title: "4.37: Pre-Release Notes"
 description: "Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing features. In this blog post we'll discuss the new features and roughly what it means for users."
 lead: "Pre-Release Notes for 4.37"
 excerpt: "Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing features. In this blog post we'll discuss the new features and roughly what it means for users."
-date: 2022-09-26T05:48:22+10:00
+date: 2022-09-26T06:55:09+10:00
 draft: false
 images: []
 categories: ["News", "Release Notes"]
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index 5907669b9..c351cb250 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/internal/authentication/ldap_user_provider_startup.go b/internal/authentication/ldap_user_provider_startup.go
index bcf1bad61..723d4cb5c 100644
--- a/internal/authentication/ldap_user_provider_startup.go
+++ b/internal/authentication/ldap_user_provider_startup.go
@@ -1,6 +1,7 @@
 package authentication
 
 import (
+	"fmt"
 	"strings"
 
 	"github.com/go-ldap/ldap/v3"
@@ -54,7 +55,13 @@ func (p *LDAPUserProvider) getServerSupportedFeatures(client LDAPClient) (featur
 		1, 0, false, "(objectClass=*)", []string{ldapSupportedExtensionAttribute, ldapSupportedControlAttribute}, nil)
 
 	if searchResult, err = client.Search(searchRequest); err != nil {
-		return features, err
+		if p.config.PermitFeatureDetectionFailure {
+			p.log.WithError(err).Warnf("Error occurred during RootDSE search. This may result in reduced functionality.")
+
+			return features, nil
+		}
+
+		return features, fmt.Errorf("error occurred during RootDSE search: %w", err)
 	}
 
 	if len(searchResult.Entries) != 1 {
diff --git a/internal/authentication/ldap_user_provider_test.go b/internal/authentication/ldap_user_provider_test.go
index a63cb1091..2123ad4dd 100644
--- a/internal/authentication/ldap_user_provider_test.go
+++ b/internal/authentication/ldap_user_provider_test.go
@@ -489,7 +489,7 @@ func TestShouldReturnCheckServerSearchError(t *testing.T) {
 	gomock.InOrder(dialURL, connBind, searchOIDs, connClose)
 
 	err := ldapClient.StartupCheck()
-	assert.EqualError(t, err, "could not perform the search")
+	assert.EqualError(t, err, "error occurred during RootDSE search: could not perform the search")
 
 	assert.False(t, ldapClient.features.Extensions.PwdModifyExOp)
 }
diff --git a/internal/configuration/schema/authentication.go b/internal/configuration/schema/authentication.go
index 895cc7711..9ed48bf07 100644
--- a/internal/configuration/schema/authentication.go
+++ b/internal/configuration/schema/authentication.go
@@ -26,8 +26,9 @@ type LDAPAuthenticationBackendConfiguration struct {
 	MailAttribute        string `koanf:"mail_attribute"`
 	DisplayNameAttribute string `koanf:"display_name_attribute"`
 
-	PermitReferrals           bool `koanf:"permit_referrals"`
-	PermitUnauthenticatedBind bool `koanf:"permit_unauthenticated_bind"`
+	PermitReferrals               bool `koanf:"permit_referrals"`
+	PermitUnauthenticatedBind     bool `koanf:"permit_unauthenticated_bind"`
+	PermitFeatureDetectionFailure bool `koanf:"permit_feature_detection_failure"`
 
 	User     string `koanf:"user"`
 	Password string `koanf:"password"`
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index 07639a456..e7bda004f 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -63,6 +63,7 @@ var Keys = []string{
 	"authentication_backend.ldap.display_name_attribute",
 	"authentication_backend.ldap.permit_referrals",
 	"authentication_backend.ldap.permit_unauthenticated_bind",
+	"authentication_backend.ldap.permit_feature_detection_failure",
 	"authentication_backend.ldap.user",
 	"authentication_backend.ldap.password",
 	"authentication_backend.file.path",

From 6810c91d34fe1610d65725d62c5da4a17f4674e3 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 2 Oct 2022 13:07:40 +1100
Subject: [PATCH 086/263] feat(oidc): issuer jwk certificates (#3989)

This allows for JWKs to include certificate information, either signed via Global PKI, Enterprise PKI, or self-signed.
---
 config.template.yml                           |  95 +++-
 .../identity-providers/open-id-connect.md     | 113 +++-
 internal/configuration/config.template.yml    |  95 +++-
 internal/configuration/const.go               |   5 +-
 internal/configuration/decode_hooks.go        | 162 +++++-
 internal/configuration/decode_hooks_test.go   | 427 ++++++++++++++-
 internal/configuration/provider.go            |   3 +
 internal/configuration/provider_test.go       |   2 +-
 internal/configuration/schema/const.go        |   5 +
 .../schema/identity_providers.go              |   6 +-
 internal/configuration/schema/keys.go         |   1 +
 internal/configuration/schema/types.go        | 165 ++++++
 internal/configuration/schema/types_test.go   | 503 ++++++++++++++++++
 internal/configuration/validator/const.go     |   8 +
 .../validator/identity_providers.go           |  75 +--
 .../validator/identity_providers_test.go      | 196 ++++++-
 internal/handlers/handler_oidc_userinfo.go    |  15 +-
 internal/logging/logger.go                    |   4 +-
 internal/oidc/keys.go                         | 248 ++++-----
 internal/oidc/keys_test.go                    |  33 +-
 internal/oidc/provider.go                     |  19 +-
 internal/oidc/provider_test.go                |  50 +-
 internal/oidc/store_test.go                   |  19 +-
 internal/oidc/types.go                        |  21 +-
 internal/utils/crypto.go                      |   2 +-
 25 files changed, 1912 insertions(+), 360 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index 85f1bea72..9fb6c8e72 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -815,36 +815,79 @@ notifier:
     ## HMAC Secret can also be set using a secret: https://www.authelia.com/c/secrets
     # hmac_secret: this_is_a_secret_abc123abc123abc
 
+    ## The issuer_certificate_chain is an optional PEM encoded certificate chain. It's used in conjunction with the
+    ## issuer_private_key to sign JWT's. All certificates in the chain must be within the validity period, and every
+    ## certificate included must be signed by the certificate immediately after it if provided.
+    # issuer_certificate_chain: |
+    #   -----BEGIN CERTIFICATE-----
+    #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+    #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+    #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+    #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+    #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+    #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+    #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+    #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+    #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+    #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+    #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+    #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+    #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+    #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+    #   -----END CERTIFICATE-----
+    #   -----BEGIN CERTIFICATE-----
+    #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+    #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+    #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+    #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+    #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+    #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+    #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+    #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+    #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+    #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+    #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+    #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+    #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+    #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+    #   qocikt3WAdU^invalid DO NOT USE=
+    #   -----END CERTIFICATE-----
+
     ## The issuer_private_key is used to sign the JWT forged by OpenID Connect.
     ## Issuer Private Key can also be set using a secret: https://www.authelia.com/c/secrets
     # issuer_private_key: |
     #   -----BEGIN RSA PRIVATE KEY-----
-    #   MXIEogIB$AKCAQEAxZVJP3WF//PG2fLQoEC9DtdiFG/+00vqlbVzz47nyxKONIPI
-    #   lmL3UdmqpGTKMe/5Brqse4ZAKlQHiDbwzK9ypnfigtHuvh/JO0S7ChP70RC67ed1
-    #   HV1nyfz5eW3llbtGJPrlYLqITNgctHp6zmRUFtSzPj9qFvozI93LJi492yL1+vu8
-    #   Un3Dm8+Qq6XM2tPdEcldB/dtBwOWoF+8eOOVsu0TDuB5bwlhBVGJuSAuzBPRS2bF
-    #   Ga4uk0JDdkDOMCEQxC5uWDFxgfERSMFyfLVWD47woDbuWEBq10c0z+dpWPMp7Ain
-    #   YnnkqicwCN88Z0zid6MmMQ65F4+9Hc+qC/p6xwIDAQABAoIBAGlhaAHKor+Su3o/
-    #   AXqXTL5/rbYMzbLQiLt0XeJT69jpeqMTroZXHmWvXE3128mqnf0yzw/K2Ko6yxGh
-    #   i+j/onya8FqpsVYCCgfsbn2/js1AyRJeIp6Y1ORsYnqbXJnxmkXa80AV/OBPW2/+
-    #   60TtSdQrebY3iFPc+i2k+9bPTvpyyDLKlz8UwdZG+k5uyYNIyQTccz+PjwsIvDij
-    #   7tKYamhhLN3QXt3/aZTFpjTgezP4WyriZxjWrddHowc47q2rwNS95ND39JcysJAc
-    #   0Pcbu8A5lVa7Fx33uOtzDfKWIW7xVEN+OtPgN+FbTjXcXk5IZedl+pW5lU5P++G/
-    #   ZPvz+WECgYEA9g6HwdODW3e68bOqsFoKg35+vfUFMzlyMF8HFylNVfnLpTEDr637
-    #   owzMFvcUxVd71b+gV5nnnbI+riUFIgyR8vhCjhy4moopDPahC4/KwN4NG6uz+i1h
-    #   AB6D5+zn2BjnO/5xMMFGlApWtRNmJVGYlNDj3bXKh2VXzzy03VNeD8kCgYEAzZFL
-    #   OlzoRB1HKpTWIECcuvxofMxLOLb3zs0k2t/FYNYIpovmGWCCAULz13y53e5+/+5m
-    #   7I9VUZJFaIhaZ36qVBApCKdru69pZMkWCcQO9jELFcx51Ez7OgJWzu7GS1QJCPKC
-    #   fEDxI0rZK21j93/Sl/nUnEir7CYpQ+wvCaGuHg8CgYAXgbncfY1+DokwkB6NbHy2
-    #   pT4Mfbz6cNGE538w6kQ2I4AeDvmwLentYMqaow478CinegAiflSPTzkHwAemghbr
-    #   ZGZPV1UXhn13fJRUG2+eT1hnPVcbXnx223N0k8Bud6qXo65CnyRT/kzcTbcjd5Eh
-    #   Hne2daicmMTzynPo9Q72aQKBgBmobO9X8VWvIdbaxO85oVZlctVA2pK1o7CYQmVf
-    #   UM+JZ4MCKzI3rYJizPS0iK5+ujNPmmEkcs2/qBIoEsCgOrpLWhPOcc/3UPxXbPzD
-    #   D+sCrBOIdhxdj23qJNOnUfDNCGOpgUfpAzAYg4q8GKInvi1h7XukRnEvQi9MJ4LY
-    #   P1dZAoGASGcGnTMkmeSXP8ux+dvQJAiJskn/sJIgBZ5uq5GRCeLBUosRSVxM75UK
-    #   vAh/c/RBj+pYXVKuPuHGZCQJxsdcRXzXNGouUtgbaYML5Me/Hagt20QzDRBfuGBg
-    #   qeZBJaXhjElvw6PUWtg4x+LYRCBpq/bS3LK3ozZrSTukVkKDegw=
-    #   -----END RSA PRIVATE KEY-----
+    #  MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+    #  T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+    #  KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+    #  +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+    #  LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+    #  txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+    #  aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+    #  Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+    #  ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+    #  LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+    #  jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+    #  BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+    #  Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+    #  R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+    #  tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+    #  ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+    #  lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+    #  6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+    #  fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+    #  9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+    #  jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+    #  rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+    #  n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+    #  yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+    #  27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+    #  DO NOT USE==
+    #  -----END RSA PRIVATE KEY-----
 
     ## The lifespans configure the expiration for these token types.
     # access_token_lifespan: 1h
diff --git a/docs/content/en/configuration/identity-providers/open-id-connect.md b/docs/content/en/configuration/identity-providers/open-id-connect.md
index dde841d34..a8d6997a4 100644
--- a/docs/content/en/configuration/identity-providers/open-id-connect.md
+++ b/docs/content/en/configuration/identity-providers/open-id-connect.md
@@ -33,33 +33,72 @@ The following snippet provides a sample-configuration for the OIDC identity prov
 identity_providers:
   oidc:
     hmac_secret: this_is_a_secret_abc123abc123abc
+    issuer_certificate_chain: |
+      -----BEGIN CERTIFICATE-----
+      MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+      EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+      /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+      LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+      91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+      kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+      Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+      AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+      AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+      /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+      lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+      wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+      OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+      ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+      -----END CERTIFICATE-----
+      -----BEGIN CERTIFICATE-----
+      MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+      EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+      zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+      5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+      kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+      ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+      Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+      AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+      Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+      kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+      71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+      HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+      D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+      2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+      qocikt3WAdU^invalid DO NOT USE=
+      -----END CERTIFICATE-----
     issuer_private_key: |
       -----BEGIN RSA PRIVATE KEY-----
-      MXIEogIB$AKCAQEAxZVJP3WF//PG2fLQoEC9DtdiFG/+00vqlbVzz47nyxKONIPI
-      lmL3UdmqpGTKMe/5Brqse4ZAKlQHiDbwzK9ypnfigtHuvh/JO0S7ChP70RC67ed1
-      HV1nyfz5eW3llbtGJPrlYLqITNgctHp6zmRUFtSzPj9qFvozI93LJi492yL1+vu8
-      Un3Dm8+Qq6XM2tPdEcldB/dtBwOWoF+8eOOVsu0TDuB5bwlhBVGJuSAuzBPRS2bF
-      Ga4uk0JDdkDOMCEQxC5uWDFxgfERSMFyfLVWD47woDbuWEBq10c0z+dpWPMp7Ain
-      YnnkqicwCN88Z0zid6MmMQ65F4+9Hc+qC/p6xwIDAQABAoIBAGlhaAHKor+Su3o/
-      AXqXTL5/rbYMzbLQiLt0XeJT69jpeqMTroZXHmWvXE3128mqnf0yzw/K2Ko6yxGh
-      i+j/onya8FqpsVYCCgfsbn2/js1AyRJeIp6Y1ORsYnqbXJnxmkXa80AV/OBPW2/+
-      60TtSdQrebY3iFPc+i2k+9bPTvpyyDLKlz8UwdZG+k5uyYNIyQTccz+PjwsIvDij
-      7tKYamhhLN3QXt3/aZTFpjTgezP4WyriZxjWrddHowc47q2rwNS95ND39JcysJAc
-      0Pcbu8A5lVa7Fx33uOtzDfKWIW7xVEN+OtPgN+FbTjXcXk5IZedl+pW5lU5P++G/
-      ZPvz+WECgYEA9g6HwdODW3e68bOqsFoKg35+vfUFMzlyMF8HFylNVfnLpTEDr637
-      owzMFvcUxVd71b+gV5nnnbI+riUFIgyR8vhCjhy4moopDPahC4/KwN4NG6uz+i1h
-      AB6D5+zn2BjnO/5xMMFGlApWtRNmJVGYlNDj3bXKh2VXzzy03VNeD8kCgYEAzZFL
-      OlzoRB1HKpTWIECcuvxofMxLOLb3zs0k2t/FYNYIpovmGWCCAULz13y53e5+/+5m
-      7I9VUZJFaIhaZ36qVBApCKdru69pZMkWCcQO9jELFcx51Ez7OgJWzu7GS1QJCPKC
-      fEDxI0rZK21j93/Sl/nUnEir7CYpQ+wvCaGuHg8CgYAXgbncfY1+DokwkB6NbHy2
-      pT4Mfbz6cNGE538w6kQ2I4AeDvmwLentYMqaow478CinegAiflSPTzkHwAemghbr
-      ZGZPV1UXhn13fJRUG2+eT1hnPVcbXnx223N0k8Bud6qXo65CnyRT/kzcTbcjd5Eh
-      Hne2daicmMTzynPo9Q72aQKBgBmobO9X8VWvIdbaxO85oVZlctVA2pK1o7CYQmVf
-      UM+JZ4MCKzI3rYJizPS0iK5+ujNPmmEkcs2/qBIoEsCgOrpLWhPOcc/3UPxXbPzD
-      D+sCrBOIdhxdj23qJNOnUfDNCGOpgUfpAzAYg4q8GKInvi1h7XukRnEvQi9MJ4LY
-      P1dZAoGASGcGnTMkmeSXP8ux+dvQJAiJskn/sJIgBZ5uq5GRCeLBUosRSVxM75UK
-      vAh/c/RBj+pYXVKuPuHGZCQJxsdcRXzXNGouUtgbaYML5Me/Hagt20QzDRBfuGBg
-      qeZBJaXhjElvw6PUWtg4x+LYRCBpq/bS3LK3ozZrSTukVkKDegw=
+      MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+      T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+      KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+      +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+      LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+      txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+      aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+      Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+      ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+      LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+      jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+      BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+      Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+      R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+      tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+      ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+      lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+      6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+      fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+      9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+      jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+      rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+      n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+      yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+      27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+      DO NOT USE==
       -----END RSA PRIVATE KEY-----
     access_token_lifespan: 1h
     authorize_code_lifespan: 1m
@@ -120,6 +159,23 @@ It's __strongly recommended__ this is a
 [Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
 characters.
 
+### issuer_certificate_chain
+
+{{< confkey type="string" required="no" >}}
+
+The certificate chain/bundle to be used with the [issuer_private_key](#issuer_private_key) DER base64 ([RFC4648])
+encoded PEM format used to sign/encrypt the [OpenID Connect] [JWT]'s. When configured it enables the [x5c] and [x5t]
+JSON key's in the JWKs [Discoverable Endpoint](../../integration/openid-connect/introduction.md#discoverable-endpoints)
+as per [RFC7517].
+
+[RFC7517]: https://www.rfc-editor.org/rfc/rfc7517
+[x5c]: https://www.rfc-editor.org/rfc/rfc7517#section-4.7
+[x5t]: https://www.rfc-editor.org/rfc/rfc7517#section-4.8
+
+The first certificate in the chain must have the public key for the [issuer_private_key](#issuer_private_key), each
+certificate in the chain must be valid for the current date, and each certificate in the chain should be signed by the
+certificate immediately following it if present.
+
 ### issuer_private_key
 
 {{< confkey type="string" required="yes" >}}
@@ -127,10 +183,13 @@ characters.
 *__Important Note:__ This can also be defined using a [secret](../methods/secrets.md) which is __strongly recommended__
 especially for containerized deployments.*
 
-The private key in DER base64 ([RFC4648]) encoded PEM format used to encrypt the [OpenID Connect] [JWT]'s. The key must
-be generated by the administrator and can be done by following the
+The private key in DER base64 ([RFC4648]) encoded PEM format used to sign/encrypt the [OpenID Connect] issued [JWT]'s.
+The key must be generated by the administrator and can be done by following the
 [Generating an RSA Keypair](../miscellaneous/guides.md#generating-an-rsa-keypair) guide.
 
+If the [issuer_certificate_chain](#issuer_certificate_chain) is provided the private key must include matching public
+key data for the first certificate in the chain.
+
 ### access_token_lifespan
 
 {{< confkey type="duration" default="1h" required="no" >}}
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 85f1bea72..9fb6c8e72 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -815,36 +815,79 @@ notifier:
     ## HMAC Secret can also be set using a secret: https://www.authelia.com/c/secrets
     # hmac_secret: this_is_a_secret_abc123abc123abc
 
+    ## The issuer_certificate_chain is an optional PEM encoded certificate chain. It's used in conjunction with the
+    ## issuer_private_key to sign JWT's. All certificates in the chain must be within the validity period, and every
+    ## certificate included must be signed by the certificate immediately after it if provided.
+    # issuer_certificate_chain: |
+    #   -----BEGIN CERTIFICATE-----
+    #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+    #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+    #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+    #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+    #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+    #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+    #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+    #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+    #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+    #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+    #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+    #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+    #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+    #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+    #   -----END CERTIFICATE-----
+    #   -----BEGIN CERTIFICATE-----
+    #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+    #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+    #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+    #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+    #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+    #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+    #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+    #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+    #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+    #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+    #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+    #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+    #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+    #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+    #   qocikt3WAdU^invalid DO NOT USE=
+    #   -----END CERTIFICATE-----
+
     ## The issuer_private_key is used to sign the JWT forged by OpenID Connect.
     ## Issuer Private Key can also be set using a secret: https://www.authelia.com/c/secrets
     # issuer_private_key: |
     #   -----BEGIN RSA PRIVATE KEY-----
-    #   MXIEogIB$AKCAQEAxZVJP3WF//PG2fLQoEC9DtdiFG/+00vqlbVzz47nyxKONIPI
-    #   lmL3UdmqpGTKMe/5Brqse4ZAKlQHiDbwzK9ypnfigtHuvh/JO0S7ChP70RC67ed1
-    #   HV1nyfz5eW3llbtGJPrlYLqITNgctHp6zmRUFtSzPj9qFvozI93LJi492yL1+vu8
-    #   Un3Dm8+Qq6XM2tPdEcldB/dtBwOWoF+8eOOVsu0TDuB5bwlhBVGJuSAuzBPRS2bF
-    #   Ga4uk0JDdkDOMCEQxC5uWDFxgfERSMFyfLVWD47woDbuWEBq10c0z+dpWPMp7Ain
-    #   YnnkqicwCN88Z0zid6MmMQ65F4+9Hc+qC/p6xwIDAQABAoIBAGlhaAHKor+Su3o/
-    #   AXqXTL5/rbYMzbLQiLt0XeJT69jpeqMTroZXHmWvXE3128mqnf0yzw/K2Ko6yxGh
-    #   i+j/onya8FqpsVYCCgfsbn2/js1AyRJeIp6Y1ORsYnqbXJnxmkXa80AV/OBPW2/+
-    #   60TtSdQrebY3iFPc+i2k+9bPTvpyyDLKlz8UwdZG+k5uyYNIyQTccz+PjwsIvDij
-    #   7tKYamhhLN3QXt3/aZTFpjTgezP4WyriZxjWrddHowc47q2rwNS95ND39JcysJAc
-    #   0Pcbu8A5lVa7Fx33uOtzDfKWIW7xVEN+OtPgN+FbTjXcXk5IZedl+pW5lU5P++G/
-    #   ZPvz+WECgYEA9g6HwdODW3e68bOqsFoKg35+vfUFMzlyMF8HFylNVfnLpTEDr637
-    #   owzMFvcUxVd71b+gV5nnnbI+riUFIgyR8vhCjhy4moopDPahC4/KwN4NG6uz+i1h
-    #   AB6D5+zn2BjnO/5xMMFGlApWtRNmJVGYlNDj3bXKh2VXzzy03VNeD8kCgYEAzZFL
-    #   OlzoRB1HKpTWIECcuvxofMxLOLb3zs0k2t/FYNYIpovmGWCCAULz13y53e5+/+5m
-    #   7I9VUZJFaIhaZ36qVBApCKdru69pZMkWCcQO9jELFcx51Ez7OgJWzu7GS1QJCPKC
-    #   fEDxI0rZK21j93/Sl/nUnEir7CYpQ+wvCaGuHg8CgYAXgbncfY1+DokwkB6NbHy2
-    #   pT4Mfbz6cNGE538w6kQ2I4AeDvmwLentYMqaow478CinegAiflSPTzkHwAemghbr
-    #   ZGZPV1UXhn13fJRUG2+eT1hnPVcbXnx223N0k8Bud6qXo65CnyRT/kzcTbcjd5Eh
-    #   Hne2daicmMTzynPo9Q72aQKBgBmobO9X8VWvIdbaxO85oVZlctVA2pK1o7CYQmVf
-    #   UM+JZ4MCKzI3rYJizPS0iK5+ujNPmmEkcs2/qBIoEsCgOrpLWhPOcc/3UPxXbPzD
-    #   D+sCrBOIdhxdj23qJNOnUfDNCGOpgUfpAzAYg4q8GKInvi1h7XukRnEvQi9MJ4LY
-    #   P1dZAoGASGcGnTMkmeSXP8ux+dvQJAiJskn/sJIgBZ5uq5GRCeLBUosRSVxM75UK
-    #   vAh/c/RBj+pYXVKuPuHGZCQJxsdcRXzXNGouUtgbaYML5Me/Hagt20QzDRBfuGBg
-    #   qeZBJaXhjElvw6PUWtg4x+LYRCBpq/bS3LK3ozZrSTukVkKDegw=
-    #   -----END RSA PRIVATE KEY-----
+    #  MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+    #  T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+    #  KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+    #  +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+    #  LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+    #  txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+    #  aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+    #  Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+    #  ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+    #  LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+    #  jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+    #  BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+    #  Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+    #  R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+    #  tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+    #  ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+    #  lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+    #  6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+    #  fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+    #  9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+    #  jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+    #  rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+    #  n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+    #  yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+    #  27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+    #  DO NOT USE==
+    #  -----END RSA PRIVATE KEY-----
 
     ## The lifespans configure the expiration for these token types.
     # access_token_lifespan: 1h
diff --git a/internal/configuration/const.go b/internal/configuration/const.go
index 097da815c..2f42563e0 100644
--- a/internal/configuration/const.go
+++ b/internal/configuration/const.go
@@ -31,8 +31,9 @@ const (
 	errFmtSecretIOIssue         = "secrets: error loading secret path %s into key '%s': %v"
 	errFmtGenerateConfiguration = "error occurred generating configuration: %+v"
 
-	errFmtDecodeHookCouldNotParse           = "could not decode '%s' to a %s: %w"
-	errFmtDecodeHookCouldNotParseEmptyValue = "could not decode an empty value to a %s: %w"
+	errFmtDecodeHookCouldNotParse           = "could not decode '%s' to a %s%s: %w"
+	errFmtDecodeHookCouldNotParseBasic      = "could not decode to a %s%s: %w"
+	errFmtDecodeHookCouldNotParseEmptyValue = "could not decode an empty value to a %s%s: %w"
 )
 
 var secretSuffixes = []string{"key", "secret", "password", "token"}
diff --git a/internal/configuration/decode_hooks.go b/internal/configuration/decode_hooks.go
index 406933f96..31f657f37 100644
--- a/internal/configuration/decode_hooks.go
+++ b/internal/configuration/decode_hooks.go
@@ -1,6 +1,8 @@
 package configuration
 
 import (
+	"crypto/rsa"
+	"crypto/x509"
 	"fmt"
 	"net/mail"
 	"net/url"
@@ -23,11 +25,11 @@ func StringToMailAddressHookFunc() mapstructure.DecodeHookFuncType {
 			return data, nil
 		}
 
-		kindStr := "mail.Address (RFC5322)"
+		prefixType := ""
 
 		if t.Kind() == reflect.Ptr {
 			ptr = true
-			kindStr = "*" + kindStr
+			prefixType = "*"
 		}
 
 		expectedType := reflect.TypeOf(mail.Address{})
@@ -44,7 +46,7 @@ func StringToMailAddressHookFunc() mapstructure.DecodeHookFuncType {
 
 		if dataStr != "" {
 			if result, err = mail.ParseAddress(dataStr); err != nil {
-				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, kindStr, err)
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType.String()+" (RFC5322)", err)
 			}
 		}
 
@@ -69,11 +71,11 @@ func StringToURLHookFunc() mapstructure.DecodeHookFuncType {
 			return data, nil
 		}
 
-		kindStr := "url.URL"
+		prefixType := ""
 
 		if t.Kind() == reflect.Ptr {
 			ptr = true
-			kindStr = "*" + kindStr
+			prefixType = "*"
 		}
 
 		expectedType := reflect.TypeOf(url.URL{})
@@ -90,7 +92,7 @@ func StringToURLHookFunc() mapstructure.DecodeHookFuncType {
 
 		if dataStr != "" {
 			if result, err = url.Parse(dataStr); err != nil {
-				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, kindStr, err)
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType, err)
 			}
 		}
 
@@ -119,11 +121,11 @@ func ToTimeDurationHookFunc() mapstructure.DecodeHookFuncType {
 			return data, nil
 		}
 
-		kindStr := "time.Duration"
+		prefixType := ""
 
 		if t.Kind() == reflect.Ptr {
 			ptr = true
-			kindStr = "*" + kindStr
+			prefixType = "*"
 		}
 
 		expectedType := reflect.TypeOf(time.Duration(0))
@@ -141,7 +143,7 @@ func ToTimeDurationHookFunc() mapstructure.DecodeHookFuncType {
 			dataStr := data.(string)
 
 			if result, err = utils.ParseDurationString(dataStr); err != nil {
-				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, kindStr, err)
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType, err)
 			}
 		case f.Kind() == reflect.Int:
 			seconds := data.(int)
@@ -176,11 +178,11 @@ func StringToRegexpHookFunc() mapstructure.DecodeHookFuncType {
 			return data, nil
 		}
 
-		kindStr := "regexp.Regexp"
+		prefixType := ""
 
 		if t.Kind() == reflect.Ptr {
 			ptr = true
-			kindStr = "*" + kindStr
+			prefixType = "*"
 		}
 
 		expectedType := reflect.TypeOf(regexp.Regexp{})
@@ -197,7 +199,7 @@ func StringToRegexpHookFunc() mapstructure.DecodeHookFuncType {
 
 		if dataStr != "" {
 			if result, err = regexp.Compile(dataStr); err != nil {
-				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, kindStr, err)
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType, err)
 			}
 		}
 
@@ -206,7 +208,7 @@ func StringToRegexpHookFunc() mapstructure.DecodeHookFuncType {
 		}
 
 		if result == nil {
-			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseEmptyValue, kindStr, errDecodeNonPtrMustHaveValue)
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseEmptyValue, prefixType, expectedType, errDecodeNonPtrMustHaveValue)
 		}
 
 		return *result, nil
@@ -222,11 +224,11 @@ func StringToAddressHookFunc() mapstructure.DecodeHookFuncType {
 			return data, nil
 		}
 
-		kindStr := "Address"
+		prefixType := ""
 
 		if t.Kind() == reflect.Ptr {
 			ptr = true
-			kindStr = "*" + kindStr
+			prefixType = "*"
 		}
 
 		expectedType := reflect.TypeOf(schema.Address{})
@@ -242,7 +244,7 @@ func StringToAddressHookFunc() mapstructure.DecodeHookFuncType {
 		var result *schema.Address
 
 		if result, err = schema.NewAddressFromString(dataStr); err != nil {
-			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, kindStr, err)
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType, err)
 		}
 
 		if ptr {
@@ -252,3 +254,131 @@ func StringToAddressHookFunc() mapstructure.DecodeHookFuncType {
 		return *result, nil
 	}
 }
+
+// StringToX509CertificateHookFunc decodes strings to x509.Certificate's.
+func StringToX509CertificateHookFunc() mapstructure.DecodeHookFuncType {
+	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+		if f.Kind() != reflect.String {
+			return data, nil
+		}
+
+		if t.Kind() != reflect.Ptr {
+			return data, nil
+		}
+
+		expectedType := reflect.TypeOf(x509.Certificate{})
+
+		if t.Elem() != expectedType {
+			return data, nil
+		}
+
+		dataStr := data.(string)
+
+		var result *x509.Certificate
+
+		if dataStr == "" {
+			return result, nil
+		}
+
+		var i interface{}
+
+		if i, err = utils.ParseX509FromPEM([]byte(dataStr)); err != nil {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, err)
+		}
+
+		switch r := i.(type) {
+		case *x509.Certificate:
+			return r, nil
+		default:
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, fmt.Errorf("the data is for a %T not a *%s", r, expectedType))
+		}
+	}
+}
+
+// StringToX509CertificateChainHookFunc decodes strings to schema.X509CertificateChain's.
+func StringToX509CertificateChainHookFunc() mapstructure.DecodeHookFuncType {
+	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+		var ptr bool
+
+		if f.Kind() != reflect.String {
+			return data, nil
+		}
+
+		prefixType := ""
+
+		if t.Kind() == reflect.Ptr {
+			ptr = true
+			prefixType = "*"
+		}
+
+		expectedType := reflect.TypeOf(schema.X509CertificateChain{})
+
+		if ptr && t.Elem() != expectedType {
+			return data, nil
+		} else if !ptr && t != expectedType {
+			return data, nil
+		}
+
+		dataStr := data.(string)
+
+		var result *schema.X509CertificateChain
+
+		if dataStr == "" && ptr {
+			return result, nil
+		}
+
+		if result, err = schema.NewX509CertificateChain(dataStr); err != nil {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, prefixType, expectedType, err)
+		}
+
+		if ptr {
+			return result, nil
+		}
+
+		if result == nil {
+			return schema.X509CertificateChain{}, nil
+		}
+
+		return *result, nil
+	}
+}
+
+// StringToRSAPrivateKeyHookFunc decodes strings to rsa.PrivateKey's.
+func StringToRSAPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
+	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+		if f.Kind() != reflect.String {
+			return data, nil
+		}
+
+		if t.Kind() != reflect.Ptr {
+			return data, nil
+		}
+
+		expectedType := reflect.TypeOf(rsa.PrivateKey{})
+
+		if t.Elem() != expectedType {
+			return data, nil
+		}
+
+		dataStr := data.(string)
+
+		var result *rsa.PrivateKey
+
+		if dataStr == "" {
+			return result, nil
+		}
+
+		var i interface{}
+
+		if i, err = utils.ParseX509FromPEM([]byte(dataStr)); err != nil {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, err)
+		}
+
+		switch r := i.(type) {
+		case *rsa.PrivateKey:
+			return r, nil
+		default:
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, fmt.Errorf("the data is for a %T not a *%s", r, expectedType))
+		}
+	}
+}
diff --git a/internal/configuration/decode_hooks_test.go b/internal/configuration/decode_hooks_test.go
index cbf653394..69e947de0 100644
--- a/internal/configuration/decode_hooks_test.go
+++ b/internal/configuration/decode_hooks_test.go
@@ -1,6 +1,11 @@
 package configuration_test
 
 import (
+	"bytes"
+	"crypto/ecdsa"
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
 	"net/mail"
 	"net/url"
 	"reflect"
@@ -833,7 +838,7 @@ func TestStringToAddressHookFunc(t *testing.T) {
 			name:     "ShouldFailDecode",
 			have:     "tcp://&!@^#*&!@#&*@!:2020",
 			expected: schema.Address{},
-			err:      "could not decode 'tcp://&!@^#*&!@#&*@!:2020' to a Address: could not parse string 'tcp://&!@^#*&!@#&*@!:2020' as address: expected format is [<scheme>://]<ip>[:<port>]: parse \"tcp://&!@^\": invalid character \"^\" in host name",
+			err:      "could not decode 'tcp://&!@^#*&!@#&*@!:2020' to a schema.Address: could not parse string 'tcp://&!@^#*&!@#&*@!:2020' as address: expected format is [<scheme>://]<ip>[:<port>]: parse \"tcp://&!@^\": invalid character \"^\" in host name",
 			decode:   false,
 		},
 	}
@@ -862,6 +867,426 @@ func TestStringToAddressHookFunc(t *testing.T) {
 	}
 }
 
+func TestStringToRSAPrivateKeyHookFunc(t *testing.T) {
+	var nilkey *rsa.PrivateKey
+
+	testCases := []struct {
+		desc   string
+		have   interface{}
+		want   interface{}
+		err    string
+		decode bool
+	}{
+		{
+			desc:   "ShouldDecodeRSAPrivateKey",
+			have:   x509PrivateKeyRSA1,
+			want:   mustParseRSAPrivateKey(x509PrivateKeyRSA1),
+			decode: true,
+		},
+		{
+			desc:   "ShouldNotDecodeToECDSAPrivateKey",
+			have:   x509PrivateKeyRSA1,
+			want:   &ecdsa.PrivateKey{},
+			decode: false,
+		},
+		{
+			desc:   "ShouldNotDecodeEmptyKey",
+			have:   "",
+			want:   nilkey,
+			decode: true,
+		},
+		{
+			desc:   "ShouldNotDecodeECDSAKeyToRSAKey",
+			have:   x509PrivateKeyEC1,
+			want:   nilkey,
+			decode: true,
+			err:    "could not decode to a *rsa.PrivateKey: the data is for a *ecdsa.PrivateKey not a *rsa.PrivateKey",
+		},
+		{
+			desc:   "ShouldNotDecodeBadRSAPrivateKey",
+			have:   x509PrivateKeyRSA2,
+			want:   nilkey,
+			decode: true,
+			err:    "could not decode to a *rsa.PrivateKey: failed to parse PEM block containing the key",
+		},
+	}
+
+	hook := configuration.StringToRSAPrivateKeyHookFunc()
+
+	for _, tc := range testCases {
+		t.Run(tc.desc, func(t *testing.T) {
+			result, err := hook(reflect.TypeOf(tc.have), reflect.TypeOf(tc.want), tc.have)
+			switch {
+			case !tc.decode:
+				assert.NoError(t, err)
+				assert.Equal(t, tc.have, result)
+			case tc.err == "":
+				assert.NoError(t, err)
+				require.Equal(t, tc.want, result)
+			default:
+				assert.EqualError(t, err, tc.err)
+				assert.Nil(t, result)
+			}
+		})
+	}
+}
+
+func TestStringToX509CertificateHookFunc(t *testing.T) {
+	var nilkey *x509.Certificate
+
+	testCases := []struct {
+		desc   string
+		have   interface{}
+		want   interface{}
+		err    string
+		decode bool
+	}{
+		{
+			desc:   "ShouldDecodeRSACertificate",
+			have:   x509CertificateRSA1,
+			want:   mustParseX509Certificate(x509CertificateRSA1),
+			decode: true,
+		},
+		{
+			desc:   "ShouldDecodeECDSACertificate",
+			have:   x509CACertificateECDSA,
+			want:   mustParseX509Certificate(x509CACertificateECDSA),
+			decode: true,
+		},
+		{
+			desc:   "ShouldDecodeRSACACertificate",
+			have:   x509CACertificateRSA,
+			want:   mustParseX509Certificate(x509CACertificateRSA),
+			decode: true,
+		},
+		{
+			desc:   "ShouldDecodeECDSACACertificate",
+			have:   x509CACertificateECDSA,
+			want:   mustParseX509Certificate(x509CACertificateECDSA),
+			decode: true,
+		},
+		{
+			desc:   "ShouldDecodeEmptyCertificateToNil",
+			have:   "",
+			want:   nilkey,
+			decode: true,
+		},
+		{
+			desc:   "ShouldNotDecodeECDSAKeyToCertificate",
+			have:   x509PrivateKeyEC1,
+			want:   nilkey,
+			decode: true,
+			err:    "could not decode to a *x509.Certificate: the data is for a *ecdsa.PrivateKey not a *x509.Certificate",
+		},
+		{
+			desc:   "ShouldNotDecodeBadRSAPrivateKeyToCertificate",
+			have:   x509PrivateKeyRSA2,
+			want:   nilkey,
+			decode: true,
+			err:    "could not decode to a *x509.Certificate: failed to parse PEM block containing the key",
+		},
+	}
+
+	hook := configuration.StringToX509CertificateHookFunc()
+
+	for _, tc := range testCases {
+		t.Run(tc.desc, func(t *testing.T) {
+			result, err := hook(reflect.TypeOf(tc.have), reflect.TypeOf(tc.want), tc.have)
+			switch {
+			case !tc.decode:
+				assert.NoError(t, err)
+				assert.Equal(t, tc.have, result)
+			case tc.err == "":
+				assert.NoError(t, err)
+				require.Equal(t, tc.want, result)
+			default:
+				assert.EqualError(t, err, tc.err)
+				assert.Nil(t, result)
+			}
+		})
+	}
+}
+
+func TestStringToX509CertificateChainHookFunc(t *testing.T) {
+	var nilkey *schema.X509CertificateChain
+
+	testCases := []struct {
+		desc      string
+		have      interface{}
+		expected  interface{}
+		err, verr string
+		decode    bool
+	}{
+		{
+			desc:     "ShouldDecodeRSACertificate",
+			have:     x509CertificateRSA1,
+			expected: mustParseX509CertificateChain(x509CertificateRSA1),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeRSACertificateNoPtr",
+			have:     x509CertificateRSA1,
+			expected: *mustParseX509CertificateChain(x509CertificateRSA1),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeRSACertificateChain",
+			have:     buildChain(x509CertificateRSA1, x509CACertificateRSA),
+			expected: mustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateRSA),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeRSACertificateChainNoPtr",
+			have:     buildChain(x509CertificateRSA1, x509CACertificateRSA),
+			expected: *mustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateRSA),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldNotDecodeBadRSACertificateChain",
+			have:     buildChain(x509CertificateRSA1, x509CACertificateECDSA),
+			expected: mustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateECDSA),
+			verr:     "certificate #1 in chain is not signed properly by certificate #2 in chain: x509: signature algorithm specifies an RSA public key, but have public key of type *ecdsa.PublicKey",
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeECDSACertificate",
+			have:     x509CACertificateECDSA,
+			expected: mustParseX509CertificateChain(x509CACertificateECDSA),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeRSACACertificate",
+			have:     x509CACertificateRSA,
+			expected: mustParseX509CertificateChain(x509CACertificateRSA),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeECDSACACertificate",
+			have:     x509CACertificateECDSA,
+			expected: mustParseX509CertificateChain(x509CACertificateECDSA),
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeEmptyCertificateToNil",
+			have:     "",
+			expected: nilkey,
+			decode:   true,
+		},
+		{
+			desc:     "ShouldDecodeEmptyCertificateToEmptyStruct",
+			have:     "",
+			expected: schema.X509CertificateChain{},
+			decode:   true,
+		},
+		{
+			desc:     "ShouldNotDecodeECDSAKeyToCertificate",
+			have:     x509PrivateKeyEC1,
+			expected: nilkey,
+			decode:   true,
+			err:      "could not decode to a *schema.X509CertificateChain: the PEM data chain contains a EC PRIVATE KEY but only certificates are expected",
+		},
+		{
+			desc:     "ShouldNotDecodeBadRSAPrivateKeyToCertificate",
+			have:     x509PrivateKeyRSA2,
+			expected: nilkey,
+			decode:   true,
+			err:      "could not decode to a *schema.X509CertificateChain: invalid PEM block",
+		},
+	}
+
+	hook := configuration.StringToX509CertificateChainHookFunc()
+
+	for _, tc := range testCases {
+		t.Run(tc.desc, func(t *testing.T) {
+			actual, err := hook(reflect.TypeOf(tc.have), reflect.TypeOf(tc.expected), tc.have)
+			switch {
+			case !tc.decode:
+				assert.NoError(t, err)
+				assert.Equal(t, tc.have, actual)
+			case tc.err == "":
+				assert.NoError(t, err)
+				require.Equal(t, tc.expected, actual)
+
+				if tc.expected == nilkey {
+					break
+				}
+
+				switch chain := actual.(type) {
+				case *schema.X509CertificateChain:
+					require.NotNil(t, chain)
+					if tc.verr == "" {
+						assert.NoError(t, chain.Validate())
+					} else {
+						assert.EqualError(t, chain.Validate(), tc.verr)
+					}
+				case schema.X509CertificateChain:
+					require.NotNil(t, chain)
+					if tc.verr == "" {
+						assert.NoError(t, chain.Validate())
+					} else {
+						assert.EqualError(t, chain.Validate(), tc.verr)
+					}
+				}
+			default:
+				assert.EqualError(t, err, tc.err)
+				assert.Nil(t, actual)
+			}
+		})
+	}
+}
+
+var (
+	x509PrivateKeyRSA1 = `
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----`
+
+	x509PrivateKeyRSA2 = `
+-----BEGIN RSA PRIVATE KEY-----
+bad key
+-----END RSA PRIVATE KEY-----`
+
+	x509PrivateKeyEC1 = `
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIMn970LSn8aKVhBM4vyUmpZyEdCT4riN+Lp4QU04zUhYoAoGCCqGSM49
+AwEHoUQDQgAEMD69n22nd78GmaRDzy/s7muqhbc/OEnFS2mNtiRAA5FaX+kbkCB5
+8pu/k2jkaSVNZtBYKPVAibHkhvakjVb66A==
+-----END EC PRIVATE KEY-----`
+
+	x509CertificateRSA1 = `
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+`
+
+	x509CACertificateRSA = `
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+
+	x509CACertificateECDSA = `
+-----BEGIN CERTIFICATE-----
+MIIBdzCCAR2gAwIBAgIQUzb62irYb/7B2H0c1AbriDAKBggqhkjOPQQDAjATMREw
+DwYDVQQKEwhBdXRoZWxpYTAeFw0yMjA5MDgxMDEzNDZaFw0yMzA5MDgxMDEzNDZa
+MBMxETAPBgNVBAoTCEF1dGhlbGlhMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE
+b/EiIBpmifCI34JdI7luetygue2rTtoNH0QXhtrjMuZNugT29LUz+DobZQxvGsOY
+4TXzAQXq4gnTb7enNWFgsaNTMFEwDgYDVR0PAQH/BAQDAgKkMA8GA1UdJQQIMAYG
+BFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUxlDPBKHKawuvhtQTN874
+TeCEKjkwCgYIKoZIzj0EAwIDSAAwRQIgAQeV01FZ/VkSERwaRKTeXAXxmKyc/05O
+uDv6M2spMi0CIQC8uOSMcv11vp1ylsGg38N6XYA+GQa1BHRd79+91hC+7w==
+-----END CERTIFICATE-----`
+)
+
+func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
+	block, _ := pem.Decode([]byte(data))
+	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
+		panic("not pem encoded")
+	}
+
+	if block.Type != "RSA PRIVATE KEY" {
+		panic("not private key")
+	}
+
+	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return key
+}
+
+func mustParseX509Certificate(data string) *x509.Certificate {
+	block, _ := pem.Decode([]byte(data))
+	if block == nil || len(block.Bytes) == 0 {
+		panic("not a PEM")
+	}
+
+	cert, err := x509.ParseCertificate(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return cert
+}
+
+func buildChain(pems ...string) string {
+	buf := bytes.Buffer{}
+
+	for i, data := range pems {
+		if i != 0 {
+			buf.WriteString("\n")
+		}
+
+		buf.WriteString(data)
+	}
+
+	return buf.String()
+}
+
+func mustParseX509CertificateChain(datas ...string) *schema.X509CertificateChain {
+	chain, err := schema.NewX509CertificateChain(buildChain(datas...))
+	if err != nil {
+		panic(err)
+	}
+
+	return chain
+}
+
 func testInt32Ptr(i int32) *int32 {
 	return &i
 }
diff --git a/internal/configuration/provider.go b/internal/configuration/provider.go
index 111e5c041..96db9c86b 100644
--- a/internal/configuration/provider.go
+++ b/internal/configuration/provider.go
@@ -61,6 +61,9 @@ func unmarshal(ko *koanf.Koanf, val *schema.StructValidator, path string, o inte
 				StringToURLHookFunc(),
 				StringToRegexpHookFunc(),
 				StringToAddressHookFunc(),
+				StringToX509CertificateHookFunc(),
+				StringToX509CertificateChainHookFunc(),
+				StringToRSAPrivateKeyHookFunc(),
 				ToTimeDurationHookFunc(),
 			),
 			Metadata:         nil,
diff --git a/internal/configuration/provider_test.go b/internal/configuration/provider_test.go
index 3f7aa7b45..1f4b6db95 100644
--- a/internal/configuration/provider_test.go
+++ b/internal/configuration/provider_test.go
@@ -48,7 +48,7 @@ func TestShouldErrorSecretNotExist(t *testing.T) {
 
 	errFmt := utils.GetExpectedErrTxt("filenotfound")
 
-	// ignore the errors before this as they are checked by the valdator.
+	// ignore the errors before this as they are checked by the validator.
 	assert.EqualError(t, errs[0], fmt.Sprintf(errFmtSecretIOIssue, filepath.Join(dir, "authentication"), "authentication_backend.ldap.password", fmt.Sprintf(errFmt, filepath.Join(dir, "authentication"))))
 	assert.EqualError(t, errs[1], fmt.Sprintf(errFmtSecretIOIssue, filepath.Join(dir, "duo"), "duo_api.secret_key", fmt.Sprintf(errFmt, filepath.Join(dir, "duo"))))
 	assert.EqualError(t, errs[2], fmt.Sprintf(errFmtSecretIOIssue, filepath.Join(dir, "jwt"), "jwt_secret", fmt.Sprintf(errFmt, filepath.Join(dir, "jwt"))))
diff --git a/internal/configuration/schema/const.go b/internal/configuration/schema/const.go
index 8ee9867b2..c43eefb9d 100644
--- a/internal/configuration/schema/const.go
+++ b/internal/configuration/schema/const.go
@@ -57,3 +57,8 @@ const (
 // regexpHasScheme checks if a string has a scheme. Valid characters for schemes include alphanumeric, hyphen,
 // period, and plus characters.
 var regexpHasScheme = regexp.MustCompile(`^[-+.a-zA-Z\d]+://`)
+
+const (
+	blockCERTIFICATE   = "CERTIFICATE"
+	blockRSAPRIVATEKEY = "RSA PRIVATE KEY"
+)
diff --git a/internal/configuration/schema/identity_providers.go b/internal/configuration/schema/identity_providers.go
index 0bfb969d9..6c5f461f2 100644
--- a/internal/configuration/schema/identity_providers.go
+++ b/internal/configuration/schema/identity_providers.go
@@ -1,6 +1,7 @@
 package schema
 
 import (
+	"crypto/rsa"
 	"net/url"
 	"time"
 )
@@ -12,8 +13,9 @@ type IdentityProvidersConfiguration struct {
 
 // OpenIDConnectConfiguration configuration for OpenID Connect.
 type OpenIDConnectConfiguration struct {
-	HMACSecret       string `koanf:"hmac_secret"`
-	IssuerPrivateKey string `koanf:"issuer_private_key"`
+	HMACSecret             string               `koanf:"hmac_secret"`
+	IssuerCertificateChain X509CertificateChain `koanf:"issuer_certificate_chain"`
+	IssuerPrivateKey       *rsa.PrivateKey      `koanf:"issuer_private_key"`
 
 	AccessTokenLifespan   time.Duration `koanf:"access_token_lifespan"`
 	AuthorizeCodeLifespan time.Duration `koanf:"authorize_code_lifespan"`
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index e7bda004f..89622968a 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -18,6 +18,7 @@ var Keys = []string{
 	"log.file_path",
 	"log.keep_stdout",
 	"identity_providers.oidc.hmac_secret",
+	"identity_providers.oidc.issuer_certificate_chain",
 	"identity_providers.oidc.issuer_private_key",
 	"identity_providers.oidc.access_token_lifespan",
 	"identity_providers.oidc.authorize_code_lifespan",
diff --git a/internal/configuration/schema/types.go b/internal/configuration/schema/types.go
index 5fb6de70e..6ac00a7a5 100644
--- a/internal/configuration/schema/types.go
+++ b/internal/configuration/schema/types.go
@@ -1,11 +1,18 @@
 package schema
 
 import (
+	"crypto"
+	"crypto/ecdsa"
+	"crypto/ed25519"
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
 	"fmt"
 	"net"
 	"net/url"
 	"strconv"
 	"strings"
+	"time"
 )
 
 // NewAddressFromString returns an *Address and error depending on the ability to parse the string as an Address.
@@ -99,3 +106,161 @@ func (a Address) HostPort() string {
 func (a Address) Listener() (net.Listener, error) {
 	return net.Listen(a.Scheme, a.HostPort())
 }
+
+// NewX509CertificateChain creates a new *X509CertificateChain from a given string, parsing each PEM block one by one.
+func NewX509CertificateChain(in string) (chain *X509CertificateChain, err error) {
+	if in == "" {
+		return nil, nil
+	}
+
+	chain = &X509CertificateChain{
+		certs: []*x509.Certificate{},
+	}
+
+	data := []byte(in)
+
+	var (
+		block *pem.Block
+		cert  *x509.Certificate
+	)
+
+	for {
+		block, data = pem.Decode(data)
+
+		if block == nil || len(block.Bytes) == 0 {
+			return nil, fmt.Errorf("invalid PEM block")
+		}
+
+		if block.Type != blockCERTIFICATE {
+			return nil, fmt.Errorf("the PEM data chain contains a %s but only certificates are expected", block.Type)
+		}
+
+		if cert, err = x509.ParseCertificate(block.Bytes); err != nil {
+			return nil, fmt.Errorf("the PEM data chain contains an invalid certificate: %w", err)
+		}
+
+		chain.certs = append(chain.certs, cert)
+
+		if len(data) == 0 {
+			break
+		}
+	}
+
+	return chain, nil
+}
+
+// X509CertificateChain is a helper struct that holds a list of *x509.Certificate's.
+type X509CertificateChain struct {
+	certs []*x509.Certificate
+}
+
+// Thumbprint returns the Thumbprint for the first certificate.
+func (c *X509CertificateChain) Thumbprint(hash crypto.Hash) []byte {
+	if len(c.certs) == 0 {
+		return nil
+	}
+
+	h := hash.New()
+
+	h.Write(c.certs[0].Raw)
+
+	return h.Sum(nil)
+}
+
+// HasCertificates returns true if the chain has any certificates.
+func (c *X509CertificateChain) HasCertificates() (has bool) {
+	return len(c.certs) != 0
+}
+
+// Equal checks if the provided *x509.Certificate is equal to the first *x509.Certificate in the chain.
+func (c *X509CertificateChain) Equal(other *x509.Certificate) (equal bool) {
+	if len(c.certs) == 0 {
+		return false
+	}
+
+	return c.certs[0].Equal(other)
+}
+
+// EqualKey checks if the provided key (public or private) has a public key equal to the first public key in this chain.
+//
+//nolint:gocyclo // This is an adequately clear function even with the complexity.
+func (c *X509CertificateChain) EqualKey(other any) (equal bool) {
+	if len(c.certs) == 0 || other == nil {
+		return false
+	}
+
+	switch key := other.(type) {
+	case *rsa.PublicKey:
+		return key.Equal(c.certs[0].PublicKey)
+	case rsa.PublicKey:
+		return key.Equal(c.certs[0].PublicKey)
+	case *rsa.PrivateKey:
+		return key.PublicKey.Equal(c.certs[0].PublicKey)
+	case rsa.PrivateKey:
+		return key.PublicKey.Equal(c.certs[0].PublicKey)
+	case *ecdsa.PublicKey:
+		return key.Equal(c.certs[0].PublicKey)
+	case ecdsa.PublicKey:
+		return key.Equal(c.certs[0].PublicKey)
+	case *ecdsa.PrivateKey:
+		return key.PublicKey.Equal(c.certs[0].PublicKey)
+	case ecdsa.PrivateKey:
+		return key.PublicKey.Equal(c.certs[0].PublicKey)
+	case *ed25519.PublicKey:
+		return key.Equal(c.certs[0].PublicKey)
+	case ed25519.PublicKey:
+		return key.Equal(c.certs[0].PublicKey)
+	case *ed25519.PrivateKey:
+		switch pub := key.Public().(type) {
+		case *ed25519.PublicKey:
+			return pub.Equal(c.certs[0].PublicKey)
+		case ed25519.PublicKey:
+			return pub.Equal(c.certs[0].PublicKey)
+		default:
+			return false
+		}
+	case ed25519.PrivateKey:
+		switch pub := key.Public().(type) {
+		case *ed25519.PublicKey:
+			return pub.Equal(c.certs[0].PublicKey)
+		case ed25519.PublicKey:
+			return pub.Equal(c.certs[0].PublicKey)
+		default:
+			return false
+		}
+	default:
+		return false
+	}
+}
+
+// Certificates for this X509CertificateChain.
+func (c *X509CertificateChain) Certificates() []*x509.Certificate {
+	return c.certs
+}
+
+// Validate the X509CertificateChain ensuring the certificates were provided in the correct order
+// (with nth being signed by the nth+1), and that all of the certificates are valid based on the current time.
+func (c *X509CertificateChain) Validate() (err error) {
+	n := len(c.certs)
+	now := time.Now()
+
+	for i, cert := range c.certs {
+		if !cert.NotBefore.IsZero() && cert.NotBefore.After(now) {
+			return fmt.Errorf("certificate #%d in chain is invalid before %d but the time is %d", i+1, cert.NotBefore.Unix(), now.Unix())
+		}
+
+		if cert.NotAfter.Before(now) {
+			return fmt.Errorf("certificate #%d in chain is invalid after %d but the time is %d", i+1, cert.NotAfter.Unix(), now.Unix())
+		}
+
+		if i+1 >= n {
+			break
+		}
+
+		if err = cert.CheckSignatureFrom(c.certs[i+1]); err != nil {
+			return fmt.Errorf("certificate #%d in chain is not signed properly by certificate #%d in chain: %w", i+1, i+2, err)
+		}
+	}
+
+	return nil
+}
diff --git a/internal/configuration/schema/types_test.go b/internal/configuration/schema/types_test.go
index 9d5da92c5..ab83941a1 100644
--- a/internal/configuration/schema/types_test.go
+++ b/internal/configuration/schema/types_test.go
@@ -1,10 +1,17 @@
 package schema
 
 import (
+	"crypto"
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
+	"fmt"
 	"net"
+	"regexp"
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
 )
 
 func TestNewAddressFromString(t *testing.T) {
@@ -48,3 +55,499 @@ func TestNewAddressFromString(t *testing.T) {
 		})
 	}
 }
+
+func TestNewX509CertificateChain(t *testing.T) {
+	testCases := []struct {
+		name             string
+		have             string
+		thumbprintSHA256 string
+		err              string
+	}{
+		{"ShouldParseCertificate", x509CertificateRSA,
+			"956e53c127b18143241fb75d2149369d41ad1e4094c40cedcef22e468b37886b", ""},
+		{"ShouldParseCertificateChain", x509CertificateRSA + "\n" + x509CACertificateRSA,
+			"956e53c127b18143241fb75d2149369d41ad1e4094c40cedcef22e468b37886b", ""},
+		{"ShouldNotParseInvalidCertificate", x509CertificateRSAInvalid, "",
+			"the PEM data chain contains an invalid certificate: x509: malformed certificate"},
+		{"ShouldNotParseInvalidCertificateBlock", x509CertificateRSAInvalidBlock, "", "invalid PEM block"},
+		{"ShouldNotParsePrivateKey", x509PrivateKeyRSA, "",
+			"the PEM data chain contains a RSA PRIVATE KEY but only certificates are expected"},
+		{"ShouldNotParseEmptyPEMBlock", x509CertificateEmpty, "", "invalid PEM block"},
+		{"ShouldNotParseEmptyData", "", "", ""},
+	}
+
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			actual, err := NewX509CertificateChain(tc.have)
+
+			switch len(tc.err) {
+			case 0:
+				switch len(tc.have) {
+				case 0:
+					assert.Nil(t, actual)
+				default:
+					assert.NotNil(t, actual)
+
+					assert.Equal(t, tc.thumbprintSHA256, fmt.Sprintf("%x", actual.Thumbprint(crypto.SHA256)))
+					assert.True(t, actual.HasCertificates())
+				}
+				assert.NoError(t, err)
+			default:
+				assert.Nil(t, actual)
+				assert.EqualError(t, err, tc.err)
+			}
+		})
+	}
+}
+
+func TestX509CertificateChain(t *testing.T) {
+	chain := &X509CertificateChain{}
+
+	assert.Nil(t, chain.Thumbprint(crypto.SHA256))
+	assert.False(t, chain.HasCertificates())
+	assert.Len(t, chain.Certificates(), 0)
+
+	assert.False(t, chain.Equal(nil))
+	assert.False(t, chain.Equal(&x509.Certificate{}))
+
+	assert.False(t, chain.EqualKey(nil))
+	assert.False(t, chain.EqualKey(&rsa.PrivateKey{}))
+
+	cert := MustParseCertificate(x509CertificateRSA)
+	cacert := MustParseCertificate(x509CACertificateRSA)
+
+	chain = MustParseX509CertificateChain(x509CertificateRSA + "\n" + x509CACertificateRSA)
+	key := MustParseRSAPrivateKey(x509PrivateKeyRSA)
+
+	thumbprint := chain.Thumbprint(crypto.SHA256)
+	assert.NotNil(t, thumbprint)
+	assert.Equal(t, "956e53c127b18143241fb75d2149369d41ad1e4094c40cedcef22e468b37886b", fmt.Sprintf("%x", thumbprint))
+
+	assert.True(t, chain.Equal(cert))
+	assert.False(t, chain.Equal(cacert))
+	assert.True(t, chain.EqualKey(key))
+
+	assert.NoError(t, chain.Validate())
+
+	chain = MustParseX509CertificateChain(x509CertificateRSA + "\n" + x509CertificateRSA)
+	assert.EqualError(t, chain.Validate(), "certificate #1 in chain is not signed properly by certificate #2 in chain: x509: invalid signature: parent certificate cannot sign this kind of certificate")
+
+	chain = MustParseX509CertificateChain(x509CertificateRSAExpired + "\n" + x509CACertificateRSAExpired)
+
+	err := chain.Validate()
+	require.NotNil(t, err)
+	assert.Regexp(t, regexp.MustCompile(`^certificate #1 in chain is invalid after 31536000 but the time is \d+$`), err.Error())
+
+	chain = MustParseX509CertificateChain(x509CertificateRSANotBefore + "\n" + x509CACertificateRSAotBefore)
+
+	err = chain.Validate()
+	require.NotNil(t, err)
+	assert.Regexp(t, regexp.MustCompile(`^certificate #1 in chain is invalid before 13569465600 but the time is \d+$`), err.Error())
+}
+
+func MustParseX509CertificateChain(data string) *X509CertificateChain {
+	chain, err := NewX509CertificateChain(data)
+	if err != nil {
+		panic(err)
+	}
+
+	if chain == nil {
+		panic("nil chain")
+	}
+
+	return chain
+}
+
+func MustParseCertificate(data string) *x509.Certificate {
+	block, x := pem.Decode([]byte(data))
+	if block == nil {
+		panic("not pem")
+	}
+
+	if len(x) != 0 {
+		panic("extra data")
+	}
+
+	if block.Type != blockCERTIFICATE {
+		panic(fmt.Sprintf("not certifiate block: %s", block.Type))
+	}
+
+	cert, err := x509.ParseCertificate(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return cert
+}
+
+func MustParseRSAPrivateKey(data string) *rsa.PrivateKey {
+	block, x := pem.Decode([]byte(data))
+	if block == nil {
+		panic("not pem")
+	}
+
+	if len(x) != 0 {
+		panic("extra data")
+	}
+
+	if block.Type != blockRSAPRIVATEKEY {
+		panic(fmt.Sprintf("not rsa private key block: %s", block.Type))
+	}
+
+	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return key
+}
+
+var (
+	// Valid from 2022 to 2122 (years).
+	x509CertificateRSA = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+
+	// Private Key for x509CertificateRSA.
+	x509PrivateKeyRSA = `-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAy71EOkV3jOpVQtVTH5HYcI4PryUCiAEyxAIuO+66gaAa4aCd
+UCRr8iO/pt5nOwPxjPo+hMHhkcKpX7evj+wgYXAccpIQFSCYWTJkaXFL0jL7yFuE
+5xpjgRM/x6FfK0IbN5WmVWO9EjesbyMCyDoYpjwzIrxnB70F9Y0nrXst1SnW/Sy0
+01BQZNzD1tky1KDvEkw7L5mMPZFZMr5wV+ELvbo1LLvvrGYhhzbXWk7pPbxT0gAa
+7yVvQbDKuCDqssAUyQa2JdlDaQocpldtK6l+dc3IsSWKd2UMouta75ngr9E1igy3
+t7owMRqH8NjwKHt6KQeDVSdBnWNjG572vaRimQIDAQABAoIBAA/EhhM8bRQqzo5t
+lBFNaELNu8kCRD/iV9tzj8BzqVt+2JW9qG8bYn9K5Po1HCglFfyjIVOE7cAqIJGX
+1a59x8PCuXDkfPolm6TLkZnXeta5u2K2MoLwN+M1aio5AvSGGTUkD8tr/KX8SQwQ
+2ZZFaML0xcBadF7U8jEey4NRlSp5/voiIAB+FrJHepZBz2XJYCX5s2vYLPMn+51R
+1HyO0n2aQ9H1Na8aBjTfAp9GDKJWBV3bSM7cVaLGlMFj/HNXUNVnSsVsJj0tdWKz
+K6r9zPskLnS+eNjCgqrOtZSqJ7M3PL0/PoTFPrr1Fevr+soKWCaPF94Ib94O9SEq
+scvP3kECgYEA0HBdGab0HjcZgFtsIaMm+eBcDhUmUrvMPUw6FmspKnc8wplscONW
+wrDGhR0dpT8+aAMD5jFC2pvyHjI5AWkW+53LB15j6SVzUlUMfS3VTwE2prLtDHDs
+nCDW2+fXY2kjv45efZGpMGbLJVePx2RCPzUlAlc14lzxnHgpo7eho1cCgYEA+jpi
+Eo/Jqa5CNd4hrXqFxZTFtU2Mn38ZKI3QK/l47/347yHLebjsYIIwJRoHenxWxNlz
+Y+BZ38vkP+f9BGAVGiRcyMmIJU0X305wKwl26Y2Q/tEm2OpwmDboD2pL9byi9vfY
+bz7pQGK/l9j86KofRwVJJRLsofPI1SsjnC8c448CgYAkpg0IjJ1RjriSJADwLSKW
+PseQxlE1rMVtZbC07mSPjeWGBbnWY3KGytQs5YCn5GXRne4alEC/9Tlt68CwKc0b
+spPXGNaSUL5lFIUcoWlm+bylNMKPNG+1x+RfR/VMCll5vcuJYooP85L2Xt3t3gfz
+2yFFtxXHVjY5H7uaiJgIAwKBgQDvkGXEj5TqtsL8/6YOiHb6Kuz+Hzi6mtxjTyI2
+d6mpWuWxTBGaf8kOvJWLb9gpFFGeNPGcdXaWJIZqCJjcT4Dkflu2f/uwepaYXGhX
+S8Bk6fwfee5PTmRt1mNmHsaKhgcfmznDh9+YnPIBVuULe5RmUlEtBWk3xEZKj/qP
+1Ss7UQKBgAwZQz+h5Z/XOJH3Qs5nJBKAZUiYkj3ux7G6tjx0cz7XcUYd/6enBpkY
+JeqVHB6G+bMRLwb+Hc5Vgpbd5GdaUWo8udaghHgSGPUVcn0lK38XhYek6ACGz7Lo
+xEfgtKoBlUq+uPb8H05HY0t9KybA3LA5wkRYYnJ17/nkZtrrJAmX
+-----END RSA PRIVATE KEY-----`
+
+	// Valid from 2022 to 2122 (years).
+	x509CACertificateRSA = `-----BEGIN CERTIFICATE-----
+MIIDBTCCAe2gAwIBAgIQAK/NIAl3Bdg4Xk0y/ZGL7jANBgkqhkiG9w0BAQsFADAT
+MREwDwYDVQQKEwhBdXRoZWxpYTAgFw0yMjEwMDIwMDMwMjFaGA8yMTIyMDkwODAw
+MzAyMVowEzERMA8GA1UEChMIQXV0aGVsaWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+DwAwggEKAoIBAQCg7jdO1HmydfkPzTtz57pvAS3YOdBT0hlNjJ4N2lrKhNnixrzK
++4R1dWQDP2SHbZQ0TskF8eQ8HhTr7AsApotTthJFkUgV2g+bv7wVroz0Hok5xtd4
+bnpOvG3YUCP13Nk3ZVxdQXqR3/G3MrbyiXVPcgU+0giJ8EBykbtMu8L79/1iyk+m
+w4fZfzTOeorRgspO3z3+pTAib2MCTA7bby1dX9qI/ysFPLdbJYfNQDxij8SzNLyJ
+EkQ4kh3jKXf1VcZjbQTtYTZ3JJDqM08OxGMKuXUxPHd72Xlb+Fzql8LjYdEy/YKA
+3r8FMf14lzcjvxtLnFXh//hiXh4+xgXMkrLZAgMBAAGjUzBRMA4GA1UdDwEB/wQE
+AwICpDAPBgNVHSUECDAGBgRVHSUAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE
+FGKpXiZA+8VQyMBqTTep+dVTthSbMA0GCSqGSIb3DQEBCwUAA4IBAQAE4DJg+Rb4
+iiocvxxQ85lhh94ql++E8MKuzIdN7ORs+ybUnsDD1WFDebubroTQuTSBkFrNuGNJ
+8B7NZsHiWWLvNsrnxxeC5CicqfhSDti0rKWsbGyeoq7Kqok5E4pwOzeRsxL2e/Hm
+G6LsUQuQMUG2vxKNynqmJS4VpgSVkiGhUfURFuRRDuRpVQ/XTl7jDIGf/ls7TAZq
+1AnmnSi4Cqy4hrTnwYUYkFCcH69onUKAoaVNl1eAH7ogxakz32WyWObY98NBrjzA
+I6VQlaQNSHtdFqDpu7NWJZZZSgN4BknbMYQEPNYCm701cPB4ahJbpg5C3pVPFSql
+Bc9iI6nN3PCr
+-----END CERTIFICATE-----`
+
+	/*
+				// Private Key for x509CACertificateRSA.
+				x509CAPrivateKeyRSA = `-----BEGIN RSA PRIVATE KEY-----
+		MIIEpAIBAAKCAQEAoO43TtR5snX5D807c+e6bwEt2DnQU9IZTYyeDdpayoTZ4sa8
+		yvuEdXVkAz9kh22UNE7JBfHkPB4U6+wLAKaLU7YSRZFIFdoPm7+8Fa6M9B6JOcbX
+		eG56Trxt2FAj9dzZN2VcXUF6kd/xtzK28ol1T3IFPtIIifBAcpG7TLvC+/f9YspP
+		psOH2X80znqK0YLKTt89/qUwIm9jAkwO228tXV/aiP8rBTy3WyWHzUA8Yo/EszS8
+		iRJEOJId4yl39VXGY20E7WE2dySQ6jNPDsRjCrl1MTx3e9l5W/hc6pfC42HRMv2C
+		gN6/BTH9eJc3I78bS5xV4f/4Yl4ePsYFzJKy2QIDAQABAoIBADlsZw3Y4Ufdsq6B
+		w/oasLqVSB+EmaKfMGosh+VXidgDyZ+S3KDtWJl09uf1wdBVOHHlvvNBGfidn0eD
+		pXVo+AQ5zpFGQtuRQMqJgvqVmzQshTi5i/8sJLZdpDBwgDRlxphusaORDsRojV6a
+		WQ94HwTnIZoF5ggaU1TOTXAW+39er+3CAkHZlqeCHliSdVWdAPy2AGTOKqTP3Pko
+		owbHkuCw53oWsDB9N8zqdVF+UBht0sFOQ8tEHq0OY1HJRtPhfvcFno9rADsna/Tg
+		5m0sWUwP+uQ2+n18ahqunclzANu/w1SE+DVvXmeKdWMXEyuyL7muKsLgW5Ksa4jR
+		h6gAwBUCgYEAwmigbqAWrVhh5W1t388WcfsD0M7a4vMg7a3L5Im5mThgUHu3K5bM
+		EYLR8RnReEUdxdF86ASup4ddyVlz7z+YuQ9+XdTwMLK5Zujqfu9U/vsLHBc8h9eP
+		B7C6etfnTBfQeQryPaako8mixBpS0/pQhDhBHpWcYLLTh+uE17+C2U8CgYEA0+pe
+		EzWj7RHZiaHp6WWOqGuaCa3JR0uh2zns1gVx0cCdaCYFI+fOmrihrvBCYTXCiDZ4
+		k4HGD48i1R8nUsV6HJfw0yhR2UmB46TnFYb0RgzuJhXlXtlivYVbSDhyzl1NBafC
+		9zuCITMqGw921w/unOamMD94VSBfxT4EMBpvV1cCgYEAlhNuxfePigHQkOwJBd03
+		1oWQTIFjOA+4O8MOwz4OqNl8gKUAogWnQ11Z9GWZ7t5sPWmaowH6UhmNrQIBHZBa
+		tYHga08WnIFb3rWvUI4xbyUdTnIhqDwfjjA/xNUnGPbJWKe6mR0ru8TMgdZQWpPB
+		1FAY9SNJtNxXr3WA94w/1sECgYBu0cEgioyPDSaVsvZ/93wC10JWjWsUvZiG7GPO
+		CErdRb0LGdbWUALbJnJm6X3NGDACy3mCqfrJaDDvArutrVeOXGa0BgHHf4lNYo71
+		0v0rJNflUs4AK+5W7cYunlZrVJ9StchfQd9rPTZnsE6VaN9/bZ663HYxDh0HKMdH
+		4IsZQQKBgQCsBJ2bP9dc7QcqMXs8k37USIMs4nz6YWkV0Q74bBhbbnKIhY4mxhwf
+		5WMBUntxYQT0yyygA8q/wJrjiWI9dr+Le0VAtg4Wn8CW0bNYvnMySn2++2E8m6jM
+		DBXePomOtkIwEdLGcO8csBLYQKn4x/5ONpYI2QAifIB8Gdxqnp5clg==
+		-----END RSA PRIVATE KEY-----`
+	*/
+
+	// Valid from 1970 to 1971 (years).
+	x509CertificateRSAExpired = `-----BEGIN CERTIFICATE-----
+MIIC5jCCAc6gAwIBAgIRAPKEPEnRO1hurtNAdEuDJA8wDQYJKoZIhvcNAQELBQAw
+EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAN+qPAlnoqHMeBeXUF7qnaZXvHS4p8m2N9+hU8us6GYl3mYdFRDy
+PGBYWewtIE0RsexBa7UYOV6IXdfheipsmRZZzUxjPbP/VfNuafxdZMVgQzWZZAtt
+JJHRhLBATSfkutoPe3eUXxFonEhvl5ErU4327M9cZlLPRsIiVoTWOmigTT0jctx+
+u/3IyEVtV982SpttYnpCZ9lCvaSgjpvf1Mim+dbGF0KPKitAbuFnNpWsbRzIYfiy
+rGMvxuftkywJ/e6Lx34HJjq/4+K1qII9clIiwAxa1RTnLbBuSLzVHxmj3L5hQhap
+jf7HMhLReW2XLJNw4xUShSKpvapBRGbly18CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+AQELBQADggEBAE5cRfJFTGOozfa9vOedNjif6MLqCtnVv9SRy7k/pdz0KSpYfpRo
+dPJ0kBIV2JwIVAXfge6SNn5DK/fyDzERq/kQaCzgBZ6//hCf6Y1BApGajLvOmhPx
+KijvMtqQ8IZnqwrURN04pQCt936grsas3Y6haxNyfdJDnQ5FgTe6kDOJU+rXyLp1
+N7H6hMXAd9+T++F50PM8AwtRZM6jSUVEhyrniKQSdkOQnXO5ng9if/7GntNzn56o
+7cV3sBeenxEmvaXsR30C+A+Ankxr8HBlVOCYcJpbtsCmOB2PVRq9Q5KJAylHRWE1
+JedOdWjWvrVaP2IqRopS9mV3Ckf1E19YWFg=
+-----END CERTIFICATE-----`
+
+	/*
+			// Private Key for x509CertificateRSAExpired.
+			x509PrivateKeyRSAExpired = `-----BEGIN RSA PRIVATE KEY-----
+		MIIEowIBAAKCAQEA36o8CWeiocx4F5dQXuqdple8dLinybY336FTy6zoZiXeZh0V
+		EPI8YFhZ7C0gTRGx7EFrtRg5Xohd1+F6KmyZFlnNTGM9s/9V825p/F1kxWBDNZlk
+		C20kkdGEsEBNJ+S62g97d5RfEWicSG+XkStTjfbsz1xmUs9GwiJWhNY6aKBNPSNy
+		3H67/cjIRW1X3zZKm21iekJn2UK9pKCOm9/UyKb51sYXQo8qK0Bu4Wc2laxtHMhh
+		+LKsYy/G5+2TLAn97ovHfgcmOr/j4rWogj1yUiLADFrVFOctsG5IvNUfGaPcvmFC
+		FqmN/scyEtF5bZcsk3DjFRKFIqm9qkFEZuXLXwIDAQABAoIBADBgYrHqD3wNfKAl
+		o0WUW1riOSnJ0sjHN9iPzU8NbArEABF4Etlie3qfQXva2tSwkho2oDRANBBlUF7k
+		LwdEC+yQqd3uzSbEgHOxmwzxql0ikAbk0YXDKpi7h4aTsdyCFYQauyrHFbTvOnZU
+		ZKUKiPz4vomvQ5Z/rJ9KzAnZSDLeqbJfBXPPitlE8DAiYypGKDUmX0unMJh/x0Pw
+		mIP/DTd+nMl+QpoSR0nS8r8Pr+4oBJ8K6k9Oni2DKdIW8IvoQJBBa9cm8Y0fHkSl
+		hB7fncY5bE0lOZ8jBlSNuGfZHjVihwBA+rYAcWpyzdBx3SHRSe5AH4RKBPaERgSt
+		SBV35PECgYEA7ayQs2SMggOiEK4Wf9AzywieaHiHa2ObJRg2dHlIgVkUDL3zB/b6
+		57jPMXAtMyGQDW6pZF6Oq3mgYP2A9alB6QKjpX1OGFmqZJxtRMAm0KPs2C2inWzg
+		dz9OW18jDlKKsHR00JktqsNgOZC8ldE2cyqgwBNXT/P9GyUMC9RmYhkCgYEA8Okk
+		9u8IoIHJEWbtmmh0d1CEmPz4zQosTgUl2GLbNaCE/zDvA82YUQmi1yaF1FHjXMoa
+		tD0Plkixoj/ezASeSE+duVpgXflYL4IHbqQq9JQg39vyaSuU1g3wP+hnmnCT62vb
+		z4v7ugDLLkSlvNeEQLR3GvZvInZnfdwI5/mjeDcCgYA1UGlhJGP0YjY/gZ2gbCbC
+		G5vVGXxfFYfeyVClzfL6uO2rcgyLM9bSlf08PMqW1qeGq9Upo6BjTLQyLYt5D8+u
+		Ih5tZ+9VvP9g9En6ixPp52ugjpQUtjCf7z53dp7ZfqCHtofhpwq8bHkwUIxNGxIY
+		wW4vx+blE3kqVqQeHzYcOQKBgBgBAv/fvVpQ1Dn5qX8THVeuHCgqPJghhVyYwraW
+		0wS648WRmJ8mYyDf9uu9GOSY7DCYqqR+2Qi+YYSrHIXzh9nopOyNBsEWUSUarabm
+		kKkiAUyM29CC2Sei5+dWPsxynyp76sD5T7Gu1o/boy/3wWO5F40GNPiYF6PAwtpq
+		U1FtAoGBANfr5OcnCIdtHLCEVRCaJdzTkQj5X1g9dF0D/gWkBIF0hibcs9yV2i1Z
+		JtxBrOvctkRsY7/C8dCms1gkfwDyTpKuMk9iDd3wfDGP3LdD1+V10pCm5ShHIGNm
+		/pRFpN45nR5iCX9mnvr8YJLUsrBkh7N4c4ao8xsXzOLBOk8WvtXL
+		-----END RSA PRIVATE KEY-----`
+	*/
+
+	// Valid from 1970 to 1971 (years).
+	x509CACertificateRSAExpired = `-----BEGIN CERTIFICATE-----
+MIIDAzCCAeugAwIBAgIQB07G1WhPAiAHaM6FogkZ7TANBgkqhkiG9w0BAQsFADAT
+MREwDwYDVQQKEwhBdXRoZWxpYTAeFw03MDAxMDEwMDAwMDBaFw03MTAxMDEwMDAw
+MDBaMBMxETAPBgNVBAoTCEF1dGhlbGlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEArly1jZXqLaAQJwTaoT0QaePV7SejQZj418Id7X7Gx1bgjmIS0mL8
+058c8Av1ThRaUmVAMkbBc4MED9KnKKckU+qMBV0+2xovrn7TvAKHG3yLUtasn/Uz
+2UzBXMgbCIMVCloWkPQ6BuSaNsZnSBmTj/IC16bAZwm5lIS9ZjzQ+QnZg8x5ftNR
+Jx8Gar8xb4tQbhb6uZU5zxfuV1+4qk04lf6E48IVrf57NBXpJhdzxuvdBj0l46k3
+zf44gybrXpr9O0n0Eb/H8lkIoIDM+vanoRvdg868QQw8C/r06M4E8gJJzZk7Ad2c
+oCq66peom6eLUSo2DVfVmmQ2KjLUyW0L6QIDAQABo1MwUTAOBgNVHQ8BAf8EBAMC
+AqQwDwYDVR0lBAgwBgYEVR0lADAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQ
+qzXTP6jV517cAknynvP0vr4ChzANBgkqhkiG9w0BAQsFAAOCAQEAGvX14cJM+uxh
+rSBYa3qHEfSvlSwbQsCxZv5VXLJj6SLYUXqMLxCuPH16ZKD8MygmnF5/8Mp3ZIdF
+Aesehtaoth1H06q6iXWw+wgT9fZKGIHL4RftvjFWncD+Lbk8hP/DkLqsGt+Mj23u
+JAByhiG8QmbXu/X7kfXSvXjhQ7f7C+bNKxb03r7mT5gI8mCUp5MyLp3DPk3dKTwa
+uby/wjlFMHi92HjfQ6mCn5ijc/ltiMh1wtXf53IEESYvrWV5ABjV8xnumI4j4idB
+7yHjCn5id379go8e8a+W8jODNzUORzSio8tDhL4c13tiD4PzlMJ1tUr+CIoCzqB5
+m99SvwJ74A==
+-----END CERTIFICATE-----`
+
+	/*
+			// Private Key for x509CACertificateRSAExpired.
+			x509CAPrivateKeyRSAExpired = `-----BEGIN RSA PRIVATE KEY-----
+		MIIEowIBAAKCAQEArly1jZXqLaAQJwTaoT0QaePV7SejQZj418Id7X7Gx1bgjmIS
+		0mL8058c8Av1ThRaUmVAMkbBc4MED9KnKKckU+qMBV0+2xovrn7TvAKHG3yLUtas
+		n/Uz2UzBXMgbCIMVCloWkPQ6BuSaNsZnSBmTj/IC16bAZwm5lIS9ZjzQ+QnZg8x5
+		ftNRJx8Gar8xb4tQbhb6uZU5zxfuV1+4qk04lf6E48IVrf57NBXpJhdzxuvdBj0l
+		46k3zf44gybrXpr9O0n0Eb/H8lkIoIDM+vanoRvdg868QQw8C/r06M4E8gJJzZk7
+		Ad2coCq66peom6eLUSo2DVfVmmQ2KjLUyW0L6QIDAQABAoIBAAiOZBpekO9MO36u
+		rkvbQ0Lu+0B4AXrmls9/pxhQcFC34q0aAvJwCRgZZsIg1BjQxt3kOhI9hqC0fS6J
+		l8pW6WF00QoyWTNHRa+6aYmAVkDzC6M1BaOT1MeFDLgQ2cLBK/cmFJVoZrCP50Fo
+		2wieuK8HoTwT4r0rrP+sw96QfXC7BjC1VSL9GXYemKz0RXEUvXXmzGGc9YE8vCt/
+		PXOb4TV30TIQrivkywSTJi8A1jUjYI2rPgo6JCl6GZGmc7hVX4jJ9lbBhUH76ozO
+		KS1Yzo/veWL4rVspc2exT5cuX7JIuFCjVi0Nlv1MKv39jpfTfKQh0ug6pHlxUzqX
+		Rl6Ln0ECgYEAwX0HtsmKMoSIrU4k90TKyhzjNoL8EaMKrSoZ4nK599igd8g+y6eD
+		jc1qO60lOHObyLPFor0rQT7K2KCD7GKYSX5+sh9leQEASl7cJkSAG17WBlrf9Pas
+		nUXjTRx3moEILAWmuov4UrYpkuEFk65d98xP3uPtDylFj57Bc+a8DOcCgYEA5rHK
+		qdjE8c0/1kgmItDJjmKxrJ5K5hY4w7SkpZeg4Rwr2WAjv3je/nx34D8S7m6R2uzp
+		NQYAAHXdzHt4iegupyW/3UXJboEscSTuC6/v3llawAozh02nDsMrdC1LreQ1IiFy
+		mKDmPZWxiAZXxEJ0hi0YMCcQnBY673eAleostq8CgYEAtia/mVvYh0Bv7z9O253e
+		jzFs0ce0B+KGzYiB/8XjvyknwDw6qbzUwy0romyZSrDDasma+F7AFtdHXXKXX3Ve
+		SmoUWhnmjGjd3iW5eSkptRqtwCPTDKkgzZqapuBy1Hg+ujrDwIC+0Rb+wnCmsGYJ
+		vpuQYZQPeyNugguBsVv5kucCgYBToTRE6k5LEgsIVVNt356RvXmHiELCsl+VotDl
+		Ltilgp7qyI1tBhZgzyJt6q+kO/UoFiZckHZDtHbZgBEsfT0cXvT09C2Xn8BKrAaX
+		ugoM4vuhDpGrhR0AnwQLs7fxq/8PBm0So5GT1cZr91Ct1yGC2qogGqlMzEpFMV8t
+		+ZyIBQKBgFyI2cZ3/uHQMkWUguml9w134bIGpqGdp8jf9YTvWs3Ax8/qxAVmFmtm
+		fot+QiamambblrhdT6pau11Mp06FzytorQH0qKd8mPAqvqtvcSoDZzqXjrkUnZIx
+		uLUcfb41clRhlfGDUj5MWimfi7d/Vakh86zAa8pg5WBCtXr0bZ/j
+		-----END RSA PRIVATE KEY-----`
+	*/
+
+	// Valid from 2400 to 2401 (years).
+	x509CertificateRSANotBefore = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+
+	/*
+			// Private Key for x509CertificateRSANotBefore.
+			x509PrivateKeyRSANotBefore = `-----BEGIN RSA PRIVATE KEY-----
+		MIIEowIBAAKCAQEA8VhiKd2dF+zxol9dtpfkhFWPXS4qVPiLQHAnkhhoLg7/dRCS
+		bt2jyUvYRrY3Yvm1AmGTZ37KhYY95pTK5g/r3aM8D7gFbpE+6uhI8H1YRT7HWKuK
+		38DMm1q+DQu7Z8ZmRfEBkmPYyWtdPtyxobBEC+88QdLoQlbhS0RFgip+koYHf0ix
+		SEo29jd50X2yixQAmaJnxDgr+5ijILHKITVAotqIiNxknG3NeTPBUHLVmWYb6vlU
+		02C5BAWxLx/u5GU6ajSjeEMb10HJSfs+AUQTFuAG12Y2gg+T+l8wUzw0gcr7A4Kr
+		9I7Z78xfQiElld+rZVNkWCuKw+i+DwakdIdEKQIDAQABAoIBACGcZHdeJK2bUv+A
+		9oUiXDHN1JxufHi+8G218NzYx1F6xzrfZvVHqrKy/FjEsav4CKxfOG8Wak/0JRTC
+		rgsiNn/0Zr3tq9v9IF0IonfTjQJ/vrVrlniY2iXcmlEozB2ktMOSz9w6SYurhx3l
+		EFvrN17OH38vRydOACxCQsfg8SWofY6SV0gcvlCcuM4lKBiuOBWGcf+xwIs3B+Bs
+		Frd282jRWtlcYd+zDE+vLxugNizLGpRKCMEdcKPRw9fkBKDI/f56WegNTUZYYFrV
+		LEmYIbOwMawvbi0mOdLsp27CfmeUjkEbwzgdNwjFrWIFAk0wT3QvDrKxDYDLM2Z3
+		+PtBMwECgYEA9ICYgzPMbN3CsQ+eWSQXXNk35V7PlMl1DC4UIHhi53BMT1ZhvkHf
+		D+eqXQ3BSqOUR7b417VBGkK8UtQuQXh9FwwVU0RhVkjpX0nTBhe8gGF3f3094rX4
+		Ckhm8XYQEWCUA9HNhCW+KSNVWqgw9Qi0awEY7HaiR628br39/EckvokCgYEA/LHI
+		HA9ixEBeTjds52rK6n9bPHeI87qxF62lLQYXvosyJij9/ruUfXwfJjG3EvCfcW7N
+		fr2EvgzPbCozC1V6gI9k5CXhOsf+wD6M8A7g7YHUa/dPq2B8bfqaMD0vW7OoZiLQ
+		NpfMtBvZxd1wukPGypLGWabPLo8u6bSfxTqz8KECgYAudnmFBUTls0aaKyOmQOuH
+		o2ex2NCNr7Lke6UrfnUdEgQOV5X/d7kR5q5DPKfsrSUyc5zaMQGMIf5zpwqbOnBa
+		/trWlfoBUZ23k+ncEIqrwtnYik5GVNor6hJV9F+dTcMS7r2lTR7T5nkD305eYicW
+		5oB7/xdbk7JpQQWQ+VwMMQKBgQC3hbKs1mvH1mvnaI+aftACgR5VCweW4/bsGHwG
+		+A7Unyl713eowrk0ban9xkuM4N8btfpe2uuGT61xhDBwQdNnfT0sCWrLkyasnoEj
+		c9reA9Wv1/yvnbKg+Ul0UWuMsS1TiGMp0xOjlzqRXqMZVFITG4gc4m5EBU9wAnOq
+		/VhkIQKBgBUwpoL+K1OswQKV/SHH7n5b/By02mLuMkQR0NlpWRJY6eTDk3FAUkHn
+		+T996U0a+7OY+mATVqrfLBcsa6i+HGpb4jZL+kkdtfmtHUnN8YOAwopWp3uoPRmF
+		lpakAQq8NPVcrX6PLDkHeOlKhE4ercYFqcCRKcnMB3nD+re6x5l6
+		-----END RSA PRIVATE KEY-----`
+	*/
+
+	// Valid from 2400 to 2401 (years).
+	x509CACertificateRSAotBefore = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+
+	/*
+			// Private Key for x509CACertificateRSAotBefore.
+			x509CAPrivateKeyRSANotBefore = `-----BEGIN RSA PRIVATE KEY-----
+		MIIEpAIBAAKCAQEAnu+lFINdW/A4saaNtl2gbbk52xaCaFUBakUJSJ+i2qivP7P5
+		WDA+e9UOnVxOnTvL6YMkr74Y0E4bWlLkbiivpjUcCVPecakTQViGu0MFCaG+pXTq
+		Y8z8Orkki4aKO7gtfQoGVoUm6Al6/DfJKeg9S7QFD2ZNlSCCA3B62qwBftOKgWNO
+		RUgy2CtqeKA69aMlDIuWaIrVM6AyqBZg1HbRITgKSYin1KM515buQ1Uw6iNHH1pW
+		ASUDZM3nv8l77+0tu9MMMI/2jn1IhfGfk3olDb9d0Nk80EevGeZyFBUNdYKQ/QCC
+		RXtXV2Xy6vzmIR034XfUq93SfMIJoLdhQzGCZwIDAQABAoIBAEneATBOeYZwWDkg
+		un5Gd3hnfN85T/SjhVvZqB3rq6nKemC2Ca4WBgRRmlBChXsIPpZR0CwpwqiVlJrf
+		KbGVEUXDKzuekiTrOrrFJSFFXcMDPHLzqrglnhjA0Z5TMk3dJK8XiKiPi+yN823j
+		k4f5mvtjOHLWzjn/+M0WatLU3IEPnqpnE+pEKrkZQa7Mg+xHprvt67Q4aCgP5lfy
+		A04eoUo7+TMRsK718vb02E81ZQSLgSbQMd0W8Dkt7vRkYRNL0OKBlPQcP9qZlw5s
+		swy4ne9jgmJKY3mmdnURTjvdJb20dUsSSzseZ8Tj6UYUDntXrB62YhZvC0ZRhGY/
+		Nnf10IECgYEAzSi1l1G6ZblV2g2jPqqD4EsdUvitnN5t592dw52+SyizNj7j+pLt
+		OPi+bt5HW4orHQHlPi6wt1BQIZ7UVHmljKQq7ByxOX0SRrRg428JPlFMjCp3bG1t
+		zmRQwADGkfqn3JQcmY9VDjtn5oCx18bNpDR1gNiK6zImK/jmWBOiaKcCgYEAxlKN
+		vYeG70ZrtVBz6jmX6yOtN8/hBA0mifZVHmkKX6earU3Ds2Uj2Hg+AgMqoFD2aRSp
+		wodEYzV6hSpvdLzqBi6SklnfF4NBqJ51TEFBWaVMUZjTwConOcc+vvvSDbCkmnoF
+		yTcqVm2p91HD7859ACcO+m8nsFJGldbJFl8RkEECgYEAkSLajEkyH2Kk3JTHRr7k
+		eplJDniEgbRNdjmusUN36r3JQnftWkf08FfwiIhRXO37IBNGNN5c/+IePhqZxYUl
+		W8CL6OtHaQ8VDdXvsRXNKTvkdkhYoeksRFVtVtd1orH7bK2PKgdfOalHEKc8qRSo
+		SCEge101sbuRi4wSkH6bZ4MCgYAerDXv0j40U5fk+wRyfWXZoDLyJtyOW9pSDB8u
+		DODl2m45z4UtAb+Bg1dTyFmXYe46Yk+/HlydW3APmHiUfYNUYW+Z4vx2Dn7hLWDG
+		4nDRBJfBJvnZBqv6a65wq1HZfDB5E9ZBQJ7zrxJShfrf4/fBRkkywm5I/vCbzBRd
+		uWZmAQKBgQCJE5rx3rWZz+srunmmkg5LXBMveD+1HRvlwlj/gELG2b2ytNUmnVey
+		2naApHnvW7lZdrADpbzLKGEDB/EsaIPJjqQw45OoIZwPdM4bm0/w5c1ZLnStXGCz
+		Th/7Sva6x6FW7tHY6ldqybcMj8w3kA4ByQEOg2BtPnWTm1NX/qcr8Q==
+		-----END RSA PRIVATE KEY-----`
+	*/
+
+	x509CertificateRSAInvalid = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+
+	x509CertificateRSAInvalidBlock = `-----BEGIN CERTIFICATE-----
+MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+/Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+LuYx2rBYSlMSN5UZQm/RxMtXf^K2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY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+-----END CERTIFICATE-----`
+
+	x509CertificateEmpty = `-----BEGIN CERTIFICATE-----
+-----END CERTIFICATE-----`
+)
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index 78797a283..a41c65420 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -132,6 +132,8 @@ const (
 	errFmtOIDCNoClientsConfigured = "identity_providers: oidc: option 'clients' must have one or " +
 		"more clients configured"
 	errFmtOIDCNoPrivateKey            = "identity_providers: oidc: option 'issuer_private_key' is required"
+	errFmtOIDCCertificateMismatch     = "identity_providers: oidc: option 'issuer_private_key' does not appear to be the private key the certificate provided by option 'issuer_certificate_chain'"
+	errFmtOIDCCertificateChain        = "identity_providers: oidc: option 'issuer_certificate_chain' produced an error during validation of the chain: %w"
 	errFmtOIDCEnforcePKCEInvalidValue = "identity_providers: oidc: option 'enforce_pkce' must be 'never', " +
 		"'public_clients_only' or 'always', but it is configured as '%s'"
 
@@ -294,9 +296,11 @@ var validSessionSameSiteValues = []string{"none", "lax", "strict"}
 var validLoLevels = []string{"trace", "debug", "info", "warn", "error"}
 
 var validWebauthnConveyancePreferences = []string{string(protocol.PreferNoAttestation), string(protocol.PreferIndirectAttestation), string(protocol.PreferDirectAttestation)}
+
 var validWebauthnUserVerificationRequirement = []string{string(protocol.VerificationDiscouraged), string(protocol.VerificationPreferred), string(protocol.VerificationRequired)}
 
 var validRFC7231HTTPMethodVerbs = []string{"GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "TRACE", "CONNECT", "OPTIONS"}
+
 var validRFC4918HTTPMethodVerbs = []string{"COPY", "LOCK", "MKCOL", "MOVE", "PROPFIND", "PROPPATCH", "UNLOCK"}
 
 var validACLHTTPMethodVerbs = append(validRFC7231HTTPMethodVerbs, validRFC4918HTTPMethodVerbs...)
@@ -306,9 +310,13 @@ var validACLRulePolicies = []string{policyBypass, policyOneFactor, policyTwoFact
 var validDefault2FAMethods = []string{"totp", "webauthn", "mobile_push"}
 
 var validOIDCScopes = []string{oidc.ScopeOpenID, oidc.ScopeEmail, oidc.ScopeProfile, oidc.ScopeGroups, oidc.ScopeOfflineAccess}
+
 var validOIDCGrantTypes = []string{"implicit", "refresh_token", "authorization_code", "password", "client_credentials"}
+
 var validOIDCResponseModes = []string{"form_post", "query", "fragment"}
+
 var validOIDCUserinfoAlgorithms = []string{"none", "RS256"}
+
 var validOIDCCORSEndpoints = []string{oidc.AuthorizationEndpoint, oidc.TokenEndpoint, oidc.IntrospectionEndpoint, oidc.RevocationEndpoint, oidc.UserinfoEndpoint}
 
 var reKeyReplacer = regexp.MustCompile(`\[\d+]`)
diff --git a/internal/configuration/validator/identity_providers.go b/internal/configuration/validator/identity_providers.go
index 4cdfa3800..ae0f4808c 100644
--- a/internal/configuration/validator/identity_providers.go
+++ b/internal/configuration/validator/identity_providers.go
@@ -16,45 +16,60 @@ func ValidateIdentityProviders(config *schema.IdentityProvidersConfiguration, va
 }
 
 func validateOIDC(config *schema.OpenIDConnectConfiguration, validator *schema.StructValidator) {
-	if config != nil {
-		if config.IssuerPrivateKey == "" {
-			validator.Push(fmt.Errorf(errFmtOIDCNoPrivateKey))
+	if config == nil {
+		return
+	}
+
+	setOIDCDefaults(config)
+
+	if config.IssuerPrivateKey == nil {
+		validator.Push(fmt.Errorf(errFmtOIDCNoPrivateKey))
+	} else if config.IssuerCertificateChain.HasCertificates() {
+		if !config.IssuerCertificateChain.EqualKey(config.IssuerPrivateKey) {
+			validator.Push(fmt.Errorf(errFmtOIDCCertificateMismatch))
 		}
 
-		if config.AccessTokenLifespan == time.Duration(0) {
-			config.AccessTokenLifespan = schema.DefaultOpenIDConnectConfiguration.AccessTokenLifespan
+		if err := config.IssuerCertificateChain.Validate(); err != nil {
+			validator.Push(fmt.Errorf(errFmtOIDCCertificateChain, err))
 		}
+	}
 
-		if config.AuthorizeCodeLifespan == time.Duration(0) {
-			config.AuthorizeCodeLifespan = schema.DefaultOpenIDConnectConfiguration.AuthorizeCodeLifespan
-		}
+	if config.MinimumParameterEntropy != 0 && config.MinimumParameterEntropy < 8 {
+		validator.PushWarning(fmt.Errorf(errFmtOIDCServerInsecureParameterEntropy, config.MinimumParameterEntropy))
+	}
 
-		if config.IDTokenLifespan == time.Duration(0) {
-			config.IDTokenLifespan = schema.DefaultOpenIDConnectConfiguration.IDTokenLifespan
-		}
+	if config.EnforcePKCE != "never" && config.EnforcePKCE != "public_clients_only" && config.EnforcePKCE != "always" {
+		validator.Push(fmt.Errorf(errFmtOIDCEnforcePKCEInvalidValue, config.EnforcePKCE))
+	}
 
-		if config.RefreshTokenLifespan == time.Duration(0) {
-			config.RefreshTokenLifespan = schema.DefaultOpenIDConnectConfiguration.RefreshTokenLifespan
-		}
+	validateOIDCOptionsCORS(config, validator)
 
-		if config.MinimumParameterEntropy != 0 && config.MinimumParameterEntropy < 8 {
-			validator.PushWarning(fmt.Errorf(errFmtOIDCServerInsecureParameterEntropy, config.MinimumParameterEntropy))
-		}
-
-		if config.EnforcePKCE == "" {
-			config.EnforcePKCE = schema.DefaultOpenIDConnectConfiguration.EnforcePKCE
-		}
-
-		if config.EnforcePKCE != "never" && config.EnforcePKCE != "public_clients_only" && config.EnforcePKCE != "always" {
-			validator.Push(fmt.Errorf(errFmtOIDCEnforcePKCEInvalidValue, config.EnforcePKCE))
-		}
-
-		validateOIDCOptionsCORS(config, validator)
+	if len(config.Clients) == 0 {
+		validator.Push(fmt.Errorf(errFmtOIDCNoClientsConfigured))
+	} else {
 		validateOIDCClients(config, validator)
+	}
+}
 
-		if len(config.Clients) == 0 {
-			validator.Push(fmt.Errorf(errFmtOIDCNoClientsConfigured))
-		}
+func setOIDCDefaults(config *schema.OpenIDConnectConfiguration) {
+	if config.AccessTokenLifespan == time.Duration(0) {
+		config.AccessTokenLifespan = schema.DefaultOpenIDConnectConfiguration.AccessTokenLifespan
+	}
+
+	if config.AuthorizeCodeLifespan == time.Duration(0) {
+		config.AuthorizeCodeLifespan = schema.DefaultOpenIDConnectConfiguration.AuthorizeCodeLifespan
+	}
+
+	if config.IDTokenLifespan == time.Duration(0) {
+		config.IDTokenLifespan = schema.DefaultOpenIDConnectConfiguration.IDTokenLifespan
+	}
+
+	if config.RefreshTokenLifespan == time.Duration(0) {
+		config.RefreshTokenLifespan = schema.DefaultOpenIDConnectConfiguration.RefreshTokenLifespan
+	}
+
+	if config.EnforcePKCE == "" {
+		config.EnforcePKCE = schema.DefaultOpenIDConnectConfiguration.EnforcePKCE
 	}
 }
 
diff --git a/internal/configuration/validator/identity_providers_test.go b/internal/configuration/validator/identity_providers_test.go
index 13d138bba..e087c589b 100644
--- a/internal/configuration/validator/identity_providers_test.go
+++ b/internal/configuration/validator/identity_providers_test.go
@@ -1,6 +1,9 @@
 package validator
 
 import (
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
 	"errors"
 	"fmt"
 	"net/url"
@@ -19,8 +22,7 @@ func TestShouldRaiseErrorWhenInvalidOIDCServerConfiguration(t *testing.T) {
 	validator := schema.NewStructValidator()
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
-			HMACSecret:       "abc",
-			IssuerPrivateKey: "",
+			HMACSecret: "abc",
 		},
 	}
 
@@ -37,7 +39,7 @@ func TestShouldNotRaiseErrorWhenCORSEndpointsValid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			CORS: schema.OpenIDConnectCORSConfiguration{
 				Endpoints: []string{oidc.AuthorizationEndpoint, oidc.TokenEndpoint, oidc.IntrospectionEndpoint, oidc.RevocationEndpoint, oidc.UserinfoEndpoint},
 			},
@@ -60,7 +62,7 @@ func TestShouldRaiseErrorWhenCORSEndpointsNotValid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			CORS: schema.OpenIDConnectCORSConfiguration{
 				Endpoints: []string{oidc.AuthorizationEndpoint, oidc.TokenEndpoint, oidc.IntrospectionEndpoint, oidc.RevocationEndpoint, oidc.UserinfoEndpoint, "invalid_endpoint"},
 			},
@@ -85,7 +87,7 @@ func TestShouldRaiseErrorWhenOIDCPKCEEnforceValueInvalid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			EnforcePKCE:      "invalid",
 		},
 	}
@@ -104,7 +106,7 @@ func TestShouldRaiseErrorWhenOIDCCORSOriginsHasInvalidValues(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			CORS: schema.OpenIDConnectCORSConfiguration{
 				AllowedOrigins:                       utils.URLsFromStringSlice([]string{"https://example.com/", "https://site.example.com/subpath", "https://site.example.com?example=true", "*"}),
 				AllowedOriginsFromClientRedirectURIs: true,
@@ -140,7 +142,7 @@ func TestShouldRaiseErrorWhenOIDCServerNoClients(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 		},
 	}
 
@@ -320,7 +322,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			config := &schema.IdentityProvidersConfiguration{
 				OIDC: &schema.OpenIDConnectConfiguration{
 					HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-					IssuerPrivateKey: "key-material",
+					IssuerPrivateKey: &rsa.PrivateKey{},
 					Clients:          tc.Clients,
 				},
 			}
@@ -344,7 +346,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadScopes(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
@@ -370,7 +372,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadGrantTypes(t *testing.T)
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:         "good_id",
@@ -391,12 +393,66 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadGrantTypes(t *testing.T)
 	assert.EqualError(t, validator.Errors()[0], "identity_providers: oidc: client 'good_id': option 'grant_types' must only have the values 'implicit', 'refresh_token', 'authorization_code', 'password', 'client_credentials' but one option is configured as 'bad_grant_type'")
 }
 
+func TestShouldNotErrorOnCertificateValid(t *testing.T) {
+	validator := schema.NewStructValidator()
+	config := &schema.IdentityProvidersConfiguration{
+		OIDC: &schema.OpenIDConnectConfiguration{
+			HMACSecret:             "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
+			IssuerCertificateChain: mustParseX509CertificateChain(testCert1),
+			IssuerPrivateKey:       mustParseRSAPrivateKey(testKey1),
+			Clients: []schema.OpenIDConnectClientConfiguration{
+				{
+					ID:     "good_id",
+					Secret: "good_secret",
+					Policy: "two_factor",
+					RedirectURIs: []string{
+						"https://google.com/callback",
+					},
+				},
+			},
+		},
+	}
+
+	ValidateIdentityProviders(config, validator)
+
+	assert.Len(t, validator.Warnings(), 0)
+	assert.Len(t, validator.Errors(), 0)
+}
+
+func TestShouldRaiseErrorOnCertificateNotValid(t *testing.T) {
+	validator := schema.NewStructValidator()
+	config := &schema.IdentityProvidersConfiguration{
+		OIDC: &schema.OpenIDConnectConfiguration{
+			HMACSecret:             "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
+			IssuerCertificateChain: mustParseX509CertificateChain(testCert1),
+			IssuerPrivateKey:       mustParseRSAPrivateKey(testKey2),
+			Clients: []schema.OpenIDConnectClientConfiguration{
+				{
+					ID:     "good_id",
+					Secret: "good_secret",
+					Policy: "two_factor",
+					RedirectURIs: []string{
+						"https://google.com/callback",
+					},
+				},
+			},
+		},
+	}
+
+	ValidateIdentityProviders(config, validator)
+
+	assert.Len(t, validator.Warnings(), 0)
+	require.Len(t, validator.Errors(), 1)
+
+	assert.EqualError(t, validator.Errors()[0], "identity_providers: oidc: option 'issuer_private_key' does not appear to be the private key the certificate provided by option 'issuer_certificate_chain'")
+}
+
 func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadResponseModes(t *testing.T) {
 	validator := schema.NewStructValidator()
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:            "good_id",
@@ -422,7 +478,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadUserinfoAlg(t *testing.T
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "key-material",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:                       "good_id",
@@ -448,7 +504,7 @@ func TestValidateIdentityProvidersShouldRaiseWarningOnSecurityIssue(t *testing.T
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:              "abc",
-			IssuerPrivateKey:        "abc",
+			IssuerPrivateKey:        &rsa.PrivateKey{},
 			MinimumParameterEntropy: 1,
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
@@ -476,7 +532,7 @@ func TestValidateIdentityProvidersShouldRaiseErrorsOnInvalidClientTypes(t *testi
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "hmac1",
-			IssuerPrivateKey: "key2",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-with-invalid-secret",
@@ -514,7 +570,7 @@ func TestValidateIdentityProvidersShouldNotRaiseErrorsOnValidPublicClients(t *te
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "hmac1",
-			IssuerPrivateKey: "key2",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "installed-app-client",
@@ -555,7 +611,7 @@ func TestValidateIdentityProvidersShouldSetDefaultValues(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: "../../../README.md",
+			IssuerPrivateKey: &rsa.PrivateKey{},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "a-client",
@@ -691,3 +747,111 @@ func TestValidateOIDCClientRedirectURIsSupportingPrivateUseURISchemes(t *testing
 		})
 	})
 }
+
+var (
+	testCert1 = `
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+
+	testKey1 = `
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----`
+
+	testKey2 = `
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----`
+)
+
+func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
+	block, _ := pem.Decode([]byte(data))
+	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
+		panic("not pem encoded")
+	}
+
+	if block.Type != "RSA PRIVATE KEY" {
+		panic("not private key")
+	}
+
+	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return key
+}
+
+func mustParseX509CertificateChain(data string) schema.X509CertificateChain {
+	chain, err := schema.NewX509CertificateChain(data)
+
+	if err != nil {
+		panic(err)
+	}
+
+	return *chain
+}
diff --git a/internal/handlers/handler_oidc_userinfo.go b/internal/handlers/handler_oidc_userinfo.go
index 0e4c59143..99d3a6012 100644
--- a/internal/handlers/handler_oidc_userinfo.go
+++ b/internal/handlers/handler_oidc_userinfo.go
@@ -9,6 +9,7 @@ import (
 	"github.com/ory/fosite"
 	"github.com/ory/fosite/token/jwt"
 	"github.com/pkg/errors"
+	"github.com/valyala/fasthttp"
 
 	"github.com/authelia/authelia/v4/internal/middlewares"
 	"github.com/authelia/authelia/v4/internal/model"
@@ -35,7 +36,7 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 		ctx.Logger.Errorf("UserInfo Request failed with error: %+v", rfc)
 
 		if rfc.StatusCode() == http.StatusUnauthorized {
-			rw.Header().Set("WWW-Authenticate", fmt.Sprintf(`Bearer error="%s",error_description="%s"`, rfc.ErrorField, rfc.GetDescription()))
+			rw.Header().Set(fasthttp.HeaderWWWAuthenticate, fmt.Sprintf(`Bearer error="%s",error_description="%s"`, rfc.ErrorField, rfc.GetDescription()))
 		}
 
 		ctx.Providers.OpenIDConnect.WriteError(rw, req, err)
@@ -90,9 +91,7 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 
 	claims["aud"] = audience
 
-	var (
-		keyID, token string
-	)
+	var token string
 
 	ctx.Logger.Tracef("UserInfo Response with id '%s' on client with id '%s' is being sent with the following claims: %+v", requester.GetID(), clientID, claims)
 
@@ -109,14 +108,8 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 		claims["jti"] = jti.String()
 		claims["iat"] = time.Now().Unix()
 
-		if keyID, err = ctx.Providers.OpenIDConnect.KeyManager.Strategy().GetPublicKeyID(req.Context()); err != nil {
-			ctx.Providers.OpenIDConnect.WriteError(rw, req, fosite.ErrServerError.WithHintf("Could not find the active JWK."))
-
-			return
-		}
-
 		headers := &jwt.Headers{
-			Extra: map[string]interface{}{"kid": keyID},
+			Extra: map[string]any{"kid": ctx.Providers.OpenIDConnect.KeyManager.GetActiveKeyID()},
 		}
 
 		if token, _, err = ctx.Providers.OpenIDConnect.KeyManager.Strategy().Generate(req.Context(), claims, headers); err != nil {
diff --git a/internal/logging/logger.go b/internal/logging/logger.go
index 761c8e646..3c5a549a4 100644
--- a/internal/logging/logger.go
+++ b/internal/logging/logger.go
@@ -37,8 +37,10 @@ func LoggerCtxPrintf(level logrus.Level) (logger *CtxPrintfLogger) {
 func InitializeLogger(config schema.LogConfiguration, log bool) error {
 	setLevelStr(config.Level, log)
 
-	callerLevels := []logrus.Level{}
+	var callerLevels []logrus.Level
+
 	stackLevels := []logrus.Level{logrus.PanicLevel, logrus.FatalLevel, logrus.ErrorLevel}
+
 	logrus.AddHook(logrus_stack.NewHook(callerLevels, stackLevels))
 
 	if config.Format == logFormatJSON {
diff --git a/internal/oidc/keys.go b/internal/oidc/keys.go
index d5351061d..acbfc17d4 100644
--- a/internal/oidc/keys.go
+++ b/internal/oidc/keys.go
@@ -9,19 +9,17 @@ import (
 	"strings"
 
 	"github.com/ory/fosite/token/jwt"
-	jose "gopkg.in/square/go-jose.v2"
+	"gopkg.in/square/go-jose.v2"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
-	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 // NewKeyManagerWithConfiguration when provided a schema.OpenIDConnectConfiguration creates a new KeyManager and adds an
 // initial key to the manager.
-func NewKeyManagerWithConfiguration(configuration *schema.OpenIDConnectConfiguration) (manager *KeyManager, err error) {
+func NewKeyManagerWithConfiguration(config *schema.OpenIDConnectConfiguration) (manager *KeyManager, err error) {
 	manager = NewKeyManager()
 
-	_, _, err = manager.AddActivePrivateKeyData(configuration.IssuerPrivateKey)
-	if err != nil {
+	if _, err = manager.AddActiveJWK(config.IssuerCertificateChain, config.IssuerPrivateKey); err != nil {
 		return nil, err
 	}
 
@@ -30,174 +28,152 @@ func NewKeyManagerWithConfiguration(configuration *schema.OpenIDConnectConfigura
 
 // NewKeyManager creates a new empty KeyManager.
 func NewKeyManager() (manager *KeyManager) {
-	manager = new(KeyManager)
-	manager.keys = map[string]*rsa.PrivateKey{}
-	manager.keySet = new(jose.JSONWebKeySet)
-
-	return manager
+	return &KeyManager{
+		jwks: &jose.JSONWebKeySet{},
+	}
 }
 
-// Strategy returns the RS256JWTStrategy.
-func (m *KeyManager) Strategy() (strategy *RS256JWTStrategy) {
-	return m.strategy
+// Strategy returns the fosite jwt.JWTStrategy.
+func (m *KeyManager) Strategy() (strategy jwt.JWTStrategy) {
+	if m.jwk == nil {
+		return nil
+	}
+
+	return m.jwk.Strategy()
 }
 
 // GetKeySet returns the joseJSONWebKeySet containing the rsa.PublicKey types.
-func (m *KeyManager) GetKeySet() (keySet *jose.JSONWebKeySet) {
-	return m.keySet
+func (m *KeyManager) GetKeySet() (jwks *jose.JSONWebKeySet) {
+	return m.jwks
 }
 
-// GetActiveWebKey obtains the currently active jose.JSONWebKey.
-func (m *KeyManager) GetActiveWebKey() (webKey *jose.JSONWebKey, err error) {
-	webKeys := m.keySet.Key(m.activeKeyID)
-	if len(webKeys) == 1 {
-		return &webKeys[0], nil
+// GetActiveJWK obtains the currently active jose.JSONWebKey.
+func (m *KeyManager) GetActiveJWK() (jwk *jose.JSONWebKey, err error) {
+	if m.jwks == nil || m.jwk == nil {
+		return nil, errors.New("could not obtain the active JWK from an improperly configured key manager")
 	}
 
-	if len(webKeys) == 0 {
+	jwks := m.jwks.Key(m.jwk.id)
+
+	if len(jwks) == 1 {
+		return &jwks[0], nil
+	}
+
+	if len(jwks) == 0 {
 		return nil, errors.New("could not find a key with the active key id")
 	}
 
-	return &webKeys[0], errors.New("multiple keys with the same key id")
+	return nil, errors.New("multiple keys with the same key id")
 }
 
 // GetActiveKeyID returns the key id of the currently active key.
 func (m *KeyManager) GetActiveKeyID() (keyID string) {
-	return m.activeKeyID
-}
-
-// GetActiveKey returns the rsa.PublicKey of the currently active key.
-func (m *KeyManager) GetActiveKey() (key *rsa.PublicKey, err error) {
-	if key, ok := m.keys[m.activeKeyID]; ok {
-		return &key.PublicKey, nil
+	if m.jwk == nil {
+		return ""
 	}
 
-	return nil, errors.New("failed to retrieve active public key")
+	return m.jwk.id
 }
 
 // GetActivePrivateKey returns the rsa.PrivateKey of the currently active key.
 func (m *KeyManager) GetActivePrivateKey() (key *rsa.PrivateKey, err error) {
-	if key, ok := m.keys[m.activeKeyID]; ok {
-		return key, nil
+	if m.jwk == nil {
+		return nil, errors.New("failed to retrieve active private key")
 	}
 
-	return nil, errors.New("failed to retrieve active private key")
+	return m.jwk.key, nil
 }
 
-// AddActivePrivateKeyData adds a rsa.PublicKey given the key in the PEM string format, then sets it to the active key.
-func (m *KeyManager) AddActivePrivateKeyData(data string) (key *rsa.PrivateKey, webKey *jose.JSONWebKey, err error) {
-	ikey, err := utils.ParseX509FromPEM([]byte(data))
-	if err != nil {
-		return nil, nil, err
-	}
-
-	var ok bool
-
-	if key, ok = ikey.(*rsa.PrivateKey); !ok {
-		return nil, nil, errors.New("key must be an RSA private key")
-	}
-
-	webKey, err = m.AddActivePrivateKey(key)
-
-	return key, webKey, err
-}
-
-// AddActivePrivateKey adds a rsa.PublicKey, then sets it to the active key.
-func (m *KeyManager) AddActivePrivateKey(key *rsa.PrivateKey) (webKey *jose.JSONWebKey, err error) {
-	wk := jose.JSONWebKey{
-		Key:       &key.PublicKey,
-		Algorithm: "RS256",
-		Use:       "sig",
-	}
-
-	keyID, err := wk.Thumbprint(crypto.SHA1)
-	if err != nil {
+// AddActiveJWK is used to add a cert and key pair.
+func (m *KeyManager) AddActiveJWK(chain schema.X509CertificateChain, key *rsa.PrivateKey) (jwk *JWK, err error) {
+	// TODO: Add a mutex when implementing key rotation to be utilized here and in methods which retrieve the JWK or JWKS.
+	if m.jwk, err = NewJWK(chain, key); err != nil {
 		return nil, err
 	}
 
-	strKeyID := strings.ToLower(fmt.Sprintf("%x", keyID))
-	if len(strKeyID) >= 7 {
-		// Shorten the key if it's greater than 7 to a length of exactly 7.
-		strKeyID = strKeyID[0:6]
-	}
+	m.jwks.Keys = append(m.jwks.Keys, *m.jwk.JSONWebKey())
 
-	if _, ok := m.keys[strKeyID]; ok {
-		return nil, fmt.Errorf("key id %s already exists", strKeyID)
-	}
-
-	// TODO: Add Mutex here when implementing key rotation.
-	wk.KeyID = strKeyID
-	m.keySet.Keys = append(m.keySet.Keys, wk)
-	m.keys[strKeyID] = key
-	m.activeKeyID = strKeyID
-
-	m.strategy, err = NewRS256JWTStrategy(wk.KeyID, key)
-	if err != nil {
-		return &wk, err
-	}
-
-	return &wk, nil
+	return m.jwk, nil
 }
 
-// NewRS256JWTStrategy returns a new RS256JWTStrategy.
-func NewRS256JWTStrategy(id string, key *rsa.PrivateKey) (strategy *RS256JWTStrategy, err error) {
-	strategy = new(RS256JWTStrategy)
-	strategy.JWTStrategy = new(jwt.RS256JWTStrategy)
+// JWTStrategy is a decorator struct for the fosite jwt.JWTStrategy.
+type JWTStrategy struct {
+	jwt.JWTStrategy
 
-	strategy.SetKey(id, key)
-
-	return strategy, nil
-}
-
-// RS256JWTStrategy is a decorator struct for the fosite RS256JWTStrategy.
-type RS256JWTStrategy struct {
-	JWTStrategy *jwt.RS256JWTStrategy
-
-	keyID string
+	id string
 }
 
 // KeyID returns the key id.
-func (s RS256JWTStrategy) KeyID() (id string) {
-	return s.keyID
-}
-
-// SetKey sets the provided key id and key as the active key (this is what triggers fosite to use it).
-func (s *RS256JWTStrategy) SetKey(id string, key *rsa.PrivateKey) {
-	s.keyID = id
-	s.JWTStrategy.PrivateKey = key
-}
-
-// Hash is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) Hash(ctx context.Context, in []byte) ([]byte, error) {
-	return s.JWTStrategy.Hash(ctx, in)
-}
-
-// GetSigningMethodLength is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) GetSigningMethodLength() int {
-	return s.JWTStrategy.GetSigningMethodLength()
-}
-
-// GetSignature is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) GetSignature(ctx context.Context, token string) (string, error) {
-	return s.JWTStrategy.GetSignature(ctx, token)
-}
-
-// Generate is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) Generate(ctx context.Context, claims jwt.MapClaims, header jwt.Mapper) (string, string, error) {
-	return s.JWTStrategy.Generate(ctx, claims, header)
-}
-
-// Validate is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) Validate(ctx context.Context, token string) (string, error) {
-	return s.JWTStrategy.Validate(ctx, token)
-}
-
-// Decode is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) Decode(ctx context.Context, token string) (*jwt.Token, error) {
-	return s.JWTStrategy.Decode(ctx, token)
+func (s *JWTStrategy) KeyID() (id string) {
+	return s.id
 }
 
 // GetPublicKeyID is a decorator func for the underlying fosite RS256JWTStrategy.
-func (s *RS256JWTStrategy) GetPublicKeyID(_ context.Context) (string, error) {
-	return s.keyID, nil
+func (s *JWTStrategy) GetPublicKeyID(_ context.Context) (string, error) {
+	return s.id, nil
+}
+
+// NewJWK creates a new JWK.
+func NewJWK(chain schema.X509CertificateChain, key *rsa.PrivateKey) (j *JWK, err error) {
+	if key == nil {
+		return nil, fmt.Errorf("JWK is not properly initialized: missing key")
+	}
+
+	j = &JWK{
+		key:   key,
+		chain: chain,
+	}
+
+	jwk := &jose.JSONWebKey{
+		Algorithm: "RS256",
+		Use:       "sig",
+		Key:       &key.PublicKey,
+	}
+
+	var thumbprint []byte
+
+	if thumbprint, err = jwk.Thumbprint(crypto.SHA1); err != nil {
+		return nil, fmt.Errorf("failed to calculate SHA1 thumbprint for certificate: %w", err)
+	}
+
+	j.id = strings.ToLower(fmt.Sprintf("%x", thumbprint))
+
+	if len(j.id) >= 7 {
+		j.id = j.id[:6]
+	}
+
+	if len(j.id) >= 7 {
+		j.id = j.id[:6]
+	}
+
+	return j, nil
+}
+
+// JWK is a utility wrapper for JSON Web Key's.
+type JWK struct {
+	id    string
+	key   *rsa.PrivateKey
+	chain schema.X509CertificateChain
+}
+
+// Strategy returns the relevant jwt.JWTStrategy for this JWT.
+func (j *JWK) Strategy() (strategy jwt.JWTStrategy) {
+	return &JWTStrategy{id: j.id, JWTStrategy: &jwt.RS256JWTStrategy{PrivateKey: j.key}}
+}
+
+// JSONWebKey returns the relevant *jose.JSONWebKey for this JWT.
+func (j *JWK) JSONWebKey() (jwk *jose.JSONWebKey) {
+	jwk = &jose.JSONWebKey{
+		Key:          &j.key.PublicKey,
+		KeyID:        j.id,
+		Algorithm:    "RS256",
+		Use:          "sig",
+		Certificates: j.chain.Certificates(),
+	}
+
+	if len(jwk.Certificates) != 0 {
+		jwk.CertificateThumbprintSHA1, jwk.CertificateThumbprintSHA256 = j.chain.Thumbprint(crypto.SHA1), j.chain.Thumbprint(crypto.SHA256)
+	}
+
+	return jwk
 }
diff --git a/internal/oidc/keys_test.go b/internal/oidc/keys_test.go
index 8ddfd71f8..1e15973ea 100644
--- a/internal/oidc/keys_test.go
+++ b/internal/oidc/keys_test.go
@@ -8,42 +8,37 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
 )
 
-func TestKeyManager_AddActiveKeyData(t *testing.T) {
+func TestKeyManager_AddActiveJWK(t *testing.T) {
 	manager := NewKeyManager()
-	assert.Nil(t, manager.strategy)
+	assert.Nil(t, manager.jwk)
 	assert.Nil(t, manager.Strategy())
 
-	key, wk, err := manager.AddActivePrivateKeyData(exampleIssuerPrivateKey)
+	j, err := manager.AddActiveJWK(schema.X509CertificateChain{}, mustParseRSAPrivateKey(exampleIssuerPrivateKey))
 	require.NoError(t, err)
-	require.NotNil(t, key)
-	require.NotNil(t, wk)
-	require.NotNil(t, manager.strategy)
+	require.NotNil(t, j)
+	require.NotNil(t, manager.jwk)
 	require.NotNil(t, manager.Strategy())
 
-	thumbprint, err := wk.Thumbprint(crypto.SHA1)
+	thumbprint, err := j.JSONWebKey().Thumbprint(crypto.SHA1)
 	assert.NoError(t, err)
 
-	kid := strings.ToLower(fmt.Sprintf("%x", thumbprint)[0:6])
-	assert.Equal(t, manager.activeKeyID, kid)
-	assert.Equal(t, kid, wk.KeyID)
-	assert.Len(t, manager.keys, 1)
-	assert.Len(t, manager.keySet.Keys, 1)
-	assert.Contains(t, manager.keys, kid)
+	kid := strings.ToLower(fmt.Sprintf("%x", thumbprint)[:6])
+	assert.Equal(t, manager.jwk.id, kid)
+	assert.Equal(t, kid, j.JSONWebKey().KeyID)
+	assert.Len(t, manager.jwks.Keys, 1)
 
-	keys := manager.keySet.Key(kid)
+	keys := manager.jwks.Key(kid)
 	assert.Equal(t, keys[0].KeyID, kid)
 
 	privKey, err := manager.GetActivePrivateKey()
 	assert.NoError(t, err)
 	assert.NotNil(t, privKey)
 
-	pubKey, err := manager.GetActiveKey()
-	assert.NoError(t, err)
-	assert.NotNil(t, pubKey)
-
-	webKey, err := manager.GetActiveWebKey()
+	webKey, err := manager.GetActiveJWK()
 	assert.NoError(t, err)
 	assert.NotNil(t, webKey)
 
diff --git a/internal/oidc/provider.go b/internal/oidc/provider.go
index 670d1e42c..5ca1993f4 100644
--- a/internal/oidc/provider.go
+++ b/internal/oidc/provider.go
@@ -14,17 +14,16 @@ import (
 
 // NewOpenIDConnectProvider new-ups a OpenIDConnectProvider.
 func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, storageProvider storage.Provider) (provider OpenIDConnectProvider, err error) {
-	provider = OpenIDConnectProvider{
-		Fosite: nil,
-	}
-
 	if config == nil {
 		return provider, nil
 	}
 
-	provider.Store = NewOpenIDConnectStore(config, storageProvider)
+	provider = OpenIDConnectProvider{
+		Fosite: nil,
+		Store:  NewOpenIDConnectStore(config, storageProvider),
+	}
 
-	composeConfiguration := &compose.Config{
+	cconfig := &compose.Config{
 		AccessTokenLifespan:            config.AccessTokenLifespan,
 		AuthorizeCodeLifespan:          config.AuthorizeCodeLifespan,
 		IDTokenLifespan:                config.IDTokenLifespan,
@@ -50,19 +49,19 @@ func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, storage
 
 	strategy := &compose.CommonStrategy{
 		CoreStrategy: compose.NewOAuth2HMACStrategy(
-			composeConfiguration,
+			cconfig,
 			[]byte(utils.HashSHA256FromString(config.HMACSecret)),
 			nil,
 		),
 		OpenIDConnectTokenStrategy: compose.NewOpenIDConnectStrategy(
-			composeConfiguration,
+			cconfig,
 			key,
 		),
 		JWTStrategy: provider.KeyManager.Strategy(),
 	}
 
 	provider.Fosite = compose.Compose(
-		composeConfiguration,
+		cconfig,
 		provider.Store,
 		strategy,
 		PlainTextHasher{},
@@ -109,7 +108,7 @@ func (p OpenIDConnectProvider) Pairwise() bool {
 }
 
 // Write writes data with herodot.JSONWriter.
-func (p OpenIDConnectProvider) Write(w http.ResponseWriter, r *http.Request, e interface{}, opts ...herodot.EncoderOptions) {
+func (p OpenIDConnectProvider) Write(w http.ResponseWriter, r *http.Request, e any, opts ...herodot.EncoderOptions) {
 	p.herodot.Write(w, r, e, opts...)
 }
 
diff --git a/internal/oidc/provider_test.go b/internal/oidc/provider_test.go
index f67a73797..b55c6f92a 100644
--- a/internal/oidc/provider_test.go
+++ b/internal/oidc/provider_test.go
@@ -1,6 +1,9 @@
 package oidc
 
 import (
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
 	"net/url"
 	"testing"
 
@@ -20,17 +23,10 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_NotConfigured(t *testing
 	assert.Nil(t, provider.Store)
 }
 
-func TestOpenIDConnectProvider_NewOpenIDConnectProvider_BadIssuerKey(t *testing.T) {
-	_, err := NewOpenIDConnectProvider(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: "BAD KEY",
-	}, nil)
-
-	assert.Error(t, err, "abc")
-}
-
 func TestNewOpenIDConnectProvider_ShouldEnableOptionalDiscoveryValues(t *testing.T) {
 	provider, err := NewOpenIDConnectProvider(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey:         exampleIssuerPrivateKey,
+		IssuerCertificateChain:   schema.X509CertificateChain{},
+		IssuerPrivateKey:         mustParseRSAPrivateKey(exampleIssuerPrivateKey),
 		EnablePKCEPlainChallenge: true,
 		HMACSecret:               "asbdhaaskmdlkamdklasmdlkams",
 		Clients: []schema.OpenIDConnectClientConfiguration{
@@ -63,8 +59,9 @@ func TestNewOpenIDConnectProvider_ShouldEnableOptionalDiscoveryValues(t *testing
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GoodConfiguration(t *testing.T) {
 	provider, err := NewOpenIDConnectProvider(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
-		HMACSecret:       "asbdhaaskmdlkamdklasmdlkams",
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
+		HMACSecret:             "asbdhaaskmdlkamdklasmdlkams",
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
@@ -102,8 +99,9 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GoodConfiguration(t *tes
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnownConfiguration(t *testing.T) {
 	provider, err := NewOpenIDConnectProvider(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
-		HMACSecret:       "asbdhaaskmdlkamdklasmdlkams",
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
+		HMACSecret:             "asbdhaaskmdlkamdklasmdlkams",
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
@@ -193,8 +191,9 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOAuth2WellKnownConfiguration(t *testing.T) {
 	provider, err := NewOpenIDConnectProvider(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
-		HMACSecret:       "asbdhaaskmdlkamdklasmdlkams",
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
+		HMACSecret:             "asbdhaaskmdlkamdklasmdlkams",
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
@@ -270,7 +269,8 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOAuth2WellKnownConfig
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnownConfigurationWithPlainPKCE(t *testing.T) {
 	provider, err := NewOpenIDConnectProvider(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey:         exampleIssuerPrivateKey,
+		IssuerCertificateChain:   schema.X509CertificateChain{},
+		IssuerPrivateKey:         mustParseRSAPrivateKey(exampleIssuerPrivateKey),
 		HMACSecret:               "asbdhaaskmdlkamdklasmdlkams",
 		EnablePKCEPlainChallenge: true,
 		Clients: []schema.OpenIDConnectClientConfiguration{
@@ -293,3 +293,21 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 	assert.Equal(t, "S256", disco.CodeChallengeMethodsSupported[0])
 	assert.Equal(t, "plain", disco.CodeChallengeMethodsSupported[1])
 }
+
+func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
+	block, _ := pem.Decode([]byte(data))
+	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
+		panic("not pem encoded")
+	}
+
+	if block.Type != "RSA PRIVATE KEY" {
+		panic("not private key")
+	}
+
+	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return key
+}
diff --git a/internal/oidc/store_test.go b/internal/oidc/store_test.go
index 412b81551..504af5e07 100644
--- a/internal/oidc/store_test.go
+++ b/internal/oidc/store_test.go
@@ -13,7 +13,8 @@ import (
 
 func TestOpenIDConnectStore_GetClientPolicy(t *testing.T) {
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:          "myclient",
@@ -44,7 +45,8 @@ func TestOpenIDConnectStore_GetClientPolicy(t *testing.T) {
 
 func TestOpenIDConnectStore_GetInternalClient(t *testing.T) {
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:          "myclient",
@@ -76,8 +78,9 @@ func TestOpenIDConnectStore_GetInternalClient_ValidClient(t *testing.T) {
 	}
 
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
-		Clients:          []schema.OpenIDConnectClientConfiguration{c1},
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
+		Clients:                []schema.OpenIDConnectClientConfiguration{c1},
 	}, nil)
 
 	client, err := s.GetFullClient(c1.ID)
@@ -103,8 +106,9 @@ func TestOpenIDConnectStore_GetInternalClient_InvalidClient(t *testing.T) {
 	}
 
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
-		Clients:          []schema.OpenIDConnectClientConfiguration{c1},
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
+		Clients:                []schema.OpenIDConnectClientConfiguration{c1},
 	}, nil)
 
 	client, err := s.GetFullClient("another-client")
@@ -114,7 +118,8 @@ func TestOpenIDConnectStore_GetInternalClient_InvalidClient(t *testing.T) {
 
 func TestOpenIDConnectStore_IsValidClientID(t *testing.T) {
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
-		IssuerPrivateKey: exampleIssuerPrivateKey,
+		IssuerCertificateChain: schema.X509CertificateChain{},
+		IssuerPrivateKey:       mustParseRSAPrivateKey(exampleIssuerPrivateKey),
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:          "myclient",
diff --git a/internal/oidc/types.go b/internal/oidc/types.go
index 02078b914..411a6fd94 100644
--- a/internal/oidc/types.go
+++ b/internal/oidc/types.go
@@ -1,7 +1,6 @@
 package oidc
 
 import (
-	"crypto/rsa"
 	"time"
 
 	"github.com/ory/fosite"
@@ -21,21 +20,21 @@ func NewSession() (session *model.OpenIDSession) {
 	return &model.OpenIDSession{
 		DefaultSession: &openid.DefaultSession{
 			Claims: &jwt.IDTokenClaims{
-				Extra: map[string]interface{}{},
+				Extra: map[string]any{},
 			},
 			Headers: &jwt.Headers{
-				Extra: map[string]interface{}{},
+				Extra: map[string]any{},
 			},
 		},
-		Extra: map[string]interface{}{},
+		Extra: map[string]any{},
 	}
 }
 
 // NewSessionWithAuthorizeRequest uses details from an AuthorizeRequester to generate an OpenIDSession.
-func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string, extra map[string]interface{},
+func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string, extra map[string]any,
 	authTime time.Time, consent *model.OAuth2ConsentSession, requester fosite.AuthorizeRequester) (session *model.OpenIDSession) {
 	if extra == nil {
-		extra = make(map[string]interface{})
+		extra = map[string]any{}
 	}
 
 	session = &model.OpenIDSession{
@@ -53,14 +52,14 @@ func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string,
 				AuthenticationMethodsReferences: amr,
 			},
 			Headers: &jwt.Headers{
-				Extra: map[string]interface{}{
+				Extra: map[string]any{
 					"kid": kid,
 				},
 			},
 			Subject:  consent.Subject.UUID.String(),
 			Username: username,
 		},
-		Extra:       map[string]interface{}{},
+		Extra:       map[string]any{},
 		ClientID:    requester.GetClient().GetID(),
 		ChallengeID: consent.ChallengeID,
 	}
@@ -122,10 +121,8 @@ type Client struct {
 // KeyManager keeps track of all of the active/inactive rsa keys and provides them to services requiring them.
 // It additionally allows us to add keys for the purpose of key rotation in the future.
 type KeyManager struct {
-	activeKeyID string
-	keys        map[string]*rsa.PrivateKey
-	keySet      *jose.JSONWebKeySet
-	strategy    *RS256JWTStrategy
+	jwk  *JWK
+	jwks *jose.JSONWebKeySet
 }
 
 // PlainTextHasher implements the fosite.Hasher interface without an actual hashing algo.
diff --git a/internal/utils/crypto.go b/internal/utils/crypto.go
index e2aa80ee7..853abf511 100644
--- a/internal/utils/crypto.go
+++ b/internal/utils/crypto.go
@@ -182,7 +182,7 @@ func (ekb ECDSAKeyBuilder) Build() (interface{}, error) {
 }
 
 // ParseX509FromPEM parses PEM bytes and returns a PKCS key.
-func ParseX509FromPEM(data []byte) (key interface{}, err error) {
+func ParseX509FromPEM(data []byte) (key any, err error) {
 	block, _ := pem.Decode(data)
 	if block == nil {
 		return nil, errors.New("failed to parse PEM block containing the key")

From c8fa19e6bd2b6b1c1ebe8ba32f06d85ffff6d2ef Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Manuel=20Nu=C3=B1ez?=
 <10672208+mind-ar@users.noreply.github.com>
Date: Sat, 1 Oct 2022 23:51:19 -0300
Subject: [PATCH 087/263] feat(notification): add disable_starttls option
 (#3855)

This adds a boolean option to SMTP which disables StartTLS for SMTP servers that ignore standards.
---
 .../en/configuration/notifications/smtp.md        | 15 ++++++++++++++-
 internal/configuration/schema/keys.go             |  1 +
 internal/configuration/schema/notifier.go         |  1 +
 internal/configuration/validator/const.go         |  1 +
 internal/configuration/validator/notifier.go      |  4 ++++
 internal/notification/smtp_notifier.go            |  6 ++++++
 6 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/docs/content/en/configuration/notifications/smtp.md b/docs/content/en/configuration/notifications/smtp.md
index c29dede50..20cd93a5d 100644
--- a/docs/content/en/configuration/notifications/smtp.md
+++ b/docs/content/en/configuration/notifications/smtp.md
@@ -31,6 +31,7 @@ notifier:
     subject: "[Authelia] {title}"
     startup_check_address: test@authelia.com
     disable_require_tls: false
+    disable_starttls: false
     disable_html_emails: false
     tls:
       server_name: smtp.example.com
@@ -60,7 +61,7 @@ The port the SMTP service is listening on.
 
 A connection is securely established with TLS after a succesful STARTTLS negotiation.
 
-[Port 465 is an exception][docs-security-smtp-port] when supported by the mail server as a `submissions` service port. 
+[Port 465 is an exception][docs-security-smtp-port] when supported by the mail server as a `submissions` service port.
 STARTTLS negotiation is not required for this port, the connection is implicitly established with TLS.
 
 [docs-security-smtp-port]: ../../overview/security/measures.md#smtp-ports
@@ -132,6 +133,18 @@ to leave this as is, but you can customize it if you have issues or you desire t
 For security reasons the default settings for Authelia require the SMTP connection is encrypted by TLS. See [security]
 for more information. This option disables this measure (not recommended).
 
+### disable_starttls
+
+{{< confkey type="boolean" default="false" required="no" >}}
+
+Some SMTP servers ignore SMTP specifications and claim to support STARTTLS when they in fact do not.
+For security reasons Authelia refuses to send messages to these servers.
+This option disables this measure and is enabled  *__AT YOUR OWN RISK__*. It's *__strongly recommended__* 
+that instead of enabling this option you either fix the issue with the SMTP server's configuration or 
+have the administrators of the server fix it. If the issue can't be fixed by configuration we recommend 
+lodging an issue with the authors of the SMTP server.
+See [security] for more information.
+
 ### disable_html_emails
 
 {{< confkey type="boolean" default="false" required="no" >}}
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index 89622968a..d3cbdc8d6 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -166,6 +166,7 @@ var Keys = []string{
 	"notifier.smtp.startup_check_address",
 	"notifier.smtp.disable_require_tls",
 	"notifier.smtp.disable_html_emails",
+	"notifier.smtp.disable_starttls",
 	"notifier.smtp.tls.minimum_version",
 	"notifier.smtp.tls.skip_verify",
 	"notifier.smtp.tls.server_name",
diff --git a/internal/configuration/schema/notifier.go b/internal/configuration/schema/notifier.go
index 00c45e8f7..159a90dea 100644
--- a/internal/configuration/schema/notifier.go
+++ b/internal/configuration/schema/notifier.go
@@ -23,6 +23,7 @@ type SMTPNotifierConfiguration struct {
 	StartupCheckAddress mail.Address  `koanf:"startup_check_address"`
 	DisableRequireTLS   bool          `koanf:"disable_require_tls"`
 	DisableHTMLEmails   bool          `koanf:"disable_html_emails"`
+	DisableStartTLS     bool          `koanf:"disable_starttls"`
 	TLS                 *TLSConfig    `koanf:"tls"`
 }
 
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index a41c65420..bc66dba8b 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -56,6 +56,7 @@ const (
 	errFmtNotifierTemplatePathUnknownError        = "notifier: option 'template_path' refers to location '%s' which couldn't be opened: %w"
 	errFmtNotifierFileSystemFileNameNotConfigured = "notifier: filesystem: option 'filename' is required"
 	errFmtNotifierSMTPNotConfigured               = "notifier: smtp: option '%s' is required"
+	errFmtNotifierStartTlsDisabled                = "Notifier SMTP connection has opportunistic STARTTLS explicitly disabled which means all emails will be sent insecurely over plain text and this setting is only necessary for non-compliant SMTP servers which advertise they support STARTTLS when they actually don't support STARTTLS"
 )
 
 // Authentication Backend Error constants.
diff --git a/internal/configuration/validator/notifier.go b/internal/configuration/validator/notifier.go
index 61676848d..ea37f972e 100644
--- a/internal/configuration/validator/notifier.go
+++ b/internal/configuration/validator/notifier.go
@@ -89,4 +89,8 @@ func validateSMTPNotifier(config *schema.SMTPNotifierConfiguration, validator *s
 	if config.TLS.ServerName == "" {
 		config.TLS.ServerName = config.Host
 	}
+
+	if config.DisableStartTLS {
+		validator.PushWarning(fmt.Errorf(errFmtNotifierStartTlsDisabled))
+	}
 }
diff --git a/internal/notification/smtp_notifier.go b/internal/notification/smtp_notifier.go
index de58dcba9..cd7fa501d 100644
--- a/internal/notification/smtp_notifier.go
+++ b/internal/notification/smtp_notifier.go
@@ -156,6 +156,12 @@ func (n *SMTPNotifier) dial() (err error) {
 
 // Do startTLS if available (some servers only provide the auth extension after, and encryption is preferred).
 func (n *SMTPNotifier) startTLS() error {
+	// Skips STARTTLS if is disabled in configuration.
+	if n.config.DisableStartTLS {
+		n.log.Warn("Notifier SMTP connection has opportunistic STARTTLS explicitly disabled which means all emails will be sent insecurely over plain text and this setting is only necessary for non-compliant SMTP servers which advertise they support STARTTLS when they actually don't support STARTTLS")
+		return nil
+	}
+
 	// Only start if not already encrypted.
 	if _, ok := n.client.TLSConnectionState(); ok {
 		n.log.Debugf("Notifier SMTP connection is already encrypted, skipping STARTTLS")

From 3822286c3beb862c9366d9406ed8007a86b37b6f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 2 Oct 2022 13:59:09 +1100
Subject: [PATCH 088/263] docs: add envoy docs (#3789)

Adds and adjusts documentation for Envoy.
---
 README.md                                     |   8 +-
 .../en/integration/kubernetes/istio.md        |  90 ++++++++
 .../integration/kubernetes/nginx-ingress.md   |   2 +-
 docs/content/en/integration/proxies/caddy.md  |   1 +
 docs/content/en/integration/proxies/envoy.md  | 210 +++++++++++++++++-
 .../content/en/integration/proxies/support.md |  30 +--
 .../en/overview/prologue/supported-proxies.md |  34 +--
 7 files changed, 326 insertions(+), 49 deletions(-)
 create mode 100644 docs/content/en/integration/kubernetes/istio.md

diff --git a/README.md b/README.md
index ada435e5e..cdd3264ee 100644
--- a/README.md
+++ b/README.md
@@ -93,17 +93,11 @@ Docker or on top of [Kubernetes].
   <img src="./docs/static/images/logos/nginx.png" height="50"/>
   <img src="./docs/static/images/logos/traefik.png" height="50"/>
   <img src="./docs/static/images/logos/caddy.png" height="50"/>
+  <img src="./docs/static/images/logos/envoy.png" height="50"/>
   <img src="./docs/static/images/logos/haproxy.png" height="50"/>
   <img src="./docs/static/images/logos/kubernetes.png" height="50"/>
 </p>
 
-***Help Wanted:*** Assistance would be appreciated in getting Authelia working with
-[Envoy](https://www.envoyproxy.io/).
-
-<p align="center">
-  <img src="./docs/static/images/logos/envoy.png" height="50"/>
-</p>
-
 ## Getting Started
 
 See the [Get Started Guide](https://www.authelia.com/integration/prologue/get-started/) or one of the curated examples
diff --git a/docs/content/en/integration/kubernetes/istio.md b/docs/content/en/integration/kubernetes/istio.md
new file mode 100644
index 000000000..29e14a43f
--- /dev/null
+++ b/docs/content/en/integration/kubernetes/istio.md
@@ -0,0 +1,90 @@
+---
+title: "Istio"
+description: "A guide to integrating Authelia with the Istio Kubernetes Ingress."
+lead: "A guide to integrating Authelia with the Istio Kubernetes Ingress."
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+integration:
+parent: "kubernetes"
+weight: 551
+toc: true
+---
+
+Istio uses [Envoy](../proxies/envoy.md) as an Ingress. This means it has a relatively comprehensive integration option.
+
+## Example
+
+This example assumes that you have deployed an Authelia pod and you have configured it to be served on the URL
+`https://auth.example.com` and there is a Kubernetes Service with the name `authelia` in the `default` namespace with
+TCP port `80` configured to route to the Authelia pod's HTTP port and that your cluster is configured with the default
+DNS domain name of `cluster.local`.
+
+### Operator
+
+This is an example IstioOperator manifest adjusted to authenticate with Authelia. This example only shows the necessary
+portions of the resource that you add as well as context. You will need to adapt it to your needs.
+
+```yaml
+apiVersion: install.istio.io/v1alpha1
+kind: IstioOperator
+spec:
+  meshConfig:
+    extensionProviders:
+      - name: 'authelia'
+        envoyExtAuthzHttp:
+          service: 'authelia.default.svc.cluster.local'
+          port: 80
+          pathPrefix: '/api/verify/'
+          includeRequestHeadersInCheck:
+            - accept
+            - cookie
+            - proxy-authorization
+          headersToUpstreamOnAllow:
+            - 'authorization'
+            - 'proxy-authorization'
+            - 'remote-*'
+            - 'authelia-*'
+          includeAdditionalHeadersInCheck:
+            X-Authelia-URL: 'https://auth.example.com/'
+            X-Forwarded-Method: '%REQ(:METHOD)%'
+            X-Forwarded-Proto: '%REQ(:SCHEME)%'
+            X-Forwarded-Host: '%REQ(:AUTHORITY)%'
+            X-Forwarded-URI: '%REQ(:PATH)%'
+            X-Forwarded-For: '%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%'
+          headersToDownstreamOnDeny:
+            - set-cookie
+          headersToDownstreamOnAllow:
+            - set-cookie
+```
+
+### Authorization Policy
+
+The following [Authorization Policy] applies the above filter extension provider to the `nextcloud.example.com` domain:
+
+```yaml
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: nextcloud
+  namespace: apps
+spec:
+  action: CUSTOM
+  provider:
+    name:  'authelia'
+  rules:
+    - to:
+        - operation:
+            hosts:
+              - 'nextcloud.example.com'
+```
+
+## See Also
+
+- Istio [External Authentication](https://istio.io/latest/docs/tasks/security/authorization/authz-custom/) Documentation
+- Istio [Authorization Policy] Documentation
+- Istio [IstioOperator Options](https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/) Documentation
+- Istio [MeshConfig Extension Provider EnvoyExtAuthz HTTP Provider](https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider) Documentation
+
+[Authorization Policy]: https://istio.io/latest/docs/reference/config/security/authorization-policy/
diff --git a/docs/content/en/integration/kubernetes/nginx-ingress.md b/docs/content/en/integration/kubernetes/nginx-ingress.md
index c50f74f0d..614626e60 100644
--- a/docs/content/en/integration/kubernetes/nginx-ingress.md
+++ b/docs/content/en/integration/kubernetes/nginx-ingress.md
@@ -8,7 +8,7 @@ images: []
 menu:
   integration:
     parent: "kubernetes"
-weight: 551
+weight: 552
 toc: true
 ---
 
diff --git a/docs/content/en/integration/proxies/caddy.md b/docs/content/en/integration/proxies/caddy.md
index 55b2e502a..904fb17df 100644
--- a/docs/content/en/integration/proxies/caddy.md
+++ b/docs/content/en/integration/proxies/caddy.md
@@ -151,6 +151,7 @@ example.com {
 }
 ```
 {{< /details >}}
+
 ### Advanced example
 
 The advanced example allows for more flexible customization, however the [basic example](#basic-examples) should be
diff --git a/docs/content/en/integration/proxies/envoy.md b/docs/content/en/integration/proxies/envoy.md
index 342ec0c14..b887dc1ea 100644
--- a/docs/content/en/integration/proxies/envoy.md
+++ b/docs/content/en/integration/proxies/envoy.md
@@ -14,20 +14,13 @@ aliases:
   - /i/envoy
 ---
 
-[Envoy] is probably supported by __Authelia__.
+[Envoy] is supported by __Authelia__.
 
 *__Important:__ When using these guides it's important to recognize that we cannot provide a guide for every possible
 method of deploying a proxy. These guides show a suggested setup only and you need to understand the proxy
 configuration and customize it to your needs. To-that-end we include links to the official proxy documentation
 throughout this documentation and in the [See Also](#see-also) section.*
 
-## UNDER CONSTRUCTION
-
-It's currently not certain, but fairly likely that [Envoy] is supported by __Authelia__. We wish to add documentation
-and thus if anyone has this working please let us know.
-
-We will aim to perform documentation for this on our own but there is no current timeframe.
-
 ## Get Started
 
 It's __*strongly recommended*__ that users setting up *Authelia* for the first time take a look at our
@@ -44,11 +37,210 @@ how you can configure multiple IP ranges. You should customize this example to f
 You should only include the specific IP address ranges of the trusted proxies within your architecture and should not
 trust entire subnets unless that subnet only has trusted proxies and no other services.*
 
-## Potential
+## Configuration
+
+Below you will find commented examples of the following configuration:
+
+* Authelia Portal
+* Protected Endpoint (Nextcloud)
+
+### Theoretical Example
 
 Support for [Envoy] should be possible via [Envoy]'s
 [external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
 
+{{< details "docker-compose.yaml" >}}
+```yaml
+---
+version: "3.8"
+networks:
+  net:
+    driver: bridge
+services:
+  envoy:
+    container_name: envoy
+    image: envoyproxy/envoy:v1.23.0
+    restart: unless-stopped
+    networks:
+      net: {}
+    ports:
+      - '80:8080'
+      - '443:8443'
+    volumes:
+      - ${PWD}/data/envoy/envoy.yaml:/etc/envoy/envoy.yaml:ro
+      - ${PWD}/data/certificates:/certificates:ro
+  authelia:
+    container_name: authelia
+    image: authelia/authelia
+    restart: unless-stopped
+    networks:
+      net: {}
+    expose:
+      - 9091
+    volumes:
+      - ${PWD}/data/authelia/config:/config
+    environment:
+      TZ: "Australia/Melbourne"
+  nextcloud:
+    container_name: nextcloud
+    image: linuxserver/nextcloud
+    restart: unless-stopped
+    networks:
+      net: {}
+    expose:
+      - 443
+    volumes:
+      - ${PWD}/data/nextcloud/config:/config
+      - ${PWD}/data/nextcloud/data:/data
+    environment:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Melbourne"
+```
+{{< /details >}}
+
+{{< details "envoy.yaml" >}}
+```yaml
+static_resources:
+  listeners:
+    - name: listener_http
+      address:
+        socket_address:
+          address: 0.0.0.0
+          port_value: 8080
+      filter_chains:
+        - filters:
+            - name: envoy.filters.network.http_connection_manager
+              typed_config:
+                "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+                codec_type: auto
+                stat_prefix: ingress_http
+                route_config:
+                  name: local_route
+                  virtual_hosts:
+                    - name: backend
+                      domains: ["*"]
+                      routes:
+                        - match:
+                            prefix: "/"
+                          redirect:
+                            https_redirect: true
+                  http_filters:
+                    - name: envoy.filters.http.router
+                      typed_config:
+                        "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
+    - name: listener_https
+      address:
+        socket_address:
+          address: 0.0.0.0
+          port_value: 8443
+      filter_chains:
+        - filters:
+            - name: envoy.filters.network.http_connection_manager
+              typed_config:
+                "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+                stat_prefix: ingress_http
+                use_remote_address: true
+                skip_xff_append: false
+                route_config:
+                  name: local_route
+                  virtual_hosts:
+                    - name: whoami_service
+                      domains: ["nextcloud.example.com"]
+                      routes:
+                        - match:
+                            prefix: "/"
+                          route:
+                            cluster: nextcloud
+                    - name: authelia_service
+                      domains: ["auth.example.com"]
+                      typed_per_filter_config:
+                        envoy.filters.http.ext_authz:
+                          "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthzPerRoute
+                          disabled: true
+                      routes:
+                        - match:
+                            prefix: "/"
+                          route:
+                            cluster: authelia
+                http_filters:
+                  - name: envoy.filters.http.ext_authz
+                    typed_config:
+                      "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
+                      http_service:
+                        path_prefix: '/api/verify/'
+                        server_uri:
+                          uri: authelia:9091
+                          cluster: authelia
+                          timeout: 0.25s
+                        authorization_request:
+                          allowed_headers:
+                            patterns:
+                              - exact: accept
+                              - exact: cookie
+                              - exact: proxy-authorization
+                          headers_to_add:
+                            - key: X-Authelia-URL
+                              value: 'https://auth.example.com/'
+                            - key: X-Forwarded-Method
+                              value: '%REQ(:METHOD)%'
+                            - key: X-Forwarded-Proto
+                              value: '%REQ(:SCHEME)%'
+                            - key: X-Forwarded-Host
+                              value: '%REQ(:AUTHORITY)%'
+                            - key: X-Forwarded-Uri
+                              value: '%REQ(:PATH)%'
+                            - key: X-Forwarded-For
+                              value: '%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%'
+                        authorization_response:
+                          allowed_upstream_headers:
+                            patterns:
+                              - exact: authorization
+                              - exact: proxy-authorization
+                              - prefix: remote-
+                              - prefix: authelia-
+                          allowed_client_headers:
+                            patterns:
+                              - exact: set-cookie
+                          allowed_client_headers_on_success:
+                            patterns:
+                              - exact: set-cookie
+                      failure_mode_allow: false
+                  - name: envoy.filters.http.router
+                    typed_config:
+                      "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
+  clusters:
+    - name: nextcloud
+      connect_timeout: 0.25s
+      type: LOGICAL_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: nextcloud
+        endpoints:
+          - lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: nextcloud
+                      port_value: 80
+    - name: authelia
+      connect_timeout: 0.25s
+      type: LOGICAL_DNS
+      dns_lookup_family: V4_ONLY
+      lb_policy: ROUND_ROBIN
+      load_assignment:
+        cluster_name: authelia
+        endpoints:
+          - lb_endpoints:
+              - endpoint:
+                  address:
+                    socket_address:
+                      address: authelia
+                      port_value: 9091
+```
+{{< /details >}}
+
 ## See Also
 
 * [Envoy External Authorization Documentation](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
diff --git a/docs/content/en/integration/proxies/support.md b/docs/content/en/integration/proxies/support.md
index ac47789a6..a378f8871 100644
--- a/docs/content/en/integration/proxies/support.md
+++ b/docs/content/en/integration/proxies/support.md
@@ -15,19 +15,19 @@ aliases:
   - /docs/home/supported-proxies.html
 ---
 
-|         Proxy         |                      [Standard](#standard)                       |                              [Kubernetes](#kubernetes)                               |    [XHR Redirect](#xhr-redirect)     |  [Request Method](#request-method)   |
-|:---------------------:|:----------------------------------------------------------------:|:------------------------------------------------------------------------------------:|:------------------------------------:|:------------------------------------:|
-|       [Traefik]       |         [<i class="icon-support-full"></i>](traefik.md)          | [<i class="icon-support-full"></i>](../../integration/kubernetes/traefik-ingress.md) |  <i class="icon-support-full"></i>   |  <i class="icon-support-full"></i>   |
-|        [NGINX]        |          [<i class="icon-support-full"></i>](nginx.md)           |  [<i class="icon-support-full"></i>](../../integration/kubernetes/nginx-ingress.md)  |  <i class="icon-support-none"></i>   |  <i class="icon-support-full"></i>   |
-| [NGINX Proxy Manager] |   [<i class="icon-support-full"></i>](nginx-proxy-manager.md)    |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-none"></i>   |  <i class="icon-support-full"></i>   |
-|        [SWAG]         |           [<i class="icon-support-full"></i>](swag.md)           |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-none"></i>   |  <i class="icon-support-full"></i>   |
-|       [HAProxy]       |         [<i class="icon-support-full"></i>](haproxy.md)          |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-unknown"></i> |  <i class="icon-support-full"></i>   |
-|        [Caddy]        |          [<i class="icon-support-full"></i>](caddy.md)           |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-full"></i>   |  <i class="icon-support-full"></i>   |
-|     [Traefik] 1.x     |        [<i class="icon-support-full"></i>](traefikv1.md)         |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-full"></i>   |  <i class="icon-support-full"></i>   |
-|        [Envoy]        |         [<i class="icon-support-unknown"></i>](envoy.md)         |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-unknown"></i> | <i class="icon-support-unknown"></i> |
-|       [Skipper]       |         [<i class="icon-support-full"></i>](skipper.md)          |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-unknown"></i> | <i class="icon-support-unknown"></i> |
-|       [Apache]        | [<i class="icon-support-none" alt="Not Supported"></i>](#apache) |                          <i class="icon-support-none"></i>                           |  <i class="icon-support-none"></i>   |  <i class="icon-support-none"></i>   |
-|         [IIS]         |            [<i class="icon-support-none"></i>](#iis)             |                          <i class="icon-support-none"></i>                           |  <i class="icon-support-none"></i>   |  <i class="icon-support-none"></i>   |
+|         Proxy         |                      [Standard](#standard)                       |                              [Kubernetes](#kubernetes)                               |             [XHR Redirect](#xhr-redirect)             |           [Request Method](#request-method)           |
+|:---------------------:|:----------------------------------------------------------------:|:------------------------------------------------------------------------------------:|:-----------------------------------------------------:|:-----------------------------------------------------:|
+|       [Traefik]       |         [<i class="icon-support-full"></i>](traefik.md)          | [<i class="icon-support-full"></i>](../../integration/kubernetes/traefik-ingress.md) |           <i class="icon-support-full"></i>           |           <i class="icon-support-full"></i>           |
+|        [NGINX]        |          [<i class="icon-support-full"></i>](nginx.md)           |  [<i class="icon-support-full"></i>](../../integration/kubernetes/nginx-ingress.md)  | <i class="icon-support-none" alt="Not Supported"></i> |           <i class="icon-support-full"></i>           |
+| [NGINX Proxy Manager] |   [<i class="icon-support-full"></i>](nginx-proxy-manager.md)    |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-none" alt="Not Supported"></i> |           <i class="icon-support-full"></i>           |
+|        [SWAG]         |           [<i class="icon-support-full"></i>](swag.md)           |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-none" alt="Not Supported"></i> |           <i class="icon-support-full"></i>           |
+|       [HAProxy]       |         [<i class="icon-support-full"></i>](haproxy.md)          |                         <i class="icon-support-unknown"></i>                         |         <i class="icon-support-unknown"></i>          |           <i class="icon-support-full"></i>           |
+|        [Caddy]        |          [<i class="icon-support-full"></i>](caddy.md)           |                         <i class="icon-support-unknown"></i>                         |           <i class="icon-support-full"></i>           |           <i class="icon-support-full"></i>           |
+|     [Traefik] 1.x     |        [<i class="icon-support-full"></i>](traefikv1.md)         |                         <i class="icon-support-unknown"></i>                         |           <i class="icon-support-full"></i>           |           <i class="icon-support-full"></i>           |
+|        [Envoy]        |          [<i class="icon-support-full"></i>](envoy.md)           |      [<i class="icon-support-full"></i>](../../integration/kubernetes/istio.md)      |         <i class="icon-support-unknown"></i>          |           <i class="icon-support-full"></i>           |
+|       [Skipper]       |         [<i class="icon-support-full"></i>](skipper.md)          |                         <i class="icon-support-unknown"></i>                         |         <i class="icon-support-unknown"></i>          |         <i class="icon-support-unknown"></i>          |
+|       [Apache]        | [<i class="icon-support-none" alt="Not Supported"></i>](#apache) |                <i class="icon-support-none" alt="Not Supported"></i>                 | <i class="icon-support-none" alt="Not Supported"></i> | <i class="icon-support-none" alt="Not Supported"></i> |
+|         [IIS]         |  [<i class="icon-support-none" alt="Not Supported"></i>](#iis)   |                <i class="icon-support-none" alt="Not Supported"></i>                 | <i class="icon-support-none" alt="Not Supported"></i> | <i class="icon-support-none" alt="Not Supported"></i> |
 
 Legend:
 
@@ -87,8 +87,8 @@ available in [Kubernetes]. You would likely have to build your own [HAProxy] ima
 
 ### Envoy
 
-[Envoy] is currently not documented, however a small pending feature will add complete support for [Envoy]. This is
-possible via [Envoy]'s [external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
+[Envoy] is currently only partially documented however it is technically supported via [Envoy]'s
+[external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
 
 ### Caddy
 
diff --git a/docs/content/en/overview/prologue/supported-proxies.md b/docs/content/en/overview/prologue/supported-proxies.md
index 3aa9de3e1..01a12fcc5 100644
--- a/docs/content/en/overview/prologue/supported-proxies.md
+++ b/docs/content/en/overview/prologue/supported-proxies.md
@@ -14,28 +14,28 @@ toc: false
 
 The following table is a support matrix for Authelia features and specific reverse proxies.
 
-|         Proxy         |                                       Standard                                        |                                      Kubernetes                                      |             XHR Redirect             |            Request Method            |
-|:---------------------:|:-------------------------------------------------------------------------------------:|:------------------------------------------------------------------------------------:|:------------------------------------:|:------------------------------------:|
-|       [Traefik]       |       [<i class="icon-support-full"></i>](../../integration/proxies/traefik.md)       | [<i class="icon-support-full"></i>](../../integration/kubernetes/traefik-ingress.md) |  <i class="icon-support-full"></i>   |  <i class="icon-support-full"></i>   |
-|        [NGINX]        |        [<i class="icon-support-full"></i>](../../integration/proxies/nginx.md)        |  [<i class="icon-support-full"></i>](../../integration/kubernetes/nginx-ingress.md)  |  <i class="icon-support-none"></i>   |  <i class="icon-support-full"></i>   |
-| [NGINX Proxy Manager] | [<i class="icon-support-full"></i>](../../integration/proxies/nginx-proxy-manager.md) |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-none"></i>   |  <i class="icon-support-full"></i>   |
-|        [SWAG]         |        [<i class="icon-support-full"></i>](../../integration/proxies/swag.md)         |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-none"></i>   |  <i class="icon-support-full"></i>   |
-|       [HAProxy]       |       [<i class="icon-support-full"></i>](../../integration/proxies/haproxy.md)       |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-unknown"></i> |  <i class="icon-support-full"></i>   |
-|        [Caddy]        |        [<i class="icon-support-full"></i>](../../integration/proxies/caddy.md)        |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-full"></i>   |  <i class="icon-support-full"></i>   |
-|     [Traefik] 1.x     |      [<i class="icon-support-full"></i>](../../integration/proxies/traefikv1.md)      |                         <i class="icon-support-unknown"></i>                         |  <i class="icon-support-full"></i>   |  <i class="icon-support-full"></i>   |
-|        [Envoy]        |      [<i class="icon-support-unknown"></i>](../../integration/proxies/envoy.md)       |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-unknown"></i> | <i class="icon-support-unknown"></i> |
-|       [Skipper]       |       [<i class="icon-support-full"></i>](../../integration/proxies/skipper.md)       |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-unknown"></i> | <i class="icon-support-unknown"></i> |
-|       [Apache]        |                 <i class="icon-support-none" alt="Not Supported"></i>                 |                          <i class="icon-support-none"></i>                           |  <i class="icon-support-none"></i>   |  <i class="icon-support-none"></i>   |
-|         [IIS]         |                           <i class="icon-support-none"></i>                           |                          <i class="icon-support-none"></i>                           |  <i class="icon-support-none"></i>   |  <i class="icon-support-none"></i>   |
+|         Proxy         |                                 [Standard](#standard)                                 |                              [Kubernetes](#kubernetes)                               |             [XHR Redirect](#xhr-redirect)             |           [Request Method](#request-method)           |
+|:---------------------:|:-------------------------------------------------------------------------------------:|:------------------------------------------------------------------------------------:|:-----------------------------------------------------:|:-----------------------------------------------------:|
+|       [Traefik]       |       [<i class="icon-support-full"></i>](../../integration/proxies/traefik.md)       | [<i class="icon-support-full"></i>](../../integration/kubernetes/traefik-ingress.md) |           <i class="icon-support-full"></i>           |           <i class="icon-support-full"></i>           |
+|        [NGINX]        |        [<i class="icon-support-full"></i>](../../integration/proxies/nginx.md)        |  [<i class="icon-support-full"></i>](../../integration/kubernetes/nginx-ingress.md)  | <i class="icon-support-none" alt="Not Supported"></i> |           <i class="icon-support-full"></i>           |
+| [NGINX Proxy Manager] | [<i class="icon-support-full"></i>](../../integration/proxies/nginx-proxy-manager.md) |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-none" alt="Not Supported"></i> |           <i class="icon-support-full"></i>           |
+|        [SWAG]         |        [<i class="icon-support-full"></i>](../../integration/proxies/swag.md)         |                         <i class="icon-support-unknown"></i>                         | <i class="icon-support-none" alt="Not Supported"></i> |           <i class="icon-support-full"></i>           |
+|       [HAProxy]       |       [<i class="icon-support-full"></i>](../../integration/proxies/haproxy.md)       |                         <i class="icon-support-unknown"></i>                         |         <i class="icon-support-unknown"></i>          |           <i class="icon-support-full"></i>           |
+|        [Caddy]        |        [<i class="icon-support-full"></i>](../../integration/proxies/caddy.md)        |                         <i class="icon-support-unknown"></i>                         |           <i class="icon-support-full"></i>           |           <i class="icon-support-full"></i>           |
+|     [Traefik] 1.x     |      [<i class="icon-support-full"></i>](../../integration/proxies/traefikv1.md)      |                         <i class="icon-support-unknown"></i>                         |           <i class="icon-support-full"></i>           |           <i class="icon-support-full"></i>           |
+|        [Envoy]        |        [<i class="icon-support-full"></i>](../../integration/proxies/envoy.md)        |      [<i class="icon-support-full"></i>](../../integration/kubernetes/istio.md)      |         <i class="icon-support-unknown"></i>          |           <i class="icon-support-full"></i>           |
+|       [Skipper]       |       [<i class="icon-support-full"></i>](../../integration/proxies/skipper.md)       |                         <i class="icon-support-unknown"></i>                         |         <i class="icon-support-unknown"></i>          |         <i class="icon-support-unknown"></i>          |
+|       [Apache]        |                 <i class="icon-support-none" alt="Not Supported"></i>                 |                <i class="icon-support-none" alt="Not Supported"></i>                 | <i class="icon-support-none" alt="Not Supported"></i> | <i class="icon-support-none" alt="Not Supported"></i> |
+|         [IIS]         |                 <i class="icon-support-none" alt="Not Supported"></i>                 |                <i class="icon-support-none" alt="Not Supported"></i>                 | <i class="icon-support-none" alt="Not Supported"></i> | <i class="icon-support-none" alt="Not Supported"></i> |
 
 Legend:
 
-|                 Icon                 |       Meaning       |
-|:------------------------------------:|:-------------------:|
-|  <i class="icon-support-full"></i>   |      Supported      |
+|                                 Icon |       Meaning       |
+|-------------------------------------:|:-------------------:|
+|    <i class="icon-support-full"></i> |      Supported      |
 | <i class="icon-support-unknown"></i> |       Unknown       |
 | <i class="icon-support-partial"></i> | Partially Supported |
-|  <i class="icon-support-none"></i>   |    Not Supported    |
+|    <i class="icon-support-none"></i> |    Not Supported    |
 
 ## More Information
 

From ab307397e9f4d3f9a55342c4419785b150467fe0 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 2 Oct 2022 14:32:16 +1100
Subject: [PATCH 089/263] docs: adjust guidelines (#4113)

Small adjustments to the guidelines layout and additional guidelines added.
---
 cmd/authelia-gen/const.go                     |  2 +-
 .../templates/dot_commitlintrc.js.tmpl        |  2 +-
 .../en/blog/pre-release-notes-4.37/index.md   |  5 +--
 .../en/contributing/guidelines/_index.md      |  9 ++++++
 .../commit-message.md}                        |  6 ++--
 .../contributing/guidelines/documentation.md  | 32 +++++++++++++++++++
 .../contributing/guidelines/introduction.md   | 21 ++++++++++++
 .../pull-request.md}                          |  8 +++--
 .../style.md}                                 |  9 +++---
 .../en/contributing/prologue/documentation.md | 14 ++++----
 .../cli/authelia-gen/authelia-gen.md          |  2 +-
 .../cli/authelia-gen/authelia-gen_code.md     |  2 +-
 .../authelia-gen/authelia-gen_code_keys.md    |  2 +-
 .../authelia-gen/authelia-gen_code_scripts.md |  2 +-
 .../authelia-gen/authelia-gen_commit-lint.md  |  2 +-
 .../cli/authelia-gen/authelia-gen_docs.md     |  2 +-
 .../cli/authelia-gen/authelia-gen_docs_cli.md |  2 +-
 .../authelia-gen/authelia-gen_docs_date.md    |  2 +-
 .../authelia-gen/authelia-gen_docs_keys.md    |  2 +-
 .../cli/authelia-gen/authelia-gen_github.md   |  2 +-
 .../authelia-gen_github_issue-templates.md    |  2 +-
 ...a-gen_github_issue-templates_bug-report.md |  2 +-
 ..._github_issue-templates_feature-request.md |  2 +-
 .../cli/authelia-gen/authelia-gen_locales.md  |  2 +-
 web/.commitlintrc.js                          |  2 +-
 25 files changed, 101 insertions(+), 37 deletions(-)
 create mode 100644 docs/content/en/contributing/guidelines/_index.md
 rename docs/content/en/contributing/{development/guidelines-commit-message.md => guidelines/commit-message.md} (98%)
 create mode 100644 docs/content/en/contributing/guidelines/documentation.md
 create mode 100644 docs/content/en/contributing/guidelines/introduction.md
 rename docs/content/en/contributing/{development/guidelines-pull-request.md => guidelines/pull-request.md} (90%)
 rename docs/content/en/contributing/{development/guidelines-style.md => guidelines/style.md} (97%)

diff --git a/cmd/authelia-gen/const.go b/cmd/authelia-gen/const.go
index e7b8eb980..53f01051e 100644
--- a/cmd/authelia-gen/const.go
+++ b/cmd/authelia-gen/const.go
@@ -10,7 +10,7 @@ const (
 	fileCICommitLintConfig = "web/.commitlintrc.js"
 	fileWebI18NIndex       = "web/src/i18n/index.ts"
 
-	fileDocsCommitMessageGuidelines = "docs/content/en/contributing/development/guidelines-commit-message.md"
+	fileDocsCommitMessageGuidelines = "docs/content/en/contributing/guidelines/commit-message.md"
 
 	fileDocsConfigKeys = "docs/data/configkeys.json"
 	fileCodeConfigKeys = "internal/configuration/schema/keys.go"
diff --git a/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl b/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl
index f84b2b839..e1bd35519 100644
--- a/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl
+++ b/cmd/authelia-gen/templates/dot_commitlintrc.js.tmpl
@@ -21,5 +21,5 @@ module.exports = {
         ],
     },
     defaultIgnores: true,
-    helpUrl: "https://www.authelia.com/contributing/development/guidelines-commit-message/",
+    helpUrl: "https://www.authelia.com/contributing/guidelines/commit-message/",
 };
diff --git a/docs/content/en/blog/pre-release-notes-4.37/index.md b/docs/content/en/blog/pre-release-notes-4.37/index.md
index 71579e3a0..4880cd459 100644
--- a/docs/content/en/blog/pre-release-notes-4.37/index.md
+++ b/docs/content/en/blog/pre-release-notes-4.37/index.md
@@ -13,8 +13,9 @@ pinned: false
 homepage: false
 ---
 
-Authelia 4.37 is just around the corner. This version has several additional features and improvements to existing
-features. In this blog post we'll discuss the new features and roughly what it means for users.
+Authelia [4.37](https://github.com/authelia/authelia/milestone/16) is just around the corner. This version has several
+additional features and improvements to existing features. In this blog post we'll discuss the new features and roughly
+what it means for users.
 
 _**Note:** These features are still subject to change however it represents the most likely features._
 
diff --git a/docs/content/en/contributing/guidelines/_index.md b/docs/content/en/contributing/guidelines/_index.md
new file mode 100644
index 000000000..21c0642c5
--- /dev/null
+++ b/docs/content/en/contributing/guidelines/_index.md
@@ -0,0 +1,9 @@
+---
+title: "Guidelines"
+description: "Contributing Guidelines"
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+weight: 300
+---
diff --git a/docs/content/en/contributing/development/guidelines-commit-message.md b/docs/content/en/contributing/guidelines/commit-message.md
similarity index 98%
rename from docs/content/en/contributing/development/guidelines-commit-message.md
rename to docs/content/en/contributing/guidelines/commit-message.md
index d60764d63..1260b5108 100644
--- a/docs/content/en/contributing/development/guidelines-commit-message.md
+++ b/docs/content/en/contributing/guidelines/commit-message.md
@@ -1,5 +1,5 @@
 ---
-title: "Commit Message Guidelines"
+title: "Commit Message"
 description: "Authelia Development Commit Message Guidelines"
 lead: "This section covers the git commit message guidelines we use for development."
 date: 2021-01-30T19:29:07+11:00
@@ -7,8 +7,8 @@ draft: false
 images: []
 menu:
   contributing:
-    parent: "development"
-weight: 231
+    parent: "guidelines"
+weight: 320
 toc: true
 aliases:
   - /docs/contributing/commitmsg-guidelines.html
diff --git a/docs/content/en/contributing/guidelines/documentation.md b/docs/content/en/contributing/guidelines/documentation.md
new file mode 100644
index 000000000..2a415e874
--- /dev/null
+++ b/docs/content/en/contributing/guidelines/documentation.md
@@ -0,0 +1,32 @@
+---
+title: "Documentation"
+description: "Authelia Development Documentation Guidelines"
+lead: "This section covers the guidelines we use when writing documentation."
+date: 2021-01-30T19:29:07+11:00
+draft: false
+images: []
+menu:
+  contributing:
+    parent: "guidelines"
+weight: 320
+toc: true
+---
+
+## Domains
+
+Always use the generic domain (or subdomain of) `example.com` in documentation.
+
+If it's necessary to utilize more than one domain please ask for specific feedback in any PR.
+
+## Certificates
+
+When including certificates in documentation always ensure they are valid for 1 year starting at `Jan 1 00:00:00 1970`.
+This ensures the certificate is not valid for multiple reasons.
+
+In addition the guidance for [Private Keys](#private-keys) should be followed.
+
+## Private Keys
+
+Always append invalid data to the END of the PEM block before the base64 padding `=` (if present). The suggested
+text is `^invalid DO NOT USE`. This both has an invalid base64 character `^` and has information to communicate that
+users should not use the PEM block.
diff --git a/docs/content/en/contributing/guidelines/introduction.md b/docs/content/en/contributing/guidelines/introduction.md
new file mode 100644
index 000000000..28d0a249a
--- /dev/null
+++ b/docs/content/en/contributing/guidelines/introduction.md
@@ -0,0 +1,21 @@
+---
+title: "Guidelines"
+description: "An introduction into guidelines for contributing to the Authelia project."
+lead: "An introduction into guidelines for contributing to the Authelia project."
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  contributing:
+    parent: "guidelines"
+weight: 310
+toc: true
+---
+
+The guidelines section contains various guidelines for contributing to Authelia. We implement various guidelines via
+automatic processes that will provide feedback in the PR, but this does not cover every situation. You will find both
+those which are automated and those which are not in this section.
+
+While it's expected that people aim to follow all of these guidelines we understand that there are logical exceptions to
+all guidelines and if it makes sense we're likely to agree with you. So if you find a situation where it doesn't make
+sense to follow one just let us know your reasoning when you make a PR if it's not obvious.
diff --git a/docs/content/en/contributing/development/guidelines-pull-request.md b/docs/content/en/contributing/guidelines/pull-request.md
similarity index 90%
rename from docs/content/en/contributing/development/guidelines-pull-request.md
rename to docs/content/en/contributing/guidelines/pull-request.md
index cd0e67be6..b7aa4ffa5 100644
--- a/docs/content/en/contributing/development/guidelines-pull-request.md
+++ b/docs/content/en/contributing/guidelines/pull-request.md
@@ -1,5 +1,5 @@
 ---
-title: "Pull Request Guidelines"
+title: "Pull Request"
 description: "Authelia Development Pull Request Guidelines"
 lead: "This section covers the pull request guidelines."
 date: 2022-06-15T17:51:47+10:00
@@ -7,9 +7,11 @@ draft: false
 images: []
 menu:
   contributing:
-    parent: "development"
-weight: 232
+    parent: "guidelines"
+weight: 320
 toc: true
+aliases:
+  - /contributing/development/pull-request/
 ---
 
 [Pull Request] guidelines are in place in order to maintain consistency and clearly communicate our process for
diff --git a/docs/content/en/contributing/development/guidelines-style.md b/docs/content/en/contributing/guidelines/style.md
similarity index 97%
rename from docs/content/en/contributing/development/guidelines-style.md
rename to docs/content/en/contributing/guidelines/style.md
index a990cddcb..9d559985b 100644
--- a/docs/content/en/contributing/development/guidelines-style.md
+++ b/docs/content/en/contributing/guidelines/style.md
@@ -1,5 +1,5 @@
 ---
-title: "Style Guidelines"
+title: "Style"
 description: "Authelia Development Style Guidelines"
 lead: "This section covers the style guidelines we use for development."
 date: 2021-04-11T21:25:03+10:00
@@ -7,17 +7,18 @@ draft: false
 images: []
 menu:
   contributing:
-    parent: "development"
-weight: 230
+    parent: "guidelines"
+weight: 320
 toc: true
 aliases:
   - /docs/contributing/style-guide.html
+  - /contributing/development/guidelines-style/
 ---
 
 This is a general guide to the code style we aim to abide by. This is by no means an exhaustive list and we're
 constantly changing and improving it. This is also a work in progress document.
 
-For our commit messages please see our [Commit Message Guidelines](guidelines-commit-message.md).
+For our commit messages please see our [Commit Message Guidelines](../guidelines/commit-message.md).
 
 ## Tools
 
diff --git a/docs/content/en/contributing/prologue/documentation.md b/docs/content/en/contributing/prologue/documentation.md
index 8053eef7d..4dd4aec2f 100644
--- a/docs/content/en/contributing/prologue/documentation.md
+++ b/docs/content/en/contributing/prologue/documentation.md
@@ -38,14 +38,12 @@ It's relatively easy to run the __Authelia__ website locally to test out the cha
 The following steps will allow you to run the website on the localhost and view it live in your browser:
 
 1. Run the following commands:
-
-  ```bash
-  git clone https://github.com/authelia/authelia.git
-  cd authelia/docs
-  npm run install
-  npm run start
-  ```
-
+    ```bash
+    git clone https://github.com/authelia/authelia.git
+    cd authelia/docs
+    npm run install
+    npm run start
+    ```
 2. Visit [http://localhost:1313/](http://localhost:1313/) in your browser.
 3. Modify pages to see the effects live in your browser.
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
index 2dec8b94d..b373fc18b 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
@@ -32,7 +32,7 @@ authelia-gen [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
index 1b7e3dda8..7ef95dbcb 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
@@ -38,7 +38,7 @@ authelia-gen code [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
index cf8aa9902..15166ede3 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
@@ -38,7 +38,7 @@ authelia-gen code keys [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
index 1502c7e6b..be30fd2fa 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
@@ -38,7 +38,7 @@ authelia-gen code scripts [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
index a574a7534..5868626f9 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
@@ -38,7 +38,7 @@ authelia-gen commit-lint [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
index 5bb23ea36..03c9d55d0 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
@@ -38,7 +38,7 @@ authelia-gen docs [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
index dc87228f5..164df34ee 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
@@ -38,7 +38,7 @@ authelia-gen docs cli [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
index f2d625bdf..1ef854d4a 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
@@ -40,7 +40,7 @@ authelia-gen docs date [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
index 18b43fb12..f16322dc9 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
@@ -38,7 +38,7 @@ authelia-gen docs keys [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
index 40914aac0..5948e57a3 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
@@ -38,7 +38,7 @@ authelia-gen github [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
index fd3df20c2..ee4b8d234 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
@@ -38,7 +38,7 @@ authelia-gen github issue-templates [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
index 139ad47a9..55390f914 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
@@ -38,7 +38,7 @@ authelia-gen github issue-templates bug-report [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
index 34e06edc6..0ac91c4ae 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
@@ -38,7 +38,7 @@ authelia-gen github issue-templates feature-request [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
index 9477f4f61..5cd715185 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
@@ -38,7 +38,7 @@ authelia-gen locales [flags]
       --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
-      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/development/guidelines-commit-message.md")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
       --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
       --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
diff --git a/web/.commitlintrc.js b/web/.commitlintrc.js
index a97f14f2f..02297d21c 100644
--- a/web/.commitlintrc.js
+++ b/web/.commitlintrc.js
@@ -54,5 +54,5 @@ module.exports = {
         ],
     },
     defaultIgnores: true,
-    helpUrl: "https://www.authelia.com/contributing/development/guidelines-commit-message/",
+    helpUrl: "https://www.authelia.com/contributing/guidelines/commit-message/",
 };

From 32bd2eba60e49a7848ebf6adff1ebaa75f903e41 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 2 Oct 2022 16:19:26 +1100
Subject: [PATCH 090/263] test(suites): use iss cert (#4114)

---
 internal/suites/OIDC/configuration.yml        | 88 +++++++++++++------
 internal/suites/OIDCTraefik/configuration.yml | 88 +++++++++++++------
 2 files changed, 126 insertions(+), 50 deletions(-)

diff --git a/internal/suites/OIDC/configuration.yml b/internal/suites/OIDC/configuration.yml
index b4d137b17..9e0c5f383 100644
--- a/internal/suites/OIDC/configuration.yml
+++ b/internal/suites/OIDC/configuration.yml
@@ -60,33 +60,71 @@ identity_providers:
   oidc:
     enable_client_debug_messages: true
     hmac_secret: IVPWBkAdJHje3uz7LtFTDU2pFUfh39Xm
+    issuer_certificate_chain: |
+      -----BEGIN CERTIFICATE-----
+      MIIC6DCCAdCgAwIBAgIRAIxvm0gFgsbh3D22rSZLuFQwDQYJKoZIhvcNAQELBQAw
+      EzERMA8GA1UEChMIQXV0aGVsaWEwIBcNMjIxMDAyMDAzMDQyWhgPMjEyMjA5MDgw
+      MDMwNDJaMBMxETAPBgNVBAoTCEF1dGhlbGlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
+      AQ8AMIIBCgKCAQEAy71EOkV3jOpVQtVTH5HYcI4PryUCiAEyxAIuO+66gaAa4aCd
+      UCRr8iO/pt5nOwPxjPo+hMHhkcKpX7evj+wgYXAccpIQFSCYWTJkaXFL0jL7yFuE
+      5xpjgRM/x6FfK0IbN5WmVWO9EjesbyMCyDoYpjwzIrxnB70F9Y0nrXst1SnW/Sy0
+      01BQZNzD1tky1KDvEkw7L5mMPZFZMr5wV+ELvbo1LLvvrGYhhzbXWk7pPbxT0gAa
+      7yVvQbDKuCDqssAUyQa2JdlDaQocpldtK6l+dc3IsSWKd2UMouta75ngr9E1igy3
+      t7owMRqH8NjwKHt6KQeDVSdBnWNjG572vaRimQIDAQABozUwMzAOBgNVHQ8BAf8E
+      BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADANBgkqhkiG
+      9w0BAQsFAAOCAQEAaZJ09yGa+DGr/iTqshGdPKNCtcf/CXCkL52xiI7DzLxDt30P
+      8vCuXXrrTGBY7eWYupcNy/MyqaUrz1ED+map3nQzZQBJ9vWIfr01B9phkg/WSaNJ
+      1DlYtbPYzr86BlGP1V5d3Wv6JqF3tkWHI0kI38CT68fWdDKrfa5j3JdZGIVJW+51
+      U0IE3Nqhfc76YzwQ3sNX5FT2Fr55RowH+l5OBPk0Bcztq58XmyPR/bvPfDASt8iS
+      DBT+0iiDiwk6LvOkasL8p7nuh5Grc9LMEYXY/QMUbkIWhIVRFlqyJA9s8vGHx1D4
+      96iYKudj+yvO17Szzr/NNmcwETbCs4j6P6QeiA==
+      -----END CERTIFICATE-----
+      -----BEGIN CERTIFICATE-----
+      MIIDBTCCAe2gAwIBAgIQAK/NIAl3Bdg4Xk0y/ZGL7jANBgkqhkiG9w0BAQsFADAT
+      MREwDwYDVQQKEwhBdXRoZWxpYTAgFw0yMjEwMDIwMDMwMjFaGA8yMTIyMDkwODAw
+      MzAyMVowEzERMA8GA1UEChMIQXV0aGVsaWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+      DwAwggEKAoIBAQCg7jdO1HmydfkPzTtz57pvAS3YOdBT0hlNjJ4N2lrKhNnixrzK
+      +4R1dWQDP2SHbZQ0TskF8eQ8HhTr7AsApotTthJFkUgV2g+bv7wVroz0Hok5xtd4
+      bnpOvG3YUCP13Nk3ZVxdQXqR3/G3MrbyiXVPcgU+0giJ8EBykbtMu8L79/1iyk+m
+      w4fZfzTOeorRgspO3z3+pTAib2MCTA7bby1dX9qI/ysFPLdbJYfNQDxij8SzNLyJ
+      EkQ4kh3jKXf1VcZjbQTtYTZ3JJDqM08OxGMKuXUxPHd72Xlb+Fzql8LjYdEy/YKA
+      3r8FMf14lzcjvxtLnFXh//hiXh4+xgXMkrLZAgMBAAGjUzBRMA4GA1UdDwEB/wQE
+      AwICpDAPBgNVHSUECDAGBgRVHSUAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE
+      FGKpXiZA+8VQyMBqTTep+dVTthSbMA0GCSqGSIb3DQEBCwUAA4IBAQAE4DJg+Rb4
+      iiocvxxQ85lhh94ql++E8MKuzIdN7ORs+ybUnsDD1WFDebubroTQuTSBkFrNuGNJ
+      8B7NZsHiWWLvNsrnxxeC5CicqfhSDti0rKWsbGyeoq7Kqok5E4pwOzeRsxL2e/Hm
+      G6LsUQuQMUG2vxKNynqmJS4VpgSVkiGhUfURFuRRDuRpVQ/XTl7jDIGf/ls7TAZq
+      1AnmnSi4Cqy4hrTnwYUYkFCcH69onUKAoaVNl1eAH7ogxakz32WyWObY98NBrjzA
+      I6VQlaQNSHtdFqDpu7NWJZZZSgN4BknbMYQEPNYCm701cPB4ahJbpg5C3pVPFSql
+      Bc9iI6nN3PCr
+      -----END CERTIFICATE-----
     issuer_private_key: |
       -----BEGIN RSA PRIVATE KEY-----
-      MIIEogIBAAKCAQEAvOFmoEJFt1JkfdlwM3vJFg5rrY9d6LyyqezjZkBZDQ4qdEEU
-      dCrbW8ISFTtg9sfbrS3qingUzVP9VOfYPMC3r0ugjJXjhvJdBSaoLlzL3saeyrXk
-      frOOvkcWKzeOynqUNPhKy9dchmuLALFfd/Jy7Wzq0y7XxGeNidEmFjMAf9dwf6/+
-      PjQjbG7zBFu/XSajITPHlDXPVDd0j2qw2wu5Z9iqn4LRXnAFnC438hZZKZU/+JxU
-      2ezr6Sefiy8XTC2kDiq3cgLeEjSywlJOs+4TLjVS/3h75sh2Wk0xVaSwjPEjCOgm
-      a+2E3GJrGdQBiAjMSu101VBVwHUHaLDCn1T4NwIDAQABAoIBADWkupXnXI99Ogc4
-      GxK0JF88Rz6qyhwQg5mZKthejCwWCt6roRiBF33O933KOHa+OljMAqHDCv1pzjgw
-      BIz0mvaRPw7OfylTajHNUdShDFHADVc7I6MMcgz+eYBarhY5jCAjKHMOPjv7DSZs
-      OdYCKLvfxC2oTyV714n9uZhyccDcvQpkgZuBDL0oxPom1GOI8TGhPjxvFOovEHWA
-      Q8q9XY4cUVNDikZmvpgeUkJHWYHYb+11vKeSupnYD03yJ3sDy+F6+m+3/XmzFbXb
-      1p43ermHQsMfDlxPyulUUI0viSo2UhlMC/moAb9FusOv+dTl2lt0gGqzDJ9gg1z1
-      XpHRnwkCgYEA5x48dyxd4lydtVYef9sBmbLJEYozsYyOwLcnrLSNaZxeCza1exyR
-      QIRogswoLDacxrYvO8FY6LtAEMkisv732M29zthBPm5wyoSZiM1X2YfQXKsmyh2h
-      x1/yCWv/BQjj68A8IAxToaXxSG4WAr/X00RGUkXgkgw122FxcmGuFyUCgYEA0TcR
-      dnt/oRMK4aCZHcBgTknzDfxKlJh4S0C9WjxKgr8IlW4LTeVSBuuqOObOQYImEhtw
-      TRTKZIViL0roDF79cioQSp1Tk5h6uy8wr6VyhWRnWfTz2/azoTHnmQ780rtAuEI/
-      NvE6FiqwikJLjma1YJoRfr/bfmgMdxcYbJI1MSsCgYAEZ5Yda1IKu1siFpcUNrdM
-      F5UvaWPc0WHzGEqARxye06UTL6K7yuqVwTBAteVaGlxYiSZTTDcGkHMDHuIzaRqO
-      HjWs2IA90VsC8Q4ABnHTKnx1F6nwlin8I774IP/GN8ooNwyuS63YWdJEYBy5RrC1
-      TQrODJjgD62DFdNUq7nmpQKBgFMJEzI+Q+KPJ0NztTG8t7x61y/W0Vb2yM+9Syn0
-      QfJwlZyRR4VMHelHQZFB8dzIJgoLv9+n/8gztEtm5IB8dwUHst2aYaBz5UpDqYQd
-      Gz3cIrTuZpcH7DVvFCeIbknJLh+zk1lgFpjTqqvFMi27kANeQtFWnmwmKcRec0As
-      K1ZvAoGAV/3YB44/zIoB590+yhpx2HTmDPVHH+J+5O71Pi1D9W13ClBFLrE69wo+
-      IQLIstBI5tGOGeuQNjXhDKJ1U30xppZXcnebrkA+oOo+6dy20zghFR2maAGXfWFU
-      pM4GsSnSTm0bXPebVouQFqhj7LqcQQzCqRDThmw/Lp1tJUmu40g=
+      MIIEowIBAAKCAQEAy71EOkV3jOpVQtVTH5HYcI4PryUCiAEyxAIuO+66gaAa4aCd
+      UCRr8iO/pt5nOwPxjPo+hMHhkcKpX7evj+wgYXAccpIQFSCYWTJkaXFL0jL7yFuE
+      5xpjgRM/x6FfK0IbN5WmVWO9EjesbyMCyDoYpjwzIrxnB70F9Y0nrXst1SnW/Sy0
+      01BQZNzD1tky1KDvEkw7L5mMPZFZMr5wV+ELvbo1LLvvrGYhhzbXWk7pPbxT0gAa
+      7yVvQbDKuCDqssAUyQa2JdlDaQocpldtK6l+dc3IsSWKd2UMouta75ngr9E1igy3
+      t7owMRqH8NjwKHt6KQeDVSdBnWNjG572vaRimQIDAQABAoIBAA/EhhM8bRQqzo5t
+      lBFNaELNu8kCRD/iV9tzj8BzqVt+2JW9qG8bYn9K5Po1HCglFfyjIVOE7cAqIJGX
+      1a59x8PCuXDkfPolm6TLkZnXeta5u2K2MoLwN+M1aio5AvSGGTUkD8tr/KX8SQwQ
+      2ZZFaML0xcBadF7U8jEey4NRlSp5/voiIAB+FrJHepZBz2XJYCX5s2vYLPMn+51R
+      1HyO0n2aQ9H1Na8aBjTfAp9GDKJWBV3bSM7cVaLGlMFj/HNXUNVnSsVsJj0tdWKz
+      K6r9zPskLnS+eNjCgqrOtZSqJ7M3PL0/PoTFPrr1Fevr+soKWCaPF94Ib94O9SEq
+      scvP3kECgYEA0HBdGab0HjcZgFtsIaMm+eBcDhUmUrvMPUw6FmspKnc8wplscONW
+      wrDGhR0dpT8+aAMD5jFC2pvyHjI5AWkW+53LB15j6SVzUlUMfS3VTwE2prLtDHDs
+      nCDW2+fXY2kjv45efZGpMGbLJVePx2RCPzUlAlc14lzxnHgpo7eho1cCgYEA+jpi
+      Eo/Jqa5CNd4hrXqFxZTFtU2Mn38ZKI3QK/l47/347yHLebjsYIIwJRoHenxWxNlz
+      Y+BZ38vkP+f9BGAVGiRcyMmIJU0X305wKwl26Y2Q/tEm2OpwmDboD2pL9byi9vfY
+      bz7pQGK/l9j86KofRwVJJRLsofPI1SsjnC8c448CgYAkpg0IjJ1RjriSJADwLSKW
+      PseQxlE1rMVtZbC07mSPjeWGBbnWY3KGytQs5YCn5GXRne4alEC/9Tlt68CwKc0b
+      spPXGNaSUL5lFIUcoWlm+bylNMKPNG+1x+RfR/VMCll5vcuJYooP85L2Xt3t3gfz
+      2yFFtxXHVjY5H7uaiJgIAwKBgQDvkGXEj5TqtsL8/6YOiHb6Kuz+Hzi6mtxjTyI2
+      d6mpWuWxTBGaf8kOvJWLb9gpFFGeNPGcdXaWJIZqCJjcT4Dkflu2f/uwepaYXGhX
+      S8Bk6fwfee5PTmRt1mNmHsaKhgcfmznDh9+YnPIBVuULe5RmUlEtBWk3xEZKj/qP
+      1Ss7UQKBgAwZQz+h5Z/XOJH3Qs5nJBKAZUiYkj3ux7G6tjx0cz7XcUYd/6enBpkY
+      JeqVHB6G+bMRLwb+Hc5Vgpbd5GdaUWo8udaghHgSGPUVcn0lK38XhYek6ACGz7Lo
+      xEfgtKoBlUq+uPb8H05HY0t9KybA3LA5wkRYYnJ17/nkZtrrJAmX
       -----END RSA PRIVATE KEY-----
     clients:
       - id: oidc-tester-app
diff --git a/internal/suites/OIDCTraefik/configuration.yml b/internal/suites/OIDCTraefik/configuration.yml
index b26f0c36d..1766da293 100644
--- a/internal/suites/OIDCTraefik/configuration.yml
+++ b/internal/suites/OIDCTraefik/configuration.yml
@@ -62,33 +62,71 @@ identity_providers:
   oidc:
     enable_client_debug_messages: true
     hmac_secret: IVPWBkAdJHje3uz7LtFTDU2pFUfh39Xm
+    issuer_certificate_chain: |
+      -----BEGIN CERTIFICATE-----
+      MIIC6DCCAdCgAwIBAgIRAIxvm0gFgsbh3D22rSZLuFQwDQYJKoZIhvcNAQELBQAw
+      EzERMA8GA1UEChMIQXV0aGVsaWEwIBcNMjIxMDAyMDAzMDQyWhgPMjEyMjA5MDgw
+      MDMwNDJaMBMxETAPBgNVBAoTCEF1dGhlbGlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
+      AQ8AMIIBCgKCAQEAy71EOkV3jOpVQtVTH5HYcI4PryUCiAEyxAIuO+66gaAa4aCd
+      UCRr8iO/pt5nOwPxjPo+hMHhkcKpX7evj+wgYXAccpIQFSCYWTJkaXFL0jL7yFuE
+      5xpjgRM/x6FfK0IbN5WmVWO9EjesbyMCyDoYpjwzIrxnB70F9Y0nrXst1SnW/Sy0
+      01BQZNzD1tky1KDvEkw7L5mMPZFZMr5wV+ELvbo1LLvvrGYhhzbXWk7pPbxT0gAa
+      7yVvQbDKuCDqssAUyQa2JdlDaQocpldtK6l+dc3IsSWKd2UMouta75ngr9E1igy3
+      t7owMRqH8NjwKHt6KQeDVSdBnWNjG572vaRimQIDAQABozUwMzAOBgNVHQ8BAf8E
+      BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADANBgkqhkiG
+      9w0BAQsFAAOCAQEAaZJ09yGa+DGr/iTqshGdPKNCtcf/CXCkL52xiI7DzLxDt30P
+      8vCuXXrrTGBY7eWYupcNy/MyqaUrz1ED+map3nQzZQBJ9vWIfr01B9phkg/WSaNJ
+      1DlYtbPYzr86BlGP1V5d3Wv6JqF3tkWHI0kI38CT68fWdDKrfa5j3JdZGIVJW+51
+      U0IE3Nqhfc76YzwQ3sNX5FT2Fr55RowH+l5OBPk0Bcztq58XmyPR/bvPfDASt8iS
+      DBT+0iiDiwk6LvOkasL8p7nuh5Grc9LMEYXY/QMUbkIWhIVRFlqyJA9s8vGHx1D4
+      96iYKudj+yvO17Szzr/NNmcwETbCs4j6P6QeiA==
+      -----END CERTIFICATE-----
+      -----BEGIN CERTIFICATE-----
+      MIIDBTCCAe2gAwIBAgIQAK/NIAl3Bdg4Xk0y/ZGL7jANBgkqhkiG9w0BAQsFADAT
+      MREwDwYDVQQKEwhBdXRoZWxpYTAgFw0yMjEwMDIwMDMwMjFaGA8yMTIyMDkwODAw
+      MzAyMVowEzERMA8GA1UEChMIQXV0aGVsaWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+      DwAwggEKAoIBAQCg7jdO1HmydfkPzTtz57pvAS3YOdBT0hlNjJ4N2lrKhNnixrzK
+      +4R1dWQDP2SHbZQ0TskF8eQ8HhTr7AsApotTthJFkUgV2g+bv7wVroz0Hok5xtd4
+      bnpOvG3YUCP13Nk3ZVxdQXqR3/G3MrbyiXVPcgU+0giJ8EBykbtMu8L79/1iyk+m
+      w4fZfzTOeorRgspO3z3+pTAib2MCTA7bby1dX9qI/ysFPLdbJYfNQDxij8SzNLyJ
+      EkQ4kh3jKXf1VcZjbQTtYTZ3JJDqM08OxGMKuXUxPHd72Xlb+Fzql8LjYdEy/YKA
+      3r8FMf14lzcjvxtLnFXh//hiXh4+xgXMkrLZAgMBAAGjUzBRMA4GA1UdDwEB/wQE
+      AwICpDAPBgNVHSUECDAGBgRVHSUAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE
+      FGKpXiZA+8VQyMBqTTep+dVTthSbMA0GCSqGSIb3DQEBCwUAA4IBAQAE4DJg+Rb4
+      iiocvxxQ85lhh94ql++E8MKuzIdN7ORs+ybUnsDD1WFDebubroTQuTSBkFrNuGNJ
+      8B7NZsHiWWLvNsrnxxeC5CicqfhSDti0rKWsbGyeoq7Kqok5E4pwOzeRsxL2e/Hm
+      G6LsUQuQMUG2vxKNynqmJS4VpgSVkiGhUfURFuRRDuRpVQ/XTl7jDIGf/ls7TAZq
+      1AnmnSi4Cqy4hrTnwYUYkFCcH69onUKAoaVNl1eAH7ogxakz32WyWObY98NBrjzA
+      I6VQlaQNSHtdFqDpu7NWJZZZSgN4BknbMYQEPNYCm701cPB4ahJbpg5C3pVPFSql
+      Bc9iI6nN3PCr
+      -----END CERTIFICATE-----
     issuer_private_key: |
       -----BEGIN RSA PRIVATE KEY-----
-      MIIEogIBAAKCAQEAvOFmoEJFt1JkfdlwM3vJFg5rrY9d6LyyqezjZkBZDQ4qdEEU
-      dCrbW8ISFTtg9sfbrS3qingUzVP9VOfYPMC3r0ugjJXjhvJdBSaoLlzL3saeyrXk
-      frOOvkcWKzeOynqUNPhKy9dchmuLALFfd/Jy7Wzq0y7XxGeNidEmFjMAf9dwf6/+
-      PjQjbG7zBFu/XSajITPHlDXPVDd0j2qw2wu5Z9iqn4LRXnAFnC438hZZKZU/+JxU
-      2ezr6Sefiy8XTC2kDiq3cgLeEjSywlJOs+4TLjVS/3h75sh2Wk0xVaSwjPEjCOgm
-      a+2E3GJrGdQBiAjMSu101VBVwHUHaLDCn1T4NwIDAQABAoIBADWkupXnXI99Ogc4
-      GxK0JF88Rz6qyhwQg5mZKthejCwWCt6roRiBF33O933KOHa+OljMAqHDCv1pzjgw
-      BIz0mvaRPw7OfylTajHNUdShDFHADVc7I6MMcgz+eYBarhY5jCAjKHMOPjv7DSZs
-      OdYCKLvfxC2oTyV714n9uZhyccDcvQpkgZuBDL0oxPom1GOI8TGhPjxvFOovEHWA
-      Q8q9XY4cUVNDikZmvpgeUkJHWYHYb+11vKeSupnYD03yJ3sDy+F6+m+3/XmzFbXb
-      1p43ermHQsMfDlxPyulUUI0viSo2UhlMC/moAb9FusOv+dTl2lt0gGqzDJ9gg1z1
-      XpHRnwkCgYEA5x48dyxd4lydtVYef9sBmbLJEYozsYyOwLcnrLSNaZxeCza1exyR
-      QIRogswoLDacxrYvO8FY6LtAEMkisv732M29zthBPm5wyoSZiM1X2YfQXKsmyh2h
-      x1/yCWv/BQjj68A8IAxToaXxSG4WAr/X00RGUkXgkgw122FxcmGuFyUCgYEA0TcR
-      dnt/oRMK4aCZHcBgTknzDfxKlJh4S0C9WjxKgr8IlW4LTeVSBuuqOObOQYImEhtw
-      TRTKZIViL0roDF79cioQSp1Tk5h6uy8wr6VyhWRnWfTz2/azoTHnmQ780rtAuEI/
-      NvE6FiqwikJLjma1YJoRfr/bfmgMdxcYbJI1MSsCgYAEZ5Yda1IKu1siFpcUNrdM
-      F5UvaWPc0WHzGEqARxye06UTL6K7yuqVwTBAteVaGlxYiSZTTDcGkHMDHuIzaRqO
-      HjWs2IA90VsC8Q4ABnHTKnx1F6nwlin8I774IP/GN8ooNwyuS63YWdJEYBy5RrC1
-      TQrODJjgD62DFdNUq7nmpQKBgFMJEzI+Q+KPJ0NztTG8t7x61y/W0Vb2yM+9Syn0
-      QfJwlZyRR4VMHelHQZFB8dzIJgoLv9+n/8gztEtm5IB8dwUHst2aYaBz5UpDqYQd
-      Gz3cIrTuZpcH7DVvFCeIbknJLh+zk1lgFpjTqqvFMi27kANeQtFWnmwmKcRec0As
-      K1ZvAoGAV/3YB44/zIoB590+yhpx2HTmDPVHH+J+5O71Pi1D9W13ClBFLrE69wo+
-      IQLIstBI5tGOGeuQNjXhDKJ1U30xppZXcnebrkA+oOo+6dy20zghFR2maAGXfWFU
-      pM4GsSnSTm0bXPebVouQFqhj7LqcQQzCqRDThmw/Lp1tJUmu40g=
+      MIIEowIBAAKCAQEAy71EOkV3jOpVQtVTH5HYcI4PryUCiAEyxAIuO+66gaAa4aCd
+      UCRr8iO/pt5nOwPxjPo+hMHhkcKpX7evj+wgYXAccpIQFSCYWTJkaXFL0jL7yFuE
+      5xpjgRM/x6FfK0IbN5WmVWO9EjesbyMCyDoYpjwzIrxnB70F9Y0nrXst1SnW/Sy0
+      01BQZNzD1tky1KDvEkw7L5mMPZFZMr5wV+ELvbo1LLvvrGYhhzbXWk7pPbxT0gAa
+      7yVvQbDKuCDqssAUyQa2JdlDaQocpldtK6l+dc3IsSWKd2UMouta75ngr9E1igy3
+      t7owMRqH8NjwKHt6KQeDVSdBnWNjG572vaRimQIDAQABAoIBAA/EhhM8bRQqzo5t
+      lBFNaELNu8kCRD/iV9tzj8BzqVt+2JW9qG8bYn9K5Po1HCglFfyjIVOE7cAqIJGX
+      1a59x8PCuXDkfPolm6TLkZnXeta5u2K2MoLwN+M1aio5AvSGGTUkD8tr/KX8SQwQ
+      2ZZFaML0xcBadF7U8jEey4NRlSp5/voiIAB+FrJHepZBz2XJYCX5s2vYLPMn+51R
+      1HyO0n2aQ9H1Na8aBjTfAp9GDKJWBV3bSM7cVaLGlMFj/HNXUNVnSsVsJj0tdWKz
+      K6r9zPskLnS+eNjCgqrOtZSqJ7M3PL0/PoTFPrr1Fevr+soKWCaPF94Ib94O9SEq
+      scvP3kECgYEA0HBdGab0HjcZgFtsIaMm+eBcDhUmUrvMPUw6FmspKnc8wplscONW
+      wrDGhR0dpT8+aAMD5jFC2pvyHjI5AWkW+53LB15j6SVzUlUMfS3VTwE2prLtDHDs
+      nCDW2+fXY2kjv45efZGpMGbLJVePx2RCPzUlAlc14lzxnHgpo7eho1cCgYEA+jpi
+      Eo/Jqa5CNd4hrXqFxZTFtU2Mn38ZKI3QK/l47/347yHLebjsYIIwJRoHenxWxNlz
+      Y+BZ38vkP+f9BGAVGiRcyMmIJU0X305wKwl26Y2Q/tEm2OpwmDboD2pL9byi9vfY
+      bz7pQGK/l9j86KofRwVJJRLsofPI1SsjnC8c448CgYAkpg0IjJ1RjriSJADwLSKW
+      PseQxlE1rMVtZbC07mSPjeWGBbnWY3KGytQs5YCn5GXRne4alEC/9Tlt68CwKc0b
+      spPXGNaSUL5lFIUcoWlm+bylNMKPNG+1x+RfR/VMCll5vcuJYooP85L2Xt3t3gfz
+      2yFFtxXHVjY5H7uaiJgIAwKBgQDvkGXEj5TqtsL8/6YOiHb6Kuz+Hzi6mtxjTyI2
+      d6mpWuWxTBGaf8kOvJWLb9gpFFGeNPGcdXaWJIZqCJjcT4Dkflu2f/uwepaYXGhX
+      S8Bk6fwfee5PTmRt1mNmHsaKhgcfmznDh9+YnPIBVuULe5RmUlEtBWk3xEZKj/qP
+      1Ss7UQKBgAwZQz+h5Z/XOJH3Qs5nJBKAZUiYkj3ux7G6tjx0cz7XcUYd/6enBpkY
+      JeqVHB6G+bMRLwb+Hc5Vgpbd5GdaUWo8udaghHgSGPUVcn0lK38XhYek6ACGz7Lo
+      xEfgtKoBlUq+uPb8H05HY0t9KybA3LA5wkRYYnJ17/nkZtrrJAmX
       -----END RSA PRIVATE KEY-----
     clients:
       - id: oidc-tester-app

From 3f39914c8f4dcaa63d56de579143fc8378afb9b0 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 3 Oct 2022 11:52:29 +1100
Subject: [PATCH 091/263] refactor: private key decoding and generators (#4116)

---
 cmd/authelia-gen/cmd_code.go                  |   4 +
 ...contributing-development-commitmsg.md.tmpl |   6 +-
 .../contributing/guidelines/documentation.md  |   2 +-
 .../contributing/guidelines/introduction.md   |   2 +-
 .../en/integration/kubernetes/istio.md        |   2 +-
 docs/data/configkeys.json                     |   2 +-
 internal/configuration/decode_hooks.go        |  48 +++--
 internal/configuration/decode_hooks_test.go   | 180 +++++++++++++-----
 internal/configuration/provider.go            |   2 +-
 9 files changed, 179 insertions(+), 69 deletions(-)

diff --git a/cmd/authelia-gen/cmd_code.go b/cmd/authelia-gen/cmd_code.go
index f0cac4bba..54db167e0 100644
--- a/cmd/authelia-gen/cmd_code.go
+++ b/cmd/authelia-gen/cmd_code.go
@@ -1,6 +1,8 @@
 package main
 
 import (
+	"crypto/ecdsa"
+	"crypto/rsa"
 	"encoding/json"
 	"fmt"
 	"io"
@@ -181,6 +183,8 @@ var decodedTypes = []reflect.Type{
 	reflect.TypeOf(url.URL{}),
 	reflect.TypeOf(time.Duration(0)),
 	reflect.TypeOf(schema.Address{}),
+	reflect.TypeOf(rsa.PrivateKey{}),
+	reflect.TypeOf(ecdsa.PrivateKey{}),
 }
 
 func containsType(needle reflect.Type, haystack []reflect.Type) (contains bool) {
diff --git a/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl b/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
index 93b960316..7384db785 100644
--- a/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
+++ b/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
@@ -1,5 +1,5 @@
 ---
-title: "Commit Message Guidelines"
+title: "Commit Message"
 description: "Authelia Development Commit Message Guidelines"
 lead: "This section covers the git commit message guidelines we use for development."
 date: 2021-01-30T19:29:07+11:00
@@ -7,8 +7,8 @@ draft: false
 images: []
 menu:
   contributing:
-    parent: "development"
-weight: 231
+    parent: "guidelines"
+weight: 320
 toc: true
 aliases:
   - /docs/contributing/commitmsg-guidelines.html
diff --git a/docs/content/en/contributing/guidelines/documentation.md b/docs/content/en/contributing/guidelines/documentation.md
index 2a415e874..5d22f567f 100644
--- a/docs/content/en/contributing/guidelines/documentation.md
+++ b/docs/content/en/contributing/guidelines/documentation.md
@@ -2,7 +2,7 @@
 title: "Documentation"
 description: "Authelia Development Documentation Guidelines"
 lead: "This section covers the guidelines we use when writing documentation."
-date: 2021-01-30T19:29:07+11:00
+date: 2022-10-02T14:32:16+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/contributing/guidelines/introduction.md b/docs/content/en/contributing/guidelines/introduction.md
index 28d0a249a..293d8a097 100644
--- a/docs/content/en/contributing/guidelines/introduction.md
+++ b/docs/content/en/contributing/guidelines/introduction.md
@@ -2,7 +2,7 @@
 title: "Guidelines"
 description: "An introduction into guidelines for contributing to the Authelia project."
 lead: "An introduction into guidelines for contributing to the Authelia project."
-date: 2022-06-15T17:51:47+10:00
+date: 2022-10-02T14:32:16+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/integration/kubernetes/istio.md b/docs/content/en/integration/kubernetes/istio.md
index 29e14a43f..801204406 100644
--- a/docs/content/en/integration/kubernetes/istio.md
+++ b/docs/content/en/integration/kubernetes/istio.md
@@ -2,7 +2,7 @@
 title: "Istio"
 description: "A guide to integrating Authelia with the Istio Kubernetes Ingress."
 lead: "A guide to integrating Authelia with the Istio Kubernetes Ingress."
-date: 2022-06-15T17:51:47+10:00
+date: 2022-10-02T13:59:09+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index c351cb250..c3bb2436f 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/internal/configuration/decode_hooks.go b/internal/configuration/decode_hooks.go
index 31f657f37..9dd236690 100644
--- a/internal/configuration/decode_hooks.go
+++ b/internal/configuration/decode_hooks.go
@@ -1,6 +1,7 @@
 package configuration
 
 import (
+	"crypto/ecdsa"
 	"crypto/rsa"
 	"crypto/x509"
 	"fmt"
@@ -343,8 +344,8 @@ func StringToX509CertificateChainHookFunc() mapstructure.DecodeHookFuncType {
 	}
 }
 
-// StringToRSAPrivateKeyHookFunc decodes strings to rsa.PrivateKey's.
-func StringToRSAPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
+// StringToPrivateKeyHookFunc decodes strings to rsa.PrivateKey's.
+func StringToPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
 	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
 		if f.Kind() != reflect.String {
 			return data, nil
@@ -354,28 +355,53 @@ func StringToRSAPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
 			return data, nil
 		}
 
-		expectedType := reflect.TypeOf(rsa.PrivateKey{})
+		expectedTypeRSA := reflect.TypeOf(rsa.PrivateKey{})
+		expectedTypeECDSA := reflect.TypeOf(ecdsa.PrivateKey{})
 
-		if t.Elem() != expectedType {
-			return data, nil
-		}
+		var (
+			i            any
+			expectedType reflect.Type
+		)
 
 		dataStr := data.(string)
 
-		var result *rsa.PrivateKey
+		switch t.Elem() {
+		case expectedTypeRSA:
+			var result *rsa.PrivateKey
 
-		if dataStr == "" {
-			return result, nil
+			if dataStr == "" {
+				return result, nil
+			}
+
+			expectedType = expectedTypeRSA
+		case expectedTypeECDSA:
+			var result *ecdsa.PrivateKey
+
+			if dataStr == "" {
+				return result, nil
+			}
+
+			expectedType = expectedTypeECDSA
+		default:
+			return data, nil
 		}
 
-		var i interface{}
-
 		if i, err = utils.ParseX509FromPEM([]byte(dataStr)); err != nil {
 			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, err)
 		}
 
 		switch r := i.(type) {
 		case *rsa.PrivateKey:
+			if expectedType != expectedTypeRSA {
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, fmt.Errorf("the data is for a %T not a *%s", r, expectedType))
+			}
+
+			return r, nil
+		case *ecdsa.PrivateKey:
+			if expectedType != expectedTypeECDSA {
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, fmt.Errorf("the data is for a %T not a *%s", r, expectedType))
+			}
+
 			return r, nil
 		default:
 			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, fmt.Errorf("the data is for a %T not a *%s", r, expectedType))
diff --git a/internal/configuration/decode_hooks_test.go b/internal/configuration/decode_hooks_test.go
index 69e947de0..6a752e5f9 100644
--- a/internal/configuration/decode_hooks_test.go
+++ b/internal/configuration/decode_hooks_test.go
@@ -23,8 +23,8 @@ import (
 func TestStringToMailAddressHookFunc(t *testing.T) {
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -78,8 +78,8 @@ func TestStringToMailAddressHookFunc(t *testing.T) {
 func TestStringToMailAddressHookFuncPointer(t *testing.T) {
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -139,8 +139,8 @@ func TestStringToMailAddressHookFuncPointer(t *testing.T) {
 func TestStringToURLHookFunc(t *testing.T) {
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -212,8 +212,8 @@ func TestStringToURLHookFunc(t *testing.T) {
 func TestStringToURLHookFuncPointer(t *testing.T) {
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -285,8 +285,8 @@ func TestStringToURLHookFuncPointer(t *testing.T) {
 func TestToTimeDurationHookFunc(t *testing.T) {
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -405,8 +405,8 @@ func TestToTimeDurationHookFunc(t *testing.T) {
 func TestToTimeDurationHookFuncPointer(t *testing.T) {
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -526,8 +526,8 @@ func TestToTimeDurationHookFuncPointer(t *testing.T) {
 func TestStringToRegexpFunc(t *testing.T) {
 	testCases := []struct {
 		desc     string
-		have     interface{}
-		want     interface{}
+		have     any
+		want     any
 		err      string
 		decode   bool
 		wantGrps []string
@@ -640,8 +640,8 @@ func TestStringToRegexpFunc(t *testing.T) {
 func TestStringToRegexpFuncPointers(t *testing.T) {
 	testCases := []struct {
 		desc     string
-		have     interface{}
-		want     interface{}
+		have     any
+		want     any
 		err      string
 		decode   bool
 		wantGrps []string
@@ -775,8 +775,8 @@ func TestStringToAddressHookFunc(t *testing.T) {
 
 	testCases := []struct {
 		name     string
-		have     interface{}
-		expected interface{}
+		have     any
+		expected any
 		err      string
 		decode   bool
 	}{
@@ -867,51 +867,108 @@ func TestStringToAddressHookFunc(t *testing.T) {
 	}
 }
 
-func TestStringToRSAPrivateKeyHookFunc(t *testing.T) {
-	var nilkey *rsa.PrivateKey
+func TestStringToPrivateKeyHookFunc(t *testing.T) {
+	var (
+		nilRSA   *rsa.PrivateKey
+		nilECDSA *ecdsa.PrivateKey
+		nilCert  *x509.Certificate
+	)
 
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
 		{
 			desc:   "ShouldDecodeRSAPrivateKey",
 			have:   x509PrivateKeyRSA1,
-			want:   mustParseRSAPrivateKey(x509PrivateKeyRSA1),
+			want:   MustParseRSAPrivateKey(x509PrivateKeyRSA1),
+			decode: true,
+		},
+		{
+			desc:   "ShouldDecodeECDSAPrivateKey",
+			have:   x509PrivateKeyEC1,
+			want:   MustParseECDSAPrivateKey(x509PrivateKeyEC1),
 			decode: true,
 		},
 		{
 			desc:   "ShouldNotDecodeToECDSAPrivateKey",
 			have:   x509PrivateKeyRSA1,
 			want:   &ecdsa.PrivateKey{},
-			decode: false,
+			decode: true,
+			err:    "could not decode to a *ecdsa.PrivateKey: the data is for a *rsa.PrivateKey not a *ecdsa.PrivateKey",
 		},
 		{
-			desc:   "ShouldNotDecodeEmptyKey",
+			desc:   "ShouldNotDecodeEmptyRSAKey",
 			have:   "",
-			want:   nilkey,
+			want:   nilRSA,
+			decode: true,
+		},
+		{
+			desc:   "ShouldNotDecodeEmptyECDSAKey",
+			have:   "",
+			want:   nilECDSA,
 			decode: true,
 		},
 		{
 			desc:   "ShouldNotDecodeECDSAKeyToRSAKey",
 			have:   x509PrivateKeyEC1,
-			want:   nilkey,
+			want:   nilRSA,
 			decode: true,
 			err:    "could not decode to a *rsa.PrivateKey: the data is for a *ecdsa.PrivateKey not a *rsa.PrivateKey",
 		},
+		{
+			desc:   "ShouldNotDecodeRSAKeyToECDSAKey",
+			have:   x509PrivateKeyRSA1,
+			want:   nilECDSA,
+			decode: true,
+			err:    "could not decode to a *ecdsa.PrivateKey: the data is for a *rsa.PrivateKey not a *ecdsa.PrivateKey",
+		},
 		{
 			desc:   "ShouldNotDecodeBadRSAPrivateKey",
 			have:   x509PrivateKeyRSA2,
-			want:   nilkey,
+			want:   nilRSA,
 			decode: true,
 			err:    "could not decode to a *rsa.PrivateKey: failed to parse PEM block containing the key",
 		},
+		{
+			desc:   "ShouldNotDecodeBadECDSAPrivateKey",
+			have:   x509PrivateKeyEC2,
+			want:   nilECDSA,
+			decode: true,
+			err:    "could not decode to a *ecdsa.PrivateKey: failed to parse PEM block containing the key",
+		},
+		{
+			desc:   "ShouldNotDecodeCertificateToRSAPrivateKey",
+			have:   x509CertificateRSA1,
+			want:   nilRSA,
+			decode: true,
+			err:    "could not decode to a *rsa.PrivateKey: the data is for a *x509.Certificate not a *rsa.PrivateKey",
+		},
+		{
+			desc:   "ShouldNotDecodeCertificateToECDSAPrivateKey",
+			have:   x509CertificateRSA1,
+			want:   nilECDSA,
+			decode: true,
+			err:    "could not decode to a *ecdsa.PrivateKey: the data is for a *x509.Certificate not a *ecdsa.PrivateKey",
+		},
+		{
+			desc:   "ShouldNotDecodeRSAKeyToCertificate",
+			have:   x509PrivateKeyRSA1,
+			want:   nilCert,
+			decode: false,
+		},
+		{
+			desc:   "ShouldNotDecodeECDSAKeyToCertificate",
+			have:   x509PrivateKeyEC1,
+			want:   nilCert,
+			decode: false,
+		},
 	}
 
-	hook := configuration.StringToRSAPrivateKeyHookFunc()
+	hook := configuration.StringToPrivateKeyHookFunc()
 
 	for _, tc := range testCases {
 		t.Run(tc.desc, func(t *testing.T) {
@@ -944,25 +1001,25 @@ func TestStringToX509CertificateHookFunc(t *testing.T) {
 		{
 			desc:   "ShouldDecodeRSACertificate",
 			have:   x509CertificateRSA1,
-			want:   mustParseX509Certificate(x509CertificateRSA1),
+			want:   MustParseX509Certificate(x509CertificateRSA1),
 			decode: true,
 		},
 		{
 			desc:   "ShouldDecodeECDSACertificate",
 			have:   x509CACertificateECDSA,
-			want:   mustParseX509Certificate(x509CACertificateECDSA),
+			want:   MustParseX509Certificate(x509CACertificateECDSA),
 			decode: true,
 		},
 		{
 			desc:   "ShouldDecodeRSACACertificate",
 			have:   x509CACertificateRSA,
-			want:   mustParseX509Certificate(x509CACertificateRSA),
+			want:   MustParseX509Certificate(x509CACertificateRSA),
 			decode: true,
 		},
 		{
 			desc:   "ShouldDecodeECDSACACertificate",
 			have:   x509CACertificateECDSA,
-			want:   mustParseX509Certificate(x509CACertificateECDSA),
+			want:   MustParseX509Certificate(x509CACertificateECDSA),
 			decode: true,
 		},
 		{
@@ -1020,50 +1077,50 @@ func TestStringToX509CertificateChainHookFunc(t *testing.T) {
 		{
 			desc:     "ShouldDecodeRSACertificate",
 			have:     x509CertificateRSA1,
-			expected: mustParseX509CertificateChain(x509CertificateRSA1),
+			expected: MustParseX509CertificateChain(x509CertificateRSA1),
 			decode:   true,
 		},
 		{
 			desc:     "ShouldDecodeRSACertificateNoPtr",
 			have:     x509CertificateRSA1,
-			expected: *mustParseX509CertificateChain(x509CertificateRSA1),
+			expected: *MustParseX509CertificateChain(x509CertificateRSA1),
 			decode:   true,
 		},
 		{
 			desc:     "ShouldDecodeRSACertificateChain",
-			have:     buildChain(x509CertificateRSA1, x509CACertificateRSA),
-			expected: mustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateRSA),
+			have:     BuildChain(x509CertificateRSA1, x509CACertificateRSA),
+			expected: MustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateRSA),
 			decode:   true,
 		},
 		{
 			desc:     "ShouldDecodeRSACertificateChainNoPtr",
-			have:     buildChain(x509CertificateRSA1, x509CACertificateRSA),
-			expected: *mustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateRSA),
+			have:     BuildChain(x509CertificateRSA1, x509CACertificateRSA),
+			expected: *MustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateRSA),
 			decode:   true,
 		},
 		{
 			desc:     "ShouldNotDecodeBadRSACertificateChain",
-			have:     buildChain(x509CertificateRSA1, x509CACertificateECDSA),
-			expected: mustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateECDSA),
+			have:     BuildChain(x509CertificateRSA1, x509CACertificateECDSA),
+			expected: MustParseX509CertificateChain(x509CertificateRSA1, x509CACertificateECDSA),
 			verr:     "certificate #1 in chain is not signed properly by certificate #2 in chain: x509: signature algorithm specifies an RSA public key, but have public key of type *ecdsa.PublicKey",
 			decode:   true,
 		},
 		{
 			desc:     "ShouldDecodeECDSACertificate",
 			have:     x509CACertificateECDSA,
-			expected: mustParseX509CertificateChain(x509CACertificateECDSA),
+			expected: MustParseX509CertificateChain(x509CACertificateECDSA),
 			decode:   true,
 		},
 		{
 			desc:     "ShouldDecodeRSACACertificate",
 			have:     x509CACertificateRSA,
-			expected: mustParseX509CertificateChain(x509CACertificateRSA),
+			expected: MustParseX509CertificateChain(x509CACertificateRSA),
 			decode:   true,
 		},
 		{
 			desc:     "ShouldDecodeECDSACACertificate",
 			have:     x509CACertificateECDSA,
-			expected: mustParseX509CertificateChain(x509CACertificateECDSA),
+			expected: MustParseX509CertificateChain(x509CACertificateECDSA),
 			decode:   true,
 		},
 		{
@@ -1175,6 +1232,11 @@ bad key
 MHcCAQEEIMn970LSn8aKVhBM4vyUmpZyEdCT4riN+Lp4QU04zUhYoAoGCCqGSM49
 AwEHoUQDQgAEMD69n22nd78GmaRDzy/s7muqhbc/OEnFS2mNtiRAA5FaX+kbkCB5
 8pu/k2jkaSVNZtBYKPVAibHkhvakjVb66A==
+-----END EC PRIVATE KEY-----`
+
+	x509PrivateKeyEC2 = `
+-----BEGIN EC PRIVATE KEY-----
+bad key
 -----END EC PRIVATE KEY-----`
 
 	x509CertificateRSA1 = `
@@ -1232,14 +1294,14 @@ uDv6M2spMi0CIQC8uOSMcv11vp1ylsGg38N6XYA+GQa1BHRd79+91hC+7w==
 -----END CERTIFICATE-----`
 )
 
-func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
+func MustParseRSAPrivateKey(data string) *rsa.PrivateKey {
 	block, _ := pem.Decode([]byte(data))
 	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
 		panic("not pem encoded")
 	}
 
 	if block.Type != "RSA PRIVATE KEY" {
-		panic("not private key")
+		panic("not rsa private key")
 	}
 
 	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
@@ -1250,7 +1312,25 @@ func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
 	return key
 }
 
-func mustParseX509Certificate(data string) *x509.Certificate {
+func MustParseECDSAPrivateKey(data string) *ecdsa.PrivateKey {
+	block, _ := pem.Decode([]byte(data))
+	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
+		panic("not pem encoded")
+	}
+
+	if block.Type != "EC PRIVATE KEY" {
+		panic("not ecdsa private key")
+	}
+
+	key, err := x509.ParseECPrivateKey(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return key
+}
+
+func MustParseX509Certificate(data string) *x509.Certificate {
 	block, _ := pem.Decode([]byte(data))
 	if block == nil || len(block.Bytes) == 0 {
 		panic("not a PEM")
@@ -1264,7 +1344,7 @@ func mustParseX509Certificate(data string) *x509.Certificate {
 	return cert
 }
 
-func buildChain(pems ...string) string {
+func BuildChain(pems ...string) string {
 	buf := bytes.Buffer{}
 
 	for i, data := range pems {
@@ -1278,8 +1358,8 @@ func buildChain(pems ...string) string {
 	return buf.String()
 }
 
-func mustParseX509CertificateChain(datas ...string) *schema.X509CertificateChain {
-	chain, err := schema.NewX509CertificateChain(buildChain(datas...))
+func MustParseX509CertificateChain(datas ...string) *schema.X509CertificateChain {
+	chain, err := schema.NewX509CertificateChain(BuildChain(datas...))
 	if err != nil {
 		panic(err)
 	}
diff --git a/internal/configuration/provider.go b/internal/configuration/provider.go
index 96db9c86b..22b179331 100644
--- a/internal/configuration/provider.go
+++ b/internal/configuration/provider.go
@@ -63,7 +63,7 @@ func unmarshal(ko *koanf.Koanf, val *schema.StructValidator, path string, o inte
 				StringToAddressHookFunc(),
 				StringToX509CertificateHookFunc(),
 				StringToX509CertificateChainHookFunc(),
-				StringToRSAPrivateKeyHookFunc(),
+				StringToPrivateKeyHookFunc(),
 				ToTimeDurationHookFunc(),
 			),
 			Metadata:         nil,

From e9e68180588164b525771fb8d55cf3d732064125 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Oct 2022 03:54:48 +0000
Subject: [PATCH 092/263] build(deps): update dependency @types/node to v18.8.0
 (#4115)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 76 +++++++++++++++++++++++-----------------------
 2 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/web/package.json b/web/package.json
index f7c6a17c5..dcb8f35f6 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.1",
-    "@types/node": "18.7.23",
+    "@types/node": "18.8.0",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index bbe0a0d2d..b3e0728b4 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.1
-  '@types/node': 18.7.23
+  '@types/node': 18.8.0
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.1
-  '@types/node': 18.7.23
+  '@types/node': 18.8.0
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.1.2_@types+node@18.7.23
+  jest: 29.1.2_@types+node@18.8.0
   jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.1.2
@@ -2507,7 +2507,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2528,14 +2528,14 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.1.2_@types+node@18.7.23
+      jest-config: 29.1.2_@types+node@18.8.0
       jest-haste-map: 29.1.2
       jest-message-util: 29.1.2
       jest-regex-util: 29.0.0
@@ -2562,7 +2562,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       jest-mock: 29.1.2
     dev: true
 
@@ -2596,7 +2596,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       jest-message-util: 29.1.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
@@ -2629,7 +2629,7 @@ packages:
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2740,7 +2740,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2752,7 +2752,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3339,7 +3339,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3368,7 +3368,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3389,8 +3389,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.7.23:
-    resolution: {integrity: sha512-DWNcCHolDq0ZKGizjx2DZjR/PqsYwAcYUJmfMWqtVU2MBMG5Mo+xFZrhGId5r/O5HOuMPyQEcM6KUBp5lBZZBg==}
+  /@types/node/18.8.0:
+    resolution: {integrity: sha512-u+h43R6U8xXDt2vzUaVP3VwjjLyOJk6uEciZS8OSyziUQGOwmk+l+4drxcsDboHXwyTaqS1INebghmWMRxq3LA==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5303,7 +5303,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
-      jest: 29.1.2_@types+node@18.7.23
+      jest: 29.1.2_@types+node@18.8.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6516,7 +6516,7 @@ packages:
       '@jest/expect': 29.1.2
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6535,7 +6535,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.2_@types+node@18.7.23:
+  /jest-cli/29.1.2_@types+node@18.8.0:
     resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6552,7 +6552,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.2_@types+node@18.7.23
+      jest-config: 29.1.2_@types+node@18.8.0
       jest-util: 29.1.2
       jest-validate: 29.1.2
       prompts: 2.4.2
@@ -6563,7 +6563,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.2_@types+node@18.7.23:
+  /jest-config/29.1.2_@types+node@18.8.0:
     resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6578,7 +6578,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       babel-jest: 29.1.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6648,7 +6648,7 @@ packages:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
       '@types/jsdom': 20.0.0
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       jest-mock: 29.1.2
       jest-util: 29.1.2
       jsdom: 20.0.0
@@ -6666,7 +6666,7 @@ packages:
       '@jest/environment': 29.1.2
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       jest-mock: 29.1.2
       jest-util: 29.1.2
     dev: true
@@ -6682,7 +6682,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6705,7 +6705,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6781,7 +6781,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       jest-util: 29.1.2
     dev: true
 
@@ -6841,7 +6841,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6872,7 +6872,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6895,7 +6895,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       graceful-fs: 4.2.10
     dev: true
 
@@ -6940,7 +6940,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6952,7 +6952,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6979,7 +6979,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.2_@types+node@18.7.23
+      jest: 29.1.2_@types+node@18.8.0
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6993,7 +6993,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7007,7 +7007,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7019,7 +7019,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7028,13 +7028,13 @@ packages:
     resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.7.23
+      '@types/node': 18.8.0
       jest-util: 29.1.2
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.2_@types+node@18.7.23:
+  /jest/29.1.2_@types+node@18.8.0:
     resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7047,7 +7047,7 @@ packages:
       '@jest/core': 29.1.2
       '@jest/types': 29.1.2
       import-local: 3.1.0
-      jest-cli: 29.1.2_@types+node@18.7.23
+      jest-cli: 29.1.2_@types+node@18.8.0
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 21a24ac1e15112d87139ccaf14dafc07ab16ff82 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 3 Oct 2022 15:28:31 +1100
Subject: [PATCH 093/263] docs: fix envoy docs (#4119)

---
 docs/content/en/integration/proxies/envoy.md   | 4 ++--
 docs/content/en/integration/proxies/support.md | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/content/en/integration/proxies/envoy.md b/docs/content/en/integration/proxies/envoy.md
index b887dc1ea..0099b396e 100644
--- a/docs/content/en/integration/proxies/envoy.md
+++ b/docs/content/en/integration/proxies/envoy.md
@@ -44,9 +44,9 @@ Below you will find commented examples of the following configuration:
 * Authelia Portal
 * Protected Endpoint (Nextcloud)
 
-### Theoretical Example
+### Example
 
-Support for [Envoy] should be possible via [Envoy]'s
+Support for [Envoy] is possible with Authelia v4.37.0 and higher via [Envoy]'s
 [external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
 
 {{< details "docker-compose.yaml" >}}
diff --git a/docs/content/en/integration/proxies/support.md b/docs/content/en/integration/proxies/support.md
index a378f8871..03c1135a7 100644
--- a/docs/content/en/integration/proxies/support.md
+++ b/docs/content/en/integration/proxies/support.md
@@ -87,7 +87,7 @@ available in [Kubernetes]. You would likely have to build your own [HAProxy] ima
 
 ### Envoy
 
-[Envoy] is currently only partially documented however it is technically supported via [Envoy]'s
+[Envoy] is supported with Authelia v4.37.0 and higher via [Envoy]'s
 [external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
 
 ### Caddy

From f80edd2f4ab9d4bf526c84184ba5a91c9ad00f8b Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 3 Oct 2022 15:57:25 +1100
Subject: [PATCH 094/263] docs: fix istio docs and readme (#4120)

---
 README.md                                     | 35 ++++++++++---------
 .../en/integration/kubernetes/istio.md        |  3 ++
 docs/content/en/integration/proxies/envoy.md  |  5 +--
 .../content/en/integration/proxies/support.md |  5 +--
 4 files changed, 28 insertions(+), 20 deletions(-)

diff --git a/README.md b/README.md
index cdd3264ee..b7f442ab6 100644
--- a/README.md
+++ b/README.md
@@ -16,9 +16,8 @@
   [![Matrix](https://img.shields.io/matrix/authelia-support:matrix.org?label=matrix&logo=matrix&style=flat-square&color=blue)](https://matrix.to/#/#support:authelia.com)
 
 **Authelia** is an open-source authentication and authorization server providing two-factor authentication and single
-sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies like [nginx],
-[Traefik], [Caddy] or [HAProxy] to let them know whether requests should either be allowed or redirected to Authelia's
-portal for authentication.
+sign-on (SSO) for your applications via a web portal. It acts as a companion for [reverse proxies](#proxy-support) by
+allowing, denying, or redirecting requests.
 
 Documentation is available at [https://www.authelia.com/](https://www.authelia.com/).
 
@@ -32,8 +31,11 @@ The following is a simple diagram of the architecture:
 [APT](https://apt.authelia.com/stable/debian/packages/authelia/),
 [FreeBSD Ports](https://svnweb.freebsd.org/ports/head/www/authelia/), or using a
 [static binary](https://github.com/authelia/authelia/releases/latest),
-[.deb package]((https://github.com/authelia/authelia/releases/latest)), [Docker] or [Kubernetes] either manually or via
-the Helm [Chart](https://charts.authelia.com) (beta) leveraging ingress controllers and ingress configurations.
+[.deb package]((https://github.com/authelia/authelia/releases/latest)), as a container on [Docker] or [Kubernetes].
+
+
+Deployment can be orchestrated via the Helm [Chart](https://charts.authelia.com) (beta) leveraging ingress controllers
+and ingress configurations.
 
 <p align="center">
   <img src="./docs/static/images/logos/kubernetes.png" height="100"/>
@@ -73,10 +75,11 @@ This is a list of the key features of Authelia:
 * Compatible with [Caddy] using the [forward_auth](https://caddyserver.com/docs/caddyfile/directives/forward_auth)
   directive.
 * Kubernetes Support:
-  * Compatible with the [ingress-nginx](https://github.com/kubernetes/ingress-nginx), the
-    [Traefik Kubernetes CRD](https://doc.traefik.io/traefik/providers/kubernetes-crd/), and the
-    [Traefik Kubernetes Ingress](https://doc.traefik.io/traefik/providers/kubernetes-crd/) Kubernetes ingress
-    controllers out of the box.
+  * Compatible with several Kubernetes ingress controllers:
+    * [ingress-nginx](https://www.authelia.com/integration/kubernetes/nginx-ingress/)
+    * [Traefik Kubernetes CRD](https://www.authelia.com/integration/kubernetes/traefik-ingress/#ingressroute)
+    * [Traefik Kubernetes Ingress](https://www.authelia.com/integration/kubernetes/traefik-ingress/#ingress)
+    * [Istio](https://www.authelia.com/integration/kubernetes/istio/)
   * Beta support for installing via Helm using our [Charts](https://charts.authelia.com).
 * Beta support for [OpenID Connect](https://www.authelia.com/roadmap/active/openid-connect/).
 
@@ -86,8 +89,7 @@ If you want to know more about the roadmap, follow [Roadmap](https://www.autheli
 
 ## Proxy support
 
-Authelia works in combination with [nginx], [Traefik], [Caddy] or [HAProxy]. It can be deployed on bare metal with
-Docker or on top of [Kubernetes].
+Authelia works in combination with [nginx], [Traefik], [Caddy], [Skipper], [Envoy], or [HAProxy].
 
 <p align="center">
   <img src="./docs/static/images/logos/nginx.png" height="50"/>
@@ -95,7 +97,6 @@ Docker or on top of [Kubernetes].
   <img src="./docs/static/images/logos/caddy.png" height="50"/>
   <img src="./docs/static/images/logos/envoy.png" height="50"/>
   <img src="./docs/static/images/logos/haproxy.png" height="50"/>
-  <img src="./docs/static/images/logos/kubernetes.png" height="50"/>
 </p>
 
 ## Getting Started
@@ -383,10 +384,12 @@ Companies contributing to Authelia via Open Collective will have a special menti
 [Webauthn]: https://www.yubico.com/authentication-standards/webauthn/
 [auth_request]: https://nginx.org/en/docs/http/ngx_http_auth_request_module.html
 [config.template.yml]: ./config.template.yml
-[nginx]: https://www.nginx.com/
-[Traefik]: https://traefik.io/
-[Caddy]: https://caddyserver.com/
-[HAProxy]: https://www.haproxy.org/
+[nginx]: https://www.authelia.com/integration/proxies/nginx/
+[Traefik]: https://www.authelia.com/integration/proxies/traefik/
+[Caddy]: https://www.authelia.com/integration/proxies/caddy/
+[Skipper]: https://www.authelia.com/integration/proxies/skipper/
+[Envoy]: https://www.authelia.com/integration/proxies/envoy/
+[HAProxy]: https://www.authelia.com/integration/proxies/haproxy/
 [Docker]: https://docker.com/
 [Kubernetes]: https://kubernetes.io/
 [security]: https://github.com/authelia/authelia/security/policy
diff --git a/docs/content/en/integration/kubernetes/istio.md b/docs/content/en/integration/kubernetes/istio.md
index 801204406..ca6edf4d6 100644
--- a/docs/content/en/integration/kubernetes/istio.md
+++ b/docs/content/en/integration/kubernetes/istio.md
@@ -13,6 +13,9 @@ toc: true
 ---
 
 Istio uses [Envoy](../proxies/envoy.md) as an Ingress. This means it has a relatively comprehensive integration option.
+Istio is supported with Authelia v4.37.0 and higher via [Envoy]'s [external authorization] filter.
+
+[external authorization]: (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
 
 ## Example
 
diff --git a/docs/content/en/integration/proxies/envoy.md b/docs/content/en/integration/proxies/envoy.md
index 0099b396e..1ff1e85ec 100644
--- a/docs/content/en/integration/proxies/envoy.md
+++ b/docs/content/en/integration/proxies/envoy.md
@@ -46,8 +46,9 @@ Below you will find commented examples of the following configuration:
 
 ### Example
 
-Support for [Envoy] is possible with Authelia v4.37.0 and higher via [Envoy]'s
-[external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
+Support for [Envoy] is possible with Authelia v4.37.0 and higher via [Envoy]'s [external authorization] filter.
+
+[external authorization]: (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
 
 {{< details "docker-compose.yaml" >}}
 ```yaml
diff --git a/docs/content/en/integration/proxies/support.md b/docs/content/en/integration/proxies/support.md
index 03c1135a7..af264a081 100644
--- a/docs/content/en/integration/proxies/support.md
+++ b/docs/content/en/integration/proxies/support.md
@@ -87,8 +87,9 @@ available in [Kubernetes]. You would likely have to build your own [HAProxy] ima
 
 ### Envoy
 
-[Envoy] is supported with Authelia v4.37.0 and higher via [Envoy]'s
-[external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
+[Envoy] is supported with Authelia v4.37.0 and higher via [Envoy]'s [external authorization] filter.
+
+[external authorization]: (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
 
 ### Caddy
 

From c02b2e062a359e461aca157e63c1e15ad8a0be5e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 4 Oct 2022 00:01:44 +0000
Subject: [PATCH 095/263] build(deps): update material-ui monorepo to v5.10.8
 (#4122)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  4 ++--
 web/pnpm-lock.yaml | 46 +++++++++++++++++++++++-----------------------
 2 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/web/package.json b/web/package.json
index dcb8f35f6..1385c882c 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,8 +26,8 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.6",
-    "@mui/material": "5.10.7",
-    "@mui/styles": "5.10.7",
+    "@mui/material": "5.10.8",
+    "@mui/styles": "5.10.8",
     "axios": "0.27.2",
     "broadcast-channel": "4.17.0",
     "classnames": "2.3.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index b3e0728b4..afa6c6613 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,8 +11,8 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.6
-  '@mui/material': 5.10.7
-  '@mui/styles': 5.10.7
+  '@mui/material': 5.10.8
+  '@mui/styles': 5.10.8
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.1
@@ -73,9 +73,9 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.6_z3nvdgs6va3zf6yslsds3tshui
-  '@mui/material': 5.10.7_ikcgkdnp4bn3rgptamntbhbo7e
-  '@mui/styles': 5.10.7_iapumuv4e6jcjznwuxpf4tt22e
+  '@mui/icons-material': 5.10.6_lrxyqjzvf7pkknwtk2aj65ruy4
+  '@mui/material': 5.10.8_ikcgkdnp4bn3rgptamntbhbo7e
+  '@mui/styles': 5.10.8_iapumuv4e6jcjznwuxpf4tt22e
   axios: 0.27.2
   broadcast-channel: 4.17.0
   classnames: 2.3.2
@@ -2802,8 +2802,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.99_rj7ozvcq3uehdlnj3cbwzbi5ce:
-    resolution: {integrity: sha512-D04H6O1c0Jv561yI0SVbpa8MpqpW3G43CwJxV2o6ALfI0DMJ45w07dGafmDchb6aCWTRTdggd3rjgmuzyNwPiQ==}
+  /@mui/base/5.0.0-alpha.100_rj7ozvcq3uehdlnj3cbwzbi5ce:
+    resolution: {integrity: sha512-bSoJEKCENtmJrJDECHUe9PiqztIUACuSskyqw9ypqE7Dz3WxL3e8puFsWBkUsz+WOCjXh4B4Xljn88Ucxxv5HA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2826,11 +2826,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.7:
-    resolution: {integrity: sha512-3N0UYVy3MbrHzM3j6f7fIUCZ+bQ1/sSZq143tLxwSssW3Z4AqE83brpr5flEY1Lx+Aowv/cPyQMmZxzRlFCGqw==}
+  /@mui/core-downloads-tracker/5.10.8:
+    resolution: {integrity: sha512-V5D7OInO4P9PdT/JACg7fwjbOORm3GklaMVgdGomjyxiyetgRND5CC9r35e1LK/DqHdoyDuhbFzdfrqWtpmEIw==}
     dev: false
 
-  /@mui/icons-material/5.10.6_z3nvdgs6va3zf6yslsds3tshui:
+  /@mui/icons-material/5.10.6_lrxyqjzvf7pkknwtk2aj65ruy4:
     resolution: {integrity: sha512-QwxdRmLA46S94B0hExPDx0td+A2unF+33bQ6Cs+lNpJKVsm1YeHwNdYXYcnpWeHeQQ07055OXl7IB2GKDd0MfA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2842,13 +2842,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.7_ikcgkdnp4bn3rgptamntbhbo7e
+      '@mui/material': 5.10.8_ikcgkdnp4bn3rgptamntbhbo7e
       '@types/react': 18.0.21
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.7_ikcgkdnp4bn3rgptamntbhbo7e:
-    resolution: {integrity: sha512-o1jcQGii+q7ORrXhBiMmGzFDaboc1qTgOOC3zDW+NR9ryVzWzL7qEeqoORbgDB5zk9OBsXCjB91fUH/ls5xMwg==}
+  /@mui/material/5.10.8_ikcgkdnp4bn3rgptamntbhbo7e:
+    resolution: {integrity: sha512-sF/Ka0IJjGXV52zoT4xAWEqXVRjNYbIjATo9L4Q5oQC5iJpGrKJFY16uNtWWB0+vp/nayAuPGZHrxtV+t3ecdQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2867,9 +2867,9 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/base': 5.0.0-alpha.99_rj7ozvcq3uehdlnj3cbwzbi5ce
-      '@mui/core-downloads-tracker': 5.10.7
-      '@mui/system': 5.10.7_h33l6npc22g7vcra72cibfsrvm
+      '@mui/base': 5.0.0-alpha.100_rj7ozvcq3uehdlnj3cbwzbi5ce
+      '@mui/core-downloads-tracker': 5.10.8
+      '@mui/system': 5.10.8_h33l6npc22g7vcra72cibfsrvm
       '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.21
@@ -2900,8 +2900,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styled-engine/5.10.7_hfzxdiydbrbhhfpkwuv3jhvwmq:
-    resolution: {integrity: sha512-CCrtW+vvCKEm6pOE/QcutQ+ORC/iE6D1ghscN4l7LE2JXPvTXO/z0yu8Wxug1JEDlWm4r1Qa0PzJe1P9bjKzNA==}
+  /@mui/styled-engine/5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq:
+    resolution: {integrity: sha512-w+y8WI18EJV6zM/q41ug19cE70JTeO6sWFsQ7tgePQFpy6ToCVPh0YLrtqxUZXSoMStW5FMw0t9fHTFAqPbngw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.4.1
@@ -2922,8 +2922,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.7_iapumuv4e6jcjznwuxpf4tt22e:
-    resolution: {integrity: sha512-veBd1ldZL3OEl2+V1J+zSfGPKzag8tONqLVITnvt31PVejztzrwDDllUG+Mo86tF5709zsfFo6Va7qK4+MK05g==}
+  /@mui/styles/5.10.8_iapumuv4e6jcjznwuxpf4tt22e:
+    resolution: {integrity: sha512-aQGfz4Av12Bf0C8sJC0a7UoTbusD0IUKo4zNjkB5ERmhIFrbgN1G8XDIVvTgrgwdKbstbFlHDFfXkDcYe9elSQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || 18
@@ -2953,8 +2953,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.7_h33l6npc22g7vcra72cibfsrvm:
-    resolution: {integrity: sha512-kwyhjjKGsgtBRFl6vSqidDZcNKU5S1juTgm4Xi2fyWxaEbIQb9Sh9y0iVP2bNCJzgDr0alLaENOZOEaDWHISAQ==}
+  /@mui/system/5.10.8_h33l6npc22g7vcra72cibfsrvm:
+    resolution: {integrity: sha512-hRQ354zcrYP/KHqK8FheICSvE9raQaUgQaV+A3oD4JETaFUCVI9Ytt+RcQYgTqx02xlCXIjl8LK1rPjTneySqw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2973,7 +2973,7 @@ packages:
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
       '@mui/private-theming': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
-      '@mui/styled-engine': 5.10.7_hfzxdiydbrbhhfpkwuv3jhvwmq
+      '@mui/styled-engine': 5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq
       '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.6_react@18.2.0
       '@types/react': 18.0.21

From ff0ed6fa227bbc97dd34e94324c67542dd1d6182 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 4 Oct 2022 03:13:03 +0000
Subject: [PATCH 096/263] build(deps): update traefik docker tag to v2.9.1
 (#4126)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 examples/compose/lite/docker-compose.yml                    | 2 +-
 examples/compose/local/docker-compose.yml                   | 2 +-
 internal/suites/example/compose/traefik2/docker-compose.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/compose/lite/docker-compose.yml b/examples/compose/lite/docker-compose.yml
index 061e7e79f..190c3f6ac 100644
--- a/examples/compose/lite/docker-compose.yml
+++ b/examples/compose/lite/docker-compose.yml
@@ -45,7 +45,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.8.8
+    image: traefik:v2.9.1
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/examples/compose/local/docker-compose.yml b/examples/compose/local/docker-compose.yml
index 04693a7d0..dc62f232a 100644
--- a/examples/compose/local/docker-compose.yml
+++ b/examples/compose/local/docker-compose.yml
@@ -32,7 +32,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.8.8
+    image: traefik:v2.9.1
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/internal/suites/example/compose/traefik2/docker-compose.yml b/internal/suites/example/compose/traefik2/docker-compose.yml
index dc293e171..151ceab16 100644
--- a/internal/suites/example/compose/traefik2/docker-compose.yml
+++ b/internal/suites/example/compose/traefik2/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   traefik:
-    image: traefik:v2.8.8
+    image: traefik:v2.9.1
     volumes:
       - '/var/run/docker.sock:/var/run/docker.sock'
     labels:

From b21aa73fd4e3ed4c0761a6431929de0a613af4e5 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Wed, 5 Oct 2022 09:44:21 +1100
Subject: [PATCH 097/263] docs: fix url ref (#4130)

---
 ...tion.md => documentation-contributions.md} |   4 +-
 .../en/integration/kubernetes/istio.md        |   2 +-
 docs/content/en/integration/proxies/envoy.md  |   2 +-
 .../content/en/integration/proxies/support.md |   2 +-
 docs/package.json                             |  18 +-
 docs/pnpm-lock.yaml                           | 781 +++++++++---------
 6 files changed, 397 insertions(+), 412 deletions(-)
 rename docs/content/en/contributing/prologue/{documentation.md => documentation-contributions.md} (97%)

diff --git a/docs/content/en/contributing/prologue/documentation.md b/docs/content/en/contributing/prologue/documentation-contributions.md
similarity index 97%
rename from docs/content/en/contributing/prologue/documentation.md
rename to docs/content/en/contributing/prologue/documentation-contributions.md
index 4dd4aec2f..d07bdbffb 100644
--- a/docs/content/en/contributing/prologue/documentation.md
+++ b/docs/content/en/contributing/prologue/documentation-contributions.md
@@ -1,5 +1,5 @@
 ---
-title: "Documentation"
+title: "Documentation Contributions"
 description: "Information on contributing documentation to the Authelia project."
 lead: "Authelia has great documentation however there are always things that can be added. This section describes the contribution process for the documentation even though it's incredibly easy."
 date: 2022-06-15T17:51:47+10:00
@@ -10,6 +10,8 @@ menu:
     parent: "prologue"
 weight: 130
 toc: true
+alias:
+  - /contributing/prologue/documentation
 ---
 
 ## Introduction
diff --git a/docs/content/en/integration/kubernetes/istio.md b/docs/content/en/integration/kubernetes/istio.md
index ca6edf4d6..9a0d162f7 100644
--- a/docs/content/en/integration/kubernetes/istio.md
+++ b/docs/content/en/integration/kubernetes/istio.md
@@ -15,7 +15,7 @@ toc: true
 Istio uses [Envoy](../proxies/envoy.md) as an Ingress. This means it has a relatively comprehensive integration option.
 Istio is supported with Authelia v4.37.0 and higher via [Envoy]'s [external authorization] filter.
 
-[external authorization]: (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
+[external authorization]: https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz
 
 ## Example
 
diff --git a/docs/content/en/integration/proxies/envoy.md b/docs/content/en/integration/proxies/envoy.md
index 1ff1e85ec..17c8f1120 100644
--- a/docs/content/en/integration/proxies/envoy.md
+++ b/docs/content/en/integration/proxies/envoy.md
@@ -48,7 +48,7 @@ Below you will find commented examples of the following configuration:
 
 Support for [Envoy] is possible with Authelia v4.37.0 and higher via [Envoy]'s [external authorization] filter.
 
-[external authorization]: (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
+[external authorization]: https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz
 
 {{< details "docker-compose.yaml" >}}
 ```yaml
diff --git a/docs/content/en/integration/proxies/support.md b/docs/content/en/integration/proxies/support.md
index af264a081..c2e7925c2 100644
--- a/docs/content/en/integration/proxies/support.md
+++ b/docs/content/en/integration/proxies/support.md
@@ -89,7 +89,7 @@ available in [Kubernetes]. You would likely have to build your own [HAProxy] ima
 
 [Envoy] is supported with Authelia v4.37.0 and higher via [Envoy]'s [external authorization] filter.
 
-[external authorization]: (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
+[external authorization]: https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz
 
 ### Caddy
 
diff --git a/docs/package.json b/docs/package.json
index 910bde80c..328b903e4 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -38,36 +38,36 @@
     "version": "auto-changelog -p && git add CHANGELOG.md"
   },
   "devDependencies": {
-    "@babel/cli": "7.18.10",
-    "@babel/core": "7.19.1",
-    "@babel/preset-env": "7.19.1",
+    "@babel/cli": "7.19.3",
+    "@babel/core": "7.19.3",
+    "@babel/preset-env": "7.19.3",
     "@fullhuman/postcss-purgecss": "4.1.3",
     "@hyas/images": "0.2.3",
     "@popperjs/core": "2.11.6",
     "auto-changelog": "2.4.0",
     "autoprefixer": "10.4.12",
-    "bootstrap": "5.2.1",
+    "bootstrap": "5.2.2",
     "bootstrap-icons": "1.9.1",
     "clipboard": "2.0.11",
     "eslint": "8.24.0",
     "exec-bin": "1.0.0",
-    "flexsearch": "0.7.21",
+    "flexsearch": "0.7.31",
     "highlight.js": "11.6.0",
-    "hugo-installer": "4.0.0",
+    "hugo-installer": "4.0.1",
     "instant.page": "5.1.1",
     "katex": "0.16.2",
     "lazysizes": "5.3.2",
     "markdownlint-cli2": "0.5.1",
     "netlify-plugin-submit-sitemap": "0.4.0",
     "node-fetch": "3.2.10",
-    "postcss": "8.4.16",
+    "postcss": "8.4.17",
     "postcss-cli": "10.0.0",
     "purgecss-whitelister": "2.4.0",
     "shx": "0.3.4",
-    "stylelint": "14.12.1",
+    "stylelint": "14.13.0",
     "stylelint-config-standard-scss": "4.0.0"
   },
   "otherDependencies": {
-    "hugo": "0.104.0"
+    "hugo": "0.104.3"
   }
 }
diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml
index f09aaebe2..44d724428 100644
--- a/docs/pnpm-lock.yaml
+++ b/docs/pnpm-lock.yaml
@@ -1,64 +1,64 @@
 lockfileVersion: 5.4
 
 specifiers:
-  '@babel/cli': 7.18.10
-  '@babel/core': 7.19.1
-  '@babel/preset-env': 7.19.1
+  '@babel/cli': 7.19.3
+  '@babel/core': 7.19.3
+  '@babel/preset-env': 7.19.3
   '@fullhuman/postcss-purgecss': 4.1.3
   '@hyas/images': 0.2.3
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
   autoprefixer: 10.4.12
-  bootstrap: 5.2.1
+  bootstrap: 5.2.2
   bootstrap-icons: 1.9.1
   clipboard: 2.0.11
   eslint: 8.24.0
   exec-bin: 1.0.0
-  flexsearch: 0.7.21
+  flexsearch: 0.7.31
   highlight.js: 11.6.0
-  hugo-installer: 4.0.0
+  hugo-installer: 4.0.1
   instant.page: 5.1.1
   katex: 0.16.2
   lazysizes: 5.3.2
   markdownlint-cli2: 0.5.1
   netlify-plugin-submit-sitemap: 0.4.0
   node-fetch: 3.2.10
-  postcss: 8.4.16
+  postcss: 8.4.17
   postcss-cli: 10.0.0
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.12.1
+  stylelint: 14.13.0
   stylelint-config-standard-scss: 4.0.0
 
 devDependencies:
-  '@babel/cli': 7.18.10_@babel+core@7.19.1
-  '@babel/core': 7.19.1
-  '@babel/preset-env': 7.19.1_@babel+core@7.19.1
-  '@fullhuman/postcss-purgecss': 4.1.3_postcss@8.4.16
+  '@babel/cli': 7.19.3_@babel+core@7.19.3
+  '@babel/core': 7.19.3
+  '@babel/preset-env': 7.19.3_@babel+core@7.19.3
+  '@fullhuman/postcss-purgecss': 4.1.3_postcss@8.4.17
   '@hyas/images': 0.2.3
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
-  autoprefixer: 10.4.12_postcss@8.4.16
-  bootstrap: 5.2.1_@popperjs+core@2.11.6
+  autoprefixer: 10.4.12_postcss@8.4.17
+  bootstrap: 5.2.2_@popperjs+core@2.11.6
   bootstrap-icons: 1.9.1
   clipboard: 2.0.11
   eslint: 8.24.0
   exec-bin: 1.0.0
-  flexsearch: 0.7.21
+  flexsearch: 0.7.31
   highlight.js: 11.6.0
-  hugo-installer: 4.0.0
+  hugo-installer: 4.0.1
   instant.page: 5.1.1
   katex: 0.16.2
   lazysizes: 5.3.2
   markdownlint-cli2: 0.5.1
   netlify-plugin-submit-sitemap: 0.4.0
   node-fetch: 3.2.10
-  postcss: 8.4.16
-  postcss-cli: 10.0.0_postcss@8.4.16
+  postcss: 8.4.17
+  postcss-cli: 10.0.0_postcss@8.4.17
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.12.1
-  stylelint-config-standard-scss: 4.0.0_nqmbdxq5redfjw6kdtxj73dev4
+  stylelint: 14.13.0
+  stylelint-config-standard-scss: 4.0.0_7mm2245zw6jpoub3zc2ef5m2tq
 
 packages:
 
@@ -70,14 +70,14 @@ packages:
       '@jridgewell/trace-mapping': 0.3.13
     dev: true
 
-  /@babel/cli/7.18.10_@babel+core@7.19.1:
-    resolution: {integrity: sha512-dLvWH+ZDFAkd2jPBSghrsFBuXrREvFwjpDycXbmUoeochqKYe4zNSLEJYErpLg8dvxvZYe79/MkN461XCwpnGw==}
+  /@babel/cli/7.19.3_@babel+core@7.19.3:
+    resolution: {integrity: sha512-643/TybmaCAe101m2tSVHi9UKpETXP9c/Ff4mD2tAwkdP6esKIfaauZFc67vGEM6r9fekbEGid+sZhbEnSe3dg==}
     engines: {node: '>=6.9.0'}
     hasBin: true
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@jridgewell/trace-mapping': 0.3.13
       commander: 4.1.1
       convert-source-map: 1.8.0
@@ -97,25 +97,25 @@ packages:
       '@babel/highlight': 7.18.6
     dev: true
 
-  /@babel/compat-data/7.19.1:
-    resolution: {integrity: sha512-72a9ghR0gnESIa7jBN53U32FOVCEoztyIlKaNoU05zRhEecduGK9L9c3ww7Mp06JiR+0ls0GBPFJQwwtjn9ksg==}
+  /@babel/compat-data/7.19.3:
+    resolution: {integrity: sha512-prBHMK4JYYK+wDjJF1q99KK4JLL+egWS4nmNqdlMUgCExMZ+iZW0hGhyC3VEbsPjvaN0TBhW//VIFwBrk8sEiw==}
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/core/7.19.1:
-    resolution: {integrity: sha512-1H8VgqXme4UXCRv7/Wa1bq7RVymKOzC7znjyFM8KiEzwFqcKUKYNoQef4GhdklgNvoBXyW4gYhuBNCM5o1zImw==}
+  /@babel/core/7.19.3:
+    resolution: {integrity: sha512-WneDJxdsjEvyKtXKsaBGbDeiyOjR5vYq4HcShxnIbG0qixpoHjI3MqeZM9NDvsojNCEBItQE4juOo/bU6e72gQ==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.0
-      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/generator': 7.19.3
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
       '@babel/helper-module-transforms': 7.19.0
       '@babel/helpers': 7.19.0
-      '@babel/parser': 7.19.1
+      '@babel/parser': 7.19.3
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.3
+      '@babel/types': 7.19.3
       convert-source-map: 1.8.0
       debug: 4.3.4
       gensync: 1.0.0-beta.2
@@ -125,11 +125,11 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/generator/7.19.0:
-    resolution: {integrity: sha512-S1ahxf1gZ2dpoiFgA+ohK9DIpz50bJ0CWs7Zlzb54Z4sG8qmdIrGrVqmy1sAtTVRb+9CU6U8VqT9L0Zj7hxHVg==}
+  /@babel/generator/7.19.3:
+    resolution: {integrity: sha512-fqVZnmp1ncvZU757UzDheKZpfPgatqY59XtW2/j/18H7u76akb8xqvjw82f+i2UKd/ksYsSick/BCLQUUtJ/qQ==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
       '@jridgewell/gen-mapping': 0.3.2
       jsesc: 2.5.2
     dev: true
@@ -138,7 +138,7 @@ packages:
     resolution: {integrity: sha512-duORpUiYrEpzKIop6iNbjnwKLAKnJ47csTyRACyEmWj0QdUrm5aqNJGHSSEQSUAvNW0ojX0dOmK9dZduvkfeXA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-builder-binary-assignment-operator-visitor/7.18.6:
@@ -146,29 +146,29 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-explode-assignable-expression': 7.18.6
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
-  /@babel/helper-compilation-targets/7.19.1_@babel+core@7.19.1:
-    resolution: {integrity: sha512-LlLkkqhCMyz2lkQPvJNdIYU7O5YjWRgC2R4omjCTpZd8u8KMQzZvX4qce+/BluN1rcQiV7BoGUpmQ0LeHerbhg==}
+  /@babel/helper-compilation-targets/7.19.3_@babel+core@7.19.3:
+    resolution: {integrity: sha512-65ESqLGyGmLvgR0mst5AdW1FkNlj9rQsCKduzEoEPhBCDFGXvz2jW6bXFG6i0/MrV2s7hhXjjb2yAzcPuQlLwg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/compat-data': 7.19.1
-      '@babel/core': 7.19.1
+      '@babel/compat-data': 7.19.3
+      '@babel/core': 7.19.3
       '@babel/helper-validator-option': 7.18.6
       browserslist: 4.21.4
       semver: 6.3.0
     dev: true
 
-  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.1:
+  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-YfDzdnoxHGV8CzqHGyCbFvXg5QESPFkXlHtvdCkesLjjVMT2Adxe4FGUR5ChIb3DxSaXO12iIOCWoXdsUVwnqw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
@@ -180,35 +180,24 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/helper-create-regexp-features-plugin/7.18.6_@babel+core@7.19.1:
-    resolution: {integrity: sha512-7LcpH1wnQLGrI+4v+nPp+zUvIkF9x0ddv1Hkdue10tg3gmRnLy97DXh4STiOf1qeIInyD69Qv5kKSZzKD8B/7A==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0
-    dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-annotate-as-pure': 7.18.6
-      regexpu-core: 5.1.0
-    dev: true
-
-  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.19.1:
+  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.19.3:
     resolution: {integrity: sha512-htnV+mHX32DF81amCDrwIDr8nrp1PTm+3wfBN9/v8QJOLEioOCOG7qNyq0nHeFiWbT3Eb7gsPwEmV64UCQ1jzw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-annotate-as-pure': 7.18.6
       regexpu-core: 5.1.0
     dev: true
 
-  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.19.1:
+  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-z5aQKU4IzbqCC1XH0nAqfsFLMVSo22SBKUc0BxGrLkolTdPTructy0ToNnlO2zA4j9Q/7pjMZf0DSY+DSTYzww==}
     peerDependencies:
       '@babel/core': ^7.4.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       debug: 4.3.4
       lodash.debounce: 4.0.8
@@ -227,7 +216,7 @@ packages:
     resolution: {integrity: sha512-eyAYAsQmB80jNfg4baAtLeWAQHfHFiR483rzFK+BhETlGZaQC9bsfrugfXDCbRHLQbIA7U5NxhhOxN7p/dWIcg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-function-name/7.19.0:
@@ -235,28 +224,28 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-hoist-variables/7.18.6:
     resolution: {integrity: sha512-UlJQPkFqFULIcyW5sbzgbkxn2FKRgwWiRexcuaR8RNJRy8+LLveqPjwZV/bwrLZCN0eUHD/x8D0heK1ozuoo6Q==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-member-expression-to-functions/7.18.9:
     resolution: {integrity: sha512-RxifAh2ZoVU67PyKIO4AMi1wTenGfMR/O/ae0CCRqwgBAt5v7xjdtRw7UoSbsreKrQn5t7r89eruK/9JjYHuDg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-module-imports/7.18.6:
     resolution: {integrity: sha512-0NFvs3VkuSYbFi1x2Vd6tKrywq+z/cLeYC/RJNFrIX/30Bf5aiGYbtvGXolEktzJH8o5E5KJ3tT+nkxuuZFVlA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-module-transforms/7.19.0:
@@ -269,8 +258,8 @@ packages:
       '@babel/helper-split-export-declaration': 7.18.6
       '@babel/helper-validator-identifier': 7.18.6
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.3
+      '@babel/types': 7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -279,7 +268,7 @@ packages:
     resolution: {integrity: sha512-HP59oD9/fEHQkdcbgFCnbmgH5vIQTJbxh2yf+CdM89/glUNnuzr87Q8GIjGEnOktTROemO0Pe0iPAYbqZuOUiA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-plugin-utils/7.19.0:
@@ -287,17 +276,17 @@ packages:
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.19.1:
+  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-dI7q50YKd8BAv3VEfgg7PS7yD3Rtbi2J1XMXaalXO0W0164hYLnh8zpjRS0mte9MfVp/tltvr/cfdXPvJr1opA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-wrap-function': 7.18.11
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -309,8 +298,8 @@ packages:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-member-expression-to-functions': 7.18.9
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/traverse': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.3
+      '@babel/types': 7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -319,21 +308,21 @@ packages:
     resolution: {integrity: sha512-iNpIgTgyAvDQpDj76POqg+YEt8fPxx3yaNBg3S30dxNKm2SWfYhD0TGrK/Eu9wHpUW63VQU894TsTg+GLbUa1g==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-skip-transparent-expression-wrappers/7.18.9:
     resolution: {integrity: sha512-imytd2gHi3cJPsybLRbmFrF7u5BIEuI2cNheyKi3/iOBC63kNn3q8Crn2xVuESli0aM4KYsyEqKyS7lFL8YVtw==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-split-export-declaration/7.18.6:
     resolution: {integrity: sha512-bde1etTx6ZyTmobl9LLMMQsaizFVZrquTEHOqKeQESMKo4PlObf+8+JA25ZsIpZhT/WEd39+vOdLXAFG/nELpA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
   /@babel/helper-string-parser/7.18.10:
@@ -346,6 +335,11 @@ packages:
     engines: {node: '>=6.9.0'}
     dev: true
 
+  /@babel/helper-validator-identifier/7.19.1:
+    resolution: {integrity: sha512-awrNfaMtnHUr653GgGEs++LlAvW6w+DcPrOliSMXWCKo597CwL5Acf/wWdNkf/tfEQE3mjkeD1YOVZOUV/od1w==}
+    engines: {node: '>=6.9.0'}
+    dev: true
+
   /@babel/helper-validator-option/7.18.6:
     resolution: {integrity: sha512-XO7gESt5ouv/LRJdrVjkShckw6STTaB7l9BrpBaAHDeF5YZT+01PCwmR0SJHnkW6i8OwW/EVWRShfi4j2x+KQw==}
     engines: {node: '>=6.9.0'}
@@ -357,8 +351,8 @@ packages:
     dependencies:
       '@babel/helper-function-name': 7.19.0
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.3
+      '@babel/types': 7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -368,8 +362,8 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.3
+      '@babel/types': 7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -383,412 +377,412 @@ packages:
       js-tokens: 4.0.0
     dev: true
 
-  /@babel/parser/7.19.1:
-    resolution: {integrity: sha512-h7RCSorm1DdTVGJf3P2Mhj3kdnkmF/EiysUkzS2TdgAYqyjFdMQJbVuXOBej2SBJaXan/lIVtT6KkGbyyq753A==}
+  /@babel/parser/7.19.3:
+    resolution: {integrity: sha512-pJ9xOlNWHiy9+FuFP09DEAFbAn4JskgRsVcc169w2xRBC3FRGuQEwjeIMMND9L2zc0iEhO/tGv4Zq+km+hxNpQ==}
     engines: {node: '>=6.0.0'}
     hasBin: true
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.3
     dev: true
 
-  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-Dgxsyg54Fx1d4Nge8UnvTrED63vrwOdPmyvPzlNN/boaliRP54pm3pGzZD1SJUwrBA+Cs/xdG8kXX6Mn/RfISQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-AHrP9jadvH7qlOj6PINbgSuphjQUAK7AOT7DPjBo9EHoLhQTnnK5u45e1Hd4DbSQEO9nqPWtQ89r+XEOWFScKg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.13.0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.1
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-async-generator-functions/7.19.1_@babel+core@7.19.1:
+  /@babel/plugin-proposal-async-generator-functions/7.19.1_@babel+core@7.19.3:
     resolution: {integrity: sha512-0yu8vNATgLy4ivqMNBIwb1HebCelqN7YX8SL3FDXORv/RqT0zEEWUCH4GH44JsSrvCu6GqnAdR5EBFAPeNBB4Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.1
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-cumfXOF0+nzZrrN8Rf0t7M+tF6sZc7vhQwYQck9q1/5w2OExlD+b4v4RpMJFaV1Z7WcDRgO6FqvxqxGlwo+RHQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-+I3oIiNxrCpup3Gi8n5IGMwj0gOCAjcJUSQEcotNnCCPMEnixawOQ+KeJPlgfjzx+FKQ1QSyZOWe7wmoJp7vhw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.12.0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.1
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-1auuwmK+Rz13SJj36R+jqFPMJWyKEDd7lLSdOj4oJK0UTgGueSAtkrCvz9ewmgyU/P941Rv2fQwZJN8s6QruXw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-k1NtHyOMvlDDFeb9G5PhUXuGj8m/wiwojgQVEhJ/fsVsMCpLyOP4h0uGEjYJKrRI+EVPlb5Jk+Gt9P97lOGwtA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-lr1peyn9kOdbYc0xr0OdHTZ5FMqS6Di+H0Fz2I/JwMzGmzJETNeOFq2pBySw6X/KFL5EWDjlJuMsUGRFb8fQgQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-128YbMpjCrP35IOExw2Fq+x55LMP42DzhOhX2aNNIdI9avSWl2PI0yuBWarr3RYpZBSPtabfadkH2yeRiMD61Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.1
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-wQxQzxYeJqHcfppzBDnm1yAY0jSRkUXR2z8RePZYrKwMKgMlE8+Z6LUno+bd6LvbGh8Gltvy74+9pIYkr+XkKA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-ozlZFogPqoLm8WBr5Z8UckIoE4YQ5KESVcNudyXOR8uqIkliTEgJ3RoketfG6pmzLdeZF0H/wjE9/cCEitBl7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.1
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-object-rest-spread/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-proposal-object-rest-spread/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-kDDHQ5rflIeY5xl69CEqGEZ0KY369ehsCIEbTGb4siHG5BE9sga/T0r0OUwyZNLMmZE79E1kbsqAjwFCW4ds6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.19.1
-      '@babel/core': 7.19.1
-      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/compat-data': 7.19.3
+      '@babel/core': 7.19.3
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.1
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-Q40HEhs9DJQyaZfUjjn6vE8Cv4GmMHCYuMGIWUnlxH6400VGxOuwWsPt4FxXxJkC/5eOzgn0z21M9gMT4MOhbw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-v5nwt4IqBXihxGsW2QmCWMDS3B3bzGIk/EQVZz2ei7f3NJl8NzAJVvUmpDW5q1CRNY+Beb/k58UAH1Km1N411w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.1
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.3
     dev: true
 
-  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-nutsvktDItsNn4rpGItSNV2sz1XwS+nfU0Rg8aCx3W3NOKVzdMjJRu0O5OkgDp3ZGICSTbgRpxZoWsxoKRvbeA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-9Rysx7FOctvT5ouj5JODjAFAkgGoudQuLPamZb0v1TGLpapdNaftzifU8NTWQm0IRjqoYypdrSmyWgkocDQ8Dw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.1
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-2BShG/d5yoZyXZfVePH91urL5wTG6ASZU9M4o03lKK8u8UW1y08OMttBSOADTcJrnPMpvDXRG3G8fyLh4ovs8w==}
     engines: {node: '>=4'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.1:
+  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.3:
     resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.1:
+  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.3:
     resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.1:
+  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.3:
     resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-5gdGbFon+PszYzqs83S3E5mpi7/y/8M9eC90MRTZfduQOYW76ig6SOSPNe41IG5LoP3FGBn2N0RjVDSQiS94kQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-MXf5laXo6c1IbEbegDmzGPwGNTsHZmEy6QGznu5Sh2UCWvueywb2ee+CCE4zQiZstxU9BMoQO9i6zUFSY0Kj0Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-/DU3RXad9+bZwrgWJQKbr39gYbJpLJHezqEzRzi/BHRlJ9zsQb4CK2CA/5apllXNomwA1qHwzvHl+AdEmC5krQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.1:
+  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.3:
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.1:
+  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.3:
     resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.1:
+  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.1:
+  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.3:
     resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.1:
+  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.3:
     resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-9S9X9RUefzrsHZmKMbDXxweEH+YlE8JJEuat9FdvW9Qh1cw7W64jELCtWNkPBPX5En45uy28KGvA/AySqUh8CQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-ARE5wZLKnTgPW7/1ftQmSi1CmkqqHo2DNmtztFhvgtOWSDfq0Cq9/9L+KnZNYSNrydBekhW3rwShduf59RoXag==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-module-imports': 7.18.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.1
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-ExUcOqpPWnliRcPqves5HJcJOvHvIIWfuS4sroBUenPuMdmW+SMHDakmtS7qOo13sVppmUijqeTv7qqGsvURpQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-block-scoping/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-block-scoping/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-5sDIJRV1KtQVEbt/EIBwGy4T01uYIo4KRB3VUqzkhrAIOGx7AoctL9+Ux88btY0zXdDyPJ9mW+bg+v+XEkGmtw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-classes/7.19.0_@babel+core@7.19.1:
+  /@babel/plugin-transform-classes/7.19.0_@babel+core@7.19.3:
     resolution: {integrity: sha512-YfeEE9kCjqTS9IitkgfJuxjcEtLUHMqa8yUJ6zdz8vR7hKuo6mOy2C05P0F1tdMmDCeuyidKnlrw/iTppHcr2A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-optimise-call-expression': 7.18.6
@@ -800,107 +794,107 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-+i0ZU1bCDymKakLxn5srGHrsAPRELC2WIbzwjLhHW9SIE1cPYkLCL0NlnXMZaM1vhfgA2+M7hySk42VBvrkBRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-destructuring/7.18.13_@babel+core@7.19.1:
+  /@babel/plugin-transform-destructuring/7.18.13_@babel+core@7.19.3:
     resolution: {integrity: sha512-TodpQ29XekIsex2A+YJPj5ax2plkGa8YYY6mFjCohk/IG9IY42Rtuj1FuDeemfg2ipxIFLzPeA83SIBnlhSIow==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-6S3jpun1eEbAxq7TdjLotAsl4WpQI9DxfkycRcKrjhQYzU87qpXdknpBg/e+TdcMehqGnLFi7tnFUBR02Vq6wg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-d2bmXCtZXYc59/0SanQKbiWINadaJXqtvIQIzd4+hNwkWBgyCd5F/2t1kXoUdvPMrxzPvhK6EMQRROxsue+mfw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-wzEtc0+2c88FVR34aQmiz56dxEkxr2g8DQb/KfaFa1JYXOFVsbhvAonFN6PwVWj++fKmku8NP80plJ5Et4wqHw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-builder-binary-assignment-operator-visitor': 7.18.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.1:
+  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.3:
     resolution: {integrity: sha512-yEfTRnjuskWYo0k1mHUqrVWaZwrdq8AYbfrpqULOJOaucGSp4mNMVps+YtA8byoevxS/urwU75vyhQIxcCgiBQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-WvIBoRPaJQ5yVHzcnJFor7oS5Ls0PYixlTYE63lCj2RtdQEl15M68FXQlxnG6wdraJIXRdR7KI+hQ7q/9QjrCQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-IFQDSRoTPnrAIrI5zoZv73IFeZu2dhu6irxQjY9rNjTT53VmKg9fenjvoiOWOkJ6mm4jKVPtdMzBY98Fp4Z4cg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-qSF1ihLGO3q+/g48k85tUjD033C29TNTVB2paCwZPVmOsjn9pClvYYrM2VeJpBY2bcNkuny0YUyTNRyRxJ54KA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-Pra5aXsmTsOnjM3IajS8rTaLCy++nGM4v3YR4esk5PCsyg9z8NA5oQLwxzMUtDBd8F+UmVza3VxoAaWCbzH1rg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-module-transforms': 7.19.0
       '@babel/helper-plugin-utils': 7.19.0
       babel-plugin-dynamic-import-node: 2.3.3
@@ -908,13 +902,13 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-Qfv2ZOWikpvmedXQJDSbxNqy7Xr/j2Y8/KfijM0iJyKkBTmWuvCA1yeH1yDM7NJhBW/2aXxeucLj6i80/LAJ/Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-module-transforms': 7.19.0
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-simple-access': 7.18.6
@@ -923,278 +917,278 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-systemjs/7.19.0_@babel+core@7.19.1:
+  /@babel/plugin-transform-modules-systemjs/7.19.0_@babel+core@7.19.3:
     resolution: {integrity: sha512-x9aiR0WXAWmOWsqcsnrzGR+ieaTMVyGyffPVA7F8cXAGt/UxefYv6uSHZLkAFChN5M5Iy1+wjE+xJuPt22H39A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-module-transforms': 7.19.0
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-validator-identifier': 7.19.1
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-dcegErExVeXcRqNtkRU/z8WlBLnvD4MRnHgNs3MytRO1Mn1sHRyhbcpYbVMGclAqOjdW+9cfkdZno9dFdfKLfQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-module-transforms': 7.19.0
       '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.19.1:
+  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.19.3:
     resolution: {integrity: sha512-oWk9l9WItWBQYS4FgXD4Uyy5kq898lvkXpXQxoJEY1RnvPk4R/Dvu2ebXU9q8lP+rlMwUQTFf2Ok6d78ODa0kw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-DjwFA/9Iu3Z+vrAn+8pBUGcjhxKguSMlsFqeCKbhb9BAV756v0krzVK04CRDi/4aqmk8BsHb4a/gFcaA5joXRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-uvGz6zk+pZoS1aTZrOvrbj6Pp/kK2mp45t2B+bTDre2UgsZZ8EZLSJtUg7m/no0zOJUWgFONpB7Zv9W2tSaFlA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-replace-supers': 7.18.9
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.1:
+  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.3:
     resolution: {integrity: sha512-ivfbE3X2Ss+Fj8nnXvKJS6sjRG4gzwPMsP+taZC+ZzEGjAYlvENixmt1sZ5Ca6tWls+BlKSGKPJ6OOXvXCbkFg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-cYcs6qlgafTud3PAzrrRNbQtfpQ8+y/+M5tKmksS9+M1ckbH6kzY8MrexEM9mcA6JDsukE19iIRvAyYl463sMg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-poqRI2+qiSdeldcz4wTSTXBRryoq3Gc70ye7m7UD5Ww0nE29IXqMl6r7Nd15WBgRd74vloEMlShtH6CKxVzfmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       regenerator-transform: 0.15.0
     dev: true
 
-  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-oX/4MyMoypzHjFrT1CdivfKZ+XvIPMFXwwxHp/r0Ddy2Vuomt4HDFGmft1TAY2yiTKiNSsh3kjBAzcM8kSdsjA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-eCLXXJqv8okzg86ywZJbRn19YJHU4XUa55oz2wbHhaQVn/MM+XhukiT7SYqp/7o00dg52Rj51Ny+Ecw4oyoygw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.19.1:
+  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.19.3:
     resolution: {integrity: sha512-RsuMk7j6n+r752EtzyScnWkQyuJdli6LdO5Klv8Yx0OfPVTcQkIUfS8clx5e9yHXzlnhOZF3CbQ8C2uP5j074w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
     dev: true
 
-  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-kfiDrDQ+PBsQDO85yj1icueWMfGfJFKN1KCkndygtu/C9+XUfydLC8Iv5UYJqRwy4zk8EcplRxEOeLyjq1gm6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-S8cOWfT82gTezpYOiVaGHrCbhlHgKhQt8XH5ES46P2XWmX92yisoZywf5km75wv5sYcXDUCLMmMxOLCtthDgMA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.19.1:
+  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.19.3:
     resolution: {integrity: sha512-SRfwTtF11G2aemAZWivL7PD+C9z52v9EvMqH9BuYbabyPuKUvSWks3oCg6041pT925L4zVFqaVBeECwsmlguEw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.19.1:
+  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.19.3:
     resolution: {integrity: sha512-kKAdAI+YzPgGY/ftStBFXTI1LZFju38rYThnfMykS+IXy8BVx+res7s2fxf1l8I35DV2T97ezo6+SGrXz6B3iQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.1:
+  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.3:
     resolution: {integrity: sha512-gE7A6Lt7YLnNOL3Pb9BNeZvi+d8l7tcRrG4+pwJjK9hD2xX4mEvjlQW60G9EEmfXVYRPv9VRQcyegIVHCql/AA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/preset-env/7.19.1_@babel+core@7.19.1:
-    resolution: {integrity: sha512-c8B2c6D16Lp+Nt6HcD+nHl0VbPKVnNPTpszahuxJJnurfMtKeZ80A+qUv48Y7wqvS+dTFuLuaM9oYxyNHbCLWA==}
+  /@babel/preset-env/7.19.3_@babel+core@7.19.3:
+    resolution: {integrity: sha512-ziye1OTc9dGFOAXSWKUqQblYHNlBOaDl8wzqf2iKXJAltYiR3hKHUKmkt+S9PppW7RQpq4fFCrwwpIDj/f5P4w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.19.1
-      '@babel/core': 7.19.1
-      '@babel/helper-compilation-targets': 7.19.1_@babel+core@7.19.1
+      '@babel/compat-data': 7.19.3
+      '@babel/core': 7.19.3
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-proposal-async-generator-functions': 7.19.1_@babel+core@7.19.1
-      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-object-rest-spread': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.1
-      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.1
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.1
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.1
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.1
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.1
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.1
-      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.1
-      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-block-scoping': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-classes': 7.19.0_@babel+core@7.19.1
-      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-destructuring': 7.18.13_@babel+core@7.19.1
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.1
-      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-modules-systemjs': 7.19.0_@babel+core@7.19.1
-      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.19.1
-      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.1
-      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.19.1
-      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.19.1
-      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.19.1
-      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.1
-      '@babel/preset-modules': 0.1.5_@babel+core@7.19.1
-      '@babel/types': 7.19.0
-      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.19.1
-      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.19.1
-      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.19.1
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-proposal-async-generator-functions': 7.19.1_@babel+core@7.19.3
+      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-object-rest-spread': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.3
+      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.3
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.3
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.3
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.3
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.3
+      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.3
+      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-block-scoping': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-classes': 7.19.0_@babel+core@7.19.3
+      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-destructuring': 7.18.13_@babel+core@7.19.3
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.3
+      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-modules-systemjs': 7.19.0_@babel+core@7.19.3
+      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.19.3
+      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.3
+      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.19.3
+      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.19.3
+      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.3
+      '@babel/preset-modules': 0.1.5_@babel+core@7.19.3
+      '@babel/types': 7.19.3
+      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.19.3
+      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.19.3
+      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.19.3
       core-js-compat: 3.25.2
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/preset-modules/0.1.5_@babel+core@7.19.1:
+  /@babel/preset-modules/0.1.5_@babel+core@7.19.3:
     resolution: {integrity: sha512-A57th6YRG7oR3cq/yt/Y84MvGgE0eJG2F1JLhKuyG+jFxEgrd/HAMJatiFtmOiZurz+0DkrvbheCLaV5f2JfjA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
+      '@babel/core': 7.19.3
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.1
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.1
-      '@babel/types': 7.19.0
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.3
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.3
+      '@babel/types': 7.19.3
       esutils: 2.0.3
     dev: true
 
@@ -1210,45 +1204,45 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/parser': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/parser': 7.19.3
+      '@babel/types': 7.19.3
     dev: true
 
-  /@babel/traverse/7.19.1:
-    resolution: {integrity: sha512-0j/ZfZMxKukDaag2PtOPDbwuELqIar6lLskVPPJDjXMXjfLb1Obo/1yjxIGqqAJrmfaTIY3z2wFLAQ7qSkLsuA==}
+  /@babel/traverse/7.19.3:
+    resolution: {integrity: sha512-qh5yf6149zhq2sgIXmwjnsvmnNQC2iw70UFjp4olxucKrWd/dvlUsBI88VSLUsnMNF7/vnOiA+nk1+yLoCqROQ==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.0
+      '@babel/generator': 7.19.3
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.19.1
-      '@babel/types': 7.19.0
+      '@babel/parser': 7.19.3
+      '@babel/types': 7.19.3
       debug: 4.3.4
       globals: 11.12.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/types/7.19.0:
-    resolution: {integrity: sha512-YuGopBq3ke25BVSiS6fgF49Ul9gH1x70Bcr6bqRLjWCkcX8Hre1/5+z+IiWOIerRMSSEfGZVB9z9kyq7wVs9YA==}
+  /@babel/types/7.19.3:
+    resolution: {integrity: sha512-hGCaQzIY22DJlDh9CH7NOxgKkFjBk0Cw9xDO1Xmh2151ti7wiGfQ3LauXzL4HP1fmFlTX6XjpRETTpUcv7wQLw==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-string-parser': 7.18.10
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-validator-identifier': 7.19.1
       to-fast-properties: 2.0.0
     dev: true
 
-  /@csstools/selector-specificity/2.0.2_pnx64jze6bptzcedy5bidi3zdi:
+  /@csstools/selector-specificity/2.0.2_zurzgjffv23ohtxa7nq7nizuja:
     resolution: {integrity: sha512-IkpVW/ehM1hWKln4fCA3NzJU8KwD+kIOvPZA4cqxoJHtE21CCzjyp+Kxbu0i5I4tBNOlXPL9mjwnWlL0VEG4Fg==}
     engines: {node: ^12 || ^14 || >=16}
     peerDependencies:
       postcss: ^8.2
       postcss-selector-parser: ^6.0.10
     dependencies:
-      postcss: 8.4.16
+      postcss: 8.4.17
       postcss-selector-parser: 6.0.10
     dev: true
 
@@ -1269,12 +1263,12 @@ packages:
       - supports-color
     dev: true
 
-  /@fullhuman/postcss-purgecss/4.1.3_postcss@8.4.16:
+  /@fullhuman/postcss-purgecss/4.1.3_postcss@8.4.17:
     resolution: {integrity: sha512-jqcsyfvq09VOsMXxJMPLRF6Fhg/NNltzWKnC9qtzva+QKTxerCO4esG6je7hbnmkpZtaDyPTwMBj9bzfWorsrw==}
     peerDependencies:
       postcss: ^8.0.0
     dependencies:
-      postcss: 8.4.16
+      postcss: 8.4.17
       purgecss: 4.1.3
     dev: true
 
@@ -1532,7 +1526,7 @@ packages:
       - encoding
     dev: true
 
-  /autoprefixer/10.4.12_postcss@8.4.16:
+  /autoprefixer/10.4.12_postcss@8.4.17:
     resolution: {integrity: sha512-WrCGV9/b97Pa+jtwf5UGaRjgQIg7OK3D06GnoYoZNcG1Xb8Gt3EfuKjlhh9i/VtT16g6PYjZ69jdJ2g8FxSC4Q==}
     engines: {node: ^10 || ^12 || >=14}
     hasBin: true
@@ -1544,7 +1538,7 @@ packages:
       fraction.js: 4.2.0
       normalize-range: 0.1.2
       picocolors: 1.0.0
-      postcss: 8.4.16
+      postcss: 8.4.17
       postcss-value-parser: 4.2.0
     dev: true
 
@@ -1554,38 +1548,38 @@ packages:
       object.assign: 4.1.2
     dev: true
 
-  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.19.1:
+  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.19.3:
     resolution: {integrity: sha512-8hOdmFYFSZhqg2C/JgLUQ+t52o5nirNwaWM2B9LWteozwIvM14VSwdsCAUET10qT+kmySAlseadmfeeSWFCy+Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.19.1
-      '@babel/core': 7.19.1
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.1
+      '@babel/compat-data': 7.19.3
+      '@babel/core': 7.19.3
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.3
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.19.1:
+  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.19.3:
     resolution: {integrity: sha512-+eHqR6OPcBhJOGgsIar7xoAB1GcSwVUA3XjAd7HJNzOXT4wv6/H7KIdA/Nc60cvUlDbKApmqNvD1B1bzOt4nyA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.3
       core-js-compat: 3.25.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.19.1:
+  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.19.3:
     resolution: {integrity: sha512-NtQGmyQDXjQqQ+IzRkBVwEOz9lQ4zxAQZgoAYEtU9dJjnl1Oc98qnN7jcp+bE7O7aYzVpavXE3/VKXNzUbh7aw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.1
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.1
+      '@babel/core': 7.19.3
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.3
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -1618,8 +1612,8 @@ packages:
     resolution: {integrity: sha512-d4ZkO30MIkAhQ2nNRJqKXJVEQorALGbLWTuRxyCTJF96lRIV6imcgMehWGJUiJMJhglN0o2tqLIeDnMdiQEE9g==}
     dev: true
 
-  /bootstrap/5.2.1_@popperjs+core@2.11.6:
-    resolution: {integrity: sha512-UQi3v2NpVPEi1n35dmRRzBJFlgvWHYwyem6yHhuT6afYF+sziEt46McRbT//kVXZ7b1YUYEVGdXEH74Nx3xzGA==}
+  /bootstrap/5.2.2_@popperjs+core@2.11.6:
+    resolution: {integrity: sha512-dEtzMTV71n6Fhmbg4fYJzQsw1N29hJKO1js5ackCgIpDcGid2ETMGC6zwSYw09v05Y+oRdQ9loC54zB1La3hHQ==}
     peerDependencies:
       '@popperjs/core': ^2.11.6
     dependencies:
@@ -2204,17 +2198,6 @@ packages:
     resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
     dev: true
 
-  /fast-glob/3.2.11:
-    resolution: {integrity: sha512-xrO3+1bxSo3ZVHAnqzyuewYT6aMFHRAd4Kcs92MAonjwQZLsK9d0SF1IyQ3k5PoirxTW0Oe/RqFgMQ6TcNE5Ew==}
-    engines: {node: '>=8.6.0'}
-    dependencies:
-      '@nodelib/fs.stat': 2.0.5
-      '@nodelib/fs.walk': 1.2.8
-      glob-parent: 5.1.2
-      merge2: 1.4.1
-      micromatch: 4.0.5
-    dev: true
-
   /fast-glob/3.2.12:
     resolution: {integrity: sha512-DVj4CQIYYow0BlaelwK1pHl5n5cRSJfM60UA0zK891sVInoPri2Ekj7+e1CT3/3qxXenpI+nBBmQAcJPJgaj4w==}
     engines: {node: '>=8.6.0'}
@@ -2316,8 +2299,8 @@ packages:
     resolution: {integrity: sha512-WIWGi2L3DyTUvUrwRKgGi9TwxQMUEqPOPQBVi71R96jZXJdFskXEmf54BoZaS1kknGODoIGASGEzBUYdyMCBJg==}
     dev: true
 
-  /flexsearch/0.7.21:
-    resolution: {integrity: sha512-W7cHV7Hrwjid6lWmy0IhsWDFQboWSng25U3VVywpHOTJnnAZNPScog67G+cVpeX9f7yDD21ih0WDrMMT+JoaYg==}
+  /flexsearch/0.7.31:
+    resolution: {integrity: sha512-XGozTsMPYkm+6b5QL3Z9wQcJjNYxp0CYn3U1gO7dwD6PAqU1SVWZxI9CCg3z+ml3YfqdPnrBehaBrnH2AGKbNA==}
     dev: true
 
   /form-data-encoder/2.1.2:
@@ -2490,7 +2473,7 @@ packages:
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     dependencies:
       dir-glob: 3.0.1
-      fast-glob: 3.2.11
+      fast-glob: 3.2.12
       ignore: 5.2.0
       merge2: 1.4.1
       slash: 4.0.0
@@ -2624,8 +2607,8 @@ packages:
       resolve-alpn: 1.2.1
     dev: true
 
-  /hugo-installer/4.0.0:
-    resolution: {integrity: sha512-aYVAsG6r1W82Atek4pA0xvQ8elfdeEW9gEsseXWJRQOWE9pwKgBUgjres0Dt2duKjdtUsrll1scn5YKoTxzG3Q==}
+  /hugo-installer/4.0.1:
+    resolution: {integrity: sha512-pkp1RO7+ekQ0vw1aqgBMK+dD2dqioIWVbwWKsJsKLOpzfFc78gK68Cweoi/g+CftoiMFO7cyGx/2MgkHCMqaLQ==}
     hasBin: true
     dependencies:
       decompress: 4.2.1
@@ -3344,7 +3327,7 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /postcss-cli/10.0.0_postcss@8.4.16:
+  /postcss-cli/10.0.0_postcss@8.4.17:
     resolution: {integrity: sha512-Wjy/00wBBEgQqnSToznxLWDnATznokFGXsHtF/3G8glRZpz5KYlfHcBW/VMJmWAeF2x49zjgy4izjM3/Wx1dKA==}
     engines: {node: '>=14'}
     hasBin: true
@@ -3357,9 +3340,9 @@ packages:
       get-stdin: 9.0.0
       globby: 13.1.2
       picocolors: 1.0.0
-      postcss: 8.4.16
-      postcss-load-config: 4.0.1_postcss@8.4.16
-      postcss-reporter: 7.0.5_postcss@8.4.16
+      postcss: 8.4.17
+      postcss-load-config: 4.0.1_postcss@8.4.17
+      postcss-reporter: 7.0.5_postcss@8.4.17
       pretty-hrtime: 1.0.3
       read-cache: 1.0.0
       slash: 4.0.0
@@ -3368,7 +3351,7 @@ packages:
       - ts-node
     dev: true
 
-  /postcss-load-config/4.0.1_postcss@8.4.16:
+  /postcss-load-config/4.0.1_postcss@8.4.17:
     resolution: {integrity: sha512-vEJIc8RdiBRu3oRAI0ymerOn+7rPuMvRXslTvZUKZonDHFIczxztIyJ1urxM1x9JXEikvpWWTUUqal5j/8QgvA==}
     engines: {node: '>= 14'}
     peerDependencies:
@@ -3381,7 +3364,7 @@ packages:
         optional: true
     dependencies:
       lilconfig: 2.0.5
-      postcss: 8.4.16
+      postcss: 8.4.17
       yaml: 2.1.1
     dev: true
 
@@ -3389,14 +3372,14 @@ packages:
     resolution: {integrity: sha512-3sOlxmbKcSHMjlUXQZKQ06jOswE7oVkXPxmZdoB1r5l0q6gTFTQSHxNxOrCccElbW7dxNytifNEo8qidX2Vsig==}
     dev: true
 
-  /postcss-reporter/7.0.5_postcss@8.4.16:
+  /postcss-reporter/7.0.5_postcss@8.4.17:
     resolution: {integrity: sha512-glWg7VZBilooZGOFPhN9msJ3FQs19Hie7l5a/eE6WglzYqVeH3ong3ShFcp9kDWJT1g2Y/wd59cocf9XxBtkWA==}
     engines: {node: '>=10'}
     peerDependencies:
       postcss: ^8.1.0
     dependencies:
       picocolors: 1.0.0
-      postcss: 8.4.16
+      postcss: 8.4.17
       thenby: 1.3.4
     dev: true
 
@@ -3404,22 +3387,22 @@ packages:
     resolution: {integrity: sha512-HvExULSwLqHLgUy1rl3ANIqCsvMS0WHss2UOsXhXnQaZ9VCc2oBvIpXrl00IUFT5ZDITME0o6oiXeiHr2SAIfw==}
     dev: true
 
-  /postcss-safe-parser/6.0.0_postcss@8.4.16:
+  /postcss-safe-parser/6.0.0_postcss@8.4.17:
     resolution: {integrity: sha512-FARHN8pwH+WiS2OPCxJI8FuRJpTVnn6ZNFiqAM2aeW2LwTHWWmWgIyKC6cUo0L8aeKiF/14MNvnpls6R2PBeMQ==}
     engines: {node: '>=12.0'}
     peerDependencies:
       postcss: ^8.3.3
     dependencies:
-      postcss: 8.4.16
+      postcss: 8.4.17
     dev: true
 
-  /postcss-scss/4.0.4_postcss@8.4.16:
+  /postcss-scss/4.0.4_postcss@8.4.17:
     resolution: {integrity: sha512-aBBbVyzA8b3hUL0MGrpydxxXKXFZc5Eqva0Q3V9qsBOLEMsjb6w49WfpsoWzpEgcqJGW4t7Rio8WXVU9Gd8vWg==}
     engines: {node: '>=12.0'}
     peerDependencies:
       postcss: ^8.3.3
     dependencies:
-      postcss: 8.4.16
+      postcss: 8.4.17
     dev: true
 
   /postcss-selector-parser/6.0.10:
@@ -3434,8 +3417,8 @@ packages:
     resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
     dev: true
 
-  /postcss/8.4.16:
-    resolution: {integrity: sha512-ipHE1XBvKzm5xI7hiHCZJCSugxvsdq2mPnsq5+UF+VHCjiBvtDrlxJfMBToWaP9D5XlgNmcFGqoHmUn0EYEaRQ==}
+  /postcss/8.4.17:
+    resolution: {integrity: sha512-UNxNOLQydcOFi41yHNMcKRZ39NeXlr8AxGuZJsdub8vIb12fHzcq37DTU/QtbI6WLxNg2gF9Z+8qtRwTj1UI1Q==}
     engines: {node: ^10 || ^12 || >=14}
     dependencies:
       nanoid: 3.3.4
@@ -3483,7 +3466,7 @@ packages:
     dependencies:
       commander: 8.3.0
       glob: 7.2.3
-      postcss: 8.4.16
+      postcss: 8.4.17
       postcss-selector-parser: 6.0.10
     dev: true
 
@@ -3610,7 +3593,7 @@ packages:
     dev: true
 
   /require-directory/2.1.1:
-    resolution: {integrity: sha1-jGStX9MNqxyXbiNE/+f3kqam30I=}
+    resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
     engines: {node: '>=0.10.0'}
     dev: true
 
@@ -3866,49 +3849,49 @@ packages:
     resolution: {integrity: sha512-Dj1Okke1C3uKKwQcetra4jSuk0DqbzbYtXipzFlFMZtowbF1x7BKJwB9AayVMyFARvU8EDrZdcax4At/452cAg==}
     dev: true
 
-  /stylelint-config-recommended-scss/6.0.0_nqmbdxq5redfjw6kdtxj73dev4:
+  /stylelint-config-recommended-scss/6.0.0_7mm2245zw6jpoub3zc2ef5m2tq:
     resolution: {integrity: sha512-6QOe2/OzXV2AP5FE12A7+qtKdZik7Saf42SMMl84ksVBBPpTdrV+9HaCbPYiRMiwELY9hXCVdH4wlJ+YJb5eig==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      postcss-scss: 4.0.4_postcss@8.4.16
-      stylelint: 14.12.1
-      stylelint-config-recommended: 7.0.0_stylelint@14.12.1
-      stylelint-scss: 4.2.0_stylelint@14.12.1
+      postcss-scss: 4.0.4_postcss@8.4.17
+      stylelint: 14.13.0
+      stylelint-config-recommended: 7.0.0_stylelint@14.13.0
+      stylelint-scss: 4.2.0_stylelint@14.13.0
     transitivePeerDependencies:
       - postcss
     dev: true
 
-  /stylelint-config-recommended/7.0.0_stylelint@14.12.1:
+  /stylelint-config-recommended/7.0.0_stylelint@14.13.0:
     resolution: {integrity: sha512-yGn84Bf/q41J4luis1AZ95gj0EQwRX8lWmGmBwkwBNSkpGSpl66XcPTulxGa/Z91aPoNGuIGBmFkcM1MejMo9Q==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      stylelint: 14.12.1
+      stylelint: 14.13.0
     dev: true
 
-  /stylelint-config-standard-scss/4.0.0_nqmbdxq5redfjw6kdtxj73dev4:
+  /stylelint-config-standard-scss/4.0.0_7mm2245zw6jpoub3zc2ef5m2tq:
     resolution: {integrity: sha512-xizu8PTEyB6zYXBiVg6VtvUYn9m57x+6ZtaOdaxsfpbe5eagLPGNlbYnKfm/CfN69ArUpnwR6LjgsTHzlGbtXQ==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      stylelint: 14.12.1
-      stylelint-config-recommended-scss: 6.0.0_nqmbdxq5redfjw6kdtxj73dev4
-      stylelint-config-standard: 25.0.0_stylelint@14.12.1
+      stylelint: 14.13.0
+      stylelint-config-recommended-scss: 6.0.0_7mm2245zw6jpoub3zc2ef5m2tq
+      stylelint-config-standard: 25.0.0_stylelint@14.13.0
     transitivePeerDependencies:
       - postcss
     dev: true
 
-  /stylelint-config-standard/25.0.0_stylelint@14.12.1:
+  /stylelint-config-standard/25.0.0_stylelint@14.13.0:
     resolution: {integrity: sha512-21HnP3VSpaT1wFjFvv9VjvOGDtAviv47uTp3uFmzcN+3Lt+RYRv6oAplLaV51Kf792JSxJ6svCJh/G18E9VnCA==}
     peerDependencies:
       stylelint: ^14.4.0
     dependencies:
-      stylelint: 14.12.1
-      stylelint-config-recommended: 7.0.0_stylelint@14.12.1
+      stylelint: 14.13.0
+      stylelint-config-recommended: 7.0.0_stylelint@14.13.0
     dev: true
 
-  /stylelint-scss/4.2.0_stylelint@14.12.1:
+  /stylelint-scss/4.2.0_stylelint@14.13.0:
     resolution: {integrity: sha512-HHHMVKJJ5RM9pPIbgJ/XA67h9H0407G68Rm69H4fzFbFkyDMcTV1Byep3qdze5+fJ3c0U7mJrbj6S0Fg072uZA==}
     peerDependencies:
       stylelint: ^14.5.1
@@ -3918,15 +3901,15 @@ packages:
       postcss-resolve-nested-selector: 0.1.1
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
-      stylelint: 14.12.1
+      stylelint: 14.13.0
     dev: true
 
-  /stylelint/14.12.1:
-    resolution: {integrity: sha512-ZEM4TuksChMBfuPadQsHUkbOoRySAT9QMfDvvYxdAchOJl0p+csTMBXOu6ORAAxKhwBmxqJiep8V88bXfNs3EQ==}
+  /stylelint/14.13.0:
+    resolution: {integrity: sha512-NJSAdloiAB/jgVJKxMR90mWlctvmeBFGFVUvyKngi9+j/qPSJ5ZB+u8jOmGbLTnS7OHrII9NFGehPRyar8U5vg==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@csstools/selector-specificity': 2.0.2_pnx64jze6bptzcedy5bidi3zdi
+      '@csstools/selector-specificity': 2.0.2_zurzgjffv23ohtxa7nq7nizuja
       balanced-match: 2.0.0
       colord: 2.9.3
       cosmiconfig: 7.0.1
@@ -3949,10 +3932,10 @@ packages:
       micromatch: 4.0.5
       normalize-path: 3.0.0
       picocolors: 1.0.0
-      postcss: 8.4.16
+      postcss: 8.4.17
       postcss-media-query-parser: 0.2.3
       postcss-resolve-nested-selector: 0.1.1
-      postcss-safe-parser: 6.0.0_postcss@8.4.16
+      postcss-safe-parser: 6.0.0_postcss@8.4.17
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
       resolve-from: 5.0.0

From c37efcc24dd68e3e85017e0f0ec974f1681b57ad Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 5 Oct 2022 00:22:44 +0000
Subject: [PATCH 098/263] build(deps): update dependency @types/node to v18.8.2
 (#4125)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 76 +++++++++++++++++++++++-----------------------
 2 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/web/package.json b/web/package.json
index 1385c882c..716f40137 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.1",
-    "@types/node": "18.8.0",
+    "@types/node": "18.8.2",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index afa6c6613..5cfc92f6c 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.1
-  '@types/node': 18.8.0
+  '@types/node': 18.8.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.1
-  '@types/node': 18.8.0
+  '@types/node': 18.8.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.1.2_@types+node@18.8.0
+  jest: 29.1.2_@types+node@18.8.2
   jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.1.2
@@ -2507,7 +2507,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2528,14 +2528,14 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.1.2_@types+node@18.8.0
+      jest-config: 29.1.2_@types+node@18.8.2
       jest-haste-map: 29.1.2
       jest-message-util: 29.1.2
       jest-regex-util: 29.0.0
@@ -2562,7 +2562,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       jest-mock: 29.1.2
     dev: true
 
@@ -2596,7 +2596,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       jest-message-util: 29.1.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
@@ -2629,7 +2629,7 @@ packages:
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2740,7 +2740,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2752,7 +2752,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3339,7 +3339,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3368,7 +3368,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3389,8 +3389,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.8.0:
-    resolution: {integrity: sha512-u+h43R6U8xXDt2vzUaVP3VwjjLyOJk6uEciZS8OSyziUQGOwmk+l+4drxcsDboHXwyTaqS1INebghmWMRxq3LA==}
+  /@types/node/18.8.2:
+    resolution: {integrity: sha512-cRMwIgdDN43GO4xMWAfJAecYn8wV4JbsOGHNfNUIDiuYkUYAR5ec4Rj7IO2SAhFPEfpPtLtUTbbny/TCT7aDwA==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5303,7 +5303,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
-      jest: 29.1.2_@types+node@18.8.0
+      jest: 29.1.2_@types+node@18.8.2
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6516,7 +6516,7 @@ packages:
       '@jest/expect': 29.1.2
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6535,7 +6535,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.2_@types+node@18.8.0:
+  /jest-cli/29.1.2_@types+node@18.8.2:
     resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6552,7 +6552,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.2_@types+node@18.8.0
+      jest-config: 29.1.2_@types+node@18.8.2
       jest-util: 29.1.2
       jest-validate: 29.1.2
       prompts: 2.4.2
@@ -6563,7 +6563,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.2_@types+node@18.8.0:
+  /jest-config/29.1.2_@types+node@18.8.2:
     resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6578,7 +6578,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       babel-jest: 29.1.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6648,7 +6648,7 @@ packages:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
       '@types/jsdom': 20.0.0
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
       jsdom: 20.0.0
@@ -6666,7 +6666,7 @@ packages:
       '@jest/environment': 29.1.2
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
     dev: true
@@ -6682,7 +6682,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6705,7 +6705,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6781,7 +6781,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       jest-util: 29.1.2
     dev: true
 
@@ -6841,7 +6841,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6872,7 +6872,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6895,7 +6895,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       graceful-fs: 4.2.10
     dev: true
 
@@ -6940,7 +6940,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6952,7 +6952,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6979,7 +6979,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.2_@types+node@18.8.0
+      jest: 29.1.2_@types+node@18.8.2
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6993,7 +6993,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7007,7 +7007,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7019,7 +7019,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7028,13 +7028,13 @@ packages:
     resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.8.0
+      '@types/node': 18.8.2
       jest-util: 29.1.2
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.2_@types+node@18.8.0:
+  /jest/29.1.2_@types+node@18.8.2:
     resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7047,7 +7047,7 @@ packages:
       '@jest/core': 29.1.2
       '@jest/types': 29.1.2
       import-local: 3.1.0
-      jest-cli: 29.1.2_@types+node@18.8.0
+      jest-cli: 29.1.2_@types+node@18.8.2
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 9ae703fe5152b09e0484e31d54dec573e9f0ea7c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 5 Oct 2022 14:50:01 +1100
Subject: [PATCH 099/263] build(deps): update typescript-eslint monorepo to
 v5.39.0 (#4123)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 102 ++++++++++++++++++++++-----------------------
 2 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 716f40137..1f664279e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.38.1",
-    "@typescript-eslint/parser": "5.38.1",
+    "@typescript-eslint/eslint-plugin": "5.39.0",
+    "@typescript-eslint/parser": "5.39.0",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.10",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 5cfc92f6c..ed6a331e3 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.38.1
-  '@typescript-eslint/parser': 5.38.1
+  '@typescript-eslint/eslint-plugin': 5.39.0
+  '@typescript-eslint/parser': 5.39.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   broadcast-channel: 4.17.0
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
-  '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+  '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
+  '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
   '@vitejs/plugin-react': 2.1.0_vite@3.1.4
   esbuild: 0.15.10
   esbuild-jest: 0.5.0_esbuild@0.15.10
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_wolz5gfpehnta75zn5jkwtivci
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
-  eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
+  eslint-plugin-import: 2.26.0_s4vppe3rjapx4e2z54qvzpm5hu
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
   eslint-plugin-prettier: 4.2.1_cfn5x6ujhhgzv3423d6k7r2zzm
   eslint-plugin-react: 7.31.8_eslint@8.24.0
@@ -3475,8 +3475,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.38.1_c7qepppml3d4ahu5cnfwqe6ltq:
-    resolution: {integrity: sha512-ky7EFzPhqz3XlhS7vPOoMDaQnQMn+9o5ICR9CPr/6bw8HrFkzhMSxuA3gRfiJVvs7geYrSeawGJjZoZQKCOglQ==}
+  /@typescript-eslint/eslint-plugin/5.39.0_xyciw6oqjoiiono4dhv3uhn5my:
+    resolution: {integrity: sha512-xVfKOkBm5iWMNGKQ2fwX5GVgBuHmZBO1tCRwXmY5oAIsPscfwm2UADDuNB8ZVYCtpQvJK4xpjrK7jEhcJ0zY9A==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3486,10 +3486,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
-      '@typescript-eslint/scope-manager': 5.38.1
-      '@typescript-eslint/type-utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
-      '@typescript-eslint/utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/scope-manager': 5.39.0
+      '@typescript-eslint/type-utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
       debug: 4.3.4
       eslint: 8.24.0
       ignore: 5.2.0
@@ -3514,8 +3514,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.38.1_ypn2ylkkyfa5i233caldtndbqa:
-    resolution: {integrity: sha512-LDqxZBVFFQnQRz9rUZJhLmox+Ep5kdUmLatLQnCRR6523YV+XhRjfYzStQ4MheFA8kMAfUlclHSbu+RKdRwQKw==}
+  /@typescript-eslint/parser/5.39.0_ypn2ylkkyfa5i233caldtndbqa:
+    resolution: {integrity: sha512-PhxLjrZnHShe431sBAGHaNe6BDdxAASDySgsBCGxcBecVCi8NQWxQZMcizNA4g0pN51bBAn/FUfkWG3SDVcGlA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3524,9 +3524,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.38.1
-      '@typescript-eslint/types': 5.38.1
-      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.39.0
+      '@typescript-eslint/types': 5.39.0
+      '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.24.0
       typescript: 4.8.4
@@ -3542,16 +3542,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.38.1:
-    resolution: {integrity: sha512-BfRDq5RidVU3RbqApKmS7RFMtkyWMM50qWnDAkKgQiezRtLKsoyRKIvz1Ok5ilRWeD9IuHvaidaLxvGx/2eqTQ==}
+  /@typescript-eslint/scope-manager/5.39.0:
+    resolution: {integrity: sha512-/I13vAqmG3dyqMVSZPjsbuNQlYS082Y7OMkwhCfLXYsmlI0ca4nkL7wJ/4gjX70LD4P8Hnw1JywUVVAwepURBw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.38.1
-      '@typescript-eslint/visitor-keys': 5.38.1
+      '@typescript-eslint/types': 5.39.0
+      '@typescript-eslint/visitor-keys': 5.39.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.38.1_ypn2ylkkyfa5i233caldtndbqa:
-    resolution: {integrity: sha512-UU3j43TM66gYtzo15ivK2ZFoDFKKP0k03MItzLdq0zV92CeGCXRfXlfQX5ILdd4/DSpHkSjIgLLLh1NtkOJOAw==}
+  /@typescript-eslint/type-utils/5.39.0_ypn2ylkkyfa5i233caldtndbqa:
+    resolution: {integrity: sha512-KJHJkOothljQWzR3t/GunL0TPKY+fGJtnpl+pX+sJ0YiKTz3q2Zr87SGTmFqsCMFrLt5E0+o+S6eQY0FAXj9uA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3560,8 +3560,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.4
-      '@typescript-eslint/utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
+      '@typescript-eslint/utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
       debug: 4.3.4
       eslint: 8.24.0
       tsutils: 3.21.0_typescript@4.8.4
@@ -3575,8 +3575,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.38.1:
-    resolution: {integrity: sha512-QTW1iHq1Tffp9lNfbfPm4WJabbvpyaehQ0SrvVK2yfV79SytD9XDVxqiPvdrv2LK7DGSFo91TB2FgWanbJAZXg==}
+  /@typescript-eslint/types/5.39.0:
+    resolution: {integrity: sha512-gQMZrnfEBFXK38hYqt8Lkwt8f4U6yq+2H5VDSgP/qiTzC8Nw8JO3OuSUOQ2qW37S/dlwdkHDntkZM6SQhKyPhw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3601,8 +3601,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.38.1_typescript@4.8.4:
-    resolution: {integrity: sha512-99b5e/Enoe8fKMLdSuwrfH/C0EIbpUWmeEKHmQlGZb8msY33qn1KlkFww0z26o5Omx7EVjzVDCWEfrfCDHfE7g==}
+  /@typescript-eslint/typescript-estree/5.39.0_typescript@4.8.4:
+    resolution: {integrity: sha512-qLFQP0f398sdnogJoLtd43pUgB18Q50QSA+BTE5h3sUxySzbWDpTSdgt4UyxNSozY/oDK2ta6HVAzvGgq8JYnA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3610,8 +3610,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.38.1
-      '@typescript-eslint/visitor-keys': 5.38.1
+      '@typescript-eslint/types': 5.39.0
+      '@typescript-eslint/visitor-keys': 5.39.0
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3640,16 +3640,16 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.38.1_ypn2ylkkyfa5i233caldtndbqa:
-    resolution: {integrity: sha512-oIuUiVxPBsndrN81oP8tXnFa/+EcZ03qLqPDfSZ5xIJVm7A9V0rlkQwwBOAGtrdN70ZKDlKv+l1BeT4eSFxwXA==}
+  /@typescript-eslint/utils/5.39.0_ypn2ylkkyfa5i233caldtndbqa:
+    resolution: {integrity: sha512-+DnY5jkpOpgj+EBtYPyHRjXampJfC0yUZZzfzLuUWVZvCuKqSdJVC8UhdWipIw7VKNTfwfAPiOWzYkAwuIhiAg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
-      '@typescript-eslint/scope-manager': 5.38.1
-      '@typescript-eslint/types': 5.38.1
-      '@typescript-eslint/typescript-estree': 5.38.1_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.39.0
+      '@typescript-eslint/types': 5.39.0
+      '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
       eslint: 8.24.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.24.0
@@ -3666,11 +3666,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.38.1:
-    resolution: {integrity: sha512-bSHr1rRxXt54+j2n4k54p4fj8AHJ49VDWtjpImOpzQj4qjAiOpPni+V1Tyajh19Api1i844F757cur8wH3YvOA==}
+  /@typescript-eslint/visitor-keys/5.39.0:
+    resolution: {integrity: sha512-yyE3RPwOG+XJBLrhvsxAidUgybJVQ/hG8BhiJo0k8JSAYfk/CshVcxf0HwP4Jt7WZZ6vLmxdo1p6EyN3tzFTkg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.38.1
+      '@typescript-eslint/types': 5.39.0
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5156,14 +5156,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_6hamdueellmfdowr3e64hskol4
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
-      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
+      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.24.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
-      eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
-      eslint-plugin-jest: 25.7.0_xos47mdsd2fezepdqjjkf4gw5u
+      eslint-plugin-import: 2.26.0_s4vppe3rjapx4e2z54qvzpm5hu
+      eslint-plugin-jest: 25.7.0_32g7utoefduvzotunjf3b6yaey
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
       eslint-plugin-react: 7.31.8_eslint@8.24.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
@@ -5201,7 +5201,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.24.0
-      eslint-plugin-import: 2.26.0_3vub7fqunrjizhghsam4lcr2pi
+      eslint-plugin-import: 2.26.0_s4vppe3rjapx4e2z54qvzpm5hu
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5211,7 +5211,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_z2h2qcjieaa7l5lnd6b2cqvlgy:
+  /eslint-module-utils/2.7.3_xqkvhp6xp4qeims5nzhpa6g4fu:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5229,7 +5229,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
@@ -5256,7 +5256,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_3vub7fqunrjizhghsam4lcr2pi:
+  /eslint-plugin-import/2.26.0_s4vppe3rjapx4e2z54qvzpm5hu:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5266,14 +5266,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.24.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_z2h2qcjieaa7l5lnd6b2cqvlgy
+      eslint-module-utils: 2.7.3_xqkvhp6xp4qeims5nzhpa6g4fu
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5287,7 +5287,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_xos47mdsd2fezepdqjjkf4gw5u:
+  /eslint-plugin-jest/25.7.0_32g7utoefduvzotunjf3b6yaey:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5300,7 +5300,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.38.1_c7qepppml3d4ahu5cnfwqe6ltq
+      '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
       jest: 29.1.2_@types+node@18.8.2
@@ -5386,7 +5386,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.38.1_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
     transitivePeerDependencies:
       - supports-color

From dc79c8ea59622d19db22dae6753936da2be6412f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Wed, 5 Oct 2022 16:05:23 +1100
Subject: [PATCH 100/263] refactor: any (#4133)

* refactor: any

* refactor: fix test
---
 cmd/authelia-gen/cmd_docs_date.go             |  2 +-
 cmd/authelia-scripts/cmd/bootstrap.go         |  4 ++--
 cmd/authelia-scripts/cmd/types.go             |  8 ++++----
 .../authentication/ldap_user_provider_test.go |  4 ++--
 internal/commands/crypto.go                   | 12 +++++------
 internal/commands/crypto_helper.go            |  6 +++---
 internal/commands/util.go                     |  2 +-
 internal/configuration/decode_hooks.go        | 12 +++++------
 internal/configuration/decode_hooks_test.go   |  8 ++++----
 internal/configuration/deprecation.go         |  2 +-
 internal/configuration/koanf_callbacks.go     | 12 +++++------
 .../configuration/koanf_callbacks_test.go     |  4 ++--
 internal/configuration/koanf_util.go          |  6 +++---
 internal/configuration/provider.go            |  6 +++---
 internal/configuration/sources.go             |  4 ++--
 internal/configuration/types.go               |  4 ++--
 internal/handlers/handler_sign_webauthn.go    |  2 +-
 internal/handlers/oidc.go                     |  4 ++--
 internal/middlewares/authelia_context.go      |  6 +++---
 internal/middlewares/identity_verification.go |  2 +-
 internal/middlewares/types.go                 |  4 ++--
 internal/model/oidc.go                        |  2 +-
 internal/model/types.go                       |  8 ++++----
 internal/oidc/types_test.go                   |  2 +-
 internal/utils/crypto.go                      | 20 +++++++++----------
 25 files changed, 73 insertions(+), 73 deletions(-)

diff --git a/cmd/authelia-gen/cmd_docs_date.go b/cmd/authelia-gen/cmd_docs_date.go
index b7a2f2794..2f752db4b 100644
--- a/cmd/authelia-gen/cmd_docs_date.go
+++ b/cmd/authelia-gen/cmd_docs_date.go
@@ -79,7 +79,7 @@ func docsDateRunE(cmd *cobra.Command, args []string) (err error) {
 			return nil
 		}
 
-		frontmatter := map[string]interface{}{}
+		frontmatter := map[string]any{}
 
 		if err = yaml.Unmarshal(frontmatterBytes, frontmatter); err != nil {
 			return err
diff --git a/cmd/authelia-scripts/cmd/bootstrap.go b/cmd/authelia-scripts/cmd/bootstrap.go
index befd60994..47a630818 100644
--- a/cmd/authelia-scripts/cmd/bootstrap.go
+++ b/cmd/authelia-scripts/cmd/bootstrap.go
@@ -168,8 +168,8 @@ func pnpmInstall() {
 	shell(fmt.Sprintf("cd %s/web && pnpm install", cwd))
 }
 
-func bootstrapPrintln(args ...interface{}) {
-	a := make([]interface{}, 0)
+func bootstrapPrintln(args ...any) {
+	a := make([]any, 0)
 	a = append(a, "[BOOTSTRAP]")
 	a = append(a, args...)
 	fmt.Println(a...)
diff --git a/cmd/authelia-scripts/cmd/types.go b/cmd/authelia-scripts/cmd/types.go
index a2712908c..e18f95391 100644
--- a/cmd/authelia-scripts/cmd/types.go
+++ b/cmd/authelia-scripts/cmd/types.go
@@ -20,10 +20,10 @@ type DockerImages []DockerImage
 
 // DockerImage represents some of the data from the docker images API.
 type DockerImage struct {
-	Architecture string      `json:"architecture"`
-	Variant      interface{} `json:"variant"`
-	Digest       string      `json:"digest"`
-	OS           string      `json:"os"`
+	Architecture string `json:"architecture"`
+	Variant      any    `json:"variant"`
+	Digest       string `json:"digest"`
+	OS           string `json:"os"`
 }
 
 // Match returns true if this image matches the platform.
diff --git a/internal/authentication/ldap_user_provider_test.go b/internal/authentication/ldap_user_provider_test.go
index 2123ad4dd..aeaf5b835 100644
--- a/internal/authentication/ldap_user_provider_test.go
+++ b/internal/authentication/ldap_user_provider_test.go
@@ -140,7 +140,7 @@ func NewExtendedSearchRequestMatcher(filter, base string, scope, derefAliases in
 	return &ExtendedSearchRequestMatcher{filter, base, scope, derefAliases, typesOnly, attributes}
 }
 
-func (e *ExtendedSearchRequestMatcher) Matches(x interface{}) bool {
+func (e *ExtendedSearchRequestMatcher) Matches(x any) bool {
 	sr := x.(*ldap.SearchRequest)
 
 	if e.filter != sr.Filter || e.baseDN != sr.BaseDN || e.scope != sr.Scope || e.derefAliases != sr.DerefAliases ||
@@ -502,7 +502,7 @@ func NewSearchRequestMatcher(expected string) *SearchRequestMatcher {
 	return &SearchRequestMatcher{expected}
 }
 
-func (srm *SearchRequestMatcher) Matches(x interface{}) bool {
+func (srm *SearchRequestMatcher) Matches(x any) bool {
 	sr := x.(*ldap.SearchRequest)
 	return sr.Filter == srm.expected
 }
diff --git a/internal/commands/crypto.go b/internal/commands/crypto.go
index 63a331e5e..0ffd245f1 100644
--- a/internal/commands/crypto.go
+++ b/internal/commands/crypto.go
@@ -235,7 +235,7 @@ func newCryptoGenerateCmd(category, algorithm string) (cmd *cobra.Command) {
 
 func cryptoGenerateRunE(cmd *cobra.Command, args []string) (err error) {
 	var (
-		privateKey interface{}
+		privateKey any
 	)
 
 	if privateKey, err = cryptoGenPrivateKeyFromCmd(cmd); err != nil {
@@ -251,7 +251,7 @@ func cryptoGenerateRunE(cmd *cobra.Command, args []string) (err error) {
 
 func cryptoCertificateRequestRunE(cmd *cobra.Command, _ []string) (err error) {
 	var (
-		privateKey interface{}
+		privateKey any
 	)
 
 	if privateKey, err = cryptoGenPrivateKeyFromCmd(cmd); err != nil {
@@ -320,10 +320,10 @@ func cryptoCertificateRequestRunE(cmd *cobra.Command, _ []string) (err error) {
 	return nil
 }
 
-func cryptoCertificateGenerateRunE(cmd *cobra.Command, _ []string, privateKey interface{}) (err error) {
+func cryptoCertificateGenerateRunE(cmd *cobra.Command, _ []string, privateKey any) (err error) {
 	var (
 		template, caCertificate, parent       *x509.Certificate
-		publicKey, caPrivateKey, signatureKey interface{}
+		publicKey, caPrivateKey, signatureKey any
 	)
 
 	if publicKey = utils.PublicKeyFromPrivateKey(privateKey); publicKey == nil {
@@ -412,7 +412,7 @@ func cryptoCertificateGenerateRunE(cmd *cobra.Command, _ []string, privateKey in
 	return nil
 }
 
-func cryptoPairGenerateRunE(cmd *cobra.Command, _ []string, privateKey interface{}) (err error) {
+func cryptoPairGenerateRunE(cmd *cobra.Command, _ []string, privateKey any) (err error) {
 	var (
 		privateKeyPath, publicKeyPath string
 		pkcs8                         bool
@@ -451,7 +451,7 @@ func cryptoPairGenerateRunE(cmd *cobra.Command, _ []string, privateKey interface
 		return err
 	}
 
-	var publicKey interface{}
+	var publicKey any
 
 	if publicKey = utils.PublicKeyFromPrivateKey(privateKey); publicKey == nil {
 		return fmt.Errorf("failed to obtain public key from private key")
diff --git a/internal/commands/crypto_helper.go b/internal/commands/crypto_helper.go
index 96e23f673..1a097f37c 100644
--- a/internal/commands/crypto_helper.go
+++ b/internal/commands/crypto_helper.go
@@ -130,7 +130,7 @@ func cryptoGetWritePathsFromCmd(cmd *cobra.Command) (privateKey, publicKey strin
 	return filepath.Join(dir, private), filepath.Join(dir, public), nil
 }
 
-func cryptoGenPrivateKeyFromCmd(cmd *cobra.Command) (privateKey interface{}, err error) {
+func cryptoGenPrivateKeyFromCmd(cmd *cobra.Command) (privateKey any, err error) {
 	switch cmd.Parent().Use {
 	case cmdUseRSA:
 		var (
@@ -170,7 +170,7 @@ func cryptoGenPrivateKeyFromCmd(cmd *cobra.Command) (privateKey interface{}, err
 	return privateKey, nil
 }
 
-func cryptoGetCAFromCmd(cmd *cobra.Command) (privateKey interface{}, cert *x509.Certificate, err error) {
+func cryptoGetCAFromCmd(cmd *cobra.Command) (privateKey any, cert *x509.Certificate, err error) {
 	if !cmd.Flags().Changed(cmdFlagNamePathCA) {
 		return nil, nil, nil
 	}
@@ -180,7 +180,7 @@ func cryptoGetCAFromCmd(cmd *cobra.Command) (privateKey interface{}, cert *x509.
 
 		ok bool
 
-		certificate interface{}
+		certificate any
 	)
 
 	if dir, err = cmd.Flags().GetString(cmdFlagNamePathCA); err != nil {
diff --git a/internal/commands/util.go b/internal/commands/util.go
index 26c308648..ef83e1627 100644
--- a/internal/commands/util.go
+++ b/internal/commands/util.go
@@ -4,7 +4,7 @@ import (
 	"fmt"
 )
 
-func recoverErr(i interface{}) error {
+func recoverErr(i any) error {
 	switch v := i.(type) {
 	case nil:
 		return nil
diff --git a/internal/configuration/decode_hooks.go b/internal/configuration/decode_hooks.go
index 9dd236690..d3c5d5c44 100644
--- a/internal/configuration/decode_hooks.go
+++ b/internal/configuration/decode_hooks.go
@@ -19,7 +19,7 @@ import (
 
 // StringToMailAddressHookFunc decodes a string into a mail.Address or *mail.Address.
 func StringToMailAddressHookFunc() mapstructure.DecodeHookFuncType {
-	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+	return func(f reflect.Type, t reflect.Type, data any) (value any, err error) {
 		var ptr bool
 
 		if f.Kind() != reflect.String {
@@ -65,7 +65,7 @@ func StringToMailAddressHookFunc() mapstructure.DecodeHookFuncType {
 
 // StringToURLHookFunc converts string types into a url.URL or *url.URL.
 func StringToURLHookFunc() mapstructure.DecodeHookFuncType {
-	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+	return func(f reflect.Type, t reflect.Type, data any) (value any, err error) {
 		var ptr bool
 
 		if f.Kind() != reflect.String {
@@ -111,7 +111,7 @@ func StringToURLHookFunc() mapstructure.DecodeHookFuncType {
 
 // ToTimeDurationHookFunc converts string and integer types to a time.Duration.
 func ToTimeDurationHookFunc() mapstructure.DecodeHookFuncType {
-	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+	return func(f reflect.Type, t reflect.Type, data any) (value any, err error) {
 		var ptr bool
 
 		switch f.Kind() {
@@ -172,7 +172,7 @@ func ToTimeDurationHookFunc() mapstructure.DecodeHookFuncType {
 
 // StringToRegexpHookFunc decodes a string into a *regexp.Regexp or regexp.Regexp.
 func StringToRegexpHookFunc() mapstructure.DecodeHookFuncType {
-	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+	return func(f reflect.Type, t reflect.Type, data any) (value any, err error) {
 		var ptr bool
 
 		if f.Kind() != reflect.String {
@@ -218,7 +218,7 @@ func StringToRegexpHookFunc() mapstructure.DecodeHookFuncType {
 
 // StringToAddressHookFunc decodes a string into an Address or *Address.
 func StringToAddressHookFunc() mapstructure.DecodeHookFuncType {
-	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+	return func(f reflect.Type, t reflect.Type, data any) (value any, err error) {
 		var ptr bool
 
 		if f.Kind() != reflect.String {
@@ -258,7 +258,7 @@ func StringToAddressHookFunc() mapstructure.DecodeHookFuncType {
 
 // StringToX509CertificateHookFunc decodes strings to x509.Certificate's.
 func StringToX509CertificateHookFunc() mapstructure.DecodeHookFuncType {
-	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+	return func(f reflect.Type, t reflect.Type, data any) (value interface{}, err error) {
 		if f.Kind() != reflect.String {
 			return data, nil
 		}
diff --git a/internal/configuration/decode_hooks_test.go b/internal/configuration/decode_hooks_test.go
index 6a752e5f9..b13d350c7 100644
--- a/internal/configuration/decode_hooks_test.go
+++ b/internal/configuration/decode_hooks_test.go
@@ -993,8 +993,8 @@ func TestStringToX509CertificateHookFunc(t *testing.T) {
 
 	testCases := []struct {
 		desc   string
-		have   interface{}
-		want   interface{}
+		have   any
+		want   any
 		err    string
 		decode bool
 	}{
@@ -1069,8 +1069,8 @@ func TestStringToX509CertificateChainHookFunc(t *testing.T) {
 
 	testCases := []struct {
 		desc      string
-		have      interface{}
-		expected  interface{}
+		have      any
+		expected  any
 		err, verr string
 		decode    bool
 	}{
diff --git a/internal/configuration/deprecation.go b/internal/configuration/deprecation.go
index 040d346c2..fbe881ef1 100644
--- a/internal/configuration/deprecation.go
+++ b/internal/configuration/deprecation.go
@@ -10,7 +10,7 @@ type Deprecation struct {
 	Key     string
 	NewKey  string
 	AutoMap bool
-	MapFunc func(value interface{}) interface{}
+	MapFunc func(value any) any
 	ErrText string
 }
 
diff --git a/internal/configuration/koanf_callbacks.go b/internal/configuration/koanf_callbacks.go
index 26d11ebcc..d62984eb1 100644
--- a/internal/configuration/koanf_callbacks.go
+++ b/internal/configuration/koanf_callbacks.go
@@ -11,8 +11,8 @@ import (
 )
 
 // koanfEnvironmentCallback returns a koanf callback to map the environment vars to Configuration keys.
-func koanfEnvironmentCallback(keyMap map[string]string, ignoredKeys []string, prefix, delimiter string) func(key, value string) (finalKey string, finalValue interface{}) {
-	return func(key, value string) (finalKey string, finalValue interface{}) {
+func koanfEnvironmentCallback(keyMap map[string]string, ignoredKeys []string, prefix, delimiter string) func(key, value string) (finalKey string, finalValue any) {
+	return func(key, value string) (finalKey string, finalValue any) {
 		if k, ok := keyMap[key]; ok {
 			return k, value
 		}
@@ -33,8 +33,8 @@ func koanfEnvironmentCallback(keyMap map[string]string, ignoredKeys []string, pr
 }
 
 // koanfEnvironmentSecretsCallback returns a koanf callback to map the environment vars to Configuration keys.
-func koanfEnvironmentSecretsCallback(keyMap map[string]string, validator *schema.StructValidator) func(key, value string) (finalKey string, finalValue interface{}) {
-	return func(key, value string) (finalKey string, finalValue interface{}) {
+func koanfEnvironmentSecretsCallback(keyMap map[string]string, validator *schema.StructValidator) func(key, value string) (finalKey string, finalValue any) {
+	return func(key, value string) (finalKey string, finalValue any) {
 		k, ok := keyMap[key]
 		if !ok {
 			return "", nil
@@ -50,8 +50,8 @@ func koanfEnvironmentSecretsCallback(keyMap map[string]string, validator *schema
 	}
 }
 
-func koanfCommandLineWithMappingCallback(mapping map[string]string, includeValidKeys, includeUnchangedKeys bool) func(flag *pflag.Flag) (string, interface{}) {
-	return func(flag *pflag.Flag) (string, interface{}) {
+func koanfCommandLineWithMappingCallback(mapping map[string]string, includeValidKeys, includeUnchangedKeys bool) func(flag *pflag.Flag) (string, any) {
+	return func(flag *pflag.Flag) (string, any) {
 		if !includeUnchangedKeys && !flag.Changed {
 			return "", nil
 		}
diff --git a/internal/configuration/koanf_callbacks_test.go b/internal/configuration/koanf_callbacks_test.go
index 107884ab7..43461fe28 100644
--- a/internal/configuration/koanf_callbacks_test.go
+++ b/internal/configuration/koanf_callbacks_test.go
@@ -16,7 +16,7 @@ import (
 func TestKoanfEnvironmentCallback(t *testing.T) {
 	var (
 		key   string
-		value interface{}
+		value any
 	)
 
 	keyMap := map[string]string{
@@ -46,7 +46,7 @@ func TestKoanfEnvironmentCallback(t *testing.T) {
 func TestKoanfSecretCallbackWithValidSecrets(t *testing.T) {
 	var (
 		key   string
-		value interface{}
+		value any
 	)
 
 	keyMap := map[string]string{
diff --git a/internal/configuration/koanf_util.go b/internal/configuration/koanf_util.go
index 589b4b05e..e656cf25c 100644
--- a/internal/configuration/koanf_util.go
+++ b/internal/configuration/koanf_util.go
@@ -15,13 +15,13 @@ func koanfGetKeys(ko *koanf.Koanf) (keys []string) {
 	keys = ko.Keys()
 
 	for key, value := range ko.All() {
-		slc, ok := value.([]interface{})
+		slc, ok := value.([]any)
 		if !ok {
 			continue
 		}
 
 		for _, item := range slc {
-			m, mok := item.(map[string]interface{})
+			m, mok := item.(map[string]any)
 			if !mok {
 				continue
 			}
@@ -53,7 +53,7 @@ func koanfRemapKeys(val *schema.StructValidator, ko *koanf.Koanf, ds map[string]
 	return final, nil
 }
 
-func koanfRemapKeysStandard(keys map[string]interface{}, val *schema.StructValidator, ds map[string]Deprecation) (keysFinal map[string]interface{}) {
+func koanfRemapKeysStandard(keys map[string]any, val *schema.StructValidator, ds map[string]Deprecation) (keysFinal map[string]interface{}) {
 	var (
 		ok    bool
 		d     Deprecation
diff --git a/internal/configuration/provider.go b/internal/configuration/provider.go
index 22b179331..679589c12 100644
--- a/internal/configuration/provider.go
+++ b/internal/configuration/provider.go
@@ -19,7 +19,7 @@ func Load(val *schema.StructValidator, sources ...Source) (keys []string, config
 }
 
 // LoadAdvanced is intended to give more flexibility over loading a particular path to a specific interface.
-func LoadAdvanced(val *schema.StructValidator, path string, result interface{}, sources ...Source) (keys []string, err error) {
+func LoadAdvanced(val *schema.StructValidator, path string, result any, sources ...Source) (keys []string, err error) {
 	if val == nil {
 		return keys, errNoValidator
 	}
@@ -44,7 +44,7 @@ func LoadAdvanced(val *schema.StructValidator, path string, result interface{},
 	return koanfGetKeys(final), nil
 }
 
-func mapHasKey(k string, m map[string]interface{}) bool {
+func mapHasKey(k string, m map[string]any) bool {
 	if _, ok := m[k]; ok {
 		return true
 	}
@@ -52,7 +52,7 @@ func mapHasKey(k string, m map[string]interface{}) bool {
 	return false
 }
 
-func unmarshal(ko *koanf.Koanf, val *schema.StructValidator, path string, o interface{}) {
+func unmarshal(ko *koanf.Koanf, val *schema.StructValidator, path string, o any) {
 	c := koanf.UnmarshalConf{
 		DecoderConfig: &mapstructure.DecoderConfig{
 			DecodeHook: mapstructure.ComposeDecodeHookFunc(
diff --git a/internal/configuration/sources.go b/internal/configuration/sources.go
index 67aba6d5a..e7b5e4ccc 100644
--- a/internal/configuration/sources.go
+++ b/internal/configuration/sources.go
@@ -145,8 +145,8 @@ func (s *CommandLineSource) Load(_ *schema.StructValidator) (err error) {
 	return s.koanf.Load(posflag.Provider(s.flags, ".", s.koanf), nil)
 }
 
-// NewMapSource returns a new map[string]interface{} source.
-func NewMapSource(m map[string]interface{}) (source *MapSource) {
+// NewMapSource returns a new map[string]any source.
+func NewMapSource(m map[string]any) (source *MapSource) {
 	return &MapSource{
 		m:     m,
 		koanf: koanf.New(constDelimiter),
diff --git a/internal/configuration/types.go b/internal/configuration/types.go
index 90dbaa63c..5946ea7f2 100644
--- a/internal/configuration/types.go
+++ b/internal/configuration/types.go
@@ -38,11 +38,11 @@ type SecretsSource struct {
 type CommandLineSource struct {
 	koanf    *koanf.Koanf
 	flags    *pflag.FlagSet
-	callback func(flag *pflag.Flag) (string, interface{})
+	callback func(flag *pflag.Flag) (string, any)
 }
 
 // MapSource loads configuration from the command line flags.
 type MapSource struct {
-	m     map[string]interface{}
+	m     map[string]any
 	koanf *koanf.Koanf
 }
diff --git a/internal/handlers/handler_sign_webauthn.go b/internal/handlers/handler_sign_webauthn.go
index d4007e4e2..6dec89009 100644
--- a/internal/handlers/handler_sign_webauthn.go
+++ b/internal/handlers/handler_sign_webauthn.go
@@ -41,7 +41,7 @@ func WebauthnAssertionGET(ctx *middlewares.AutheliaCtx) {
 		webauthn.WithAllowedCredentials(user.WebAuthnCredentialDescriptors()),
 	}
 
-	extensions := make(map[string]interface{})
+	extensions := map[string]any{}
 
 	if user.HasFIDOU2F() {
 		extensions["appid"] = w.Config.RPOrigin
diff --git a/internal/handlers/oidc.go b/internal/handlers/oidc.go
index 20c51d2c2..2b2051f1b 100644
--- a/internal/handlers/oidc.go
+++ b/internal/handlers/oidc.go
@@ -8,8 +8,8 @@ import (
 	"github.com/authelia/authelia/v4/internal/session"
 )
 
-func oidcGrantRequests(ar fosite.AuthorizeRequester, consent *model.OAuth2ConsentSession, userSession *session.UserSession) (extraClaims map[string]interface{}) {
-	extraClaims = map[string]interface{}{}
+func oidcGrantRequests(ar fosite.AuthorizeRequester, consent *model.OAuth2ConsentSession, userSession *session.UserSession) (extraClaims map[string]any) {
+	extraClaims = map[string]any{}
 
 	for _, scope := range consent.GrantedScopes {
 		if ar != nil {
diff --git a/internal/middlewares/authelia_context.go b/internal/middlewares/authelia_context.go
index aa7fd4926..af5bcbd66 100644
--- a/internal/middlewares/authelia_context.go
+++ b/internal/middlewares/authelia_context.go
@@ -95,7 +95,7 @@ func (ctx *AutheliaCtx) ReplyStatusCode(statusCode int) {
 }
 
 // ReplyJSON writes a JSON response.
-func (ctx *AutheliaCtx) ReplyJSON(data interface{}, statusCode int) (err error) {
+func (ctx *AutheliaCtx) ReplyJSON(data any, statusCode int) (err error) {
 	var (
 		body []byte
 	)
@@ -246,7 +246,7 @@ func (ctx *AutheliaCtx) ReplyOK() {
 }
 
 // ParseBody parse the request body into the type of value.
-func (ctx *AutheliaCtx) ParseBody(value interface{}) error {
+func (ctx *AutheliaCtx) ParseBody(value any) error {
 	err := json.Unmarshal(ctx.PostBody(), &value)
 
 	if err != nil {
@@ -267,7 +267,7 @@ func (ctx *AutheliaCtx) ParseBody(value interface{}) error {
 }
 
 // SetJSONBody Set json body.
-func (ctx *AutheliaCtx) SetJSONBody(value interface{}) error {
+func (ctx *AutheliaCtx) SetJSONBody(value any) error {
 	return ctx.ReplyJSON(OKResponse{Status: "OK", Data: value}, 0)
 }
 
diff --git a/internal/middlewares/identity_verification.go b/internal/middlewares/identity_verification.go
index 6189331e4..e4cbabce9 100644
--- a/internal/middlewares/identity_verification.go
+++ b/internal/middlewares/identity_verification.go
@@ -132,7 +132,7 @@ func IdentityVerificationFinish(args IdentityVerificationFinishArgs, next func(c
 		}
 
 		token, err := jwt.ParseWithClaims(finishBody.Token, &model.IdentityVerificationClaim{},
-			func(token *jwt.Token) (interface{}, error) {
+			func(token *jwt.Token) (any, error) {
 				return []byte(ctx.Configuration.JWTSecret), nil
 			})
 
diff --git a/internal/middlewares/types.go b/internal/middlewares/types.go
index 59cc95f77..58991a049 100644
--- a/internal/middlewares/types.go
+++ b/internal/middlewares/types.go
@@ -108,8 +108,8 @@ type IdentityVerificationFinishBody struct {
 
 // OKResponse model of a status OK response.
 type OKResponse struct {
-	Status string      `json:"status"`
-	Data   interface{} `json:"data,omitempty"`
+	Status string `json:"status"`
+	Data   any    `json:"data,omitempty"`
 }
 
 // ErrorResponse model of an error response.
diff --git a/internal/model/oidc.go b/internal/model/oidc.go
index c25e46eb4..99c778ac2 100644
--- a/internal/model/oidc.go
+++ b/internal/model/oidc.go
@@ -227,7 +227,7 @@ type OpenIDSession struct {
 	ChallengeID uuid.UUID `db:"challenge_id"`
 	ClientID    string
 
-	Extra map[string]interface{} `json:"extra"`
+	Extra map[string]any `json:"extra"`
 }
 
 // Clone copies the OpenIDSession to a new fosite.Session.
diff --git a/internal/model/types.go b/internal/model/types.go
index 674e6aa43..325e9485c 100644
--- a/internal/model/types.go
+++ b/internal/model/types.go
@@ -49,7 +49,7 @@ func (ip IP) Value() (value driver.Value, err error) {
 }
 
 // Scan is the IP implementation of the sql.Scanner.
-func (ip *IP) Scan(src interface{}) (err error) {
+func (ip *IP) Scan(src any) (err error) {
 	if src == nil {
 		return fmt.Errorf(errFmtScanNil, ip)
 	}
@@ -85,7 +85,7 @@ func (ip NullIP) Value() (value driver.Value, err error) {
 }
 
 // Scan is the NullIP implementation of the sql.Scanner.
-func (ip *NullIP) Scan(src interface{}) (err error) {
+func (ip *NullIP) Scan(src any) (err error) {
 	if src == nil {
 		ip.IP = nil
 		return nil
@@ -128,7 +128,7 @@ func (b Base64) Value() (value driver.Value, err error) {
 }
 
 // Scan is the Base64 implementation of the sql.Scanner.
-func (b *Base64) Scan(src interface{}) (err error) {
+func (b *Base64) Scan(src any) (err error) {
 	if src == nil {
 		return fmt.Errorf(errFmtScanNil, b)
 	}
@@ -158,7 +158,7 @@ type StartupCheck interface {
 type StringSlicePipeDelimited []string
 
 // Scan is the StringSlicePipeDelimited implementation of the sql.Scanner.
-func (s *StringSlicePipeDelimited) Scan(value interface{}) (err error) {
+func (s *StringSlicePipeDelimited) Scan(value any) (err error) {
 	var nullStr sql.NullString
 
 	if err = nullStr.Scan(value); err != nil {
diff --git a/internal/oidc/types_test.go b/internal/oidc/types_test.go
index 936804f83..04e4aec8f 100644
--- a/internal/oidc/types_test.go
+++ b/internal/oidc/types_test.go
@@ -44,7 +44,7 @@ func TestNewSessionWithAuthorizeRequest(t *testing.T) {
 		},
 	}
 
-	extra := map[string]interface{}{
+	extra := map[string]any{
 		"preferred_username": "john",
 	}
 
diff --git a/internal/utils/crypto.go b/internal/utils/crypto.go
index 853abf511..bf7ea44ff 100644
--- a/internal/utils/crypto.go
+++ b/internal/utils/crypto.go
@@ -122,7 +122,7 @@ func ConvertDERToPEM(der []byte, blockType PEMBlockType) ([]byte, error) {
 	return buf.Bytes(), nil
 }
 
-func publicKey(privateKey interface{}) interface{} {
+func publicKey(privateKey any) any {
 	switch k := privateKey.(type) {
 	case *rsa.PrivateKey:
 		return &k.PublicKey
@@ -137,7 +137,7 @@ func publicKey(privateKey interface{}) interface{} {
 
 // PrivateKeyBuilder interface for a private key builder.
 type PrivateKeyBuilder interface {
-	Build() (interface{}, error)
+	Build() (any, error)
 }
 
 // RSAKeyBuilder builder of RSA private key.
@@ -152,7 +152,7 @@ func (rkb RSAKeyBuilder) WithKeySize(bits int) RSAKeyBuilder {
 }
 
 // Build a RSA private key.
-func (rkb RSAKeyBuilder) Build() (interface{}, error) {
+func (rkb RSAKeyBuilder) Build() (any, error) {
 	return rsa.GenerateKey(rand.Reader, rkb.keySizeInBits)
 }
 
@@ -160,7 +160,7 @@ func (rkb RSAKeyBuilder) Build() (interface{}, error) {
 type Ed25519KeyBuilder struct{}
 
 // Build an Ed25519 private key.
-func (ekb Ed25519KeyBuilder) Build() (interface{}, error) {
+func (ekb Ed25519KeyBuilder) Build() (any, error) {
 	_, priv, err := ed25519.GenerateKey(rand.Reader)
 	return priv, err
 }
@@ -177,7 +177,7 @@ func (ekb ECDSAKeyBuilder) WithCurve(curve elliptic.Curve) ECDSAKeyBuilder {
 }
 
 // Build an ECDSA private key.
-func (ekb ECDSAKeyBuilder) Build() (interface{}, error) {
+func (ekb ECDSAKeyBuilder) Build() (any, error) {
 	return ecdsa.GenerateKey(ekb.curve, rand.Reader)
 }
 
@@ -213,7 +213,7 @@ func ParseX509FromPEM(data []byte) (key any, err error) {
 }
 
 // CastX509AsCertificate converts an interface to an *x509.Certificate.
-func CastX509AsCertificate(c interface{}) (certificate *x509.Certificate, ok bool) {
+func CastX509AsCertificate(c any) (certificate *x509.Certificate, ok bool) {
 	switch t := c.(type) {
 	case x509.Certificate:
 		return &t, true
@@ -225,7 +225,7 @@ func CastX509AsCertificate(c interface{}) (certificate *x509.Certificate, ok boo
 }
 
 // IsX509PrivateKey returns true if the provided interface is an rsa.PrivateKey, ecdsa.PrivateKey, or ed25519.PrivateKey.
-func IsX509PrivateKey(i interface{}) bool {
+func IsX509PrivateKey(i any) bool {
 	switch i.(type) {
 	case rsa.PrivateKey, *rsa.PrivateKey, ecdsa.PrivateKey, *ecdsa.PrivateKey, ed25519.PrivateKey, *ed25519.PrivateKey:
 		return true
@@ -328,7 +328,7 @@ func WriteCertificateBytesToPEM(cert []byte, path string, csr bool) (err error)
 }
 
 // WriteKeyToPEM writes a key that can be encoded as a PEM to a file in the PEM format.
-func WriteKeyToPEM(key interface{}, path string, pkcs8 bool) (err error) {
+func WriteKeyToPEM(key any, path string, pkcs8 bool) (err error) {
 	pemBlock, err := PEMBlockFromX509Key(key, pkcs8)
 	if err != nil {
 		return err
@@ -349,7 +349,7 @@ func WriteKeyToPEM(key interface{}, path string, pkcs8 bool) (err error) {
 }
 
 // PEMBlockFromX509Key turns a PublicKey or PrivateKey into a pem.Block.
-func PEMBlockFromX509Key(key interface{}, pkcs8 bool) (pemBlock *pem.Block, err error) {
+func PEMBlockFromX509Key(key any, pkcs8 bool) (pemBlock *pem.Block, err error) {
 	var (
 		data      []byte
 		blockType string
@@ -491,7 +491,7 @@ func EllipticCurveFromString(curveString string) (curve elliptic.Curve) {
 }
 
 // PublicKeyFromPrivateKey returns a PublicKey when provided with a PrivateKey.
-func PublicKeyFromPrivateKey(privateKey interface{}) (publicKey interface{}) {
+func PublicKeyFromPrivateKey(privateKey any) (publicKey any) {
 	switch k := privateKey.(type) {
 	case *rsa.PrivateKey:
 		return &k.PublicKey

From 998856b47c0accf56dbcdfc09bc7888aa2319190 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 5 Oct 2022 18:36:00 +1100
Subject: [PATCH 101/263] build(deps): update golang docker tag to v1.19.2
 (#4129)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 Dockerfile.coverage                                         | 2 +-
 Dockerfile.dev                                              | 2 +-
 internal/suites/example/compose/authelia/Dockerfile.backend | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile.coverage b/Dockerfile.coverage
index 110b772bd..e418f6b7f 100644
--- a/Dockerfile.coverage
+++ b/Dockerfile.coverage
@@ -15,7 +15,7 @@ RUN yarn global add pnpm && \
 # =======================================
 # ===== Build image for the backend =====
 # =======================================
-FROM golang:1.19.1-alpine AS builder-backend
+FROM golang:1.19.2-alpine AS builder-backend
 
 WORKDIR /go/src/app
 
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 26592e422..1d9871577 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -13,7 +13,7 @@ RUN yarn install --frozen-lockfile && yarn build
 # =======================================
 # ===== Build image for the backend =====
 # =======================================
-FROM golang:1.19.1-alpine AS builder-backend
+FROM golang:1.19.2-alpine AS builder-backend
 
 WORKDIR /go/src/app
 
diff --git a/internal/suites/example/compose/authelia/Dockerfile.backend b/internal/suites/example/compose/authelia/Dockerfile.backend
index 2df4f2bcd..7603bd8a0 100644
--- a/internal/suites/example/compose/authelia/Dockerfile.backend
+++ b/internal/suites/example/compose/authelia/Dockerfile.backend
@@ -1,4 +1,4 @@
-FROM golang:1.19.1-alpine
+FROM golang:1.19.2-alpine
 
 ARG USER_ID
 ARG GROUP_ID

From bf9176a07e81286b836bd4f20bc5ec4243a53d0f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 6 Oct 2022 03:40:43 +0000
Subject: [PATCH 102/263] build(deps): update dependency react-router-dom to
 v6.4.2 (#4138)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 22 +++++++++++-----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/web/package.json b/web/package.json
index 1f664279e..0024bb1c5 100644
--- a/web/package.json
+++ b/web/package.json
@@ -41,7 +41,7 @@
     "react-i18next": "11.18.6",
     "react-loading": "2.0.3",
     "react-otp-input": "2.4.0",
-    "react-router-dom": "6.4.1",
+    "react-router-dom": "6.4.2",
     "zxcvbn": "4.4.2"
   },
   "scripts": {
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index ed6a331e3..fb4b2902b 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -55,7 +55,7 @@ specifiers:
   react-i18next: 11.18.6
   react-loading: 2.0.3
   react-otp-input: 2.4.0
-  react-router-dom: 6.4.1
+  react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
   vite: 3.1.4
@@ -89,7 +89,7 @@ dependencies:
   react-i18next: 11.18.6_ulhmqqxshznzmtuvahdi5nasbq
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
-  react-router-dom: 6.4.1_biqbaboplfbrettd7655fr4n2y
+  react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
   zxcvbn: 4.4.2
 
 devDependencies:
@@ -3045,8 +3045,8 @@ packages:
     resolution: {integrity: sha512-50/17A98tWUfQ176raKiOGXuYpLyyVMkxxG6oylzL3BPOlA6ADGdK7EYunSa4I064xerltq9TGXs8HmOk5E+vw==}
     dev: false
 
-  /@remix-run/router/1.0.1:
-    resolution: {integrity: sha512-eBV5rvW4dRFOU1eajN7FmYxjAIVz/mRHgUE9En9mBn6m3mulK3WTR5C3iQhL9MZ14rWAq+xOlEaCkDiW0/heOg==}
+  /@remix-run/router/1.0.2:
+    resolution: {integrity: sha512-GRSOFhJzjGN+d4sKHTMSvNeUPoZiDHWmRnXfzaxrqe7dE/Nzlc8BiMSJdLDESZlndM7jIUrZ/F4yWqVYlI0rwQ==}
     engines: {node: '>=14'}
     dev: false
 
@@ -8087,26 +8087,26 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /react-router-dom/6.4.1_biqbaboplfbrettd7655fr4n2y:
-    resolution: {integrity: sha512-MY7NJCrGNVJtGp8ODMOBHu20UaIkmwD2V3YsAOUQoCXFk7Ppdwf55RdcGyrSj+ycSL9Uiwrb3gTLYSnzcRoXww==}
+  /react-router-dom/6.4.2_biqbaboplfbrettd7655fr4n2y:
+    resolution: {integrity: sha512-yM1kjoTkpfjgczPrcyWrp+OuQMyB1WleICiiGfstnQYo/S8hPEEnVjr/RdmlH6yKK4Tnj1UGXFSa7uwAtmDoLQ==}
     engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
       react-dom: '>=16.8 || 18'
     dependencies:
-      '@remix-run/router': 1.0.1
+      '@remix-run/router': 1.0.2
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
-      react-router: 6.4.1_react@18.2.0
+      react-router: 6.4.2_react@18.2.0
     dev: false
 
-  /react-router/6.4.1_react@18.2.0:
-    resolution: {integrity: sha512-OJASKp5AykDWFewgWUim1vlLr7yfD4vO/h+bSgcP/ix8Md+LMHuAjovA74MQfsfhQJGGN1nHRhwS5qQQbbBt3A==}
+  /react-router/6.4.2_react@18.2.0:
+    resolution: {integrity: sha512-Rb0BAX9KHhVzT1OKhMvCDMw776aTYM0DtkxqUBP8dNBom3mPXlfNs76JNGK8wKJ1IZEY1+WGj+cvZxHVk/GiKw==}
     engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
     dependencies:
-      '@remix-run/router': 1.0.1
+      '@remix-run/router': 1.0.2
       react: 18.2.0
     dev: false
 

From 20b00b26a747d3f6c7d27c88335cef60b1602138 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 6 Oct 2022 15:43:18 +0000
Subject: [PATCH 103/263] build(deps): update dependency broadcast-channel to
 v4.18.0 (#4140)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/web/package.json b/web/package.json
index 0024bb1c5..43be51df9 100644
--- a/web/package.json
+++ b/web/package.json
@@ -29,7 +29,7 @@
     "@mui/material": "5.10.8",
     "@mui/styles": "5.10.8",
     "axios": "0.27.2",
-    "broadcast-channel": "4.17.0",
+    "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
     "i18next": "21.9.2",
     "i18next-browser-languagedetector": "6.1.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index fb4b2902b..1f2a209ee 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -25,7 +25,7 @@ specifiers:
   '@typescript-eslint/parser': 5.39.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
-  broadcast-channel: 4.17.0
+  broadcast-channel: 4.18.0
   classnames: 2.3.2
   esbuild: 0.15.10
   esbuild-jest: 0.5.0
@@ -77,7 +77,7 @@ dependencies:
   '@mui/material': 5.10.8_ikcgkdnp4bn3rgptamntbhbo7e
   '@mui/styles': 5.10.8_iapumuv4e6jcjznwuxpf4tt22e
   axios: 0.27.2
-  broadcast-channel: 4.17.0
+  broadcast-channel: 4.18.0
   classnames: 2.3.2
   i18next: 21.9.2
   i18next-browser-languagedetector: 6.1.5
@@ -4239,10 +4239,10 @@ packages:
       fill-range: 7.0.1
     dev: true
 
-  /broadcast-channel/4.17.0:
-    resolution: {integrity: sha512-r2GSQMNgZv7eAsbdsu9xofSjc3J2diCQTPkSuyVhLBfx8fylLCVhi5KheuhuAQBJNd4pxqUyz9U6rvdnt7GZng==}
+  /broadcast-channel/4.18.0:
+    resolution: {integrity: sha512-jxCERZ/fV8LJUVWSGC8U687cYTB67XWn/DVcsYQ9MNpL3Lo2/x0pq8QcfSNTDKBQjAxgp7JQO5pOR8Gcw73Ajw==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       oblivious-set: 1.1.1
       p-queue: 6.6.2
       rimraf: 3.0.2
@@ -9099,7 +9099,7 @@ packages:
   /unload/2.3.1:
     resolution: {integrity: sha512-MUZEiDqvAN9AIDRbbBnVYVvfcR6DrjCqeU2YQMmliFZl9uaBUjTkhuDQkBiyAy8ad5bx1TXVbqZ3gg7namsWjA==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       detect-node: 2.1.0
     dev: false
 

From 5234104b0002f1b5aaef6966146c6edbb739b617 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 6 Oct 2022 19:13:06 +0000
Subject: [PATCH 104/263] build(deps): update dependency i18next to v21.10.0
 (#4141)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 16 ++++++++--------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/web/package.json b/web/package.json
index 43be51df9..d9e5722d9 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
-    "i18next": "21.9.2",
+    "i18next": "21.10.0",
     "i18next-browser-languagedetector": "6.1.5",
     "i18next-http-backend": "1.4.4",
     "qrcode.react": "3.1.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 1f2a209ee..780814e9f 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -40,7 +40,7 @@ specifiers:
   eslint-plugin-react: 7.31.8
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
-  i18next: 21.9.2
+  i18next: 21.10.0
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.4
   jest: 29.1.2
@@ -79,14 +79,14 @@ dependencies:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  i18next: 21.9.2
+  i18next: 21.10.0
   i18next-browser-languagedetector: 6.1.5
   i18next-http-backend: 1.4.4
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 11.18.6_ulhmqqxshznzmtuvahdi5nasbq
+  react-i18next: 11.18.6_vfm63zmruocgezzfl2v26zlzpy
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
@@ -6115,10 +6115,10 @@ packages:
       - encoding
     dev: false
 
-  /i18next/21.9.2:
-    resolution: {integrity: sha512-00fVrLQOwy45nm3OtC9l1WiLK3nJlIYSljgCt0qzTaAy65aciMdRy9GsuW+a2AtKtdg9/njUGfRH30LRupV7ZQ==}
+  /i18next/21.10.0:
+    resolution: {integrity: sha512-YeuIBmFsGjUfO3qBmMOc0rQaun4mIpGKET5WDwvu8lU7gvwpcariZLNtL0Fzj+zazcHUrlXHiptcFhBMFaxzfg==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
     dev: false
 
   /iconv-lite/0.6.3:
@@ -8030,7 +8030,7 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/11.18.6_ulhmqqxshznzmtuvahdi5nasbq:
+  /react-i18next/11.18.6_vfm63zmruocgezzfl2v26zlzpy:
     resolution: {integrity: sha512-yHb2F9BiT0lqoQDt8loZ5gWP331GwctHz9tYQ8A2EIEUu+CcEdjBLQWli1USG3RdWQt3W+jqQLg/d4rrQR96LA==}
     peerDependencies:
       i18next: '>= 19.0.0'
@@ -8045,7 +8045,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       html-parse-stringify: 3.0.1
-      i18next: 21.9.2
+      i18next: 21.10.0
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false

From b3b6664964074960da05e07d7185fa1060353255 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 6 Oct 2022 22:20:12 +0000
Subject: [PATCH 105/263] build(deps): update dependency
 i18next-browser-languagedetector to v6.1.6 (#4143)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index d9e5722d9..c6474c885 100644
--- a/web/package.json
+++ b/web/package.json
@@ -32,7 +32,7 @@
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
     "i18next": "21.10.0",
-    "i18next-browser-languagedetector": "6.1.5",
+    "i18next-browser-languagedetector": "6.1.6",
     "i18next-http-backend": "1.4.4",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 780814e9f..56250c07e 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -41,7 +41,7 @@ specifiers:
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
   i18next: 21.10.0
-  i18next-browser-languagedetector: 6.1.5
+  i18next-browser-languagedetector: 6.1.6
   i18next-http-backend: 1.4.4
   jest: 29.1.2
   jest-environment-jsdom: 29.1.2
@@ -80,7 +80,7 @@ dependencies:
   broadcast-channel: 4.18.0
   classnames: 2.3.2
   i18next: 21.10.0
-  i18next-browser-languagedetector: 6.1.5
+  i18next-browser-languagedetector: 6.1.6
   i18next-http-backend: 1.4.4
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
@@ -6101,10 +6101,10 @@ packages:
     resolution: {integrity: sha512-ygGZLjmXfPHj+ZWh6LwbC37l43MhfztxetbFCoYTM2VjkIUpeHgSNn7QIyVFj7YQ1Wl9Cbw5sholVJPzWvC2MQ==}
     dev: false
 
-  /i18next-browser-languagedetector/6.1.5:
-    resolution: {integrity: sha512-11t7b39oKeZe4uyMxLSPnfw28BCPNLZgUk7zyufex0zKXZ+Bv+JnmJgoB+IfQLZwDt1d71PM8vwBX1NCgliY3g==}
+  /i18next-browser-languagedetector/6.1.6:
+    resolution: {integrity: sha512-5ZErazMh/8ZF5bNmJ9OCvSTzMXzefK9vJMtXekXUkwZ6ZX3XUSagWseQgtbWjo8iiZyCP2lxveKwIBikfVRGDg==}
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
     dev: false
 
   /i18next-http-backend/1.4.4:

From a059843dff8892ba0b3b0e37626d2e2003e467e8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 7 Oct 2022 01:15:00 +0000
Subject: [PATCH 106/263] build(deps): update dependency @types/jest to v29.1.2
 (#4142)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 76 +++++-----------------------------------------
 2 files changed, 8 insertions(+), 70 deletions(-)

diff --git a/web/package.json b/web/package.json
index c6474c885..10b9ca3a9 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.1.1",
+    "@types/jest": "29.1.2",
     "@types/node": "18.8.2",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 56250c07e..f4f6e85d9 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.8
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.1.1
+  '@types/jest': 29.1.2
   '@types/node': 18.8.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -97,7 +97,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.1.1
+  '@types/jest': 29.1.2
   '@types/node': 18.8.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -2566,13 +2566,6 @@ packages:
       jest-mock: 29.1.2
     dev: true
 
-  /@jest/expect-utils/29.1.0:
-    resolution: {integrity: sha512-YcD5CF2beqfoB07WqejPzWq1/l+zT3SgGwcqqIaPPG1DHFn/ea8MWWXeqV3KKMhTaOM1rZjlYplj1GQxR0XxKA==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      jest-get-type: 29.0.0
-    dev: true
-
   /@jest/expect-utils/29.1.2:
     resolution: {integrity: sha512-4a48bhKfGj/KAH39u0ppzNTABXQ8QPccWAFUFobWBaEMSMp+sB31Z2fK/l47c4a/Mu1po2ffmfAIPxXbVTXdtg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -3358,11 +3351,11 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.1.1:
-    resolution: {integrity: sha512-U9Ey07dGWl6fUFaIaUQUKWG5NoKi/zizeVQCGV8s4nSU0jPgqphVZvS64+8BtWYvrc3ZGw6wo943NSYPxkrp/g==}
+  /@types/jest/29.1.2:
+    resolution: {integrity: sha512-y+nlX0h87U0R+wsGn6EBuoRWYyv3KFtwRNP3QWp9+k2tJ2/bqcGS3UxD7jgT+tiwJWWq3UsyV4Y+T6rsMT4XMg==}
     dependencies:
-      expect: 29.1.0
-      pretty-format: 29.1.0
+      expect: 29.1.2
+      pretty-format: 29.1.2
     dev: true
 
   /@types/jsdom/20.0.0:
@@ -3448,7 +3441,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.1.1
+      '@types/jest': 29.1.2
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -5581,17 +5574,6 @@ packages:
       - supports-color
     dev: true
 
-  /expect/29.1.0:
-    resolution: {integrity: sha512-1NCfR0FEArn9Vq1KEjhPd1rggRLiWgo87gfMK4iKn6DcVzJBRMyDNX22hyND5KiSRPIPQ5KtsY6HLxsQ0MU86w==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/expect-utils': 29.1.0
-      jest-get-type: 29.0.0
-      jest-matcher-utils: 29.1.0
-      jest-message-util: 29.1.0
-      jest-util: 29.1.2
-    dev: true
-
   /expect/29.1.2:
     resolution: {integrity: sha512-AuAGn1uxva5YBbBlXb+2JPxJRuemZsmlGcapPXWNSBNsQtAULfjioREGBWuI0EOvYUKjDnrCy8PW5Zlr1md5mw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6602,16 +6584,6 @@ packages:
       - supports-color
     dev: true
 
-  /jest-diff/29.1.0:
-    resolution: {integrity: sha512-ZJyWG30jpVHwxLs8xxR1so4tz6lFARNztnFlxssFpQdakaW0isSx9rAKs/6aQUKQDZ/DgSpY6HjUGLO9xkNdRw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      diff-sequences: 29.0.0
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.2
-    dev: true
-
   /jest-diff/29.1.2:
     resolution: {integrity: sha512-4GQts0aUopVvecIT4IwD/7xsBaMhKTYoM4/njE/aVw9wpw+pIUVp8Vab/KnSzSilr84GnLBkaP3JLDnQYCKqVQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6726,16 +6698,6 @@ packages:
       pretty-format: 29.1.2
     dev: true
 
-  /jest-matcher-utils/29.1.0:
-    resolution: {integrity: sha512-pfthsLu27kZg+T1XTUGvox0r3gP3KtqdMPliVd/bs6iDrZ9Z6yJgLbw6zNc4DHtCcyzq9UW0jmszCX8DdFU/wA==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.1.0
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.0
-    dev: true
-
   /jest-matcher-utils/29.1.2:
     resolution: {integrity: sha512-MV5XrD3qYSW2zZSHRRceFzqJ39B2z11Qv0KPyZYxnzDHFeYZGJlgGi0SW+IXSJfOewgJp/Km/7lpcFT+cgZypw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6746,21 +6708,6 @@ packages:
       pretty-format: 29.1.2
     dev: true
 
-  /jest-message-util/29.1.0:
-    resolution: {integrity: sha512-NzGXD9wgCxUy20sIvyOsSA/KzQmkmagOVGE5LnT2juWn+hB88gCQr8N/jpu34CXRIXmV7INwrQVVwhnh72pY5A==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@babel/code-frame': 7.18.6
-      '@jest/types': 29.1.2
-      '@types/stack-utils': 2.0.1
-      chalk: 4.1.2
-      graceful-fs: 4.2.10
-      micromatch: 4.0.5
-      pretty-format: 29.1.0
-      slash: 3.0.0
-      stack-utils: 2.0.5
-    dev: true
-
   /jest-message-util/29.1.2:
     resolution: {integrity: sha512-9oJ2Os+Qh6IlxLpmvshVbGUiSkZVc2FK+uGOm6tghafnB2RyjKAxMZhtxThRMxfX1J1SOMhTn9oK3/MutRWQJQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -7940,15 +7887,6 @@ packages:
       react-is: 17.0.2
     dev: true
 
-  /pretty-format/29.1.0:
-    resolution: {integrity: sha512-dZ21z0UjKVSiEkrPAt2nJnGfrtYMFBlNW4wTkJsIp9oB5A8SUQ8DuJ9EUgAvYyNfMeoGmKiDnpJvM489jkzdSQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/schemas': 29.0.0
-      ansi-styles: 5.2.0
-      react-is: 18.2.0
-    dev: true
-
   /pretty-format/29.1.2:
     resolution: {integrity: sha512-CGJ6VVGXVRP2o2Dorl4mAwwvDWT25luIsYhkyVQW32E4nL+TgW939J7LlKT/npq5Cpq6j3s+sy+13yk7xYpBmg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}

From 3107e493e7a2626566dd711993baedaac7fab233 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 7 Oct 2022 13:52:01 +1100
Subject: [PATCH 107/263] refactor: adjust defaults (#4137)

* refactor: adjust defaults

* refactor: adjust level

* refactor: adjust level

* refactor: fix templates
---
 config.template.yml                                   | 8 ++++----
 docs/content/en/configuration/miscellaneous/server.md | 4 ++--
 docs/content/en/configuration/prologue/common.md      | 4 ++--
 docs/content/en/configuration/telemetry/metrics.md    | 4 ++--
 internal/configuration/config.template.yml            | 8 ++++----
 internal/configuration/schema/server.go               | 4 ++--
 internal/configuration/schema/telemetry.go            | 4 ++--
 internal/server/server.go                             | 2 +-
 8 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index 9fb6c8e72..ef0a3bd35 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -96,10 +96,10 @@ server:
   # timeouts:
 
     ## Read timeout.
-    # read: 2s
+    # read: 6s
 
     ## Write timeout.
-    # write: 2s
+    # write: 6s
 
     ## Idle timeout.
     # idle: 30s
@@ -148,10 +148,10 @@ telemetry:
     # timeouts:
 
       ## Read timeout.
-      # read: 2s
+      # read: 6s
 
       ## Write timeout.
-      # write: 2s
+      # write: 6s
 
       ## Idle timeout.
       # idle: 30s
diff --git a/docs/content/en/configuration/miscellaneous/server.md b/docs/content/en/configuration/miscellaneous/server.md
index 2143bd390..4d6202c26 100644
--- a/docs/content/en/configuration/miscellaneous/server.md
+++ b/docs/content/en/configuration/miscellaneous/server.md
@@ -35,8 +35,8 @@ server:
     read: 4096
     write: 4096
   timeouts:
-    read: 10s
-    write: 10s
+    read: 6s
+    write: 6s
     idle: 10s
 ```
 
diff --git a/docs/content/en/configuration/prologue/common.md b/docs/content/en/configuration/prologue/common.md
index fc3469331..4c37a16c5 100644
--- a/docs/content/en/configuration/prologue/common.md
+++ b/docs/content/en/configuration/prologue/common.md
@@ -152,7 +152,7 @@ Configures the maximum response size. The default of 4096 is generally sufficien
 
 ### read
 
-{{< confkey type="duration" default="2s" required="no" >}}
+{{< confkey type="duration" default="6s" required="no" >}}
 
 *__Note:__ This setting uses the [duration notation format](#duration-notation-format). Please see the
 [common options](#duration-notation-format) documentation for information on this format.*
@@ -161,7 +161,7 @@ Configures the server read timeout.
 
 ### write
 
-{{< confkey type="duration" default="2s" required="no" >}}
+{{< confkey type="duration" default="6s" required="no" >}}
 
 *__Note:__ This setting uses the [duration notation format](#duration-notation-format). Please see the
 [common options](#duration-notation-format) documentation for information on this format.*
diff --git a/docs/content/en/configuration/telemetry/metrics.md b/docs/content/en/configuration/telemetry/metrics.md
index 42c209082..4917637e1 100644
--- a/docs/content/en/configuration/telemetry/metrics.md
+++ b/docs/content/en/configuration/telemetry/metrics.md
@@ -25,8 +25,8 @@ telemetry:
       read: 4096
       write: 4096
     timeouts:
-      read: 2s
-      write: 2s
+      read: 6s
+      write: 6s
       idle: 30s
 ```
 
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 9fb6c8e72..ef0a3bd35 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -96,10 +96,10 @@ server:
   # timeouts:
 
     ## Read timeout.
-    # read: 2s
+    # read: 6s
 
     ## Write timeout.
-    # write: 2s
+    # write: 6s
 
     ## Idle timeout.
     # idle: 30s
@@ -148,10 +148,10 @@ telemetry:
     # timeouts:
 
       ## Read timeout.
-      # read: 2s
+      # read: 6s
 
       ## Write timeout.
-      # write: 2s
+      # write: 6s
 
       ## Idle timeout.
       # idle: 30s
diff --git a/internal/configuration/schema/server.go b/internal/configuration/schema/server.go
index 57073ab1a..c6ad3e5d5 100644
--- a/internal/configuration/schema/server.go
+++ b/internal/configuration/schema/server.go
@@ -42,8 +42,8 @@ var DefaultServerConfiguration = ServerConfiguration{
 		Write: 4096,
 	},
 	Timeouts: ServerTimeouts{
-		Read:  time.Second * 2,
-		Write: time.Second * 2,
+		Read:  time.Second * 6,
+		Write: time.Second * 6,
 		Idle:  time.Second * 30,
 	},
 }
diff --git a/internal/configuration/schema/telemetry.go b/internal/configuration/schema/telemetry.go
index 3de20bc3d..3b0dcf3b5 100644
--- a/internal/configuration/schema/telemetry.go
+++ b/internal/configuration/schema/telemetry.go
@@ -28,8 +28,8 @@ var DefaultTelemetryConfig = TelemetryConfig{
 			Write: 4096,
 		},
 		Timeouts: ServerTimeouts{
-			Read:  time.Second * 2,
-			Write: time.Second * 2,
+			Read:  time.Second * 6,
+			Write: time.Second * 6,
 			Idle:  time.Second * 30,
 		},
 	},
diff --git a/internal/server/server.go b/internal/server/server.go
index 37e6f6a79..760cbe50e 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -28,7 +28,7 @@ func CreateDefaultServer(config schema.Configuration, providers middlewares.Prov
 		ReadTimeout:           config.Server.Timeouts.Read,
 		WriteTimeout:          config.Server.Timeouts.Write,
 		IdleTimeout:           config.Server.Timeouts.Idle,
-		Logger:                logging.LoggerPrintf(logrus.WarnLevel),
+		Logger:                logging.LoggerPrintf(logrus.DebugLevel),
 	}
 
 	address := net.JoinHostPort(config.Server.Host, strconv.Itoa(config.Server.Port))

From 3f5f691ea03e9d0decd2540285602b0b90661ada Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 7 Oct 2022 05:50:10 +0000
Subject: [PATCH 108/263] build(deps): update dependency vite to v3.1.6 (#4139)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 10b9ca3a9..3c2935070 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.1.4",
+    "vite": "3.1.6",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index f4f6e85d9..65a59ebf3 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.1.4
+  vite: 3.1.6
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
   '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.4
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.6
   esbuild: 0.15.10
   esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.24.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.1.4
-  vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.4
+  vite: 3.1.6
+  vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.6
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.4
-  vite-tsconfig-paths: 3.5.1_vite@3.1.4
+  vite-plugin-svgr: 2.2.1_vite@3.1.6
+  vite-tsconfig-paths: 3.5.1_vite@3.1.6
 
 packages:
 
@@ -3667,7 +3667,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.4:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.6:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3680,7 +3680,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.4
+      vite: 3.1.6
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9100,7 +9100,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.24.0+vite@3.1.4:
+  /vite-plugin-eslint/1.8.1_eslint@8.24.0+vite@3.1.6:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9110,7 +9110,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.24.0
       rollup: 2.78.0
-      vite: 3.1.4
+      vite: 3.1.6
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9124,19 +9124,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.4:
+  /vite-plugin-svgr/2.2.1_vite@3.1.6:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.4
+      vite: 3.1.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.1_vite@3.1.4:
+  /vite-tsconfig-paths/3.5.1_vite@3.1.6:
     resolution: {integrity: sha512-t7cPvDMDxOCUxxNLqngXiX+L6jPYBr+eMgkeVadknxBb89d2s1aejz+wFEep010VfXjGVAUWGEFPe1fkRYTFvg==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9145,13 +9145,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.4
+      vite: 3.1.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.4:
-    resolution: {integrity: sha512-JoQI08aBjY9lycL7jcEq4p9o1xUjq5aRvdH4KWaXtkSx7e7RpAh9D3IjzDWRD4Fg44LS3oDAIOG/Kq1L+82psA==}
+  /vite/3.1.6:
+    resolution: {integrity: sha512-qMXIwnehvvcK5XfJiXQUiTxoYAEMKhM+jqCY6ZSTKFBKu1hJnAKEzP3AOcnTerI0cMZYAaJ4wpW1wiXLMDt4mA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From 8385dcd94beb351a2fb7f97ce90b16372dcfe5db Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 7 Oct 2022 08:24:06 +0000
Subject: [PATCH 109/263] build(deps): update dependency @types/node to v18.8.3
 (#4144)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 76 +++++++++++++++++++++++-----------------------
 2 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/web/package.json b/web/package.json
index 3c2935070..5907996ec 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.2",
-    "@types/node": "18.8.2",
+    "@types/node": "18.8.3",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 65a59ebf3..29d43f575 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
-  '@types/node': 18.8.2
+  '@types/node': 18.8.3
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.2
-  '@types/node': 18.8.2
+  '@types/node': 18.8.3
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.8_eslint@8.24.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
   husky: 8.0.1
-  jest: 29.1.2_@types+node@18.8.2
+  jest: 29.1.2_@types+node@18.8.3
   jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.1.2
@@ -2507,7 +2507,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2528,14 +2528,14 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.1.2_@types+node@18.8.2
+      jest-config: 29.1.2_@types+node@18.8.3
       jest-haste-map: 29.1.2
       jest-message-util: 29.1.2
       jest-regex-util: 29.0.0
@@ -2562,7 +2562,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       jest-mock: 29.1.2
     dev: true
 
@@ -2589,7 +2589,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       jest-message-util: 29.1.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
@@ -2622,7 +2622,7 @@ packages:
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2733,7 +2733,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2745,7 +2745,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3332,7 +3332,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3361,7 +3361,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3382,8 +3382,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.8.2:
-    resolution: {integrity: sha512-cRMwIgdDN43GO4xMWAfJAecYn8wV4JbsOGHNfNUIDiuYkUYAR5ec4Rj7IO2SAhFPEfpPtLtUTbbny/TCT7aDwA==}
+  /@types/node/18.8.3:
+    resolution: {integrity: sha512-0os9vz6BpGwxGe9LOhgP/ncvYN5Tx1fNcd2TM3rD/aCGBkysb+ZWpXEocG24h6ZzOi13+VB8HndAQFezsSOw1w==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5296,7 +5296,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
       '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
       eslint: 8.24.0
-      jest: 29.1.2_@types+node@18.8.2
+      jest: 29.1.2_@types+node@18.8.3
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6498,7 +6498,7 @@ packages:
       '@jest/expect': 29.1.2
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6517,7 +6517,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.2_@types+node@18.8.2:
+  /jest-cli/29.1.2_@types+node@18.8.3:
     resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6534,7 +6534,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.2_@types+node@18.8.2
+      jest-config: 29.1.2_@types+node@18.8.3
       jest-util: 29.1.2
       jest-validate: 29.1.2
       prompts: 2.4.2
@@ -6545,7 +6545,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.2_@types+node@18.8.2:
+  /jest-config/29.1.2_@types+node@18.8.3:
     resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6560,7 +6560,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       babel-jest: 29.1.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6620,7 +6620,7 @@ packages:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
       '@types/jsdom': 20.0.0
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       jest-mock: 29.1.2
       jest-util: 29.1.2
       jsdom: 20.0.0
@@ -6638,7 +6638,7 @@ packages:
       '@jest/environment': 29.1.2
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       jest-mock: 29.1.2
       jest-util: 29.1.2
     dev: true
@@ -6654,7 +6654,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6677,7 +6677,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6728,7 +6728,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       jest-util: 29.1.2
     dev: true
 
@@ -6788,7 +6788,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6819,7 +6819,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6842,7 +6842,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       graceful-fs: 4.2.10
     dev: true
 
@@ -6887,7 +6887,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6899,7 +6899,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6926,7 +6926,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.2_@types+node@18.8.2
+      jest: 29.1.2_@types+node@18.8.3
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6940,7 +6940,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6954,7 +6954,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6966,7 +6966,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6975,13 +6975,13 @@ packages:
     resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.8.2
+      '@types/node': 18.8.3
       jest-util: 29.1.2
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.2_@types+node@18.8.2:
+  /jest/29.1.2_@types+node@18.8.3:
     resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6994,7 +6994,7 @@ packages:
       '@jest/core': 29.1.2
       '@jest/types': 29.1.2
       import-local: 3.1.0
-      jest-cli: 29.1.2_@types+node@18.8.2
+      jest-cli: 29.1.2_@types+node@18.8.3
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From f119c6e9cdb60788780af91988b108a9e7216810 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 7 Oct 2022 17:04:06 +0000
Subject: [PATCH 110/263] build(deps): update dependency
 i18next-browser-languagedetector to v6.1.8 (#4146)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 5907996ec..5b70bee1b 100644
--- a/web/package.json
+++ b/web/package.json
@@ -32,7 +32,7 @@
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
     "i18next": "21.10.0",
-    "i18next-browser-languagedetector": "6.1.6",
+    "i18next-browser-languagedetector": "6.1.8",
     "i18next-http-backend": "1.4.4",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 29d43f575..378d336df 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -41,7 +41,7 @@ specifiers:
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
   i18next: 21.10.0
-  i18next-browser-languagedetector: 6.1.6
+  i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
   jest: 29.1.2
   jest-environment-jsdom: 29.1.2
@@ -80,7 +80,7 @@ dependencies:
   broadcast-channel: 4.18.0
   classnames: 2.3.2
   i18next: 21.10.0
-  i18next-browser-languagedetector: 6.1.6
+  i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
@@ -6083,8 +6083,8 @@ packages:
     resolution: {integrity: sha512-ygGZLjmXfPHj+ZWh6LwbC37l43MhfztxetbFCoYTM2VjkIUpeHgSNn7QIyVFj7YQ1Wl9Cbw5sholVJPzWvC2MQ==}
     dev: false
 
-  /i18next-browser-languagedetector/6.1.6:
-    resolution: {integrity: sha512-5ZErazMh/8ZF5bNmJ9OCvSTzMXzefK9vJMtXekXUkwZ6ZX3XUSagWseQgtbWjo8iiZyCP2lxveKwIBikfVRGDg==}
+  /i18next-browser-languagedetector/6.1.8:
+    resolution: {integrity: sha512-Svm+MduCElO0Meqpj1kJAriTC6OhI41VhlT/A0UPjGoPZBhAHIaGE5EfsHlTpgdH09UVX7rcc72pSDDBeKSQQA==}
     dependencies:
       '@babel/runtime': 7.19.0
     dev: false

From ef0e4975fd2bdc9a17129ebe83bb42c9cbd22434 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 8 Oct 2022 12:43:26 +1100
Subject: [PATCH 111/263] docs: add nginx proxy manager details (#4147)

Adds NPM docs.
---
 .../proxies/fowarded-headers/index.md         |   4 +-
 .../proxies/nginx-proxy-manager.md            |  56 -----
 .../nginx-proxy-manager/authelia.advanced.png | Bin 0 -> 20564 bytes
 .../nginx-proxy-manager/authelia.details.png  | Bin 0 -> 16277 bytes
 .../proxies/nginx-proxy-manager/index.md      | 223 ++++++++++++++++++
 .../nginx-proxy-manager/nextcloud.details.png | Bin 0 -> 16587 bytes
 .../protectedapp.advanced.png                 | Bin 0 -> 22782 bytes
 .../nginx-proxy-manager/proxyhosts.png        | Bin 0 -> 23339 bytes
 docs/content/en/integration/proxies/nginx.md  |  24 +-
 9 files changed, 248 insertions(+), 59 deletions(-)
 delete mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager.md
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/authelia.advanced.png
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/authelia.details.png
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/index.md
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/nextcloud.details.png
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/protectedapp.advanced.png
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/proxyhosts.png

diff --git a/docs/content/en/integration/proxies/fowarded-headers/index.md b/docs/content/en/integration/proxies/fowarded-headers/index.md
index 733f6bf92..9e7dbaa5b 100644
--- a/docs/content/en/integration/proxies/fowarded-headers/index.md
+++ b/docs/content/en/integration/proxies/fowarded-headers/index.md
@@ -70,8 +70,8 @@ Steps:
 10. Set the `Then` section `Header name` to `X-Forwarded-For`.
 11. Click `Save`.
 
-{{< figure src="cloudflare_1.png" alt="Steps 1 to 4" width="736" style="padding-right: 10px" >}}
-{{< figure src="cloudflare_2.png" alt="Steps 5 to 11" width="736" style="padding-right: 10px" >}}
+{{< figure src="cloudflare_1.png" alt="Steps 1 to 4" width="736" >}}
+{{< figure src="cloudflare_2.png" alt="Steps 5 to 11" width="736" >}}
 
 Criteria:
 
diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager.md b/docs/content/en/integration/proxies/nginx-proxy-manager.md
deleted file mode 100644
index 07c33f6ca..000000000
--- a/docs/content/en/integration/proxies/nginx-proxy-manager.md
+++ /dev/null
@@ -1,56 +0,0 @@
----
-title: "NGINX Proxy Manager"
-description: "An integration guide for Authelia and the NGINX Proxy Manager reverse proxy"
-lead: "A guide on integrating Authelia with NGINX Proxy Manager."
-date: 2022-06-15T17:51:47+10:00
-draft: false
-images: []
-menu:
-  integration:
-    parent: "proxies"
-weight: 352
-toc: true
-aliases:
-  - /i/npm
----
-
-[NGINX Proxy Manager] is supported by __Authelia__. It's a [NGINX] proxy with a configuration UI.
-
-*__Important:__ When using these guides it's important to recognize that we cannot provide a guide for every possible
-method of deploying a proxy. These guides show a suggested setup only and you need to understand the proxy
-configuration and customize it to your needs. To-that-end we include links to the official proxy documentation
-throughout this documentation and in the [See Also](#see-also) section.*
-
-## UNDER CONSTRUCTION
-
-While this proxy is supported we don't have any specific documentation for it at the present time. Please see the
-[NGINX integration documentation](nginx.md) for hints on how to configure this.
-
-## Get Started
-
-It's __*strongly recommended*__ that users setting up *Authelia* for the first time take a look at our
-[Get Started](../prologue/get-started.md) guide. This takes you through various steps which are essential to
-bootstrapping *Authelia*.
-
-## Requirements
-
-[NGINX Proxy Manager] supports the required [NGINX](nginx.md#requirements) requirements for __Authelia__ out-of-the-box.
-
-## Trusted Proxies
-
-*__Important:__ You should read the [Forwarded Headers] section and this section as part of any proxy configuration.
-Especially if you have never read it before.*
-
-To configure trusted proxies for [NGINX Proxy Manager] see the [NGINX] section on
-[Trusted Proxies](nginx.md#trusted-proxies). Adapting this to [NGINX Proxy Manager] is beyond the scope of
-this documentation.
-
-## See Also
-
-* [NGINX Proxy Manager Documentation](https://nginxproxymanager.com/setup/)
-* [NGINX ngx_http_auth_request_module Module Documentation](https://nginx.org/en/docs/http/ngx_http_auth_request_module.html)
-* [Forwarded Headers]
-
-[NGINX Proxy Manager]: https://nginxproxymanager.com/
-[NGINX]: https://www.nginx.com/
-[Forwarded Headers]: fowarded-headers
diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/authelia.advanced.png b/docs/content/en/integration/proxies/nginx-proxy-manager/authelia.advanced.png
new file mode 100644
index 0000000000000000000000000000000000000000..12eda80a666322f93132dc4b29a7460190303e2f
GIT binary patch
literal 20564
zcmd?QcT|&G_bwVlL8ZBEs5IRcRH`6EYDBi8B1Az1q$EfaAs{UfAPGfeyDg}+ASI$8
zA|>=t69E;0P^1M25D^F^2?!yHNl0?zcYf!d`^P<FeBU|e{&n9m7~y@hUglbhS)MuP
zvmRZyw^7)6XeR&wP`GmWF9!fXiUt5|@!2jTdGbj*F+uVn74Bej0Z`GWx+J;T>ThLd
z1pri~%58dWlicsPf7vx008s4s{Ug;G^4<pk054tn%j#ydCv!>xr}jB-Re%63AfNcy
zolPk<u~C2e?2SwKvE56zC$)OjmM+~gFzd$LPucO8$-#NX+8OAUj%<wii}N4bLO&kq
zH{Z5hO2zPjrnHnQDXFR;SV%7rKt`NeW6E1cr|ZZfRN?-W;^hy^EBx}6)^U2jJOFT4
zrcEAj-g>(q0C4DnzBFK9SK>iH{KH)&0O0Hcs0`rsk*$W3#U8;(0q$=9PlwXB)585&
z%R)b@Q}WWXH|^Tk>8LwLgK9#%_0Az0D60ckh+i>|wC8T{vE1#pGQ+5@vtf+92-;%X
z9pSwmW##@Js~Uu{_7;HlNQRa(>9HQ+t|wwXqw<(hpwPS?gy~l|l$}JGUasFo3O+O*
zk|LRPrDZ;n<H}MJ|5OT&`PnAh;Q+pX2oE0$3JSsm;#!ThJti--#eH9FtPHBR($9+U
zvN(<zF`h#4mzotQ%A_@G1<4{yk0s=$)F{q(q$uTNdB$|<Q2&{it=Vb2<C}F&KISpF
zJvm-?8|$?_zspSImJD|Qnnh~t-=M_1pon6^Q(TmI6t;Sy{yG(r)Tq}3PEtDL3Tlj*
zV}|aLQUH{`>ELOCcwK|muG%wB^*a;qTz?R-udVFaLejP50N_)#PJ55@en&L$sdN@X
zi=c24dA%zMuD`FltGHtF>Xg!ymA>>x_|QxX<NAJE1)3%FDmd>b$Xho#xMF{qLFAF*
zB-gB>Wy|*|F{aFCp#!ShDO_+x6~kpU&eF&PBgbCkvS9}-eX)j`_74Yi*_r^T?;M-0
z0Gu31W=%y=)kd{DcSC%$$YB0Fu6%2_HhC$@1i8=sw&(UhEkul6cVGT<Z{%<q&RE_t
zq_Sn0W933uQmupS@B_FQ2@U7<;%4ML&Mgpk)$eQ8$Jo@DY-1f>{Oc5Eq}m6utEZ|U
z=FhD`je757!-1efB+vDNBODFMhEv{bJoYStY^QuE60JKct9l$L(QG{s_O{J@x31d`
zn!|SGcAQdg(q|~6=Mk=n9+`cJ^p?HYjc5MDu79b?z52H_Ak&|L$7QMY+5S3MbM46a
zrk~o^yxYp!KZBD$QXKT%>Y5ZR|N0d(l4x|wCfPSQOy6xO?LO$U()l_z;puWmYEE>R
zOuTQJIF+X%UehQgE*?+V{H%uxT@Zn2GllI2JI*(o_jT^l+E#O!qxHZRk7|SN=gG$F
zx;QmtWFDU}ojuTI-lp9&pH$tSZCJ0je&7CCUR_|BCm_DQ_Yczj6Ug%b0QAgOmd}#b
z>_q>#6ku#;BI300Lu>4m0^noVAOA<}?ccKEuh=~FtWL+Le_g|0KJEEmx9@*T-v7gE
zRG-&}oLPlLlj9E1DxEZ5MN!{?s^XldV>>sOTD81_R~t7cwESjEQ**@p5&zyP9CB~w
z7G{naM$Zz_JsH7LA}u+$Z_!?~W{nyWjj4^ZZhkD<EbS{1YXCyiU|SBkh0jZ~I>W&j
z4djAu_$N>293Z-9lAkBryHxCHxVoC~gs?dsOB(@Fff{3IYzy-Si;O2ggIn2nKPqei
zMs+vnH|M=V&@3(-g5_voa4j2w;hj2RHCO|1vTu3JvO0UF4TZT|+;{qUs_<i+Sb2fu
zrc5>N7yU?Y6ppFOFREDryCSP|TBD}T!`3asOWm!h4V1VAO)y3r&9Y|A<e>G5ye=V)
zN(e1(onA5MT#Y5Q{PZ02pK96Apnd#ul-3Ut|IGst_-3pUJ<EHR-1i=$;e)I!mDC&|
zBxaZ)NX#?NKWpQ;-mKlZjRgvc{uH;KFXx3)j$T5ry81z0q6G(mRF8oLhKl$SC$2Z^
zRqI4Ujm1J|zx*mjN$fEa`|K+8*DDiYuL%b+Po}|Rb17*4D{RQ07#s$a*R_S`;Ihx7
zdkde0Wq3v|pzrl3FOw@;-R|_W;GB{AyqtEUbckkicI`YB6@)@oa0>cRht0VSjdZFX
z)rKeJ3pG1-+VF4S$n(5Nvk`3nH0uG6^;R!ON!LR^3dwb4Wndxq!F?Q)33KjT4^5Ct
z2=HuPujgf<QJ*%kN+f>7j}DGx7oIfgX_p+uRJji&^12b>{9k#rcd_|raGT4PHN3n|
zM$x&v=5I`b8t_1WxU{VcNriTGPg`7@`KAQ|CiDnjuui`I>{zabsaJ5lFnlf+d{Z#4
zl;32Bx_(Xe+qQ<v+nvzqA4bEbCLz?#Iui}Q9zXO)waL<zn7;*k6M-gZGZm8P5f4w(
zT4--Mj;n`|aTOZKFATwt)!wPq2fRZ&Dpc~%VCxbD<J1SfPFoE#125<k14BkvUmfj4
z!#t}}LvXqE;DD$}|CPqo1RvA2ue{}<sqcQu;R;{ryGR%EUuhUo#oTsBmN~em3)<+j
zm9<iv4$WuJ1mDtFf$9@knLL7;w<Y^?Cn*x#lgRB&>cr}!*AR$h<nShb7MBh5t!fz+
z{YayUc{DlNLI@c>%E%|AwoVA6RNJ1+zxspZOwt0icB(e^D(24Yp$Ym$CluzJQBYA9
zvZ;A#+K_YWq?SxgbJvj7VWg3YOrY}K(CllW(4R>kp|P4;W*VC{2Kdc%ldgTN&YA^M
zpzhy8@uEH?S4o;TNT-p;fsbbx{D1-MZLj#eLD}FOlq(TAN_GW&;{Pg+1~s;sm^`!u
zT|I@ViIMLEvp1b89xWT4r5_?)xV(HEMrQZ$FL130!9|5n-4top#rI4K(52*j2vOLk
z-S+D}PY)t!<qb-Q@X6$rg>G;T8b1@uV=DKG>(($lo2WA_A^CAXO<25M>MNu;qHpuo
zeuZDJBf;IeA0OgsJfO`3c*p2!c-v-<Kcm|Gr>7CNj>6Lnfxz)04)sBr0zOm7_llm5
zy2eCzuxR6zlN!zSkeErZdhA1J@Yr2_0rexHC-;}ojmE_5MmTbb&<D<wYXME~R7vA@
zxk>|}yCMubz{>{liZXL62fW*ImDJ&)eCC1kdKjwcr*8OM=IX1E{7sKT15rf@o4>kZ
zdv)-W0l|$60nOy+8w<a_FHkUBCx$KWA9<HF7*g5~v5fB2w-vaBq-lUp<wYSYtlz_Z
z7g%8x9ie`ZJ&2P<<VPW$mp$$@SJQ(ShgRq{cLw#S=U{yg#;X^4k<<f9v<hlrURUHU
zo^ci^`bq9WhG~c;eyyRAvlb-)USIF#H`UOb!yG*j9h+!!GGuGb9GeqPM2&8epZb%o
z5Km@2s8V$5PpRH%gh$5R(KWZQg+2siAO+PIT;SljGtUK;@FQjIK<sLF4>mr{_`$4?
zAmf4t?7$A%FT-!qX`G>Q5MsQ7i)#Rm3`O)Zpd7Ki>>1bnvM&Z-zY0sbw|fq8{gc%R
zdGjQGP^wZtDA0atM0TTe#=0+q>q(d9xhZ9LLPW2B)oN$%BYn2~nl#=E-d^kTTs<GR
zZUpu9x;0^+1<@&nM%z89>)>9Q#&xZ&f3JHPJ~NsMDb`|5r_m@i&x9!uj9UnSYHqNE
zukJAVlN(n>L{hu>g#K=1LySgtF?!RC1(^d@1M>~=tzOC=h+cPYkxegT@@FlN$Q;@r
z=;awHbt$mFXpoATaCGRe9W1ek@rGiyaKW~f0QVZ}RZav#-X)%^7;39%^p2z`g0>#>
zou4VatTtrI^Zh)q|ERCmf}LO<*SC*FX->^CLvdcAKO=iAXdAY5zZNrO9W73BfC$si
z3GdFnzdf^5LP0s`$BLFNYj}@L196tfFG4--KX)uPKTOaT=k%=J;+>|P=2)qdl7;J1
z=M>JLF^7ztx9i5qGp3C9$cVlL{s|)UO}i?x4+ppv=)Hu(<4jh@-Y(o7p9X@d0*~;y
z3Qaqc;Ax}O$;gGp)ZBkAplQOvP~>hwWO1U&eejoMV1=HCJ_z~qBC8id@XOb-xT2g~
zY|EYdP|V-6p<m{kvn!@6E%1A0Np-PIO{`O1#{BTIYWHcTjXn_82ju{#@hdN!C#iKn
zdb1a=;m2$D1J6r=XxM9Kujdb~jlb@f8SWcvDvF`z^463{FLH>!!Ni3dtg@YpLtOEN
zZR;j1R%|;QWa=H#nE1o7?ABs`3G%sY_?k<ASXU3zLs?ocop-6hJ*tAITOT*^EKu@A
zn*0qvT=+vgcvmG`r02N$${)QUoQt~nE@$M~II_V*mjalGnmWjO-Rq0+C>Qt3a#L)k
z2|l_#VqITr#t^9DiO1)Ug9+Iwl?QYmgDXE5uj>BoEci5e>i=HS46T<#69)+KmElQk
z!wUBU?l)MSRoUnx?hd(+WIZ;IzR-GNTg{ZS_!`3Rs}4B>4>2G%;&u&~J|9^>L@vI9
zE=syHv9Q)+x0qyw{uRdNh5I^7U;nzcU(OGN<3zH%`h8<`%-Myth`zw~D_IH^Z7sS8
z51jyK<-g#qy2J_EzNU448m-wlH>6RpLmVrg<q0G<QY^1f;e+Pu{3mAc0et4NG!?Xj
zuoGyv%HTaVpVE)c;HzdecJIL9=J7RRKNgop)IgEqX7KaWul7mR3tNn~mQgN&5}Gsz
zwGVi_riq&~lzyV7W!L7Q&%j@rP(;KCxntyr!h}EMANCHxyvDBWG{0VDQiz2gAt1z^
zC(iD{^>j}Hjwks5i-1v@^72#ZN+PdDm2)p)%#Vkqqa$}ICe_Nn#F=|rm*|yhh2$KU
zLi%fb?QgYU&)QFD8XT9tv;8blcLS_?-haaiP56P>IirdPUpP1H{S7+0aH6{+sg2h)
z+JlH<9%?<YlRWU<v`cWd+1`V9=7G5y2|UiO&<XA42T)pAi6-pwknE#)DlC}DY%p0b
zhhV}TvFT~_OYa;s7THapYWgvI3TI~SD61WpZ-^xdO~Sc>S-n$0&>ay)Y1%l%@|T&i
zADAd?YMjsEE2YlG>F>vy*L-KS?LVOs-Jv<U>mg5TZr2Y~HGQrtGED!mOE4xlx;@TV
zoounKG_tFzBPCuRIVuywZBpyamU#TwZ=37IL?AjhUkx+UO%Z#cL}|P&2Qf@**2FAP
zzgQiOT-`*FNoJ{*bo3FD<tZ^&V_*CJyTiG-YAL94;|7YKMU3}||KH8H{{uuWVl*my
z8efxK%?LiLAJks^{pK?GU0z=Fo&U|W|38?-zlK(Sf?E0;<EBFtRV|chH}F3Qrm-Z|
zv2*+U?6a+%nZOkLhvP=@JF~CH%~kyD)r|!era|@(#zSlRJG0-)_7X}{vkkpaz!yz;
zlxU%3mJwbRRe>lg?rLKM%fwbGYbtNq%8FpIGd6_g!k9bOeYWyN76zBQQvRUyRbaQ%
zK4Q`6)cSh_)7>POC^?HW%?arHd;TB|^^%<jsgJpIb+y9nw7QG>-cx^&%o3rVCW#2x
zACjS3+i8v~#5JQRRCq(q>9QVKd*@*HtjTBsBY5ijSiTmeqBQF$uxwLxklG-aB+iD_
zfwe(si$ip;9`pH$7YdufvFvdB;{n`}l->gK?e5PXussgCHZ%8fuS{Un4AmMQCf#gB
zrw?#~o5wUSET0y9HtjU{2X^v(29wjz9b)$jthwk>d*@6~P(2P3^?k8w&U652ET2?n
zJ_X9oUijda<pH*8sYrv>%ofc*=o$gm>v#qZf*oX$z1+z4NGJC8g|n@xLIO|rARbpr
zW)LhRs;MVL%_vYI{YT^2u<+G}4P58%7lAc!MH!@2P+E~}4PjBZ4NILHk282*O#ksT
zLjz1>Sy_EjDI*?XsaPsr;`{Z;W)D1zHdm`}B1{2h{Zykit%#puO4<%9ZJG~E#X&l)
zVqq2=Ep&~2hgPDe;*2jp-3SLyysO{Aw(Ggv-&JP3@uj=3KdXrEJ~2WzG6Ne<m=HoR
zWOnaF8fR%E&|&$8g>$l{+0Bz35D<^;5E6JB-vUnIo<|8c1OlW0MV}YW^sr&sqvQ`$
zMW)Nu9)jxd0tzI+8&4SMpQ<wnQ*;L%V{fhRya(~6s~j!^hlIKA*WF~$=*N7wR%;*J
z+cE=vq1O}a@<QRBJ-mi*Fn0=Aj&+-6TbCf;4Csv;EcHjULiYEZE(iO-4#2|8u{OT2
zlN;k@#>4x%SC&2Ljv;Wf8rFwGL7$~f7bo03O}fdmB6l2_KI&8`{4pBxUQjiVf~1`0
zo_9cv`E}@$=TG?LFw{$e%t9baMUm<p8-n%}YGWcdS}~qk`?QS_vR~YE8EkrN*tjYV
z_<V`kkv@fa6VdTbIwGdypC6V<%nPkDu*~@a(MSR!npBJ1B-+BB2-0OTE9|F+Wj~J{
zo-aYl!j>Dun%14vURv&}p*%0m%;N@xscOj=P7&(hipzJMxH_^)guXP(yxCV9%L}KM
zn!80Efy1kgfq^lS)LP43sTvIrLZiNbKC;Qaw=~W;L$WfH;qMLZ@H#}5FD(aP8@}|g
z_4Svq(+hwxd$Y|??r*zKEA;IvQZe?pbufK>ed>(Bs!Qp-Xdx9Loc(^RvrBeAPO_cV
zsCca&vcSr5#3ZnTWE^!hat{iNLezT{^!wEn0N)1La!Uw(K8=>dw@lLVIl?L<JUs}s
zYGe{tan`x>>5ObqZACk|98`=V$mO-y|K8X5Y0cV@@cWb3CiUp4<(xVYp~Cz2f){$O
zXOKC|K6{a=3ZMk2BsJ<^cJ=Rj$Yk18$UYVw@EW-C%wLw-u8DvU`01co8SZ8^VS0RR
z<F(VFoAU>f$&(YWrz%t<uK}?uRQBTxZj|Z313pdYez0&^Smv`(?oKV!@T)B_EDbu+
z)2{cG9m!^r`sZED1g3oxzzr`T$lN~w>qq|Ek#NGMKZ7YJsg`XVXq{OvvltvL)O|&*
z$61ep+u2bQ#zadhP}5iKY>IJ^uxZvmvUDTzwqLz=3D{g2nT<j{6HI!@Wdw%LsW!wO
zCH5u2D$Cm#4LN`5{?h-P^HDbnc)#9!9e4$lAtQ%&<Vm%*cz9h8YybX7@mT$J=T_lQ
zKQ^<Eo@2Wl(v!vWf|S5E&TN>LxK)?SpK}nS1aXJSk@+M2H#{My3=f`Tu}*)Pc>N@k
z`M|PQQb<&5wtq$*0fF!{xfAPo-;lyJMYUeRNcqMEN`yrk+=p&@bYYovMP=vm?Q*s=
z%CeachdmW$*rQq@WU|hxrY-+VhDP_d&eOGS;gMPy%FEa3^g-TARuS{X{2+PlzzRmC
zQ-*Sv|0?PwYXGNWCQEq2Fa^}NU1*#9FaxN!n3JhcaR2yWX<#|ROAd-Zg28uNsHI~g
z;zvqB3Gfg(0ORyl)|)10@0R6udpR6)<dcdjlzY2W5?7)4qyI}q?EfH|jh@EndA8i0
zj-Gv5ms98gh;Q|RCAzlL+mq#JgGIK1z$?w${Q+YtqbD%)UDbQ<(G9K$004R_bo%%n
zNfk6!x~;|bgrxq?kx4{kT?;%&@=wi{c2+x^<KJO^;+(IdN2H`q9u62)l8k%jppP9J
z3*mTVfSd0QsLRpPQXa!h!Z%)zN3qX@pCIW4XUXJl^n5ANe>*3fr$w#RNin=)k7B^o
zyO!adtog`hpARzO0nev(;0Bnfswl|yE)!6M0qO2%s6Az&BC9Cwy;S8@x*Ey&d79=!
zy2hd48p+(oDU>$z^>ok?jEz9$yy1jAtw%3ABqVOao$V~>g`k$hX=9EW5B5bSK`o;u
z<7gj<hWNZ@AN2+lv5`}I8!uOUF>yTEh1+&a?fH~xa|pioOK1%u@^(I?ST<_MLxLn)
z+~F;_yQbLl#oaODbaH=B1a$VNLn5Lq&+-Z1yD6rjTHw2OF3Ix6DLQo=mT7sFoSKm}
zS~RHqqV_ly^d}~v?wgOkc>SUDy~^q#>f~J%+@!4Rq%7+xEy1=whf=X7W#LZMIEom_
zD<3LYxgb((^?VlEmD@VIN+JY4%c-e)QVDZj+2Z?!ZP2SivXoy>Xwpdcc2PYS)2Fwq
z+D<uU_gUFqDP`ketEOp@+bVteB}0pOKqgDk36gU4dISIJ!Q_DJm&)@*7^DSr^U@gp
z=O^>Uv|Y<h!WznC)<J7?9dI4~95%V+Pqr4}%l?Wf1gOxrh`nv#gG`c%;{BKp^3&ai
zG0bBL3tSBu58)~Pk#JabD~a2-(tT5EGAk`OE3@Wqw(zC`tq?n?>8SQ+JB&D!G?_dA
zeLf2Q#G%54JDNSTZ8-fsjAK^U&!N;Wys6bbz4h^Bx<zT;%<Y{p`@I+Lk7=UB0bVZe
zAD4l<S>U0n76){9_4-=jrWZP5T@=O=M$Wuz<H-!XkxAlJn;@q&hot6l#31{ANuFf4
zJF!5OZRp2+kfRgs$nl{UpZ%*RVTJrz)5jU59V_SiC4itwI}7+z&3qnu%j%ePbGnWc
ztzIiR9R<@Gdh)zG3EtCY-kdkpQi?SlZErL8&q-U4KngiX6Ja{O^98?~_r6O|I*0~L
zkZJuGQ1pbVKtMFYRwfN=av<KKr2>4%KTY@aZBI7EZ%A2e|M*Mp&Y8b_En|<D7k}H8
z;oXR=AuqU{GQ7sx7JlTIb}P~Z(-GEeC!RauJAU3QTP9nn`Sz~8&mcQzbYxi!_=$*Y
zxvi{8SSEV}%3+h}o<}>?r;Jx|SH)6yAvtX=@xLWqU2H18CH&xO7o3M;nu~6_D}CGb
zwb=W7=e*mgA+SV{&R_gpst>OpPKacCg<ozpjy%%p#dYqyYW+E7@b2Z$uxf)Z=r88-
znJv?^%-YT;Ajkdur1LY@ZI$4-ydEplf?kKL7tp@`N9V%p_Yxf7Mc6kj#M46A*GRew
zi6=gtvGwiNyRf{xb?1IVlql!gOhXc^-r-#yO~G%*T1!3r*7l1tPUW5pGCb`F_sXSe
zU*e1BVHd`|)`@NIJ94j9rZ0QIipz&+4?T-7d|TI$=Og{L{a&;26G=a#JH2G@J2>%2
zqr-MTD6CAlr)IM(>eeFjVaZ<7*wLV`il8}wi*uj`Ny#08K(_XrNJQXX{XC@d@wTfN
zdj{9_m!u&zeO`a{<s+y}d~3pgcV-<ETUnnUEB7YLDgRSYPtgp>s#OA1iX^`8Gmo{<
zYuIl-#Mo$;(`(SAA~Y{ZoStGn1|RyPOBtXq2lAe#U0L1%IIqyw()-&r9<bIAVMzo5
zzU(4V%*%cCl?l7H04fh8B65ly^tq6C`t%<8Lq_{aD?NKNsm8qa9U|1(_{dsdB5&g<
z%`nOw;)(BdG{OLvsk=v7vfFZHssdNbLTq1INsLXZ>@8c7wppq%ADhjBWt#GEX{rKa
zt;F%$?WG}!2R}C5GsNf-eF&{<0pTMMCJ@al>Cg5CBX`{zR!AI2imSwaC8wxSEx7?k
zZSF#XS5JA308R-~jiSnx^|0s>=iX717|$TuAe2Ux7+1!n9-sVgZf!KtBz7t<4if6@
zEcW;!sNg>_`GptO8~iZ<7`>9#w%MbicuabgKy3WB$p~|Cy`e}`>6O;iX5mnAU)=-A
zQ}9k|Wanki$Y!Kqmi{{O2s*`6uk$BWpo(8Do^iJCQz0c?k32G(a$A1xSgudbic^(%
z;-j=KbSg2TRfwM^j~pL&o;V{PC_Ftu_KMNh?EE@0Ywea2E<fjWaH~Ol<S<mf80?Mu
zAkY7oOFFX5<<5-b(xCM{v!yV0MBb(u#DBpfo2&}-w{~3``n5kFlg4=meun@o9gZq^
ze_?Rwe|RMSv%@bB>!=bp4#m()8D+>1geILE6DKrCOO9vT<e^BT1Ej3pCAwv{;v8D&
z8y+*QNekY2MB9;T=qLU(nG&h-ex(a2aIICOp8cB@FpjJ4DJV=TRV7(opF-_^;!yvf
zm||Z}|5QA9?&;R>nH|w^eSb<+w}$y3QWC&pZF4~0qVECWj8*YyT)W~|>=^nfuQ+8|
zQET}_n>M&b_b&3hU|>?G&0SIVzdXj%AiA|(cl8Xy;X<v_ReYXe-?6=Nosh*xjr&RS
z^~JD1F;Wa2m<(%+<PQ+Db*yq)UiKx93psEM_UGwX?Py=&nD~_uM4y~kqttd=U!XbH
zL3^I}gP>aoWQdks0zUE%t1HkN>~4KA2YK83FxQUYk{Z-Wb(YfcQ$ffi6EUQSF)aHb
zrj>bO-=`$xP-IQwxGbW`-Aode+Ec={4HZ7#)9)k?#pKDg4eqJbb>pbW`TfzYI8=~k
zK!oZ)zK$cbR8F3f4R;9Ha_HkBSAnJ<!pK5?aMOvyu`7}QqQkcZP}Fz+jH8ys!0wLl
zB@LHzl0Ia-G4mUAx=~`xfF}}sg^;Wh;4QJ*-^fPSz2Uli$E_13*x@~Z_*Zp1{Eif8
zf(y&-9~c0j`xCPRIyEgT0q0Yl$FG@LuKl9{h}m3McHEPe3jzSzNW)(x794M*Z)kKz
zBIo-bq-%E9dK75g$`HUu-SfX6k0g$xi+q?l#rGutv}W@3cG?i|7U3ul5l%4@z6NnD
zy6vv5XdQRv0SOeo%8w*mM+AiJ!i(wJDp4Ws?Nw+WF^$Jhc}T~Z1otib>VRWUV}wyw
zdiyK38pcnR_Cg7pFL|6V#l24GI_l<pv8Der3$~TZ4d8Y^<vSuR4UGmAdd4hU7-gi?
z-ZUSeXL$yKB<1d49q%e#38ow%iHInqsF0aNq&S1JvF40!)6flQJ*sUT09CY;Vd;gO
z8&JA$Anbig^Uvz&{wGY|_Ul*r@`hQq$6@;VRN<B`CI$CjsKZkI?Jm*sBX<rx)u@P6
zX<2Gp9URon>46Ltvmg0Bgx(4{^ip_Q_@|I}&`liZ+X!2Q6)-BE9u*#xIJ{!7sNal<
zx8@D~V~5$`t~2Ka$aNTtJZFIZzGwnE+7`rJrA=vVTtJMAMt)CDK_;9tH}h^B<gB{2
zCXfH~REq1`qw(awcdiFbXOwuNo3Gbd9Tl^WjDjL>VZVB0BlGV0@~hY5weZKWe1mR!
zcgW7owWdhj*RyNu#R1t|;SbQ_S5qQ!BT0!~3tAWQXGhVz9!K(D^2Bdgpt7fLN-<QK
z6in4#^mTP#O?1U^JIV81De+zNQXf?hNl+tgBNDrjbU#<bm;BlSCQZ$Cv}dFx-#B&7
zwkP82$QGR3pDKRXD)3^porXPJg}ryV*s|=ykq`L|Q=6)7jENg}!*vb_B0t0-&AA~S
z=<J*N&9fW6Q80~hutuyoMp`-k$YI%;lHTpKpMRNS_AAg_e@mX&Jjjv-=Xj&Vc-kKL
zeZePDAPHo#0e89Ktl+ofq3+p107Ke0Zaf_dKXQ+27TfuhRzD=d2<u%B_(?VY16_Id
zE8%tEP-0sy`J$bKoluR<Kd~)*`(^GwW62x4v6wnU65<vDpr2x#gpeA6DkdyhpHL`t
z*sfIHLn}RUn&J`uwviLFqhO&IMy8-Uu`uOs%*Ll&hO(GkVUpx}!r6XOFFg%Uu{+wv
z7|o!Y93mYRECuW$&76wZRpD_Ug-qd>Y|NGHdS;ktveI0DwxZ{n?6F2oL-U=~0VFSp
z*RVYG;gnL!9sQnk21WM6wUJ#4QhOmD&DAwOpZfA4=~u}ki9K0+=-6%kk^dZ-1_$tX
zF=~Vlo5wJ-Efad?J5puCkwk)Jh9>RjauX$FG~@yVIiMOwyl<q1vEa(Nd5rV)(7k&|
zo^|E`OveQ1jO}?+%x&)pUdaIo_eQoHsSmo3<bUcJru{Z`ya?p&+0#WdCgbb`0a2)3
z5*pFRqnPYh7>RlR-0t`8#P4jUrEUl9v9jJPIc43wvdDM!nkFG(A^;$8FX@6z6k`3(
zgvXu&c|dF3P6<Z|ZYFu*{}esxf0EhdQ%q_QY*fwa2O({stMab$@2sk{`I>C-FAZ9}
zfa?|hXBjorKef(T6EJp(C84t1e;6=()1|6mkBY<SzZgp{1(ulMj~bM-B|62Vf&q@S
zO@Fd)&#<icb-vp^3PO^gU7~^26+6fB2^u?*2kA%QE%t!Q8c7#7c!2ayCpldH4O7u?
zUs?Dz)@gPD*4}pKLbM3pl4m8dk^<<1^|P>h!Kw;L%h2afDcpiL*5715kyEUOlP~Re
zFuiu+qa<0mYT?0$a=}#8>DGJp^j*uhcG7;N>>9U3XQ(YOO<TdtlC$ciKdlN&W7oGL
zw8!o7dJ2pZ_Vu3TruSif_071bGTT-S#T?3dxO%G7xo29%H;aR_u`lU*1Xz`DIOHv7
zTfB!~jDBar&6J1xW&4AX`$?hVr@K)8{o~L|M@h8&a8LkGiW##}SnvAo`94sdX3ddK
z4w{wWH6T3+InD{Qx4!VqpYw%7A00Gg82puAULLq%rIOmoveXm9-qDJ8Fd6*D(G}OW
zvJ(L~i!YBhfALbbA@kQweHRQk5cvg{l!+L?7)-(flWlX{UU=;AU;B3=Jp9z$mSk6c
z)xvt7fZb-I=i5M|IHlL-&+ka+c1PsO?`ZVxq<Q5G&R%<OGmUfIZXXy0A>P*SoK<qF
z*fFJHxSXE#2mLziD1c!gA%orGM$EoD_fbjul;W2TsA7`HA#q%B&Wk9`SsI6Fq-M#l
z%#3-ABLE800S8Weuro};S6j+yzu*i#h?y(M$TBIJk|+n2bI!Mu{>;la^3c|hQLrQq
zMb@yfXF?uW!Jpk{Y?*+$Z7*#5{wn!`<?H@XhI!dbCAoY0;Eunt(qsqppUWh?=l9u}
z{+(V6*+RJmS*f&J3OzA=bd_9H*`KM@m#~lSMwe|Rk&gsgqtq|nDvp8h*}p{?+UPGN
z)xVnjc>7>PbDJ=I{7I6(YTVR!6V;!k($T6xEGeX1+oWt;<)$UH);#`ULb`^vtji(4
zgC1EvSFwsh0z$=~>^+d`y8Rix8NPWAWG?zX`DM0qR-rE^gM5neZWRAp%o%5WGeq=z
zDg7P6&67&6Q1MTt?*jM9dS~Am*pMdXY@An-rTT8I85t=zy98&PYh+7OC9)>MV}w&e
zFb5UEE(>npRB$PVS{NG&Y<}U?j`f+fJl!Wq6aK4RJR`%hv<y{z+=|3b>32lXY3VqZ
z^b26n2oBpi5e&Gyqs{$0w*BUT&zi=<bmBwKy=JM`$G3*xn8{elk2Y#@rYHcI5^(<?
z@fN?jw{3Rf^<FJNVv-*H>k9aBY}_QZt4(_wac$I$Hk%4kv;_b@9_YH()rV+DNJ9Mb
zo^AkuWK->E5b>c=;+_DcR0($aH;I#l1yIZXUf5~={JWh|kmhybTvZj7(Y*Y-;jte8
z(Es*ImL>5?b*EW#UMiR#^M^X<S&YdZS_=ask>=H#g!l}ek<^N;C2l7BZ;5d2iYX`@
zj9<SxX75ZdcGy9vbZ^zobnc$ws1#Q-IXTk1UmIUmdSCre5Upt()Mz7^ZAQvn#Z`TN
zq##*9CB`_(b<54<TDgH;xho6!Gk^8x8{}vrzjMG9yT6{Ptf?eRC>pp6x4WN8<*FYo
zx5aUMND>+uG}KO}M)6LuoXz+<j;&L*uDK9S8BTJQt$Leydz1}scRlzby@<Z}t9WD3
z@hkw~SZ1TI39cKG<b8)ob>uPgGtz+iH(gNsB>0?Dy+WJe?vJ}agl1Es=(uYCZLG2W
z7rcWKDK`|h)u0t7x0P-6k25OYQcKZoskXd-vp(x513#4xncfK=(f#V%m|mJR9+sfN
zecV~+CtKt3t{%MhNgm+hZr#=rI}Gub`@PU}iHL2RjxjU-Gm?Eg|DVubl?%}?!w>NS
zp>?aU3Nv5D<LKZB;COFjKO0SpoMtHkdg|Y`F=QurNrRMns3ju0;P8F4YZ)Kkgun9)
zq}c?W$|)pn-3EXk0F$;+_K}!KIj1E#v+mJlm0F3uE4WgiqcbrV2(ab5VwjWZc{cFc
z=XoJveQSw`#{P<TRI8-0=Q+4bbhM!xapx$d^COE6oL@SpWrN=S9Iat`8WMT1-cibM
zbY+gxJZaga80xlTxl$VeE2mp}_E!Wadv7dgR^Z#6QPU@oDp@;9LL6iZmdR{4-hq*r
zrrBg)2SN@m&k*3!YO$LHALx}q0sn5kzbw14#|GS(fOgQAFldku+jJxTJ_Q%+o-ERK
zB3hr`>us`PeSYkO63wzQ?&LlSv)j?DaCvUaF!Ly712)+C!W0f0jO<@tn%LcKPtWAs
zaKKhfHxcKlO=wo-h9F{o+!!`tI-L4qbZA6}V>c?6_?Wy}|HMW)#eJ4bho|XyvXxiK
zdD{y;%L_=rCrx7zTWU{{)gI2HneQ9yh?~)i-emd<d^0u+Hpu^s`uc3?!o4w@jwU*X
z%?g<EK^%&{B36DjvKqp5l3HzGvQTPfmu`X8zVNAl%8u=R`?lU7A}ug1WZJH5-Y2K+
zhmJ^jb#!Sos~<D{Ir!6dVF=D;Roj{TUF|Is94nm59=4zsW5M(jJvNCZwHD>h=Q2Ht
zDT@*k^5}5BqMwG05Q?NR^as|_Q8+(es_yGS@`vE&s)Xr>|DZk8a?M9mt|;$jAO4n*
z^{|YQHj0-!tL$^6c7wQQ=}f<>#XFJOvuyGdb0}+mc@O`%0<Fxl3$@lTE_=i_zi)nl
z8|q5MkCz6Sp}zzh3JxSFdJ97UV_val7#-zf>xCz9H(;;7h7q-cjwZof(2Iprc)8hK
zyMy!8HdB|2O*IaMf`s9>Lcav(JV>>;B<9D$pD%t47uUD#OC2E}d60ga%uOhoC?ZF~
zCe8)hU(RWQ#d)kZb^bIPr~@+HJg_a0%`-Ley`ZyS<E9rp{_d{wMy!X2oq8J~e`B?O
zj=J*86(aS~_%;O^?0jg&%}Ac;$xrY(cr~(rOGsBH_2GCSSV9;!ONLI**8?%OxAv0O
z9uZ<qr_~3s6y!C)!2bl9{l9uuT3u+j>Y+_9dETsssNd-w`cinxA_&>I)ojhVO(rO3
z5cKn<F!F3Ofl2)HR#Py5aV!y`_JFv`5IJP-Os*pCtUo%cj{yhypxM{9RSC52%(R@1
zRDaVQS);lR>~ZE6-%g0Uq>oED_Ih}aYFo>_j^bX+_w%re8rPPhT<`_(DQ%kx6kw<v
zrr(_K^X{+M9{!_?`MZsuC5If|DV?(Ql4$OG=I4aZXzy<YxN%>8SGz^%6D7-$7#9P5
z#jKwA%#osoGH3adQzw+wk5Zd_dL|<xt0Ix-@g+Zd!85=30hLOWGVL9IIw^7OoTuuI
z=Ib-_Ej^l3IbdW{$YXG6SEJH=DSyebOiizZIOVKiSWhLpPTXiR-auTZ%P!dZ2qnZO
z;}77M^pI|m{}9WyCAh3A(AebJhsPVvQM$&@G|8_hR3;FG1N<C4hw+WSE`3veClHg2
zeyr_26|c&9EY1{jl3a;6l_xu;b8eNVsJ(xAUp{i6^B+ojW|0pXsj63wSBE-Tv=flo
z2GOOFoE`d>`{48AmULp83B@xjgI&kKlFv8?1sc4U(9WMtgx?X*^Nk-`t2->8n=+Ba
z&n*TkdV)o?G6&pWbQ)MKU?YPXWBg}|d!7kTvb(MOn1=A+LDm_hc+>QNCvcYA_qFxS
z@^>yB&qfx|q;8f+>eHpFa`fcybbU;hw;cbj)0E&e+N*x|1AEtsOMM(Lxw^gDCtgoS
zD>Mn>^?fuc@GyIkT*O?IfxAshsU%kA1?)<;nz9Q;c<GNKbNaLPPE3%EGB_}FkgGa&
z^v6w8Zc_LkqfT7#*z9quV}c^2YU6qn%$it&x=)6}TdKlm$?PK*{i2KGk!hSj(CV|d
z%gp`^JtEHe?AjPWW;^Xg+dGxN(xgsotqv;YmcAdgmg(@Rl+fcqWACJq0j~B+&xORI
z%?MD5P2^8SsTkVgjQ-Ca^a%Wl23zVymeC^RRGaEzJtxwx2uYFf6p^TvG~r0ovgj4e
zw&|$_;j~$i;N*R;#Z=H@vHi^Cr<f1?zB=?pborccqF?FR+Y0GcB2YL6a0pZ*O`V^S
zd9JVjL8|vg(&K@oRQ2Z@uV-n@^QE%5SGO%*8cZEllWp+6;^C7sSe>u70pxSO@?Fra
zFb5^z-OP^RnjS`qQubunjsk`3_Sa?7x41CRTcdb~l(6`Xe_&3+*-R{xGK`guWCRK9
z;gV^xo4Q3!qBU#V&J`+g8vhcpgLc0xt&=aj18PEbCsI!3sc5XHFoqBg+$#b>%rE+D
z)YLKZKe`lQvmOp!jwou9#@uO58drp_jd+Fvo=u)-;2(plf(MrBhooO&EEk`Q9#tO_
zUU-?V2?Etg9ms0-PR|V3J=wv398tLe`<oKUeqVbr<vH~PwHP$*$K4s_l1cB3zQ&t>
zT|s&o;}&TWCh}<<t{PQrMRGHbm~p#A<4uDiB(|{N#6v3`$|s>9aN$Ag=tIz!$_=Bt
znh@N2<62}-CU^n@>15O2#q|Eu-uh>ueSm(7=q0nTe-ibf74Tuy6q6?9`{-)Y_1@F;
z7u89XatdX+3fUW*6oT`Sj7myyKMykev&nVD$W3t2JbrJRdFrq99EJ9!A*Wn^aap}A
zE$=Wm41pehq_p48<+G8Nuf0%Tju9ECA~`6)xb$zG$tlc+W`fRN=L<ebUO8@Oai#|{
z@B`-~1>hJ+uuuHMv->3!-VFetvh$||7@fC%wbM_Gtco*I1wdDSJo>K@n@=P#3I7{8
z{nsI(!E5@gETZJ#5aaid)@T1d)cxN+PV}Edh5t{^GyVT#0y3L3O6dFI<C4^A%nLuw
zSEy;^;Z~@>b<XVa1)eRWsn5M7`kSN*B+;wq=IPrc<>QZv0|lEa&8zE%zl$_i)w|b2
zP+xvOKA9YrtNi;_iqEZ+zcF__On-m(Z>@@loz+U8r>+~)Qb8h&M2(;s?;iZuU@e1?
z|2B9ZMl;=4l<l7%DfoRvMti)aKwIp|6L)HZK1$xey`WZPKF=7)GtdKfhoXFmo9y4&
z8*n-%<-QDnaRnjjeWhG|?O&;xB!w%4UO}Gt*Yz%7$h<(C_PeB1dHa7@)7Slpyf=tn
z6ks+zc=D`xT}aIVB^OCf?u5$8vYLslJ)10NqBjc8DW*X}%q2h`dAv*t0C;>`8-v?S
z;Z2i?!NH<rv0V)rO!Xo}%%vl|&gNkC@n{}|<Yl3T{<F-GHZv=}Lx77*y@Io%8L?MX
z_8(yqgjM?9Iul9=lk$Us<i}j9X^Dn2^69m5n?0VWk8#Ye(zMU|W`6U`mrZfJSlWz!
z^WM^vjsaZMi_rC3td6XXAit{E*SBcDs^FftiA7ZL(OIs2>NdG;tj8eH!^V|NY!11%
zl;#hL`=qFdd!?byYvPfILLTZ|U4ML@vt$-ClC*Ml7b)#&-D9ZdN6(#p+|_wcYLQ^&
z=O>YSxrI8(;2k{jPfT&_0+2>i2{DQyo=oi=3>DED*C$g+&cWuv>M@-#C;gV~5wp$~
zixpej%*S1tx6`&UilCke@YSrfN_U3(`wSCQSzgv?$P!n~-^voyha2~T&|KG9>TTQ3
z&p8W7)?%Iw2}I?kBgnlA>yM$Ek6dZCxE7)2hX(tphL}e6%JyOyu_Epde$LHhW&DtI
zBF<mCxzyVsRdfP3+I)E2SapcoAss$abkqLLpnupJk}1->nO%jBgDfWWc)U+K{C?x<
zTk_PsV32O-X)KkJN)FitYYC}FU7v4k>YR5~xkSIQ1RO7J_S`vh?p7*+$YK@Zh%?CD
zJ>f`<`w)Vt#IvF$v?CPXO*$fwY*R{z@Ep`>rE!hpHexVT^>$cXXQ?M?su`<xa9=Qh
zvlF<DN0bw~<j&PaR!$~%c<pZ(_r(NHgP8h(sh)l?S;C6pHdn;Xi!!TWXmiyG#)N~(
zg4z-=64wwD)w$le)Kh}x4%X@R&}XBHQeUz#c}hJHr7(pruxewciX`7`EzFeTnz*6I
zobTxZH5(>&D^4RO<7P{N*{c@Le6R2rukLgRG<2H!amkb#S}z|tvq9;4<fP_rR!;GZ
zy4~=)TRLFU-s4zig|mAxy+m&=rZsTT`%zU>%iWOIq8|e=mCT`1w(EN|vpq{ruQBu?
z(5=<7K&?yUN^}YtY+56fY_wV|;GO%r?pmw|US!+cPEFTxth<<%&BbSq5<&h=gf7H$
z{@#lDmzxa^eo<xj%;@B&8s<)BKG+J-ApLw6XjC-r`;JW(VmWy$hT~v1wTENf=3PDY
z6BQacv``Y*yv(X1TwQ*<D!1xo_BD&|<I-8HvB7q1N_|&nMyEWZR%lUSWO9uj*hl#M
z2{k}4#JN~)SC*t>d!Zi%{V8}aOfy|X#vvnOkCJVsESDPX`h6#`Jk#ECM_3rE$_^oD
zqC*k1?S29G#d478eXQxv+>W7|1@s@<pi_S`=iI4F1n<cB;v@Ox<h-B-fm~M@5I-?$
zhxE7M?O0uqi_A2z77Xq&E1f>Rbn)17<c^odC2|&8nnr{E%ZXPPYI2IA?aS{V9||+E
z5D#*Tx)Ga@J;HUs#_^&pCW#}K!8?)q=QQ)$5!a=A@0v})IS0D<wbP+t^QH9rnVSuc
z6ccvS6`7$IvB71+x4wR4#|iP#1;T{Q>;eJKOl4;bm+%XYUgkOrGlp;AjbM08L~m+l
z$$SsXTd5}snVG8+IF}pfzzs%I$Wtv04FPH$u`2o2a&W;l3q)owF2CXQP~2Mj_5)2Y
z;*H0%Gs=Y88d^op3J{!Pvg#E613fRLyZ-oa2Helrj9emYa_GEjGI%3tkL4TG9YNZ+
z8_LL-%@;Aw3VOLQ9v3K0vr8gv_xNv@vGc;L{+_kMYpxaay(4r(b28HGVPtQr+grhf
zLf>2bX@x^Vlib^>w{tFfrg|2r?~zTkSDl-LC)4#D$TQl!P|dpVXY@<>P)5EAqxeZ?
zwg)&s+<%Vy+42=qq5I5wAVl0u$}*F`OKhP4S8@0L?vrRleXPr~EWQ3zk4DbRaPOzN
ztiQ(W`QO;Bd0F+J2=EhFt|uX`HuWYiDbW641)XjnFdb{^YTI1Qg8*&N#`8*{kTW6X
zzld@QeR_%MEAHe|{Pq~0lX!J5Q4W}3_DslKLkS48a~Qr%?Yx9S0;=LQF=Tplzus$=
zWiMXg#UNUBMPpO-VGPC_oeaoo&CKVl{^rMHeW19Oi0LoOX>7;4=-jL(PUjW+*>}@G
zHUUgIYhy8~P)3=8m?11`Ta?&mWQ3*1aG?3I0-XRgCcNI`*@T}&54z&Y^Ny0Ag2=*;
zjBZ;QN2Cr%X#6kRAvdj{@vxc6)RBwb1Kgh1!44YSa2~;)9oVjJ!_3LbBZC6mJZY-j
z8+B7}eeVUduJgVHg7ZpUa1Nki2E3lIeyG_D$LlAiRj05|O-1p-EU;K|q1}pVX?VpP
zGKb;Zs+j2?rVl}^)$;hxLGz3q7!%|?Je(W8nqu*`HZ5Fqr&sr%3Q~i){I1aK&B4To
z%uUAEhc-kc%JB0%{B-W$ReN&O4T<`j+e)&O>1xZ*S5z8u-cjMTx>NP=u%t^=2*RZG
zD%O>EF{eLDu$%)?DNS8gG0_0k`f`~c$N{8Zhz}dWTgwF$|KbJ+YSP^y^_%D^!!gOC
zUb4)?#W<p9;#QCU#uSO=9<&fmZ7^tJ&MU9`QN!7sShj(`(!hLp$jFMAfjT&<;|@e1
zZIQ=`(S@my2FN8r;EdpIp=4t&1rQY%w8;5%M<?_duUuv~ov(?-zpNf&6O>YzUvVje
zagClxDvg|`N)O~n|3!UQ*7`Zt4?*M4>jfoPyy&q+P})3RH&;#rD&77dQLHRIM)FN_
zPGC>gfdA1d!YXdu<kzNpihPE^OIl8VW~sI(Z+`Jp64U_o$`SzeZyv$FY}l47Mmp+=
zDdo-C;?i4P8jSmBW%$BGu^{djKCyLTJ>w<Hbq#V=3lcK@thVv|a>E4ZXLYy0R&;3m
z9*((;nW@Ozm#S7oRJJHiu4rp(tzyHUjd&lt<$-dVcD6m|Pf3RAhN54`ZR_k6on5FG
ztKEz8;v}`MgeNxI=<8Waa)vs*{AWSuw72MhmIzw;zzS6mc>jI~BN?iQ4uem}8myKc
z&#hrz&=1kFaJfu@bN>8>wAbfur}?@_s71NOEoeUOWX3G+r|3_NrduS>NkU3w9lo+K
zmFxrhqxlNt`pS}_HkhM?O`HsiO&V9Z7rnlDQIo!2J+&sIeAn`MvgxwvVpHRueVKH2
z*ACTF9Xj-oos9s0lxs4>o14YgWR|lXmwt4ozVNt@pl$#ku7W+Nl5WxY?^!+MFQ1!=
zlH%Po=#t`^1_%VK!2Yo0ov8^QWZx)9@8-YimQ7lt+mV+zvm#Z6ry01t%cqfV@Zbfc
z_!ko?K7kyr!=vKHMI3<>^@_MOCY}DuQ)x&5#tlWLE}WYhg~$!1&I@Qe>MUDn%ZxKG
z=@oCnbb8Gzru#jQ)+vpy@KY(r+23HE-w$a|s}w-y15IX4TOrlpMveIfQR&H9ctG>Z
zz#AE@cg+HYs})|noxN6ws%L~JSI9Ocxb}0WAbHu^sV6o@;I0x50KG{Mne}j4F>}vu
z`!cifsVf{!gQa7g*g{kzb~OYwg80D5rxM)M?VsR^L4L|}F=C(QDg*6t@B{{5cRIZo
z99Kd*hs|;`x1Y#N@g1lHCh0-AX{ybjU{sZoKyNy39$Bc1FAb-KX!D$7RHyKwcc+<e
zKUpf&ycNEUAm<&8T*M!2o_1FmSsR4Kde29>dpJ>;n@TXjI-Jgn$kQRKnKfIM7p~SA
zH<(7jo;Q{7TEwPHh*z$JWnv2R<4ND1y3q`+&MV8W`CiYw8(BA|;161L{X&!l<evVH
zvAX<Ra<|b*O2+CA@oKqeQc~>Ee0l>ctisoWxw$b})x;d6>$Vy@#qJMUc&#{?UkQ_-
zkFuPI{Mr_rJM}#*jXlJ_*R0KaG#>S#>Ans%q1xT9qN+Ni3Dy{%LRpf#D0btJlQ3DU
z*gj3cV%nTNG>8&?@XaviOa)}vE~{S?XoE_)sf!`#1qm7al-amyVWqH1Z^$&dhJM<Y
zvk<j8`3ruWoHS9KHg&zj`(2XF1rD?O8B7Ojh@SLvts~t3XP$dcuq@iu)zUm2gm?>6
zt+(Q)S!ShiA~)8n)&m8x6}=wVYmFgao*6MZZewYD@>q=z+3RF1qan%knD<}y6XdMb
z{+`NSIgg|d*p?S4`-+is3iMo0vyPZ~-wjG1rEfsDE;Z*L^8I_)FU^}DUng|;XXj(b
zoGHEmZH&)*mcUOUTpHhYf;~eTJi>N24V)UeI4AIDg`SUaB$#Ic-^xd>?N561I>M_6
z<_x??{&E<b`Xekhp|RR$TK%YwS-D{BvwFtzL~rxs##Qc|Dx96}{RLL&(X@KHTIF6X
zdanrz;yg9FnY+}a*z<vXv2}CW1+;7|Px1NO*2ct=ZMojB`KOiyKL|yre!=@&C>R=@
zyV4NWr#S`m?mWctDhE5(UyJO$*=WjP5BjF6MO{xREdR$WMYt|%kr&*55qO=O1|00K
zhLt?I7Q>ulU!_mFzRx3g@Lg_uD(UFGh3D@^K;{>&^@ACuOap&?uG)&}+rUDP;zP&t
z7Imu`C!X&Sz7a&ht(&WDH9zaE>W*0<!nDoA7!Oaz@aCUa7D};|X?xCjUWzJE;9Lng
z3%h^hxZpPbP5<Z>>N}v{G303w=n>9MxXD~|KZg*|m1EQO$Set%rioM^=1h#*V4d;c
zu$r;JKR0WR!ql4!s;$~s<eTJMc)K9_FE))|8<;|ck12c4YgJU-L)@jhK#t?SI#HSh
zCkGa^LL37;m@V98vUN$^l&0PUd|uFO3}3j&A$R7Y%4%^BSr<8R8}m<}vqnAKL=9Dp
zZ?k@6_lZ%@+Yc@K15}105#o33t8?5-qqwCO&?U6mr!`<k{^N-0y5jpp-HE<7VZm}b
z*;-}z3fs<-+9l{#bIYsoLEVPHvP=?9BI3(iu8Fd?U3fbu%L(&Jj_i6Ap&UWf1$m(w
zw_aUJOAngu@NGcv>LyFOfH^oNMZ{E7n2ctb`@_{#(O*&jS1s2X&1SlVGoz~R)fTNw
zO;2^)FL518OwsnVRk7%)ON6-By{J?Ww-i&Frl)a<j-b^J4v7?TCr2$+q|%{eM#i8j
zPAbu9LNp<9zA!(|&$G_V`Tl-;?e|-Izk7f0+VAr`f~4IbqN%p8Z{?uZQqo+2n@GO)
z{Y$QhCq@fI{T73RVS`gR6nq+GVl|tXp@!#c&ew!@kK|vP9gV<lKrbdQ=Y(CYbiMAM
z?$U%)9e;;~1PwlXYah~1U7ldXCpI?n`qJK%AH~(LRsE`*xmd#5T(xoiIN%d<+jVAw
z!5m3jWTgBOf>j)I4y<54&T07+PfmEw{0V80PL9#<N@h?<1JBnI6q$9uPLdeg_TQ^V
z{N2iN9e=r%$j|P|^%p+jb(Cz4{?`2{#8D!CC62QrkQC8WI9rMBFm~Rj_gu6I*GQYL
zR-*zcrN~hvb=SlcCGLej2w`Q~m*+RzxHJ9GUU*ma+j_1-+&ZiUKd(#wMD<vqt{ay7
zn*x)OGW(2jK-xq6-(5kUJxcH6LqmnRyXi|byNVs~F%#%676t+xVsma0heP$7(U;C^
z00#v^9-^jEs`@p+Py^*D0*H~%TTSy%Y0@jXCp?{7X{N8`VZyDZWxp8yOt>@1qfX*O
zqDjCK%~)!3#T2WN$ry3?&L<g83&1^{Ozk(nhPN3m>pDjgq$@_fV)m5_Pc+kbxMB}l
zue7;S5kz6pHRwkSKWy?Q08x#(JUw;xE%=W6=fH&qj=S?@@teD&*mJFN0~@vrPgQhN
z)faZ}po3Jy2nXV-w|G}@&1>Yf#)(f~%xzxbCFYqMxPX~Bqs@=ww?+?*DocLsa^gjF
zL7db;2*;|EbPVEd8{!pPg1;#~R#_CRmEc}{O)CK9%J<p2b<?!aVPmM~BYu*JaZ>&<
z$W0T|gLDyfZNQv+BFe-O6cWS$ls6x_0(3oQ8ziG>s6}o(C<?%UTAn7L^&^b6?whgI
z*q6I2#1U_DK>tjler`_CZL~t3dMF>Dt%oEkVb{lOl<_XX^M1(cP-8;7O^bG@<(*bD
zSaFzz@hC>Lw46y(a+-aQAkQp}Zx8eQovp4<K>$yb!cgf4%y9AZP$6~OfO1ZwU>U5d
zbHqAj+met?0FDid-CvckICZZvH^QyApqvz?D8s}?g$Rh77M<)3ugdv=vGLtZS-EGB
z+%I(|kj7D;fL8b=D9AC?y8hcQ?Ul#5SU@?-PlFEoTSh^7!|qgai5!5D9_m*C?*H6@
z@vQOQIQP$yZ2CWrIQcQF3mFsE;Jt?m{*RgRpDaAZS_DuU4!POePf*flj>7kbiIot-
z`OeP_C?rxk-MUVlM#o#vug%%^t+)cAyKY{@*G(R<HL0G(b_C8r&Q!yVcc%_M@*1gQ
zMfu$*?T9y(S#j%ekW?r(3tV<Owr?YUW90bO(|*gxdPdBeEDz-vfLw$aAqV%obB}Gs
zLmmts_fzS#ulfN%&mu-FLkGRAVN(iI+7XxYJ1wWL0TaiT<3n74WGa)a3O~?((HiOj
z!01af=qHC<WD-<n7p$`m2<-m2VWK?&xJ|wxgj3zTieKNQWV47a+%-yysX2iWhY_I!
zk;WeVQufipL?rT234q|&WL*ZBMc?JOH0Ud>Mq`{*R~o4|Yxds2zS)!93O;NAP?DD0
z{Mep5TgZ5OLhae)kV>MPOEN^aVt!*>Fw8?{?E8Y*5thxkGWgq>rVY(5A{i1rc_$t0
zsjiP*sv&8EZw$ZHHwq*}j&VzjfL``Pf+S|4|JbZNJa1GYM!)NvpGK-k7RUU>sjI~O
zSa#~r0Y0#Nm8}sj9m>EQ#+}l6k>PXQB667DP0TGn8A5c_r6V&}+>KB9hHV47G1F;F
z3xU7AL>Y9;WPyy+!WIsXb2=;OIQKw-H&9hT{F^hwwM2|Mg&{q6J1evG%HkYR%-m8_
z&kEu`KIa9xE0>6#?h6aF&iG43;wFvPJA_A4{^cjwOXE*ZhJvLh1mJegi;e1^`{xuI
zl$nPgO(;gEyO5R;gB<v#(%FM8SyB461s-)pM)8u;Fh~bangrkVtcF}oM*kkCZwMsu
zQLahaU!}x>f7IyEXCCM)FI>R%0Q{O^#~nSVonWUV0MJsrc}CECpj#~8X16%pX5qE}
z{V>I74UZXUVd%@Y>HPZ9U>~Sj^kX5DrB-np_?NgoW5kw2=^_T9cxY`v%0_9w9n0LD
zh~T82<@hh(&$Ovc`#te-)~%)G2L+ad{ZJo@#vy8oWLx4i!L<OTBddaY2;m`iEYKwa
zzy&{_CNuzuPQ=I`GBiIZ7&XY%tKhm$31f${TSZWsxdMw!49;3twW!9*mhVelDM2lh
zZvWDuJsdcv$Ff3$*=}y42kLF<imPw5VwwAyxM+Zmw1oFYhU5yM>rE+E-cv}99H$h_
ze?C&!?&4Hgki@*Y)hnb6QtrvT;*Bn#e9I7-yOOQfSsw?w8orKg?*LGfR<y}l*>+F-
zD&G)Vdc>QbHalQ<>HBBAJA7F^{*PjKw)aH4Uxd9YX`_rdgaZ8>bm_deC)piQ@Ne+J
B=!XCR

literal 0
HcmV?d00001

diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/authelia.details.png b/docs/content/en/integration/proxies/nginx-proxy-manager/authelia.details.png
new file mode 100644
index 0000000000000000000000000000000000000000..f916c0d1cd1c4739bf9a654f13bf870ae222f678
GIT binary patch
literal 16277
zcmch8cT|&Imu~_HB27gBMT!-XE&>v|h>a>BRS1Z50tf^ov?vHFQWT|^AkupaQiCEz
zYN&yPP^1JB0#Xuc$c^tibMIX<-&%KlcjlWvSdj3X^XzlZZs+&g`;C#oU9Mwij{yJx
zuKV|H8v_8qB>;fw>`_+6H>6)v;f!BEU*o&C0A>B>mKh&doVE0|0D#IkjsyE6jL+=e
z_bhz@0PeOwKfq3}f~Nq0#<lymwM?JelJS;a!krmw>rDwM`+;2bT%t38ocf{qW3ACI
zxMlCw_v#?Rlf&PrwtmxkX?G|2>PruK<cIr`Dv6Mv*Bw)1&F{Z|`V%Yp@Uxi-NA0-P
zIY`McomjM5L?jZHLlwt1fA0gYEe^Xw10K;D(s(|JTm=B)&oP|^z*$b90f0-d;j92r
zEtVS$880A!fP2S*Tma3NM_mAbleaaQ0r8^$g-4~BVGkj=uUe(nBI1J1BQGtl-B5uf
zreqF?^+LqQaH>g$#%{Kdv0-F^rF`yp%K-@?YI7=|zsK9La!=UW3UuNNGD9f=0AQx9
zOvpni#7DI?HBa+)8v4B4p-g)R?^1_I^)H6*YLbTRn;+fMWNw|m8L*lTn|;Oax4SbJ
z*Ef<Lv5AD>Mz*$UVC(JteItik=g=l9e0?>m*MLGM5&j8q|3vXI->i;d*#<aLNr|xy
zoCz$x0z;lRy(X%3Y#ROb4c9Q<Ojve(_TfH!CL+hM<2@qwh+nS3YQk6A1iM$cr=_^(
z*~vO)|NVtMQXai{XF`p7!Q&zYB8Xl<ZW!0k9_>#kyZc<V;rIwZR?_oc*w)}(ZFXll
zg!!a_=xye<kM=Az)hJbTx{=g_eA?68qurt_<PHDO9c71U?jN2O-&;#RcKLrd_NdES
zO`~fv7Fke#UhSPXA2ZL=b(bfG*+QXgLLAdZHmwiDzxQ*w1Xvs3B`DsRX3-%Y#wJd?
z8~4XNabqe6EAHpe?_nQFi=9RxL|fBp-z!ZH1YUsbjSZ{)B-DZ9iJ>6sikvU2b8Gq6
zxlO^4`z2X$ByO}DP6eOn%)5I_WlpURhU3mmhJ>Vx*_$hv`hHrjbSRHN2F*RJlVm7O
z+u~vWE|^XMN5^xcZjP19aV>H8j2!X1{QI^fBExmcugz1817pcsv+g^niijQ%Vg?cL
zs^gn?8B4nNqvbf?{;zRS&I8>iI`C83^QyZO6(j+)(5<{Ic<ifZmsom!PoCoH@=>9l
zejZ|z%Ien%JB1sF?HOap^%E1J46ySCg;)m(oL56kYw5~q8ArH$@jK=s_H^SUdrJ!w
z$i%#^yYIGbc>|n+oQrTOc&6!mAU0PuE|}f0yDJA$(rWm9i3<>ZC5(+04L<lx<*+~5
zOQ(9#k$YimHc|#IFs)?$x-3X?JCoIOlFqHX<Y@=Z=-+n`M=iwWpA0v}ldE`g^fjZO
zz#MVWZs%3_?e7KcbH^5&Gy?$3?q|^Gvv`Kxp;ed~PSYRx;MZn>fF*t)K63w9%X2Pn
zK<muE+!p_jg`;^qC8r;qI`-;Tw$acvRjvP`k^i5G|DUcyjdjZxN}t*$dM)zqQEsa>
z?aS_i?J6?W8p>OOwt9oDf->=YR?T(pb*U4S%01#3R*gr%Q0>T8Mw|1f2JIkXuTMc9
zs0RDInn^3(+Z35H!r6w}K<IN#d%srHUY?}|Qk9@V>k(Kwp>C8~Vgm`<<)Sodgq5f(
zLrp?Ztk)lSK3Gi=oRZ)7FPv`P&ISFp^_QkfE&2M=CO<c{M0#1ts#~#b4NLHkj%+=o
z<YZ+%T1#^+goSm~zv=S4HdI*6+bh3T6u>Q6)X1}1=*zY^+Ml8zFd{~%KAvKp-`n|6
zrFPqf^7F&4Y`-wx=q_Q(9F?HBMHHqG;tUFO12PN50?G>7L_!dubYfXab91R}7(Kb+
zpsPgQH8Hk8qv?Xu<?`Yre=?@CiQuP5n-p{Fl<+E?CQs%f2b!{xs4DXiMYMaUNytV%
zX0+eXD|NuZZn@lz(8D`K6*Fyww}jcyJbIGch#0YvxWj23XosHXFWMP)XkASR6Wxrq
zm?Sk;@Bff?6E_gI9hw$qZ~>83xW@O=F4V)xGA<lpyCZE~JQZU&JsSRAD*TLSe^J1l
zGszb@T+ZAM2j1r~c2KMsd+)GIiz1dsLzMz1VrG9mqfplxdAjqdiI4}~Dq?+{Qam|6
zEsf2iT-Wd-Q);D|sx7&(VO#tPVF!uI{DvcazRn}&`Q?RcnRuhH-8qsQW|j?Rpca&_
zkG%qn`Q|Q+9#}1$KG@Tx7|LTtQ+NyuMIg<e%hD|Mm*D+lQcJCVOf|(Ti-;@?@jlB|
z9kI(ZFoTwerC44{mttQYa2oBIn5hfde&bR4HTXD`EiO3zH`}oAQmo1wpp=p@ud3)z
z=>9NxlxtJY0DF(%i@=ReRWF)!2zFi6nzunc;=V>>p&?UIPt={Sp`tWs{I#@Eo>BAd
zJ_2YjxW72yEJd8@Y&b?1ff`_<CR=TjRtlBf3C>e}nF#utD`hi-(6q6ZHECklcQ*Th
zX0%zhGCNReUYxO<evylYgOJS3sEPV5B>Pfj4s-4_ygxioJ-#8M?Gb0uzAkYmU!-sv
zwU>wuv%R8fN?4qd3gtohuD%=^=-p`8A60YPW&;;-Y!jyqm-E+G?zA7)$^Q{X6p>Xd
zA7oerwXX7(4@loOwApA2+-Ij~ROQcx!N`$Cjp8w^HQe|dqH|PVXK#J8<qpYw##j%L
ziWwcn%xz$C8LO<`6=YdNIHUn8km*dM?&?5I*s4TE!b0icZn7FJxqSW8ZzBD+wJu&q
zM`{(Q6mZ%G4)zcoyIp4!9?Gd5WwI989xV_qX$l#M@Rme`!%UejngvJ|<l{Xnf_JUV
zm^!Ch)DydXB1d#%@ugsI=_X8@4YMzNUSOZw#e|L}CvRHgs2jUEJl7`Hq$%BkB1IEz
zy1VWWS`dL}WL7dF3$Kzr6}+HNIaE$rH?mO))+FO;vDm{XW@3?EQCFOH9S7dO2!e4J
zTfA>AQs*f+tL%?UQI7Jr@xoDAuY%RHz|FR`kY19~EbK5eV6{(}^#bk=sDah*Fos+{
zf)YWMmrVy+e6)_sByc2~Pg9p03{(-D@KTyuW$@vGPVT<xJiFERCQdWnv37OP5x)xX
zuByYfyxw$C`8@7Rc~kD;jQ}hUv5sb^u3l%@yzxMBW<@Qb^wDLZnoZFqPT9oOCV$y3
zLK3b^eN92A`MPLIESa-=R@9TN_(_;Q;%XxMHsLq%6Fb{Y-m-RN+ragL6xuzt?q&OC
z@{F^(+iI(8T#mNQ%CkV6U#x_Wq+>{=UVl$<R>6@?xz*1w`lx4km9m#lx~)n@`tJgk
zz$lWcDTmvDMC0g6ir1+2{+$Q5j`Ty{+N&AF3CCLc_9BPF#`<6gl=K5U(kl`6CM>Cg
z#2hMkB2c9eIe75(B0&?YGp9(*+O8;X-^-lJEYr3SYZR)^vTL^3xhQ1Aw3iJF!6mhu
z<XImQR#her4o0`*((_3mJTr(s5%%GetK!E-)UPqaX<I}9_mW%4ow=VezHW!)>jmVj
zVAUYMYR*L^b(2oiuJzWkCFeCpVs*>5vp+%z9L<uZWYH5GCZtyJgUTOa<)Iv~UyFP5
zoAjtOA?)1y7YcJ^8P1t^0a9BBkIrrhXPA2V<F-FB69Z(z5V4ATe08oDPYMifLfU?)
zIj{TP3?3L6%BERP|0Hg9?-OSrDSi*hNnQ~8Ix~f!(UOf^JJ6H57u67=M-#X9+;_LE
z5NgcFa4-AMovWT+e9|eP=gTzFzq$802YcrtZLB|z+MbT#=1R${J8fOwhK!F~1fP^p
zH4m~?FUq5aq@ngQ)eA#?+g0@g(6rM5hrSdigsx^(IZE(|Us-U*l=2Q6AqYzAeR(*{
zKYN6N8?{T+h*MVUHJ?1wETq;25>nt?>VnO}=XtJw#=v8_LQ|fkr0z=F&{c09<TrT&
zh0dIlpQ_a9*MZvg)|rTSv~4tls@J4yY2<|6H7g0>q8zU^V;Qn_SE9$a^nu?^r?!+U
z3ANuSXRgq`tORRYhwA&yM}UGS58cG))GhBWbQ;xUeI6$XyNk^}Q-MgW7=CsTjM>6*
zlV!}!ovTa7VGZ2&VVVzMN0$zkH^T<Hiq{-00g5Cd9(9Q?=%xQ7W-G7iqw|V}=obc?
zti+(&-`T;g3tY9nYe~d(-jS?e?^gCj9ZI`x_2l8JmEPNa<i~+grG8s3g#NFa-+`AK
zWWq$xJl5<?@~s0mX1vQJjI@=T*BTr?`_a~p1J9r9K6ozLUZ-TbT|E~FN!ru)k3Y<^
zQZpq`Q3+}aPS7<fdEu>R=OFD|Y<Km_o(G*KMx4ADcoB*U#%B!D;XmsvMG`csyBU5}
zdoXhp(cBqZ3F<>~;8`=M*yfl!d!-rE+0&T1Ha(AKZrrW2u%j;fU-olTvDWlbve9J(
z^y=P=bd5n)!+MN|*fFNMlS_HF`rv1cDBm%|*&Nv0e%7}^n337-i&|vXYWe2a)g@bt
zo$!cEFehhVr%cj7VlB#-&(pcoZ!);CkL}F){Y@1VSmdq%Y_GbytSnC6WqEg1)ZZin
zB;J{hsZRHdtskD@*BkB}ER?plk)LW!?hB{`2lZ-it&H8LnDGsjuPDFQP;fGQAGQ6|
zaICzqFb98F-_u>+catEhp>YVM3|J}@-02S0-iK_GA^SWZk}+7E?NqKUo|e70hM6*5
z3lY-bA4R77mOD0OuyjfdUkl3{)fODZRc`8o{YU{D9=1FLkfl<hM~K^=cZKTEkUC=R
z@k6=<hx%@i%dV842?%jnGuoK<^_8#DC)LlVErXsnJ68Yxgec{35uEW!@Fv6f7}uV+
z<d|gsk;ZPj)vbJy>|jKEY$CrGT=rYyKo2V~ZG!Wfu5&e<iYaA@&h%8NSf26UwF4A$
zyIn``WT4bbdPNud<(V_3rr?)f?rxA5eB!Hy`{Yz8J_F`0eMI<D*03F57#G00`0kwf
zGn0>fn9e7<-kEn64;>Zgkq1-IIP5N#<hC!!Hu7Xx%()zY?@b1CKueJNOaCW5U7p67
zg*dQ~QP8voqNRayJEWEXrC`OBM#9^w_pBuGjbB=JT4`*0w*rG+PuVTaNe}2u+})V-
z#cB0ta-f?1Jah0&RuLiVHk4Sr*8;YFUy;`PF`&w>yyfAo2UxbP92~K>S(oUu$*ILZ
z@D#mMU?a<nS9_=wC$e<>PQu#$um}NsuE#T!zOQ-7??nXV_gg_gN7r1G`yPFeV=nq%
zcp3kXd3vb#?1oZN*})RwF6Qx@47R`S19xnmzx>zX0sm2izfgu7Q^1hWJNl*5h_TY?
z&rW?`YG<ZoLJPPJo9)$sfGZDs;F;!WP|*g*1g!s5uW)U>R5K>~=r)(zW_n5<-zYNX
zy3}Cnv_fty{ntmU)IAj;^vRKpGXU8@*5l|vacxh%o4{tzxp!7*-eGPRq291Heg>j(
z#Uu`Bqh8r>kQTprOX}#xa-h7LLnbWWzc)?x;|H(u$wb~A&-k%^`F&(oHLV_(imfc*
z-)6z})tzDWqeT9|o3+H1toquIH<EVkQ56meDYhAeG0O)vQxhgPW;p=~<!kUVgX%2(
zopB6W@k<+KsNI?OgW^rH33*rY2En71ZNG@arLnX^y6i%)^M=vbJ_i#Bx9x%SqAxcz
zX<cO+9jWCU4-OIRP;{XUI0ZT3yQ?Nza(AYToIPYoh)iQ$CvJdU6{jcy;(g?WJ9E8f
z=!sS>(ST#4@3^#NdL@7m3>TH`LshYk$O$QmTT|hDXr1&N;N0YEPcrsY0jrm%+0=PX
z1K_oeGlpm#v?&ud!c7Kf!{TMhdIsH|;7i?96l(Cihu!;_TL&-m6q7-EE(CUSXmJ7D
zCuTy~Ak6-)jBzt*yKT>3Qi<d;u-+zV$XXNEFy1iw?4?yX8^9tO#<}EHiAv&PMxGp3
zWAzh;EgZ55qdjHskZk+cq!1ZtT$>XKqt0n+QBKWIQ~+=VX8=%$9p$a86mP{^gDUk%
zwG8_W%&3GGmv|xVTT1cnn$Z`&L|@qV*>-pv)DHl-8}u*?29U!*MgD(*ssgCybj!A;
zO%qZt+vw`4W4ZS4S3HUzY4&g@u1%RsNJuy_K)<Ei*G;ObA@}NzxzuxrrUL;kcdJaU
z*Tjr5U=INH;y;4T5RZ74)`V4!mAs}+loHpBJHB*LK9E=e0-2AvT+Ylp05#9V-MYuz
z`n$wUb8}vGN~cT&V0Y6@0pSp??$~sU@%K@e2jC+B*>fy6a?6<j0<k}jEnP%C(l{hc
z7lpUis1fr?bR8P;b#?F8Q_6{yVK;LR+gpD<?^pB+&I(tEfg98wM*}MIas|<i`J)XK
zK|S$s;>=jsLyaj|lSSE133Hz`>YJnk6Rfzpv@hr_l;-o8M$8JQ^eKilsDSTKAC2iC
zZKS=DDwWt#*p+_YIw9d6uMF}{C0={Ypic9!;mV!~ufUS`4!((WSF@-mIG^yj^q_zV
z3m|~=?q^`et1R9xo>wufHNlB?g{oT4S`KxmBQs6>j3(koUpU>Wu(*qSRMzP3dpy%0
zb>$w-NJgV4bkc#Hxv>CcZXPy0b(sFEv|NL3Rz9~n99c^%VQ#kQOfPp4`t@g-%j#Ne
zh9Qbin>D#L?lNOTu$&r=!x<qd#{5;t@#R1{Ext%ABeCXKU&%w>X5JsG{!Ml4-wxk?
z$SSXh9dz&~p5j>Z5rh(oB?0i+d-4eA%}?KsM`FF1K%7lgOZmN$r`kj%)En)w0h(!h
zuYhDJeu)ew&`m{#@A#19q#2Z*7<ET=<dWt~gvUAbZiC`GzoRPWpZ|W%y9a}P^{ltC
z$+u<3rVvKI;bOt&%3^HzkTggHuDbI$hy8vE<9Kf5o<S>qq!dp|iq7lWYF)))no!-h
z#5o1j%1;*g+iY60Aw*yc>YI?Y58hBrfI1;NT_!DTuowgHC$6mympR7`b9gj9R<?<P
z32e0cAXg77KM@$=18#cxEZRNitG!y;U&^p`jgKL+Q54*^odJ*nh{w?%TmEPlL(>-M
zzcmz>OgeJ9D9ixP&LY;W03Kl-w$Se9r|Lr)yJ9g4=eypuc}dMyr;MNB)7ol@fAqcR
zA7aBUOTgx;swWJO4Zm_pCF(4?ZcWXoCt!_t2mrWoDMfrj{0#O^F`Tc8xt;^@$IxC4
zmDF%K4}uuR)B5{=68(D3^zWcFN(+)HpYY+?1F6H`Ya=N(ix;na{~oK~&|I39sbq58
zd2dm+f4EE>x)UW+6tsBpq(37}-4C-w>GY-Ezi%-IDTsngw<*f#OS_~3n{QCGYoBj$
zK^NC9BQ6&#RHxK;oCflL-14mW1v;{|;uk9U2YCM2JDG@Gz@?a{Ija0Y#8W;Xn_51R
ztj<*QJv-8_5;gXde{{W2X`~r^AS?3NF}_dTu;y3r5y!`#$5mMTf+d$Uy2$=H4&7EB
z+9#x#L7ap<eu;Jlim+Q@e$*uzzWQEhspB$&^32N^*Pk|E)&@^J8CfH28s3u2W-T9f
zp|l<zD}#$9M^(x>>LasX`vZj<U;D~y5x7;VB;A=of=8<sq9f07KB2yRwYjle3B`x(
z#<Y8xQn*}QyA=W7Cq~6*BEmxPz$shON;(eR6MFdQ_*;M45~0h^-0z8sOtJZ(t)38`
zS{>M+?oIZwVFndMiQKkV8R-8OhMSX$E~}fMj>HD8vDW$M8Hlr$j_>xq9T~PMw+A0v
z-V{y)d*G--K}`#_(pXK8kU*xYaFW&Yjl%SD%_yX)&~!TT=|HKC#$G*a)6`RAN(3s@
zOs#46$g!gT0vY039<B}`ho79WX^3H?--Y<^y^yZSE=V*)hiYGCJCTEYkBv69J*om9
zhwNnah3bW0WlgiQX%zADE)Q1Rk5vE!LY};|WTTvgu*i)XSia4i{%iumVEHB@$?345
z{_9Tr?V^`)H?#V(s`t5Go)=j9axaaYWL@+A9<7JUE6&JaHCOz5IV>~y=beMnJ%c1z
z^JWBAu4ly7`IMy(Xoa~9CEbEej5j?1bCW)?$K}L_m1}Q{sdbgTNSp57_3`u2eNQb&
zswUt>=H8Oi6m#p|*Je$W(B?4+50PC;05)36r@3v94^m@Aukd28i-D2^2WjTSGgje{
ztDk9Wh-eOLJ{<acq<N7oXPD)%Kt^n)61=H$yu+w5YiS0oSQ8xRY^P;TJr|?{&Z=N`
z`b^MRdA_R9AC`%|x*tz6ZFZ6lkbTV)F$y|O31B^4d|kAmT@vi-Fa@_1c5vLMKE4U5
z2la^rYfr7;>Ce~DC~+sW%=aWw$`c+c4<P$TeIIA$C`ewH#`=!dOMSw~tH$ka1q<#G
zN>E+u^RNj>M_C36^*pR(L>yc0<3CYV+DIv<HapE};r+hCc0MFO%Csv#;h0q{goMd8
zv7UrX8vo+@I`p-P)n3rhBAqp&tSDosh<hXy042pw!1f;5Qm2KgGCevyhVkZK^q0sw
zY#-b*h$Qf^L9^m1>nr1TEi@Xl9tb#J8(u-CI~1r)b?w$bNx3qCTU86no2LEMrPbgA
z_om24{pN+%)^CxWdVw~Z;21q}@*wG_&n~D^-6%0QX#LP)!Z~V>Kjf#>C*(>^j@cX#
zQjjnPl;TIKW*^?CvK}*}JlW|<jb7n)i>;7*M4jU*^9R2Nvd5gxFwQbbQbWDxUe2Jq
zb@tTN--l!-(w#7!oX66tU)((uv<2gYS11@<H20-Z&?pAwq`4J)eyHQ^i>of?It)bO
zntghq-e%qC`tyr~;VhA{T3@iw0%>$Bp*t{^^T$<%qhA}4ryz0PJ$&6@(T8h`%ENql
z&Kq>By9dr3ow-47-*?D0;3A5UberSYpu@9nr_t@Nica}Hl;EE@u$A_a`_5{NyC*-}
z^kA;&%;Pz(WBPuesKZ?z6_==3bIwbagW<aM9+HnY$+&O59_3D=?6?SseC6I<oE19q
zEiG9~cJlC+zlr^Jme;_DhJ|4@PCBoh83b#3zv)Vv)&=`4FI*tpElzi4YRF0TFNC`4
zQZU6H9MmQpw0XguNiGXKEYjw0wbkcFiw+s9IZc1Qa@Y{ZX0LK*6u{uL9;25Ih&smv
z3oH0buI8;raDA=vy!q8>GBQ2sUZ+-RUdDBqRfNs-c|5Swws9l15z{G@T(!KoM<hc9
zj^e2fS=|m49$W&StG2zhbYgkUGrC2y??qfSu8e&two_0!3wcQO&DD51>6@)v=_N5;
z7Qp@Z)20XMp5|SsOOln1b@y#t&cnx@58@jjWgZvz_L9BA2{;m3Bm;8VaN+%4fFQ?h
z)Etm}tt@U@i&?-LBr9<0#m5uq*0Ucq)<;yyz<W%LaQV+usUskS*K`m<+SWR+#Q6QD
z#<j=p-Cz0lI4*x0(zW(Djjjq`Xxtv{?tYu{^5KU~X+qekaBj@mx!A*(rdwD(>mxOj
zN6-NCr1Y?Q?zWEFj!OuX=;`K~_Ay}0s8SJ-EtzGD|I25H%6UZRab|AxIogpz7o5S-
zCAlAP<{Njzw60;1yi71oxfwv;AUOUlk{kgS*5<sa>HAL%JKpeYj;i^<8iHd7sznNT
z!xxuij<$bCCJmY4{BLQ-oo79VP~PLXRarsKtr<mT97j92NO9fdP*E&|{)vjall`Bu
z$Y<e<TbGNvgn~-*eTa&ex}Cm-F6~I)kMCoN66R&aN#IZ$8X>H|K;BvUc2Z?-DU$s3
zG*bh}<#WbQA@9Y}MT+%E$?hfAvuJ|z$OsHOWtHF;mV)~{<_Nhi6N;-NWBR96ov#R1
z4=*%9hc}&yboWf~O|?>dNMnzi^v<xR&$h6_pnG);`7WJBkG`-{dU`fBaSJ}oBZScA
zbSb(2lgf{u>QMsOTVsG8olUVlcd+$>2k+8OS5`pVEN@w=2XHJSvB-oQ%nhE1ylmH>
z+&5_#5OOSq)FfhZVjbq-zNN770l4#?9RV_7)Bk!)X!e!rvC0ZOiavZHoqR)Z==y-o
zSR!MJKL?TvnmM{wo2JxyoAq=^l2=*vc9G!&bv)}<$pNOH1NWlN6Po2{-2>jOhZdB}
zT+u0_T~^FHeSU??mGfAADCxor>7z?uEyk(FST~%3nH+*Z2_w%~+(33|(j>f&_r1m3
z>szzbv*a+;E#$uGL!R6$XN#Iqcnr~uZV;5;ZXi0Qla~hiTjwD;x|#tcj2Cp%+TH0+
zE5i`uP;T63c_~g?S_<4#k`LMZ@z1Isak$jUErffAzreb?_^Zsq66mKsuE2RWSP|+>
zSiyn=au;AevLxPh_dpsbbc_`KCf+BkQVG%Ubk2G(vysJ5`EcQKn9+Ge+S^wUnLnp{
zDaL$qwsrCXg7!^W5wh_`b!PmyBx}Ym&?3gE0+>O6yjm>T$J|iXl6=Z_n?Gq7DH!u2
zwrk@hJU05@W_bFY2?n{*Wy+R*;M!X6X$w#Zj~flp?94*w+6%5TH~5Cgi5rt;PB+kS
z`7=b`XZc85vY0XxNSY71p;Pf&5JyeJyYK5hVdhvGulbokgwOGa?$&xU4~R&vB)C7v
z)3ge$H3`{gOMIuwwJpUo5RIe!3Fk)-FOZ*Ej~}MX^^;`mr<2pf!^SpWrh&u%5^Tr$
z(QKAY`<QDnMCJZXL>kw~YE3uqV8jFeRyk&!!y=2aES4wFZO8{6u;+Mrn5Ouc*KzcB
zT-gLN<x?FyF7W`qY6aGdc)G94S7ox7hyM5=9-G$D^c7-zSo96D8G3V{G;w{IM;h|u
zyV+a8A^dmCKX!RP6_~-!M%;KKApvVu#HCD~<g9{G-XyNTnJ>LQd}$=<0jWHXmrDQ3
zJWFnA@;tb-ggN@3&Gt2r&4uB47|#cZLuw&nEL#FkT7juKDA7|KINLvO`YFJ+g>C=u
z^DY0`CAkWr8Ta%>UbFCY`a`apkKNy?>~R<m{^czH?G`e8-26>?fHK`jC^E)9=Gh-N
z2ZKbHGFf$T&r8FrK#r%vW7=!;-UVf&jEu$q@|KL7PGsD_1dekN1%{CN1KehZpwNR}
zN9fLvS1(RYBzl-2x$J6|hFggw2}Ev=kV?q?jGICCr5-osN!!>Mo1^OAC*`IQu@q~!
z<wXdTHYNmh*!3*-A$L?+HNmtqtiFC$QOr0ipuTq_J~oqiZ%C<!*fY#O`l<&rLP_f(
z9){l~E>}A{l?`e1+(;42um(X(h84xl6Fm#(z~Hfc7TI%KuA)+EM{4}8)wd-!lJ<Fo
zQwu3i&sZX}xTSPfo0ie7GlTgrwraRt0;MhoOz@Wn=d{pq4)V1smS$tib=o~P0cXoQ
z$_i~{S_*8(L;8YQJBH^e%NN~9hG0``p42$n&95f3`Fxd8!s5j{a~rFrL@}9FlcYXE
zS=p+IjEBY(b-mazAZ?*AnmGCEGzCv%b9&%gWq=C6?~RV9bR_k4sjL{jz5be8DFQwg
z{_XWGFje6N*I9Cmb=F~UBQ8mQ9lPPix+U9@>ZeoQ4v4LXXc8#iRF(5{*2VCaz<q1z
z%GRqA?NEoj8ZlD$S~+a@!yBm$tCDr0x=BmNm<|rL`sa|<{?Du;=%Fs8r^s!5!>|w>
zZoAo0X-N8Z^JJGJ_;D^=7;BMGMywThH^$&S?w^^qI<hs<?ltnWT&5ssntBL&FxKq7
z>;?{)+|W1L^^Lg_ISOY?c)h^mQDYgFp88Y!mZrAegDfg;lgP65n<487bld1PL|kSQ
zq6I{&h3(ZGI5}HatuB}IZ)Lgv0J$Yx2rC<0`D9UDF&raFLI=K)ELU;8InBCtf(BO6
zICsiVTYQX+9?VdI6dDQ~)Z*j<$o`oqdN87Db48Ih*Z0=7Yif(Vg>={TV9!tT)Q11m
zE<1LOWAvNK+Q6q>d(E^;1k7Q|qh!7FgN0Bv<ecBWUyE0rSHnJ1%QR&zhU44U;V;~K
zTHmBi!XA&h+b4&7#3|y2dlm^Wl2(Ao`?+HsqG6m{q<QJJ7zblLnp-D2qW0JlGdS~6
zr$M@67EBBmk1Biz9m&%<oDDDYyGZsqUllp8$QkksADJzfIxO%s&ETRhVS!6@rS}^l
zbtZv^g_)ksSLa4?TT`lLO@gU`jW#mZ4FldDBuqu&Dlb4OD$-X5$0^Htj)49L3Qvn>
zk5gY&(W0^(Me<Pfv|IEQHtp<L3zIXt7bueZErm&qdT2w)(#~cv?rLnat5AA~X~*rm
zo$j+Eqat1_&y)!g0(0NxWHk(&cV}*X?rEH}t_aypkIQy-KaB>Tqge^5`F{^4W_W0a
zI-e$e(eG(x0?k9=h-X0;Hk)V*n>~>-Pg95Q9UBt=ZonJLU3XbeJ3#RB<<1lS*HWAk
zOK;2|zBxby8r3rfvyayVYTSMar|#9vQY*)Ud-{vX;gOi_xhE8A_~n9tJZp5sH`6n^
z*H=S>3d7aeW-XrlKoYtM&Pw}J^>1Q|4{x9hDi>%WQH1lMQ=rGF+l+l~180~=#R{7k
zW~wWgU=yJG<lgYmc8H*3Ais;C$(KsL3o#v}FSCk}HzRj>m_{8PxGV-ZK+&G>U>S%x
z5boMr96~~<r_eXbAnK=FXh?(fsmYerZJhV-{!cwW2!cA(lSQ_#BX0l1hv}(4JxF6l
zO?@6R+&{K7MMN8F;_TkVINGZbnU#$5-!<wz7rsW&FBZ`@Vd(QfI_h)F&0syL>3a7+
z_D0<YdBlTH4)YH+H*TJF*AE|K>>j+I5EXOnidkpHw|cj@pQS-j2A6+vjT8MQlP@I<
z=i}{;vHF!83VNd37p-BLcr%5A$M}xaRa(>8+n++Q=9=4PQ3ek82@Z-5GoGma_4W3w
zMU1$*aQ!~_fc8Su5fDa2sFVq|yeLFj&UPS<n~U{*q&~%mqKvM`YgAtsGL|+~mhn33
z={(Ahb$@(!gwU{l=WGl=+TR8>2W}xMRk=hR_q^L1>K_I+R_rL@ZeL56w<Yw|kuYni
z({Q{&QU-4w_uLSCFzeaMa3!)Z|1?>7#l#*gOKTdxqdtvaTnN9r0XZ^jv#eAm?Vx{H
zEuWaY&<1Ou8LbVdnU%+N5-;MsJBw$6DMoC~27Ph?XT>HP_9-_A(-V1_)3d5kn{9Ki
zrPs!kRr+@XQjumr+QF_brTzUdF~<;P)YB8tJF@sRV}Sb{kz{zC^^oUNGOHWdVPV?V
zZ_#<9<DvBCOYZhnVCiz?Q%v6j^wn!z<wo2Wl6ahAbVH?)4v7QA2KPqmI)uXn<TgQt
zaH)8>(NeA1_XcYWKTWVxy;S=fr1(8GRc4M_Y{yv;@jw>bB5@%^XB!-#GU~k!6>z^T
zE4)Kf0An)pI@#*VXsk6ZmTb+zed~A1b&&L=fbOsJV{K|)PAiiw@&ZA9pTEEBS=~7s
z+qSx~zG;`(mnTvrsLhMHhA=lXt7@EQ(03CLYrW`?bHb`I9~>Ps5}f;~l(@5BHVs3V
z=Hk?22IYZd^-0m9N17b<bBBB1A5mt-*hVwAoksht@$~E<%R7l`u!E;yx}+$*LS6Rx
zmg_q{Al{S&=Nrmi=($`iB4o7Yl(AJU!%gJgpTED$aL<-`KUM2{5@RPx8YKgC1tHnT
zj6vLtL54u7FWTVU#mH3pRsmLi|2>R^4<S;N0*W=rFq0&u08|dOFBB1`ak;z|JLR|;
zw#xmEFXZe!-GM&?H9{rnNxr&7^q>hb9Cgk(h#FSZ6Xcs!%%iSeqOSh@7Tw`!RIJQW
z*lUFAdv3`ve=RZAJ5lOfUvkRfd>fZ}mq!e<)E^mUst#sYzdeu~ewr!CY^RFOe{o|=
zh*7j__xm4Wu>Z<ZUS{?s>wp#$j-;~UIcMqOHZf_=FI~u|X;lyaU@WzT$?E&&__8kX
z$Aqri>@NlAGVw#hUSCX;B;FKLHf^k{<W)?nTP+am39$a;u9P_XYgCXp^8K{X7>feH
zPHI^hArn$v(xMvj(B^Bfz749rWL4w&mrV5_r^RcuYQ2QOljA2xDn&hw%Ovr}ov4<Q
zZFWGb71~5o*Qnd1T2*d3>^EAkRII0~iWX6GDlqlR7a+i0iv&+J@7tIUUhh^S?xWNc
zO&SvzS{15omHEY-1l?Z1TaOyrPUcIe4dgt#4WTVZyOFduPXH>e)Nn7!7}}T;_{s~`
zRyAZzQWKziAs@!d8wYMgcMa5`3PP)BuXiu~$#gpMn=AHHcOQElFj<Y^3)Pjftm+#K
zo8!sbV#s#~UxUtLe2THq(O?$1+}JgQ*VLgIBe6TrG2zwAa6~q{8GbV0bJaSwP$k$~
z^{?_A{7Q(8ip{n=c?yCfoze(s7xg$ArbbU^RJj<B99S`F68}TC@z(P1Y{PJHgY3D>
zTT=EN@xFDcWgx8E?ZgxJD~JWvn08)YhGxhrGe!<3@H2|<P-cc%iPK}Ax?^fI%F9FE
z5{n&0@eMJHK3m`Y*(*Sa@~Q<_bjG5_nMKmLdE;ua7lS~WcO8-*_QreLuDF_N<YISq
zH1|4<Jo1yhY;icsia!O%?A*Za7Q*?h=9timkms>$K;eVb)?Rv(KX`Y;n#Ugmwzr|p
z)M8347B#@b&@yXbK!<)YT>bZgC3NM7>t<m<71yrHGD8xnjkuH>=d+V|4i?tL$TO=0
z{95Q!S|7ry?2TBHP{BKAcQ(n2A2&pg)sbY<Li}$TQa`PAaxHnQREB^y+r*ZB$K0X@
z7FSEf@%~;tthoZjS7t8msEkNyVETib`@BOfl$14C<l#Tj*AS?id$l0gO2qDn%0%RW
zFo>^7Uw4>+>07XR$<OEtEWy{Azn)b+lj8JJ$4er4&45E2iD+wQ7o24^7DyKsM2{K`
zV4^)RW9QS$H5!!!xRNU<nfD|J;(TbW<|fx~8>uQ%iqky1<F%p)pxy^FV8~AKCc`H<
z5PuHmJ3R=h@<ajg2d4u%BHsu;Zr5DpS)vw}7=vEj61cPH+mgxkeNR@d=Lb`1yo?ww
zXtv!>rN5==Nz$7mU)eRh>RFr8c!CTl=LSU)P@9$dRle5#`e$DW?-?h(%sA<kP4f}{
zsJOxfm4LrP9{8Ek;fG||^R*I!XuM{;?05r?i>!C~d2prCYc`z@t}mW17G9ZmvDDPx
zkB9Mh+Q&)>ucSzC;>Cu_CLNY8Bbr?+;r{th4sWKjt@Dh$NLOjCz>r7Cq_YL&`geH0
zT-g!kl>5^z>y@wKOrzn`>#Za)V;RJT?AFU!V(kSMzpGz?2<D1O&s`PgS@k24xIX5B
z$-3PY*8Xo7ovc^=uiGX^;Z9hFH1F+Fpkah_JoWc%zS9_-`#`jBFz6kA)5iCpUws4e
zksx!B?j=9&d;>uvaRTNT@jxT&@Nvkq`I^0@VVRMQ4I%kjWlKUebJX6Re6b?k=uK``
z(|0itZ`rJg)d}GVRqGXaxwaNP#Z0;Uu?EM8Bmz%4fDmRM_HN&L#IoP#DZC+D8fhSG
z>u9miY0ejbT4*XIE`(SzNKd|W-n(D>Dq2>9C$fU2sqUGHbq%<qo)_jVz+L_3yM6A2
zJKwwF<kdBV(T5-w1^6?D(f^5VV$=Uubc@3M@94(!sbo=u@+R_0`B$|oh-N_n0GvTS
za|FKqPvLDqf^ie0F0Cho&`h!pvK-&BGkCqdF%aTaL`|^02Q`P8h?jh>vHuIfJu7C|
z?G?~7a9w}#XF_#^Z#muh%)zvN?3uqtm}qjaFH1~M8f|6?KMHcvF!pM0G;BUx^rYn5
zco8=iR|7^`CU~~i(idv|abnK9Cf9b6NL7WNwe-MJE`WtDjN9e>dD>3p!Sp@pLhZYT
zg*=Bo_sA3ULg}@>kTUh1or=Ak8Fm^^`Z-Vwg8uA%p3W`H!;f$6SOFzEAxCQBWn%9e
zX@u;Vss(P`W<#F(D+F6ISo|B900uz`|Mm~*^#4j1%0H|+`G57cps}1woAPdMG}c;A
z8lQsu6(At~!xR(DQ<u;4q_^P6qO!b{LdLDH1@tSm<fare2mgi%9{_;U*btZzl_<`@
z6WyM$ZhUMiKte7tD9#*=w&p-_A1K*b@A)gBi*{e)^+`sfi%*`H5rY<__{scM>MuB=
z_9!{zbnawgoq^d3@)(0}zAjUOYgncqqe=~*Y(4`7=%rJE5L+HyQEa><*cYc+s{Rb?
z*d|J;vu^{xlnsX2m~s$uKia$1eKK6Th#*UN3AQ=~aR|k-0pRv-LTFn=<Tt)h>2U-{
z+mK#BX6h!n$EQExc}4SvtJ299Ge-Rf`xAzaRDi5l{f=8`p-+EfRJ+(%@C~;;N#r2#
z<G8>%N=NO@pJq0%cSUnO{p(Te5x?~>mQsUa#9NzUOIO7TXkIZG4aYhzm*S&tHe!EI
zccg|(W_!Eq(8N~(y|NZ5K_X7CchtE`tt7K&diRKJLlg`8^tBvA#73GgP)b;~ny_Xg
zJ-x%7yobW)0PsPV6KDm)1fB7TWq)Ps?uF=l6BCbu$YIK``z5>0e8O*vzuEVE=fMkz
zoc)2ilOAFlHyAAy$7>Eh2mk;A>I@P7e|w!unfIv8Y{Xx+j(=50UFC{?>TJz`jr=Qu
zw_B_%E#*uA08OzEDIYQ*+6|1N5gP!5C)ZT@kntfK!hlH_9UsE~EC+Dq27<uAuK#G*
zX62K=+Nbo%7B{j!rDjb1X@?R4S&UcSFU8%=;p-*5@nKNX`U7b^qrRt7mwbVMV#%NI
z%#10-m?Mz%>B7xamow;-dJ`KN-@Ax1A2(=a)_=%raq*u6jirJN$%@7Ca4M5B&*T+g
zsym$pZwk)7q{JjxSI{@nLLwy|V{Dz-a59S@PL@$3L1~zHHbKveVH6pR-pB;1)m=Us
zDXXWaxz+`?A(a2bPs?E>*H{|@$q;ZQF3?eJ19AiPzAFiX8^pynEhf%gqgs}F$qh{8
zPk}3AQTl7<M+`EEW9uZ(fx&m`O8$Y{=N`q?wqyd}{tVJ0+<cOY8Ebtf3XESf4~Hwx
zK8}2-IPKBHk^2C>h=XdE%t#5=pGQ-CZ&@Z{2(1yBhsx%`*?lSu4A1t$=GLK~+5yc&
zk#L?5J*D^(+6Lz?PYaeFkOLrM{Ftqn#>A&I*I3_=UG`Q8up%rJD;>?Xczt?*{nmIs
zhU0tj!MU-{6ReQ)<8@btCx83D93O&mVtU$R`^pnE`mELcSFZOp8UWyV9rNrUMiScC
z<7cJLr<eP?aIiGGH@ZB@OTKCOYPgcw^kc`cSHT%XMZA%J;(C9+iHI`}&x}PWPHpT(
zwt5Up4K^?X8Z5Pec<~6@LYjsaho$+ghsZO5PfmX;o_(CZchm2;LdeT96BG^G8dElB
zxS6>2o669tspkv>eGa->Rl&iG!ADLxL3Vb4kSx}o-`0%IuJ=aQpJGS060w;2O6cv&
z=fd-+Et~1YO3B_n5@dn2ll?Uwf7N9|?(3}0iiAo4HK6}{X&QLo;9Nb0dz;_Jmio}5
zm*^160;sv33CtMmx##Vu^U_Rx|3%s>Jok33`|+nB4-ZjRpwvrq<jEFTNQm#usswME
zSy!D<M*jB0=E1J$h!!pl-XUaH0?b?fVSf)M<r6$s51ib?Wc9Kp8Kdk?La}GPIae2C
z^X10?I{=Y(i5Yf~EXb6}2Lv!P&}Pj9u~0^3l_+B0sOf{WEeA6|R^Xp-<Jvq+pFW-5
zWM>4G^ApM=@RpFZ7gjAnS@Em@#QC3kKMj7O6|ESdNT|yO@TUvv>PM$s$j#`#%DMhU
zpznYC-HbNVv0<b0SIyex((k<glKxG`mcQ#_FpUk2{cCs*3DoCP_E%=Zcb%j^-;k&9
zL{S|VXzW+_x7PhMd_)-T<f2_$;O;8z&Uppb`Q(N1w1^sRLbzqc{Wq*r$)|lKeI7#?
z1!=NO16djv!}soT=~92D^N|J(8ullg>_;xmO*qF^{K-=8%uG}}gVM)9fBpLn>tw`7
zMaGp^;6=V+)=Bi4zrQ_#`||g<Kqk;#O{G75gh!8~m6;lp|I7e~_n$!bF$#-hnOOW{
z;hwP!w{=1k;mhLZ`)64IV8%s68Y9=RV>!BX4v0VZM|@39!qKJ0KQH>frrZ)l|3yra
zl#;6$&U5*qQr+e9wymZVbiX(A-e-_2^1LTr`GlntR9EoN%$gcNH5EwsgjDgVp`WZZ
zBK>A==kct6rbqi~W@SAz0mUm7LI~uVKn3?O;aXGXz3*I5U9(UhZCbBhkn8djX#FGU
zzc;FxwI-xit=3^sZ+*ACrMl|b9jW9%MLngpit{49{EFWC;?z0)08j3YU+jC<6k}Ps
zbAWJK;GGlm{>?r@jUMY;khbZY^`@S65ZCZO%U@DLC=H~rzj#%j^2@d1<f5XU{#A42
zBYvb)gN<}pyQgiTm>}BHa&OGzo6oI)<w)4_%U$K8cKgaaQ@n0;-rc8T3bQLR`xay+
zoSQYnIvJZ6Nnw%tKK;;~Q9tVXRjSce;Bb99FfD)SBQut7`^~ofZt8w+lvC=%z*~uq
z_^j%{Phws<nEa)`Pt%qebf~g)rdB_S$l!bBc#MRquBfu{qWcdYv$JjK@?@Cf6kRCA
z9{Z*qFGp2f8^NMIZ7SB_0g0@5T0ZIU-}ZX|m{Az^Im0|{fiQF0e;8iIg)=yx?xKlN
zTV6cx5jx-zy5^AtWd`w(JBf)b^_x2K8cTgO>JR??w4^+~E?(ZqEiL&|`tbsP6Y;9L
zrP0F?w!Tm`Q`nqqudWq^3NK^zULDI21XVQe_9yioEL%PUr?~egz<P%MK3XqL!?)S2
zTLS+R8u<^ET=CC6qxWO&-PmSJ%{3Fcx2&+YgZ0+>iu~Pi&Oh4so6$pE%Sc<K-Q~V4
zB$L;B>X+t43_}yyuwNo-l=+m){yr1JKvr>QoJcVP?HOhmX=PVsk8-^4;G4;orT9d#
zWs8{@n~D6md@|(BpGidx<2UB70x7iZ>EgR_!li{5Iwd=$33gJbMX$e9?!DcI{JZSp
wyJ{;|*L-??Rw8`=nBPCsYyR^gk<Pq#%+aZw>(T(Dl^$?k$KZC^ExVWh3nhcuYXATM

literal 0
HcmV?d00001

diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
new file mode 100644
index 000000000..f3baccb87
--- /dev/null
+++ b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
@@ -0,0 +1,223 @@
+---
+title: "NGINX Proxy Manager"
+description: "An integration guide for Authelia and the NGINX Proxy Manager reverse proxy"
+lead: "A guide on integrating Authelia with NGINX Proxy Manager."
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  integration:
+    parent: "proxies"
+weight: 352
+toc: true
+aliases:
+  - /i/npm
+---
+
+[NGINX Proxy Manager] is supported by __Authelia__. It's a [NGINX] proxy with a configuration UI.
+
+*__Important:__ When using these guides it's important to recognize that we cannot provide a guide for every possible
+method of deploying a proxy. These guides show a suggested setup only and you need to understand the proxy
+configuration and customize it to your needs. To-that-end we include links to the official proxy documentation
+throughout this documentation and in the [See Also](#see-also) section.*
+
+## Get Started
+
+It's __*strongly recommended*__ that users setting up *Authelia* for the first time take a look at our
+[Get Started](../prologue/get-started.md) guide. This takes you through various steps which are essential to
+bootstrapping *Authelia*.
+
+## Requirements
+
+[NGINX Proxy Manager] supports the required [NGINX](nginx.md#requirements) requirements for __Authelia__ out-of-the-box.
+
+## Trusted Proxies
+
+*__Important:__ You should read the [Forwarded Headers] section and this section as part of any proxy configuration.
+Especially if you have never read it before.*
+
+To configure trusted proxies for [NGINX Proxy Manager] see the [NGINX] section on
+[Trusted Proxies](nginx.md#trusted-proxies). Adapting this to [NGINX Proxy Manager] is beyond the scope of
+this documentation.
+
+## Docker Compose
+
+The following docker compose example has various applications suitable for setting up an example environment.
+
+{{< details "docker-compose.yaml" >}}
+```yaml
+---
+version: "3.8"
+
+networks:
+  net:
+    driver: bridge
+
+services:
+  nginx:
+    container_name: nginx
+    image: jc21/nginx-proxy-manager
+    restart: unless-stopped
+    networks:
+      net:
+        aliases: []
+    ports:
+      - '80:80'
+      - '81:81'
+      - '443:443'
+    volumes:
+      - ${PWD}/data/nginx-proxy-manager/data:/data
+      - ${PWD}/data/nginx-proxy-manager/letsencrypt:/etc/letsencrypt
+      - ${PWD}/data/nginx/snippets:/config/nginx/snippets:ro
+    environment:
+      TZ: 'Australia/Melbourne'
+  authelia:
+    container_name: authelia
+    image: authelia/authelia
+    restart: unless-stopped
+    networks:
+      net:
+        aliases: []
+    expose:
+      - 9091
+    volumes:
+      - ${PWD}/data/authelia/config:/config
+    environment:
+      TZ: 'Australia/Melbourne'
+  nextcloud:
+    container_name: nextcloud
+    image: lscr.io/linuxserver/nextcloud
+    restart: unless-stopped
+    networks:
+      net:
+        aliases: []
+    expose:
+      - 443
+    volumes:
+      - ${PWD}/data/nextcloud/config:/config
+      - ${PWD}/data/nextcloud/data:/data
+    environment:
+      PUID: '1000'
+      PGID: '1000'
+      TZ: 'Australia/Melbourne'
+  whoami:
+    container_name: whoami
+    image: docker.io/traefik/whoami
+    restart: unless-stopped
+    networks:
+      net:
+        aliases: []
+    expose:
+      - 80
+    environment:
+      TZ: 'Australia/Melbourne'
+...
+```
+{{< /details >}}
+
+## Configuration
+
+### Assumptions
+
+*__Important:__ Our examples make assumptions about your configuration. These assumptions represent sections that
+either most likely require an adjustment, or may require an adjustment if you're not configuring it in the same way.*
+
+* The domain for Authelia is `auth.example.com` which shoud be adjusted in all examples and snippets to your actual
+  domain.
+* The required configuration snippets are mounted in the container or otherwise available in the `/snippets/` directory.
+  If you choose a different directory you're required to adjust every instance of `/snippets/` appropriately to your
+  needs.
+* You have not configured the Authelia configuration YAML with a server TLS certificate/key.
+* You are running Authelia on the default port.
+* You are running Authelia with the `container_name` of `authelia` or the Authelia process is otherwise resolvable by
+  [NGINX Proxy Manager] as `authelia`.
+
+### Snippets
+
+The examples assume you've mounted a volume containing the relevant
+[NGINX Snippets](nginx.md#supporting-configuration-snippets) from the [NGINX Integration Guide](nginx.md). The suggested
+snippets are the `proxy.conf`, `authelia-location.conf`, and `authelia-authrequest.conf`. It may be fine to substitute
+the standard variant of the `proxy.conf` for the headers only variant but this is untested.
+
+These snippets make the addition of a protected proxy host substantially easier.
+
+### Authelia Portal
+
+The Authelia portal requires minimal configuration.
+
+1. Create a new `Proxy Host`.
+2. Set the following items in the `Details` tab:
+   * Domain Names: `auth.example.com`
+   * Scheme: `http`
+   * Forward Hostname / IP: `authelia`
+   * Forward Port: `9091`
+3. Configure your `SSL` tab to:
+   * Serve a valid certificate.
+   * Force SSL: `true`
+4. Configure your `Advanced` tab:
+```nginx
+location / {
+    include /snippets/proxy.conf;
+    proxy_pass $forward_scheme://$server:$port;
+}
+```
+
+#### Authelia Portal Screenshots
+
+Authelia Portal `Details` tab example:
+
+{{< figure src="authelia.details.png" alt="Step 2" width="450" >}}
+
+Authelia Portal `Advanced` tab example:
+
+{{< figure src="authelia.advanced.png" alt="Step 4" width="450" >}}
+
+### Protected Application
+
+The following example shows how to configure a protected application. We often use Nextcloud for such examples.
+
+1. Create a new `Proxy Host`.
+2. Set the following items in the `Details` tab:
+   * Domain Names: `nextcloud.example.com`
+   * Scheme: `http`
+   * Forward Hostname / IP: `nextcloud`
+   * Forward Port: `80`
+3. Configure your `SSL` tab to:
+   * Serve a valid certificate.
+   * Force SSL: `true`
+4. Configure your `Advanced` tab:
+```nginx
+include /snippets/authelia-location.conf;
+
+location / {
+    include /snippets/proxy.conf;
+    include /snippets/authelia-authrequest.conf;
+    proxy_pass $forward_scheme://$server:$port;
+}
+```
+
+#### Protected Application Screenshots
+
+Protected Application (Nextcloud) `Details` tab example:
+
+{{< figure src="nextcloud.details.png" alt="Step 2" width="450" >}}
+
+Protected Application (Nextcloud) `Advanced` tab example:
+
+{{< figure src="protectedapp.advanced.png" alt="Step 4" width="450" >}}
+
+#### Proxy Hosts Screenshot
+
+The following screenshot shows an example of following the directions for the Authelia Portal and two applications:
+
+{{< figure src="proxyhosts.png" alt="Step 4" width="450" >}}
+
+## See Also
+
+* [NGINX Proxy Manager Documentation](https://nginxproxymanager.com/setup/)
+* [NGINX ngx_http_auth_request_module Module Documentation](https://nginx.org/en/docs/http/ngx_http_auth_request_module.html)
+* [Forwarded Headers]
+
+[NGINX Proxy Manager]: https://nginxproxymanager.com/
+[NGINX]: https://www.nginx.com/
+[Forwarded Headers]: ../fowarded-headers
diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/nextcloud.details.png b/docs/content/en/integration/proxies/nginx-proxy-manager/nextcloud.details.png
new file mode 100644
index 0000000000000000000000000000000000000000..909e86d3a274c2c049519bd020811c94ea1f72be
GIT binary patch
literal 16587
zcmch;cRbtgzdxMTY|U1Sn%z3AYEdIdRdpeyYOkWz5URuo5~Zz{qSGu1HDab#LWoc;
zZPgAzjG|T|)QFJ?cYHqIbN|k{?{nY3-#O=d&L19;x6AvQ&)0Zf&({mExv9urnY{o2
zK;+uh%a#DZE*b!^TV9Z#`($aq!Oq97087(LfYNrkS?(9!`yewA08o}FwCTpj{l4en
zRl5KHK(uM+XIG0K#sdH_a=msLbUVbEF}$59-y5;LxT$2eKJ{vIS4rU?@8dTV3rY)r
zFw|b(fzT4kiAb{|FT?A2$OjC=^jgnxGcAusq5klSUDW>mxa1Sk`z7QAT@Qz}$q1g~
z=Q+u5B|EX4y0)Pa(4KmJZ6vieY;B0x5fk`%WCMP0>cetcDv=&;z6%iPvyTh_c)UdO
z0}i|MY61X<j$w8IzDa{b07lJ%5CA~q3YZ7*>RglzAoAsZwW)0k+WA%m6<65iu-}tf
zXOFw_Rr21P#`zofK946nBF>tezgBQUvm~DZ77Dr^k9P*c=fZ$09Z-ut>;ri4Ji*7N
zBA;;_&`?N#GYeUq1thjT6X>1)gw?iimlMTWsY~moZ!~IL2GhIUiLgsxo`z<B8u>J{
zV|%lMpuhM<BB=1l5ul!4(Y<^3$iel?@_MikV?HK%C^n<dMFnH^<B!5|4AJukb2EQg
z|D`Hs*i4kW4&K*x>xz0C<^<36XN|z=D!>TMVkdCe*y$|Y;e{8v8#x~Y=Wc^3wBLrQ
zwJ4&v812rxrKv`w!!Mjm2`O|+X|iLhEIBJ3<3~l8;ykZ2nvdyP5EK>{XD+$&G}tdT
zu@+ktT`FEl7Om5$LeD%N_Lob77>o|ybg5F$*(y}_yT^x~);o-}B^pW%QKQK5H{|N7
z-t?P0{$Oa4BUrxNow?E`Mz7lYpzI{biO-x?P}#D8u{t8>z1RM<=gbC(;n!LeR-!P{
z<6V=;fc#K(0S*wLweS{{F^>Q&TcMXQB~7y!I}35^dKN+p-wo({SvS8mvQ}^NjM*41
z!1&Nx#gDD;Sr%Yv45)(`xFTzie7&x@nZ=XfBOwG4oIDUz%L=h*u7_94RLvH+W1r%Y
zJl&PbJ1f_=ov}jNY$d&OlSelCXuk9Zui56E#&|a>S%Mg5LU|6pdM4jg`y0$qagEW0
z&7t#{_+KYKXBh6x=_vDS8CmM*oz}GQ)MDW`8XxMEKvHmEG{LlASb|&tHh<!FFq`@o
zWCv{_%J`MGqCvwI3X`jG6OWjxycVk>S)u@2AhCX!c*l(xOZu2}mnT=a=kn}9vU7jR
z8^MOGC_?9L{Gi#>0voGNe(K`q^I8wVQlFJ33#(<b^ERfWiRnk2Ldy9gdru-wISfB!
z?P8q!{?2U{b~~+O^cE#fDid^AvS;|d6r=zx*$98}>GX84Fl67T_&X5&sT0Ir92c?b
zR<#Fm%Nz?0Gf|P6J}OFg9qsaG7D@qJ^#cVVUOdC<0D!t&6rt+R!GNBH*<Aoz5nh<X
zR?)^1^CAG?9sNH7%D<s*5Inyr5PK;LeCojU%%@8KWZ?h*m=mAp=&hShb$?#46xn;4
z2-yZ(zb3|!k9%RvZWCt94I4)O_W<VbXo2bKoYitzCRnXbuV#AJL{R{kgdDeKCXd2z
zaaL6HcF8;4QmkXWg#Vc*LRMGVy(Md^1ujJR<A&ykrCW(`zeyA3Of>hgNo^W20!x@^
zR3eupkK97tG`jP>?K@xC1pCJrkd|PYY1N{5y8Y{zXN2#FK~?rh=C5?Am&xWJ&TRU9
zGWll(t!NZ(Enn922<9<Tn|jJub*Z32s&iSah^NJdETHHF&QDM)a9Wm-?pI2VRkyQL
z8%X@P+MN~CTUN2!bg?$j99SE2dH4u)rahY0*y3^<OG27Bg>IX{#uq<A)-u9kS8*=G
z$lrKc{EeWD_^CNR^040I)NcfgnrX^Brx;$7f}o|OQ8!)@+$jn$`ld6C-fm1QuqI9|
zVBFV+u|dF%1dcv`yTQkx;d;>E7Jr`sMy<Z2zGgy4lNl}5YqLFih#8xq|NPkU{&~a$
z_T{ZC*6f;n@p9iGX4PFo7rm9NjSnVZ7i*+r!fsZ1#w7P6Y$NfjeOo(l<CDTWN4t#2
z<JK_Oca1vb=%mIAGAS#rn)i5oBy^I76ASL&N%LKbmHqO5x_4`sBQTvTY7M>q<MG>|
zXZJ1@q%HXQMey8Mi-~c$W1~tc%0zBTL1s6C88y|}BRb4j_}C<#tccCDB2}*;s;0k~
z!p+YIe~7L$i<0sF=md5lq7kg<X|hW@sl+*S?gX<}kyJ2(tKiRyCfMS0qI-n8>toZO
zxH;qR?;|S~j?TTM42cy0Elyk-eEkUl0S!9~N8#tg%52ZJ3FmDczRMr?5X>+N{uM7x
ze#BG$Sm0!h?;7x9`#|D@?kjK<&v2<I5n^~SY8P<d)kdbnbVIiVncdr+z8a9V8pcXS
zX897A&oMunuxnlzpl;9_j3Q#u&4XV1$fyG#wnNp1z*nolt`V2e>X7WMwd7uWP{!UL
z!HG^_)S%|wDzs$D=YV6pRj=}C)8xlt5*EGC%sfi@+gYdt+1*s2^%DrXJ6|V-mC*zf
zE{?n3yKG@l8Z^4`3cgZ#bKN$>KD>Gp$SM6wd53tGMEMo0aGRZAknddExmkbRFhfdP
zd7ebvN4Aya;b-2by*F0sosu{CHlWuTr$$tGwo;;2xNWU3zdh+ReY?jDqJe>}8x+-t
zenu#N(7ipxJ7Y6p>GNrj($Az!E$I%S<^}vK85c1hp)8oKo=tC9z71JVH>Ifo@#k9?
z+{guCqk=*h9_r%=Bz}pM708~)Xgp8NPVQ~J-7~I~`v`tOu+(7dtQF9UkL@KmaT{#P
z#PFFG&fDL%zz=(E&|oFJ7S$0E%2kuf1<7)?E~FVpUTi#@fBMWDcR5`Qlp~9G@9=Y{
zo?kXqv@IV6LZ(Mr$e&+SOu_J5#FbmHY{7{lDd*c_bKyqvIw#H>-0{n}SSrfUL;Dih
z)hy!8!gDQI)Th3BOq^_`1p9YMq60pDU5?H8nQ4so{R9m@=8>emOs5o;#q)7aI;#yW
zlp23E2HmB8Yc&Ev>&LiZ#r(2VFLeRwm=vrQaZmCS_RDZj(Az+8IvTnOEDzrrIh4!3
zGycN<5^=As?BJvUoDWv%vZ24QT9IUMTkRX(BG@2j-XUB^c#h*{WJn6JWenK~>&G~s
z?kjwoFc_x3!Y^YQd{_Ha%0{nNY)6bw3|8bOE;=kaKtH7xR5XN=RsZ2R&Iyfz9~^(&
z{>-O_v0fqU8)Rsi2!T8LX$uY}rWr;OCT4C)1v@rs5ht$8-LOV!o}8X+cZUohZt8tZ
z7#i?<h?_P`IPWEpAa%6LXu&^&LN3>>4nWz5Od2!G!i-N~tAn>KORnY<SkK^rc+TC_
z@VdZTME1BEd9&RmhvY4>^7vD{V2?QsN|p;Am%CakT^;{y8aVG=P@j*_r;Ag*LtEyR
z?A2frk#)l2WW^%(ebiZ$E@w%bJ)$<1ZZqz}%*3Uyh(VSE);-SlI9^;sGD}d+(XI>f
zWG3rn^ZS5&a`)DmPs6BKN8*b4!Ok$0Wykgy@{L8$-Kr?v4UYqXe=g|*yk0~K@k3J;
zOFs&vkhiiQ-cXtLBl+v?aU;@TdlQeHYmkiMd<8iQmOjlSnMaT2zNI}zuo27Ego)LU
zw1LO<Oepm^ujx{FEqJlRjwM%0ETYX}6;)W~w@?|T<er7^Ip=A&Hj>teroGW?^Vaxz
z_;r;VG4KUEt^RI}!@`-}^LVM1!E?jDb?%~6N1F7<2hQrXp&*wPGSw@4l(6x=-iw#f
z`Q`!Kp@0eZ5!&!t^DOVaPy5B_C@g4FOtTq3uheTXT4_N6t{|CEMCs^(l|8ies&(#3
zyNw+P8wC_+T9Bz&Wx8SNK9K7IR-kgzuC3L3gI0^ie-v=QHZ_AXY}FJ}J~v(o6rqt1
z+n!2(kh0Lj)ZVq<fXNi1eK~9=n4sdXO5@2HFb`-bd2c~J8>486pErDfkaAcqg9mLZ
zz^G%BcfU){ZM^KbaSbIA>?}}i;C;<dCv0>k$wiSfWda)yT|1i}wVjjUk&xwM=;==Z
z_L`4RtPa`_p)Pl5rOn`hgQ%|C_iIbYaDu2m(#ThrzbaIQW4OF@eG_jYF4{NAMy4t=
zFEfe+sz&Y|`U%a%93xJZ6k3p%+?OVkh!9HFH2JjJr$l++Jl{$ztM^Fl(8t!Vsn=$x
z-*2{*z}7vK)Yg~BAD^hfJ~Xl;qRrL*+GRdqN0F&57M}5W;%dyzPoyt8?>1&#ulxC#
zIVmShmjY??<A<9JyI8gv@D-!Q19oKMC_clRC2zVNaPf>y96f+O?@lA12sMV4!9|=q
zx5a<Nm?*wA>^MUU8O6Q@dPlBi>Nc}3P*ekDR|dVecP8qKNJNYdi3<I_n={hn`R{8w
znlQ|U!$_GunEp^WdO&~diUrZHru_h)pGrTJ$RELEY@6E~zE7kT5Tw;r>vGNIuJPg&
zJ4aSd5}E|E_K8Zu5jsXGyU_OawtXCP`}GW5-{ZC*0Y#rDb82$DpIIT}e|k_v7%ZZ$
z@kYm*Kt(Y5hSFq;8L((}H6=_Ws_R089Fex4QY9|@>T5WX9p6&-th7GN5_tOwvprfZ
zE&tni!P1w;@oVf-6Q&Odd8H!AS7<~>eOjrmbWEp6pzmspU*H0MbTw%E(~F2<U>I8g
zHeKIB1_lGs3L8!=M>4g1%%wF@??r+`Uhh_2k+Ezq)qff4vO*7DvbGXi(AAl4C$KK8
zjCqCr&UXNlw)0q{CV(HKR;_*o0=d!lQI*Ofjb1!;%8L>e8KpcIZE=EbdxrARK_FFa
zAwQxMFRZHMQP?p_-qp-A=rGRrt3QRMyT@+s;omF!@SgKI%uGknLmf6`A9;*W71`C}
zWQvm?R#6o3U^bfZe|RYFC90xlyRkgiFnwM9;R~<&aB7WA@lascPiNxhvM0_?QMxHW
zM#KZo9sxMLnmFT^5WB&$b$rp@^UX2bScUO^v{m7D?L5I{n6OrDe`w{Ju9vo@<#YpT
z0hNf!sMaV?e_uo+N+lE-n<f-VjS#b)FNTl^^nM*?*9*P~m3HS4Ck_p>Etd7=X4usc
zubGL`c9UMypNkuehKJKfebk6lFA`eP-zD5u{vo@>Ne?-SLk&Da3$C+dPyWtx0K32~
zhG8?saQ8pTAVnL`KOuEaMm!v+TMPQgI@43oa8%vqlZ_}le~Ivp#mnovQ|aq8SwQo*
z$wVdAHb{6P{(mwfSR0f@f{8zDNX)q}@5!NPZfdaC6S&vne~vHsJ8ft-#8`9`6{tA$
zPO0dTqcSe+Q4MEH!tO$_99}>_MwgfQCate=CYb?Qt;_&I;`9iVEa8n32)xVO>MSHE
z{buWh^|hM?(<IItT|K6fF6P9i$@2hLcl%tlR_@-~b7OqWDd;l9&f=#Y24;jbQ0CGg
zK90t`FeY!Ux_gtVApTV6{iL~-sEECpX%6LCr@s1N2a}{W5ooRU3U&}Gj<Z2cOLORo
z6Ub(yL7PENq;rdS&(&Mxh;yP5NTT{m@-&V*%M3+i<Q}Ix>03*51Jn=QIf0?~4BeN#
zG|#LQqOZeX8w1aBg}`g?!U%#LCQ>V1^=VOq(6gm+SYc+UL^~XL3oONUKD8=u0JYKH
z>-lMra0lew7o0V>TYJ+7f1gsK;xOlM-3tr<%2z2mcN*5$z6;=^Uvz-1+K~MV);M&5
zBs_j9CG4qp<5M?rS`|8oeucdn%62+s+zp(}Uz3k1D7vBhT&S_;A*=ugP11%1(6tz{
z0QJzm-!BNlAMC-@hm8GXPk@c5W;7xEjVdCucZ?pBTV!EP;Dbfz<y8}`r@tTAEekj~
zOxsEr<YSyMyp`POH;w%&0R#IXIgjjZlYK!9+BmK6i;xdd0pMyWvX9IhNBGGKKvk;s
z_^bAiAlpR>WQ5U4x^vrtBzeRvh9h^1cAnmz<%As)1-Kq9u>>n!Qg?0_%S!^u`xd3#
zqquO;s?~(vK0Ni)=={74Ia`=s{;htK(?5<n4`{ed6X%{)*W3RE8Vk0Uwx$}M(_RP5
z{3|#95ouCh5!VM&(bL^-G=VV&HTAgM-pbL`(*px1iX8;1h7O8%0|1rB22LLuypzv`
zD}eFuvSzkgAWlo7YC-TwExJ8pJMz*4<?bsvC4h#UZ$~knzsy8_9Jp?Eq<GiOSmmfR
zr3crkN1^<HlORb@hRpNR?+|=|le<7>hp4*&ZzIupFQL04uc_Yx5%0r`Sk3h-b%k=b
zNBft=Xl&B8Ho9}>)}kS%tw-SP@}sj8mNtMCUS3#<IGKCQe@CNB4@RY-`6I(U6v+G2
z&O<ut4^@S>-m%&QY_xTdDMNu$r9o*z9`d?hwdx(71lEWQ<c%~h)7UQ9JS3x~gBtM+
zq_WGUl+JL$LHn*DS1Ih~K!0Jgv1vtAQF`W`USmHx-O$QH$}ru%yp{T({N=!QM=UFh
zy43L+kBsQCRCdTP3^t!z<q+~{HfIY0>~2~(9V6D&;6~RHO!^Ai?Y7fTa0l!zPX3B!
zTrw78sh;wAUhC<ZDOB=E2YE>1_?ASK=u?eXv9Hz_8}D+|F%z9jlo!zh+r^aSOBaTc
zZ8qUIUV{T$zjtV;>Eiq@Yx69cy+GFWPXDP6jF6#8$pv6pp(pg~S86U$zD6X4I-{xS
zkAH2RSe=miyW6d|@7Hufegx$1^_8$ksJDRR{q!`63iG{Ykprf>7&={(FR|!8cpOmD
z+w<guL;dL?kKsauTgK;5lf~Twqvj-5YWG9c;rM6TC4+vI3Bk_keepton^B9RGzAOC
zlfTlU3(q-5&6b;2{*>W`iKl?hQD0A-!sq&d3yqd}v`0+o=+%T)G1?TXhWj1~%5&~!
z1vP79m>mdd18inc>-$~%O4W{x#pH*tM*p52CG#9Vh(J8IUcMROh<QrIJ*FGb!R72f
zNL(vn;*@duk;@Yic{KZ{K0wR_>jb{%BVtSIGvgrj>W9{c4h5myL-D2gA|@_dVD0E(
z$Jgjiiw`3jTlYB?%JeB4i{iYi;Qj~BS7*eR*4*-I(Sh_IQXj`%FD%D$IQ_%=2bSN!
z0$bA>$ZoTIHq4q(6f~OU?UD=~gl=Sc(XB?v$7wbSE;S@_jdGp<<(u9;F3-pRCKPPd
zSNP<JLFQkF8kqHzJHtgIu!YwV%q~}baq_z|6@dDlazPpwE3f3Zr$6ssu&{%m69Vpg
za|^Dfa}n^$1T1tYB(ywl<!tvA!3Ti1$J2KJ2>W+wZLM;2eGns!>p}qhM+S7>pb-n7
zO=+6~QhU6)PmXf|y@OynTC)6D&Dp<v-%}0S+5O$wR$M+jvg`1FA4~rKB+JV7@iSx7
zhH=)=k#cJ@wZUrxA=gTVmXv7kfvd-~o=ny-2t;V6UAfh(d+aIu5BWeV+8344TT*kT
z9&=nu{LNOmXN>))x8+8%G#Rq>Oq#~Gr)}pk9p=N?cg*LlvEj~9_PZSnsHqaA!UW9k
z;E(V7&SIqQ{VcoLR?>g^=~wyqR(wTHo~Isls<%AjjkeY3Agn}WXtg?f{|Dpg-@)W%
ztFYduexrB!?GE|Gb;#O>)@N&|YR3Yjbb*q>iZi~o-_LpOr-GwJLGm#xXepHzwAQYO
zqo;VQjKRUb`Rn}mKq7{yy>k!P1BcWxxnJB$1SlB4SrDat^wmjKOiwFrjO7NonfgtO
zjE(^3t4@uFlfO@hs<aZ&s{BvxZj^&eqf=`iF6y5LR+W;lpSqsJ7uA3=G9HOMeznTn
ztGh4L1&I!(5H3!uZpNZWicdc}7;fmCn|Yrx&~}z)jgxXPC2?+cToAxIl=^Ym2|=FI
zzSCcIs$1m!tOJP*T>ey2l<e@}xzJphI?L&bQ<fG;;x4x3P1G8B^AWXlp?adE6gI$b
zNpF>SE$g8)b`29$e-t=q84<ob_(l)!%lSRcGP_;H2}F`%!h=1cwefIHD_wtrb*0LX
zV&3W*IIFF&>7vPC@;G@J$Ls3fiV?|{xmn!YOjErB0}UCC<MttN>@ty$a)H^fVMG+D
zesy48uUGsxELOxzzF%TU`YyBG?po$(c>tU;cyQnuJqI2(q7lTNbUi`6==9SikR8AK
zsLY?7tLZQ34!GBsIYp~)Px)?mxy}XuY&FS9p1dFY0TFgq05c;!q(Mx;2bI=!+(Js{
zsC`{2F9@xwm!lMkE1G@}Uoc)%0`{9Xm_1~Khr)5Wm&3@dHOuk|{*$ZF^ls{@!H!E^
zh@YC6!I+vY=P-Yh(qPBY^7uZw;+o1Bz6=p@tY+ID=q}O!OeT;m4-0)<G%n*f1USo#
z+pp>^n@brpGggmp){JfD95+To9^MP}iv+pM%L$mcpsJ5azL_?hkKEGKGPHocjrayD
zbUBYQJe4Ex1)lMP6&4+5B`eLjn~be0bNyAEP=<>LR;|N1q9jE>m;DNnm_GkOkx~`x
zvNzSUiSE(cUQralk+YfhiaOD35?l($=hEQK(_J^Ushx&W9Fx@}lve0@7~?Z1m+f9+
z{vF|2?OBAIr;tY0_+`b?@{aW_wtASuvZI@ChnEHqu}t>JTrYop<C^ww`(r{f&%7`D
zFUss^6$YE<8@R@R$XItt`m9a(SLCz@a3EngkA%IP-buY7dWxy5Ng-ur@Iy~k-K<Qk
zM)(?5fmO+QHPFzO&cM1C%d@n;Ts6Lx@?ISw^3ITLKYQypLZ*wlu_`C1?pcJ=DVvj4
z0n2cpU3>9c8jtlk>W#IQL4z<dY3>H1pvn^~UnL{vWy}fO3#n=7eIa5Ir0&W~lRDwp
z=j?-gxcnu)5QlPo1!G?qzA0@xpu^N*)-0#bq%>||gN-WM7!dfCEeA(My^A-ccwTL4
z*VmT<tLa#LvK*KOgOnnh8l>fnv*X|MSdvSBu=-iOmukT2lD<XLiznOfUo<TBUa0?l
zp02s_b}-aj_!~x8JkSh!dO+dn@D%x{C}(umgerM&stq};8N@gXvA7pDyJcI{17KP(
zbLS^OJ%L~B1z@3#kgv`|gI{qZ{0+x<)may``Y!2X`@YHW4+J)SJ`B%j`m@<0Uu7zw
zEbuOS29#&7b+G&%+ZS9x^_B*YYmE)wEZq8zldQ^mWEiCW5>Ij*a;)a0GX_|u^asAw
z$;v>mQlhrMffJ{8<pj!E)gMtg7<v*D2JuR^N8!lf#6sM!_F4yR+xjEYZJW=wr13rF
zetmS8`HHNPCoL1J6r}!h>bdSav%%!9r)KR~m*VQOy}@HY?#kX8dgV=Tj`nHv>&!c@
zD=s54sAIM$urQS{E2cj`XiXU+8EgTpZ{jI7e%O}C8NA}!yUar5P-f+2*;wkMn(&hN
zm=>82vICjaAY<^F{>Yb&KxQz?o0IhmCFJxYLhoK}qt2h5V|)yhLH_6jF@qMo@=3fC
zD)0T6hOa4%pP{>xfWA1&M?*OE460j#xu7li+^vOY(7NIX(p1FNXZDxtL*7TGU>=Dd
z`nxpsIlI2`|EKPI`%Ys<YyZ5~UG5A0p?gqg`{U=Tyq95FB=DotPSm?}bdr3=_OEOL
z*Ue@`-FmaEI*mLKEk==<NZ5*U6z-AyD_rgrrzC$s)`)t?d&kE|a{mwrjmwCVq5IwD
z5&N{S)8$p1D&q-S!Ae-a;n$4XH<RR`OW?%Q{0goQSEPPt-_SdPX*s|nrhbtn^r$O0
zL!9g$`&d9)j>A_o(`_zDJNLDLM|h{Zzz0ga%#^#ocJZ4cL8^pGi75EZbAJHQA4!LU
z=7++HEC*@-y1nh0z}k1Xf72{!@33la$-fMSSd1BfI`nd{jyZLbSIWeSC0Rmu3p!zw
zZQ7%E@S_M4t1EG;_bj$9$+7u8_eF1Edm;QaZe}A5TwjWx0}HKM`SEIAvRg~;S%yGb
z?^F#W&6?;roo6Tm#hR`@Ej=LBZMZpR4x>UjO$2VQ$0yL{!aw8m$Wy5&*ly*Xz(2)&
zz?6ODnUkYiM<+f=H4rlVxVPhNEl*RAqK8wY+L|6(X3=9RpHzg;OZ7ov50p0eVRv1f
zGpXiahYeAE?<eSH@p6XRiy)OTpD2e*`oi~8P17CZ3pyiKx|CX91@$=Ew(2A8Z2qw>
z?->op{D8Q&BF_zMgj2pDb>LZO?89Xzy-o|UEloT%W$QIw#fjFMGR|Lho2}9F!!uep
zHMG&&ggAVeeU>tsmA8jh_8N*jJrlGr_|b4)vkKJQVEy_ZYwD2^4L>cd-}+cXIy`p{
zJW7eKwh45H@%X@hjeaYa4;iXDD<Ba7E%e?W<0bv3x2XP<zLf<T?lK|~qdZX}yU?Wg
zE2{C_Nb+<3YZBdE^(S*mpu7XCQf)X3Jp|u`Yxvvrv}fj)S=8Lh-rS60Z!nt&bx4r-
zI0UT(!DoaJ|G>Jgykj&-@O=<;rf7;7Ov0*273qul2O*3`M|L3i%JLiN=Xq1H*n1mO
zXmdspW$Sgi4?7Nd%-e74$5t2FMv(S@PvtnuW^~cWQ8pz#8opnk(?=ll@GoI*`Xyq=
zTmefi5c)EmO-g|4AlbM<qipjrjj8FKS9)s<4qSQdjhxlV6S=^jU37aU==9E}$*N;G
zlzds6QXUHudY*mR70WJm^hVa$hs_*(*QHNXwIIJ$rfeN`w;y^|=x;vg)$bc!|0FBt
zl1;t3B(jMbA@M=&?F(xm+IMNA0QnFWf7NzjhYs;B&w!(zp?>S+ezzj3u{!jcN={!D
zii7*;H&rM5_|H^3xyw+rLT#aX#ou=`2zSea>H=ZthKEU1w*D4TB3ys!yE$#Ui1N<u
zdr)*k@4G%mf+yh5g?j?7e)dqKVKjHgxIKNMn8jqB?ulc1KNvKsDpjalS+cHGr_`ny
zXu9`dV?ruB(DDc8>VIx#Z~2EQ-)5`*xan^N)>Hj`hPrih&J1;y$hy8xml8g9kYKs_
zX<n-PFN`jU&@M%|23hEubn%o7xBnFNdzJB0uf146;qdttsW03^A1g#h98uYUsz*i?
zyz2OF<R$gLk^XNXykk$E=U&3!*qOusG9z3RGydwSSs$Y$^<OhBQci<=K)^idkjTca
zf5(z_pT=OFYVR4k0l#f1_BJ$CHCJ=(k<?$d^Iy`D2e0Ut+iU;DLi+DmuV)Y9N}}z*
zCHyXpEI05x5S`HUug&gXq{BzhKToyuuksNb1Vm)VA7rj6Aqsr$!Y@ZGz82^;i&2m+
z{HEpMP;NG$71@<-!4oR2i^*-eHcbr-BoQ|HLCoBVM2y-t>uT-NiW_rsBBnPP0lOM8
zoBUNPQ)6;UNerWAQ11eT2cig*Ge>l_)pxHvIIPB1=B&hZ6q*UKV@3P3j@2H`sF`U%
zvZ?O0OuUQDSyXsVsdH^!+@^Am2Ui@U2u@GX&sp2!3hm5)ycsA88P1B+oA)r4uRI{n
znsR6N0`GV9muS89^suXu$am){N;DApU0?-nrJt#xn+K6Wae*^Rt3~dLb?*2<l=4~n
zH>VH<?9V&oIa~<@l0XTT_LIe0s1?j|dB~M)&c&Bs<sr*S@{mTv7cb=ws7*SaYa7`$
z*d23z?>nO3R+q18a|_aM<IXB&i!t=_iUXG2r`8-8DG9YT%0*p^eTOkjw0icR<Opcz
zv-qIq5(~AT>k$J<Xcg>zF!rnMTkP*D+o$fnvgAC45rlT<dY>+anX#shZOPOkkyz>X
z2`D4GwY(-Vj1!i0FMs7ou)WE|p3fGlchhUDa(cxe4}5yg7u~{d1)BCB7CAH=?~dw=
ze$*LccJWSxKNlEn&1vDi*snA%&Sm+5s}l}fcWqem$}j4q-rQl6`8q}9)nQIw<dO8l
zbYJ`akM&!0CC0mvzQQ9V2ypAKa;LV;pzW%+6hV+k*)3LJe<no<L-8&CE(Id4+6z=6
zO!_7}G<{whQr5>mM?faKO@rbX-wElWqeb=Qe?Db&x4LHK%Q|$GnO#%H>Uryr@-g3R
zVbc}GL<x=W=&Lh-Ml$eZrTSf7LkYyV;N{Pp^j)oO0aW2c{3#qrphx?U72wPSCEsey
zbue^6iS|j2Ea2aR@?M@m<J>_U{)kUyC*^Kf!jy4kGiwhj{78N*cF^P7>54Cfx~k7#
zm0#hBcF5bPrcpkZvoSa*K0jG=8V>IoH65?cK6grvr%89CRbV3JfCH)d+=T!x*tWW&
zZr_)${5E>qSGU?>yWomVd8v<k&tqWFbumKOYRzGj=q1_b_1_RYT_Ww?2g=Q`WgE*k
zji2kmR%(s_JV~VrRaXiVj}<pnI%^>c)eJhSnfsRmr`1s_1}pxyF9^@%rDePNnX{Lm
zhgGiweP~DatvxN|w4gi{aik5-rENL>%MTjL^0bnU)9jcL4r<6$42tk)&ol*pOM#7s
z{aL*wD**&zpW09!*7>(gW?;Qu#<ds)d>C2k@;{!ewr2Ajr-o{iP9t>*Fs-<d6_}SH
zShZ?t$ybk>&w^a!7RE)7&IsN*CU$&^k9~f*Nc6Br8pZZ{x6XLG1Tq1C!Y6u7Hs@H&
zzF^hVd&wo5zcFL(8ZVttsxuFt4~9#hyag7B7+hl8Lh2``G*>}qXV?!4;4!--dTTq?
z9*##A#-HFrlALJh4v>D5Z2@EB=jM2x;YIBNf6Wh)eW$C!s~6Vwb2=On>B(hXBo;0M
z-cRw+p072InEbX&FE<(f(d>MD1>tO9{FyGV8!wtA0{cSJOOMk&3PiKY3!W8En`B(k
zzD_hJKPE!ofA#A}828obQl{LF$&d_&4~QaM#Mn^%=d!&Tvm18?wDCm+mu+uva`JPU
zPS#x$q^m$Uff)4sofx;MK|T+NavZ%&uI`2I!A;NcWw4%~{jzjg#cO2hPvXg1cD&VJ
z=UCeyB!*QxVbOn@$n?I-ied$afj&aL`t9#Ji<9pmhN>+sVJ~Gfv5P62gtZyRqr<N<
zoLl1KJtkHj7^1Tu17~`Y6hjI&5;CW8)?y$RQdu6-5G!C=f)YJQ9;S7AE6+y!3=;kz
zME{`R^7(;VM)$;P5_gHn?G8D?#N}>XObo|LbnWX~k^!N^w+v{v_KX-@pyv{hoRdhF
z&!C)}jN<Zt(SP(x>VJWbIamr2_9@9&h?9MX9|CL*<h5`fE#in6WyC5HWvTfiTXb?E
zM+l^(MHQjr_iK5OmJd#U!8Tpg^a#{Wh|ulTVpf&|TO!WP3*k`7RP|*JR8>ti6>4(C
znXX-L;2ys*AbVqO$sfo;VAiI4&(2L0u)b++E}qeKk*A?44=zqQPdss1`;@u58Ac^9
zhkck1L4?bFpXBIDwWKN-FH>|eU%}fKqc~OxvTHvJhOu}OPcqE6nmtYHP(&C-tPb1{
zq8;`zRgMd8gc`%J_@8)r;s#&O)k4p_z>BM55Hsylc;8#u&9}TGb0O+>&dM^Wn~uIM
zsxD+$P&3wn+&HB5W|<gZNuDju&TQ0?d3)vMSiA$OZ|oPo_i~tK>pJI*3{NcLVC+<D
z@U<N5%og1*UqK^F!9D(YbMz-t8jSM*9{z`}>jREUf_1iP%lR$YA7F3e7rs~jrZgG)
z1<idJ*cVR>y5-j5i42c#aYJsbgnnw3>`6{*?mX9d8pD(ip&)%bw<ZLa@}((l+hCyo
zR`D<dSzcTm&=e7j(K9C%mWnJ+9t0d@UAWT9jnQ63U&)BF7iNmBQ<1)Z@?wGu=u=x(
z41?vuVaR#AD@nwyc`Dg3W8Jzn{{ev0nSV}~7bcq#Z9kJR%-r5@p}Q)9bC(JxBVoUs
ztHLIOx%StDlP_cW`+n-l<$Cos9vG)ohnd*1`9@TvcptaVXtb|81}(Yt<0gW1B6z%H
z+hU60R9&a>cGS-azf2-eBUy^HWkXi!>21ye_ZN0O>vKB_V@M6d4{p#}1HD}1yYe5`
z3Coic0)02mi_QL85<4{%IP<viM<bEe%vmdtU7f!}8LhB#3ZCwWt6fAD&=;z$IkOSL
z1z34tj&ImT4k3I)LtaMu2<yVD7;eDo_D$+)P7{JPn@{`k{w#s##%q*k+Rup_CmYt$
z7Cc2taXZxRgMXLW{U<7x|5fbs*IUcDBOCTB#*hpbZ@^l|kI~{1^)bG>D-B>1+!5*<
z=nvd3K+0uffvP7MURvHqc5hpYXrY=s@^Zum#dPp}zF3i(qG56UN|7<`21yyW`0li}
zVW?5W;vxsq^N~$fF%{d_4~Tqm{x;Zxv|c<|`3Wo7D>^n8%Nw}w$Nx6;;a(oi$dPq(
z;__!a)<x}OU)68)BVZi^=YxvcJPz62$t>k^+uSw>$V+?eGjraK>3O|=g}6)7U2W70
zD&l-EFHg|7!&1Eea4BWTGA^{r$1t(^P1@hAb0T+GU8gaV!QD;u^L-ZGNH0ZPd3#%8
z>ZqOAUAKEhgZdR7hA$3k)~W!ZTz)8`Sq<Ykyb~TlCb=Z^nbq2X_pcR$r5>r^iw1gD
zj{#oR^nprHc`>1roXU-il~Mf(0Z+a1d9xTraIG`4&3x9)-*le_0-V|@WNexzqE*e6
z&e1<H#K~~tpATd|_@fK!RlJe@ow}IGj@;kW;qT%KIp2C#Cd3MAM`aFs$bKWFORi$D
z+pKGPxiJ?X9<RPX)s$Z<>85oKq%!?LITOuQyGO?7!oYOOh|?BttK^16v6|{o{vFi_
z4}5=Saqa9MBJHe@81*#q$q^;cS#0&>Y$r<6;B*>n=&Z~3`)VPYT__>2Rk+$$UyT`9
zh_WBv)Hv1TehP2Zj>j$!!+mR6&?xO;ew@KGFZ+1Wbp>sKs>6wh2-j(~3-hhYhQxk)
z_*a++PrnoXQ7UpMi#}AT4|w^Jd$+hPe(g-8fXY&Ece?0&9}>~~zW6M)KhQNXqdWZx
zYEL9>E!p>#*mT^fhd+$Yp&U=$-X*E3NK$Z4@gMWpeR{;V+GlY<$Z#NeAW@OL7-Y#_
znQE~hFUmd}U#`TLL`tn}ZB>Gz2={@E#WhU24rL^q*cO6t)YdWNy$~7iz5?QqL9m|3
zwa-K$1I>9nYupvE&Qgx9mR~<{Ah7cZ$WaU(b+cmENBqIIwfwJc4&6s4o+kW>J}ufA
zDMW);r!)6cVX)`Z^p36gW`NHOzXhgh`Q2U`#<{W5E3^%jl&1JBf@aUXn$=3%arPkK
zT+xE;+Hh9=qu-Gk-7!K34I6&!0?PFdTiKVa?2WnjZsmSOrqGuua9L|kREbB@TZS1l
z4mZI#d&)QU_A9EmaFVRiLy7VBg3M$5f)FRE;8HeUS+KAER_JleuA5PRxo%ed|J!v(
z^nXfI;SVyDK7Jr?dh?GedH1Pzdt(A!4{W;9q#QxdzxseXQquVff<xt2`@46!%$y%Z
zUShNwK2rtB-@L(BWmw|!N`eeHX-r2etaelkC4b*y%^1{vUG*52T^-4t4_A@PPXCT}
zc@lW;58J{^qm!;gK8(3}ihq|sJXe@UUKAldbGR7iu%iO9c)A#5CT`8fp*X+n9LuRo
zcq_q6z>$PgG+DA*F?L&THn9H$ZU2JOV5yGU$l@$`wIjG`F^sKF#k9L@4)~lOysv?2
zq6-5iieccmtgS`~_OzY$e5zHgi{JKb75dP_wT@nt;btUjuA*a(ytVSycJs-7V=V;a
ztZ`1tbgb+;?Ba~!LgAD(U8>QZw~FLk4V5@L87>9S^&)*Wd$Ok&zMdjpbg5O&#d?!-
zXBk(7tj!ms{p!yS7=M93M4_P6*l#-~5saSYN>aRQL_o3C*NwvZ0>&`dcIsl!at}zp
z)Yz3rI+&YyV33!{ThU5O)7JmrzVPXV;xcm4LZk@o*A;$%IQ;<mE@s<Glx^{RWaW=4
zY<LJ+IDFr^$^m+^^;<b*G$NgqFF}GZFT}%)xK$s8Tr<dRpMHal{E^i}2)Vvh#Isg7
ze3oQ&Hd&QsNP2VBu=PUf+S3|E3_ZB502w}&{AA@K_e#&zTKFLOl5=$HLh<CReZ9yC
z%>qC7wyKUldDPD3|G*JGxd3p@-tmIGxXsz5C%Dazr?lnauAd$~#1j0sBWTZvwY|)>
zx!aWCjpgw@?E5s9p070$KI%mCHWe$NIvW(Iy42si$^$srUdYE(|9!)4|7R3}RX}(&
z87t~}da2^(+t6@-VSxIJ@*PpbtN%t%_aCVEDf=!$`v;2|+A3P*s<aF6Dt#VAto|sd
zvxo4P5U14)tFB5XakEBTkBst9VVoQQP*f5CPXANxdGEV<+s{IMO)QsD<@$5ih(KW)
zw+e^{KJv^~?uqJ<W5FfgP~TeZh@u^pO;7Z%Q7vo|^S0ZXbrQs(QP;$udWN}|_NA`c
zH~l_hKf@u<6K=H|(Ep0SR}}$OZk+jC4(BkUs<wD(N%1_IL(gjWyfS);x@SXPdT`nr
zLx85v8uM0#9h{Hq_w}o3Sp)z+_384##EbnKzM^iZ{u%GA>>=iRRYcgehiN3@Y=E4T
zm-=V-ldFtQa_@lY`Nm+=#)Ev$htU3D?Wgy2fT}??A&8pcbtVhoHh1G^fcD|MYS+J;
zMu3woGMR6}KdXvtUC#K;7qqUjJe5C>12Nt`E}>uMQZ{`Sbac>>sqIXi@Yqs;boQ`6
z)QO|_Yeg$#vSwrE1s?te1$zwj6NS*j#uN?|+*iRQlYQ*e^ehxDHp3nP09W!o!P@#x
zNm<i*wUdqoNouG&Q2#L*3yMX>3$&(1&!YE2_7{tuY!k53njdaIRB16#6wn|uyW*+A
zEk%*}FN9ONe9SN@1Izm(x)wV{Bzrv@jt&f%{F^&~-2edm_0M;6bNl<aDfRqb?iD>?
z@b%m~VQA4`m+GtkQK1g5F&ci&%x|DDPm0l!#*ICoJ4d7p_1->Zp!A*vRSfvQn3+&x
z9UwOEUea6)OD7gO6Tsa%Wjfk9WuQ<?3MBhZ!-&6219Ji$I~n%$&3VU*sT|*ta$}YL
z(>mv-hkLoYyGZ6cBv_!)Co1^WVa-9qTVfE*!#A=~P(5;B*}@cIGHR#Eg?pf3tpiKK
z5TdWY<2)&pTTAB(j1LB@%|G9LRP>-MIbiBNE;M3(Ta@4yYS_=9KU|{?w-wRcaOc)V
zp4vJ4nfmE1vK$hMhVB#VC-wbMaO9-!m{zpQkq{WfUa7cN&vcnJR6WTFxNX=s1>X%A
zJXC>BaE=g@CO2y6@}?uUW%#N@X3xBf-3W33UF_XW@u7%SSbp*uZ#JTI2;H}HM)AlZ
zSoc3}jypWO$+um1d}@|63xC2+#Z4bMNN&{1hE1Rou<7BY?dJgK_)V^yv+rzU<buGP
zKBW*%r2WDqU3>5Q+bQqadp=*xp~PJ(X30@nBm{g<58_YuY>Kb#9_WI-q@1^G;imN;
zB$ZLRL8+3CN`MA*^V|zvF5SuTgsY(TVy<r<n5CFZ<x<X5U-}so0?d0U7zWm(ufVTI
z?7m;>uW&eX5jSjzY4Vm(#`+1*X>r~Z>jBWHJ;F3+H#t?qb&0B1uoH5g=`WOQ_YpO;
z;Jqy$c^-Bu(N4Be{e(w;>yA~rZYcOkaMf4b)i-U-=lLi|ycoiP&Oo)Efw?-~*-v{L
z4_19j5mdU7XVy0772cL^Z%V$T0he*^WMdUum&V_WB-tqmw@i*d1D#E16kB}c^0g*_
z^i~ov{287W@SCDH;_@hT!1O^bCXurb(D@@o00vS!w(HJ;J&qf4{C@l30bBI`Q=Ne`
z)vhn2>@Q;<op{1zu}(IQ+8og=@xWz#$X~lf8dEp<Jo*$Z;%)Q$JCIO-nM#F89>+-Z
zBumAilZ;fRnW7_8e(h5GTNo}<r)L9p17?)C!G_^#b7a0LpyA9Bj7`^JKW=TQS2Wt0
zZ?cHC1UtvItN($zF&__51Xsky-U9##Un&nc4&sbFO(buKsqXLNKDnx4Rc@tGS;CD;
zJxm|j82t_GPu(YSO#VAr=6||Z`yVQ9lg{#{lotF$FNioACs+F+8sYJRbaCSyYY8hR
zHTjMIR19-*#c)Y?r@-;c(-rPQiypWm8!uNO$3E;<V$7O7`YY#nwBOHIprlSIj%yF4
zUw0U=ZyH*g-@U5$Xzr2dZ^xBvRF3xbtF_sQ)1QE!8@cL2^`kae=iVclv%lrO)y$kY
z6eychX~GSIo`-X@XI>bn{qcu5XUkpqTh|@92L7cW2r5qICQ{u0<E;XL@y0t%#mW4j
z;hk#NW0%0PyfD50Y{Mpg=F(8mj)c%52*alr@mn%DMfa!jz#c|16pXs1#L)UuyFf~@
zy%%xgufcp%2NBgLb`Pr25A+T2!=$^-ecgs7cgE4Jvm^UGE&p>z8>G#>qN+xjs!-4f
z#s|2~o%%=S5k2O$jJZ_SBf8_@QLdf6OyK8o9Y9U|-TWt?ZN^OoxKRQ_U#hStKy~ip
z#%DgP$|NFccEs$nt^O?}#y4&Xxy)$|%CzPuIAHBtR2&TAYtsSr-vf|Z=s$+`2?Qj1
zDP2yInr_Xf+hc0MRb!6SJ61D;v%WgZwBdS4hZZL8(W-GRUyIOa#WWd;9YB3N9E36h
zkT43wqo_H8R!)<rT9GLOH<<MIW>&$oB^MVyd4r(Fnj=XLYV~`rZkrDoSWnB5OV=$L
z6m761KX$))1;pZKdGU6@Iqd3jUsyz;FPH6z+&3#jo*li_QDi4yx}$5}V=0f*x@@C_
zA#ye}L}^rmRp-#!hF)y-uvNK;E&DeE+4b{DNLhWR4e(ry1+^*p?;*5<oV*a9oh*Bn
z0#+blooHX-VQ04w55U^MjWl%}DF#PM4r*nApr6_0aGTx3>`V62>p_F!xhgwn)*}Ti
zsp?^NExe}a6jywrTP+|887o;(b4Yha>`{To`aMuVVJ5icvC;h@Yn%Yx>gbJ;<gU-N
zCW|h)-Xm|rTD$++TMZwu-vMtKvOD<itrLWB8K{_@IUd1?L=oh7x_W}v5~Ky~Kww|g
z;9(4PM-6!SpVd%`OeuA$usWG2$94rp*hXy326o0nyIKPJ6~=!31-l{}Y~iw^BiVC*
zlYPQ~Jc$dTt?}PhC;PRo+fv<MPeA_Kk_~P;MV@R;?yX(ezO{qW*Y3#yho`fpYT~=x
zR4n=me#zE8vQ@N5rk>xK)8))llh-VxXm2eHZY8TarD2Y?D7UCiyS{PR#_u3j@S4&0
xo}4G|H#39Y#Bz;--jTmB`Jb%BSIONn#AW}P5Xjuu!F3XVYbNHGOE0-b{a-(IMW6rx

literal 0
HcmV?d00001

diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/protectedapp.advanced.png b/docs/content/en/integration/proxies/nginx-proxy-manager/protectedapp.advanced.png
new file mode 100644
index 0000000000000000000000000000000000000000..596ff54604572d112f775d966ee8e46d397d8d45
GIT binary patch
literal 22782
zcmd422T)UM`!5<~D<aLkEg%Tdt%7c<A{`Rj7EvJx0zpcMfQX?(=m{cCML|WH2*E9#
zkc2KZKvbkFNCE_iNE1Rp2uUFI#_u~b=iW2_x%YhcoI7*ZOon$Y-nHKTl;87v9@*Mh
z%I#6!0{{Tztgc+L0{|rG0Kg8<-Mhq3w6;thiT_B1+F4!z;06ybiEn=MId6R)0H{uv
z;lp=|@1=vTIEMlN@}yrsiSEEMF8~0VVRh;J%}95~lw7*EC2Eb=ieZBOeEJ|HHZ%0>
zjj+Tsz0VI9nSFOZWi<S^_7zL74x{7YFE74d+Ny&;QN`%(?eIuYf$Y-HNx2W~2!Ap)
z8{9Eu*dUeeze@q<B8rC6Vf7Vc^pCa($~2GnJgbCaUsZ7nF&c;;wU{D$0s!Ymb|U})
zWlN|e;Ina;GT{El-^l>L*)+l~Kw)sA0RZsy7*+ys_b^-zaBlWLt!iWmg&D>e6`a)w
zIC<Tuz#s))IoTO7c8Bu-79_mhNE?hIe#()#)2(ghDc|)%q8@hU>0zF+>MBNujBkiV
zueZK7jLGi$6VP$NjfkEy=S+q!d{BhRUbD*}57D=}xWmq&y^K=Q{BAg-<hdYCTHMLJ
z*`-p9Vcfc6+)T+@?4lXGT;qIOW1~-aM8tpwX#Ei(>~z|Gaw%Ik#XCc;tGP(#r*GFS
z{}DzhW|&H7CZqww#Dj#YOD~xdkhU0;(2wRKJ~LqZA1z(1!~Ls-)$7qUI-t{v7h3j{
z6HJ#hHn-~cY!n5AFN4ngXxvrJM~n8gV3yj+{%a2!ZE4P=X5BtWf&$PP+!Q^>2;TQb
z4$$|HB#%lHvh5OXY5g>Kw<qOxWTNjOcvadW$$F=s(NooK8@Ic6I)RPpbY_%hyTM6R
zWDhAq??7))DQ@!WRK)6^SP75OFb`e*vJZA$%?kO$BTJt+*lXusS0+_mcl)_SAbXcL
zD=fb$xZUFU+OV{XE!Y>JWkxo`K&(~CNzt1;uAwaEqi$XT^XR8*0%-tLIf{j14j4tm
zqlPRvi3X{SiIi{iEPKKI@f%&HS@cbKe*0w|ZQbAAWtz{cd;36!t3k`s&MLdGMo{;A
zydxc~lxGtS;;o{UCsbp>g!8cQ_<Ygl@qe(v&~!h08T$FHM|RLk@1Bh#S)K{(BZ&b`
zx+Mzq0Q6aG+g!q>6|i{MIsUUr@+t<Jx)c@j?>j51yPYf7=u(P(3%B^g*ixEqr>D51
zT48wP17W4_5x$3x%r(SX(!XQ|QV-DmPe8UZJ){6ygJTesu0BC=%L0*mp)4%^R?f$+
zTRYP*dyYmH5gP6xRbmN0SrtkCc4>P)Pkx2_7eo35`@#E1$vndfg-Ze7rBwh2t%VpC
zOfU*_h|9TtfjbKnMY@QFqK(S|))&6$q%%*CU4?7E5bTK`slw=E{}#R}lyNx_S?q1~
z&Bpk$-Zf}yz;@wE-@<41-)dt$)wSVIM`Zv6(86wnu|4W80PyX{ZhCGpJ`X`_lmd9%
z*iCm{qHIo8h5!IrDgRr}+yC4tMla4&ruDA>`(oIbJO6)i^#ALwSnj6N7p61=^Js}C
zhereZsezv{&{q0dt2df8$kJ;>O~=gtUCZNuPm5S<7(-6$29>ZMsvDZZ8tvB2p@MkG
z(De@lKq&WV)NDC0SC_^*QOg+*T_DG`d$fzb<|P`YEpYJzy1L*y?X3Bhfhu<M1aBp~
zp8*r5HEq4uT$s}S#NbRvb+>METNWs6Iy1ujw(ut#lSd5{m74^2_ca9Ka!b|XKA5xQ
zJD;*nJ3(P_Ldyl*P!Axe)BN|W`sGJ4qf&c#5^wWOE1!w`!>k9o8V0(eM$82XG7E#X
zE=m*Ku>mjWUiodzny4*4Y9YKS85Ebkz0nBN7p-#x`vcuYN!#m<Yeu5YZQThvBOr9O
z-Ev@vCe8DEwJ0LJo<NQ9SG&~=Mcp(}%l2$K_%?|9&`tRM&9-0)laqmoegAsvni&HW
z5P+Iqt5I_57qxD~nVm8C#BGD0{Mv;CU`#)MD2XkZ1!oh`^i#}wv-Z2IrW|A~XGnDC
z&LLXCJEtA)kXrd?_?%Q&4jiKx=e1hb-NbCcZ*8l0ahtbC;RlB)T@^oW9h^uZ*2Ijq
z@!eu{ZW6;87JtMPIE_1Lni(Y_P7-a%xpngx;VAz{2qU3D@GNp$V_`M!RV;9xL#L=I
zXdYg&Y;(_Eq^LT@flzCn3lSWc9<e?A!=xaybby8uJ&x&W7@{uZcEj{wF>^>}FUx2E
z%pV{vh+;j4H4Xwhh`j33eiYnF75;QSR~w5b`soz#{%K-Nm-eTM!ZG8#jkoNL*99%x
zjCNI{b3-Ba*Y5W#|Gc^nj{0D}=@2z9IKccMC39ZY$^#tf0YdN=$#{?>!v|crY`7hN
zMisjFZHM1J689m+mOj^tnz3A%*K;x4zPR?y9Z9)3S-SUQ&$ih#fej&p4dNn9`dv0|
z@f`#cyyvC;kJ3f`lT61P{BymQ?NiL(Rl0!N!BEG)p`KB9cGDXfa{L3K^d?}gBExe!
zRgp0=>Bh;8S&KQ6E3bxb;_f$A0=&PTu&JI{|E!d5*-sHR{S33{vqzq}ucHKSD>(QE
zIRo_5dYR-YOK+UkgVlQW1LOENLPs)czPT~;L(_9<yc}~?@NFTr$*G@S19g8C#}8(T
zVrLc?c!6YM1fyVhsQs(JERFDS<N6^oWgwN-MwyIGQN2#m_!5B;1}lG!h@0Z;^7cnk
zjT9J+8;-Jwh}lxfi`-jAvfp&fzn{td?lB{k+{w0a3|HIjoNI|z&hJGs`>tgVXzIKk
z`7GQ(aTG3cCn^_y4%0t$gbU98fK=)Iuo;mG$U{35QDlnq$@ko?QWUsJ!ptNY1ipF-
zTN^Dq2x0LZaF3P^&MqnUKd@Rp;ZI@paW8Prw+ECLJ++jl+lua)yosx%6u^jFLKY$R
zJwF>F>W|%srwA$oIjCig0WkF(dTn5_UsTU4+t!RY-HK2X4eBp=#()hpgxs3#axLYb
zGxUNow=y|cQp?^5;BPDY3p(7OqODUcS_+-n{gx}?Lg}gODMsE)ZE8<DI);c=D&yok
z@MwH&l&Kb{8^_32<0SZC{=`z=--I*bHh2M{KWmNp^8#I$N>+&piImy(@|Kdr<ngEZ
z3KPK|VfrM<=9x12T}!J<p74Byli|W?2iXdzeh4wRv56H5I}I}yt@+-i<tJ}K2IEFz
zS3_ZEF)bXc7Rs~D#jX24s5yy~b*OI-tW!#9ju>L>xpawacH^`<xWLYIjq93H$mkth
zoOex`z22_AQFs-<kCyhl`F*%IWqizFlH$`-1Ovr=Ih;IR<1>K502SysT2X!va__cb
zHu%Yt*Ner`<FR2JjfH*SsFpbU6Zn?EW-p<2Km{G2D_Sf0NxGBOsvNgq3CR;R^In>)
zDHgxDPd-oIE_6J<*pLn(Czbk1f7x4669{wM{du*=A~_8BO()0U$Rg7%YC9ujI63IG
zA8}YpqR!_rA&utw)F=QvC1fbBM2n(hAr?r=b$NscX-ep+F($m+HStpAZbr}$>6pAZ
zTu=F{j{%ywF|yD#g}O`J5885#Tg(I%5jP9Bdt`_@AcxeylaSR48-#GCeWL4`AcY~P
zZDm5ueNF$;K75wFUaR`Yi5cGUHOgFMl#)wNQxLryKT;gE7|hhoNE4(2bEx1LVpL=W
zW|sox;Ux2ekd4xy^FW%MnGFHid>bzc5T^2vZ>{cINTaO$L&xXjfwmuRx8-5ZiW*VN
zp!J?>3+J2Oxbu>>?OUeS@}v6sL|V%-d$8$<J-*%TTsSjHZ!o(&D2*OAhFFD8HINi`
zSvf}?(X{KXvq3wb{`BFB^W8o_um`y*03AJK5=!B?uj9MH5%{L9SZ%xLc?m~_mx8Al
zo8X_P<mwzFdzTw9e_<^|`-{`7{nlP(7np~M@-H8MgW~8F%@Zg2yfd%_mk*#%q-FvP
zbh7l#$>haK<r=H)%+7Y|oyU4gZR#7LRrrjRSJE#U4sidJMs#P-rddR%9b~vM=ZuKA
z1KN1O_GyKU1Eh$!;7zK--*3Q7^wK-fBSEw)T=kvCT~@|41(&miUNm7Q0o!jEoU#a3
zOe(eIBvzJkGuV0^-g$cyd-er<%POxal|yh|nQ8WwkD9!6m`EqMtAr-k6Aux?@U3d1
z$8GU6`M&N0Qp;UO+*J48OCaufcvi0_zEST}_(!t#*OrB!Fk(P}K&+SZIiTAGj&D%w
zLSWgmcE9$xz_C@A6t<z(Nf6^+lJIqdc=dJEG#RuHNysQOH+21B#D>9Xa$3me<K3E@
zZ?L*4Bd33J;;&^kJYR~VMN`cMRrnL&m@{owjGW1o%8dfK;(bP{uhzz}Sx!^jIM;Wu
ztc?W&W&xj~t>PEQ#b;JmD&01{#Pm2w@?N)U+<G~k#0<e;&58xP>Gh|5pgfh(wc7A=
zTLFSnVrYT{SuWZ)=Uu#k%5E6?^z>%*xxG<JNzv8^$l)-7#qy)hMks|AJI&u}zi^lS
z%&`yQicuG2%D?o*bTbYA2Fh|t*_A^W%@*ay7t)MiP+n9$z7m4g89~fE>MkD8ci(5z
z>=z`rfb5~)vubG$s-YvdM-6qqu$+KKu<Ce0Q;ZrDtQgF2V9v&@?Bl2|4v_FR?>wbY
zh;q<RK}G?kZfF=0H2)nEO;bkiF&A!R{9JZH|HV&dqwffLxt0SkVI4o?n{OoB^;7a^
zB=v`e18444QnAc9pNQVJU0XyMLsZG@(zhsU-MZV+?@Wtkc$>^>5S+-rC<$*nxFAC}
zQZs-NjB5FD^o`1fGe&oNI>xP+<Y>|fe;dum@6BrIJU&jAKX|6hNoqkasIO!DyS-r<
zx2Ac+QA?Vk%RVaT&l^Gic9nOj#Os;t(M3v<@KM5YBIw7ElR4xlVU}&BmlEBtLgr3h
z8b|6GgU6#y)^KibDVJuHm0dNWFn1{Bn&4d-r6jI&%XIw-8)tA;zYEw%v3>JIC_SH(
zW431O6CfB?=%4q+lx5H_m)HS+u$sX&^y4;~yp9bQCNnPPW9-VHPrn7e)n|2kg|t9K
z39Omi2;tPu$&A4EdmzqEL7!a+NGlam=B&ge$YjWM&Sd!S{={d6?hXf!BR3MwkkC|U
zKu!R<KlZp9#X`Fh*;7rDO3*{SPmbkOs9ERfVrfx>{GTmged22nM6Z)&BqGI%sI^IF
z^~MAHHNo5QO+Pc78W)`?cc!D~d_@<1*pIlxxXQg99m+XO17iU8IbyAZ*eMIu|6ldL
z|7#=szx*o4Y>3a_NqYbOeVz2k8hQm@Vp3`sccxx{-Ru92=l>tH{6AI=kcOkiSEeF|
zUr!JZFWhLHYi|xCzn*B@dq*cHU&ZECJ`*0Ept@4<3mWL()?aup=hJ^aN7ZOM_V6mk
zP$R$`Ay49)K5uSB3w_FG=R&J3DCUN=emEmwZ;a%A4Mo{R*5)0$<`U1D%kpp<ye3<r
zedyhs<YRvy3M3KvZHP#;bTM#Il}7kw9J6q4(Nmg){<k;Qwt2{FQaWAHp1+gF)Dv0N
ze`2%K2-DC+gNB|zNZbcJqxL_C0+k}(CLy;ymV2MlU*vtso~lwgObzv>B3U7G>RD?D
zZr*kx&s4{W_kM%vR9UUo&@Y2ibyj-E80A=J7EKuyoHmOxeitN7Z#h#FPCd1nQFq$x
zj%kjZ6fRnH@(p7uyc&}D)q$OgO!MAPwYAlxGB9hUbPOkDRfNsQX|<vKV8qq0!tpuN
z&nQFLhgkC|aPFhU3YTm*$oW=WhJWpB@qA*>s8NHqJ7O4OCxsf|AUBW>tlf)e+tLN?
z+bJrI_)5xL`?Luya32vzQ&?(_)M1Aa)dkPpWNyz*VDl5s!vNhLzVNER-{SVo8KDg^
zvYX;cwe#H>+p&dv*GuSu!?AlGO1^BDV8(0I9aDoy5paP<Ki(bcR*n0tTkU@D{wMHn
zb4S+}c&73b2>P2vH&NM<;BNXtZ9Jj~6EkdBZ(SC6>vFV>di@(C$8dDJ*689et{pcX
z_3HEBI*Qba3nUlRK}w10#cHFW4nJ!1FB}qbd+^!OE+ftJDAQJ{4SFe!wnpW+=&mWi
zaDjbcsHzFKinlt{dR;TcW<jQ5I9*0C>6UkFv4eHd4&uRbWGcJT_QO%pvwbx|`d&s}
z8mEpu^X@q}BPaDN);WA%s$XGfjmlW|Q3%ObFu8#PUS;e{Lic1@#g)(nHBd)i)Sn2_
z-8_WA{4d1CH$&o%<7~s7IJYp-8Pwc-rxQ~V8zxs9Ff*?Xe`bZuUtfJ&hx?PE*obzT
zN>2i<P#v43UTlyITf&=kjE+*hI9I%>&b;W8RZIeS!+VMSma_125n!y-y_YQ9wSj-N
zS(I?me_vljLf$m!`uM<KSB-*A@0J=>pIp@+)A@?{e8*XB8K#O&>AueEjdQ!_Iazvk
zEDX6^0y6)&O9#R*yK6s`Ig*KAezsYjGnwpKztRfHn1#ZF80@P0P+QB&=0FpzO=Q95
zk}Rdj3G8G=b6^AA-=Z<MTt;~Mfi5%A&jhueJf^<z4UVW&%YB&3ZLZU*yO{ZVACR4r
zxfvhuR@WsvBRkvA-bAV+*mtg{`EsU%GC@<^&t~iy+xhtxPqt(x@Fkz4&*XMXTuaMP
zFm!(dtML{TI%VNGlI0bl<m5;Gt1p+;`5?iDU&{rI^}UOM7sj(z?NRwXAt<yZHFq>P
zme#X)avV)Ygv`16;?i133J_nnB)m(UjUZO>Qj$Nf!C_UR4RV(@{q0@uI~W;g$w0)#
zx^>qLl7yeKi>cjoU*-Bxz~OAq-Sn;wZ&mj_RH_P0;fUaL*SVL6hvesyApG`N)>*xo
z5)QwneR_O-^PHpd-Fc-Xr@4v3DcoV?btB9wjg^|oi7?$t<SqzY54~F!V7(TrTxnRK
zdfglSa=)W}T?#WSB#Y5MG!Hf7nc7SkZNiPf=03h+efH44UEOjhlOZEEA2yZRW;U=E
z!{j2JSF{HFMKYv|6)|B*1ksE%yz>psS{l$(>$S}eTvKg*m#nWE1*z@V!C(?<6_?ao
zZxSLu+4dZ^*zs8P8q{p{<MX^D*VjK1`lhV&wbS`eM<B%#?`e0@&vXNwl*(S~6}~^!
zp#9Y$5ZoG%YGHC0UT~=!-smx>dnzc|Hk;)vKh1<^Ux_pja1xoX!3upzaq7LkYlPqW
zxZ3dKTW_;B5T+ml(T&TPMY4v5{EbT+VtvA3ajp4+R@l^4-8yTEzOQ8iPCo=EKSV9G
zrQE9`ZZOA38xe>VeAotE(A*vn1$G`b!trg>K#p&wURAo3x7w!Mf@Kdz5Vic%wX)mO
zx`VnWEzHI)k5F1OUZ<d^#!P;Cdr>3^w=MV39p$9zN1x?28|Fy#l_X$CcIw?nUWV#E
zj(L0%{JTV-Q=A=R`Y!;~C6RRli64!$PM$sJzFqmq$fD!U*e5a4=8>`Ye;>&GKkBc4
zL+2`o$WC~71AH5M;-mGj4xocQ{*I7!t|estaZ@<sU(a@^02+oqCe@qAXFUk8SN8=1
zJX-dW5r$#_o`Bj-H^>ts(PN-Q)+=lA$Fc`s*&F=}4mU3e>Rg!&`gl0e1d#WX;9gt4
zpDfj)G4M!b!}sZ~jcNiYu4F8WBp6wE|I}vyo`a#iN-o&!TTRk?J13Z5plnS5zWIr9
zt=12*KX5*Mbh1}PGSc^(yJGht^6D5}(LH1^Vld@Ul@i&PH_57breF$i^fv37NDkZZ
zS}&JMp<;V3L1U<@<YR%7CA;Zggu6Z$HITS%ivz?JVR_Sxg3T+MXg2*-Erf51EmKKk
z&4(^rG~(wr&2AVlJ4$U{L0oUr$w99)ux<n-&~f<uL{%*>oVrq=A7fN9zm1IU$R_;g
z3+~p<iW|?Y51kfi(gh<PVBL}ODSa7fdUZJW{&M=#@=Wh)_J>(n?xhlJoJONF_oN%x
z(fwBTRoJEBtXR=Q!Y)I*5x9Vq2Pv26w}}f&-JXttd;e{M4Lq&j8bh93hXW@_EWzm)
zl(}(J)lHqPwPE_a5~aVmMcDs(>!(TRsjS}{7`^##``@{jIFlx%E`cIBl1SNS_PlJt
zj-%AD^CxFQCtin0%pEMEGbqt8r))2nZ?|55*k`Wk%`VcYQ}4;^31{vxHoI5ozKap0
z_9PAZc}!v<g@Kt|Xzy2A@r|lz`>?I$aiAQwe&AgYV~}@LTeC{{KJs%AwEH{+k}2VK
zD6u~O_-_Is>1QR_AAA?|+)tN@8f!V@aFR1$L@l20cew+0Aek<eZb~~!r3O*gxIqz}
zXO-TuGHL}AI52_wA;e46+HdoReA4V<=kcq3|6CY*ST~(9aR^uZdEwGgr4-b64o2sQ
z4Dvb4DoR*xmgTezadre1yacbL+f2g(+KD=oXN_rqTa+Lu(MM-`voq}3Hi>AU=!2?R
zRhRx~o5n4ukNIOTtLaqC4z|5AcK#WM{yn2k6P$%gJTrTint@c_^IZOI2(&WjMW=gj
zmTf3C^T9RZMyBtDp!u1YIYPnYV8HY!L=~}0D5xH=ifV30^V(mdd#STmQ1h{0=L8N*
zU;w?CvF0q|T7|NQMDJre<XwTrV#t%C(0<7As{`rQgW;qS1;+W4AAuKAJO5&i)BP--
z?y5Z8$H;4o24BsEztYCabi$VyeQ?z*sy|o5{8V4^<o4OgSOB@}O%UHs4`_nbXw-kx
z_xc#tC!iLKPp-%NxO0?E*gqPg;vBdN9nrpK*hO18g!EPE+nlgUn0;kW)d(KjjVYja
zDqrB<mSw!-pY-PXHV|+-uK}NsJoX%aA7Jho{#DaSak3>m4v9T`H`ey)E~iO#O;3Id
znMCNJTTI);^lw?*djmeaA9PZd_ny*p7-wJSynN;l^0vwEDcM)!wY;6Ur+Rsn!*Kv|
z-$DvfNNadOcxhWzRckMti0<NKWSlx2K^VBvTQ`D*YsWtO;Ayj`<Yeo@D1EX6v-7!(
znOnn((I2ihC(W)4HA*#)-jvR>YpZ0`At$J#^qaP~grp0^p&~*-)4*_YHQ}ID?wQOT
z<W(ngr#)~vzoM$BnyfWd$eu1_&Q<tRZFoY&R;N^l;n*tz`kQ^G6YZCzqTYM#^bKH0
zX2%XiUsM-IavBuiZFlyG198+8v1ock*ma*#8w^LWmK{Rpdoyo;uHqeMykJWJ8v4YN
zFLHZ6d%zxIF}kwJ#E2#>jt-gr{uMyTkE{VDKhp35bZBiAuufasK>&b~^HAW(C2^Fp
z<nRA;q3$`{ZR@QP;QrfV*mU2&l8_>)6Y7HVDVLun)$<bmNDa*6f00AO4DVYvy1`NF
z2bphL3bgSq>o?`-Q(V~4z3KM^8`5}v#4zmnt8=|auo8aFjNNqpkXJ9Qez4K`$DC+$
zVGOqYC$?&5tD%PY-wFSBqOP9D`y$j0ux4`pQPkJgz*ffL$3y5V?Nf#=i<2}5vRJyA
z>WvVOG16dKV4;PN2#@8&r8Z%*m%gs%ioFJQh52^Okei!;_5c)2O6gw$FEwU9`n-!!
z{z{$>oR0nL&=Uy%i}pgyT2khLc|!XK^KU!Oiu7|8UO~o?5tA&RsbBIefF|5BjdlA;
zE2i|F=F<k!sGO0XL!pDp<b*<GCt1o(cIi05D{s}HR<tj*)b&U6&ZTHx{WN9t#JJPM
zY1trwGL-`75^U0**LO=b$*(94lg{k+1?1so2sW4r{!Qr}-h0X6FFaU0-Z=)v3QC<{
zuYVW42hu)B8IN*WNEyn#_6ECIF4zqrTg8lMjG4a-d)HEUvvX-l!-rSz7U$8JI{##s
z+aI{3*=%<>Bv!7V9y03Gc;YH`j%13OP#4c~N-~LS5xQQYP?Ep{3agro=^03)B#*3e
zUO|0a&8lRpf-@)aH7d|WDnxm3yY7cLU|Bc}ca%o}YXZR1*G{?Y81*kDBfpOzUSIBN
z{#j&hf~{qk%_|&R0wo&UXN<Br*f>Fv32!m(HpoM2N#Ql0uuYeu$!acFz_lSCbz)I>
zc}Lu`2|6jc)9r`J@TRHD4XpDT-s9&ibUP<fN~ty}zJI(-njK<!xyjH&s3X6Wc7qcY
zZjo{i+6PIzwxy1*ttEtm4b&D&BjrE`Kh~gEh>r#ilI!&t3DpP5LM!f*@oM`?%1#b$
z3Z|+lX8|013s-II>CKssAwR-efVPmv6jC$U2S7Mw2*xr+4c?_7uhGh2qw*lNl{{SD
zelloMbAG~?OgIQ4c;@<^bR?O!Pmt-ZdRYZ8k>fQqC^XeJJSTjxkN+C3eW8uJ(G^m9
zm~7Q1?GI47hbX|#*R%CpnUrspc~^f0_j|~REJ=(qXzC9#;69RIL95lV5hDeKC>J$y
zw~=^w_kDjScc1-N!QT}MYl|LrZ3-z?dRBGa4qUDQ0E~>iBOLrAabs>``I4<9;Ldrd
zzJdPw(OrPvNV&nU{qMyw&%!4_J<oghUNEHqSAHj7x3(5HAp3tUq{`8Ifg-?tgNx$V
z4Mw{rMB4)su(^t(;$4x<*h5ckyea&+S-X&?z&WqSjws8^nZ(ds7uL=O(j!U~gkfd8
z+MG=AhumLBIr-O74!jk&+&RNl!02ah)?}4d?Lmkd>lS5PyOcZb+%?0}Vy5|htC&|R
z!f!>}0<f^mg!dj#dfa>-+Ty{CQ)9+M^0oNZ;&*UT64M)XPa))g@fg~VM_Et%tB@u{
zbjl)RPDnb}h(|vF$9>F165>o<z&=p`z0wjAH^m6EEM<`^{Be-k#_8&P90I-e^Hb&O
zX5g)sXXN=7tE89IMp$XW^iGjmG|K$)jAVRtNVb6MX>ET8iWxoOY-H%oo5ydBaNnP~
z2(2{wqX(UdelFxcs}gB=HTkcpzFEONJtjC*Y6mTqh!mTI#W&OzQVd-MBVn?mXiO}X
zf1srwGeKPOIgVurr&?nK?k9Dr#9L~B{_+{ZV1e!A*=^p-1VV#7@XGvsO^|bo$BmhS
zftE9)m7$7thOu)npr2sGm(??sIZi2eEYa0eXbW-KDA#@4isN7I1may5FPN$6#w}+>
z(R78RbS#s14ZH<_@Q%^&-~fSCzd6$S{kg*eA#%nbGV)e9oWUOGf@OVR>0nvWVppsn
zRxhX79FSvAf(r_oB1fbI9fwQ7e3#H*vIae1L*jdH&yI@yCB@#RTlbERC1uFHQyABX
z8ZS}MYIz!ci)9b=81-;~ECisF3E_;BbxjAe1f~w{paR}43QYX~dDR#-?nbp_k94ak
z&^wZD?;bc`cyC{qskw<lNfasC?$;tU5Pbx6je&8nXdhF;>>KLaT*?3pymbe9!%3{~
zQ+2Kk+pb)^6FYtu&Ui4o8nJ|P=~q=0oaXu0-tWH<aR@$Ty?*fmrNo3}icfuYnH22>
zwh#ltN6${ty%i^AVr$5E<mguO5*@E6<mo0iNv4Tq3I%72u6CM_>Ez*eRr+yeT>3RY
zCptH=O|$lF`c~V<g+ulh&KkTAqC1A3(7w6eN4%tvjqn!V<JhU@5DUwHH6bS+M3wxG
zMwuT!@41583W$4mgkFGlqas)e@ot7Gr?-6mTdQK(F}tt$)keq3<ofG9?Wj+^H|5BC
zuddfOYMRN+K}$q%Y?zyNf2>Kh&^gDkRB1)<G7E#J#AACQU8aMTg06kcNGOFvr`t!>
z$m82u1nPp{*iTCb(s*xhR&YiWa1XtAFs{Qdi@>h<HOhvCo?90@hwW8I)*&Cn+F!fT
z050e#9oFzHG1L&-2gwbKF=Q2!ZKqXkCIVcwn6mHJ!`+CIl3&)te=iv7VDav4_i(OF
zcCtH48Z=A-Lxcc8`BNFhQOS1mH>ay8Vj**G{Bp9GqLi2T|2=zRG5p_{<hz-oaTDOd
zs^?+{3%7bEzj-?@$9|Qrzi<Q#4$mHJaMA!6t20xOMmfp8oD0y?#00lf^t$nu{Rg#f
z03H95y`5KbuWx7Vz6ta_Q3$l*iXbKayhZw74a|?V3$_bG80l`PHBBL@{R!*$Zg&m9
z-R@ZUlw8qxSW!pXOx-fU5pHG=)wLI$KaziN|JXWTHO4G~Pm%;2Ic*8e#++1Olg^nb
zMb5HOpMMl?zFE(O8zaxZ*qJS#v)5G2c`7Tl1+s;wrXa<XufD1mrmn)>_#S^!7xA65
zt!|~9a*MW)o(Dj$!;p}IvqS3CC3f*qkiW&(4V+HJ>qm@Lx+>jnEk%DJjsLpa^FZ2c
z@2Sypmxa<fZfc;nADBfgLrHi%9Z(|&2aTTp=YvGO3nmFU8E5p{_u@W7t(C9-r6fdG
z`_wrg`-WuPnQw~A%B1LS^rvV3lO4dup}q*_Ux|~w#+a0w#5m>K%aRY=XsTc=J(GJh
zGb@kvWj{-)AVDdp7>%os5z~pRCJ^bt&wyYN;LVV|d+CbnM`3EbD&5va0YG2b>Wbcb
zIqBKe3m3i4Kc{#PS7)O2(joH={aZH=ra8$cLW!W48_yoUF_wLz_31In_!Kt9|7yDa
z-xeF_fd|3O;T%?F64G2~JOApl;Pe}ts6*BAqlP;=lwD9zmnr*adEX1cvgO9-6iBAO
zbzbP2kY9xp?b)ZO{=oEX*{zu|xACZxau@F@=~Y<oBfYBu$((-99@)?Ol%S;>S`j{^
zMn+L*U#jBGk~2qr_kMH+i*>5u`1f|7HkDn|hj!G;_&53=E!rg+aB%<j5iqHm3AhG2
zS0(|HQ*yIWyGnYdoLIDMX0#M!H;k6{b3rwc42!#S|51w~rlA0zvJ?j6571rcQf>W|
zqlk-WwZ9!pqhVZ@*zB=3w1h57Hocnka5?m_MMCsoJXP}E;b&9#O=aVk3)Q5)#XbXH
zfO2N^w1^6-+6u++EA!o--(>A_y-YcgJ6w8&7&!g0ho!XXdGN_B1E&feR7eLKH?D83
zM<y`u%p-dn%30cQIgfn<2go*RC-2!_@0!#RV|l=^*}@6y4-&UZlt3t@cUB7R!ROpB
zL0#OYnmxU`(=uGZF3<?n3yOn3X1R}PKapGqWHqlx8)tMy*G)O13tj{P)o4pQCbHk+
zrJuv}Nv6&{!F`Kjl!fqUL4mIQO|oczB6lf{>4#{MD0E0<?H1LQ?Dz{bzSJn8a@U0_
z2dMfJYk9z3D)0kh)ZgC-P$zau{xfc4Xc9}8)_Si1B{Wd~*Hv;#qh~N`;4nFaK$(v0
zYZVE3aA^QQ=~(Wmag#ugp~K{jrTc|qoXPM-{);!v98EEWvSZ~xU{4wvV|B&Bj=`J+
zJ)``-J8K_D?yTA6<denWj<3Rbz1lkm9XaDXUXW<>c^ZlkGraOzLEq(XF1N@em~@!(
z*Zumh;ZT?<!e+qYNR<v&A>79zO#>c!n{y$@<;YUwslNQi)$blooY5~`(FN_$%g|E)
z7xWpgP~iJC?op`@?o5yAX$X`$t92|Wy$hrbQH-@LkC}F|l%Ypyfv}6QwKcaB4G1V@
z1%xVqO;;IuWf8SQrFF+9<lIt7J>J}R0;MpI&{SO+MnU9uoWxcBc4I@?S$sMc3qt(c
zT0A%Biy&F-cRWKclF%x5G@N(l1!|J|(9cCWu+92rWsB)$<%cLtv&PK3Hknvr0KPIE
z=d;8wVnBwhnsl1#0=P=f4=dRbz}qj-74@ggl65p%3c}eAQR_-gb{6;itK5vD4h6J_
z`0p4~qKjj*_a94^%A7JN3{RjH%iLLOmF3=}Jtx?(k-Ya3`Z2vB2|km!QdpjPyr<L+
zCnv={0>hA2yK|%T=M7Z3!D{V|`U-n7xDz!YFPLzlSVXDf*pRNP9N%g1n}TNl(K8nW
zNZv^MNy>@RzEQ!eO&D2}Vt7-bXw`6cu{_$@JbYRmDeGhd)13lwkP)bIPegt6nBFS)
zGSIV^{*jelp?H6w?hf2d`MqYs+iCY*?YE(e3AL{x61*cHJj(csRNMWzuM32_3mx?=
zg_XvaEY^lsMvbeNWAZ0K&K*s9hc<6GM)U<L_U_@8vWAg8Je^9P5cII=$Dndnk`npv
z%zexG>>CpxXN~!$kP9v$%_4p^9d2>5JD(0WyXyV$w#Cgu1uH5OXXlZU9%g<~&_&(?
zyh>_#hfB(E;nJ=J=<3Ua0OiL~dzYd&nWvxasv)pr_x>miX$!Q=ngCa2<F2V)b+*tb
zz^u2Q96gcEz7hQdnrx<++5V8RoSxrU4*pnp7>WAPoZY+kL$oaJv;+PWUIjpfOLk2t
zlnKt=mAY$WOJ--{d3skKbjlS37qTQ5#|k6g#i<{9DX1LSLMqw%?52lU6txS!>GF=_
zJ2N^#S9T0Gc*0Ps4~|#GDC;$YnOt`FHBPROzuAkrfxl)${?K8~g>amQv(E(L(~EE+
zt?vT=y$m!EMKK9<wa?aDkv>D|Hay<_3@?oUbY4zG9^Nm|v_AC7D++qBAvmGkC9sdc
zV<+UlR3VRd2J3F)&F<x2x4JvFG0L&<7Iy6N5MI1CBHygzw{irSJ}UPOCm-H|Lsckf
zojSHULR?;@w}n!6Qc40;D9Np>z9y?F#kXDD?r+Tx<7152-D~V%Mjo60o}oRi{?%kH
z`<=gC_7j?pn!d$lT3nWyjd{b=v>KkMwz59oI^QjiT<N-XeE#K7Io{G-q1|Sx`GUnT
z;<{VRNOJx1ML=HVIw2rO^*B$0`{RY}6|bZ3cFW+*(ww+)BniJiyPAL3ltcK*axNz;
zxOaT~U!ZgU*GTt&8BYEWs!}4MFg-J)*Qcf60dBuSxMqu_>p^0n_WIq-zYHe;K(AO^
zmM#{9mmL<i^$jm6M#;JeSDizZ7Ft(w0DyiE8B%l)gf522^96lybumF2z;wYA!Xcd-
zrsFn7%cV}zB!X+(y)4R?DRzru4a4S@{T~&Eu8{JYWL~6HOT(l<xD`NqFsvCAOt>b-
zm=<b5aP2o052#7^cH46V-;}V~Iyr4jP$EymReDM3`?wT9mAnBzx3lr3%0&~4%eS)K
z8Pcyb5P%LoSsjZsHgognHLM3tzCg~LYND2?kxgH#9+<Ad#oZq4eORRBX4wrM$S!D*
z0OWjJNJegKnoVV}ZjhSUdtU$g#tp1Bv~<R7LwR!7?3=`z-~3${*cM#GPb;_u8|B;X
zBL~QFnuRl9M<d>7!j)l&N?S&Q488@z=wts;CTNJ+ki0#!L``bZ$__z7T~;rio77dK
zygEz{&z%5$$S?qSpr59&xMjp0isGg7Kqs;uZ<TI$ameEC-2YEhV}Tu)e!27*aTLpr
zz|+OS`8lU@Tm}*sgA*NSs4a*9K<l*kAi!ILY6a81U0iVlpsQ1mT(`WY4t{(H?XdhB
z8TdkYQ4bK*A6Zi{T+!9sMjUkDzCGcs!pi<2R+e((6$Em8%#pYx1W}~vZhDgin||EK
zL(N;+3)0q}6DN?p0hDYi(XmRDCI+pX1A!Mm<7pYCKd^@do#({ix@@qFa)bRFee&uY
z{#6qyO!a%iAJcH>jb0ZDs<psvYESo%A&6^W5;#3NWz*kPy{O$vHL(Il37q%5Nnc7+
z%(B`JXb&F*cx*QqV;SdOC&jCbxp}Y>_?^O?io5KSkTrOkj}rTWRNigQT9<vV9gBM7
z{Gq;Jplp|66qIvxA)#U{z^P!*Ne2zZiU8nvNni#j?Q1n60~g~6p=8;H-)gK&f58o7
zkp<c?x^O`9>)J@B54FyRZVSGA3*yu`X5=i|M+T&gIHn*K)&F`n9N$I>#FI#NN3(y+
z9UbD?K7@p$moI8uC26eelO!$Cm&(q4>Bdox1xA2%sYR?*!86s7ofJZPGLpieFOD?#
zY@GcqL#TVWl15vtyg&=4E(%P;pI{423t1HLI_yT20_!pewp<1sp1+p&Ti<()+6!B|
zrR7wh!ZB9Rm!mnmZku8nS}@uEy)!RW^@FH%jju(k+aN*gEhA^pALKU--?pym71OE9
zVnRFN&2EIH+=R{%t_1(*u-@DTzJ=0U6R3D=Nz=J;YV2EJ!bjq={2+!QSt64b{qD!!
z>j_S5D>^mlwM^q)FE0I3bU#T@yG#%2Z(R+*v}-wGKI{5IeOOlP)b0V$Vdstgx?qL9
z*(_9E+pb1tN_bvR_wKNBbiBm3oZrbdrgvL{o@<y!?L=I>oW=8os~q}7;^s5MX*z`$
zgWe$x_p(_d7=;(_Fv9jK<2tH(yjS`cqABLEj_Gex6vO`S)m+oWZ+3Jph;XxIvl(aI
zve+MAS5Ey%If0LneQz(8z3ro{9^MC_zRVOqA+diEHNCU)uvwM{Eh78O)$YA4;q~_L
z?ji0TfaBfDu4XsiZ@^K#y)jEEFaJI{Y9Z6P(<N3#Jp*(CD{)w{D_XM35PL0aKY6`}
z81vX&ZfVE?xDRkv>=FM@=i@|QW%AEFuZG#!HIC8lG~7z9<n;^k1$%~PgANm&tE|?u
zDOd(lw$3ND%T#nsq1M?MN{tUFkbo^WzNXcj5E#w}9?Pp;O`8&%h0nVtl0Iypr+i<E
zEEo%<Tim;+C=b;s*CuoUX=xhtQ&oS7ZOUxmnc7^TQ;J&gY7|WM6xQjs($#^K`q+m@
zvGMhF4q_X^o^!Jf=uR28l1k#aeIDOH)BN;$FZ?-95g%Jk-uAoz_N8};@+q39^Z+d=
zsJiB!CU3SK?L#ALe!Zyh*^|MB6h#BwQr=Z1MnJO?-{M*(E;ky;q~ai~;EOI(rlY&u
zhK9GT1}}!&6k$8rlJll?#K*u9if+~+>dmU!n1AXQ2Ux{4;@GZhy0mH_n%}&R2#B1%
z6kgzkF^07Ydnu*3p|h0dtBOlTMtHWQ9!6UpVes%>yw-33sBGOfb~lvbDNYuSt(lz(
zQs;3|n@6%_xzU8DE5fM`ZSQjKHc^ow^$nV)a)o5Lft;jhuk~^gf~u!*t)H{B07bGy
z2+;Nd&~kaK-fGk$s*B9{40CCQya>^D8iHc@{NvvHmofPnxHM;%x?A~Di`H%`#TxY6
z`BRj8)LSZEO%<4zi#)HnS0gZ&_0|JJ_TjDrqZYW9u+Ehp%)v~C!#E1H!EkV?ZC0mB
z<WR*D!gnuO@&!2%1~g`NEG-ttn%zBN4?bx*Rmez0y@=P5Q8CzB_N36CH~u=m!`u((
zPibQN4h}3v4)vz`f9kp*-rAwJhBo;>Onc`VRHO+|A0o=#2DWCGk6@K0A%m${P`%+C
z>hn-KEHuhF0P}fa&RiURTYlB>_Z15%Udrs?@UIO*2p`tFva76+)(#3<5Svi`QF_<M
z{lhvgojEsgo&t1Hcuf9>)NJ~!(sNe;4`=N=m4W^&@jNLBcg=mVt^lR_qQ*e=As2B#
zufE~oEpgMv_n_Gm&ve&#UKgM#%~{76PtipMUy+e0`Q>tMNETWmC@iu5?Jku=&%WMA
zNA@T<)}!X>I<hZ3o}I4*u1tm>OQ?|T5IRHz3H`v|kO^3|{o3N0AY79Q8rP@_Gy?P$
z0;PNf$UiL>W`xcxr12d)P8h*vqUyp&AReEMBYsAihoeoS#%Jh7lN0U7kZPNVMv>mj
z3M3i1uRi+I#&ddU<UkYpa6#kuC_75(+vPV@t!^>E@PfPLf0bp0e-0-Cj7_^HdL*rO
zd7DM{ATF6fdp5kp{>W<>F?4!0Pwp-{UzNaS#aV771WrN}9(?~CkSEJ$D+wx@##_a#
zuL*%_e{GQb*P$rYSixp<yMorJP8$v}vT71~#DBSAUCbE8@rDE)nS0`K3PmtR_|*Ev
z$nFN481!(vwEsYYSpXgV=^6`TS5-S9`YKHF5(Qv_u=nzjs0Se`H(^w7vzBcsIie16
zA$idnO}-sja2vSo{~aBi-wv98CqN$P8$AyLgMFbbY%hN)y_Tvy^l<NlwcmRHm6Erv
zNsa#v^_%*lVwO%%pi4r3`?oZ!)}jN+8}FyU-jX@MUjc^yD0`6pG`w@AjJCMa6PUR{
z6g54fX%(Z1+kc*2SDEn38>X3O33{zt+8MMzotgsxhc&vQ?U%qFZyx;91cNul!%+mP
zs9M1?sdh7tPg1fL{`I97S*x^R394zA&^yo-eeuMb;)2cHbZ-?<CVNIZ(11%Y9rIt~
z+@av|K3t(HctpD#AO{3Zu8CfI813yDN#rpf)tJkw|MBPczGRn!QYs>ioe?1a>?Mu8
z9IrE=BMx+UkB5n?PJ*jr_V*h1({*8au7y9qsb!6g-qbT3S2sU5;Aj60-f@&-8Xlv}
z0}S@Q2(n`Z#o=nH4JDK0VfzY1BmYsKU(-p@sQM!4C4RY-M+k2%5{AQ2{bOjDkFVv@
z#OKBHRlwJ}&smG225K3|3P<#16JHh#eMfpeb*t?OzUfv(Y!0oC(P<)23ImAiF+1-!
zdc(C7l9lUjN4}HLiPf&@KqiEZ>7unoY)MxlUZrqPLcU{FifZeN4q4>q?#I-ZS;by)
zsKdHdjcQ>I7G3SA+%tuhNVe5!kVW|XIEcE`+uK0#_C{&*7Lol2sIO!<H#m6=lWJH~
z`_uU6QrV_95rZ$diJzbF`aoQImvE`+=KSSwVtcx_)0);^<ajl(*gfiJ6YArjbu_4i
z1}4fUQwFx$^h5AvrdtB8KMGbB1#oatBu776S&)%*IRiZ*X=hlN8bHWIW=LV~StOce
zY16FVU<q1>Hm~(voxBfK>Sx_oxnjXZ`kFO&PG?2*?(+2WQMQ2>M%cT$D-|MX3(ONq
z4Q!-!F^URw$?7g`HqIOrd~;1ijtcg%Bdv^k(7r%RTx$UJb6^E<(jZ4QaAk4}i3%F3
ziMtU#RV0`gYMCvI=7rApt<euyNBIFH6YKkZB-vwtuX5O)!hIKRHH`2aZqkoRdY!pn
zDwzkoKhjC8(<+r35F$>2ry$EWR6k!VQ(MJI!;gq67%xD}7mw*8J~xgeA`7V#6oX8*
zf85Fhd%Fq3cA{7C5DnT(hU~41m6xk;J9ZX<g@qW?q|klz@@2CT;Q>MY3l0JdHco4n
z-xN-7cJF#N(M(v~rC?N+*l8yhlBOJ#sP=60NU_wPMuAc=i^9>b%g<jf?OHYdk#D{H
zr+9r?etTEgjOVOsVKlW!E#Qc@6xJtuT;cecrujdvx133ezm<YprM6<RfyMIkwo3=7
z72IxZ;#aXFFSR^2&dy(%)Zo#PnF6F>Rw_4biYOxA&+NYjP4UbJQ`Z!EUs(1B7i^X$
zx4zM;A?sFCr4uv?2`0s&t2a4@jjz(%TPNxlGMD8&l&Om3aNAV;&eVjExm`X)x7Z1!
z<c-FBwYm43l3(sxd_O&<U||)tA%Lnp4sJ5L?3=3&2Vsd<q-<%)@7$cyueyZkZToMa
zxU&o-J}$+(3H_w|CGgyGuU2`ZL-w&nNY*t~1miO`BJfyEC}ssyCC(z?SSg3yR+_G{
zo+J{(<yYzr`Rw>&{CTm_kva4f@6r%kAz&e0i2)T9?8!;Z3(GH)kw0|DZMgl6(g~Tu
zd-N{TLtY2V&gzY7)vBE`(`z}>IXwQ&YKX{)Ip8YY!nijmY87wi8r=8<XH%kRH~sBn
z2x+|IH7Myrd7LsLh5(Y^c%RM5&fg+@N%VHDwOgnI2F3d~I*7$%hv_f3_5V4~+B&74
zKb$zc<|#%O^UjLAw29JBXzZPUu{;0r!(9>xgTj#C0RWd|u`3Bsro=*d#Ku0%7fFDh
zZo#h>CY2KnXtlclen$Vg{dZ#bD|rMu;Sd0T_$g+4cQpL}4kP&QaKdH5cST~5NF1aF
zoc+P3f&<xX;TM$kuk>{#>17CdLp@Z?H8FzxdhpD=Z09e{b1cl3C}2}#hs5S|*4%k*
z7}Mg{+}zl+Y^?hWlui3mRCw^$^mTh_m2DUND)`yi_E9!0=p0%c<`-dbv_$&9Rd&2f
z{&!`~GuLeU_+s`7gZ*p1pz+QLx7tBjA|GwqadCPt^%Den?dR3K5Pe<9*I;xp*n{0?
zgnuQ*i&HzqvtMj3QXi0URv$lg$TU5dbn8>++=#@!e_bPCBdzDP7xsvIMlk*F=*r}d
zE^bBC4_JV{(Nv9(a0VexFxYcV3@qP1Y=Wf;m!=j1g~GmtnCy0ha6QXqph*LtA|8sz
z?`a3g6mbdyOCNI@BZwDCH#+G~dxN6rJDJQct?2&A?M9Ku;E$zAaq`+}g?yeAbBPDr
z6N>o$1+VU(lTybUv?M(-2n5f~*WJOo4Nb-IZVKM5AiO4`&(0)C^_K>sI?NUCbZfP_
z*<}+26;UVqb>5%py*bea^LpJn6+4@xmzTSyR+edk#?EGw17|p*Pg_&N(4Zm$dKCr^
z4B$?31}Ya$Fxvvn{iL2`_ZtNWo@{rg;#0J*Zpd6@FPX)SORn4PCEKeY6vg}s|2+r}
z>o$IE7!`4+SLlk<RzMuGZ!!Iyd|N2acI{rMZJZ2Pjj~aDTdXgTLke;ObBQhUucLly
zH#&6w?E0))vl1V9YB#<7X?-f8fMl4&`lBv}_(bYQEazNR|GK9tu?{Um6d8$`0rjd4
zKEee}h>GZ=i>dy!?b<8L_Q=ZZJY5icI-J?W?^24Z$=V*KhlqMKarQ>F?l`IHpXHNy
zO<0cbV<z_lWAn%i{ZQZPa?aPc#Pv#+&Xoqa?oGkZj_b%%nHgo9xvtMJ?V{5TcUFKj
z#b~`y#kC`c|3c0FKsM%?4fRy_E^-D#S$UUL*7C5xn^Cyc;3#tPm*|^ZYxWW@`+`T>
z=-ah5zWEY8FcR~A!xgAb37cNKi2fE;7*vqpyIS7b9-Yr<L?0&n#hHxcRo%;78oRM9
zx`oMJe&MH*Hp9EZ&I@8Vao_vz%cjppY;IfkL6##c{W(?jOfVYgK(#ojzef;FT#az!
z^a`}Sslv#Ub>sELA%kYafy?f}tktyn^pR|P@LDm#EsN5<b`^MH@w6E*i>NlI{DkV|
zU*Rg%r{@H1DP0r=H%86n6FS0c;^fp?S^JpVMB+d!D|grkKa%QD!v80gDJ-#}Y!B9X
zm!+1|Y-}2quT!5-v73*P{&rMzoef{^st#-WZt4a>1yks58EV&_jLw_H*s~O$1W*aD
z-K&N!2oOdIu1|Uf&bCU>S<;Lv>>+Md^ep))$GUipVM448vAIlt4%4gv4@Vcd=2mDo
z_qP)3>x2T65tj8}!q?Iu?d-Yk%rh;X4pe7i0RMi)#8F<D;JLe0GryV*(b2CWu8Qi`
z!Z1DP3XwYjxL+-kk<3Z0%mYE(s1BHPmV+G-1&dS|k0*ZBAeoj33h|g>)LFNd+IGek
zqj_U09A&}VxI|Xy*~)JK`@@b?-<yur9N*1I*-cEJ0GB6BcT+4IjY3dg85srCP1h1Z
zE`DUvbX464NPXFeZ;{XPOe193{D>>-ZwZ)g;s!+aviS;m^BPx+R55f&;+mi8vM<4h
zj_jsx3%}P)%HbQ3_HjG@;s5z#Q3jcH<|1!6!=ilp#8T3UWu){A!}3(HriQ_=&+?zw
z7Hd_?B5kT}qml(#7?>NSRn36ap8J(!hl$;ew3wva0~#fPlwN1p%$S#T`qbqIn8iHt
zLfu+3ZrT_{8e5?!eW@l4WQHu^7-tg7v+V1~mDY(Y2T}FuABRwk2_Rjw+@6(i<=HBp
zt6Baw05K78dei`Xt0YTzDBVJf#&Qk`z&;PfSxvPF{9zHynz$8S`B025tbp?zG}O$`
z#aTKj*2AW!zatxz^ix=PbdV0;HaEOy5=9j(^yn?NdC3c%)RzAw>e=~9IW>f;PT@6?
z4KI)78@=0o`70zm?t$s@<tyo6yS0j$4>$4G?z%*nPhpZ$&nPd|wu&~QObT9}>O<!L
z6OBq<Y!2)u;I@MiVX%jF{a0x%@kQX25%OE|o#&LdPG#LM6E14V#|E@?u@uYcK`;34
z?CV35>6aUWR|-^CN}puqx<PzJ5M#~<(5qOv-qRZhSe)BJpK5XgY?_hBaWa5vOj(XJ
z#6Z)s#bbACV!sIWeEOPsY0QTEh1Hgy-SECWyacq?7Q1~HSiT`ed40x}Lh;@}5}@L7
zAA|9qjEknv5})v!qZnqQme11LN&iPN*B+Hr+OKWq%bGE@nJzY7$I3A?b<9yxQ!2Yy
z<|Qq)Qi(A$L%gJ5UVvt(Y{rrtZ<UFaCTa*|p#lP?mABN!3y7kYsHi9=2nYzC?aVpr
ztaa8p>wMq({y6*Jz4yD`cmJN>Z@=sJKF^cWV<vVx0f}{J7-#$0Hzh>Y3kJyDvLQvW
zO-mo>nH?cvS=H9XjRJ)ubAm-4703MBxg8?JLW{UIKQh|rYUOfTiM~T?#z^=8Qu`$7
znbak?gjjM&EokVYg8j}B9A&IZ1!}PTyO~dMSBAyf!8Xy82~-8naSCFUirC#^06#9e
zT=#PBYM)E)c#H2OY|fMxw@eeSgM~!wZJdF<n6LXQdzc)=3InbuL=)`;Z?Pb{h+I|u
zyi|dxf^3rSyE57^+n_x@B-tBXkE@z9w+r$S<#*#E(r3cnrsb<#qv~GD@<Tojr*^VS
z@Od6Y|7li7p-8#h@B{p+Ftj+yYJTV<dj>%<1-_C@X#cQ#xwx9*VY7+AX7uu<?-|hU
zU2{v1*w<g`J+pPPH^d$d`vJVo(rnjgR?ROx@g<`d5^2R>TSw1cB(%JD*ow)SnRuI)
z=~kxJ6(60cGpqKgt1jjr=uw13_>p^}gVB~k=`btpz=wA;rK+P{EudH)iZO#Qc0%KK
zqcC}CQ*xe-xX=Pr*cbT<vqPN>#Z{AoJU&m0$n4sF$yX@Q!hWM6*AWouPF%Y33A;@Z
z#?(YG-?w3rO8$AO8q9#)Lg;aQBSr%uZHAy}fswfIPwhjsr*Vwp@`F=@<Yr|%Rj4}M
z4>{@Bg`7ZWa=XtT=S`=LW;P?oxn41>FfuD%DmtDmi%~y$8Xv?N8S{8)nxwh@U3Md$
zABF!Am1s0)%rVh%Sp#LBkk}CA$%8*B#~+}chV9mDenRL8T9c;S6aaokj$A`DX)-Py
zd%i<AU1uLaoBXG(fI4p?wCXVCa!NnRX=RA^2W0OU+EBbe^;alAr|d|lPWV`9YQ{&G
zf>|RCkugcX^d-{Rd6yn23YUYa6A?rGj?LljKIZNx*cRzWlftpsbive|>GPKDdl<`A
z4dkr}UD;nkJ>F^lkXxC8)YMYj73Prm=eaKrC|se#JBUV>dZO9E^Ebvck@Jq2J64#`
z(8fkE*Lhz(sMeC$Oztg~;oqyTtP#%c+sJ7-WcYngt$>-3T(XJd(UkU00kESM+RT?|
zyJ_tUh1W3OaDvVwm1l-bIH~nzQt?<#$)n*ihrNnC;{t1SroT@djX6E*>$3le_D~)o
zl_$Q2&2q8eA2LIjB@gr4^g3j!@v`i^PX#j2?_qhHRxV`DMk)$b)^pXepy^*ba5>>O
zQb!j-S@ZtkqoJ9DA3qj$lni76B17FePma5(6Bvz-3j@DJNg^)^%S5H;R(38r=NoPm
zaEnO2#lmG*V`E#0P2U;S;rNm+wRT}ht@Tw^z~VJaHJW0@b5^c4M7E3T%rq~b2Q&S+
z9(Y0Wd5qmj%$`vYu2MGb91@Mo2}{|M4~rQ~l%eIum8bzE7sI!&#KlQXxfd2j)@ycS
zntmens;$&{>QmXGmDp&$Jv`*9T~&<`9$mdM?7RmPmmCm5EOm&i5|#FaKp*9SogVJN
zl}|kvP(D)pxCo3l#F*?J?iaX^C;no}uK`Ru-r}l#BkRy)fWNOWI1{B<mJdr3YBD@D
zj*JAZ+Ir}2KC}(p^RA)#%#-~n$GrAC(p1`8K^Z*NTld>^?2-flZhN5?OoAFID`Wa+
zM~=;0CAdXvFXfVZ1XC;-=v<72l|1IY*__2QhS;>yi`_XOn;fjjE{q#8v1JQpss`hP
zZ0Jy7-T7{UD3&H3;K^dFP$ksY{WKW1&$m;k;U4eqeIq%u;&E{uKqV$oNnx&jf$RDW
zolHB5aWl0$W)Y65i~)88+WZ|!Hr^0SI>;ks_%D%hY5E4@yVpp9+BRANf-3DzYMH6^
zAu|>SPtQGgS&Vh_1{_afJOXRts-$HTs0r0kcoDILM9yw*Dj}kdJ<sAvig$PPkGma^
z`_|c|EG4+37N*Ei7!OLSQahbdgY!%jm%XdKTWEO#ZXr+|8NRK|xY|5!<U6r_M%~2e
zCSi7USq~Wwk=1*vu^<{L@Dc{y(tS5R<f=yn%8duW^pe}-ofk(*vjZH7tF*<e;EYI*
z5Q-+(lEsEO?-`=b0?^<)s7W$-I?1)4l^x+3jD};nsWee;jJW7Uq`sQMA<(p2mUi+G
z+uF_D#g7fzw&mo?WfN-Y-dJfE_wkH%d|62@%-OHmjlk`qM5KPFseM`N^vY*WP(J4T
z$T;tmtN(8eWJyxFkT44%<TFJ+)+V#|aeKj63anp&`1Y=j;T!X3wo5cGmHWKuHW2fU
zqJUfU$623F1<(h2YM&R?!6NT<A4{Y$r^3$ejmPB_6mw9sy0=dt<|c>NjwsTv8Zgq@
z9R)5u_QNS#fHe<-e>Y{5pU1(_UCH5@QT?i?5$JfL1;XSOyk_kBCwaH%nc6WxledUU
z91Ua(QKxO$wQR6oN|>uKXc!dPVl0PN`v=vYM0B2}xyfZcQ8=@dfXuS$-`z7c5^ci<
zbpjq1pvVRFbl1Qu@0?7V8<(9B@gF=dW`(Ol&qWy8Ig}#t-=;z)geSZGc_A&(E{fRy
zSJ7kACuH%Jiew_=bB&3YpEgM>n*AXqs?aYFG7|m<D;W<(YELm52L4pu%<T#R|7LBC
zXt*ODGnvgD$r$`Nc0x{FynC-Ym*pGJ@m8H?S!{yztCa2nT7pE*jlaGNLK5~OSe+Wz
z4Ip|o&XXKhGOk<0J-k%218&Y}tNEo#%00~uuJer*Ey*TTuV9&@$N{6s30o5BO6uj&
zP>2<oduE8C-t|Ff8y^%CKG&d_;d)hO3|n{ekP~W#3sQJQ&TV<54UK{53$tdGQynIj
z!fHnCa$+Q}w55|odsWSRwE>0ibtxA~w7#PJ*7>_cNN+0Uj@IqAAbz)p(R2gM{}Z~n
zt{AKK>bD_hx>V%O6lJh-75VP9ZqaSa$tZ;B<a*Huo7#hWl@{LX_46&hzL#Z3^zkDx
zTGa^U@x>0SiziCzFPd2FYt~=`Smu3cH5gQ5tB8~DwC}fxy&0HAYj#nJnmcovR{sZm
zG3x7-9WAOh!*8rWu<m&7d{MU$z97?==A++>9(MVpzKCm1x}Qg$l5hUf!63NC(;QZY
zaZ58%cqP(jU(l-r$5FA@w#IA!l;oF@79LicL0Bs=>{0k=F_!e`nrV3VV#EjRSw0C|
zIGs9wQ$iP2Mxa^t_%AWp0{NAb-ki3Y1_N2-T}V=tl=(%Sx+2MAx*nB&3qE%@JX)__
zSB3=aoXEV4ZCM$##FEo#b9q9Bh5=Mr!kGr}t(N{p`ZO6wBp+=aeE1Y77-7)iA80?G
z0Cn!XsTtpXW&9s&?iZNl&1DjL)`eaehMx@WAXE(!UYt@AcEe_K&8{Ei8S?mb1E+zW
z{6hYbiTux}cas74zss+6nYuu;!U>=t{@<p5^#Xknb(xCS%rlDBpmHmA<B|4WcCV4n
z_03QZ+i>CMq24Q)ic&y(r}O?c1%FE8z&N=|wtIh>MagF4h5$~^vuW_{oGuaAR@h{(
zM)4P>e^NTdx^4DqMR`@TrKdE)@hg}_pZL;<aHFB`4>1v%pFRF?>sY9H?AyK}XhfIV
z#kI<_#C%PD)g7vVWA<-W^~)esUqG+`a2tK<D?-=~`!BJeUP=3jy@&<etiLL~%)VZb
zvHs~b{x+@KxX-AUUpwWs;)4dqBMff5cf9po>L_cmo-U?m(@ia^!r6Tz#;uaqxd_d*
zz!lQTlsgFxA1qKsy`D%>u0ThJ(?1LKSYNbDFDrHg>`3rWkNF%0wN6fmvMk{4Fii8$
ztPH&DWg%C3PG@)!UtR$I@{UAUOD_4@XiuA2X`claE>r605TEDYq#8k{RX-Zvq8ix2
z9zcuXjN24B;?BXd`$+d)iMGF-pTQkeuhA*`I7NO9Z}sG^_1StQ{Qdx9w>RDT!=4M0
zMufj05ly0WwNvovPd2uaV$JSRKbsngGP|ZVyT?O=G7;6<;1P>Bc2DYyRlOCb^9yt%
z(QuQ+2Q-f`k7>MhY<=!A_&x8bH**Y%WR0LsVL9Gp6GvzU84_%o>6nMOpj|s+ygc?u
zl`kkr#7z5QkOe-c3TGR=d`%$ZLg8n+vdD$@n{+6ClX|et-mRBDJz%;5?I!aZvZtHz
z$rE-5r>*+{O37L%)0+oN_|;g4vi@J#ME*ZMDo%+&&*`sPVE|X3_zggr`L|p!|GRnl
zKfE=GAJp^gc(iizjC58?hEME-7kb`5T)Whb17FtmvQfQ$3V7q9FBjit=K!=AFC6(f
zfGvM_K4>kcJjcani11acQ6Kn~rFD?wGAH(Hcn-1?3o!1tDCgoaBD{T_W5tdb#^NuF
zZ?`E9Gi?r<S#$C6x3+fOT78Cw*3k8;;MS<`QI6%?kS2Toel>NTsaOy5Q5{hIe9~sz
zCF<cipnqz6C^Y?sY?Zzm`c2ayAdv(X)cE^GjycrB9bhN~-=N6Xi+Df<p=`fFJr>#x
zP;;+uu_OZ9X(SLuB4Ez>4d>-w^Is3cQSfH}>yW0-L_>vt(I(KN4ZYtbZ7d-3l};=J
zhEdb6ygeXdi8C&9@0;gjaPYw7H9{(&;HGQ`ydkl}+j`R6${XWch`o=q&*{zneJ3eX
z_Uz?ko}O@(IU9z2ZTf~BQr%BMPew_rW|xZ!JC8Nh3`Jxh>xUivrGQxI!jVaR(UM9H
z&}%6>^I7I~y{qEsP$MiN8mx=1jd=4}KPctVMVjg{Wvf3Y<UO3H!Zn})VJSTTr<SST
zz!?O|(!uYqEx%>)&;Hl!^hJPK$-&9b%RI47`o>wuP_F}q?Nw{zL(S`?<WJ2o#iiy!
zKZl5~tPbzK4$0v0<tLZi^aT6ny_OuM)uXLp1E7B(=yT4}>HrS0cmHYta-uxWW-X@=
zVkri%9~N#=bb#0Av5%SKN#_kj`=+fw)u}^1)iKQq)?%%rdBGSsS0CSsO)Vh_53a@x
z@Yb1_KU?CQZhyg{h-relPjA#eNWV`BZs|2P5Dkq4li86|bnfs%jO&fqYhQ4|8IxGP
zc%CEk@0t!${P~~DO3I|3!SpaMAjd_s&WcyiaQ%@N2jYGr!u%UO?=>r)H7hCwwQfYz
zb%+!BM8$K9Kp!vg9`~l73|GN2z6)yi^9NPs=Pw~hH!6m6Q_%;t>jTcBUQ5L5dTR*E
z@9d;)ZYy}%k9U|M5Df2TN==03`Z+q^PerAd;y*?|n*3`i09HV61Dn(I%m0q|zlXek
z8qD4sR*wY0dw8Bb^64g3(Ii+yF-5}MY4QxGR|zhwcyE=7xSg>0hKX|chS->-SoY%E
z`zy;!SWmu-6~*g(S@_>@Ljx|b4`E!=gAm9{emb51?)aenYBnDAY_D%Du$~QEsvcg=
z{Z#PNzfwzb(Z)aT+u(VYnv^OmPN}`}2T%f@8P+P#ulZ}hn>)+KD+9mqVZ}3ib6=eu
p^b1%`#D9(GzFKsBohDb-q5Elr{HUfVz_VEA_z}Ouq(c{e{STGh&Mg1{

literal 0
HcmV?d00001

diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/proxyhosts.png b/docs/content/en/integration/proxies/nginx-proxy-manager/proxyhosts.png
new file mode 100644
index 0000000000000000000000000000000000000000..6888ae832ee5347a62761cd9fe5d587f83be5587
GIT binary patch
literal 23339
zcmdqJ2Ut^E_wb3=>&2^AxGG>lKt)740wNtd0s@LcsEJag_dtLU6_qO}5s}_hnh*%R
zLlBV~ihvLTgh&Yx0tqBQ2qDQF^_KUY`9CxB&iDVGZ)VQ(C^^a5`|Q2f-fOS*TkD)>
zH%$%p?K!%KkB@Jk;q@!#e0)En`S^A`+5HRf&6lnQ1>nz)0CR&&eCWPoWZ>jy*NY|>
z`S{9^d$;fH0?vQ+y>1=A$0yMG?ca_LpZ89Dd^R5puUxzn0$wH%e1t$48V}F*=DEf7
zjifZxrQzc?XwL%!T@($*%w3EJ272ta*R<nf24X*5{Q3Ivl%KEjMLzrW(*v*RyFdMM
z<I=~W<ewj%&`CDXHpMh=p$jdlMhY#42~hnzHN=ty$q9QT!5)p?%Bkn<-2t=)IF9}?
z{jE2^@#2c#w-)m8J-GI+_NVWkE=b<8`*GcyxHCXUza5{i3xR%ox_>HK?#Cy!18u@T
zJ{^7bA6LhbL0e{aRU|CA-hEuGi#UlC*GnYLd*F2sTcXS)Du_Ro{;Cr%I@IBWYlxc7
zCSQf667~Yk5YkmbXM(fhn;JGc6YUM07q=>wCNJ8&DiGZ0q>^)&pm+lLaycndvo4Jw
z{)cuzc^LadN_{+mT2>VXa`K<fd0vxXT^E9MXs@W2hluH)vaOLGukX^s!?z3NeLm(J
zA`tB&<)W=Fq?8Gaj<jQ#-VF#=OrpDi-<7oV!k|3$MR~zO#Qkl`(o-X5mWwD3?&P-V
zQYLHM1@*tfjFMLDDmK`P!JH26>+SwR3QG&HeP;8D<w#;8_Xe*YG0JS+ThUS)@4ptl
z9u`nzFK$-t=*kvbgo8RPNhzExd1FXtnD*(}p}kpMnPM|4@r^&D1iib4uPre#iDefh
zkURJuJfz(7tCA)5i6_)l(~_DhYGz%yjEri5$2~io!9U%vx0t?Zm!O;2uRkW~gY50X
z?}c==joG~_D2ps7WwV?L|0rAsC*J_K8rG!~?3!nfSIaTTiWR*}sjp+^epc6f0uQ{}
z4juM!m73FB^i6&Eo-H<r>(D<^^se99QJf-(b9Ub@^&BrVsK%T>F*8K$WcGtdZOcAR
z?hcnGCsQVPefL-kpKx^Lv{QXD(0A<O`l({331+FTuVR20L#J8ROF*eZUSII%6Q7nO
z^#$MGQ+lp0G`!i95OhUAJS{Gpzun2he~`x#w6Qbkre=hZn#c`ZR_A&mROpSn`e`de
zUW<Pm!xHuTu(MN0=Z;uTIh!-9Il(DArsIbRL9o`YW0yZHdBiU_iSCMr*gat@a^OW_
zg48u;l_9tjBtbJ{ifXqz5e>S+wlbAw!BF{?kuZK|$_Bjr9G=#+zB=r*bkxOmgmWQL
zpqfYzyTH;kgV5@6z>4tvr3sj|)GmB$*F|!lqzc*2d3|lGXj@nFJ<)ITm3-CaZqrS~
zrG{X0;?~`vV`sbyrwfO7gkHcEFS5u%eilI=&)+=nJe?s(>J;YP30m%!!Ef}vw(Iq-
zc{jd2x~ZIA3!Q&#BH`m`x)sQt2)02_MjTN(HUjQu64Miz9yLv!jA<_><uF)E+giTY
zLvq|ywAt2$I2!q=0K`~+HoupCuN<k(${?6$cD1!iboX`n^cGj8Wp#~f$6~hw0#wn9
zb(0GoqZ%ZYJG#1IYIrKL8!wF)OVs0zEgy%M92KSYZJ2BItt`~znv|ff`WlC~Mg_WO
zi_ckOLcy`(+DbSEk4(=9hfT@Vg$7%UC`QQILVG)dR8O6xM?iS#TivuB#hHMnE42=4
zs<mmTInEzUODJZ$Fm|56jb$S`XEE^dAZETldTz#LAX0*M%BRUj!qeQY>J8<ZAL+fu
zDD}Smvd+_~4^7(Ao-gFkHkqDekK4@9>d<AIeLg(c^6YG>mzQUW5a?Hi4qWz7Moo$K
z?Y^xN`?$#Bh$vJh#l+ms0wYnmrCZr=Yrr0HUvD-bu;E^rYtg7;M~D{aHraqbOB3{o
zn3SU1HIr6Y7wQ{1F8583-3KMbpw=!>m$MZx;|9%w3kxk{J2N+T<cfc(mDqnhDGBmU
z{8(oyZ1f(he5qv)H(5#T5b*RnM>3T_$7rs^nw2y<hw(d*=^Y}`L1y{u5?JbL*X)Nz
z2)}Rrl0agv^gfG{49&NH^vL<YbI6=u2zaf`kjWHe9NX0o(`z2Bg<JTQ61ut)0)D!w
zmki==OnD(E8PjNkEw)2c9b+vkELaScFOx$Vq?XcY_g1Xvq{@mV@qzhL>SO%pbyS#c
zMTdoE*2dGChza3w+xPwr*OO+JBV#)dHA|SAHP}%aN_!%j7JRUURsv7wVpI&d+h05d
zcXBeC72;{j3Cz>Hdz15)H1I1<!$vn3R?KHf8ZYp}Z%r2E;2;+7$Iff8cVtujp!BWN
zLl(R~rg<CfxivGI?GYi^>!{qi?0AEA{^Pvj276Z5HC`oe9E{O%-Tn$wYSKRv#|qnC
zuGy}AG-VyytWeS=hyxa{0kGz{F>{hU4`MGis)3nG@*!}Zg?pn<_h2r4&5l=ry`2sl
zFP|@fW@L}Mm3fUV>1hcg`XasBymwA+9Mh@cR%c4pOHgn$U}cWJ&lCc&F80K0&%I(y
zv*Xa+!5i5-awBhKX{N}CEwK2bL;1{)DLeCDf~J1GYv7YVGqy8t`huG7%U=bazlu!t
zon-AOOsNStE-KzA)k=u8W?0cXY`_r_S&Z-;%GcN-<N9qthRB-5Dmk&0hF`NBdFwLb
zJ}cpr<yB9Z3zypB(p%e94F$RA^<X|VsE0X^M?pF>QdK}T`-2-|Gal463nq0`%*$3Q
zq^_RqH})U*%%0O+%Rho`-;1CrA{+Xvg!{&Ye^aH*H}`EYKf!wno1B?{pz|x1YNO+Q
zkpU`4IbsE(U}mG1QS;9Iak$##)ApuryaOpdwF;@@eGDN1CNqe<vbJt2Uc(NFTvku_
zVbxvt$!A3W28>X6yY7G)@AuXqSn4*j?cppY!@%h@@9@1Rg}9qpN!zeOSb7Eq6Suld
z3-__u?t9GMh1y^$!|kZtR#99S_0Gz6igP`Uf~Ps?Ay-%<Q!TVVq>m93`o_bS*UlB#
zSZ;2ueU6!hjaD;WhO3>GhNPgTD;_NlU9~phHmtg>iY0n5(OqB4%t$oYS<yJ%lGMR~
zTMZeB#GUW@>rxPBU*JKtSQW+^vUy^)Y57#S9*3n17#5<#<I_fh$D!e8v?q0sYZD1R
zn9WhqIWea#BmUfLgoh5k2b=}K4*ZYeU_bNUp6W{Wr^OW8dZwlaAGfI5zH9HuTz`(f
z&5s=nLWLGtPzZ~f*M<5$v>La!q#xl5p%Y*>J;xIcs9BwGd8B)QNi3!TB!EaU0UbD2
z6xIKhIZ-#=pS_>W8Dy`)R2ac#U-!(Ndmri*a1OgKDkTW%V_PpDEWWJJU=XN_;(mRw
z?hDrY10!%2Z|Jw=)c41}k}$AXF7aXcN}WY0WGfXUFReoKZFce2ZuXd5@ogwh(2Ho;
z_mojgh^SbX=%h8ent*j8<onZU9(G~e8{o=?qUVLU&tVh8$ch<U&0H|1W-SOEl5W8S
zHKC^hMEY98sIPfC$sA*4A0B1}ws!+76*rHM*43jiCDVhoN+KHdn5IZ<B4?g7>Bxph
zkPUufW|%Z1zl8IWS?{2^5)#|sJmzv7)0B9gc}E3l&2(#<DI}UYwo3NHR_qdyRonAu
zC`6@{xD!z5x0;mDk0Mt#OUp+ux`dQFI`N+*@3?)yCzHH6$L)?By5f7mPEXlrmftLn
zY~kxmQW*av5OV{Psy-z)yOH{r7?ul1#>1Y+;m+>Yqs>*rsOhX-B?-b}H8>m3)+cwz
z1yknR36_JSUZ?7HkFL(&67Dy6`IY%$;t*kE=-z4&dQ(i<q1B-|YBfG}1WSzrcD6pT
zE~v$At;S@1MOz~0hDgP@*I8t~OWN8~oNkFCT#r&6FkiLrm0rFu_Sv@gRfKc~?z5=3
zxG^hu$a#a3yIzo7q6*Gj(134eK<cC+rv06ppSrHQkd~(XZGM@klaC)F-r?<k70pS8
z2}BY*=reZn6pHB~Le|<NZ<H{yVliU=9Mr<=AS>eC+C*Ld<!#MXr0Pe%F}ALpem}lG
zG1D;^A$G%d9fRL%hQ><MXsZ1L+pGz-aY|%`fioqRLvOjri9xcRXx5zZ0uTT7cn+Bt
zzP<2VeuPuDBMN5P>u4t7xEboU<Y5^h_=nDXOSO4~_Yf&${Glp_cT~=`X=@`4SS#x8
zwb7{29nVyen=S8*k}|}P*Xg@HivMFYe1h#jnG-m#-@s3r3<W9ZYgkd{9~N=me;7?q
zU)LKuf|W`+DyL_3)4Xc3I5YCf+Bp!lvc<#VfTyHxE;icR=Pe+X%CXEsiQC&SwJ~r_
z>U@*GXpyxye`{df>goYFfjj)FX9+LoV-}HS|KxWowq-1Zc{BrUMKq#zx!>sR@_f;a
zlfTWLuvCzyHwaVr_IkP2O|I1AdVUMY;^)DBogeSo7_T9+s?z9P)F%4Kq?xn7dO1XA
z<5^>T###xy=C~t`B5@)m4mGe(7GwW9lRt@}fm`3wvhmU<WFuASV|SWdLJ@&Y)5xx{
zW4T^=jm^K#FB1<bUdA<fOWa}TbcjPX+4tHF6SHzdB?d(2x(m0JenEH9r!6$uZBnek
z#FCZ-E3W|YFb?#ns5q=Ia$aRZ8jpJ$!W|rE1=v<dJo7rp$M+`XX?|_D0R3ZR{4_N5
z<ja25Bh82B`jj&Iw5|4-j`lo^3tJJ&3`_|s5T{B!$48#g=5^ASHTq`GQEbCLPuOqa
z#PzjB>@NB)0Om9IZDZJ(T7-k8q9x~Q=gQX!m455ZV~1)u^J*}?30jfgymcx9*irH*
zb`|>$4dQSF@x7}Dt$2P;<JA@L3H!}4`I^e&(=%XohEe`%4I?+uJ|5OUq)cV*-XzLd
zlzHQ4R%`Cb9kyhJE%1uQY@xIw_<3pC@~D#Iq2*_`F3ad}3<9vZRY7cBXA<rsvCnp2
z2?D&+g}u8y2+`3<%>P1|T{p9k2ShgGEz0r=)?Ry>&sdL;ezmLy$@10fqlhZzL)pWm
z-@XQO+v*%!v=UQjg5@Amu|l^rjT$G|-_|VJ>B*yRm*Xl&=RCw+^GkeGyoP}d#+j{n
zK6F>VV$-y1R%4YmUF>1sMgl7I1;I=2aEG@ei}AajE1qF5uM|FMvmAM{KR|IJV#tr<
zd{x|xm_uQ3m$GN)EntZV&zt0qokPeEdQF=Jo?)&=XqU_3ct?75_E*0V?|c&T!9oBP
z)BcQJou;Uob*%&Gb=m!HGd~~S-Rx9*JMu;6%)&@ZZ5_?hft>@MnMv{YCU*psicejH
z7t|V=9`4y;r4A>5{bCFCed8?nhe=@5`rV#B{qpcu{SOkxrkjgAA0NTurq|9K?>vvJ
zF0_-FUQ-@%Xe}p_=3Nk496fJ^KNvF&>;C0bKkiGdb`K&V#!E8gG%RzmeYrqn-1o%j
zh8Q{EtG-e}VCppA1W~Vg!O%>-c?C9+k+tN)@XZ?vs%?0AtTBu^PC|HfO9pRm8d}3J
zr(Nth%MDvh<tc9FbF-SdrOD7xjw;NjLyyINwx-nX_Ex*jC(Dz-NSP=_SiLhXg`8=s
zu4<)Z;*#&C?M@;sM@>v|J!a_<HLr*rE1whz=S3(71(bB3I%%7j331p#`1+#h;Eyo*
z7K~OF=zwZO4CivmW2CNZh|)lZRgG8_Ensry{<?;C2pol&4^!ZXEAzB@n4}6vc6`vN
z61zV_;<qq)Y(LgVZ4MSq^%z=i*Ry1@D#w$VI<@R>r--B`oEp7Rb0(>#jK1Oas$Xf7
z^IJ{EAm+H?+S!dqoS27M-TZioBO#O-6#XQusi$LSkUdl^E)wtxDHsO*c$)0#iKoWM
z3V&^r5ZVrMVD9{cj#-<U1v`Cu{aLf3R=DpE5!c(<HN9k&tz`?%b*Cc*x)Xy1usZ@0
z`ut$bj5RYkN@-*m6FX9-6fg5xV=H&2ZwDl`Ug;1q$Gf+C9Pkby5mGi5Ym!&^o#~e9
zVn@A}Cm$WVVLDfhL1@4T8{M(3d+C?8a}}<oMii`%%+6v)1`p9EW8>)-PzDOQo*h{Q
zVKr;or^VIKkp*6tY(`%j6_!3Amr2LW$x^Z_V(4oPs^uQ+e1AWwCL>?Zdlrd`J>8pS
z41dBlsb%WzRU5MA7dpx(_c$Nl!V|?qpl1nT{!>?$W_3HCDWRHcMGo)rC=Xw6Jodti
z2zHsRK(%!AfA;ji`op1#xP2FxyFmMo%wal*yWwT0vX+gTOW_piZMsDo<kO@M2{lKT
zEBz?f!pHaFCOP68{CQwB*&$-`3#aTH$7){Hy4QPO$%^EcdvU-|Pxt>1AfEqbV)P$Z
zx7F55qwYQN`1eb@fBa{HRmyDIy!GeVx9{C-&Y=G}y)Jp#@9ICNM~_6y{Z;hw?}ME;
z?e_nD`tsV->FB>JeypY<1p4PbIdN}mPyTcI;<q;8e_G+@^#7Y%k`4XV*I2Uu^zDR~
z^vKzus@hO`_|-`rCa=>cmRqqMI(_J$!FXKx9BMcw<5n{ZHL;gNR~{MK^-09^pFzKl
zx?eL3h7VUwFLqT3qbvVq94WC-<FT`NOo3cmg8DtI8KnE0e18zgQt>ebw+^S0`b8VR
z_06ume=*9Uv~Okp=9#ztr}4}mv-1~flz~|<Yv+j^<^Zt<Dy9iF=hAWKN&UR}<}Go1
zv|_WEzBF%nlaA>2InA|>&|TfD@^yjorX&iZD4IJi|9!PRcsLNhz!uEv?AQ0%{+a)R
zE=P9=sH|H~;YGWio}xaw*qOPOqzFnPn!<9Wx_C`%g+<&ol?MLEoRUb4_*T8A(4X}T
zGJY|VdxKbG7H2Smnx@@u<|gD~aqIW5maM$3bQgi^t_9)G{1~d8ZLpo65zE_?<c{^!
zHyP`nk@;_7^{e$azoX#8XZl1RaI<SK>Hm2intq;-W8n8B;>~wxth}b-!?%T;-ov@@
z9Vg#i2%2fUx89<_qJNYEtSpfKD%O_X%4msrtM)liR}MXrNE*Q(!85oK_-aR_CmsXv
z#0m%$t|sYvD9Ks3IYkK68Z+Ik#dU>|lA2}bYqUx3>P83c2^$Sgx;%M<ig9%PJ<)q}
z>@6qgw<&PAabL!H9qZQxJJ|rrYby6*?!dFCJMgQ0V0`(^W!BeE`c5g_J%21-^{Wb{
zG=|sOB6u5E{(}Mj8y`Xbw-{~d&uPX8v*2SIN<_5N!AiH^+lEPg3Iu_!FBwY$xQ{t9
zvrsc7=ioPc+7g_jQN*r954_jRQ%{yx1r~Kt2xI^;%RKmfB-J|W`$aP$36fog^bvRk
zy*F}r$+YS;7BuffL+jE<HgR;dhTu^`gR)eZnUYJ*gBN6|U)2U7y|G4;l`#&nzu{Jv
z+ni*}?CHu7Fd|V!KoIQc#+p%S{j^(Cn}t?JS~P6!V!dL#zh(pB#mC+r#&_85{bag3
zS_JgWLz^@V;TnOpGYQ^@zc=V^Q`>N=9mfgb|5H#N{bvo`IPT4M5wH`}^UJ$*jldfl
zW5?L$ROicEZ#mP8Z_{<5H%#sNy<O^Wg_CszAR)<wkIEExzbfeM(~sVTEDr?xZ+tR5
zl9e1+P$DiQu|J$%^_*OrHQ~v2jI>uk-+%>Nhazr5J_MH38Vz0?7&0L!p%a}7+ZZD6
zYRe0w<x*bbCZ@ZEtZjaA204;Deq|i!sO$ffl_eAY(b-AjR`_yAefsFIJw+kE@M$jP
z)+x*GwvMim0pqhg=-f9!uYIiV6CHUKPXwTRoZNaoCMKTW32VThYcw=PxE+~IROeuR
zik{v>_|iMQ*s`=AkbZJ{*ek;7cHyxRIn<=4yo8vJ{5W(efoXckxoaq(!-=vXNyiJ~
z#S{W7YU{P(ov$@-&q11#jiNN4#A|Q&r7vwf9To;v%XdeMhiS|8=H(6j<c8hExybv}
zRSR_|C7F8cEi2m<)@IeFa;!K;PTT7!ZPjUJ?770`jAdfzj%Ya)K@Q!sOzc86@9TIG
zUZkv)TRxuaH+XVk*z0^x@upVJ(Cp05S_<ev|E@ZvuyE?O@es*5qg(v4Z<_^24e0a*
zpJGa5OZpdpc-q>Rzm<k)n|6cnz3W4$;=EZ;!n2L_3Sp3A?p1TW9vS4|$@^zTz2|92
zpO}-jI`Dw{!y<{d3!pKmP5<W-nAfd%4zy{4<UWmUFI@opty}5w?jt?5Lz`+JEsi~J
ztYXymxL!?^sh&)c?W@6|v2np0o&2t2sMif3J5A7U&TT!Tm(<V5MSH^H6ZNXo{qly=
za({aNy8`+V*|TSDGSn&ej^%w}Y>Fy#9vhI~HKL6;CSVJFvMS+NjXp>5WA?o=jL-+!
z6<@AYi?-V(EMlE9hDwvoQ!+a!WZnH-LgtGKS*P-OVYDhQ+F#L5u%hqcS&Kgof!2q<
zDf*@=G~=ml1syuOC-Ojm%1C>NS81C`W$D@6VQbdu1~NEht=BDoMdis&zwy_G;1h`n
zhOm~ko0z)N`$naK6Ar97=-N#5vJi-@an(8@;<s|E`MXx?83_HS0Lnz6{6jj#Su1wK
z2L2$@czo3Mv=O+oE;7uC($S_HRBveqBi*^#=LFKl|I{gmUK%#by(A;|>KLi~eRx~E
ztqKhL%ud&$r=Nfnrg)bek6E7Sro3to+ny2z&z-FYfvzSR`&9|xhi~080%={1L3IvW
zTIR_6WAjS+_QoixdV6A0{8<)%h?tl8wRSjV#Vq*G{Hy$@rW(UbIS-CCrx4J0(QBiO
zt4vHxchiBcx=_QtVkKt=SI5pIY^%uJn}Z15MQ?Phm*mhL@&%*SFVj>h#}Zw4MWY4=
znx<tHR2@Luo$(ZU7n|*b-QaYsxZ*QpZWoT8eE-B-7(_z;<UZ(-*U)Csczv<4wovwE
zIax0`z94nJtWt3@6ekQy@!WREkU@`>OuOg2s-KpX54dBw5HjP+_#;tgQrMClj?z2*
zUP}=zn{=dMQ0@rv6CCU=?m_x<BGVeDp7bD>6TG5I?(l{$Fm$!UNRg^dXKW_?^WUBE
zkC9_KJ~ot%K{e{gQYvc;fd*Hnzv)q#Nn2N-X4f7S1J)8IVTNWIzC`Q0dPG}8@({Hi
zv3@&OLTN&i<ppg32S=mm!#BXzqy#Ofo$VRclNT9i(Y6Exq&mGw$0#YjsP$1;u2s8;
z$<+3-^)?G-9jltP?1#@hH76OD0QnHkpdE5=x?!Lb#02cgRvA>|0XeiZ$PQM%-iyo5
ztL=XB=S-YrJY6gKg_;noS0{^Y3AQiR-HN(F9hbI+nqk+Wyg=)G`a5Ybpy@V*p2X{W
zSJp-+-qJmT{^;iDoaj%@|Iw9^S^6dz@9%qYjLXjGKQ!CA9Omr#wh7XQ76O&YMK8fG
zp2&3`7!9#JnlddrC3Ll+LpnpH1Lx<La3;~VC`Js2_R)d_r;tu6ekrV_mn`^GYp~UR
zF|w{!7Wd`=jjMjg&f?JZTvU3G|KMt2-dQF^P0PFJw}3z(PNLgh4?EoAsE#bCt~L6S
zc<-B{3HF+8oFcDVv)FyJr`+c+;sdOBYg|Lk&4J_}K|g)PhG1%fn8YE(I|Sjzz)Zv;
zi<{RIqTfXM_dgd6FK9SY0t}InG!x^4&espFs_kxH#dOG8m#jfmmI6bntm=<7KQ>Nb
zg+2kX&gM{T?5S^g^&q=vMQ~LqA20ng9X`KYeH~%QMju&)Y@D-B*EwSgHR&2wHzrZ-
z{LZ-#qADCn*6}y(tVQL~(Q*YJUv-O}-=?n@qLKo2IM^ra5(n>y34@*uT7d8~zv8;!
z;Zxz=3@_b%K;J$ai|YAU!A|iswB=^_JDlemqMZ7ttW!91nF~?zBN+B2?&L6i(JF4i
zV0md}tz?(%?WIw+Sw2Fzw7%Bd?U_^l0Ihp)@O?vDLie824aaO9I4_H4cJazKA&P*q
z?Uwh^Eng2#5*C6UZuAxbo$Loh8-XwPFjv&`AA4Wr%;IkNui}1*&q`D>?Y51hH5Oj>
zBVkKEFMgE_i@fCL>{VN9z9H$aPTf9<cze^CWN8J?-F2I?POhvqCpX4~AW366$8<CG
z+8xq;b+<cMV`0lT05Z$BW?IrOI!JfFVOq%y()y71nJ_I|=5Jt1#mm`3#a~GtN}Rpw
zdv17)AyudBcfH!1C`U6PoNe=OID>wAsLkSX%3wiT$In0zg)c{)0^6y4-Cha(Wo&2N
z{cah~Ce@%kfOhssmd0rWf|<R9x$HkXy>os~(Z)@?eM-@&Yepsa-Pg}v1Pb%XM9aP5
zg__$ruPqj$Dk|o*=LZ)$g0Y}`RWZ}<A-C+#{Z178mTD0Abb8N1Ggt&fxaN1R@eKOt
zDTSgn_S-YXz;6#s0sHd*)UG7MTKn~R>4cv?du*{s`dC{K?pEG*ZFQeg-r@m!4B9}h
zIc3w;nnQMm?lt*gS6}^MlD>%uS-V5k55EN4wf2ykNv5T7C#(EtM-7j#H#a|Y%K_Fo
z1ecv42H~2qnv=k}jqbbQVr%Q4an9L4yoTS>Gp|s-+xBkxmF1OcgL0W`GohSVMF3zJ
zaniT*rJjMOvL(zUBVS+ywn7&u<+tj4&HqZJ@cW<adH@m3|0*-1VE$j7&l8k=p#Q}U
z`ma+(j_&zp<?5EV&3&_G_Zcd5ec|t0S&njAG*$2XOm1agp_)p(Qka3b)_jD0nv1te
zUTZ&M+et;5(ggS)JgrrgZm?ZOJ%VREtDv1@o4HzP!Nc{FUCb3JXS5)$dPyDe_ono8
z4@)OB34WngcuiwfK6WJZD>*)`VT%9cDLWO>$|e+OnyL;tH^(3TmCS8+$U5vP-H@MD
zz9Z$X#01wbkW=>nrqmTx(M-(?Y9^vQ!#ZmsJ68?FE6fb%MRiZhEQ3C}Jsh~^HylD1
z=z-5L_U5lRoxY{D`bSpar)W7J1Gl-`OW{LeHDN2cL!&IqrTaVHxEV>mB1e4DZrLq(
zz`g}@7K4023vOkB#r01$II<^w@u9>`Cl#~cI?FJuY?fy(dwGT97+elv3O<sX6ZAYv
z*89lO9e#J5;999+D!1&TJTd4<JWB{}pdB${*0o^FYYsLLig+6J5u&R4Nk;ps>(I(2
zWGy1?;MUlZ>10E2N38TC=E9ve=+_svHTpkY1JuFHaF+7x$s!dlXBAfK6S^vvtC|5j
zSOi9Howwt=|8n#qycQWFelu?y?wSw{4_1Z*n5&8vnK|J%W;=9$m94Ch7t43InUBbD
z30EA=0`*9Y%Dcxr5NVcpy*v9V#EeifhNx&jG0Rd`bn|kk-<p<Pxsb81iI|4FL#yGr
z1ltbGJda-fAeIE*qb?JTI`PKmdgzh+OT9&O0L>M&1;1B_ks}z6!L9_O(e>Zkv~Uqp
zDu^1NPa(&1{Fn90rZ1=`m)Kq>vFU^5LEt`2ZQ$>O_HuWDKx6C(D~xh8=%#?D2$}nK
zQPL`?!!6w@Rzw$S%1o*^(HOss!qrtm1cxOIaNdquK5#R4>(V!lqOfM1TLn3KxqUz3
zv~2ZGpNTEbe&s?ye?B4jh5Fne$D-2O5>gPE4o6kJMSW@~*BT%GbpPGLuh)D_@0<Nh
zf6aWmaph#h%ILL}*PmfI*uZu{L6`XPwg_;?UR=`)=ai0v`UT&dw`p!PYiHUEmaY+k
zX50ZDn5n!Hh=`oZp&e}VASdiU$F>?ym{}<F>haBY4Wm@AHxelxnG&}bJPu*F)UZHB
z4Usa3nUQ7WgZ)?h&IOjA&l`Mp^@H}!!pXNHKH=0@6%IblCvbkTaCG3O3qx1TPDR44
zu<*>*V>(aSqw3u`S8my9vS&LrHoksoC*rEhic;fUY49ugWwgC4H6hRgGlX=ZsR(DL
zvYx2>+YyG%FYFohjk0T{5GBg2hSq5NPjgL=z0l{^f;=f4y|5RJ%TkA>>rL)>@>h+U
z5xBb#ivdo3=aSmc`J6&t<ZXK+;q5`W!_wh9)oUoGcCye)zRzl92cNHC5~Yuz19|fj
zYSp(+OHEA6W|*n;UMg3FrjOPy>NFlqgeE44k0vq)S}I!_*PEP}YdCVK1(o-(H-B*x
z`<W=o4ijaIwcn&8(=4j{)!FTZaL>H)jsdE=<)DLo=?*UpF^tw+u*Uh4qNoxp>*G2F
zv$tLb+P7Z_Wa2uRyq)ou`uU@I_jt<HytCSB%zfy!Uu+^;e+y2}g@yQxieaXH`tatl
z^s6}_Hels<;Rs>=n%VV}{N=LAB@jEQ9<Fu@Lfv%j?m0W2dXhzi&-)PGN@7wbUjk21
zwG{RVi71C(BQs@z70bamXtXgaCd>TWs_!yaDSEMJLi->*kj#nkLhl{nMbNwsC1Mn(
z!u*#sve!cMOZ+%cA!~7E2Vmws#6KiIyPP;^syJRYH}i>D)RUI3D#7bLOMiMqGsQSK
zu}x=<_lX!Z=}Wjr_JzLVJ9>J&rjA`W*mbFvc&>~+Lg%8x%lGSd{VI5e5PuZAgzDAc
zwz!|rx$fm-eQl-o9sdZ}FF|?e3ZQ6CPOT!DVF$Lsu;$=6&c57_D`!g(<W22+;IR4i
z-)f#XY1f72@9h`}8n@a2-}=oJLC~dyG$RvjWkbwxIJIgMsqXP-Jg|KOpkjWYDPXJr
ze~>fy9~0pJDx)zJY-bN?H2D|e*g=N*tuNtK|AxE2U(yoz*Io1fg~%3lqBGI}>(As~
z9$Z<V2!(O}?oT=9rrkN6*Oslq-G9^ToUpgG?ja7O-EL5a63M@Lt(IV$Me9MiYu76d
zhKc?9*VltEz$VMII(sQKW0Z3JuX<nhUG^JZ`4qi>aOo4+;P0Ud6puzdm9~8T(nWeh
z>%d=M=P<stq0Hg2nsym3?r%(<5j9;n^-NgOzW?J6)=ZW_Cu_7c&w2OAxqmC_nL53=
zN-qx&Sg%jl)>o>?%8E-#8B)>J^?IjIfot9981Qps9KPbv*7-D>)SouQ^@>KJrT(po
z=iz=q^X!Jam*r9x4Fhh0W1~9k6sxo4Q^$xh&H1&9*8esN{nrnH=9TQ|-R}zu3hsZL
zqN-^jM;qA*R%Z{)ZL<;aMBbE=o978(Aswwg31aiBNuLf*D{*%DiNiz<v64x9{mfHK
z$tGkMHs!P1gtN=gHC)&8EO`dULC@z{^GP3`jHnWX=mu-G&GOV;R(S+?9?s$rXmi@A
zhNx}x*1wHrW}G~F%}9o`0I@$|k>nemfqR3-L<>uTMFcuUVfV77Vj$NNqUD;z8m7Bn
ztC77FvW=u}Iz^B--OA!cblS?ZDX%9sqR~aW8S~ltW?0d_t>o3Ea>Dv<@hF)L&lYFL
z#CtKdaw@Cb%Jks*q)+h1<zfi@-v^^p7!*^3>1}S7m4EXw%Pd37`M{))PlG;1Cup+F
zc|)blAt$|Z!La0jjjNx<IdlL-i+7Txq16;NeyZHGi(~T}iDXtf;gD=f0k4xLpm}Gd
zZeyOS-7A|-G*4h^UbPIPfU^E=Ua6Y5C4hxV5#;(8wl^|#VCJW#rQ=s!oV>mJX4l9=
z{?ng+jUQE0*P=y0V8U|O8j}a#*S@<?0NGi*piIo0%$#mek&ysbnRYF2M8DmLLHX*o
zerlH?82l5;QB#q$uxry3U%0jx6)@k|MQ8{nwZ$Bw51HwwG={Ux6B84iA|fWAA50tR
z110UZg_axu?o%uETIRW@;cTM*R>kd+N_)Fp38boi7z65<G$V8;f%3)sYz{*{?`&?0
zSbs*lkc)RqLR*vm;rZ=LbgMPY-MWpse~AL6#>dH^KPoxkYTM$$CP6dp`&g{`thT`{
z!nnJi-@tQ<sc2tK7GzXh?%H-v?(4c~vf0*?xd_A85s$s|ZyX~6sit>sI7TPGdGkyJ
zq}B8K0yI<0OIb&$U=de9m|jG7H4Zt~k?v^uG~BrDj(5hF%gLkC{Q_a3&F3?2Pv80{
za@E@fWO8q<HkH~9jt&}@yc--ea=Voavc?Z~w}aui-h_JRyfVfg2_Vi^=iQ>iM>zL2
zNr@J%3I8s#18u`~3<kJhHqm4&!*Xl&L+SfLtBq<~uzjuX30@z{3YLp~UTj<gD3@#c
z{}LKI^6>lG2A#o=zB9y1bGWi3uv_j@Kh;aSkHcm*A%A<yz%7(JQoi*5t!l1E`p+V;
za?RUB|1;`EW_6V$L|3yHYp@w{FKv6AH+nj0f?c1mPj^m<)XeQDX<Q#(=OHDhLV%dl
z;yZR9XmNuvg|Q(X;s(6a5ywAHdCA)(m83H#XQ3srM|S_}Pn*bTtO&aykU^mZCpR3~
znqEvp;f$ZWQb;ugCO<dyO~n2%EAuB4Q>nwl7AYAS=NP{8<ZDS{w)x(t|5kiQU#lCX
z`<LaAdU>ySHY**rkZDGAqBX_Hi3?Ei!N_^gNSI2lw1ZZY;Wq4g)YZg$;!zpu+z<hd
z>$>u#-PXa4@FWvg+TIKi&{F?3>B%tLSA9ep2e5r0HL=FK3$T|{v`Y=DJ<a^@g2k_P
zkl{};wR`kWzb^wBk~@CxPuGk`Z1*eVIZR9)<@|AvU;*N6)&k-?(QCRCbn3C%8L!tG
zq2*sC?kw(bOcMA#8)O+&aX6;P0~CXL@kxJ0u{bGM+X}7eCNB<R{j4na<%Y(9<l{ii
z7QO57iTukn9{^5w-v1=@vW$s}<?`QL;Tm3-s0gRL3RlsSboE*19(1(;2F`thp_+TC
zO94GMH%FhA-F|<!Q=wSR#*VB5fPZ_aXGVPrKQb{J*oIuz)}xzZAHV#?`9oVmX6<XE
zH}_MjCa;WC$+RV)4OTP=^Yv?u+B0bf^=QZS?MntP>PSaCehEHhZWm;88bA*qOry3G
zk2rydNAPALH`ZL6l+?YQdpwS6M*QJz76dH3H0{d}yWXC3MPZ|Ar$HnuLl15P#)OlF
z&CgD)K=owbV`GbN*Ib63JNCBnq|<c=v)_7}@xofHXIE^V&N8K0H9Y2vuQMm`5A#g3
zZUlF3O9X58Xih2f=aN3oe@0vrxDyXc*pn8X$<^uJ6&s+OrcjYQVvXzWSnBT(P)a-^
z0wSHnZWCw2ZFsA>t>yDlVSN)M5u~*LO>c2CEiaazLA2rvco7x;`1kUGN_q52=g?C9
z^0r|_9s5Rbv*lS#L;u=FO)f`+Y+3ncuzV4BuzBSjGsqm=HrX)vGc9+6GvK+i40k>R
z`P@sc%fF`?x^=g1Qh8F^P};g)CZOUFY0KQnDobUp&BE$5u-M%E{RhJ}8$`^h!XR%$
zXWsA>G@V~iymH$gYT}szZ1QRv8*h~L-xv%2(t5I8=}KVw*T+(6W(6P07*$fQg1;vB
zNc+E=O0sUzaM5gAp<nd%Rkp1_4<j|frghSe2{We|in{!LTlvz~_^rp%5t9Kz);>%<
z#^Lmx%bg6!ME?%W6FJytLLj&OcbVs@5vs=DdVBG#DGXtARDU8%t0t(nMrW{UVc6oH
zn{#%n!_X&lz08#;5)F$Fvsq^chH4|4<f@Cqx0g6o?%@I2{yLYgYhwMmpTP_<kgcHo
zE7F2SQ~z}lP_^gaeU_TOe%7Je7P$#rj~KZi@}QJzv39esX6mRG5W#oz{TNwuYU-gg
z>w>Cz;gz|AP5mY+jp2N0Jq;UQ2lTDZ@#j-y(eC0E0)n`UG*ztIExRXfGn&f$^QlfL
zbJ11MXw+=Au5t}ObKu}3ORV(cm+PNImcbKnle9LA(vo#5N>txGJ#JD8T9xoZAjagN
z@fy7QNMduA!DPd>TO@NUaXhg>_gb|{fW-JgHzi)OcvA5=v#Vh!W?+ib`S}p247taB
zqTH~g-p0;O?a3VrH_{}6z2QZ3M->hhLL`Jw0m%q$l{y;F#qL*weyP$byH9a^WZko)
zIN*_!phj<tTT+ais+p@bY)lb77<49YUuIIO5M{q+sd~TbaH9kNw4p-@kQU*orVx|e
zsV6fkk$`=2H@$upU$cIWAdBv%;niEh+-BF;kyq8t?VivE)Pu%VPxN*JO|yXXdGo3U
zl&qU!jJ)m586@}?$;Hdd<lDA^!F6YhWaOtsgllS_c>Gc^pVV@X1#NJ?$$9pqFI(qE
zl7*tj1baJj`1|Y`pQ{f=-inHnz72a6N%>lBEfG9f)qn9Yf?(VqMhLaYxB{&V2ZW`n
zD~oPqFSh&Cg%9=yQnDW<l-PzKW}C1Gv)?8uw%)eXjl+2LU&&{%^skex58*d%s;>Rm
zoKj{*Og3B<-mUE^RCVp^oasPj=O(zoVEE_Rp!;=@Zff6cpexQDBhP-nbUkv2{#Cij
z9wH!hmf;8Z-d*#K0!A6*S`lPk{h}JTK6y1gvcK|hp`O(_%28`1y}nxSI5aELbuYw)
zauZ_5Vi-mx;QA*`pZdsT?o{p3{k$=vYDc}I;#HbH%4>_&vAnb!?>lxTwntBasFcgL
z2u8f7_GiGHXa_CW!OhP*H^L_M0v^Hbk%PrbuDDHFWUA-5FR^tjJj>h1b|7awMogcu
zvCV=QP0la(KmJ0(n(4g)W=;2o8TwijQxed1@PPGD@Tt08@f_=t%E4y&_Y%Azf1@W)
z5?+Ww=ljG|UjP<HKNt0H9X5oj+*8c$7m)XQ_&VtdKAhWn?B&)>D3E@}>^`L(tNp?d
z>i??uHqIDVk~|{8l`z<jylpaEKcY8x7sIOTDh-U-aFP>K${K;Ado)6Q?d9ck@Al^n
z-=nHDMlPvQ>)HJ4UH%hpk@LN2eWz6rz&;1+!Jsj<bY@gn#ODdcjVKrW^{jCt_NIe)
z#M^uA$k+SZ^b}!`)jVm!bCEltK?#W#M>%yvgWadYk#q?2lvkr!J}n=wAtnMk?UL#s
z7J@vrOo~ev!(!6mOYd}|V~5zk!Tr`lV46y=Jj<N0Qcd0NfF1eV)mVm2qEx>(-*9D<
zmW}cU+$fkg_DRcVU>&?PdEI%@C1{PWTn8<FKa@Y=N3x2V4AQ&nBVMk2^NdQ78L+z<
zWlP{I+RUwNii?VpPZlmJ?Rl#2;aQhEw5Wr&Z#Zq1rFV`g!(lay*JM)wN60BYCw|(f
zL&4sf1WCE_!;O-0Jr#}8CKA`t(Sx-7)RdI7t*>ouWSFkPqAplDc8Sr`WS+bjAZNzl
z7T`7Ee<m;dm4eh6s&b$$VQ%}0F>Bazi?m2Y@Zey@CvA6xgO3F_Qjq#d&6#WvtM`+B
z%0ho=)*!26B<gR+>#?W2<ZU}Q7kzz4y^|V%a!fMw{*{z?%i^P76|lR=ZpR!5%~B|_
z1jS1$mFxYJtmDKvQZQ|#uM$F^m8lD+Wy-vsKoyV46w3$OHPy??7kdUKPZ$2}Wj=mM
zb<K&E>#ZRY5)%?EZtLNv-J2pzxiR)$fJzTMCTx4?F9#9W^|;UN{BmK9+gCDm5pfW=
zs!4kEzhqQ7`5x(-?w*^Pk<Pm_wp&m3Z$I>RmE`Avez^mvlEf^XbGvR!gV9CF2$nze
z@2X$6IL*e$rR5un>zW!D9Z~{0c`Zxd){@~^(}wP8#m1tB7833l?Uik+H^R!k;CdR%
zp{xJNG9sI(oA^~_>L9o}N+qu&vJyC^a=ER6>7$kZGAxdOJ1x0&>q5<k!7NtD@xMIh
zOV@q=8xzPb$C2{Q=%2g~{?#+5wM+l_G{0Z^|5kb$z*vIdtLlFb)$S8w`9Np_071Y}
zD*oSscK&ZiSloBZ>%$d|^>tn~FeMH+RPQ33{@#wmK|-K?`Ma(bH6DLV|Neli@*)63
zV&#gjTLg}OzvS*~Ad+QQRC@f=w}*fE9^3+mzi(Ojqu)ip|9tHTfK=ML_gwP)etOs$
zsPK@S-0re(@io3b3l|->0{nRiUf_kkj;F=a9l_l+VtTBg$A#0A+cAxPI(kJi|91I;
zVdZOgi<7{O6~EW|yxiorU2ze*dp#}2pZoD@3TOLyPfvOxne2A(uUS4WR95~@+AaUe
zyIOa<KieV+vC|D%`7C5!o#TF9>xHTI{j&0p{gsWY`8(+wX^1!??;_(oEUZPK;TyH6
zg<z#!k14ovYdN$o_|%&4P<>m1h#6FCKB9TWaD*nP?R-+DSAw@z6Fn_k?x~uQVWy>H
z|Flp4@cAS2-?+*7NnA&&0)->z(lodlz5Z)Q04{%9qkAaKFAEv2x4Ldz;%f{(&(>IH
z1?2hED1VD(0weSy&@aeusvLC9#Kh$4L4n}>0oZTmMMW#|B9he$pHH?Yp3a?aOEk85
zIr{FCh&;6)U&&g2;s#@H3OCoP>`I34St#OS550Dws(Awso5Ysz-1jHMQeI#0b5x!Q
zrKBc;pxg~tADxol18|pVg2wrGn~agm7s|oh?Z){YQGL0^rO;8F0m6I#_d&ac2W-mF
z+}9CnCFqxh#u}JDkDDL}AYgsdvpHSZw93!rpp_h%cGb2!fm%()Lt0l~yhv2I_-u9`
zb`E51w~J&&t~Mlu^6xSesZfMYct&{F3F{e9l@U5TC|9G$v4ZkSs#;*m5eV5I%<uHi
zG!~oFb!{oF|9*4j?rZ4UEiToZ%dxn(Lzo-B_(djuB_eE`V?AHMpw?JfPjx6cZ%@mb
z>!mpDda2zA@I1HF?&(7Jrl4eW@M=hqHEeaZr(Y>2I%szkYlc<BneK+gO3LV}o49HH
znIfrm_CMk;a@(7^&uu5~A2C;an(p7O5c}vrSJp;!I__kb!ktIv?F!x#^o|Lij=gz)
zNw?N3M4KSk3<s{w&%#nk+8GT3#nC7SYqzs5drvj!*lGwfD*UMDk-ah#BCqCq6bgIb
zeKWyX*i&ug-K~q?A4dOhMzmmBc4PIzc^j(??O;>tWRsi{xbbCH#8%fV37b@2S$T@V
zV7LJK8H%ZY9ub`&98nk}XIm5^;WIQfKtH446{u5FWSBqvF8{E!l5bCAx!=UQHX$`K
zM~g6ypc_kSzhIfKdD;^Oft07Lg+P`{^vCz^5g9_DIpgUHn9$H@P}PudKk}KiX_>go
zQ5x%do~l%$c80CzpGl>kyE}zIQ-{htCZ-Kb^6LF&o^Ee5`td>z5l|mgTiaDtw6>Q9
zF(Tq#SW(e&LJY)rALP4m4?6>o*^@h%AN>s-jisBSjf~}TuO@(<osH#0!`2h(gD8n9
z?R}D#;B|^*B%ojdmHyO`YB+%40K9U|NUFwjkXAW}<bQfKp}o9@Kwtd$WG^ci+y(@*
zUGzWwixvXxLqK1IK6&**A+<7mkXB+&O|b0dE=^X?Of(~i?9RIyh!=_tI0xrlC)D{y
zrZ%%k2@tMztjl@+sl{p_b8UQ3?qL89+Kp-^$bc%+BG1c|aOfcV*y@stlG@iQz6TKl
zaGqQco8_DJp0>Bd%;kJ(-4j|@*YY(n)w{2C?KPwtCUs94h-3n(t3<$&!1*X9?vb)p
z%g_qy-d?}JIk{1qv!|~0914X}(bo2uo9Y|-m-f7UQJ!NbPk5=&%*pVqOC(IZ+-!X3
zY*|Bg^kJWRzXL!Bl~R-yqeNf(9>X_ceO+P?z<V|f+_b_V3zfB6TlI>O{s^HE8pu!!
z(aa>q53zzMwLiaSn9p?pZxL8FY*)k@L4BI{!Tp3IZrpS%c{PaqHB&R-G;cG@_C{N6
z>$$D{t@SAM)~a7iu7vp2y?ZYKn?b37mk{Xxz*JB!0)bI^wR;kMOpj*FccxipHLs`d
z=DU#g5q|Teg5a1^B7jnqt<H=0cZtq(8@AcfJcn;sJ40nx4zoU==99q@OwwzV-YGmn
zwU6t12E41lN1-8~2jHGm&i0LhoBlDVy1KeX0RG4x_BWP$0nk8X;j~c_!2@fSWnlbg
z({?JN*FNRmDZPR%qKXzycc-7)YF!H|qudUC5eSBd2<-4QkDD$W;+$$5UitjU2wMm-
z+x{3ciMs`J1`l<vUJeWcl2e}adM(7D0QL?rox~ekXPbxe&9K-crKU@=r;knc8SDze
zbKdOQ1p@CEC5W6Uez31p`j<K4QaNY)%E>1Gj)rtz3Bp)Fk-#qB*;{l*)18ZK5SvT)
zO^zI-TU;=JAdkI2&5&(3#!XetaO)rQqsTn6V4|&!i#pOtH<-*@?d>pob;zp4v5$s4
zcB-M@+A}%$Qeqztu}#)tkRkoxy}?$P?XNuZu&b6%gvKep&&~tyS_p^m@R}npRoFca
z%}y~W1uAzGKX35@vIMH&yvtBO{FFL?LVX<Uz7|!5+Cm)OMT^_e{Q}Qg2NS=-m8y$R
zVOL}KJtBp+hBRN1&YXzb3kjDZ>UMbxegG!zy%Z<Mn7pnoLk4Nd=6W5-u1+d}1Bx2=
z6W0m(OvmES@jW=<D7c5QvwrRFX9cS<AU7_}Ov7G}SagLhcr2cE#Z+xu1uJ6M1}C@V
z1-v|RtaOgQajPQCpEQ|uM&g1i)}JajA_aZ9ROGs`**G=nxHkqB7{M)H^Be1k+lTCF
z6~BK-`f(giGE{;u&@cyZqk75QLT5kHGWHS2$urzFYaxO4s~A;5(Eeb<*!M1m>)cw2
zJ<{Vro9LT7*vh;~(>-7AMVjfD%+6Tt^`db^-j|<F>R_hQYR9y=LH-`f*UD?lo#U@z
z^I0sIs<)M$3=?8&S74l^nBqoYJ;4qD&xG6vSxMY2D39e&jWa)`lC=OwJB6_L)Kh}J
zrs9?P-#{^O@sa_MvIuflUsgQpnrS&ba{9{h))s%)<PK=NcEKQQST{B{OKJX%t~Q_2
zoCHkw9dpNpq*2bxL%}>@{CR%1hEG<C%(4Nh9Vz6xkkKLp;<DfB7xOYFLdX4UIz~G7
zUC3ytFaQ#F;dCZGcPW!Ax&>?!w=TZ0RVQ13Vq(Y;z9QM;3APUrvuy8WVPUflfCIh<
zitaGq!`h#pzdjkqssykJ=j=scA-!%nfX{+>vxYN$+M*rezq|H4EDnGyohtk)e#&6P
zu&)0h_n7AW>Y*!1!eIicQ}tU6W5kBQ$ENw+eDy`nenNPqUF_OKc1!)L$41fu=3)39
z<q$ZKEL#;Y!KXI<A3zhnH&`3-W8QCS3w6sr!(K;`%Nq}7tlYJP<=&W`J@XRHGvysW
ze@p9ucO9l}O{@R@{<+LMR|Qfj0^O9v62=B(CxT;Ka?6dy_xUOSO^nzBg{!uT5`-^R
zO0FfLgpX`VS`?Q(aV;A4Z2+6j!B*EuAAn3vK(%Ngrrv>0*IfnJLCl$^M~givs`Sm(
znfq?J)?l#u%!05DHL1LT@de=(hzI8QH&$Xf_%r|W?w*b&B{AtNq~@7@(V{+?vX(Bp
zo*-2idjxJqlF{IR#GyXJmvQKd1~3R|=F;lO-_>^!y0J;0YPlFvA4`g)PD8geV%GPL
zNa?&sqLCTu^z<DU&L?abI&;Ges?Fq<8$33$tJq7PS!8N!Jf}+R5Fvk80@yy+IpG?D
z`o6L|dHEyE-k26F8?tP{jFxLyW-<Daq7OvSh<eDkOgC*k6a6;z-N5!|-&~h`$k4mR
z2{9s9yr#5wv4dBcZhr5cvttyYE}-K^_Rv#C1<(EO{>5e7NH!){>@>FhH0x}ko`vh#
zQJ{~$H$QbFOTyPi3t%Gy^|dNJ^bBXp4i9Kn!!h0ieCBoMnJ8uoJ3hY9b8D~#TH3R+
znlqC>uwDWOug@;mvTMuNS4_LNNic>{ZOJp{#Lf#fDI5^ok3^e!1-C7wsk4i4!7jP*
zqlo6YLq}b<uOEq{F<)`kJz666_s%v!q<$s#k7=r}PR2*BqN;^yaIFxt^$z~RqRzHf
zd{Tu3SGMll;U9bb+|^eKiJo;iAnV@V-mVJQ{+?PJBfJu%=4wK@{<xA42(bTcnY)(j
zJ^4PI7S`-6%Hw}Y@>{=9amVGG?_pBrZ-xffo-mGdFFpX&D8uQ@R7m_d=<X~9hoZRe
z?rv7JC)#Qi_sxt|dC=F$w*#^UvwVnk@r0lFJdFVBNz0oYeVn6DSr++b?tGX7UKTVQ
z$uHQ1dbh?daB*>=%N0)y8rA8eMwM;Bc!Y(@r)_?|3$8!1)2xudi-*3nJ;DCXI-2VA
zEp06PI{Z2sxSIhiN*yABcw;;M8Mlb}-Bsdy6MQYN)*J{HpOx63o|V;)m9Ba0k9{vY
zRcmw8&03f%bEgUU!=?LnX<_Xk^0!PKm=TrG;OgA~vaPypV@<6M4YIJZ!7nI(H_-Uj
z+OG?P+{u%0YisLsq<97N2xWe@d34xP9SB1Ixa$Sx3xHyPF?MmT{g7FZO>s@*UpWVd
z(}7rS5h<Sx5uN}5#_sQRDj$}#x07kw0-kM}#}{t^Hd*R7cJckU2Q7zL)7>^~vNVjo
z^hBl%+-Mh9Rh3nKqN{Y)waF}stf7TA{u^7|aQpGvrq8x%d9{nbaP;IbLqA^W^hW>x
z$`5{7s|~+i{Tz`22<zKn0z9;H>d!*=#sBmR`2L4p@ATi|&;J*x8dLwPT6gp(z`nu`
z3L<BzoG7PH*(DX2$sb~yE?lkr^oQ^<r^?H)A2I>5==^er=bmGz->>k5eun_(I_G{&
zf;6#jj9|~ca?Kwuj*G!Jgm5X+Gxq!CrTFiJ;q&n{$$u@b_P;Cs!Zd)(Y3>3N5)Oz}
zYpN>vY~RbjaV6@U^q+-*X<=h+pFlbPzZG+?VM(R!9;a!lJvQp>x0Fg9=dEeX5Ha(7
z2yG^vu(UG8Ba~;#6Pgm9Fx_TJre$bmYK@W=2Ict#W@e@+sbp%3rh<sa5f3CP?nkX_
z`u1M?(_UZKhxM%MS?hl8|Ns8oH&n2kK-OJa+?|<e4CivWze$Vx3xFM`R<7xhU{$ai
zpkgy4SiU64);dxC$d`@#G5!{U4$>MwIZf9yr7GE01!^Tu58H7SLkB@O<N71&&*hV8
z<n0+u-3u2k9K07?VVcbGO!Y{(s=_SNL{M)|-x)AXxS<d^Tmh#8dV%!WM%S$7UnraV
z6EfuT$$re^TC8y1N|%B3slU`SGIlVu+9^EDd4yxAGT=H56EEa;%ul^BsTfvDF+D(U
z5!d76{%Cx1c}n@VH;eevOyTf^-8O#B;b>{M3ux*FPE2dyuVfhW3<@blqyOyOuZk7w
zKc+FjdZ6$>iuMYYmrMo8h6JB2sM8$3EA~50z$hB$zS{?`D{J>$-q93Q<Dr4I(nY{M
z#53ff7I^zm14SF5b@~3{Z^&wHn5UX}29@As5R`pHT_gL^S*=X(iiVymULVJV9Cf4`
z0;?FU$`OCjtUiVz4V@A~hIpDGxBc<oLi+;S%>R+}_D;PsvCAgZf~`k##aA_tmi*GA
zxucQrs3AFB!?xX%t;#S9VW&qqoqlt7NTV9{7M`3$G~RMbr$rq>cE%VWvmQ9f*<=UO
zf5%tfeUn8>4`#L+^%Tv%Hz%015LFkN%cH)E`j5K*CsD7r+`adLOTUf)B@GI@!o}bP
zn97})$+ImN%^N7yW`-sR_|2q29wu=p{7`Z~`XCi-#lwwhaSwzbm?lM=wIwS%3OU(n
z)r9G0G8Dlt$c@n@E{dsIaCp=5a?NfHgJ;<c?Yvy@$?bwW&h3lCY36N7it%b&@yl}k
zWYj=$EgOAaa|7RaoScz-$EsmYBu)~MyF&`@(oM%t?X<-mN<ZT0yJz+;S-{6nD>gb;
z>=h{mz7T3JWp2!#i<MUaEfULn!;@XjM4e|11N%~QNiyTCqb-0gD6OdQdlOb5FYJAX
z@J~_NL;b!XNz?y+$ZJHz^3k`-CZa}u9MMaXg)o{%;gz%z%mFPJcHpnRv1XHBQ#v_$
zVA_rq%QiwEZE({$J^jRaXTi-p^(H+@W3K6!fK=rP=<Aiw7$<F<zbGGl8i%8nJno<s
z`s2Jk8GytM<mqy|iLaY!G0|Q+j(({NLr}MR==zUjPz_Ey4z^;Hf(q=(AHY%76@Mfj
zO!f|{7IY?Thl;0bk|^k^mY8cwd-9nZ{g)7(K9IJ7|9f6;zly6KZZUrVOYMU_yR*{6
z3}~z*t+FJy>Vjo^+`}2)1{y<98Uvmo&~wTs3v9D>N#>_&ubFE-IXV^GIyUySg~Pc=
zteCx&$DS&6dT4224Vim8gIq%|id9<!6<&1))TW`!sp{w7x%X-^WZ?y1bXl428O)M^
z!7m-|Y2Dh^_#uCOQ|zO*mEkon;O~{=15iwEOW?WC?E}+ky=v-*A>*@`2JcKnNK#du
zFQ@akB#>JqsPA~+P0OG2jPvE(Z$iq1%Jzq*f|FxjKc9L^i-~dz7A0D@pNYQ_J{PvF
zZ68qG0uK@Byqui&VwX;gTzxH6f)~47aKTgP?_l~GE}#|j>bTLp4oiXo^LTkq5M=Z_
z_$~1YSGr&i=n9c6<oRme79L<1eS3RGm!eIO{Tl6x2=5qw(1x1hHBnUPC0STY+d(d&
zse}r|>l+$oK+%KNTYeA3QQL=5!qX0JqN2!vMbWI^3rj0gY1QV@TLwumbLYPm56;KF
zu-SI49Y*`$dPDzN#ZzcbNoHD64ZlP9lGv{j?5zsnp8)Az0ayHBW#w!^gVNUVH^aun
z;XYEvSCWBYKf>fh@?2N#a*75cY8(BWs|m+`)9?`tF-te3&IO;5OHWP}?N5tonFfTE
zSS+w%q$d54SU!8&(mfpMcfF2+&e|t6v3J>IZt!UcW#@)kEeLZ5y)pG+zqm$Vc#Q$J
za=fnn@FJr>x3&G(niCMM^Pio7=O>C@9OLr&`5<F~=l8+reYcxswE9US#h=am76lV~
zATLv2{9^&YZEDzytJ3m+D2n(0P!#7kJrbPcTj*zIs4?b9J~rE!fe$?uy|^UiJbO!u
zrWvmJ!(nw<)hsF2Go}4UhD#2q^K68E++j1<bo0N%$%WlNxK~<yAG-<X>~^d<ym(c+
zA36~eNS+c-9?|O)TD?(}kQYk^WvcFZXmkP<)Zs5?5aoGYM#5U`M@cWuN97umWr<hn
zb-XROOPZXk3t^t0nvrX3PBRS|Bs2Kc8a<Pnc7Y01`pG@;+!3L$wc<RU+D8h&Q?=cz
zydH%Kq1x7)A-i<HLKD2We7C!!Ms+{f7~}?5MX}0$5-V&d{u*8O3AE~|dtr;uLMiEn
zX6^(D<bC1qtQ&<TAs-%^^%-B5Poj2smZWI9VUDai;gw8pafub<|Bb9j;cbI#KEFVc
zEm>5h6fe~qkYPc&yEGB6X0liEYgcU(BiX-qy{4BHwV$8VogU=i<Jgg_CDX}^k(kT=
zxBC|ca@oC(pJUwhS(TIiHWsD&m1eB2sK(9@GmJFX_(K2<naGRV13W|;T^Y))g*Z95
zR7wU|(Y@6lpFS-a>$2Xm3F5vJ3`BdinJvEJ<A4{u(}>80?ZzC5m1k>7_!_YEORS!{
zLSrL&1%Kuas9F~X5%QN(_HSs?zm!Z5&Ds^li8hO_gqa{iUrrS!u2!6Ru>?8yi+HI2
z<cjQ2U!ru0eTRVMeQsYdj_}q22aS0Gx9qeV@f$qiV<=(anm><aCp%JoXCqoTL>pJH
zbXnDUt&Fs0iHB2=5yvQ5rQqd&VY-Nc5nKp4fzlbl1d#g|*X6!{am59^NBfv(oFgkL
zJJ<N9PC)_tsd=hH6-G(J@<~Xgm%`=jv=>oMIH|afL3-|%LwMK_I!Y%zS~h{aj4jc+
zxmRHEToInJ{dzE<Lt=D(Wa_7;$Zcf=O)f>V1K7Nuxj3F=Q4c^8ZCW6lW!DC`!_xZx
zYLXQmyMwU|8)?~1T>gwNDe2HcAhPgta&U=F505xjYp|xhQgL9BuoEtKv>hkEa1w&-
z(F56bA&{p7aPO{tY6!QKPZo~e+<Wm|qu0|-Pf9~)oLtrZ%&==Qfze+zPMiH)OrK|e
z7kfo?8t;I%CDyxqEBbAw%XwP#%g6?+XHDb+#I}V)miil~0Pz-I`NV=RvjeqS^dM&0
zj;*Pr>}U|)4Q%!nJ(B<<<PyUwLmqtNa76`fuWa?-@(Q~snJJOjQ{QFAcRcuBJo3cD
z`zC6d)LMDeMiGULUU^rCRWEd6MBSe|*Xd3t`uAT?Enc2DL>!-ZhF$#Bg><q_>=m`@
z2w$2-Va6Z95h{?akCTVq4m47igl8&0arQ;#zLh+wi$Rp7Xa#EAv@1%P_&5CV+}J@l
zO-~wXO?7zV5A9!aE(<W4PJAIT%hm=A$iVc)awS16wxBl$xk~GrsJRl+h2$Yz%cm)7
zxeD~vT>wk-4%7b@2e8dCkMw!dd8RpLu?qea9GNl1>J9)2S0Vhmyf*`XiydG8$5%3f
z8_$|M68g*CR-t~V#aPP4ZlV#lIw9rZa0QoNv|}g1JbsbtqJ(bdz{rLzKcDhFKJsk5
zhd0!$hIGpK6n4ONPH$f08l(;Fqu%FH%V!ZrWvzgF2=&SREVT_njxr_RCtR&1ISk6o
z*02X_`yNUC=kXlB;qKS4mvKPkQ#xj@6e|qQKz=IU3sv;Ra$-Ky_#e&z%7Hq!FR~0I
zgft3e?#VMLId1UX9@juoiAl=EE_xI2YFndGBv!Q077R#uu6ayBmnPceMRYT7)1o+o
zyu-r2urG}U4Sd`2z=if2loUV|pZm%sG%-qmxh#+sder+9y;mKYewtN>KtN}uN#Fvh
zZM&58p%>0tPr7j+?E&?=keE_ROr=yZKnj{lp*TA9;rnLjNST`~VhSrT+_CDlW^zMf
zPZs9E)+Y)VHiD|j8ZS7qFAmgih>QI6Q-Ql3_N$_|gWY~rd*GquG-g9%&vAeZm)@#N
z)39q|MoL-&Bo}DmC>UD}&7jMHVu{*%Ar=zbzYDMma9%Y62BSTS0xVqw=*few`=BDD
z^+XFY%DM%kzh`H_#1o6;WfW~b9sO0P#vi`jKq+0;TcO3N)U8FnwQH+qJ{d+uW6g;R
zX4Rc6N~gmt0?ScYzXzl|*3J1Ma^+XM9H!3x59AD3QQ3mM!LPg1mkT8#9X0F5Fq|b7
zjm9}s+jBM7x*Ne2agn<d&3iE5+dy#n@_O68R>A+jIwJm)U9hq8Z&t^LqLIz3inc5Z
VLtpg+2iNW&KW6&}{ph*4{{>f7RBr$P

literal 0
HcmV?d00001

diff --git a/docs/content/en/integration/proxies/nginx.md b/docs/content/en/integration/proxies/nginx.md
index a9e0d8697..7ed9024ed 100644
--- a/docs/content/en/integration/proxies/nginx.md
+++ b/docs/content/en/integration/proxies/nginx.md
@@ -87,7 +87,6 @@ services:
       - '443:443'
     volumes:
       - ${PWD}/data/nginx/snippets:/config/nginx/snippets:ro
-      - ${PWD}/data/certificates:/config/nginx/certificates:ro
       - ${PWD}/data/nginx/site-confs:/config/nginx/site-confs:ro
     environment:
       TZ: 'Australia/Melbourne'
@@ -293,10 +292,15 @@ The following is an example `proxy.conf`. The important directives include the `
 [Trusted Proxies](#trusted-proxies) section to understand, or set the `X-Forwarded-Proto`, `X-Forwarded-Host`,
 `X-Forwarded-Uri`, and `X-Forwarded-For` headers.
 
+##### Standard Variant
+
+Generally this variant is the suggested variant.
+
 {{< details "/config/nginx/snippets/proxy.conf" >}}
 ```nginx
 ## Headers
 proxy_set_header Host $host;
+proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
 proxy_set_header X-Forwarded-Proto $scheme;
 proxy_set_header X-Forwarded-Host $http_host;
 proxy_set_header X-Forwarded-Uri $request_uri;
@@ -332,6 +336,24 @@ proxy_connect_timeout 360;
 ```
 {{< /details >}}
 
+##### Headers Only Variant
+
+Generally the [standard variant](#standard-variant) is the suggested variant. This variant only contains the required
+headers for Authelia to operate.
+
+{{< details "/config/nginx/snippets/proxy.conf" >}}
+```nginx
+## Headers
+proxy_set_header Host $host;
+proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
+proxy_set_header X-Forwarded-Proto $scheme;
+proxy_set_header X-Forwarded-Host $http_host;
+proxy_set_header X-Forwarded-Uri $request_uri;
+proxy_set_header X-Forwarded-Ssl on;
+proxy_set_header X-Forwarded-For $remote_addr;
+```
+{{< /details >}}
+
 #### authelia-location.conf
 
 *The following snippet is used within the `server` block of a virtual host as a supporting endpoint used by

From 66f9e27f9ea9c078120c35d3ed6cba1b2ecf21a9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 8 Oct 2022 04:55:46 +0000
Subject: [PATCH 112/263] build(deps): update dependency eslint to v8.25.0
 (#4148)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 173 ++++++++++++++++++++++-----------------------
 2 files changed, 85 insertions(+), 90 deletions(-)

diff --git a/web/package.json b/web/package.json
index 5b70bee1b..e62386a14 100644
--- a/web/package.json
+++ b/web/package.json
@@ -158,7 +158,7 @@
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.10",
     "esbuild-jest": "0.5.0",
-    "eslint": "8.24.0",
+    "eslint": "8.25.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-config-react-app": "7.0.1",
     "eslint-formatter-rdjson": "1.0.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 378d336df..4b47c4f96 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -29,7 +29,7 @@ specifiers:
   classnames: 2.3.2
   esbuild: 0.15.10
   esbuild-jest: 0.5.0
-  eslint: 8.24.0
+  eslint: 8.25.0
   eslint-config-prettier: 8.5.0
   eslint-config-react-app: 7.0.1
   eslint-formatter-rdjson: 1.0.5
@@ -103,21 +103,21 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
-  '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+  '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
+  '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
   '@vitejs/plugin-react': 2.1.0_vite@3.1.6
   esbuild: 0.15.10
   esbuild-jest: 0.5.0_esbuild@0.15.10
-  eslint: 8.24.0
-  eslint-config-prettier: 8.5.0_eslint@8.24.0
-  eslint-config-react-app: 7.0.1_wolz5gfpehnta75zn5jkwtivci
+  eslint: 8.25.0
+  eslint-config-prettier: 8.5.0_eslint@8.25.0
+  eslint-config-react-app: 7.0.1_z7wafoevaiyltka7a37z3wolda
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
-  eslint-plugin-import: 2.26.0_s4vppe3rjapx4e2z54qvzpm5hu
-  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
-  eslint-plugin-prettier: 4.2.1_cfn5x6ujhhgzv3423d6k7r2zzm
-  eslint-plugin-react: 7.31.8_eslint@8.24.0
-  eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
+  eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
+  eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
+  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
+  eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
+  eslint-plugin-react: 7.31.8_eslint@8.25.0
+  eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
   jest: 29.1.2_@types+node@18.8.3
   jest-environment-jsdom: 29.1.2
@@ -127,7 +127,7 @@ devDependencies:
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
   vite: 3.1.6
-  vite-plugin-eslint: 1.8.1_eslint@8.24.0+vite@3.1.6
+  vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.6
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1_vite@3.1.6
   vite-tsconfig-paths: 3.5.1_vite@3.1.6
@@ -203,7 +203,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/eslint-parser/7.18.2_6hamdueellmfdowr3e64hskol4:
+  /@babel/eslint-parser/7.18.2_vj4r73z62tfyv4m5ogwqh4y7je:
     resolution: {integrity: sha512-oFQYkE8SuH14+uR51JVAmdqwKYXGRjEXx7s+WiagVjqQ+HPE+nnwyF2qlVG8evUsUHmPcA+6YXMEDbIhEyQc5A==}
     engines: {node: ^10.13.0 || ^12.13.0 || >=14.0.0}
     peerDependencies:
@@ -214,7 +214,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      eslint: 8.24.0
+      eslint: 8.25.0
       eslint-scope: 5.1.1
       eslint-visitor-keys: 2.1.0
       semver: 6.3.0
@@ -2404,8 +2404,8 @@ packages:
     dev: true
     optional: true
 
-  /@eslint/eslintrc/1.3.2:
-    resolution: {integrity: sha512-AXYd23w1S/bv3fTs3Lz0vjiYemS08jWkI3hYyS9I1ry+0f+Yjs1wm+sU0BS8qDOPrBIkp4qHYC16I8uVtpLajQ==}
+  /@eslint/eslintrc/1.3.3:
+    resolution: {integrity: sha512-uj3pT6Mg+3t39fvLrj8iuCIJ38zKO9FpGtJ4BBJebJhEwjoT+KLVNCcHT5QC9NGRIEi7fZ0ZR8YRb884auB4Lg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
       ajv: 6.12.6
@@ -2473,10 +2473,6 @@ packages:
       - supports-color
     dev: true
 
-  /@humanwhocodes/gitignore-to-minimatch/1.0.2:
-    resolution: {integrity: sha512-rSqmMJDdLFUsyxR6FMtD00nfQKKLFb1kv+qBbOVKqErvloEIJLo5bDTJTQNTYgeyp78JsA7u/NPi5jT1GR/MuA==}
-    dev: true
-
   /@humanwhocodes/module-importer/1.0.1:
     resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
     engines: {node: '>=12.22'}
@@ -3468,7 +3464,7 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.39.0_xyciw6oqjoiiono4dhv3uhn5my:
+  /@typescript-eslint/eslint-plugin/5.39.0_cfd7h3iktziq6hcwahu2qxhjhy:
     resolution: {integrity: sha512-xVfKOkBm5iWMNGKQ2fwX5GVgBuHmZBO1tCRwXmY5oAIsPscfwm2UADDuNB8ZVYCtpQvJK4xpjrK7jEhcJ0zY9A==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3479,12 +3475,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
       '@typescript-eslint/scope-manager': 5.39.0
-      '@typescript-eslint/type-utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
-      '@typescript-eslint/utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/type-utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 4.3.4
-      eslint: 8.24.0
+      eslint: 8.25.0
       ignore: 5.2.0
       regexpp: 3.2.0
       semver: 7.3.7
@@ -3494,20 +3490,20 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/experimental-utils/5.30.6_ypn2ylkkyfa5i233caldtndbqa:
+  /@typescript-eslint/experimental-utils/5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q:
     resolution: {integrity: sha512-bqvT+0L8IjtW7MCrMgm9oVNxs4g7mESro1mm5c1/SNfTnHuFTf9OUX1WzVkTz75M9cp//UrTrSmGvK48NEKshQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
-      eslint: 8.24.0
+      '@typescript-eslint/utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
+      eslint: 8.25.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.39.0_ypn2ylkkyfa5i233caldtndbqa:
+  /@typescript-eslint/parser/5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q:
     resolution: {integrity: sha512-PhxLjrZnHShe431sBAGHaNe6BDdxAASDySgsBCGxcBecVCi8NQWxQZMcizNA4g0pN51bBAn/FUfkWG3SDVcGlA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3521,7 +3517,7 @@ packages:
       '@typescript-eslint/types': 5.39.0
       '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
       debug: 4.3.4
-      eslint: 8.24.0
+      eslint: 8.25.0
       typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
@@ -3543,7 +3539,7 @@ packages:
       '@typescript-eslint/visitor-keys': 5.39.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.39.0_ypn2ylkkyfa5i233caldtndbqa:
+  /@typescript-eslint/type-utils/5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q:
     resolution: {integrity: sha512-KJHJkOothljQWzR3t/GunL0TPKY+fGJtnpl+pX+sJ0YiKTz3q2Zr87SGTmFqsCMFrLt5E0+o+S6eQY0FAXj9uA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3554,9 +3550,9 @@ packages:
         optional: true
     dependencies:
       '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
-      '@typescript-eslint/utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 4.3.4
-      eslint: 8.24.0
+      eslint: 8.25.0
       tsutils: 3.21.0_typescript@4.8.4
       typescript: 4.8.4
     transitivePeerDependencies:
@@ -3615,7 +3611,7 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/utils/5.30.6_ypn2ylkkyfa5i233caldtndbqa:
+  /@typescript-eslint/utils/5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q:
     resolution: {integrity: sha512-xFBLc/esUbLOJLk9jKv0E9gD/OH966M40aY9jJ8GiqpSkP2xOV908cokJqqhVd85WoIvHVHYXxSFE4cCSDzVvA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3625,15 +3621,15 @@ packages:
       '@typescript-eslint/scope-manager': 5.30.6
       '@typescript-eslint/types': 5.30.6
       '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.4
-      eslint: 8.24.0
+      eslint: 8.25.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.24.0
+      eslint-utils: 3.0.0_eslint@8.25.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.39.0_ypn2ylkkyfa5i233caldtndbqa:
+  /@typescript-eslint/utils/5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q:
     resolution: {integrity: sha512-+DnY5jkpOpgj+EBtYPyHRjXampJfC0yUZZzfzLuUWVZvCuKqSdJVC8UhdWipIw7VKNTfwfAPiOWzYkAwuIhiAg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3643,9 +3639,9 @@ packages:
       '@typescript-eslint/scope-manager': 5.39.0
       '@typescript-eslint/types': 5.39.0
       '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
-      eslint: 8.24.0
+      eslint: 8.25.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.24.0
+      eslint-utils: 3.0.0_eslint@8.25.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5127,16 +5123,16 @@ packages:
       source-map: 0.6.1
     dev: true
 
-  /eslint-config-prettier/8.5.0_eslint@8.24.0:
+  /eslint-config-prettier/8.5.0_eslint@8.25.0:
     resolution: {integrity: sha512-obmWKLUNCnhtQRKc+tmnYuQl0pFU1ibYJQ5BGhTVB08bHe9wC8qUeG7c08dj9XX+AuPj1YSGSQIHl1pnDHZR0Q==}
     hasBin: true
     peerDependencies:
       eslint: '>=7.0.0'
     dependencies:
-      eslint: 8.24.0
+      eslint: 8.25.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_wolz5gfpehnta75zn5jkwtivci:
+  /eslint-config-react-app/7.0.1_z7wafoevaiyltka7a37z3wolda:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5147,20 +5143,20 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/eslint-parser': 7.18.2_6hamdueellmfdowr3e64hskol4
+      '@babel/eslint-parser': 7.18.2_vj4r73z62tfyv4m5ogwqh4y7je
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
-      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
+      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
-      eslint: 8.24.0
-      eslint-plugin-flowtype: 8.0.3_eslint@8.24.0
-      eslint-plugin-import: 2.26.0_s4vppe3rjapx4e2z54qvzpm5hu
-      eslint-plugin-jest: 25.7.0_32g7utoefduvzotunjf3b6yaey
-      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.24.0
-      eslint-plugin-react: 7.31.8_eslint@8.24.0
-      eslint-plugin-react-hooks: 4.6.0_eslint@8.24.0
-      eslint-plugin-testing-library: 5.5.1_ypn2ylkkyfa5i233caldtndbqa
+      eslint: 8.25.0
+      eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
+      eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
+      eslint-plugin-jest: 25.7.0_mqj5pcaoadpnbvfjhyja2vytem
+      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
+      eslint-plugin-react: 7.31.8_eslint@8.25.0
+      eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
+      eslint-plugin-testing-library: 5.5.1_z4bbprzjrhnsfa24uvmcbu7f5q
       typescript: 4.8.4
     transitivePeerDependencies:
       - '@babel/plugin-syntax-flow'
@@ -5184,7 +5180,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-import-resolver-typescript/3.5.1_dg2pe6kqkrddxbf2funb723kue:
+  /eslint-import-resolver-typescript/3.5.1_fyln4uq2tv75svthy6prqvt6lm:
     resolution: {integrity: sha512-U7LUjNJPYjNsHvAUAkt/RU3fcTSpbllA0//35B4eLYTX74frmOepbt7F7J3D1IGtj9k21buOpaqtDd4ZlS/BYQ==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -5193,8 +5189,8 @@ packages:
     dependencies:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
-      eslint: 8.24.0
-      eslint-plugin-import: 2.26.0_s4vppe3rjapx4e2z54qvzpm5hu
+      eslint: 8.25.0
+      eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5222,16 +5218,16 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
-      eslint-import-resolver-typescript: 3.5.1_dg2pe6kqkrddxbf2funb723kue
+      eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
       find-up: 2.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /eslint-plugin-flowtype/8.0.3_eslint@8.24.0:
+  /eslint-plugin-flowtype/8.0.3_eslint@8.25.0:
     resolution: {integrity: sha512-dX8l6qUL6O+fYPtpNRideCFSpmWOUVx5QcaGLVqe/vlDiBSe4vYljDWDETwnyFzpl7By/WVIu6rcrniCgH9BqQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5244,12 +5240,12 @@ packages:
       '@babel/plugin-transform-react-jsx':
         optional: true
     dependencies:
-      eslint: 8.24.0
+      eslint: 8.25.0
       lodash: 4.17.21
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_s4vppe3rjapx4e2z54qvzpm5hu:
+  /eslint-plugin-import/2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5259,12 +5255,12 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
+      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
-      eslint: 8.24.0
+      eslint: 8.25.0
       eslint-import-resolver-node: 0.3.6
       eslint-module-utils: 2.7.3_xqkvhp6xp4qeims5nzhpa6g4fu
       has: 1.0.3
@@ -5280,7 +5276,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_32g7utoefduvzotunjf3b6yaey:
+  /eslint-plugin-jest/25.7.0_mqj5pcaoadpnbvfjhyja2vytem:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5293,16 +5289,16 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.39.0_xyciw6oqjoiiono4dhv3uhn5my
-      '@typescript-eslint/experimental-utils': 5.30.6_ypn2ylkkyfa5i233caldtndbqa
-      eslint: 8.24.0
+      '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
+      '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
+      eslint: 8.25.0
       jest: 29.1.2_@types+node@18.8.3
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.24.0:
+  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.25.0:
     resolution: {integrity: sha512-sXgFVNHiWffBq23uiS/JaP6eVR622DqwB4yTzKvGZGcPq6/yZ3WmOZfuBks/vHWo9GaFOqC2ZK4i6+C35knx7Q==}
     engines: {node: '>=4.0'}
     peerDependencies:
@@ -5316,7 +5312,7 @@ packages:
       axobject-query: 2.2.0
       damerau-levenshtein: 1.0.8
       emoji-regex: 9.2.2
-      eslint: 8.24.0
+      eslint: 8.25.0
       has: 1.0.3
       jsx-ast-utils: 3.3.2
       language-tags: 1.0.5
@@ -5324,7 +5320,7 @@ packages:
       semver: 6.3.0
     dev: true
 
-  /eslint-plugin-prettier/4.2.1_cfn5x6ujhhgzv3423d6k7r2zzm:
+  /eslint-plugin-prettier/4.2.1_hvbqyfstm4urdpm6ffpwfka4e4:
     resolution: {integrity: sha512-f/0rXLXUt0oFYs8ra4w49wYZBG5GKZpAYsJSm6rnYL5uVDjd+zowwMwVZHnAjf4edNrKpCDYfXDgmRE/Ak7QyQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5335,22 +5331,22 @@ packages:
       eslint-config-prettier:
         optional: true
     dependencies:
-      eslint: 8.24.0
-      eslint-config-prettier: 8.5.0_eslint@8.24.0
+      eslint: 8.25.0
+      eslint-config-prettier: 8.5.0_eslint@8.25.0
       prettier: 2.7.1
       prettier-linter-helpers: 1.0.0
     dev: true
 
-  /eslint-plugin-react-hooks/4.6.0_eslint@8.24.0:
+  /eslint-plugin-react-hooks/4.6.0_eslint@8.25.0:
     resolution: {integrity: sha512-oFc7Itz9Qxh2x4gNHStv3BqJq54ExXmfC+a1NjAta66IAN87Wu0R/QArgIS9qKzX3dXKPI9H5crl9QchNMY9+g==}
     engines: {node: '>=10'}
     peerDependencies:
       eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0
     dependencies:
-      eslint: 8.24.0
+      eslint: 8.25.0
     dev: true
 
-  /eslint-plugin-react/7.31.8_eslint@8.24.0:
+  /eslint-plugin-react/7.31.8_eslint@8.25.0:
     resolution: {integrity: sha512-5lBTZmgQmARLLSYiwI71tiGVTLUuqXantZM6vlSY39OaDSV0M7+32K5DnLkmFrwTe+Ksz0ffuLUC91RUviVZfw==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5359,7 +5355,7 @@ packages:
       array-includes: 3.1.5
       array.prototype.flatmap: 1.3.0
       doctrine: 2.1.0
-      eslint: 8.24.0
+      eslint: 8.25.0
       estraverse: 5.3.0
       jsx-ast-utils: 3.3.2
       minimatch: 3.1.2
@@ -5373,14 +5369,14 @@ packages:
       string.prototype.matchall: 4.0.7
     dev: true
 
-  /eslint-plugin-testing-library/5.5.1_ypn2ylkkyfa5i233caldtndbqa:
+  /eslint-plugin-testing-library/5.5.1_z4bbprzjrhnsfa24uvmcbu7f5q:
     resolution: {integrity: sha512-plLEkkbAKBjPxsLj7x4jNapcHAg2ernkQlKKrN2I8NrQwPISZHyCUNvg5Hv3EDqOQReToQb5bnqXYbkijJPE/g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0, npm: '>=6'}
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.39.0_ypn2ylkkyfa5i233caldtndbqa
-      eslint: 8.24.0
+      '@typescript-eslint/utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      eslint: 8.25.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5402,13 +5398,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.24.0:
+  /eslint-utils/3.0.0_eslint@8.25.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.24.0
+      eslint: 8.25.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -5422,14 +5418,13 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.24.0:
-    resolution: {integrity: sha512-dWFaPhGhTAiPcCgm3f6LI2MBWbogMnTJzFBbhXVRQDJPkr9pGZvVjlVfXd+vyDcWPA2Ic9L2AXPIQM0+vk/cSQ==}
+  /eslint/8.25.0:
+    resolution: {integrity: sha512-DVlJOZ4Pn50zcKW5bYH7GQK/9MsoQG2d5eDH0ebEkE8PbgzTTmtt/VTH9GGJ4BfeZCpBLqFfvsjX35UacUL83A==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@eslint/eslintrc': 1.3.2
+      '@eslint/eslintrc': 1.3.3
       '@humanwhocodes/config-array': 0.10.5
-      '@humanwhocodes/gitignore-to-minimatch': 1.0.2
       '@humanwhocodes/module-importer': 1.0.1
       ajv: 6.12.6
       chalk: 4.1.2
@@ -5438,7 +5433,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.24.0
+      eslint-utils: 3.0.0_eslint@8.25.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -9100,7 +9095,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.24.0+vite@3.1.6:
+  /vite-plugin-eslint/1.8.1_eslint@8.25.0+vite@3.1.6:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9108,7 +9103,7 @@ packages:
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@types/eslint': 8.4.5
-      eslint: 8.24.0
+      eslint: 8.25.0
       rollup: 2.78.0
       vite: 3.1.6
     dev: true

From ab2bcfd67784514a5bd7d69ea17619701f7a3f11 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 8 Oct 2022 18:45:38 +1100
Subject: [PATCH 113/263] docs: adjust nginx example (#4134)

---
 docs/content/en/integration/proxies/nginx.md | 25 ++++++++++++++------
 1 file changed, 18 insertions(+), 7 deletions(-)

diff --git a/docs/content/en/integration/proxies/nginx.md b/docs/content/en/integration/proxies/nginx.md
index 7ed9024ed..cc5d43880 100644
--- a/docs/content/en/integration/proxies/nginx.md
+++ b/docs/content/en/integration/proxies/nginx.md
@@ -151,6 +151,15 @@ Below you will find commented examples of the following configuration:
     [resolver](https://nginx.org/en/docs/http/ngx_http_core_module.html#resolver) which is standard
   * [NGINX] shares a network with the `authelia` and `nextcloud` containers
 
+### Assumptions
+
+* Authelia is accessible to [NGINX] process with the hostname `authelia` on port `9091` making the URL
+  `http://authelia:9091`. If this is not the case adjust all instances of this as appropriate.
+* The [NGINX] configuration is in the folder `/config/nginx`. If this is not the case adjust all instances of this as
+  appropriate.
+* The URL you wish Authelia to be accessible on is `https://auth.example.com`. If this is not the case adjust all
+  instances of this as appropriate.
+
 ### Standard Example
 
 This example is for using the __Authelia__ portal redirection flow on a specific endpoint. It requires you to have the
@@ -174,11 +183,15 @@ server {
 
     include /config/nginx/snippets/ssl.conf;
 
+    set $upstream http://authelia:9091;
+
     location / {
         include /config/nginx/snippets/proxy.conf;
+        proxy_pass $upstream;
+    }
 
-        set $upstream_authelia http://authelia:9091;
-        proxy_pass $upstream_authelia;
+    location /api/verify {
+        proxy_pass $upstream;
     }
 }
 ```
@@ -205,7 +218,6 @@ server {
     location / {
         include /config/nginx/snippets/proxy.conf;
         include /config/nginx/snippets/authelia-authrequest.conf;
-
         proxy_pass $upstream;
     }
 }
@@ -233,7 +245,6 @@ server {
     location / {
         include /config/nginx/snippets/proxy.conf;
         include /config/nginx/snippets/authelia-authrequest.conf;
-
         proxy_pass $upstream;
     }
 }
@@ -267,12 +278,12 @@ server {
     include /config/nginx/snippets/ssl.conf;
     include /config/nginx/snippets/authelia-location-basic.conf; # Use the "basic" endpoint
 
+    set $upstream https://nextcloud;
+
     location / {
         include /config/nginx/snippets/proxy.conf;
         include /config/nginx/snippets/authelia-authrequest-basic.conf;
-
-        set $upstream_nextcloud https://nextcloud;
-        proxy_pass $upstream_nextcloud;
+        proxy_pass $upstream;
     }
 }
 ```

From 644616d8b187b3c15fb9898c41c37b83ef34ae69 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 9 Oct 2022 12:09:45 +1100
Subject: [PATCH 114/263] docs: npm custom locations (#4152)

---
 .../proxies/nginx-proxy-manager/index.md      |  21 ++++++++++++++++++
 .../protectedapp.customlocation.png           | Bin 0 -> 15090 bytes
 2 files changed, 21 insertions(+)
 create mode 100644 docs/content/en/integration/proxies/nginx-proxy-manager/protectedapp.customlocation.png

diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
index f3baccb87..012294a5b 100644
--- a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
+++ b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
@@ -131,6 +131,8 @@ either most likely require an adjustment, or may require an adjustment if you're
 * You are running Authelia on the default port.
 * You are running Authelia with the `container_name` of `authelia` or the Authelia process is otherwise resolvable by
   [NGINX Proxy Manager] as `authelia`.
+* If you want to use a [Custom Location](#protected-application-custom-locations) and wish for it to be protected you
+  follow the [Protected Application Custom Location](#protected-application-custom-locations) guide.
 
 ### Snippets
 
@@ -206,6 +208,25 @@ Protected Application (Nextcloud) `Advanced` tab example:
 
 {{< figure src="protectedapp.advanced.png" alt="Step 4" width="450" >}}
 
+### Protected Application Custom Locations
+
+It's important to note if you define locations in the `Custom Locations` tab of a proxy host that they will not be
+checked with Authelia for authorization effectively bypassing the authorization policies you implement. If you want a
+custom location then you can also define this in the advanced tab.
+
+To replicate the `Custom Location` tab below a location block can be *__ADDED__* to the
+[Protected Application](#protected-application) `Advanced` tab:
+
+```nginx
+location /custom {
+    include /snippets/proxy.conf;
+    include /snippets/authelia-authrequest.conf;
+    proxy_pass http://192.168.1.20:8080;
+}
+```
+
+{{< figure src="protectedapp.customlocation.png" alt="Custom Location" width="450" >}}
+
 #### Proxy Hosts Screenshot
 
 The following screenshot shows an example of following the directions for the Authelia Portal and two applications:
diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/protectedapp.customlocation.png b/docs/content/en/integration/proxies/nginx-proxy-manager/protectedapp.customlocation.png
new file mode 100644
index 0000000000000000000000000000000000000000..2a5e635cdd1dd8c16408f180c9d08dde61de735f
GIT binary patch
literal 15090
zcmd6Oc{r4B-}m^npe#v|tfi=sN+{ceP!W}EX{=$y5Hj{r*|Jwc_NEdc!Zg;IDNAH5
zliiFZTZ5S)27}q&%kOu;&wamtywCHz_j5nb@%}N#bzJA1$910PcmICA-!uM(xryMO
z!+Ss=kl@uTmv4bUJTwsK4=~?uVB}88V*}v96L8DK094*BH4nV(^w7Vq4+2%D?qxae
z0^a!_T(JuPfrOg3e>`oz#rHrUt+=a~^=}6|(8fr<(k3qC<xPth43;2W>(TQ#zC;j$
z|H*H+XpoZfA5>F?yZ0_Um2jf}gm~|MweQZIcT4DZl`8gCMp^G+Bcda3E88-ZzrVSh
z?29UE2&_KVkzQ^eWEHq}F=8vXPiKJ4<k{msp=t%el`FuwmqDOM$Mz9Hpkq%6yFqdy
z(HbC7yc~)LbY&+}5OnD%9}EQAuMgb;dd6oU33_z-Uo-V^?0T&2@MdxFJ(G9TyJ8gg
zkA#j~I}e}hJ+^s0H93%h>S$Zh>igr3wr2yb<<c5^r-w<N5q>tStdd`v9u&7s+Y27<
zJRsxyUS6i*YXdee0RerT%WL*}Ni;!P0N%wIMvm>=hx~Xgm4@aA&N1e<PPJRcJ92KN
z2Teo_bq?HfQdL%dT32^*xq`b@;l4O0AWc+DlyrB9EF`3Sk7_iBYEx!Nb#K?d6C9u<
zaT(z3->$|69vby=>gnl8tiW;ZbjcPj$D&2wopbVFCZpcU&s_;_GiZ2dzW8*EL)}>)
z<YV{U@z`huADr8|p4!P);ErI{bsou+wV_aPW^du@{{5qhfijb8#RkDUzSP!!Wv`Qb
zQ*}QTibTo;85}))^nH>%DsOuJS-=wwRZL1+x{gkiIH&;&kumq6+C&eVnjLB?+&^Mr
zyTZ24Wl{qG#-X|d7yWqA=h1}IO^O<KXv^9(Te-Lr1DgyT&=>*En9U8F*U7yJLnJ|5
zzLhy91=Fy!khnf95h;B!)x|zSaQ4S$tgW5;W0{5m(4)%d1ue3XtYw{AVHq80MpD}=
zz0|hMp)Es{vjJ(*=A;3M+bESI%fFJOxv;h_om58Kyddvxa}oNvmo@x3^T}w0#D_bX
zgx!z)0wUwsrH<@V!i&FC`;1R66BaAYt)Q6(HxgpdYCSo=!|Z#H8(f++5vmJuaJ?}#
zl=@Ok(>NHQ`5h7F+v;K2qGaMQXP=62x=wMf$Q!{g`N%Q(;8=c|?In{Zm3;k>9|Yxf
zS8#z%f$11wF+^sQQ%$KN=Petv4)O?t4&^yS9@ks^DYLwUayvWug4gTa>K>S4@Wc4%
z$s5SL4_Y<7dt>z~N(gJ~(>pzj;ZP5j$itgd{LKOXh~)0X=ckftd7S!Za7FB4*HkOc
zk1PR7<Ys1MR%fI|!`)oDwWhN<zD2Mvtp@fh=)|2C*hXil=_FoXrr!K_>#vZnB=Vte
za!8d~x+!yfA7uo?7e&&BKY(Dm_kx~f#3BU?2k|>Vptt%^&8f)P@-2)W@NyZdIf=mb
zfRQ^uXB_@#H1bb9UrtNRtl-}hV}QJIBF*uT=f7C%{~cRm7`vWP8#axu^?iS)jCYDS
z&@jcTwkxS)FfV6{scr9mf6E)9CGRl7NU$Aely9u|u8#A*^DQP|1O2b-RFc*G9`<!!
zG8AsnR8)N$xiKM|Siq*6OsUF(<ulC3k2apo{V3a#o-8`mZpz!Ts2kSWl+T{}o;iNd
z1k5xa&3iKXLiN;8#k_v&yykkmq9fN<DonRQ+_$VWj7}R7T&5kswaZ;kHVmUsCKAaR
z_e?%1=&8{a20Y?&#S^JUuKwL4{1nH$eca#~?d7g6`>DC-YE!-l^_a;B7M)r+8{ju=
zhNk^q;a`?@%!z+FR(C@0j;?b4-Ek#2IPgZ}>N@{&Q7NMpP?CgcU);(3i2DV$wt8~w
zGMu*?Qz;|wy)?K^TSb_u_z07Jby=PCE^ydw<<l7D{BZYzVN9bV)j{jnxa|DvX>GsN
zR?Jiu1FP1@Kg_}e$9}armmRa-)zeyPu_W3<i@2`b_#1iXT{&3$o$R|e0z}&x!?RyB
zO7yjae_W1UH(Vb3AXm1OWi*J9YqS{qeiTa_F;wh7F_wYTeb}rl@vUY`92N`pLPi*}
z+NSj{MMmheXzhz6jWif%q^4y_v)qQYuz;;aFUMc_?ad{h2zPMQ^%Ogy^?IsjWj%JN
zl~IMA|7<zM!I(~^)l7(Z72G|?n8I!>QazXFKUB0b?8RHPRjCJ=DHFF$OGYSVeZKpM
zhbq1rYJ1I@Fcw8Eq_*yQBZ6&}8&})P_Lf-${xO2Sc<@cs`4wu6^Q+w&BFG4PD&$!~
z6ZZs%NqPPSeeVGdagC+9`8|BHRM}u!NEQDY-fSM*YceI?)^*SFRD1m);)>fl`L_#)
zM)+|XVSYc%zO6-Ws_2$FkY)H4mqv)ce&3R(?Qo%)s^y(zJ8=88T^N?W@fN<>^QRUN
z<?%Mvlx4>|E_|@0p-0FF?XYK#Vhs$AgSR^@k`7(hV2(Qb&HdJPu-lw_Q@nNk<_Gy_
zyZ7{-jz%9dAvr#c4A(hFl)3lv<C8!$p3Bf8&tu4s%|%-8wshl2ha5CDTNRfuD)|u$
zZhkYlxqkM!kO&nnhND(WjyY_Px0tn%K2XuPS$QE6vlT?T-=Du`w_bn|0qDhJ5N7I)
z4Z1=_XzkUZyN5EUe&A2SjS8H|btj$WZ}qjMHYej_(F-7!kb$n;!jZJr=(78F;rYsF
z<UDU73cH`GEkJWBU{Aa=nM7_(tp-gs?(qaSawoI;W<Ozr3>$;C+|Snzcr4GBoUJ_|
z5g0cK)e|IHQ0_xMo1d+)bzD*{;BM^lv+f$AZqEI{onA<*4oXUJN{N9#kSVO-tqibv
zLPs$L2f21K<LBDhY$nd1&%hx+vk}f<Jqeo}k9sg-n|ut_Reh&UmfmR<I}DG>)LGQ4
zL~&Ir{lhII_uJsw5SCIsPeLeL{L7@miG=2ob3Ta`sj{MR4k1=l#Nw-sYu%@Q3?a96
z4cNSN+`wQvlG+CXOR)-#Z9b9r7LjA<e&6q~wXM*QI_z!fky#(e2Ui;yS(cGy=oJk&
zxF3h+m@e;dne9~fV-u4bX9{vUJp#1%RO}a~{p1mjvN9(N_G-ARBirNN^V#>w(Op;f
z(0<nXZ{5Ik`yB8|v?*ZSX3dT&PLacK%gtdmvV*+q2n9~)qU-XI>BMDlD&A?19X5<W
ze#{hSw!hE3{^g}HQGqWnbLT-bbGeb%_*4%=6-Py#{ATTnq-=Oo?@k}=(t|s@D=wz!
zq`Dx2$19(sWr<r_p}C2e)4m1Wfkx$p7Yfd%O|JCctn^WsKK-=WVvSNf){T*}ULU!I
zH=UHxvxnJ<^JY4TC>8lWC9UJrSpppDQcEl~6OG+xlCK{5QbBQP^gyP0qkKl@xJc2O
za)EfizT=A@k7=VOYJ7wt={jC>N9&>q|D~{v{Rhp-OiS{<{Im&j45`(D?@ZSH*mc3>
zIGc4!oZ1NsEc-h8Zls3e1LH}nEr6CI5ocC)NW~pU>08NXd|$E+8$wZM9KhZPCC<{~
z(MB+iexob$0XbA;5T~ao6dqWyLf<Gh(AK&mY-oRdh)>)1ww=(GgR7O(yY$8Fd&VMX
z5l30{1##lC_}-;p=Mx@{^*8X%uBe&rtIH%r-tWw|mb9?(1F{2K6hC@yyNBLZ*?~zK
z21M?8n1gQl6=%}&f`wl$Y@Uiz@*mvgcbW5fW3O*Qro*r*98AaBX7V6rQ>R+JF=G}U
z&Wtw7eaf>1(_F80X2r1jZh9k6oWm~$EGD0wF|(*7;2x*b_8W^2`Ee;Tl)5*~<2U#+
z9u{vQym+vOy{OF|37>y<VJk582wFrKR`Xa)`jMme+ZT9wK{It75B448$9c``j6>6K
zi`>l_`{g(#tpv>PaflE_w*0P$Zwj3rY@DiGeZxOWL4ei{cm9%m8a4gZuFSG>)XjKm
ztG?=%HfpS3@Azk<#Tap7!gwn9sBbgGZ!0;ob#aH{+LDi{PhzSNm9ptoc7mQ{6_bKM
zQ`JxqB&=BEGd**XaXNktoV%|LJhE@1)%fSlt-}d=?P8?J%TGQ(95atBTr8Mi^e@&N
z(?rR$Us(rsyE|6W_-OA0M2Pi%RPZry4lY;yDajq-`-8B4_{F%dTiZT<*yo<cO5t<8
zLaTQ)ZZTSzOpB*D7CE(bLOJ3{iq<4sRy9AUX{*7z#c42Xk)-^`(Kl}$Z7_uHI{bba
z&r-MUkPWhxo+4LkN_FS>^8FaJ)$}gcekv{_OZNl^w;pJptGiOds5!Y7^Z0;&!Dj>|
zWypG6c?q#zd?8Gcx!K({Wf@}3HnH(x$)RU(E9rUDiL%!Hrsq4iAg&?#(woL6v_PiH
z)pZMaNb2j)ZHWmm6R4uwQ^H{KeP@fovyC?Fp(*4oXzA-!$s(D}t;rC-K8>bNXXB3e
zc9&X1JxKMqW}mucy;_7-<8SX{jboqSzie(gPwjdtyB|?I@}mF(wjbgM+51P;9q0|k
z`P^6+GWie!rFeSS2kLe2eR^jR`)qVyTq@pckZjkfIYf;?H{4wzf1u0-o@N_p+b=HS
zR<hfml-{e${$iu1ycTmm+%$+fh%=Ip!I)Ee3ygx5B%RFAe1zVr+5%XK6VQM`=5gIN
zc<46M>)<yodhvJ!<%7-m{vI&fet9cv1M}Mu^>f|15Zf`Txl}*f*o!--;e<Q>fjvAM
z8n(nTN0j$8e^4x)19!nE@jH-tNxzU0DqbwRw=cL@IF5V%v8m?1n%n2a`ZnlO=grx#
z=Qc}jhEd#wp9xHKeDjqN8i8tpdkh+eZLqkEkV!T-;S;BavK2HMIQQ)PldlJSZ+kSE
ztKy#+U(flnsU<n4$|Pkp8F$q@c6&l9U)r_$3<+x<fVe*y5d%ZjzOLZ9Qa+aBb9~E3
zE~+vR^AQ<QqqriD`s!X<^Enh9R=t0;XmFHeP)5tdwdtP74+*Up#&BN^7i%|Jt5&vF
z-wd^G_UI4$p)vVWr6+;eq-SkE)lt;ef^2SUDau?db)40WSbb9)7;dz7JZFe|j6=W9
z0N3yDWnW$`l;<<5u)vpFm@`QufD0<<yu`LPE?<g$7@X=De!cO2s(pzzWB9%B`Pl(w
zDwCbJPr-yvz|zw<eqz+7u8keh*b05XeqkFL^6As=tp-&rbH+CH(E_%iXnY_t7wv%y
z=GY#4`uMWIa)=aYzyH$uZEis~LGXVxwx>IW%b%cSZb!y1PbycUF9A`0;9mLvo&-N;
zJr&G3QGOS9{B(Fk);S)d!I&~p(4`tdDWb+FRmX;_H_SkGyj7?9d_Z&9$A-+w=D7P0
zO)i-U*@;(~-x~vg>b-sv#)-sRJdeL0rCc5q1ifz9EkxrLmf1%Xy)qbICJDL}Btn!1
zpovS2|LXIz43U!9&?2ub)71e$4s;i4=r$OTQZclWezA^g(n>AKIx9rZXf+FF4TMC%
z0=(Rf!+>mN4x3>ZW~fZ<e@s-pZ7D!w#Y6)jN|Js95*Fp-<G`-Asl6T!&AAyku=zO|
z$b=WY)KM@(cX_r5quZ_0C*$ho6|30EZvPVud!JSVQn%&t3qBjWz98y@Qpqq6a1^;U
zd?7VLhA}vHT&z25QzF8g?(!8=9;?a&2+l*tL|~blyqQAEiY-sRC?&sRssu$NX|i6|
zJ3H7jUugxIUJ-$IWv@c4$kWnbAfn6rolOf_m|fQi<(A|2Y{Mc$E>NbkM6A;xRMhF9
zO-lB(mh)Up(dIoznFueqBYLK-RD?KrvCVMwbOj=$IO@+MsG?x6V_Ku#4n3F_hE+G7
zLnT`Lx{o>YE{>13;Sc2O1bZ(eWY4EF?@s-pBJjOqHs!Z1=iyk-GzKRSO@13qe?z`2
z)dp7mbEYX0B1608{F~^h-ouKilk8w;kg0PQ&(&KOwiVyW{AqMlNi7k-aJZz~WS4J+
zoK36ny#`%i<Hc`VCp=wqw^^WP&>;Wc@x*>ZvZqtQ*%ya>04d$(^<%>@0B*XAg<Bqc
z62|<l^=a)0WjBZb*%7zi94Fk031hSrmQIxZkalAxmhH7utnvYY#?&7`@z3+5etdsc
z8^$QF4Im4-NhX%<*p~8*6&}!-#sjG7IjNaq^W8Bl-BWJNgzf)!Zgcl7AW9&b{C^&b
zJ9G*)8yS<hoxC5ohB;Sej8qX0pWXU6$8CJ_*I;8iRZ5|eR|qCK%&NG^11h#~f8W{d
z{3PrrA%h#RXA^zN2|yeUW#yeS%;8kL<lO@cIkOp={(^TW2o#kjL0pY2(gDuHl|HtO
z4XT|pbj#QeK!;`*0A~KHph1At{|w;R(EB$)F;2OmrHM}8BIn^<#>&p_FLfpQ3MvI`
zZMlnScIN)5=L}o4E@!db_khlnrNpjhzp`?sWGDysWVNc7sV=Vk(Pa*<a&;&xz9`>&
z3reCFK-ASnGhfuHtNC7D?|Nz>!!+~mW@YVxNsRj+2A#=0xd#SGAS`sH7*NV5Y)z44
z#I<|3ZMk)hz&Q>%v>7%Wf{+L+CLM@c(#^oiay77kjhb$C?XPfSVT0w-s#j;}ruZ^j
zC@(2p&yfW4z9~Pul9({w&F=I~xM)qK*GAI1F;(Q3(s)SGLmz7mqQWO0C)9fd6rN5+
z@hgZ%YuLih%<9{V5H~sA#Ury{Q5+rV&C9Zjn)MKolueJVx}Rz5b%K>u_3s&zJ3s4j
zAKck%NW%U4$+@7q|HmwVf}jMw4vwq2^eOXz&TAS076sp_=4_XApi4tRz$*@&CuC5z
zs(nv1wD7s-r-C!@*zDaygeY8r77`-l>?<1rCC#q&>;j!RY^mMbZBpheaT7|SHTSBb
z*mCKk^b|-Y{<P{f8sT(IRY2;D?hzD^6Y2VODEY|YXrGgplbsDoyYnSq-294QiB!!j
z)|lKNvUj#sNE5$qnvUxMBpilI3)B2h8k9;=%bg9iHT;vSC?o8hea=rw^Q<5uS%XEt
zNl$!+CZ(4vPRGG(&2bc9jn^>C1H{S)Co60u{G(#gFL@z1M+qouWrEy#O*Q%6>{poS
zzW#+fHfwqburaRz#!&&-NwBz;%a8$d#~1iK6o9)4y8i{=tR+dzEJvsgavwhLEox*>
zN?0i#*b{Th3UG&Rp@Yk5Z3%hJ?=sPg&vmTH2KKwxYck6dnGD%`ZKH2iPn@ged7VIQ
z0DR=gwG-c6+g;W9-_iPi=`P%Z;^mHhq8v1kyacY|`n+ArXuG2F>7&NdO+`a(u^TV_
zfs^<Du$C)KBKSNdly6I5;65T-geWLNT-%Ejd@W?q05)hiV$guto~aLIm_RizLx)tO
zH6Cg4(KvjxSU%cT3}N>TUgVf8a%>+Gf&<|Gg)7>qrNoMqig<E??lA{lY}WN;V8Xxs
ztA*;3Ihbf#k-&~ieOi=(P!cLgSF33m(|()m`}ftJ--h}^4lFHAsEVyqMNKQDMBA(#
zME8bq<xa=rr`VXV*0i{Bao+rqOqB^G_!2j2c=Q}eF#hi+Id+g(G%nIm5NaCE8nE-b
zH=*RRIbt}~o<+L<<0Bm>u8R4c5X>PIO*OTqwsMq*h4XJE#u`I4`;}2W@e?f8&E=qm
z9;1w8T<!?Ql+|}FeB=WDHxi@Z9@Lq5P;J-ioELj&s;Tjcj7DXl0-A0#HYbKDY8uzd
zYtxx@1fU_{$SZUdWHx6@)O@X2eJLhUA+(oB!>~XHopUwr3dX(>ewnZAM$cG+(5APL
zDu{iuvcpRGAxql2b%9plTkAOs!ap2BnMt)SRjgG>W=oToVhbb4m>!W!@PYOk+NYG%
z$iH@V8zwkph28Ef&yGL)jH!rvOv^Ne`o?!nU{1rAMwG-dgyP>i;?Dq^qvKsB=Z9J!
zH~Rv78CS{=cGb;MG9fM{6c&1q=`vgCxQ16SU8%n~AaNSi#`Vl4>{c*5jKrK4azE0@
zjly@&Z3Zmg7n|bM8|bqyz^2EnW^b5XcUv42%ha>|ZorZDBX-_T0JirK3DdJD?dK;B
zMb0a8H(y+E&HQfhvl|V^jc-*IM+k*_*Li1dbdeXe{E4S49Ao!v*I>Re&ts2>!L`V_
zs%ev0Q{`N>G>Od-=JP!Ki2VES54vkC=}{4Gg?zqsV2`XIp<lM8BXzTsIq|)WLydf(
zsH^fQoQPMCoBVu)Z+yCI<o=1$+(CMNhzW-|!f3TwYE%%**H*y3NJL}B$*CAsAu8T@
z3O>FMkYZy|qSn4dPt2&G#lbJ;H^d{&GGO+5ejmM!m#68c!kV|vF4vEk1fLGXpFyfb
z)oh&iF&N}0q+gWmk1(+3IE+eHdi23@v(M2&R2PTfyP|WOd-X*)n{}~mI|w$1k$JPf
z3)Nh@!goim(0uzF?LATwiuyesY>u$3{DxV_H<N{hDLub@5z5_;vg^|qkYmGF4D5Ho
zL=sBEvBx;wu@%hf26NQhv(J&z<C-X@wDzzg_IfE&rI{d1T#zdhC35^r0rNH8E)t2w
z2*DT(>Vj=IJ{qU@Nb43q%#HFUnB0nSS#IB@CLgebu0_ydYa@EhJWjJ0Z)h}eES8HV
z>35ExBo7-wOPy3=UW;Z_ItgCeIN9g}W$3OSi-!O9)M1U%D5As!i6i(as-^&K!*BGp
z0_w5f6(EAZ6=6J#q;Mx&*!B|%VAx$%PG6xt_^EGCzE}}<!@(N{<ncNUHjSaZ%98t$
zV+3?6YT%sa?FP->4E^Dtow=o=#0*X@jL~&P@|D2VnDumUf_Ub7qK8AMp|T21v>}t~
znB);L{yej_X@#TQUp>ooz-LJBU-HeS#R7GY^DhV*Uv14Ovqr<&o|-3YtOE(Vc}fhl
z1YoL8yt?b~IJCgvnbpoKBm8Y^1L~q3h<y}7=U|{-YQvFIj#DSKjcwQ0cJj$6t6R%4
zj<EaNkq?CKQ7vwz?L`*$Lg-e>@GbeJnwFxK>dn1jt%<VZ`)aT{M+SvtMcZ)wxCxnE
z1`SB}?W9y%m-3(!>_<j=Ch}W0u*eN9;193Y$oSvs1s%=LYsQUt!wwO@YE=cdjV}_q
zpPbdYrtuY)C;*qtzaQ;Q_8@h5R;M16AdbVkv9K@r{W}A&SjqNijWc2&V$kI7`rt8E
z%{TFU2hoDD^K=uyU>AErEnGbh5bfGS3(9yNI`kq{U~D<8FlQgE|1ZN_comunPTnzB
zKV#UiD;jPX4QKa4-w8S`{3~p{9EvHAl01r{hy&h5IvO7N*8+e)EPng((*6C$X_xXf
z|8Df5Z<nzC?2OuQn!Ep3l^&b?8Xc}5#Tz<-<9^wzc&!m|8(YuWL6Q+Q$D%A`ls@+w
zJDIN7=Iy1K+Tg?|9O}&<44nYHj>El)vB4Aj*@5R!$0bJ3Jv)KHlVtO625v{IRxw}l
zrK<F_B!B?(q2PAB`QKEF{wD)YQZ-=Q^iIi)EEm6ms8=g|^Kh9iic~OPQcHVv$;(B<
zOFNZ1yq&h$J+;r1?TeVYD3O_daZIyY+2_^8w8<@3@WD2Z^_&ljlm}38o-#a;cbb-5
zcZd3Rvu=Cmj;fk->!?ZhijEa^HJMi;#b5pv&W?meuh+SqeVb87BcN+0o4o+9Q*V>T
zsFEn^*1T2Wd}f%kV#>11UnRFV<T&<*e5D*D{_v9As#EW=96<aPz$%wAz?Oiyu{RHb
zm>6mcc-wF7VjPP_FGi<?#Srq%Na93vpP4+WE3oHd*1Q3Rka0XbLy>zitDcbI_R3>O
zPwgP{hO>14MdTQ1CKg^6br&KelX6CGrrumJ`(p*;dHU-g!GisE@5ycGz|`3w4Mfoa
z_~n>4kKyW{3T2Q*I|F~gw-y3QsW%2!#4EDexVlhYICJCShv|8{nqN|Mw8Bt<c(v6L
zol8(Ad9o({*3&LpSB0kPLL&`ZP3yv(%<#mNYr?^_ka|*xD*qyeFEeB{B2}e^c{&E}
zFk~e86bAm@b2S)t1m`oRAySIxx)JaA$x=D4eY2UeMUatD{Gy*j%>sfn-BD%Q**zZt
zp!eZ+<6;SvcE-nR1=HMA?tEFPX&H7F8kYTs{leT8($c7Dx-{+5@uKJ1LY=UU7hqV5
ztJcfLue(UZ>0w?)>a$hUMKsCpPKon^c{^gyf`Yy8a{@jyORG9BvyQR(&|yZ;J0hDs
zOL^s4RQ-$*8KF)&-|5%<>BK_s0V|8Io5ortcd^RW32Sd@r3=~B6#L9p&l)59Afo>R
z!O*<%A^UopZnhPPM5&~yzZzsFj`CjpDCy|lb2i*~h2F6-H2LZ``B<Zd4NA3r>A7Vl
z`W~Zs;u|{sf$aOG?~9uW7)SK!=K6qy#v0D17<r#Icjfcu(9a<|Lb+0kqgD@~fkrW(
zOPCUso*57A0GSZ=<U{LkCXZR2HzOUnEGtkXGXJeu(sB5KY1^_Ego}K!x^+-`?Dh#Q
znVMkXPxV1BCQjbg{fQQu(d+Ng4*CE`F0^=C`tVAS5S^Tkyj$-dny<6u0}pwo8dXww
z^X$HP8LkHxvNK6AE?SDOyyhXedG>2vJ;UxSr7fk9^0h*-bV1_O#PpO*VUt6SO@H7n
znB5A|x(uO)HlNX2AeX`LYyB8?#>vovs4ysFdaQ3HB1Lb9v1ithLkDw(=(4(z^-0iR
z-Umuf*zGHuu<&iD=q+B-#`d9W>B57R>0seEuy*J8hZ~m7<7q3pCxXWHAy&FSyLD~W
z)N0CV@bB03*sdd5orxokWnC|OK5Vh3r7a0|CWHK`lLZC3=4F;keHqCm6qPZH3egN!
zN-av(a@5uC{unENvx%AOh_i3fGQS)Qi@DOUyck)AI9?>wzeRV^AFJ>t_S>K^zgkh%
zwxp!aQax_MR!!h&1*9!S)k?R|vb-9pB6-t_SB%n#LP+O@Tsd|4rd3>;Y#aZxDO-KR
zy!*NaJq<xGFp=(K9lWE|003jM9E>R`^2Y44a$M(-TyyGcq~k{%QO&3FEK}*JaI>%K
zGo(yy&86C`#<bgH8=sobq$-HaUEg^`EIumWGxKzcqmi$;L#ox9z(K|Z$PbNo(KI<x
zno<YDW=YM9v{F#z(+?j(h^?)MvR%S(i`TUi(Ov%bWqRCkyvyH6-Qf{h514Q|FXnd1
z;Sa2_*Bp<f6rWGAl0K5~70ALf<7U0l=Y+kote+0n;Gaf$9d8x}$|*jwRB(l4H7*##
zOMY2X`W^|9GO59Rs<y{#xdwzcfCD%j_$?fIlo@Ku=#x>!;jD%h9UP<Ys9NLh45;<T
zcpMv#J&*Hgg5NARRl<Qcb*t8nCVotGiVR^cL4puDr@D{8IhgY6D-5e@+DoF;yY3WJ
zVyu&?QPl4Y24(I%2}Hm3qcRgM7^N_+`><pu`JxrI`R>4n2I*VYqbUHcH5MiX-;co5
z2R`QxJTw~nH41<EvD9SgIlX5nfTBswRmVjfq}Y7c?!svLN3u!&6%^?UsKQ<~D<KKY
z#Da#ynn0i~>UfPFOXFraJ~yCet;z*b5iz5mmriw92;eV>`{a-t@tuD5En|3-(V+3&
z7gq_l^bsG|oxdb`C}uHM<5B!uEgvn%*JlBrY`QwvI0O~A<oo}cmd<%Y9qSOL(uwE7
zpEIgd`Xvjy3`p;jN>BqCGnHE6#FbwVEWG-M(O1PKWMd}m{FMbk*c+JZZKAhno&YRF
zKqlqKbH<BML-8Nzv!`I_Li1P+<HS%yn?GMaA2*PUxam80il|{+_z`^>`c`#85Mo67
zRt$We54LKAL6$;Ehtko+{m5i&vF5{rFv+*Q*7iqHKg8E!%l};GzG<|^)|+vH6$+Mg
z%^ns{Fm~*htWQ9X>58j5NL-b;{eO&Af_!f69{7hZ1X(CQ%6X~(`5)FB6W!}%k7cdc
zS9<g~EK?j+6Z?vKOol4mZovM&VK}4Z4_h(GVJ>IMbShqPi<j}52y6x3|0j;Loyqm}
z!B!}+>z#|ix3^Qg_j{EBM#Afq(cytuTeRzT3)(N661^0d+OlgF&Fn*8`D#cHkV;Aq
z`QjE=w1zYz6fm$bS`fL)R+IjDd`-I(eKK*^C&}S+#j_7_KV|+rS4xQ}vFZnJUWveC
zXk0!zzFbo?I4TT>t;Nrmv9zr4qg$5Dd65^oDV9E}{zQ26<he0B06+e|zebJbrw1U?
zNi_uza9{nHkcpSsGiX|kqi9nIi2}hjd*{^Kf@CkQILHjc^96nCIw3<De^QB7{ON7-
zjlB00gn_7A3xvK*1I%XLi+2>l-nJ`w2e)EASnHV^!vVY}={SRudhee0{0REpZs`v}
zK80S%qrzqnNf~SNpGED8(0OYgCY;gNA^*kz+6e<vx&dZj5ADh$u}~GI7K4U<{oS`4
z+DX?i)8_?YVKS3fOc#Rk`=D<~=mpm){m~jk+=zzX-<kT>8(Q%plGyVm1XL{a`IV~n
z5I0Rd)Hi=&81`W9W-cUy*!<i8^W9ug?ERvSIz;3Z;*+(KY>|ci+11Lx4_4f$SUBNo
zDTRO0#Csf-vw^0qtD6%BOSZRZ`w!b36KRlcyx;Gmc*pA<j3Me{<N8ir|5kC0EmWN0
zD9&CvP{+{!xpwOyaUB0>L79fKD@RwV`l>etzb3#_k%1Ujne?kZB%cCT$E^kIOTlW`
zf(y^+JAsmI6)>4MCrFCK9MJ{B7x~iR#_t&hm{vpWeIKfIu6V(1fxIrHQp-B;oxntU
zQ9HIxQVtbZBvoebH~NwYkyNOGnK+yo)A&)nO_+#EP)4M;7^kq7o#+oVz&#<X%f{Zx
zTi<yVIleGzX$5xhD5NM-zl6q17nO|D2|_(ey`CAhdEUYc!|9H~qqMvL10R19T44MW
zC-2On-L_O<Z9#F|1e=YDN3H0;bStGdIamiNoufGdPyh<8I4$n{egRK=^-%ZruD3+T
zdv>hZOYo=NSj-o}j9qJv67|msLPG<6R(U`v<34t$Sq?x7XM4-FJREhc{BHu`<`>oA
z=!8F4ysi1t2hZO>d6<aspnwm(7*Ex<2ts-4%B9)+{^E4>kjyLB&@aZkB>Lf4ai5a6
zD>as_{pmt5dmJY9?W@c`Fv@(+zIN74-RE;Wdb-TRT65EI<p_xrA1Tr#h~fps6KP|L
zF|^ZE&Cr3RGo<$_Vqeh1KNrP^tNu4Pc2B6G)aqS>Br$Zk;*>$EhYz;i(BhKT+HQeZ
zz{vbv_S#PE=kRA^Lz_{rVgF!NXq7-(lwJ1k4FlHl|7OLKZ+e!hh!E%g36ptC(XiqB
zt|R8-rhrYoylqoQG5~{ZQ$Ddjvtn%Khy+iF@GRyf<KbwrCMq5ctW>SCok@kzXDUxL
zXKEaNV}!X$R7Sx%iUGTNRi-p;JBu3nXFGTm@Ic~G4M5|st`2QYoj%)eUm<C@(YdU1
z#I+)R1V~RHY^jb68elAM)ipjI2sv9_>#X1sDy;@D$8>|;1%~>YJ4R1eJ}@70T%zp$
zc@%Z_=AbyawQ0fMx>KO7B^n)G`O02RR35;N!(;+>B6U-|7QO;b@asO}D>+FQ=bO9Z
z*hTk@AHAP@l+sn5;5HsEk)R!v1@m^g*EaHDDE;wCM^M7-xz(zhPWK#@0xDrttr5NI
zp9Sg6E<*x1MZDO~w!0%_WOIalfNV1t(diPocuxENdWBNXb7?OPZ4<_YwTgMo5%z$p
z#(mwu<dv-%Y!gLbF=i{_O(w||AJOjGp7~j#8m32F3b1(Oc^T^JADkB|BA{_5Q3$Kk
z^P(@rq~ed(2PReP9-0Sk-)JZJ857slFoJ-6O4pjq;d<{d>pGu%0|LQw=Do?$@L+_`
zvvoc9jUJ~gjIrH}-b`R=#KqmU3Tx`em?3U{7sKk#wS8iKZj1LOr<4QrGv_>Fg>>td
zI~T+UGZT{BeN7Bx#Uq{L5mHbymZG;mp>=uYDIqqg8Y2kwvSx4}?l6yOY!Ft`9=wnC
zk#TRu&Tf{{6LJfR$Y*Js+yFE<j3T*X30(W$JJ0Um@Glv6qao7@=EY!WX~0=k9v|r)
zeMy9G(VuvnFY4dZ^4Scr4;rrw$)>XCKk@~RDD4HXEZr3Co}KB^W8LoZQ#v54D@F#|
z(=rwXCdW{2PGJRzS*_4eV}xD?GbOK}bm{C`Piqy`?b5Cy9AbXg*TZw!3DfgVAL|Rg
z!tX-@WJXvBBn{JYb+Pi%Nh7GMR?Cw;X<hswh$2B~w8nd&G2zveSF}u>hrG7|U@(F1
z^j-fVMBv*Dbe3D7%*{-tyR@3ERiE?d-fly0@A;8Gk^M@Ye0R$+GGlP<dqhupHviRf
zT!39!&iA!e$kwoS2U#-TMlbJRP=QjwT18-l-*_(BiNSXXs0^E>D5KolINU}Vxo6g7
zI_Pdz-&Zg0hd(s-cCNL$RaYoC=6y+T3WR7pOMIk0S+L}KUHMhmk)gFF-B5>0uT$$c
zd69x<dIpkd^0HakzdM?)#=Q~{5q;pFf2S?_nucz5U(%K8*I8YIX<*7tUo=GQ{-&PQ
z1Fgq1QWhU8-n%*<XSnt>pRS>MgW^c7LxJf{wFg*Q?WXb@xnT~!4v*2>n<0xewZfYi
zza=Y#<7`9*zG@8<#_zNrP&Fw#XofM--$6`HD}409DTC42Ys+;bu?2T0_|4Y>&i1h1
zNilcAT1{S$^f>H`drb0ze2j#8&90%Q8l}3~Pa}7o0c#(DnJ_jpc>)*L$=>XXTqT}I
zG($jLS`6%CZ^#hMAKjzlk+hx3d)~-hz!2b3AF>7DLGSFgbg<b6Key;+3{vQ|{o1IZ
zmITPJyKiR;Y`n*);bOG2Y<5S%(5Scw-C!~fjS(Z~?-+(hYbeAC)P&FEBxgtFCGWO!
zYTs8`0Lz>GY|vnfv+ZF~Wh}}o-sk=7T8Gu7ACL6A(YInN>2iE8m|I<acQMxl>!Xpi
z1on3rudE8J%6vS+GJT|{xF+E+p8C5HK`ZlWzNkHDz%g*@X)g0!%*jKOirF50YKcoC
z#4pi66zjbB)UW<P!M8%?VA!i2R}LeSg>nXg3V#E6iNy0R;eYT-#eWQADM9u{awnaa
z856Irf<S0H4@2gxWn8P{J*551pcWiNZLgPvGRh(^(u752S*h&;eVGf?Mp;14SZ4X^
z-JXPiZF%>?LUe#y?-}zxQR0g|i^8pV_bScp0lW7~D0zKlu$OoNVeC?BG+N>#vw&2Q
z5Xl_w?mI5LG`9r;omX>1e%vuAY^7K{yV|DMdQx2^di`_Sl!wpnl6e<W@0ErgV3xrB
z1Vei+HIkD-_a<y1rI{=hvX#nG4bT@Km0bl$i!GOm7+eRtHc&Fak4ZpBCWitPt&8XP
zz?K4nz2DImz`gJoJoBS4=*#Q(il{Exn7Sh$xqMw*UHS(v4Jey1NMc5sS(n)dHZH93
zfDYZRF(ie*7;F_L<nq%SXCj}vGbW?!w_MM8jFq@)G=^<|=n+uS`~MM!d<x^IDe&$9
zIc0yRdaI*q(CC&~FHNf>wLop(#QlAjMOLA!Fl-)Zu9+IggiZAhEDezU__MwLWvG#R
zQRj`U!s`N3L^w)CIFzvn@gsLj|JD5;k<e+Dm3Q4_r1uL_<$Kiknw=p|n~?m!+6b18
zs#&^w^nJ-V9D_bCY_{ERu&2;LV(<oFlR-qofAwXd|5&mCfAFuotpu(M-pqczeX5vq
zn=#M-yKY3GsBN;52e!jGaV%CR-N>P#k(b@B&RLjYPO0jJ%PYlc-x$9!)W_`rx^O^*
zqmsiw*jIM&E=0b<&LJ%Cr}bmDz8Jjfvf-IZmvSQq8%qEhK+SD8QlTy;KZbqx%4A#`
zPju+#YfyR&ORUe=>^vxx0<`dm!C<ftU$WsVGVNhMOwX@s-O4@+)Xa^5Yd&%)wZBG{
zsr7#wjYb1SRDh?K68T`s1fSUL4~P&CBgX^)ZmS$csT(v%02biRWhl@&t+u@dpqrA9
z<_>TTDuVndLhJ$pPQp<GdwEpOc4^+|?;ng6qye6E>bZ1k_BmDSPS)VZZb|?U1FG#-
z8z*4p%(Ek|WR~YYEvv>9p4?vIycx8jbL0~oud$2K5{s4{9(=be=+9FZ`#}rr#neu{
z3yO~kfRAU}R)T9_w+xvqBfqOY;oLVHF<Fe3Uok78q`QBe^|~PmAyxn+`2pb^4|>_3
zchIr~hewPgSzrCX$9_7w>DRc~z1MKRJWX;c-f2^{d|VBmq%%r`w`#!0!e9D0@+GC^
zv?6#_u5a_^jk94Ge4vxBtl~8J?c%L3q(|!d5TcD0C}$I{%MKY2PbnBCba(s`tmeh@
zPjw|u#nXS0<zCWILes#Vl!%LNX!XamiZBbQv&_S&^G4g${-)lW(KHc~X+YZPU8~vv
z*)Z70m9Ce7S@=UqQz=Ql;sxymwXk0jh0jrUhu9bGtq&t5ubYtm+Rl5VG&gU(%JznS
z15l+{xMB6x>yN<mNSaiS`d1{o1xBu}6?9ya7){B)KAbI5$27UGMX06?RJk0Zr8dQ>
z{`HY>z~v~J&GLA=&4AyV4L(qt-4809@(G0U!y*(X4P1=|t_@A8M}CZA<<}l-9@}))
z0JFLpk6incBhXib4DX){`!}0Em31ngF5L$-b-bv?H28QTIK19p=Ma~sr99(seW&B9
z;PVSc2dBpU$-*P7O*=nujZ*hh#FyR!+wyf-1J&SChRnO<3HZ`~nc)3rCAmFzyNeO}
z%S<+ewr0Q-To#vYF;pFSQ%)8Ph=~GPvtAq7+uKjAe9kE`bA5pKLJz4f8L37Fu0%-t
zL->6HR95Q$rdqOk2N;WEqCi(jg>g=w?aXI<m>e*5CEa*ejg()T!I`?1*!p~Dhk<Ri
zc`oJIA@W|}V?)pqkl`$vSv?<8u7He3d2$Zw|4Cf4*mNnkj-M}ZLwWCy0>(i5@t@lG
hU$2nqKjr=b(OmF(b75ftxTgxbYGi)7+`#F{{{nZY0fztp

literal 0
HcmV?d00001


From ef61acb3a9efc3618f2d9f9fade293602dfb244e Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 9 Oct 2022 12:48:42 +1100
Subject: [PATCH 115/263] docs: misc nginx fixes (#4153)

---
 .../proxies/nginx-proxy-manager/index.md            |  2 +-
 docs/content/en/integration/proxies/nginx.md        |  8 ++++++--
 docs/content/en/integration/proxies/swag.md         | 13 +++++++++++++
 3 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
index 012294a5b..32246329b 100644
--- a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
+++ b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
@@ -208,7 +208,7 @@ Protected Application (Nextcloud) `Advanced` tab example:
 
 {{< figure src="protectedapp.advanced.png" alt="Step 4" width="450" >}}
 
-### Protected Application Custom Locations
+#### Protected Application Custom Locations
 
 It's important to note if you define locations in the `Custom Locations` tab of a proxy host that they will not be
 checked with Authelia for authorization effectively bypassing the authorization policies you implement. If you want a
diff --git a/docs/content/en/integration/proxies/nginx.md b/docs/content/en/integration/proxies/nginx.md
index cc5d43880..08dc7c691 100644
--- a/docs/content/en/integration/proxies/nginx.md
+++ b/docs/content/en/integration/proxies/nginx.md
@@ -139,10 +139,10 @@ services:
 
 Below you will find commented examples of the following configuration:
 
-* [Authelia Portal](#authelia-portal)
+* [Authelia Portal](#standard-example)
   * Running in Docker
   * Has the container name `authelia`
-* [Protected Endpoint (Nextcloud)](#protected-endpoint)
+* [Protected Endpoint (Nextcloud)](#standard-example)
   * Running in Docker
   * Has the container name `nextcloud`
 * [Supporting Configuration Snippets](#supporting-configuration-snippets)
@@ -168,6 +168,10 @@ This example is for using the __Authelia__ portal redirection flow on a specific
 files exist in the `/config/nginx/snippets/` directory. The `/config/nginx/snippets/ssl.conf` snippet is expected to have
 the configuration for TLS or SSL but is not included as part of the examples.
 
+The directive `include /config/nginx/snippets/authelia-authrequest.conf;` within the `location` block is what directs
+[NGINX] to perform authorization with Authelia. Every `location` block you wish for Authelia to perform authorization for
+should include this directive.
+
 {{< details "/config/nginx/site-confs/auth.conf (Authelia Portal)" >}}
 ```nginx
 server {
diff --git a/docs/content/en/integration/proxies/swag.md b/docs/content/en/integration/proxies/swag.md
index f8097d9b4..f6610c604 100644
--- a/docs/content/en/integration/proxies/swag.md
+++ b/docs/content/en/integration/proxies/swag.md
@@ -40,6 +40,19 @@ bootstrapping *Authelia*.
 
 [SWAG] supports the required [NGINX](nginx.md#requirements) requirements for __Authelia__ out-of-the-box.
 
+### SWAG Caveat
+
+One current caveat of the [SWAG] implementation is that it serves Authelia as a subpath for each domain. We
+*__strongly recommend__* instead of using the out of the box method and guide for [SWAG] that you follow the
+[NGINX](nginx.md) guide (which *can be used* with [SWAG]) and run Authelia as it's own subdomain.
+
+This is partly because Webauthn requires that the domain is an exact match when registering and authenticating and it is
+possible that due to web standards this will never change.
+
+In addition this represents a bad user experience in some instances as users sometimes visit the
+`https://app.example.com/auth` URL which doesn't automatically redirect the user to `https://app.example.com` (if they
+visit `https://app.example.com` then they'll be redirected to authenticate then redirected back to their original URL).
+
 ## Trusted Proxies
 
 *__Important:__ You should read the [Forwarded Headers] section and this section as part of any proxy configuration.

From 190836c3d484d1cd26ecbcb76fd239d1ffbbabc8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 9 Oct 2022 23:45:36 +0000
Subject: [PATCH 116/263] build(deps): update dependency eslint-plugin-react to
 v7.31.9 (#4155)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index e62386a14..f8d1ca31a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -166,7 +166,7 @@
     "eslint-plugin-import": "2.26.0",
     "eslint-plugin-jsx-a11y": "6.6.1",
     "eslint-plugin-prettier": "4.2.1",
-    "eslint-plugin-react": "7.31.8",
+    "eslint-plugin-react": "7.31.9",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
     "jest": "29.1.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 4b47c4f96..b34a6f009 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -37,7 +37,7 @@ specifiers:
   eslint-plugin-import: 2.26.0
   eslint-plugin-jsx-a11y: 6.6.1
   eslint-plugin-prettier: 4.2.1
-  eslint-plugin-react: 7.31.8
+  eslint-plugin-react: 7.31.9
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
   i18next: 21.10.0
@@ -116,7 +116,7 @@ devDependencies:
   eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
   eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
-  eslint-plugin-react: 7.31.8_eslint@8.25.0
+  eslint-plugin-react: 7.31.9_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
   jest: 29.1.2_@types+node@18.8.3
@@ -5154,7 +5154,7 @@ packages:
       eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
       eslint-plugin-jest: 25.7.0_mqj5pcaoadpnbvfjhyja2vytem
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
-      eslint-plugin-react: 7.31.8_eslint@8.25.0
+      eslint-plugin-react: 7.31.9_eslint@8.25.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
       eslint-plugin-testing-library: 5.5.1_z4bbprzjrhnsfa24uvmcbu7f5q
       typescript: 4.8.4
@@ -5346,8 +5346,8 @@ packages:
       eslint: 8.25.0
     dev: true
 
-  /eslint-plugin-react/7.31.8_eslint@8.25.0:
-    resolution: {integrity: sha512-5lBTZmgQmARLLSYiwI71tiGVTLUuqXantZM6vlSY39OaDSV0M7+32K5DnLkmFrwTe+Ksz0ffuLUC91RUviVZfw==}
+  /eslint-plugin-react/7.31.9_eslint@8.25.0:
+    resolution: {integrity: sha512-vrVJwusIw4L99lyfXjtCw8HWdloajsiYslMavogrBe2Gl8gr95TJsJnOMRasN4b4N24I3XuJf6aAV6MhyGmjqw==}
     engines: {node: '>=4'}
     peerDependencies:
       eslint: ^3 || ^4 || ^5 || ^6 || ^7 || ^8

From 15caefdc0116f7e5b9e180dfff7c8536d4a62e02 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 10 Oct 2022 11:56:48 +0000
Subject: [PATCH 117/263] build(deps): update dependency vite to v3.1.7 (#4156)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index f8d1ca31a..57889731f 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.1.6",
+    "vite": "3.1.7",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index b34a6f009..e825c432a 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.1.6
+  vite: 3.1.7
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
   '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.6
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.7
   esbuild: 0.15.10
   esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.25.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.1.6
-  vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.6
+  vite: 3.1.7
+  vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.7
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.6
-  vite-tsconfig-paths: 3.5.1_vite@3.1.6
+  vite-plugin-svgr: 2.2.1_vite@3.1.7
+  vite-tsconfig-paths: 3.5.1_vite@3.1.7
 
 packages:
 
@@ -3663,7 +3663,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.6:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.7:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3676,7 +3676,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.6
+      vite: 3.1.7
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9095,7 +9095,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.25.0+vite@3.1.6:
+  /vite-plugin-eslint/1.8.1_eslint@8.25.0+vite@3.1.7:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9105,7 +9105,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.25.0
       rollup: 2.78.0
-      vite: 3.1.6
+      vite: 3.1.7
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9119,19 +9119,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.6:
+  /vite-plugin-svgr/2.2.1_vite@3.1.7:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.6
+      vite: 3.1.7
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.1_vite@3.1.6:
+  /vite-tsconfig-paths/3.5.1_vite@3.1.7:
     resolution: {integrity: sha512-t7cPvDMDxOCUxxNLqngXiX+L6jPYBr+eMgkeVadknxBb89d2s1aejz+wFEep010VfXjGVAUWGEFPe1fkRYTFvg==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9140,13 +9140,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.6
+      vite: 3.1.7
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.6:
-    resolution: {integrity: sha512-qMXIwnehvvcK5XfJiXQUiTxoYAEMKhM+jqCY6ZSTKFBKu1hJnAKEzP3AOcnTerI0cMZYAaJ4wpW1wiXLMDt4mA==}
+  /vite/3.1.7:
+    resolution: {integrity: sha512-5vCAmU4S8lyVdFCInu9M54f/g8qbOMakVw5xJ4pjoaDy5wgy9sLLZkGdSLN52dlsBqh0tBqxjaqqa8LgPqwRAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From b8efa7a1fd77558a06fd76dfa8308ce7695e1bc0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 10 Oct 2022 20:29:32 +0000
Subject: [PATCH 118/263] build(deps): update typescript-eslint monorepo to
 v5.40.0 (#4158)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 103 +++++++++++++++++++++++----------------------
 2 files changed, 54 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 57889731f..9776ae762 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.39.0",
-    "@typescript-eslint/parser": "5.39.0",
+    "@typescript-eslint/eslint-plugin": "5.40.0",
+    "@typescript-eslint/parser": "5.40.0",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.10",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e825c432a..e525df365 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.39.0
-  '@typescript-eslint/parser': 5.39.0
+  '@typescript-eslint/eslint-plugin': 5.40.0
+  '@typescript-eslint/parser': 5.40.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   broadcast-channel: 4.18.0
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
-  '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+  '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
+  '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
   '@vitejs/plugin-react': 2.1.0_vite@3.1.7
   esbuild: 0.15.10
   esbuild-jest: 0.5.0_esbuild@0.15.10
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_z7wafoevaiyltka7a37z3wolda
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
-  eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
+  eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
   eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
   eslint-plugin-react: 7.31.9_eslint@8.25.0
@@ -3464,8 +3464,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.39.0_cfd7h3iktziq6hcwahu2qxhjhy:
-    resolution: {integrity: sha512-xVfKOkBm5iWMNGKQ2fwX5GVgBuHmZBO1tCRwXmY5oAIsPscfwm2UADDuNB8ZVYCtpQvJK4xpjrK7jEhcJ0zY9A==}
+  /@typescript-eslint/eslint-plugin/5.40.0_25sstg4uu2sk4pm7xcyzuov7xq:
+    resolution: {integrity: sha512-FIBZgS3DVJgqPwJzvZTuH4HNsZhHMa9SjxTKAZTlMsPw/UzpEjcf9f4dfgDJEHjK+HboUJo123Eshl6niwEm/Q==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3475,10 +3475,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
-      '@typescript-eslint/scope-manager': 5.39.0
-      '@typescript-eslint/type-utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
-      '@typescript-eslint/utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/scope-manager': 5.40.0
+      '@typescript-eslint/type-utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 4.3.4
       eslint: 8.25.0
       ignore: 5.2.0
@@ -3503,8 +3503,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q:
-    resolution: {integrity: sha512-PhxLjrZnHShe431sBAGHaNe6BDdxAASDySgsBCGxcBecVCi8NQWxQZMcizNA4g0pN51bBAn/FUfkWG3SDVcGlA==}
+  /@typescript-eslint/parser/5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q:
+    resolution: {integrity: sha512-Ah5gqyX2ySkiuYeOIDg7ap51/b63QgWZA7w6AHtFrag7aH0lRQPbLzUjk0c9o5/KZ6JRkTTDKShL4AUrQa6/hw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3513,9 +3513,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.39.0
-      '@typescript-eslint/types': 5.39.0
-      '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.40.0
+      '@typescript-eslint/types': 5.40.0
+      '@typescript-eslint/typescript-estree': 5.40.0_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.25.0
       typescript: 4.8.4
@@ -3531,16 +3531,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.39.0:
-    resolution: {integrity: sha512-/I13vAqmG3dyqMVSZPjsbuNQlYS082Y7OMkwhCfLXYsmlI0ca4nkL7wJ/4gjX70LD4P8Hnw1JywUVVAwepURBw==}
+  /@typescript-eslint/scope-manager/5.40.0:
+    resolution: {integrity: sha512-d3nPmjUeZtEWRvyReMI4I1MwPGC63E8pDoHy0BnrYjnJgilBD3hv7XOiETKLY/zTwI7kCnBDf2vWTRUVpYw0Uw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.39.0
-      '@typescript-eslint/visitor-keys': 5.39.0
+      '@typescript-eslint/types': 5.40.0
+      '@typescript-eslint/visitor-keys': 5.40.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q:
-    resolution: {integrity: sha512-KJHJkOothljQWzR3t/GunL0TPKY+fGJtnpl+pX+sJ0YiKTz3q2Zr87SGTmFqsCMFrLt5E0+o+S6eQY0FAXj9uA==}
+  /@typescript-eslint/type-utils/5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q:
+    resolution: {integrity: sha512-nfuSdKEZY2TpnPz5covjJqav+g5qeBqwSHKBvz7Vm1SAfy93SwKk/JeSTymruDGItTwNijSsno5LhOHRS1pcfw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3549,8 +3549,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
-      '@typescript-eslint/utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/typescript-estree': 5.40.0_typescript@4.8.4
+      '@typescript-eslint/utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 4.3.4
       eslint: 8.25.0
       tsutils: 3.21.0_typescript@4.8.4
@@ -3564,8 +3564,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.39.0:
-    resolution: {integrity: sha512-gQMZrnfEBFXK38hYqt8Lkwt8f4U6yq+2H5VDSgP/qiTzC8Nw8JO3OuSUOQ2qW37S/dlwdkHDntkZM6SQhKyPhw==}
+  /@typescript-eslint/types/5.40.0:
+    resolution: {integrity: sha512-V1KdQRTXsYpf1Y1fXCeZ+uhjW48Niiw0VGt4V8yzuaDTU8Z1Xl7yQDyQNqyAFcVhpYXIVCEuxSIWTsLDpHgTbw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3590,8 +3590,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.39.0_typescript@4.8.4:
-    resolution: {integrity: sha512-qLFQP0f398sdnogJoLtd43pUgB18Q50QSA+BTE5h3sUxySzbWDpTSdgt4UyxNSozY/oDK2ta6HVAzvGgq8JYnA==}
+  /@typescript-eslint/typescript-estree/5.40.0_typescript@4.8.4:
+    resolution: {integrity: sha512-b0GYlDj8TLTOqwX7EGbw2gL5EXS2CPEWhF9nGJiGmEcmlpNBjyHsTwbqpyIEPVpl6br4UcBOYlcI2FJVtJkYhg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3599,8 +3599,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.39.0
-      '@typescript-eslint/visitor-keys': 5.39.0
+      '@typescript-eslint/types': 5.40.0
+      '@typescript-eslint/visitor-keys': 5.40.0
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3629,19 +3629,20 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q:
-    resolution: {integrity: sha512-+DnY5jkpOpgj+EBtYPyHRjXampJfC0yUZZzfzLuUWVZvCuKqSdJVC8UhdWipIw7VKNTfwfAPiOWzYkAwuIhiAg==}
+  /@typescript-eslint/utils/5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q:
+    resolution: {integrity: sha512-MO0y3T5BQ5+tkkuYZJBjePewsY+cQnfkYeRqS6tPh28niiIwPnQ1t59CSRcs1ZwJJNOdWw7rv9pF8aP58IMihA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
-      '@typescript-eslint/scope-manager': 5.39.0
-      '@typescript-eslint/types': 5.39.0
-      '@typescript-eslint/typescript-estree': 5.39.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.40.0
+      '@typescript-eslint/types': 5.40.0
+      '@typescript-eslint/typescript-estree': 5.40.0_typescript@4.8.4
       eslint: 8.25.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.25.0
+      semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -3655,11 +3656,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.39.0:
-    resolution: {integrity: sha512-yyE3RPwOG+XJBLrhvsxAidUgybJVQ/hG8BhiJo0k8JSAYfk/CshVcxf0HwP4Jt7WZZ6vLmxdo1p6EyN3tzFTkg==}
+  /@typescript-eslint/visitor-keys/5.40.0:
+    resolution: {integrity: sha512-ijJ+6yig+x9XplEpG2K6FUdJeQGGj/15U3S56W9IqXKJqleuD7zJ2AX/miLezwxpd7ZxDAqO87zWufKg+RPZyQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.39.0
+      '@typescript-eslint/types': 5.40.0
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5145,14 +5146,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_vj4r73z62tfyv4m5ogwqh4y7je
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
-      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
+      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.25.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
-      eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
-      eslint-plugin-jest: 25.7.0_mqj5pcaoadpnbvfjhyja2vytem
+      eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
+      eslint-plugin-jest: 25.7.0_tyntwui2bgqwveldr4h74k2kni
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
       eslint-plugin-react: 7.31.9_eslint@8.25.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
@@ -5190,7 +5191,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.25.0
-      eslint-plugin-import: 2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i
+      eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5200,7 +5201,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_xqkvhp6xp4qeims5nzhpa6g4fu:
+  /eslint-module-utils/2.7.3_owmdenaxfv5vuzuk4jnrvv2zs4:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5218,7 +5219,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
@@ -5245,7 +5246,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_qsb65tjqbuwdgnl6r3ydykzo5i:
+  /eslint-plugin-import/2.26.0_gidjymaeg63pis2633rh62obay:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5255,14 +5256,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.25.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_xqkvhp6xp4qeims5nzhpa6g4fu
+      eslint-module-utils: 2.7.3_owmdenaxfv5vuzuk4jnrvv2zs4
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5276,7 +5277,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_mqj5pcaoadpnbvfjhyja2vytem:
+  /eslint-plugin-jest/25.7.0_tyntwui2bgqwveldr4h74k2kni:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5289,7 +5290,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.39.0_cfd7h3iktziq6hcwahu2qxhjhy
+      '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
       jest: 29.1.2_@types+node@18.8.3
@@ -5375,7 +5376,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.39.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
     transitivePeerDependencies:
       - supports-color

From 7531d40e5fcae3ebf6246bf4b40953f161639263 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 11 Oct 2022 02:21:57 +0000
Subject: [PATCH 119/263] build(deps): update dependency @types/node to v18.8.4
 (#4161)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 76 +++++++++++++++++++++++-----------------------
 2 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/web/package.json b/web/package.json
index 9776ae762..31af31c1a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.2",
-    "@types/node": "18.8.3",
+    "@types/node": "18.8.4",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e525df365..a325a2b9d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
-  '@types/node': 18.8.3
+  '@types/node': 18.8.4
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.2
-  '@types/node': 18.8.3
+  '@types/node': 18.8.4
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.9_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.1.2_@types+node@18.8.3
+  jest: 29.1.2_@types+node@18.8.4
   jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.1.2
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2524,14 +2524,14 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.1.2_@types+node@18.8.3
+      jest-config: 29.1.2_@types+node@18.8.4
       jest-haste-map: 29.1.2
       jest-message-util: 29.1.2
       jest-regex-util: 29.0.0
@@ -2558,7 +2558,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       jest-mock: 29.1.2
     dev: true
 
@@ -2585,7 +2585,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       jest-message-util: 29.1.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
@@ -2618,7 +2618,7 @@ packages:
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2729,7 +2729,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2741,7 +2741,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3328,7 +3328,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3357,7 +3357,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3378,8 +3378,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.8.3:
-    resolution: {integrity: sha512-0os9vz6BpGwxGe9LOhgP/ncvYN5Tx1fNcd2TM3rD/aCGBkysb+ZWpXEocG24h6ZzOi13+VB8HndAQFezsSOw1w==}
+  /@types/node/18.8.4:
+    resolution: {integrity: sha512-WdlVphvfR/GJCLEMbNA8lJ0lhFNBj4SW3O+O5/cEGw9oYrv0al9zTwuQsq+myDUXgNx2jgBynoVgZ2MMJ6pbow==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5293,7 +5293,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.1.2_@types+node@18.8.3
+      jest: 29.1.2_@types+node@18.8.4
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6494,7 +6494,7 @@ packages:
       '@jest/expect': 29.1.2
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6513,7 +6513,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.2_@types+node@18.8.3:
+  /jest-cli/29.1.2_@types+node@18.8.4:
     resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6530,7 +6530,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.2_@types+node@18.8.3
+      jest-config: 29.1.2_@types+node@18.8.4
       jest-util: 29.1.2
       jest-validate: 29.1.2
       prompts: 2.4.2
@@ -6541,7 +6541,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.2_@types+node@18.8.3:
+  /jest-config/29.1.2_@types+node@18.8.4:
     resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6556,7 +6556,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       babel-jest: 29.1.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6616,7 +6616,7 @@ packages:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
       '@types/jsdom': 20.0.0
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       jest-mock: 29.1.2
       jest-util: 29.1.2
       jsdom: 20.0.0
@@ -6634,7 +6634,7 @@ packages:
       '@jest/environment': 29.1.2
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       jest-mock: 29.1.2
       jest-util: 29.1.2
     dev: true
@@ -6650,7 +6650,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6673,7 +6673,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6724,7 +6724,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       jest-util: 29.1.2
     dev: true
 
@@ -6784,7 +6784,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6815,7 +6815,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6838,7 +6838,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       graceful-fs: 4.2.10
     dev: true
 
@@ -6883,7 +6883,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6895,7 +6895,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6922,7 +6922,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.2_@types+node@18.8.3
+      jest: 29.1.2_@types+node@18.8.4
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6936,7 +6936,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6950,7 +6950,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6962,7 +6962,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6971,13 +6971,13 @@ packages:
     resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.8.3
+      '@types/node': 18.8.4
       jest-util: 29.1.2
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.2_@types+node@18.8.3:
+  /jest/29.1.2_@types+node@18.8.4:
     resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6990,7 +6990,7 @@ packages:
       '@jest/core': 29.1.2
       '@jest/types': 29.1.2
       import-local: 3.1.0
-      jest-cli: 29.1.2_@types+node@18.8.3
+      jest-cli: 29.1.2_@types+node@18.8.4
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From a29515bd4e9d3047ad9f24ed7b6f385296f0d45c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 11 Oct 2022 05:33:12 +0000
Subject: [PATCH 120/263] build(deps): update dependency eslint-plugin-react to
 v7.31.10 (#4162)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index 31af31c1a..b7ed5b482 100644
--- a/web/package.json
+++ b/web/package.json
@@ -166,7 +166,7 @@
     "eslint-plugin-import": "2.26.0",
     "eslint-plugin-jsx-a11y": "6.6.1",
     "eslint-plugin-prettier": "4.2.1",
-    "eslint-plugin-react": "7.31.9",
+    "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
     "jest": "29.1.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index a325a2b9d..c31517a96 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -37,7 +37,7 @@ specifiers:
   eslint-plugin-import: 2.26.0
   eslint-plugin-jsx-a11y: 6.6.1
   eslint-plugin-prettier: 4.2.1
-  eslint-plugin-react: 7.31.9
+  eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
   i18next: 21.10.0
@@ -116,7 +116,7 @@ devDependencies:
   eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
   eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
-  eslint-plugin-react: 7.31.9_eslint@8.25.0
+  eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
   jest: 29.1.2_@types+node@18.8.4
@@ -5155,7 +5155,7 @@ packages:
       eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
       eslint-plugin-jest: 25.7.0_tyntwui2bgqwveldr4h74k2kni
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
-      eslint-plugin-react: 7.31.9_eslint@8.25.0
+      eslint-plugin-react: 7.31.10_eslint@8.25.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
       eslint-plugin-testing-library: 5.5.1_z4bbprzjrhnsfa24uvmcbu7f5q
       typescript: 4.8.4
@@ -5347,8 +5347,8 @@ packages:
       eslint: 8.25.0
     dev: true
 
-  /eslint-plugin-react/7.31.9_eslint@8.25.0:
-    resolution: {integrity: sha512-vrVJwusIw4L99lyfXjtCw8HWdloajsiYslMavogrBe2Gl8gr95TJsJnOMRasN4b4N24I3XuJf6aAV6MhyGmjqw==}
+  /eslint-plugin-react/7.31.10_eslint@8.25.0:
+    resolution: {integrity: sha512-e4N/nc6AAlg4UKW/mXeYWd3R++qUano5/o+t+wnWxIf+bLsOaH3a4q74kX3nDjYym3VBN4HyO9nEn1GcAqgQOA==}
     engines: {node: '>=4'}
     peerDependencies:
       eslint: ^3 || ^4 || ^5 || ^6 || ^7 || ^8

From 1c1b3aaa7e5dbacffe120f0de19b1916142b1a2f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 11 Oct 2022 20:03:35 +0000
Subject: [PATCH 121/263] build(deps): update module github.com/spf13/cobra to
 v1.6.0 (#4165)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 4 ++--
 go.sum | 7 ++++---
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/go.mod b/go.mod
index 4255cddcc..709d17f16 100644
--- a/go.mod
+++ b/go.mod
@@ -31,7 +31,7 @@ require (
 	github.com/prometheus/client_golang v1.13.0
 	github.com/simia-tech/crypt v0.5.1
 	github.com/sirupsen/logrus v1.9.0
-	github.com/spf13/cobra v1.5.0
+	github.com/spf13/cobra v1.6.0
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.0
 	github.com/trustelem/zxcvbn v1.0.1
@@ -63,7 +63,7 @@ require (
 	github.com/golang/protobuf v1.5.2 // indirect
 	github.com/gorilla/websocket v1.4.2 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
-	github.com/inconshreveable/mousetrap v1.0.0 // indirect
+	github.com/inconshreveable/mousetrap v1.0.1 // indirect
 	github.com/jackc/chunkreader/v2 v2.0.1 // indirect
 	github.com/jackc/pgconn v1.13.0 // indirect
 	github.com/jackc/pgio v1.0.0 // indirect
diff --git a/go.sum b/go.sum
index 2a15decb3..4f62cc820 100644
--- a/go.sum
+++ b/go.sum
@@ -742,8 +742,9 @@ github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpO
 github.com/hudl/fargo v1.3.0/go.mod h1:y3CKSmjA+wD2gak7sUSXTAoopbhU08POFhmITJgmKTg=
 github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
-github.com/inconshreveable/mousetrap v1.0.0 h1:Z8tu5sraLXCXIcARxBp/8cbvlwVa7Z1NHg9XEKhtSvM=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
+github.com/inconshreveable/mousetrap v1.0.1 h1:U3uMjPSQEBMNp1lFxmllqCPM6P5u/Xq7Pgzkat/bFNc=
+github.com/inconshreveable/mousetrap v1.0.1/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/influxdata/influxdb1-client v0.0.0-20191209144304-8bf82d3c094d/go.mod h1:qj24IKcXYK6Iy9ceXlo3Tc+vtHo9lIhSX5JddghvEPo=
 github.com/inhies/go-bytesize v0.0.0-20201103132853-d0aed0d254f8/go.mod h1:KrtyD5PFj++GKkFS/7/RRrfnRhAMGQwy75GLCHWrCNs=
 github.com/instana/go-sensor v1.29.0/go.mod h1:Uh9j3eF2mBw/FLk2MxISmVDIj8mtJBFRj2S19M6CVyQ=
@@ -1291,8 +1292,8 @@ github.com/spf13/cobra v0.0.6/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHN
 github.com/spf13/cobra v0.0.7/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/cobra v1.0.0/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/cobra v1.1.3/go.mod h1:pGADOWyqRD/YMrPZigI/zbliZ2wVD/23d+is3pSWzOo=
-github.com/spf13/cobra v1.5.0 h1:X+jTBEBqF0bHN+9cSMgmfuvv2VHJ9ezmFNf9Y/XstYU=
-github.com/spf13/cobra v1.5.0/go.mod h1:dWXEIy2H428czQCjInthrTRUg7yKbok+2Qi/yBIJoUM=
+github.com/spf13/cobra v1.6.0 h1:42a0n6jwCot1pUmomAp4T7DeMD+20LFv4Q54pxLf2LI=
+github.com/spf13/cobra v1.6.0/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.1.0 h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmqnqMYADFk=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=

From edc0f0e4771bce3bfb08c023d2580a2d208ef40d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 12 Oct 2022 11:33:34 +1100
Subject: [PATCH 122/263] build(deps): update module golang.org/x/text to
 v0.3.8 (#4166)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 11 +++++------
 go.sum | 17 ++++++++++-------
 2 files changed, 15 insertions(+), 13 deletions(-)

diff --git a/go.mod b/go.mod
index 709d17f16..e8038dc4c 100644
--- a/go.mod
+++ b/go.mod
@@ -37,7 +37,7 @@ require (
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
 	golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
-	golang.org/x/text v0.3.7
+	golang.org/x/text v0.3.8
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
 )
@@ -104,11 +104,10 @@ require (
 	github.com/ysmood/gson v0.7.1 // indirect
 	github.com/ysmood/leakless v0.8.0 // indirect
 	golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8 // indirect
-	golang.org/x/mod v0.5.0 // indirect
-	golang.org/x/net v0.0.0-20220225172249-27dd8689420f // indirect
-	golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 // indirect
-	golang.org/x/tools v0.1.7 // indirect
-	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
+	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
+	golang.org/x/net v0.0.0-20220722155237-a158d28d115b // indirect
+	golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f // indirect
+	golang.org/x/tools v0.1.12 // indirect
 	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
 	google.golang.org/grpc v1.42.0 // indirect
 	google.golang.org/protobuf v1.28.1 // indirect
diff --git a/go.sum b/go.sum
index 4f62cc820..b130a365b 100644
--- a/go.sum
+++ b/go.sum
@@ -1537,8 +1537,8 @@ golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.5.0 h1:UG21uOlmZabA4fW5i7ZX6bjw1xELEGg/ZLgZq9auk/Q=
-golang.org/x/mod v0.5.0/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 h1:6zppjxzCulZykYSLyVDYbneBfbaBIQPYMevg0bEwv2s=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180816102801-aaf60122140d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -1599,8 +1599,9 @@ golang.org/x/net v0.0.0-20210525063256-abc453219eb5/go.mod h1:9nx3DQGgdP8bBQD5qx
 golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
-golang.org/x/net v0.0.0-20220225172249-27dd8689420f h1:oA4XRj0qtSt8Yo1Zms0CUlsT3KG69V2UGQWPBxujDmc=
 golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b h1:PxfKdU9lEEDYjdIzOtC4qFWgkU2rGHdKlKowJSMN9h0=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20181003184128-c57b0facaced/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1720,8 +1721,9 @@ golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f h1:v4INt8xihDGvnrfjMDVXGxw9wrfxYyCjk0KbXjhR55s=
+golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -1734,8 +1736,9 @@ golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.3.7 h1:olpwvP2KacW1ZWvsR7uQhoyTYvKAupfQrRGBFM352Gk=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.3.8 h1:nAL+RVCQ9uMn3vJZbV+MRnydTJFPf8qqY42YiA6MrqY=
+golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
 golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -1839,14 +1842,14 @@ golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4f
 golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0=
 golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
-golang.org/x/tools v0.1.7 h1:6j8CgantCy3yc8JGBqkDLMKWqZ0RDU2g1HVgacojGWQ=
 golang.org/x/tools v0.1.7/go.mod h1:LGqMHiF4EqQNHR1JncWGqT5BVaXmza+X+BDGol+dOxo=
+golang.org/x/tools v0.1.12 h1:VveCTK38A2rkS8ZqFY25HIDFscX5X9OoEhJd3quQmXU=
+golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/xerrors v0.0.0-20190410155217-1f06c39b4373/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20190513163551-3ee3066db522/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gonum.org/v1/gonum v0.0.0-20180816165407-929014505bf4/go.mod h1:Y+Yx5eoAFn32cQvJDxZx5Dpnq+c3wtXuadVZAcxbbBo=
 gonum.org/v1/gonum v0.6.2/go.mod h1:9mxDZsDKxgMAuccQkewq682L+0eCu4dCN2yonUJTCLU=

From 9d7a3b2bd15ef37c4035fa1fa476bb0ba805d317 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 12 Oct 2022 03:36:06 +0000
Subject: [PATCH 123/263] build(deps): update material-ui monorepo to v5.10.9
 (#4164)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  6 ++--
 web/pnpm-lock.yaml | 68 +++++++++++++++++++++++-----------------------
 2 files changed, 37 insertions(+), 37 deletions(-)

diff --git a/web/package.json b/web/package.json
index b7ed5b482..6f4466db3 100644
--- a/web/package.json
+++ b/web/package.json
@@ -25,9 +25,9 @@
     "@fortawesome/free-regular-svg-icons": "6.2.0",
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
-    "@mui/icons-material": "5.10.6",
-    "@mui/material": "5.10.8",
-    "@mui/styles": "5.10.8",
+    "@mui/icons-material": "5.10.9",
+    "@mui/material": "5.10.9",
+    "@mui/styles": "5.10.9",
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index c31517a96..3776ce673 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -10,9 +10,9 @@ specifiers:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
-  '@mui/icons-material': 5.10.6
-  '@mui/material': 5.10.8
-  '@mui/styles': 5.10.8
+  '@mui/icons-material': 5.10.9
+  '@mui/material': 5.10.9
+  '@mui/styles': 5.10.9
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
@@ -73,9 +73,9 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.6_lrxyqjzvf7pkknwtk2aj65ruy4
-  '@mui/material': 5.10.8_ikcgkdnp4bn3rgptamntbhbo7e
-  '@mui/styles': 5.10.8_iapumuv4e6jcjznwuxpf4tt22e
+  '@mui/icons-material': 5.10.9_6usjrp3ypnzobhq35dcwvjrt3m
+  '@mui/material': 5.10.9_ikcgkdnp4bn3rgptamntbhbo7e
+  '@mui/styles': 5.10.9_iapumuv4e6jcjznwuxpf4tt22e
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
@@ -2791,8 +2791,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.100_rj7ozvcq3uehdlnj3cbwzbi5ce:
-    resolution: {integrity: sha512-bSoJEKCENtmJrJDECHUe9PiqztIUACuSskyqw9ypqE7Dz3WxL3e8puFsWBkUsz+WOCjXh4B4Xljn88Ucxxv5HA==}
+  /@mui/base/5.0.0-alpha.101_rj7ozvcq3uehdlnj3cbwzbi5ce:
+    resolution: {integrity: sha512-a54BcXvArGOKUZ2zyS/7B9GNhAGgfomEQSkfEZ88Nc9jKvXA+Mppenfz5o4JCAnD8c4VlePmz9rKOYvvum1bZw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2805,7 +2805,7 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/is-prop-valid': 1.2.0
       '@mui/types': 7.2.0_@types+react@18.0.21
-      '@mui/utils': 5.10.6_react@18.2.0
+      '@mui/utils': 5.10.9_react@18.2.0
       '@popperjs/core': 2.11.6
       '@types/react': 18.0.21
       clsx: 1.2.1
@@ -2815,12 +2815,12 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.8:
-    resolution: {integrity: sha512-V5D7OInO4P9PdT/JACg7fwjbOORm3GklaMVgdGomjyxiyetgRND5CC9r35e1LK/DqHdoyDuhbFzdfrqWtpmEIw==}
+  /@mui/core-downloads-tracker/5.10.9:
+    resolution: {integrity: sha512-rqoFu4qww6KJBbXYhyRd9YXjwBHa3ylnBPSWbGf1bdfG0AYMKmVzg8zxkWvxAWOp97kvx3M2kNPb0xMIDZiogQ==}
     dev: false
 
-  /@mui/icons-material/5.10.6_lrxyqjzvf7pkknwtk2aj65ruy4:
-    resolution: {integrity: sha512-QwxdRmLA46S94B0hExPDx0td+A2unF+33bQ6Cs+lNpJKVsm1YeHwNdYXYcnpWeHeQQ07055OXl7IB2GKDd0MfA==}
+  /@mui/icons-material/5.10.9_6usjrp3ypnzobhq35dcwvjrt3m:
+    resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@mui/material': ^5.0.0
@@ -2831,13 +2831,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.8_ikcgkdnp4bn3rgptamntbhbo7e
+      '@mui/material': 5.10.9_ikcgkdnp4bn3rgptamntbhbo7e
       '@types/react': 18.0.21
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.8_ikcgkdnp4bn3rgptamntbhbo7e:
-    resolution: {integrity: sha512-sF/Ka0IJjGXV52zoT4xAWEqXVRjNYbIjATo9L4Q5oQC5iJpGrKJFY16uNtWWB0+vp/nayAuPGZHrxtV+t3ecdQ==}
+  /@mui/material/5.10.9_ikcgkdnp4bn3rgptamntbhbo7e:
+    resolution: {integrity: sha512-sdOzlgpCmyw48je+E7o9UGGJpgBaF+60FlTRpVpcd/z+LUhnuzzuis891yPI5dPPXLBDL/bO4SsGg51lgNeLBw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2856,11 +2856,11 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/base': 5.0.0-alpha.100_rj7ozvcq3uehdlnj3cbwzbi5ce
-      '@mui/core-downloads-tracker': 5.10.8
-      '@mui/system': 5.10.8_h33l6npc22g7vcra72cibfsrvm
+      '@mui/base': 5.0.0-alpha.101_rj7ozvcq3uehdlnj3cbwzbi5ce
+      '@mui/core-downloads-tracker': 5.10.9
+      '@mui/system': 5.10.9_h33l6npc22g7vcra72cibfsrvm
       '@mui/types': 7.2.0_@types+react@18.0.21
-      '@mui/utils': 5.10.6_react@18.2.0
+      '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.21
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
@@ -2872,8 +2872,8 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.6_iapumuv4e6jcjznwuxpf4tt22e:
-    resolution: {integrity: sha512-I/W0QyTLRdEx6py3lKAquKO/rNF/7j+nIOM/xCyI9kU0fcotVTcTY08mKMsS6vrzdWpi6pAkD0wP0KwWy5R5VA==}
+  /@mui/private-theming/5.10.9_iapumuv4e6jcjznwuxpf4tt22e:
+    resolution: {integrity: sha512-BN7/CnsVPVyBaQpDTij4uV2xGYHHHhOgpdxeYLlIu+TqnsVM7wUeF+37kXvHovxM6xmL5qoaVUD98gDC0IZnHg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2883,7 +2883,7 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/utils': 5.10.6_react@18.2.0
+      '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.21
       prop-types: 15.8.1
       react: 18.2.0
@@ -2911,8 +2911,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.8_iapumuv4e6jcjznwuxpf4tt22e:
-    resolution: {integrity: sha512-aQGfz4Av12Bf0C8sJC0a7UoTbusD0IUKo4zNjkB5ERmhIFrbgN1G8XDIVvTgrgwdKbstbFlHDFfXkDcYe9elSQ==}
+  /@mui/styles/5.10.9_iapumuv4e6jcjznwuxpf4tt22e:
+    resolution: {integrity: sha512-dK6tsHkEp88MkwEDCxbqscj4Fa2aYBkfwy1MXMCexzx9TqxuahC0KSxBHfMMWZ0zV7xW5Suzwu8vveCp4uFN5A==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || 18
@@ -2923,9 +2923,9 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
+      '@mui/private-theming': 5.10.9_iapumuv4e6jcjznwuxpf4tt22e
       '@mui/types': 7.2.0_@types+react@18.0.21
-      '@mui/utils': 5.10.6_react@18.2.0
+      '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.21
       clsx: 1.2.1
       csstype: 3.1.1
@@ -2942,8 +2942,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.8_h33l6npc22g7vcra72cibfsrvm:
-    resolution: {integrity: sha512-hRQ354zcrYP/KHqK8FheICSvE9raQaUgQaV+A3oD4JETaFUCVI9Ytt+RcQYgTqx02xlCXIjl8LK1rPjTneySqw==}
+  /@mui/system/5.10.9_h33l6npc22g7vcra72cibfsrvm:
+    resolution: {integrity: sha512-B6fFC0sK06hNmqY7fAUfwShQv594+u/DT1YEFHPtK4laouTu7V4vSGQWi1WJT9Bjs9Db5D1bRDJ+Yy+tc3QOYA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2961,10 +2961,10 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/private-theming': 5.10.6_iapumuv4e6jcjznwuxpf4tt22e
+      '@mui/private-theming': 5.10.9_iapumuv4e6jcjznwuxpf4tt22e
       '@mui/styled-engine': 5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq
       '@mui/types': 7.2.0_@types+react@18.0.21
-      '@mui/utils': 5.10.6_react@18.2.0
+      '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.21
       clsx: 1.2.1
       csstype: 3.1.1
@@ -2983,8 +2983,8 @@ packages:
       '@types/react': 18.0.21
     dev: false
 
-  /@mui/utils/5.10.6_react@18.2.0:
-    resolution: {integrity: sha512-g0Qs8xN/MW2M3fLL8197h5J2VB9U+49fLlnKKqC6zy/yus5cZwdT+Gwec+wUMxgwQoxMDn+J8oDWAn28kEOR/Q==}
+  /@mui/utils/5.10.9_react@18.2.0:
+    resolution: {integrity: sha512-2tdHWrq3+WCy+G6TIIaFx3cg7PorXZ71P375ExuX61od1NOAJP1mK90VxQ8N4aqnj2vmO3AQDkV4oV2Ktvt4bA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       react: ^17.0.0 || ^18.0.0 || 18
@@ -4175,7 +4175,7 @@ packages:
       '@babel/preset-env': 7.18.6_@babel+core@7.19.0
       '@babel/preset-react': 7.18.6_@babel+core@7.19.0
       '@babel/preset-typescript': 7.18.6_@babel+core@7.19.0
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       babel-plugin-macros: 3.1.0
       babel-plugin-transform-react-remove-prop-types: 0.4.24
     transitivePeerDependencies:

From 58548701aead2aaff85b086908c46dbdca3cb107 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 13 Oct 2022 10:18:50 +1100
Subject: [PATCH 124/263] build(deps): update dependency @types/node to v18.8.5
 (#4171)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 76 +++++++++++++++++++++++-----------------------
 2 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6f4466db3..b24ef7559 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.2",
-    "@types/node": "18.8.4",
+    "@types/node": "18.8.5",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 3776ce673..88b665b63 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
-  '@types/node': 18.8.4
+  '@types/node': 18.8.5
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.2
-  '@types/node': 18.8.4
+  '@types/node': 18.8.5
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.1.2_@types+node@18.8.4
+  jest: 29.1.2_@types+node@18.8.5
   jest-environment-jsdom: 29.1.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.1.2
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2524,14 +2524,14 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.0.0
-      jest-config: 29.1.2_@types+node@18.8.4
+      jest-config: 29.1.2_@types+node@18.8.5
       jest-haste-map: 29.1.2
       jest-message-util: 29.1.2
       jest-regex-util: 29.0.0
@@ -2558,7 +2558,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       jest-mock: 29.1.2
     dev: true
 
@@ -2585,7 +2585,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       jest-message-util: 29.1.2
       jest-mock: 29.1.2
       jest-util: 29.1.2
@@ -2618,7 +2618,7 @@ packages:
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2729,7 +2729,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2741,7 +2741,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3328,7 +3328,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3357,7 +3357,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3378,8 +3378,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.8.4:
-    resolution: {integrity: sha512-WdlVphvfR/GJCLEMbNA8lJ0lhFNBj4SW3O+O5/cEGw9oYrv0al9zTwuQsq+myDUXgNx2jgBynoVgZ2MMJ6pbow==}
+  /@types/node/18.8.5:
+    resolution: {integrity: sha512-Bq7G3AErwe5A/Zki5fdD3O6+0zDChhg671NfPjtIcbtzDNZTv4NPKMRFr7gtYPG7y+B8uTiNK4Ngd9T0FTar6Q==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5293,7 +5293,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.1.2_@types+node@18.8.4
+      jest: 29.1.2_@types+node@18.8.5
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6494,7 +6494,7 @@ packages:
       '@jest/expect': 29.1.2
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6513,7 +6513,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.2_@types+node@18.8.4:
+  /jest-cli/29.1.2_@types+node@18.8.5:
     resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6530,7 +6530,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.2_@types+node@18.8.4
+      jest-config: 29.1.2_@types+node@18.8.5
       jest-util: 29.1.2
       jest-validate: 29.1.2
       prompts: 2.4.2
@@ -6541,7 +6541,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.2_@types+node@18.8.4:
+  /jest-config/29.1.2_@types+node@18.8.5:
     resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6556,7 +6556,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       babel-jest: 29.1.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6616,7 +6616,7 @@ packages:
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
       '@types/jsdom': 20.0.0
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       jest-mock: 29.1.2
       jest-util: 29.1.2
       jsdom: 20.0.0
@@ -6634,7 +6634,7 @@ packages:
       '@jest/environment': 29.1.2
       '@jest/fake-timers': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       jest-mock: 29.1.2
       jest-util: 29.1.2
     dev: true
@@ -6650,7 +6650,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6673,7 +6673,7 @@ packages:
     dependencies:
       '@jest/types': 29.1.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6724,7 +6724,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       jest-util: 29.1.2
     dev: true
 
@@ -6784,7 +6784,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6815,7 +6815,7 @@ packages:
       '@jest/test-result': 29.1.2
       '@jest/transform': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -6838,7 +6838,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       graceful-fs: 4.2.10
     dev: true
 
@@ -6883,7 +6883,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -6895,7 +6895,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -6922,7 +6922,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.2_@types+node@18.8.4
+      jest: 29.1.2_@types+node@18.8.5
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -6936,7 +6936,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6950,7 +6950,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -6962,7 +6962,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -6971,13 +6971,13 @@ packages:
     resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.8.4
+      '@types/node': 18.8.5
       jest-util: 29.1.2
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.2_@types+node@18.8.4:
+  /jest/29.1.2_@types+node@18.8.5:
     resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6990,7 +6990,7 @@ packages:
       '@jest/core': 29.1.2
       '@jest/types': 29.1.2
       import-local: 3.1.0
-      jest-cli: 29.1.2_@types+node@18.8.4
+      jest-cli: 29.1.2_@types+node@18.8.5
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 2713679b53f2f9710f1df52cba0d659d860f9840 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 13 Oct 2022 13:39:22 +0000
Subject: [PATCH 125/263] build(deps): update dependency vite to v3.1.8 (#4174)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index b24ef7559..b8e926a39 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.1.7",
+    "vite": "3.1.8",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 88b665b63..1f5600555 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.1.7
+  vite: 3.1.8
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.1
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
   '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.7
+  '@vitejs/plugin-react': 2.1.0_vite@3.1.8
   esbuild: 0.15.10
   esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.25.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.1.7
-  vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.7
+  vite: 3.1.8
+  vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.8
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.7
-  vite-tsconfig-paths: 3.5.1_vite@3.1.7
+  vite-plugin-svgr: 2.2.1_vite@3.1.8
+  vite-tsconfig-paths: 3.5.1_vite@3.1.8
 
 packages:
 
@@ -3664,7 +3664,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.7:
+  /@vitejs/plugin-react/2.1.0_vite@3.1.8:
     resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3677,7 +3677,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
       magic-string: 0.26.2
       react-refresh: 0.14.0
-      vite: 3.1.7
+      vite: 3.1.8
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9096,7 +9096,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.25.0+vite@3.1.7:
+  /vite-plugin-eslint/1.8.1_eslint@8.25.0+vite@3.1.8:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9106,7 +9106,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.25.0
       rollup: 2.78.0
-      vite: 3.1.7
+      vite: 3.1.8
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9120,19 +9120,19 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.7:
+  /vite-plugin-svgr/2.2.1_vite@3.1.8:
     resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@svgr/core': 6.3.1
-      vite: 3.1.7
+      vite: 3.1.8
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.1_vite@3.1.7:
+  /vite-tsconfig-paths/3.5.1_vite@3.1.8:
     resolution: {integrity: sha512-t7cPvDMDxOCUxxNLqngXiX+L6jPYBr+eMgkeVadknxBb89d2s1aejz+wFEep010VfXjGVAUWGEFPe1fkRYTFvg==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9141,13 +9141,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.7
+      vite: 3.1.8
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.7:
-    resolution: {integrity: sha512-5vCAmU4S8lyVdFCInu9M54f/g8qbOMakVw5xJ4pjoaDy5wgy9sLLZkGdSLN52dlsBqh0tBqxjaqqa8LgPqwRAA==}
+  /vite/3.1.8:
+    resolution: {integrity: sha512-m7jJe3nufUbuOfotkntGFupinL/fmuTNuQmiVE7cH2IZMuf4UbfbGYMUT3jVWgGYuRVLY9j8NnrRqgw5rr5QTg==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From a7872a188e5eea0530eb6831591bc3b40acf1af3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 13 Oct 2022 16:38:54 +0000
Subject: [PATCH 126/263] build(deps): update dependency vite-plugin-svgr to
 v2.2.2 (#4175)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 153 +++++++++++++++++++++++++++++++++++++++------
 2 files changed, 136 insertions(+), 19 deletions(-)

diff --git a/web/package.json b/web/package.json
index b8e926a39..1c371c227 100644
--- a/web/package.json
+++ b/web/package.json
@@ -179,7 +179,7 @@
     "vite": "3.1.8",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
-    "vite-plugin-svgr": "2.2.1",
+    "vite-plugin-svgr": "2.2.2",
     "vite-tsconfig-paths": "3.5.1"
   }
 }
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 1f5600555..df303ded4 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -61,7 +61,7 @@ specifiers:
   vite: 3.1.8
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1
+  vite-plugin-svgr: 2.2.2
   vite-tsconfig-paths: 3.5.1
   zxcvbn: 4.4.2
 
@@ -129,7 +129,7 @@ devDependencies:
   vite: 3.1.8
   vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.8
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.1_vite@3.1.8
+  vite-plugin-svgr: 2.2.2_vite@3.1.8
   vite-tsconfig-paths: 3.5.1_vite@3.1.8
 
 packages:
@@ -3047,6 +3047,20 @@ packages:
       picomatch: 2.3.1
     dev: true
 
+  /@rollup/pluginutils/5.0.1:
+    resolution: {integrity: sha512-4HaCVEXXuObvcPUaUlLt4faHYHCeQOOWNj8NKFGaRSrw3ZLD0TWeAFZicV9vXjnE2nkNuaVTfTuwAnjR+6uc9A==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^1.20.0||^2.0.0||^3.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+    dependencies:
+      '@types/estree': 1.0.0
+      estree-walker: 2.0.2
+      picomatch: 2.3.1
+    dev: true
+
   /@rushstack/eslint-patch/1.1.4:
     resolution: {integrity: sha512-LwzQKA4vzIct1zNZzBmRKI9QuNpLgTQMEjsQLf3BXuGYb3QPTP4Yjf6mkdX+X1mYttZ808QpOwAzZjv28kq7DA==}
     dev: true
@@ -3067,6 +3081,16 @@ packages:
       '@sinonjs/commons': 1.8.3
     dev: true
 
+  /@svgr/babel-plugin-add-jsx-attribute/6.3.1:
+    resolution: {integrity: sha512-jDBKArXYO1u0B1dmd2Nf8Oy6aTF5vLDfLoO9Oon/GLkqZ/NiggYWZA+a2HpUMH4ITwNqS3z43k8LWApB8S583w==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-add-jsx-attribute/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-jDBKArXYO1u0B1dmd2Nf8Oy6aTF5vLDfLoO9Oon/GLkqZ/NiggYWZA+a2HpUMH4ITwNqS3z43k8LWApB8S583w==}
     engines: {node: '>=10'}
@@ -3079,6 +3103,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-remove-jsx-attribute/6.3.1:
+    resolution: {integrity: sha512-dQzyJ4prwjcFd929T43Z8vSYiTlTu8eafV40Z2gO7zy/SV5GT+ogxRJRBIKWomPBOiaVXFg3jY4S5hyEN3IBjQ==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-remove-jsx-attribute/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-dQzyJ4prwjcFd929T43Z8vSYiTlTu8eafV40Z2gO7zy/SV5GT+ogxRJRBIKWomPBOiaVXFg3jY4S5hyEN3IBjQ==}
     engines: {node: '>=10'}
@@ -3091,6 +3125,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-remove-jsx-empty-expression/6.3.1:
+    resolution: {integrity: sha512-HBOUc1XwSU67fU26V5Sfb8MQsT0HvUyxru7d0oBJ4rA2s4HW3PhyAPC7fV/mdsSGpAvOdd8Wpvkjsr0fWPUO7A==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-remove-jsx-empty-expression/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-HBOUc1XwSU67fU26V5Sfb8MQsT0HvUyxru7d0oBJ4rA2s4HW3PhyAPC7fV/mdsSGpAvOdd8Wpvkjsr0fWPUO7A==}
     engines: {node: '>=10'}
@@ -3103,6 +3147,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-replace-jsx-attribute-value/6.3.1:
+    resolution: {integrity: sha512-C12e6aN4BXAolRrI601gPn5MDFCRHO7C4TM8Kks+rDtl8eEq+NN1sak0eAzJu363x3TmHXdZn7+Efd2nr9I5dA==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-replace-jsx-attribute-value/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-C12e6aN4BXAolRrI601gPn5MDFCRHO7C4TM8Kks+rDtl8eEq+NN1sak0eAzJu363x3TmHXdZn7+Efd2nr9I5dA==}
     engines: {node: '>=10'}
@@ -3115,6 +3169,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-svg-dynamic-title/6.3.1:
+    resolution: {integrity: sha512-6NU55Mmh3M5u2CfCCt6TX29/pPneutrkJnnDCHbKZnjukZmmgUAZLtZ2g6ZoSPdarowaQmAiBRgAHqHmG0vuqA==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-svg-dynamic-title/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-6NU55Mmh3M5u2CfCCt6TX29/pPneutrkJnnDCHbKZnjukZmmgUAZLtZ2g6ZoSPdarowaQmAiBRgAHqHmG0vuqA==}
     engines: {node: '>=10'}
@@ -3127,6 +3191,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-svg-em-dimensions/6.3.1:
+    resolution: {integrity: sha512-HV1NGHYTTe1vCNKlBgq/gKuCSfaRlKcHIADn7P8w8U3Zvujdw1rmusutghJ1pZJV7pDt3Gt8ws+SVrqHnBO/Qw==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-svg-em-dimensions/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-HV1NGHYTTe1vCNKlBgq/gKuCSfaRlKcHIADn7P8w8U3Zvujdw1rmusutghJ1pZJV7pDt3Gt8ws+SVrqHnBO/Qw==}
     engines: {node: '>=10'}
@@ -3139,6 +3213,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-transform-react-native-svg/6.3.1:
+    resolution: {integrity: sha512-2wZhSHvTolFNeKDAN/ZmIeSz2O9JSw72XD+o2bNp2QAaWqa8KGpn5Yk5WHso6xqfSAiRzAE+GXlsrBO4UP9LLw==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-transform-react-native-svg/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-2wZhSHvTolFNeKDAN/ZmIeSz2O9JSw72XD+o2bNp2QAaWqa8KGpn5Yk5WHso6xqfSAiRzAE+GXlsrBO4UP9LLw==}
     engines: {node: '>=10'}
@@ -3151,6 +3235,16 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
+  /@svgr/babel-plugin-transform-svg-component/6.3.1:
+    resolution: {integrity: sha512-cZ8Tr6ZAWNUFfDeCKn/pGi976iWSkS8ijmEYKosP+6ktdZ7lW9HVLHojyusPw3w0j8PI4VBeWAXAmi/2G7owxw==}
+    engines: {node: '>=12'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dev: true
+
   /@svgr/babel-plugin-transform-svg-component/6.3.1_@babel+core@7.19.0:
     resolution: {integrity: sha512-cZ8Tr6ZAWNUFfDeCKn/pGi976iWSkS8ijmEYKosP+6ktdZ7lW9HVLHojyusPw3w0j8PI4VBeWAXAmi/2G7owxw==}
     engines: {node: '>=12'}
@@ -3163,8 +3257,27 @@ packages:
       '@babel/core': 7.19.0
     dev: true
 
-  /@svgr/babel-preset/6.3.1_@babel+core@7.19.0:
-    resolution: {integrity: sha512-tQtWtzuMMQ3opH7je+MpwfuRA1Hf3cKdSgTtAYwOBDfmhabP7rcTfBi3E7V3MuwJNy/Y02/7/RutvwS1W4Qv9g==}
+  /@svgr/babel-preset/6.4.0:
+    resolution: {integrity: sha512-Ytuh7N282fv2Cy1JePf6HZ29/G5Hb8mQAjx4iykPjvfFl9NK6o5lZavmewgjOGT8kNPtwgvheuOQn4CifHRUhQ==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+    dependencies:
+      '@svgr/babel-plugin-add-jsx-attribute': 6.3.1
+      '@svgr/babel-plugin-remove-jsx-attribute': 6.3.1
+      '@svgr/babel-plugin-remove-jsx-empty-expression': 6.3.1
+      '@svgr/babel-plugin-replace-jsx-attribute-value': 6.3.1
+      '@svgr/babel-plugin-svg-dynamic-title': 6.3.1
+      '@svgr/babel-plugin-svg-em-dimensions': 6.3.1
+      '@svgr/babel-plugin-transform-react-native-svg': 6.3.1
+      '@svgr/babel-plugin-transform-svg-component': 6.3.1
+    dev: true
+
+  /@svgr/babel-preset/6.4.0_@babel+core@7.19.0:
+    resolution: {integrity: sha512-Ytuh7N282fv2Cy1JePf6HZ29/G5Hb8mQAjx4iykPjvfFl9NK6o5lZavmewgjOGT8kNPtwgvheuOQn4CifHRUhQ==}
     engines: {node: '>=10'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -3183,35 +3296,37 @@ packages:
       '@svgr/babel-plugin-transform-svg-component': 6.3.1_@babel+core@7.19.0
     dev: true
 
-  /@svgr/core/6.3.1:
-    resolution: {integrity: sha512-Sm3/7OdXbQreemf9aO25keerZSbnKMpGEfmH90EyYpj1e8wMD4TuwJIb3THDSgRMWk1kYJfSRulELBy4gVgZUA==}
+  /@svgr/core/6.4.0:
+    resolution: {integrity: sha512-wU9uyF6BUnwAqG7fDOowmDQzmbvovj1uq/iETfMK9xwQNaT+e7yN7SmDDcETXC72dnOrMcRuEWw0JEvpJha+yg==}
     engines: {node: '>=10'}
     dependencies:
-      '@svgr/plugin-jsx': 6.3.1_@svgr+core@6.3.1
+      '@svgr/babel-preset': 6.4.0
+      '@svgr/plugin-jsx': 6.4.0_@svgr+core@6.4.0
       camelcase: 6.3.0
       cosmiconfig: 7.0.1
     transitivePeerDependencies:
+      - '@babel/core'
       - supports-color
     dev: true
 
-  /@svgr/hast-util-to-babel-ast/6.3.1:
-    resolution: {integrity: sha512-NgyCbiTQIwe3wHe/VWOUjyxmpUmsrBjdoIxKpXt3Nqc3TN30BpJG22OxBvVzsAh9jqep0w0/h8Ywvdk3D9niNQ==}
+  /@svgr/hast-util-to-babel-ast/6.4.0:
+    resolution: {integrity: sha512-PjcU8jCneKXJnrREycsgfgQ/bzR1ogSKC5MBeUu2wmEoJIjzXX7X14DDktUjU9bkBy26yMDiVHn46Nl82P3WEg==}
     engines: {node: '>=10'}
     dependencies:
       '@babel/types': 7.19.0
       entities: 4.3.1
     dev: true
 
-  /@svgr/plugin-jsx/6.3.1_@svgr+core@6.3.1:
-    resolution: {integrity: sha512-r9+0mYG3hD4nNtUgsTXWGYJomv/bNd7kC16zvsM70I/bGeoCi/3lhTmYqeN6ChWX317OtQCSZZbH4wq9WwoXbw==}
+  /@svgr/plugin-jsx/6.4.0_@svgr+core@6.4.0:
+    resolution: {integrity: sha512-gu6E7v8qRAtCxbymI1et3G7athogvKvzsJkSWiHVZsuVZbyx5O2b7+DIkKvAGh2RvEzgSvfGf8QD1BaHal2vBw==}
     engines: {node: '>=10'}
     peerDependencies:
       '@svgr/core': ^6.0.0
     dependencies:
       '@babel/core': 7.19.0
-      '@svgr/babel-preset': 6.3.1_@babel+core@7.19.0
-      '@svgr/core': 6.3.1
-      '@svgr/hast-util-to-babel-ast': 6.3.1
+      '@svgr/babel-preset': 6.4.0_@babel+core@7.19.0
+      '@svgr/core': 6.4.0
+      '@svgr/hast-util-to-babel-ast': 6.4.0
       svg-parser: 2.0.4
     transitivePeerDependencies:
       - supports-color
@@ -9120,15 +9235,17 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.1_vite@3.1.8:
-    resolution: {integrity: sha512-+EqwahbwjETJH/ssA/66dNYyKN1cO0AStq96MuXmq5maU7AePBMf2lDKfQna49tJZAjtRz+R899BWCsUUP45Fg==}
+  /vite-plugin-svgr/2.2.2_vite@3.1.8:
+    resolution: {integrity: sha512-u8Ac27uZmDHTVGawpAhvLMJMuzbGeZGhe61TGeHoRQLxVhmQfIYCefa0iLbjC0ui1zFo6XZnS8EkzPITCYp85g==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
-      '@rollup/pluginutils': 4.2.1
-      '@svgr/core': 6.3.1
+      '@rollup/pluginutils': 5.0.1
+      '@svgr/core': 6.4.0
       vite: 3.1.8
     transitivePeerDependencies:
+      - '@babel/core'
+      - rollup
       - supports-color
     dev: true
 

From b3abccc0347ffe39d5aab4f770f5b213e5bf64ce Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 14 Oct 2022 15:22:37 +1100
Subject: [PATCH 127/263] build(deps): update caddy docker tag to v2.6.2
 (#4177)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/caddy/Dockerfile         | 4 ++--
 internal/suites/example/compose/caddy/docker-compose.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/internal/suites/example/compose/caddy/Dockerfile b/internal/suites/example/compose/caddy/Dockerfile
index a99eef3f0..3b5cb28e4 100644
--- a/internal/suites/example/compose/caddy/Dockerfile
+++ b/internal/suites/example/compose/caddy/Dockerfile
@@ -1,7 +1,7 @@
-FROM caddy:2.6.1-builder AS builder
+FROM caddy:2.6.2-builder AS builder
 
 RUN xcaddy build fix-empty-copy-headers
 
-FROM caddy:2.6.1
+FROM caddy:2.6.2
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy
diff --git a/internal/suites/example/compose/caddy/docker-compose.yml b/internal/suites/example/compose/caddy/docker-compose.yml
index 428874135..fefa0b7f3 100644
--- a/internal/suites/example/compose/caddy/docker-compose.yml
+++ b/internal/suites/example/compose/caddy/docker-compose.yml
@@ -3,7 +3,7 @@ version: '3'
 services:
   caddy:
     # build: ./example/compose/caddy/ # used for debugging
-    image: caddy:2.6.1-alpine
+    image: caddy:2.6.2-alpine
     volumes:
       - ./example/compose/caddy/Caddyfile:/etc/caddy/Caddyfile
     networks:

From 3a5113c14a9cbcbcac439d0561c8b9a749a97a49 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 14 Oct 2022 14:09:39 +0000
Subject: [PATCH 128/263] build(deps): update jest monorepo to v29.2.0 (#4178)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 631 ++++++++++++++++++++++++++-------------------
 2 files changed, 365 insertions(+), 270 deletions(-)

diff --git a/web/package.json b/web/package.json
index 1c371c227..7b9800195 100644
--- a/web/package.json
+++ b/web/package.json
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.1.2",
-    "jest-environment-jsdom": "29.1.2",
+    "jest": "29.2.0",
+    "jest-environment-jsdom": "29.2.0",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index df303ded4..3b5c88aca 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -43,8 +43,8 @@ specifiers:
   i18next: 21.10.0
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
-  jest: 29.1.2
-  jest-environment-jsdom: 29.1.2
+  jest: 29.2.0
+  jest-environment-jsdom: 29.2.0
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.10
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0_eslint@8.25.0
-  eslint-config-react-app: 7.0.1_z7wafoevaiyltka7a37z3wolda
+  eslint-config-react-app: 7.0.1_4ubwuetphstteqvh3rzlgov3gq
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
   eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.1.2_@types+node@18.8.5
-  jest-environment-jsdom: 29.1.2
+  jest: 29.2.0_@types+node@18.8.5
+  jest-environment-jsdom: 29.2.0
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.1.2
+  jest-watch-typeahead: 2.2.0_jest@29.2.0
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -2510,8 +2510,20 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.1.2:
-    resolution: {integrity: sha512-sCO2Va1gikvQU2ynDN8V4+6wB7iVrD2CvT0zaRst4rglf56yLly0NQ9nuRRAWFeimRf+tCdFsb1Vk1N9LrrMPA==}
+  /@jest/console/29.2.0:
+    resolution: {integrity: sha512-Xz1Wu+ZZxcB3RS8U3HdkFxlRJ7kLXI/by9X7d2/gvseIWPwYu/c1EsYy77cB5iyyHGOy3whS2HycjcuzIF4Jow==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.2.0
+      '@types/node': 18.8.5
+      chalk: 4.1.2
+      jest-message-util: 29.2.0
+      jest-util: 29.2.0
+      slash: 3.0.0
+    dev: true
+
+  /@jest/core/29.2.0:
+    resolution: {integrity: sha512-+gyJ3bX+kGEW/eqt/0kI7fLjqiFr3AN8O+rlEl1fYRf7D8h4Sj4tBGo9YOSirvWgvemoH2EPRya35bgvcPFzHQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2519,32 +2531,32 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/console': 29.1.2
-      '@jest/reporters': 29.1.2
-      '@jest/test-result': 29.1.2
-      '@jest/transform': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/console': 29.2.0
+      '@jest/reporters': 29.2.0
+      '@jest/test-result': 29.2.0
+      '@jest/transform': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
-      jest-changed-files: 29.0.0
-      jest-config: 29.1.2_@types+node@18.8.5
-      jest-haste-map: 29.1.2
-      jest-message-util: 29.1.2
-      jest-regex-util: 29.0.0
-      jest-resolve: 29.1.2
-      jest-resolve-dependencies: 29.1.2
-      jest-runner: 29.1.2
-      jest-runtime: 29.1.2
-      jest-snapshot: 29.1.2
-      jest-util: 29.1.2
-      jest-validate: 29.1.2
-      jest-watcher: 29.1.2
+      jest-changed-files: 29.2.0
+      jest-config: 29.2.0_@types+node@18.8.5
+      jest-haste-map: 29.2.0
+      jest-message-util: 29.2.0
+      jest-regex-util: 29.2.0
+      jest-resolve: 29.2.0
+      jest-resolve-dependencies: 29.2.0
+      jest-runner: 29.2.0
+      jest-runtime: 29.2.0
+      jest-snapshot: 29.2.0
+      jest-util: 29.2.0
+      jest-validate: 29.2.0
+      jest-watcher: 29.2.0
       micromatch: 4.0.5
-      pretty-format: 29.1.2
+      pretty-format: 29.2.0
       slash: 3.0.0
       strip-ansi: 6.0.1
     transitivePeerDependencies:
@@ -2552,59 +2564,66 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.1.2:
-    resolution: {integrity: sha512-rG7xZ2UeOfvOVzoLIJ0ZmvPl4tBEQ2n73CZJSlzUjPw4or1oSWC0s0Rk0ZX+pIBJ04aVr6hLWFn1DFtrnf8MhQ==}
+  /@jest/environment/29.2.0:
+    resolution: {integrity: sha512-foaVv1QVPB31Mno3LlL58PxEQQOLZd9zQfCpyQQCQIpUAtdFP1INBjkphxrCfKT13VxpA0z5jFGIkmZk0DAg2Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/fake-timers': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
-      jest-mock: 29.1.2
+      jest-mock: 29.2.0
     dev: true
 
   /@jest/expect-utils/29.1.2:
     resolution: {integrity: sha512-4a48bhKfGj/KAH39u0ppzNTABXQ8QPccWAFUFobWBaEMSMp+sB31Z2fK/l47c4a/Mu1po2ffmfAIPxXbVTXdtg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      jest-get-type: 29.0.0
+      jest-get-type: 29.2.0
     dev: true
 
-  /@jest/expect/29.1.2:
-    resolution: {integrity: sha512-FXw/UmaZsyfRyvZw3M6POgSNqwmuOXJuzdNiMWW9LCYo0GRoRDhg+R5iq5higmRTHQY7hx32+j7WHwinRmoILQ==}
+  /@jest/expect-utils/29.2.0:
+    resolution: {integrity: sha512-nz2IDF7nb1qmj9hx8Ja3MFab2q9Ml8QbOaaeJNyX5JQJHU8QUvEDiMctmhGEkk3Kzr8w8vAqz4hPk/ogJSrUhg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.1.2
-      jest-snapshot: 29.1.2
+      jest-get-type: 29.2.0
+    dev: true
+
+  /@jest/expect/29.2.0:
+    resolution: {integrity: sha512-+3lxcYL9e0xPJGOR33utxxejn+Mulz40kY0oy0FVsmIESW87NZDJ7B1ovaIqeX0xIgPX4laS5SGlqD2uSoBMcw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      expect: 29.2.0
+      jest-snapshot: 29.2.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.1.2:
-    resolution: {integrity: sha512-GppaEqS+QQYegedxVMpCe2xCXxxeYwQ7RsNx55zc8f+1q1qevkZGKequfTASI7ejmg9WwI+SJCrHe9X11bLL9Q==}
+  /@jest/fake-timers/29.2.0:
+    resolution: {integrity: sha512-mX0V0uQsgeSLTt0yTqanAhhpeUKMGd2uq+PSLAfO40h72bvfNNQ7pIEl9vIwNMFxRih1ENveEjSBsLjxGGDPSw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.2
+      '@jest/types': 29.2.0
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.8.5
-      jest-message-util: 29.1.2
-      jest-mock: 29.1.2
-      jest-util: 29.1.2
+      jest-message-util: 29.2.0
+      jest-mock: 29.2.0
+      jest-util: 29.2.0
     dev: true
 
-  /@jest/globals/29.1.2:
-    resolution: {integrity: sha512-uMgfERpJYoQmykAd0ffyMq8wignN4SvLUG6orJQRe9WAlTRc9cdpCaE/29qurXixYJVZWUqIBXhSk8v5xN1V9g==}
+  /@jest/globals/29.2.0:
+    resolution: {integrity: sha512-JQxtEVNWiai1p3PIzAJZSyEqQdAJGvNKvinZDPfu0mhiYEVx6E+PiBuDWj1sVUW8hzu+R3DVqaWC9K2xcLRIAA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.2
-      '@jest/expect': 29.1.2
-      '@jest/types': 29.1.2
-      jest-mock: 29.1.2
+      '@jest/environment': 29.2.0
+      '@jest/expect': 29.2.0
+      '@jest/types': 29.2.0
+      jest-mock: 29.2.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.1.2:
-    resolution: {integrity: sha512-X4fiwwyxy9mnfpxL0g9DD0KcTmEIqP0jUdnc2cfa9riHy+I6Gwwp5vOZiwyg0vZxfSDxrOlK9S4+340W4d+DAA==}
+  /@jest/reporters/29.2.0:
+    resolution: {integrity: sha512-BXoAJatxTZ18U0cwD7C8qBo8V6vef8AXYRBZdhqE5DF9CmpqmhMfw9c7OUvYqMTnBBK9A0NgXGO4Lc9EJzdHvw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2613,10 +2632,10 @@ packages:
         optional: true
     dependencies:
       '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.1.2
-      '@jest/test-result': 29.1.2
-      '@jest/transform': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/console': 29.2.0
+      '@jest/test-result': 29.2.0
+      '@jest/transform': 29.2.0
+      '@jest/types': 29.2.0
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.8.5
       chalk: 4.1.2
@@ -2629,13 +2648,12 @@ packages:
       istanbul-lib-report: 3.0.0
       istanbul-lib-source-maps: 4.0.1
       istanbul-reports: 3.1.5
-      jest-message-util: 29.1.2
-      jest-util: 29.1.2
-      jest-worker: 29.1.2
+      jest-message-util: 29.2.0
+      jest-util: 29.2.0
+      jest-worker: 29.2.0
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
-      terminal-link: 2.1.1
       v8-to-istanbul: 9.0.1
     transitivePeerDependencies:
       - supports-color
@@ -2648,8 +2666,8 @@ packages:
       '@sinclair/typebox': 0.24.19
     dev: true
 
-  /@jest/source-map/29.0.0:
-    resolution: {integrity: sha512-nOr+0EM8GiHf34mq2GcJyz/gYFyLQ2INDhAylrZJ9mMWoW21mLBfZa0BUVPPMxVYrLjeiRe2Z7kWXOGnS0TFhQ==}
+  /@jest/source-map/29.2.0:
+    resolution: {integrity: sha512-1NX9/7zzI0nqa6+kgpSdKPK+WU1p+SJk3TloWZf5MzPbxri9UEeXX5bWZAPCzbQcyuAzubcdUHA7hcNznmRqWQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jridgewell/trace-mapping': 0.3.15
@@ -2667,13 +2685,23 @@ packages:
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.1.2:
-    resolution: {integrity: sha512-fU6dsUqqm8sA+cd85BmeF7Gu9DsXVWFdGn9taxM6xN1cKdcP/ivSgXh5QucFRFz1oZxKv3/9DYYbq0ULly3P/Q==}
+  /@jest/test-result/29.2.0:
+    resolution: {integrity: sha512-l76EPJ6QqtzsCLS4aimJqWO53pxZ82o3aE+Brcmo1HJ/phb9+MR7gPhyDdN6VSGaLJCRVJBZgWEhAEz+qON0Fw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.1.2
+      '@jest/console': 29.2.0
+      '@jest/types': 29.2.0
+      '@types/istanbul-lib-coverage': 2.0.4
+      collect-v8-coverage: 1.0.1
+    dev: true
+
+  /@jest/test-sequencer/29.2.0:
+    resolution: {integrity: sha512-NCnjZcGnVdva6IDqF7TCuFsXs2F1tohiNF9sasSJNzD7VfN5ic9XgcS/oPDalGiPLxCmGKj4kewqqrKAqBACcQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/test-result': 29.2.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.2
+      jest-haste-map: 29.2.0
       slash: 3.0.0
     dev: true
 
@@ -2700,21 +2728,21 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.1.2:
-    resolution: {integrity: sha512-2uaUuVHTitmkx1tHF+eBjb4p7UuzBG7SXIaA/hNIkaMP6K+gXYGxP38ZcrofzqN0HeZ7A90oqsOa97WU7WZkSw==}
+  /@jest/transform/29.2.0:
+    resolution: {integrity: sha512-NXMujGHy+B4DAj4dGnVPD0SIXlR2Z/N8Gp9h3mF66kcIRult1WWqY3/CEIrJcKviNWaFPYhZjCG2L3fteWzcUw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/types': 29.1.2
+      '@jest/types': 29.2.0
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 1.8.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.2
-      jest-regex-util: 29.0.0
-      jest-util: 29.1.2
+      jest-haste-map: 29.2.0
+      jest-regex-util: 29.2.0
+      jest-util: 29.2.0
       micromatch: 4.0.5
       pirates: 4.0.5
       slash: 3.0.0
@@ -2746,6 +2774,18 @@ packages:
       chalk: 4.1.2
     dev: true
 
+  /@jest/types/29.2.0:
+    resolution: {integrity: sha512-mfgpQz4Z2xGo37m6KD8xEpKelaVzvYVRijmLPePn9pxgaPEtX+SqIyPNzzoeCPXKYbB4L/wYSgXDL8o3Gop78Q==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/schemas': 29.0.0
+      '@types/istanbul-lib-coverage': 2.0.4
+      '@types/istanbul-reports': 3.0.1
+      '@types/node': 18.8.5
+      '@types/yargs': 17.0.10
+      chalk: 4.1.2
+    dev: true
+
   /@jridgewell/gen-mapping/0.1.1:
     resolution: {integrity: sha512-sQXCasFk+U8lWYEe66WxRDOE9PjVz4vSM51fTu3Hw+ClTpUSQb718772vH3pyS5pShp6lvQM7SxgIDXXXmOX7w==}
     engines: {node: '>=6.0.0'}
@@ -4082,8 +4122,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.1.2_@babel+core@7.19.0:
-    resolution: {integrity: sha512-IuG+F3HTHryJb7gacC7SQ59A9kO56BctUsT67uJHp1mMCHUOMXpDwOHWGifWqdWVknN2WNkCVQELPjXx0aLJ9Q==}
+  /babel-jest/29.2.0_@babel+core@7.19.0:
+    resolution: {integrity: sha512-c8FkrW1chgcbyBqOo7jFGpQYfVnb43JqjQGV+C2r94k2rZJOukYOZ6+csAqKE4ms+PHc+yevnONxs27jQIxylw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -4092,10 +4132,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/transform': 29.1.2
+      '@jest/transform': 29.2.0
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
-      babel-preset-jest: 29.0.2_@babel+core@7.19.0
+      babel-preset-jest: 29.2.0_@babel+core@7.19.0
       chalk: 4.1.2
       graceful-fs: 4.2.10
       slash: 3.0.0
@@ -4132,8 +4172,8 @@ packages:
       '@types/babel__traverse': 7.17.1
     dev: true
 
-  /babel-plugin-jest-hoist/29.0.2:
-    resolution: {integrity: sha512-eBr2ynAEFjcebVvu8Ktx580BD1QKCrBG1XwEUTXJe285p9HA/4hOhfWCFRQhTKSyBV0VzjhG7H91Eifz9s29hg==}
+  /babel-plugin-jest-hoist/29.2.0:
+    resolution: {integrity: sha512-TnspP2WNiR3GLfCsUNHqeXw0RoQ2f9U5hQ5L3XFpwuO8htQmSrhh8qsB6vi5Yi8+kuynN1yjDjQsPfkebmB6ZA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/template': 7.18.10
@@ -4259,8 +4299,8 @@ packages:
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.18.6
     dev: true
 
-  /babel-preset-jest/29.0.2_@babel+core@7.19.0:
-    resolution: {integrity: sha512-BeVXp7rH5TK96ofyEnHjznjLMQ2nAeDJ+QzxKnHAAMs0RgrQsCywjAN8m4mOm5Di0pxU//3AoEeJJrerMH5UeA==}
+  /babel-preset-jest/29.2.0_@babel+core@7.19.0:
+    resolution: {integrity: sha512-z9JmMJppMxNv8N7fNRHvhMg9cvIkMxQBXgFkane3yKVEvEOP+kB50lk8DFRvF9PGqbyXxlmebKWhuDORO8RgdA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -4269,7 +4309,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      babel-plugin-jest-hoist: 29.0.2
+      babel-plugin-jest-hoist: 29.2.0
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
     dev: true
 
@@ -4844,8 +4884,8 @@ packages:
     resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==}
     dev: false
 
-  /diff-sequences/29.0.0:
-    resolution: {integrity: sha512-7Qe/zd1wxSDL4D/X/FPjOMB+ZMDt71W94KYaq05I2l0oQqgXgs7s4ftYYmV38gBSrPz2vcygxfs1xn0FT+rKNA==}
+  /diff-sequences/29.2.0:
+    resolution: {integrity: sha512-413SY5JpYeSBZxmenGEmCVQ8mCgtFJF0w9PROdaS6z987XC2Pd2GOKqOITLtMftmyFZqgtCOb/QA7/Z3ZXfzIw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
@@ -5248,7 +5288,7 @@ packages:
       eslint: 8.25.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_z7wafoevaiyltka7a37z3wolda:
+  /eslint-config-react-app/7.0.1_4ubwuetphstteqvh3rzlgov3gq:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5268,7 +5308,7 @@ packages:
       eslint: 8.25.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
       eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
-      eslint-plugin-jest: 25.7.0_tyntwui2bgqwveldr4h74k2kni
+      eslint-plugin-jest: 25.7.0_nc3c3bdiyy2hxtl32wv7esmvmq
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
       eslint-plugin-react: 7.31.10_eslint@8.25.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
@@ -5392,7 +5432,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_tyntwui2bgqwveldr4h74k2kni:
+  /eslint-plugin-jest/25.7.0_nc3c3bdiyy2hxtl32wv7esmvmq:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5408,7 +5448,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.1.2_@types+node@18.8.5
+      jest: 29.2.0_@types+node@18.8.5
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5696,6 +5736,17 @@ packages:
       jest-util: 29.1.2
     dev: true
 
+  /expect/29.2.0:
+    resolution: {integrity: sha512-03ClF3GWwUqd9Grgkr9ZSdaCJGMRA69PQ8jT7o+Bx100VlGiAFf9/8oIm9Qve7ZVJhuJxFftqFhviZJRxxNfvg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/expect-utils': 29.2.0
+      jest-get-type: 29.2.0
+      jest-matcher-utils: 29.2.0
+      jest-message-util: 29.2.0
+      jest-util: 29.2.0
+    dev: true
+
   /extend-shallow/2.0.1:
     resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==}
     engines: {node: '>=0.10.0'}
@@ -6593,43 +6644,43 @@ packages:
       istanbul-lib-report: 3.0.0
     dev: true
 
-  /jest-changed-files/29.0.0:
-    resolution: {integrity: sha512-28/iDMDrUpGoCitTURuDqUzWQoWmOmOKOFST1mi2lwh62X4BFf6khgH3uSuo1e49X/UDjuApAj3w0wLOex4VPQ==}
+  /jest-changed-files/29.2.0:
+    resolution: {integrity: sha512-qPVmLLyBmvF5HJrY7krDisx6Voi8DmlV3GZYX0aFNbaQsZeoz1hfxcCMbqDGuQCxU1dJy9eYc2xscE8QrCCYaA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       execa: 5.1.1
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.1.2:
-    resolution: {integrity: sha512-ajQOdxY6mT9GtnfJRZBRYS7toNIJayiiyjDyoZcnvPRUPwJ58JX0ci0PKAKUo2C1RyzlHw0jabjLGKksO42JGA==}
+  /jest-circus/29.2.0:
+    resolution: {integrity: sha512-bpJRMe+VtvYlF3q8JNx+/cAo4FYvNCiR5s7Z0Scf8aC+KJ2ineSjZKtw1cIZbythlplkiro0My8nc65pfCqJ3A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.2
-      '@jest/expect': 29.1.2
-      '@jest/test-result': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/environment': 29.2.0
+      '@jest/expect': 29.2.0
+      '@jest/test-result': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
       is-generator-fn: 2.1.0
-      jest-each: 29.1.2
-      jest-matcher-utils: 29.1.2
-      jest-message-util: 29.1.2
-      jest-runtime: 29.1.2
-      jest-snapshot: 29.1.2
-      jest-util: 29.1.2
+      jest-each: 29.2.0
+      jest-matcher-utils: 29.2.0
+      jest-message-util: 29.2.0
+      jest-runtime: 29.2.0
+      jest-snapshot: 29.2.0
+      jest-util: 29.2.0
       p-limit: 3.1.0
-      pretty-format: 29.1.2
+      pretty-format: 29.2.0
       slash: 3.0.0
       stack-utils: 2.0.5
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-cli/29.1.2_@types+node@18.8.5:
-    resolution: {integrity: sha512-vsvBfQ7oS2o4MJdAH+4u9z76Vw5Q8WBQF5MchDbkylNknZdrPTX1Ix7YRJyTlOWqRaS7ue/cEAn+E4V1MWyMzw==}
+  /jest-cli/29.2.0_@types+node@18.8.5:
+    resolution: {integrity: sha512-/581TzbXeO+5kbtSlhXEthGiVJCC8AP0jgT0iZINAAMW+tTFj2uWU7z+HNUH5yIYdHV7AvRr0fWLrmHJGIruHg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6638,16 +6689,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.1.2
-      '@jest/test-result': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/core': 29.2.0
+      '@jest/test-result': 29.2.0
+      '@jest/types': 29.2.0
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.1.2_@types+node@18.8.5
-      jest-util: 29.1.2
-      jest-validate: 29.1.2
+      jest-config: 29.2.0_@types+node@18.8.5
+      jest-util: 29.2.0
+      jest-validate: 29.2.0
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6656,8 +6707,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.1.2_@types+node@18.8.5:
-    resolution: {integrity: sha512-EC3Zi86HJUOz+2YWQcJYQXlf0zuBhJoeyxLM6vb6qJsVmpP7KcCP1JnyF0iaqTaXdBP8Rlwsvs7hnKWQWWLwwA==}
+  /jest-config/29.2.0_@types+node@18.8.5:
+    resolution: {integrity: sha512-IkdCsrHIoxDPZAyFcdtQrCQ3uftLqns6Joj0tlbxiAQW4k/zTXmIygqWBmPNxO9FbFkDrhtYZiLHXjaJh9rS+Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6669,89 +6720,93 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/test-sequencer': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/test-sequencer': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
-      babel-jest: 29.1.2_@babel+core@7.19.0
+      babel-jest: 29.2.0_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.1.2
-      jest-environment-node: 29.1.2
-      jest-get-type: 29.0.0
-      jest-regex-util: 29.0.0
-      jest-resolve: 29.1.2
-      jest-runner: 29.1.2
-      jest-util: 29.1.2
-      jest-validate: 29.1.2
+      jest-circus: 29.2.0
+      jest-environment-node: 29.2.0
+      jest-get-type: 29.2.0
+      jest-regex-util: 29.2.0
+      jest-resolve: 29.2.0
+      jest-runner: 29.2.0
+      jest-util: 29.2.0
+      jest-validate: 29.2.0
       micromatch: 4.0.5
       parse-json: 5.2.0
-      pretty-format: 29.1.2
+      pretty-format: 29.2.0
       slash: 3.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-diff/29.1.2:
-    resolution: {integrity: sha512-4GQts0aUopVvecIT4IwD/7xsBaMhKTYoM4/njE/aVw9wpw+pIUVp8Vab/KnSzSilr84GnLBkaP3JLDnQYCKqVQ==}
+  /jest-diff/29.2.0:
+    resolution: {integrity: sha512-GsH07qQL+/D/GxlnU+sSg9GL3fBOcuTlmtr3qr2pnkiODCwubNN2/7slW4m3CvxDsEus/VEOfQKRFLyXsUlnZw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
-      diff-sequences: 29.0.0
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.2
+      diff-sequences: 29.2.0
+      jest-get-type: 29.2.0
+      pretty-format: 29.2.0
     dev: true
 
-  /jest-docblock/29.0.0:
-    resolution: {integrity: sha512-s5Kpra/kLzbqu9dEjov30kj1n4tfu3e7Pl8v+f8jOkeWNqM6Ds8jRaJfZow3ducoQUrf2Z4rs2N5S3zXnb83gw==}
+  /jest-docblock/29.2.0:
+    resolution: {integrity: sha512-bkxUsxTgWQGbXV5IENmfiIuqZhJcyvF7tU4zJ/7ioTutdz4ToB5Yx6JOFBpgI+TphRY4lhOyCWGNH/QFQh5T6A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       detect-newline: 3.1.0
     dev: true
 
-  /jest-each/29.1.2:
-    resolution: {integrity: sha512-AmTQp9b2etNeEwMyr4jc0Ql/LIX/dhbgP21gHAizya2X6rUspHn2gysMXaj6iwWuOJ2sYRgP8c1P4cXswgvS1A==}
+  /jest-each/29.2.0:
+    resolution: {integrity: sha512-h4LeC3L/R7jIMfTdYowevPIssvcPYQ7Qzs+pCSYsJgPztIizXwKmnfhZXBA4WVqdmvMcpmseYEXb67JT7IJ2eg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.2
+      '@jest/types': 29.2.0
       chalk: 4.1.2
-      jest-get-type: 29.0.0
-      jest-util: 29.1.2
-      pretty-format: 29.1.2
+      jest-get-type: 29.2.0
+      jest-util: 29.2.0
+      pretty-format: 29.2.0
     dev: true
 
-  /jest-environment-jsdom/29.1.2:
-    resolution: {integrity: sha512-D+XNIKia5+uDjSMwL/G1l6N9MCb7LymKI8FpcLo7kkISjc/Sa9w+dXXEa7u1Wijo3f8sVLqfxdGqYtRhmca+Xw==}
+  /jest-environment-jsdom/29.2.0:
+    resolution: {integrity: sha512-DgHbBxC4RmHpDLFLMt00NjXXimGvtNALRyxQYOo3e6vwq1qsIDqXsEZiuEpjTg0BueENE1mx8BKFKHXArEdRQQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    peerDependencies:
+      canvas: ^2.5.0
+    peerDependenciesMeta:
+      canvas:
+        optional: true
     dependencies:
-      '@jest/environment': 29.1.2
-      '@jest/fake-timers': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/environment': 29.2.0
+      '@jest/fake-timers': 29.2.0
+      '@jest/types': 29.2.0
       '@types/jsdom': 20.0.0
       '@types/node': 18.8.5
-      jest-mock: 29.1.2
-      jest-util: 29.1.2
+      jest-mock: 29.2.0
+      jest-util: 29.2.0
       jsdom: 20.0.0
     transitivePeerDependencies:
       - bufferutil
-      - canvas
       - supports-color
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.1.2:
-    resolution: {integrity: sha512-C59yVbdpY8682u6k/lh8SUMDJPbOyCHOTgLVVi1USWFxtNV+J8fyIwzkg+RJIVI30EKhKiAGNxYaFr3z6eyNhQ==}
+  /jest-environment-node/29.2.0:
+    resolution: {integrity: sha512-b4qQGVStPMvtZG97Ac0rvnmSIjCZturFU7MQRMp4JDFl7zoaDLTtXmFjFP1tNmi9te6kR8d+Htbv3nYeoaIz6g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.2
-      '@jest/fake-timers': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/environment': 29.2.0
+      '@jest/fake-timers': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
-      jest-mock: 29.1.2
-      jest-util: 29.1.2
+      jest-mock: 29.2.0
+      jest-util: 29.2.0
     dev: true
 
   /jest-get-type/29.0.0:
@@ -6759,6 +6814,11 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
+  /jest-get-type/29.2.0:
+    resolution: {integrity: sha512-uXNJlg8hKFEnDgFsrCjznB+sTxdkuqiCL6zMgA75qEbAJjJYTs9XPrvDctrEig2GDow22T/LvHgO57iJhXB/UA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dev: true
+
   /jest-haste-map/26.6.2:
     resolution: {integrity: sha512-easWIJXIw71B2RdR8kgqpjQrbMRWQBgiBwXYEhtGUTaX+doCjBheluShdDMeR8IMfJiTqH4+zfhtg29apJf/8w==}
     engines: {node: '>= 10.14.2'}
@@ -6782,31 +6842,31 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.1.2:
-    resolution: {integrity: sha512-xSjbY8/BF11Jh3hGSPfYTa/qBFrm3TPM7WU8pU93m2gqzORVLkHFWvuZmFsTEBPRKndfewXhMOuzJNHyJIZGsw==}
+  /jest-haste-map/29.2.0:
+    resolution: {integrity: sha512-qu9lGFi7qJ8v37egS1phZZUJYiMyWnKwu83NlNT1qs50TbedIX2hFl+9ztsJ7U/ENaHwk1/Bs8fqOIQsScIRwg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.2
+      '@jest/types': 29.2.0
       '@types/graceful-fs': 4.1.5
       '@types/node': 18.8.5
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
-      jest-regex-util: 29.0.0
-      jest-util: 29.1.2
-      jest-worker: 29.1.2
+      jest-regex-util: 29.2.0
+      jest-util: 29.2.0
+      jest-worker: 29.2.0
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.2
     dev: true
 
-  /jest-leak-detector/29.1.2:
-    resolution: {integrity: sha512-TG5gAZJpgmZtjb6oWxBLf2N6CfQ73iwCe6cofu/Uqv9iiAm6g502CAnGtxQaTfpHECBdVEMRBhomSXeLnoKjiQ==}
+  /jest-leak-detector/29.2.0:
+    resolution: {integrity: sha512-FXT9sCFdct42+oOqGIr/9kmUw3RbhvpkwidCBT5ySHHoWNGd3c9n7HXpFKjEz9UnUITRCGdn0q2s6Sxrq36kwg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.2
+      jest-get-type: 29.2.0
+      pretty-format: 29.2.0
     dev: true
 
   /jest-matcher-utils/29.1.2:
@@ -6814,9 +6874,19 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
-      jest-diff: 29.1.2
-      jest-get-type: 29.0.0
-      pretty-format: 29.1.2
+      jest-diff: 29.2.0
+      jest-get-type: 29.2.0
+      pretty-format: 29.2.0
+    dev: true
+
+  /jest-matcher-utils/29.2.0:
+    resolution: {integrity: sha512-FcEfKZ4vm28yCdBsvC69EkrEhcfex+IYlRctNJXsRG9+WC3WxgBNORnECIgqUtj7o/h1d8o7xB/dFUiLi4bqtw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      jest-diff: 29.2.0
+      jest-get-type: 29.2.0
+      pretty-format: 29.2.0
     dev: true
 
   /jest-message-util/29.1.2:
@@ -6824,26 +6894,41 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@jest/types': 29.1.2
+      '@jest/types': 29.2.0
       '@types/stack-utils': 2.0.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
       micromatch: 4.0.5
-      pretty-format: 29.1.2
+      pretty-format: 29.2.0
       slash: 3.0.0
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.1.2:
-    resolution: {integrity: sha512-PFDAdjjWbjPUtQPkQufvniXIS3N9Tv7tbibePEjIIprzjgo0qQlyUiVMrT4vL8FaSJo1QXifQUOuPH3HQC/aMA==}
+  /jest-message-util/29.2.0:
+    resolution: {integrity: sha512-arBfk5yMFMTnMB22GyG601xGSGthA02vWSewPaxoFo0F9wBqDOyxccPbCcYu8uibw3kduSHXdCOd1PsLSgdomg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.2
-      '@types/node': 18.8.5
-      jest-util: 29.1.2
+      '@babel/code-frame': 7.18.6
+      '@jest/types': 29.2.0
+      '@types/stack-utils': 2.0.1
+      chalk: 4.1.2
+      graceful-fs: 4.2.10
+      micromatch: 4.0.5
+      pretty-format: 29.2.0
+      slash: 3.0.0
+      stack-utils: 2.0.5
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.1.2:
+  /jest-mock/29.2.0:
+    resolution: {integrity: sha512-aiWGR0P8ivssIO17xkehLGFtCcef2ZwQFNPwEer1jQLHxPctDlIg3Hs6QMq1KpPz5dkCcgM7mwGif4a9IPznlg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.2.0
+      '@types/node': 18.8.5
+      jest-util: 29.2.0
+    dev: true
+
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.2.0:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6852,7 +6937,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.1.2
+      jest-resolve: 29.2.0
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6865,84 +6950,89 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.1.2:
-    resolution: {integrity: sha512-44yYi+yHqNmH3OoWZvPgmeeiwKxhKV/0CfrzaKLSkZG9gT973PX8i+m8j6pDrTYhhHoiKfF3YUFg/6AeuHw4HQ==}
+  /jest-regex-util/29.2.0:
+    resolution: {integrity: sha512-6yXn0kg2JXzH30cr2NlThF+70iuO/3irbaB4mh5WyqNIvLLP+B6sFdluO1/1RJmslyh/f9osnefECflHvTbwVA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dev: true
+
+  /jest-resolve-dependencies/29.2.0:
+    resolution: {integrity: sha512-Cd0Z39sDntEnfR9PoUdFHUAGDvtKI0/7Wt73l3lt03A3yQ+A6Qi3XmBuqGjdFl2QbXaPa937oLhilG612P8HGQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      jest-regex-util: 29.0.0
-      jest-snapshot: 29.1.2
+      jest-regex-util: 29.2.0
+      jest-snapshot: 29.2.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.1.2:
-    resolution: {integrity: sha512-7fcOr+k7UYSVRJYhSmJHIid3AnDBcLQX3VmT9OSbPWsWz1MfT7bcoerMhADKGvKCoMpOHUQaDHtQoNp/P9JMGg==}
+  /jest-resolve/29.2.0:
+    resolution: {integrity: sha512-f5c0ljNg2guDBCC7wi92vAhNuA0BtAG5vkY7Fob0c7sUMU1g87mTXqRmjrVFe2XvdwP5m5T/e5KJsCKu9hRvBA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.2
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.1.2
-      jest-util: 29.1.2
-      jest-validate: 29.1.2
+      jest-haste-map: 29.2.0
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.2.0
+      jest-util: 29.2.0
+      jest-validate: 29.2.0
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.1.2:
-    resolution: {integrity: sha512-yy3LEWw8KuBCmg7sCGDIqKwJlULBuNIQa2eFSVgVASWdXbMYZ9H/X0tnXt70XFoGf92W2sOQDOIFAA6f2BG04Q==}
+  /jest-runner/29.2.0:
+    resolution: {integrity: sha512-VPBrCwl9fM2mc5yk6yZhNrgXzRJMD5jfLmntkMLlrVq4hQPWbRK998iJlR+DOGCO04TC9PPYLntOJ001Vnf28g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.1.2
-      '@jest/environment': 29.1.2
-      '@jest/test-result': 29.1.2
-      '@jest/transform': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/console': 29.2.0
+      '@jest/environment': 29.2.0
+      '@jest/test-result': 29.2.0
+      '@jest/transform': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
-      jest-docblock: 29.0.0
-      jest-environment-node: 29.1.2
-      jest-haste-map: 29.1.2
-      jest-leak-detector: 29.1.2
-      jest-message-util: 29.1.2
-      jest-resolve: 29.1.2
-      jest-runtime: 29.1.2
-      jest-util: 29.1.2
-      jest-watcher: 29.1.2
-      jest-worker: 29.1.2
+      jest-docblock: 29.2.0
+      jest-environment-node: 29.2.0
+      jest-haste-map: 29.2.0
+      jest-leak-detector: 29.2.0
+      jest-message-util: 29.2.0
+      jest-resolve: 29.2.0
+      jest-runtime: 29.2.0
+      jest-util: 29.2.0
+      jest-watcher: 29.2.0
+      jest-worker: 29.2.0
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.1.2:
-    resolution: {integrity: sha512-jr8VJLIf+cYc+8hbrpt412n5jX3tiXmpPSYTGnwcvNemY+EOuLNiYnHJ3Kp25rkaAcTWOEI4ZdOIQcwYcXIAZw==}
+  /jest-runtime/29.2.0:
+    resolution: {integrity: sha512-+GDmzCrswQF+mvI0upTYMe/OPYnlRRNLLDHM9AFLp2y7zxWoDoYgb8DL3WwJ8d9m743AzrnvBV9JQHi/0ed7dg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.1.2
-      '@jest/fake-timers': 29.1.2
-      '@jest/globals': 29.1.2
-      '@jest/source-map': 29.0.0
-      '@jest/test-result': 29.1.2
-      '@jest/transform': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/environment': 29.2.0
+      '@jest/fake-timers': 29.2.0
+      '@jest/globals': 29.2.0
+      '@jest/source-map': 29.2.0
+      '@jest/test-result': 29.2.0
+      '@jest/transform': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.1.2
-      jest-message-util: 29.1.2
-      jest-mock: 29.1.2
-      jest-regex-util: 29.0.0
-      jest-resolve: 29.1.2
-      jest-snapshot: 29.1.2
-      jest-util: 29.1.2
+      jest-haste-map: 29.2.0
+      jest-message-util: 29.2.0
+      jest-mock: 29.2.0
+      jest-regex-util: 29.2.0
+      jest-resolve: 29.2.0
+      jest-snapshot: 29.2.0
+      jest-util: 29.2.0
       slash: 3.0.0
       strip-bom: 4.0.0
     transitivePeerDependencies:
@@ -6957,8 +7047,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.1.2:
-    resolution: {integrity: sha512-rYFomGpVMdBlfwTYxkUp3sjD6usptvZcONFYNqVlaz4EpHPnDvlWjvmOQ9OCSNKqYZqLM2aS3wq01tWujLg7gg==}
+  /jest-snapshot/29.2.0:
+    resolution: {integrity: sha512-YCKrOR0PLRXROmww73fHO9oeY4tL+LPQXWR3yml1+hKbQDR8j1VUrVzB65hKSJJgxBOr1vWx+hmz2by8JjAU5w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -6967,23 +7057,23 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
       '@babel/traverse': 7.19.0
       '@babel/types': 7.19.0
-      '@jest/expect-utils': 29.1.2
-      '@jest/transform': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/expect-utils': 29.2.0
+      '@jest/transform': 29.2.0
+      '@jest/types': 29.2.0
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
       chalk: 4.1.2
-      expect: 29.1.2
+      expect: 29.2.0
       graceful-fs: 4.2.10
-      jest-diff: 29.1.2
-      jest-get-type: 29.0.0
-      jest-haste-map: 29.1.2
-      jest-matcher-utils: 29.1.2
-      jest-message-util: 29.1.2
-      jest-util: 29.1.2
+      jest-diff: 29.2.0
+      jest-get-type: 29.2.0
+      jest-haste-map: 29.2.0
+      jest-matcher-utils: 29.2.0
+      jest-message-util: 29.2.0
+      jest-util: 29.2.0
       natural-compare: 1.4.0
-      pretty-format: 29.1.2
+      pretty-format: 29.2.0
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -7009,7 +7099,7 @@ packages:
     resolution: {integrity: sha512-vPCk9F353i0Ymx3WQq3+a4lZ07NXu9Ca8wya6o4Fe4/aO1e1awMMprZ3woPFpKwghEOW+UXgd15vVotuNN9ONQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.2
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -7017,19 +7107,31 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.1.2:
-    resolution: {integrity: sha512-k71pOslNlV8fVyI+mEySy2pq9KdXdgZtm7NHrBX8LghJayc3wWZH0Yr0mtYNGaCU4F1OLPXRkwZR0dBm/ClshA==}
+  /jest-util/29.2.0:
+    resolution: {integrity: sha512-8M1dx12ujkBbnhwytrezWY0Ut79hbflwodE+qZKjxSRz5qt4xDp6dQQJaOCFvCmE0QJqp9KyEK33lpPNjnhevw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.1.2
-      camelcase: 6.3.0
+      '@jest/types': 29.2.0
+      '@types/node': 18.8.5
       chalk: 4.1.2
-      jest-get-type: 29.0.0
-      leven: 3.1.0
-      pretty-format: 29.1.2
+      ci-info: 3.3.2
+      graceful-fs: 4.2.10
+      picomatch: 2.3.1
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.1.2:
+  /jest-validate/29.2.0:
+    resolution: {integrity: sha512-4Vl51bPNeFeDok9aJiOnrC6tqJbOp4iMCYlewoC2ZzYJZ5+6pfr3KObAdx5wP8auHcg2MRaguiqj5OdScZa72g==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.2.0
+      camelcase: 6.3.0
+      chalk: 4.1.2
+      jest-get-type: 29.2.0
+      leven: 3.1.0
+      pretty-format: 29.2.0
+    dev: true
+
+  /jest-watch-typeahead/2.2.0_jest@29.2.0:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -7037,7 +7139,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.1.2_@types+node@18.8.5
+      jest: 29.2.0_@types+node@18.8.5
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7059,17 +7161,17 @@ packages:
       string-length: 4.0.2
     dev: true
 
-  /jest-watcher/29.1.2:
-    resolution: {integrity: sha512-6JUIUKVdAvcxC6bM8/dMgqY2N4lbT+jZVsxh0hCJRbwkIEnbr/aPjMQ28fNDI5lB51Klh00MWZZeVf27KBUj5w==}
+  /jest-watcher/29.2.0:
+    resolution: {integrity: sha512-bRh0JdUeN+cl9XfK7tMnXLm4Mv70hG2SZlqbkFe5CTs7oeCkbwlGBk/mEfEJ63mrxZ8LPbnfaMpfSmkhEQBEGA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/test-result': 29.2.0
+      '@jest/types': 29.2.0
       '@types/node': 18.8.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.1.2
+      jest-util: 29.2.0
       string-length: 4.0.2
     dev: true
 
@@ -7082,18 +7184,18 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.1.2:
-    resolution: {integrity: sha512-AdTZJxKjTSPHbXT/AIOjQVmoFx0LHFcVabWu0sxI7PAy7rFf8c0upyvgBKgguVXdM4vY74JdwkyD4hSmpTW8jA==}
+  /jest-worker/29.2.0:
+    resolution: {integrity: sha512-mluOlMbRX1H59vGVzPcVg2ALfCausbBpxC8a2KWOzInhYHZibbHH8CB0C1JkmkpfurrkOYgF7FPmypuom1OM9A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 18.8.5
-      jest-util: 29.1.2
+      jest-util: 29.2.0
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.1.2_@types+node@18.8.5:
-    resolution: {integrity: sha512-5wEIPpCezgORnqf+rCaYD1SK+mNN7NsstWzIsuvsnrhR/hSxXWd82oI7DkrbJ+XTD28/eG8SmxdGvukrGGK6Tw==}
+  /jest/29.2.0_@types+node@18.8.5:
+    resolution: {integrity: sha512-6krPemKUXCEu5Fh3j6ZVoLMjpTQVm0OCU+7f3K/9gllX8wNIE6NSCQ6s0q2RDoiKLRaQlVRHyscjSPRPqCI0Fg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7102,10 +7204,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/core': 29.2.0
+      '@jest/types': 29.2.0
       import-local: 3.1.0
-      jest-cli: 29.1.2_@types+node@18.8.5
+      jest-cli: 29.2.0_@types+node@18.8.5
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -8007,6 +8109,15 @@ packages:
       react-is: 18.2.0
     dev: true
 
+  /pretty-format/29.2.0:
+    resolution: {integrity: sha512-QCSUFdwOi924g24czhOH5eTkXxUCqlLGZBRCySlwDYHIXRJkdGyjJc9nZaqhlFBZws8dq5Dvk0lCilsmlfsPxw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/schemas': 29.0.0
+      ansi-styles: 5.2.0
+      react-is: 18.2.0
+    dev: true
+
   /prompts/2.4.2:
     resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
     engines: {node: '>= 6'}
@@ -8821,14 +8932,6 @@ packages:
       has-flag: 4.0.0
     dev: true
 
-  /supports-hyperlinks/2.2.0:
-    resolution: {integrity: sha512-6sXEzV5+I5j8Bmq9/vUphGRM/RJNT9SCURJLjwfOg51heRtguGWDzcaBlgAzKhQa0EVNpPEKzQuBwZ8S8WaCeQ==}
-    engines: {node: '>=8'}
-    dependencies:
-      has-flag: 4.0.0
-      supports-color: 7.2.0
-    dev: true
-
   /supports-preserve-symlinks-flag/1.0.0:
     resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
     engines: {node: '>= 0.4'}
@@ -8854,14 +8957,6 @@ packages:
     engines: {node: '>=6'}
     dev: true
 
-  /terminal-link/2.1.1:
-    resolution: {integrity: sha512-un0FmiRUQNr5PJqy9kP7c40F5BOfpGlYTrxonDChEZB7pzZxRNp/bt+ymiy9/npwXya9KH99nJ/GXFIiUkYGFQ==}
-    engines: {node: '>=8'}
-    dependencies:
-      ansi-escapes: 4.3.2
-      supports-hyperlinks: 2.2.0
-    dev: true
-
   /test-exclude/6.0.0:
     resolution: {integrity: sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==}
     engines: {node: '>=8'}

From c6e1197750f334d773e919cd1ed858a5b639b1dd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 15 Oct 2022 11:51:02 +1100
Subject: [PATCH 129/263] build(deps): update postgres docker tag to v15
 (#4182)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/postgres/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/postgres/docker-compose.yml b/internal/suites/example/compose/postgres/docker-compose.yml
index 715e1f841..1e19a6f66 100644
--- a/internal/suites/example/compose/postgres/docker-compose.yml
+++ b/internal/suites/example/compose/postgres/docker-compose.yml
@@ -2,7 +2,7 @@
 version: "3"
 services:
   postgres:
-    image: postgres:14
+    image: postgres:15
     environment:
       - POSTGRES_PASSWORD=password
       - POSTGRES_USER=admin

From f1db5c44700812c360ed1b88ee41356608889ec4 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 15 Oct 2022 13:39:14 +1100
Subject: [PATCH 130/263] build(deps): update dependency esbuild to v0.15.11
 (#4180)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 148 ++++++++++++++++++++++-----------------------
 2 files changed, 75 insertions(+), 75 deletions(-)

diff --git a/web/package.json b/web/package.json
index 7b9800195..f527e99ac 100644
--- a/web/package.json
+++ b/web/package.json
@@ -156,7 +156,7 @@
     "@typescript-eslint/eslint-plugin": "5.40.0",
     "@typescript-eslint/parser": "5.40.0",
     "@vitejs/plugin-react": "2.1.0",
-    "esbuild": "0.15.10",
+    "esbuild": "0.15.11",
     "esbuild-jest": "0.5.0",
     "eslint": "8.25.0",
     "eslint-config-prettier": "8.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 3b5c88aca..b434b4fb8 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -27,7 +27,7 @@ specifiers:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  esbuild: 0.15.10
+  esbuild: 0.15.11
   esbuild-jest: 0.5.0
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0
@@ -106,8 +106,8 @@ devDependencies:
   '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
   '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
   '@vitejs/plugin-react': 2.1.0_vite@3.1.8
-  esbuild: 0.15.10
-  esbuild-jest: 0.5.0_esbuild@0.15.10
+  esbuild: 0.15.11
+  esbuild-jest: 0.5.0_esbuild@0.15.11
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0_eslint@8.25.0
   eslint-config-react-app: 7.0.1_4ubwuetphstteqvh3rzlgov3gq
@@ -2386,8 +2386,8 @@ packages:
     resolution: {integrity: sha512-AHPmaAx+RYfZz0eYu6Gviiagpmiyw98ySSlQvCUhVGDRtDFe4DBS0x1bSjdF3gqUDYOczB+yYvBTtEylYSdRhg==}
     dev: false
 
-  /@esbuild/android-arm/0.15.10:
-    resolution: {integrity: sha512-FNONeQPy/ox+5NBkcSbYJxoXj9GWu8gVGJTVmUyoOCKQFDTrHVKgNSzChdNt0I8Aj/iKcsDf2r9BFwv+FSNUXg==}
+  /@esbuild/android-arm/0.15.11:
+    resolution: {integrity: sha512-PzMcQLazLBkwDEkrNPi9AbjFt6+3I7HKbiYF2XtWQ7wItrHvEOeO3T8Am434zAozWtVP7lrTue1bEfc2nYWeCA==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [android]
@@ -2395,8 +2395,8 @@ packages:
     dev: true
     optional: true
 
-  /@esbuild/linux-loong64/0.15.10:
-    resolution: {integrity: sha512-w0Ou3Z83LOYEkwaui2M8VwIp+nLi/NA60lBLMvaJ+vXVMcsARYdEzLNE7RSm4+lSg4zq4d7fAVuzk7PNQ5JFgg==}
+  /@esbuild/linux-loong64/0.15.11:
+    resolution: {integrity: sha512-geWp637tUhNmhL3Xgy4Bj703yXB9dqiLJe05lCUfjSFDrQf9C/8pArusyPUbUbPwlC/EAUjBw32sxuIl/11dZw==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
@@ -5025,8 +5025,8 @@ packages:
       is-symbol: 1.0.4
     dev: true
 
-  /esbuild-android-64/0.15.10:
-    resolution: {integrity: sha512-UI7krF8OYO1N7JYTgLT9ML5j4+45ra3amLZKx7LO3lmLt1Ibn8t3aZbX5Pu4BjWiqDuJ3m/hsvhPhK/5Y/YpnA==}
+  /esbuild-android-64/0.15.11:
+    resolution: {integrity: sha512-rrwoXEiuI1kaw4k475NJpexs8GfJqQUKcD08VR8sKHmuW9RUuTR2VxcupVvHdiGh9ihxL9m3lpqB1kju92Ialw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
@@ -5034,8 +5034,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-android-arm64/0.15.10:
-    resolution: {integrity: sha512-EOt55D6xBk5O05AK8brXUbZmoFj4chM8u3riGflLa6ziEoVvNjRdD7Cnp82NHQGfSHgYR06XsPI8/sMuA/cUwg==}
+  /esbuild-android-arm64/0.15.11:
+    resolution: {integrity: sha512-/hDubOg7BHOhUUsT8KUIU7GfZm5bihqssvqK5PfO4apag7YuObZRZSzViyEKcFn2tPeHx7RKbSBXvAopSHDZJQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
@@ -5043,8 +5043,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-64/0.15.10:
-    resolution: {integrity: sha512-hbDJugTicqIm+WKZgp208d7FcXcaK8j2c0l+fqSJ3d2AzQAfjEYDRM3Z2oMeqSJ9uFxyj/muSACLdix7oTstRA==}
+  /esbuild-darwin-64/0.15.11:
+    resolution: {integrity: sha512-1DqHD0ms3AhiwkKnjRUzmiW7JnaJJr5FKrPiR7xuyMwnjDqvNWDdMq4rKSD9OC0piFNK6n0LghsglNMe2MwJtA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
@@ -5052,8 +5052,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-arm64/0.15.10:
-    resolution: {integrity: sha512-M1t5+Kj4IgSbYmunf2BB6EKLkWUq+XlqaFRiGOk8bmBapu9bCDrxjf4kUnWn59Dka3I27EiuHBKd1rSO4osLFQ==}
+  /esbuild-darwin-arm64/0.15.11:
+    resolution: {integrity: sha512-OMzhxSbS0lwwrW40HHjRCeVIJTURdXFA8c3GU30MlHKuPCcvWNUIKVucVBtNpJySXmbkQMDJdJNrXzNDyvoqvQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
@@ -5061,8 +5061,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-64/0.15.10:
-    resolution: {integrity: sha512-KMBFMa7C8oc97nqDdoZwtDBX7gfpolkk6Bcmj6YFMrtCMVgoU/x2DI1p74DmYl7CSS6Ppa3xgemrLrr5IjIn0w==}
+  /esbuild-freebsd-64/0.15.11:
+    resolution: {integrity: sha512-8dKP26r0/Qyez8nTCwpq60QbuYKOeBygdgOAWGCRalunyeqWRoSZj9TQjPDnTTI9joxd3QYw3UhVZTKxO9QdRg==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
@@ -5070,8 +5070,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-arm64/0.15.10:
-    resolution: {integrity: sha512-m2KNbuCX13yQqLlbSojFMHpewbn8wW5uDS6DxRpmaZKzyq8Dbsku6hHvh2U+BcLwWY4mpgXzFUoENEf7IcioGg==}
+  /esbuild-freebsd-arm64/0.15.11:
+    resolution: {integrity: sha512-aSGiODiukLGGnSg/O9+cGO2QxEacrdCtCawehkWYTt5VX1ni2b9KoxpHCT9h9Y6wGqNHmXFnB47RRJ8BIqZgmQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
@@ -5079,7 +5079,7 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-jest/0.5.0_esbuild@0.15.10:
+  /esbuild-jest/0.5.0_esbuild@0.15.11:
     resolution: {integrity: sha512-AMZZCdEpXfNVOIDvURlqYyHwC8qC1/BFjgsrOiSL1eyiIArVtHL8YAC83Shhn16cYYoAWEW17yZn0W/RJKJKHQ==}
     peerDependencies:
       esbuild: '>=0.8.50'
@@ -5087,13 +5087,13 @@ packages:
       '@babel/core': 7.18.6
       '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.6
       babel-jest: 26.6.3_@babel+core@7.18.6
-      esbuild: 0.15.10
+      esbuild: 0.15.11
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /esbuild-linux-32/0.15.10:
-    resolution: {integrity: sha512-guXrwSYFAvNkuQ39FNeV4sNkNms1bLlA5vF1H0cazZBOLdLFIny6BhT+TUbK/hdByMQhtWQ5jI9VAmPKbVPu1w==}
+  /esbuild-linux-32/0.15.11:
+    resolution: {integrity: sha512-lsrAfdyJBGx+6aHIQmgqUonEzKYeBnyfJPkT6N2dOf1RoXYYV1BkWB6G02tjsrz1d5wZzaTc3cF+TKmuTo/ZwA==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
@@ -5101,8 +5101,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-64/0.15.10:
-    resolution: {integrity: sha512-jd8XfaSJeucMpD63YNMO1JCrdJhckHWcMv6O233bL4l6ogQKQOxBYSRP/XLWP+6kVTu0obXovuckJDcA0DKtQA==}
+  /esbuild-linux-64/0.15.11:
+    resolution: {integrity: sha512-Y2Rh+PcyVhQqXKBTacPCltINN3uIw2xC+dsvLANJ1SpK5NJUtxv8+rqWpjmBgaNWKQT1/uGpMmA9olALy9PLVA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
@@ -5110,8 +5110,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm/0.15.10:
-    resolution: {integrity: sha512-6N8vThLL/Lysy9y4Ex8XoLQAlbZKUyExCWyayGi2KgTBelKpPgj6RZnUaKri0dHNPGgReJriKVU6+KDGQwn10A==}
+  /esbuild-linux-arm/0.15.11:
+    resolution: {integrity: sha512-TJllTVk5aSyqPFvvcHTvf6Wu1ZKhWpJ/qNmZO8LL/XeB+LXCclm7HQHNEIz6MT7IX8PmlC1BZYrOiw2sXSB95A==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
@@ -5119,8 +5119,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm64/0.15.10:
-    resolution: {integrity: sha512-GByBi4fgkvZFTHFDYNftu1DQ1GzR23jws0oWyCfhnI7eMOe+wgwWrc78dbNk709Ivdr/evefm2PJiUBMiusS1A==}
+  /esbuild-linux-arm64/0.15.11:
+    resolution: {integrity: sha512-uhcXiTwTmD4OpxJu3xC5TzAAw6Wzf9O1XGWL448EE9bqGjgV1j+oK3lIHAfsHnuIn8K4nDW8yjX0Sv5S++oRuw==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
@@ -5128,8 +5128,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-mips64le/0.15.10:
-    resolution: {integrity: sha512-BxP+LbaGVGIdQNJUNF7qpYjEGWb0YyHVSKqYKrn+pTwH/SiHUxFyJYSP3pqkku61olQiSBnSmWZ+YUpj78Tw7Q==}
+  /esbuild-linux-mips64le/0.15.11:
+    resolution: {integrity: sha512-WD61y/R1M4BLe4gxXRypoQ0Ci+Vjf714QYzcPNkiYv5I8K8WDz2ZR8Bm6cqKxd6rD+e/rZgPDbhQ9PCf7TMHmA==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
@@ -5137,8 +5137,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-ppc64le/0.15.10:
-    resolution: {integrity: sha512-LoSQCd6498PmninNgqd/BR7z3Bsk/mabImBWuQ4wQgmQEeanzWd5BQU2aNi9mBURCLgyheuZS6Xhrw5luw3OkQ==}
+  /esbuild-linux-ppc64le/0.15.11:
+    resolution: {integrity: sha512-JVleZS9oPVLTlBhPTWgOwxFWU/wMUdlBwTbGA4GF8c38sLbS13cupj+C8bLq929jU7EMWry4SaL+tKGIaTlqKg==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
@@ -5146,8 +5146,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-riscv64/0.15.10:
-    resolution: {integrity: sha512-Lrl9Cr2YROvPV4wmZ1/g48httE8z/5SCiXIyebiB5N8VT7pX3t6meI7TQVHw/wQpqP/AF4SksDuFImPTM7Z32Q==}
+  /esbuild-linux-riscv64/0.15.11:
+    resolution: {integrity: sha512-9aLIalZ2HFHIOZpmVU11sEAS9F8TnHw49daEjcgMpBXHFF57VuT9f9/9LKJhw781Gda0P9jDkuCWJ0tFbErvJw==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
@@ -5155,8 +5155,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-s390x/0.15.10:
-    resolution: {integrity: sha512-ReP+6q3eLVVP2lpRrvl5EodKX7EZ1bS1/z5j6hsluAlZP5aHhk6ghT6Cq3IANvvDdscMMCB4QEbI+AjtvoOFpA==}
+  /esbuild-linux-s390x/0.15.11:
+    resolution: {integrity: sha512-sZHtiXXOKsLI3XGBGoYO4qKBzJlb8xNsWmvFiwFMHFzA4AXgDP1KDp7Dawe9C2pavTRBDvl+Ok4n/DHQ59oaTg==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
@@ -5164,8 +5164,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-netbsd-64/0.15.10:
-    resolution: {integrity: sha512-iGDYtJCMCqldMskQ4eIV+QSS/CuT7xyy9i2/FjpKvxAuCzrESZXiA1L64YNj6/afuzfBe9i8m/uDkFHy257hTw==}
+  /esbuild-netbsd-64/0.15.11:
+    resolution: {integrity: sha512-hUC9yN06K9sg7ju4Vgu9ChAPdsEgtcrcLfyNT5IKwKyfpLvKUwCMZSdF+gRD3WpyZelgTQfJ+pDx5XFbXTlB0A==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
@@ -5173,8 +5173,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-openbsd-64/0.15.10:
-    resolution: {integrity: sha512-ftMMIwHWrnrYnvuJQRJs/Smlcb28F9ICGde/P3FUTCgDDM0N7WA0o9uOR38f5Xe2/OhNCgkjNeb7QeaE3cyWkQ==}
+  /esbuild-openbsd-64/0.15.11:
+    resolution: {integrity: sha512-0bBo9SQR4t66Wd91LGMAqmWorzO0TTzVjYiifwoFtel8luFeXuPThQnEm5ztN4g0fnvcp7AnUPPzS/Depf17wQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
@@ -5182,8 +5182,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-sunos-64/0.15.10:
-    resolution: {integrity: sha512-mf7hBL9Uo2gcy2r3rUFMjVpTaGpFJJE5QTDDqUFf1632FxteYANffDZmKbqX0PfeQ2XjUDE604IcE7OJeoHiyg==}
+  /esbuild-sunos-64/0.15.11:
+    resolution: {integrity: sha512-EuBdTGlsMTjEl1sQnBX2jfygy7iR6CKfvOzi+gEOfhDqbHXsmY1dcpbVtcwHAg9/2yUZSfMJHMAgf1z8M4yyyw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
@@ -5191,8 +5191,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-32/0.15.10:
-    resolution: {integrity: sha512-ttFVo+Cg8b5+qHmZHbEc8Vl17kCleHhLzgT8X04y8zudEApo0PxPg9Mz8Z2cKH1bCYlve1XL8LkyXGFjtUYeGg==}
+  /esbuild-windows-32/0.15.11:
+    resolution: {integrity: sha512-O0/Wo1Wk6dc0rZSxkvGpmTNIycEznHmkObTFz2VHBhjPsO4ZpCgfGxNkCpz4AdAIeMczpTXt/8d5vdJNKEGC+Q==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
@@ -5200,8 +5200,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-64/0.15.10:
-    resolution: {integrity: sha512-2H0gdsyHi5x+8lbng3hLbxDWR7mKHWh5BXZGKVG830KUmXOOWFE2YKJ4tHRkejRduOGDrBvHBriYsGtmTv3ntA==}
+  /esbuild-windows-64/0.15.11:
+    resolution: {integrity: sha512-x977Q4HhNjnHx00b4XLAnTtj5vfbdEvkxaQwC1Zh5AN8g5EX+izgZ6e5QgqJgpzyRNJqh4hkgIJF1pyy1be0mQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
@@ -5209,8 +5209,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-arm64/0.15.10:
-    resolution: {integrity: sha512-S+th4F+F8VLsHLR0zrUcG+Et4hx0RKgK1eyHc08kztmLOES8BWwMiaGdoW9hiXuzznXQ0I/Fg904MNbr11Nktw==}
+  /esbuild-windows-arm64/0.15.11:
+    resolution: {integrity: sha512-VwUHFACuBahrvntdcMKZteUZ9HaYrBRODoKe4tIWxguQRvvYoYb7iu5LrcRS/FQx8KPZNaa72zuqwVtHeXsITw==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
@@ -5218,34 +5218,34 @@ packages:
     dev: true
     optional: true
 
-  /esbuild/0.15.10:
-    resolution: {integrity: sha512-N7wBhfJ/E5fzn/SpNgX+oW2RLRjwaL8Y0ezqNqhjD6w0H2p0rDuEz2FKZqpqLnO8DCaWumKe8dsC/ljvVSSxng==}
+  /esbuild/0.15.11:
+    resolution: {integrity: sha512-OgHGuhlfZ//mToxjte1D5iiiQgWfJ2GByVMwEC/IuoXsBGkuyK1+KrjYu0laSpnN/L1UmLUCv0s25vObdc1bVg==}
     engines: {node: '>=12'}
     hasBin: true
     requiresBuild: true
     optionalDependencies:
-      '@esbuild/android-arm': 0.15.10
-      '@esbuild/linux-loong64': 0.15.10
-      esbuild-android-64: 0.15.10
-      esbuild-android-arm64: 0.15.10
-      esbuild-darwin-64: 0.15.10
-      esbuild-darwin-arm64: 0.15.10
-      esbuild-freebsd-64: 0.15.10
-      esbuild-freebsd-arm64: 0.15.10
-      esbuild-linux-32: 0.15.10
-      esbuild-linux-64: 0.15.10
-      esbuild-linux-arm: 0.15.10
-      esbuild-linux-arm64: 0.15.10
-      esbuild-linux-mips64le: 0.15.10
-      esbuild-linux-ppc64le: 0.15.10
-      esbuild-linux-riscv64: 0.15.10
-      esbuild-linux-s390x: 0.15.10
-      esbuild-netbsd-64: 0.15.10
-      esbuild-openbsd-64: 0.15.10
-      esbuild-sunos-64: 0.15.10
-      esbuild-windows-32: 0.15.10
-      esbuild-windows-64: 0.15.10
-      esbuild-windows-arm64: 0.15.10
+      '@esbuild/android-arm': 0.15.11
+      '@esbuild/linux-loong64': 0.15.11
+      esbuild-android-64: 0.15.11
+      esbuild-android-arm64: 0.15.11
+      esbuild-darwin-64: 0.15.11
+      esbuild-darwin-arm64: 0.15.11
+      esbuild-freebsd-64: 0.15.11
+      esbuild-freebsd-arm64: 0.15.11
+      esbuild-linux-32: 0.15.11
+      esbuild-linux-64: 0.15.11
+      esbuild-linux-arm: 0.15.11
+      esbuild-linux-arm64: 0.15.11
+      esbuild-linux-mips64le: 0.15.11
+      esbuild-linux-ppc64le: 0.15.11
+      esbuild-linux-riscv64: 0.15.11
+      esbuild-linux-s390x: 0.15.11
+      esbuild-netbsd-64: 0.15.11
+      esbuild-openbsd-64: 0.15.11
+      esbuild-sunos-64: 0.15.11
+      esbuild-windows-32: 0.15.11
+      esbuild-windows-64: 0.15.11
+      esbuild-windows-arm64: 0.15.11
     dev: true
 
   /escalade/3.1.1:
@@ -9377,7 +9377,7 @@ packages:
       terser:
         optional: true
     dependencies:
-      esbuild: 0.15.10
+      esbuild: 0.15.11
       postcss: 8.4.16
       resolve: 1.22.1
       rollup: 2.78.0

From ca187cf3f748d3f1e2c826c7af00ba653b0ba8ef Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 15 Oct 2022 14:07:15 +1100
Subject: [PATCH 131/263] build(deps): update dependency @types/node to
 v18.11.0 (#4181)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index f527e99ac..bd3bdefa6 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.2",
-    "@types/node": "18.8.5",
+    "@types/node": "18.11.0",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index b434b4fb8..2ee220679 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
-  '@types/node': 18.8.5
+  '@types/node': 18.11.0
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.2
-  '@types/node': 18.8.5
+  '@types/node': 18.11.0
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.2.0_@types+node@18.8.5
+  jest: 29.2.0_@types+node@18.11.0
   jest-environment-jsdom: 29.2.0
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.0
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2515,7 +2515,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       jest-message-util: 29.2.0
       jest-util: 29.2.0
@@ -2536,14 +2536,14 @@ packages:
       '@jest/test-result': 29.2.0
       '@jest/transform': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.0_@types+node@18.8.5
+      jest-config: 29.2.0_@types+node@18.11.0
       jest-haste-map: 29.2.0
       jest-message-util: 29.2.0
       jest-regex-util: 29.2.0
@@ -2570,7 +2570,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       jest-mock: 29.2.0
     dev: true
 
@@ -2604,7 +2604,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.0
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       jest-message-util: 29.2.0
       jest-mock: 29.2.0
       jest-util: 29.2.0
@@ -2637,7 +2637,7 @@ packages:
       '@jest/transform': 29.2.0
       '@jest/types': 29.2.0
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2757,7 +2757,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2769,7 +2769,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2781,7 +2781,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3483,7 +3483,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3512,7 +3512,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3533,8 +3533,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.8.5:
-    resolution: {integrity: sha512-Bq7G3AErwe5A/Zki5fdD3O6+0zDChhg671NfPjtIcbtzDNZTv4NPKMRFr7gtYPG7y+B8uTiNK4Ngd9T0FTar6Q==}
+  /@types/node/18.11.0:
+    resolution: {integrity: sha512-IOXCvVRToe7e0ny7HpT/X9Rb2RYtElG1a+VshjwT00HxrM2dWBApHQoqsI6WiY7Q03vdf2bCrIGzVrkF/5t10w==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5448,7 +5448,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.2.0_@types+node@18.8.5
+      jest: 29.2.0_@types+node@18.11.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6660,7 +6660,7 @@ packages:
       '@jest/expect': 29.2.0
       '@jest/test-result': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6679,7 +6679,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.0_@types+node@18.8.5:
+  /jest-cli/29.2.0_@types+node@18.11.0:
     resolution: {integrity: sha512-/581TzbXeO+5kbtSlhXEthGiVJCC8AP0jgT0iZINAAMW+tTFj2uWU7z+HNUH5yIYdHV7AvRr0fWLrmHJGIruHg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6696,7 +6696,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.0_@types+node@18.8.5
+      jest-config: 29.2.0_@types+node@18.11.0
       jest-util: 29.2.0
       jest-validate: 29.2.0
       prompts: 2.4.2
@@ -6707,7 +6707,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.0_@types+node@18.8.5:
+  /jest-config/29.2.0_@types+node@18.11.0:
     resolution: {integrity: sha512-IkdCsrHIoxDPZAyFcdtQrCQ3uftLqns6Joj0tlbxiAQW4k/zTXmIygqWBmPNxO9FbFkDrhtYZiLHXjaJh9rS+Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6722,7 +6722,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       babel-jest: 29.2.0_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6787,7 +6787,7 @@ packages:
       '@jest/fake-timers': 29.2.0
       '@jest/types': 29.2.0
       '@types/jsdom': 20.0.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       jest-mock: 29.2.0
       jest-util: 29.2.0
       jsdom: 20.0.0
@@ -6804,7 +6804,7 @@ packages:
       '@jest/environment': 29.2.0
       '@jest/fake-timers': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       jest-mock: 29.2.0
       jest-util: 29.2.0
     dev: true
@@ -6825,7 +6825,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6848,7 +6848,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.0
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6924,7 +6924,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       jest-util: 29.2.0
     dev: true
 
@@ -6989,7 +6989,7 @@ packages:
       '@jest/test-result': 29.2.0
       '@jest/transform': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -7020,7 +7020,7 @@ packages:
       '@jest/test-result': 29.2.0
       '@jest/transform': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7043,7 +7043,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       graceful-fs: 4.2.10
     dev: true
 
@@ -7088,7 +7088,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7100,7 +7100,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7112,7 +7112,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7139,7 +7139,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.0_@types+node@18.8.5
+      jest: 29.2.0_@types+node@18.11.0
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7153,7 +7153,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7167,7 +7167,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.0
       '@jest/types': 29.2.0
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7179,7 +7179,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7188,13 +7188,13 @@ packages:
     resolution: {integrity: sha512-mluOlMbRX1H59vGVzPcVg2ALfCausbBpxC8a2KWOzInhYHZibbHH8CB0C1JkmkpfurrkOYgF7FPmypuom1OM9A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.8.5
+      '@types/node': 18.11.0
       jest-util: 29.2.0
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.0_@types+node@18.8.5:
+  /jest/29.2.0_@types+node@18.11.0:
     resolution: {integrity: sha512-6krPemKUXCEu5Fh3j6ZVoLMjpTQVm0OCU+7f3K/9gllX8wNIE6NSCQ6s0q2RDoiKLRaQlVRHyscjSPRPqCI0Fg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7207,7 +7207,7 @@ packages:
       '@jest/core': 29.2.0
       '@jest/types': 29.2.0
       import-local: 3.1.0
-      jest-cli: 29.2.0_@types+node@18.8.5
+      jest-cli: 29.2.0_@types+node@18.11.0
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From b27fd4b7fc6c9579896ae528c694bf61929e6da0 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 16 Oct 2022 08:30:02 +1100
Subject: [PATCH 132/263] docs: update client secret encoding notes (#4183)

---
 .../en/integration/openid-connect/bookstack/index.md       | 6 ++++++
 .../openid-connect/cloudflare-zerotrust/index.md           | 7 +++++--
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/docs/content/en/integration/openid-connect/bookstack/index.md b/docs/content/en/integration/openid-connect/bookstack/index.md
index c26e341c5..91aae3659 100644
--- a/docs/content/en/integration/openid-connect/bookstack/index.md
+++ b/docs/content/en/integration/openid-connect/bookstack/index.md
@@ -33,6 +33,12 @@ This example makes the following assumptions:
 * __Client ID:__ `bookstack`
 * __Client Secret:__ `bookstack_client_secret`
 
+*__Important Note:__ Bookstack does not properly URL encode the secret per [RFC6749 Appendix B] at the time this
+article was last updated (noted at the bottom). This means you'll either have to use only alphanumeric characters for
+the secret or URL encode the secret yourself.*
+
+[RFC6749 Appendix B]: https://www.rfc-editor.org/rfc/rfc6749#appendix-B
+
 ## Configuration
 
 ### Application
diff --git a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
index 1193f7b8f..026582fe7 100644
--- a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
+++ b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
@@ -31,8 +31,11 @@ This example makes the following assumptions:
 * __Client ID:__ `cloudflare`
 * __Client Secret:__ `cloudflare_client_secret`
 
-*__Important Note:__ Cloudflare does not properly URL encode the secret. This means you'll either have to use
-only alphanumeric characters for the secret or URL encode it yourself.*
+*__Important Note:__ Cloudflare does not properly URL encode the secret per [RFC6749 Appendix B] at the time this
+article was last updated (noted at the bottom). This means you'll either have to use only alphanumeric characters for
+the secret or URL encode the secret yourself.*
+
+[RFC6749 Appendix B]: https://www.rfc-editor.org/rfc/rfc6749#appendix-B
 
 ## Configuration
 

From 75a3d8a3bcd391ace99a28ab4165058ab5e611c3 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 16 Oct 2022 08:37:31 +1100
Subject: [PATCH 133/263] docs: update misc notes (#4184)

---
 .../en/integration/openid-connect/bookstack/index.md        | 4 ++--
 .../openid-connect/cloudflare-zerotrust/index.md            | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/content/en/integration/openid-connect/bookstack/index.md b/docs/content/en/integration/openid-connect/bookstack/index.md
index 91aae3659..a23399516 100644
--- a/docs/content/en/integration/openid-connect/bookstack/index.md
+++ b/docs/content/en/integration/openid-connect/bookstack/index.md
@@ -33,8 +33,8 @@ This example makes the following assumptions:
 * __Client ID:__ `bookstack`
 * __Client Secret:__ `bookstack_client_secret`
 
-*__Important Note:__ Bookstack does not properly URL encode the secret per [RFC6749 Appendix B] at the time this
-article was last updated (noted at the bottom). This means you'll either have to use only alphanumeric characters for
+*__Important Note:__ [BookStack] does not properly URL encode the secret per [RFC6749 Appendix B] at the time this
+article was last modified (noted at the bottom). This means you'll either have to use only alphanumeric characters for
 the secret or URL encode the secret yourself.*
 
 [RFC6749 Appendix B]: https://www.rfc-editor.org/rfc/rfc6749#appendix-B
diff --git a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
index 026582fe7..0ff85a013 100644
--- a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
+++ b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
@@ -31,9 +31,9 @@ This example makes the following assumptions:
 * __Client ID:__ `cloudflare`
 * __Client Secret:__ `cloudflare_client_secret`
 
-*__Important Note:__ Cloudflare does not properly URL encode the secret per [RFC6749 Appendix B] at the time this
-article was last updated (noted at the bottom). This means you'll either have to use only alphanumeric characters for
-the secret or URL encode the secret yourself.*
+*__Important Note:__ [Cloudflare Zero Trust] does not properly URL encode the secret per [RFC6749 Appendix B] at the
+time this article was last modified (noted at the bottom). This means you'll either have to use only alphanumeric
+characters for the secret or URL encode the secret yourself.*
 
 [RFC6749 Appendix B]: https://www.rfc-editor.org/rfc/rfc6749#appendix-B
 

From 8eadf72dc776aa75cdb7337f7d54dff50cbf14ec Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 16 Oct 2022 14:11:43 +1100
Subject: [PATCH 134/263] docs: rule matching concepts (#4154)

* docs: rule matching concepts

* docs: add named regex note

* docs: adjust wording

* docs: expand match table

* docs: simplify

* docs: fix link

* docs: fix link
---
 .../configuration/security/access-control.md  | 176 ++++++++++++------
 docs/layouts/index.redirects                  |   3 +
 internal/configuration/validator/const.go     |   2 +-
 3 files changed, 127 insertions(+), 54 deletions(-)

diff --git a/docs/content/en/configuration/security/access-control.md b/docs/content/en/configuration/security/access-control.md
index db0cc513d..2ac337eed 100644
--- a/docs/content/en/configuration/security/access-control.md
+++ b/docs/content/en/configuration/security/access-control.md
@@ -51,11 +51,11 @@ access_control:
 {{< confkey type="string" default="deny" required="no" >}}
 
 The default [policy](#policies) defines the policy applied if no [rules](#rules) section apply to the information known
-about the request. It is recommended that this is configured to [deny](#deny) for security reasons. Sites which you do
+about the request. It is recommended that this is configured to [deny] for security reasons. Sites which you do
 not wish to secure at all with Authelia should not be configured in your reverse proxy to perform authentication with
 Authelia at all for performance reasons.
 
-See [Policies](#policies) for more information.
+See the [policies] section for more information.
 
 ### networks (global)
 
@@ -66,8 +66,8 @@ The main/global networks section contains a list of networks with a name label t
 complicated network related configuration a lot cleaner and easier to read.
 
 This section has two options, `name` and `networks`. Where the `networks` section is a list of IP addresses in CIDR
-notation and where `name` is a friendly name to label the collection of networks for reuse in the [networks](#networks)
-section of the [rules](#rules) section below.
+notation and where `name` is a friendly name to label the collection of networks for reuse in the [networks] section of
+the [rules] section below.
 
 This configuration option *does nothing* by itself, it's only useful if you use these aliases in the [rules](#networks)
 section below.
@@ -77,7 +77,7 @@ section below.
 {{< confkey type="list" required="no" >}}
 
 The rules have many configuration options. A rule matches when all criteria of the rule match the request excluding the
-`policy` which is the [policy](#policies) applied to the request.
+[policy] which is the [policy](#policies) applied to the request.
 
 A rule defines two primary things:
 
@@ -86,29 +86,29 @@ A rule defines two primary things:
 
 The criteria is broken into several parts:
 
-* [domain](#domain): domain or list of domains targeted by the request.
-* [domain_regex](#domain_regex): regex form of [domain](#domain).
-* [resources](#resources): pattern or list of patterns that the path should match.
-* [subject](#subject): the user or group of users to define the policy for.
-* [networks](#networks): the network addresses, ranges (CIDR notation) or groups from where the request originates.
-* [methods](#methods): the http methods used in the request.
+* [domain]: domain or list of domains targeted by the request.
+* [domain_regex]: regex form of [domain].
+* [resources]: pattern or list of patterns that the path should match.
+* [subject]: the user or group of users to define the policy for.
+* [networks]: the network addresses, ranges (CIDR notation) or groups from where the request originates.
+* [methods]: the http methods used in the request.
 
-A rule is matched when all criteria of the rule match. Rules are evaluated in sequential order, and the first rule that
-is a match for a given request is the rule applied; subsequent rules have *no effect*. This is particularly
-__important__ for bypass rules. Bypass rules should generally appear near the top of the rules list. However you need to
-carefully evaluate your rule list __in order__ to see which rule matches a particular scenario. A comprehensive
-understanding of how rules apply is also recommended.
+A rule is matched when all criteria of the rule match. Rules are evaluated in sequential order as per
+[Rule Matching Concept 1]. It's *__strongly recommended__* that individuals read the [Rule Matching](#rule-matching)
+section.
+
+[rules]: #rules
 
 #### domain
 
 {{< confkey type="list(string)" required="yes" >}}
 
-*__Required:__ This criteria and/or the [domain_regex](#domain_regex) criteria are required.*
+*__Required:__ This criteria and/or the [domain_regex] criteria are required.*
 
 This criteria matches the domain name and has two methods of configuration, either as a single string or as a list of
 strings. When it's a list of strings the rule matches when __any__ of the domains in the list match the request domain.
-When used in conjunction with [domain_regex](#domain_regex) the rule will match when either the [domain](#domain) or the
-[domain_regex](#domain_regex) criteria matches.
+When used in conjunction with [domain_regex] the rule will match when either the [domain] or the [domain_regex] criteria
+matches.
 
 Rules may start with a few different wildcards:
 
@@ -117,9 +117,8 @@ Rules may start with a few different wildcards:
   string __must__ be quoted like `"*.example.com"`.
 * The user wildcard is `{user}.`, which when in front of a domain dynamically matches the username of the user. For
   example `{user}.example.com` would match `fred.example.com` if the user logged in was named `fred`. *__Warning:__ this is
-  officially deprecated as the [domain_regex](#domain_regex) criteria completely replaces the functionality in a much
-  more useful way. It is strongly recommended you do not use this as it will be removed in a future version, most likely
-  v5.0.0.*
+  officially deprecated as the [domain_regex] criteria completely replaces the functionality in a much   more useful
+  way. It is strongly recommended you do not use this as it will be removed in a future version, most likely v5.0.0.*
 * The group wildcard is `{group}.`, which when in front of a domain dynamically matches if the logged in user has the
   group in that location. For example `{group}.example.com` would match `admins.example.com` if the user logged in was
   in the following groups `admins,users,people` because `admins` is in the list.
@@ -129,6 +128,8 @@ or subdomains of that domain. This is because a website can only write cookies f
 theoretically possible for us to do this with multiple domains however we would have to be security conscious in our
 implementation, and it is not currently a priority.
 
+[domain]: #domain
+
 ##### Examples
 
 *Single domain of `*.example.com` matched. All rules in this list are effectively the same rule just expressed in
@@ -158,7 +159,7 @@ access_control:
     policy: bypass
 ```
 
-*Multiple domains matched either via a static domain or via a [domain_regex](#domain_regex). This rule will match
+*Multiple domains matched either via a static domain or via a [domain_regex]. This rule will match
 either `apple.example.com`, `pub-data.example.com`, or `img-data.example.com`.*
 
 ```yaml
@@ -173,20 +174,20 @@ access_control:
 
 {{< confkey type="list(string)" required="yes" >}}
 
-*__Required:__ This criteria and/or the [domain](#domain) criteria are required.*
+*__Required:__ This criteria and/or the [domain] criteria are required.*
 
-*__Important Note:__ If you intend to use this criteria with a bypass rule please read
-[bypass and subjects](#bypass-and-user-identity) before doing so.*
+*__Important Note:__ If you intend to use this criteria with a bypass rule please read [Rule Matching Concept 2].*
 
 *__Important Note:__ to utilize regex you must escape it properly. See
 [regular expressions](../prologue/common.md#regular-expressions) for more information.*
 
 This criteria matches the domain name and has two methods of configuration, either as a single string or as a list of
 strings. When it's a list of strings the rule matches when __any__ of the domains in the list match the request domain.
-When used in conjunction with [domain](#domain) the rule will match when either the [domain](#domain) or the
-[domain_regex](#domain_regex) criteria matches.
+When used in conjunction with [domain] the rule will match when either the [domain] or the [domain_regex] criteria matches.
 
-In addition to standard regex patterns this criteria can match some [Named Regex Groups](#named-regex-groups).
+In addition to standard regex patterns this criteria can match some [Named Regex Groups].
+
+[domain_regex]: #domain_regex
 
 ##### Examples
 
@@ -222,15 +223,14 @@ access_control:
 The specific [policy](#policies) to apply to the selected rule. This is not criteria for a match, this is the action to
 take when a match is made.
 
+[policy]: #policy
+
 #### subject
 
 {{< confkey type="list(list(string))" required="no" >}}
 
-*__Note:__ this rule criteria __may not__ be used for the `bypass` policy the minimum required authentication level to
-identify the subject is `one_factor`. We have taken an opinionated stance on preventing this configuration as it could
-result in problematic security scenarios with badly thought out configurations and cannot see a likely configuration
-scenario that would require users to do this. If you have a scenario in mind please open an
-[issue](https://github.com/authelia/authelia/issues/new) on GitHub.*
+*__Note:__ this rule criteria __may not__ be used for the [bypass] policy the minimum required authentication level to
+identify the subject is [one_factor]. See [Rule Matching Concept 2] for more information.*
 
 This criteria matches identifying characteristics about the subject. Currently this is either user or groups the user
 belongs to. This allows you to effectively control exactly what each user is authorized to access or to specifically
@@ -241,6 +241,8 @@ The format of this rule is unique in as much as it is a list of lists. The logic
 `OR` and `AND` logic. The first level of the list defines the `OR` logic, and the second level defines the `AND` logic.
 Additionally each level of these lists does not have to be explicitly defined.
 
+[subject]: #subject
+
 ##### Examples
 
 *Matches when the user has the username `john`, __or__ the user is in the groups `admin` __and__ `app-name`, __or__ the
@@ -306,6 +308,8 @@ relevant methods are listed in this table:
 | [RFC5789] |                         PATCH                         | [MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods) |
 | [RFC4918] | PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, UNLOCK  |                                                                  |
 
+[methods]: #methods
+
 ##### Examples
 
 *Bypass `OPTIONS` requests to the `example.com` domain.*
@@ -341,6 +345,8 @@ privileges when a user is on the local networks.
 There are a large number of scenarios regarding networks and the order of the rules. This provides a lot of flexibility
 for administrators to tune the security to their specific needs if desired.
 
+[networks]: #networks
+
 ##### Examples
 
 *Require [two_factor](#two_factor) for all clients other than internal clients and `112.134.145.167`. The first two
@@ -394,6 +400,8 @@ It's important when configuring resource rules that you enclose them in quotes o
 with escaping the expressions. Failure to do so may prevent Authelia from starting. It's technically optional but will
 likely save you a lot of time if you do it for all resource rules.
 
+[resources]: #resources
+
 ##### Examples
 
 *Applies the [bypass](#bypass) policy when the domain is `app.example.com` and the url is `/api`, or starts with either
@@ -413,54 +421,116 @@ access_control:
 The policy of the first matching rule in the configured list decides the policy applied to the request, if no rule
 matches the request the [default_policy](#default_policy) is applied.
 
+[policies]: #policies
+
 ### deny
 
 This is the policy applied by default, and is what we recommend as the default policy for all installs. Its effect
 is literally to deny the user access to the resource. Additionally you can use this policy to conditionally deny
 access in desired situations. Examples include denying access to an API that has no authentication mechanism built in.
 
+[deny]: #deny
+
 ### bypass
 
 This policy skips all authentication and allows anyone to use the resource. This policy is not available with a rule
-that includes a [subject](#subject) restriction because the minimum authentication level required to obtain information
-about the subject is [one_factor](#one_factor).
+that includes a [subject] restriction because the minimum authentication level required to obtain information
+about the subject is [one_factor]. See [Rule Matching Concept 2] for more information.
 
-#### bypass and user identity
-
-The [bypass](#bypass) policy cannot be used when the rule uses a criteria that requires we know the users identity. This
-means:
-
-* If the rule defines [subjects](#subject) criteria
-* If the rule defines [domain regex](#domain_regex) criteria which contains either the user or group named match groups
-
-This is because these criteria types require knowing who the user is in order to determine if their identity matches the
-request. This information can only be known after 1FA, which means the minimum policy that can be used logically is
-[one_factor](#one_factor).
+[bypass]: #bypass
 
 ### one_factor
 
 This policy requires the user at minimum complete 1FA successfully (username and password). This means if they have
 performed 2FA then they will be allowed to access the resource.
 
+[one_factor]: #one_factor
+
 ### two_factor
 
 This policy requires the user to complete 2FA successfully. This is currently the highest level of authentication
 policy available.
 
+[two_factor]: #two_factor
+
+## Rule Matching
+
+There are two important concepts to understand when it comes to rule matching. This section covers these concepts.
+
+You can easily evaluate if your access control rules section matches a given request, and why it doesn't match using the
+[authelia access-control check-policy](../../reference/cli/authelia/authelia_access-control_check-policy.md) command.
+
+### Rule Matching Concept 1: Sequential Order
+
+Rules are matched in sequential order. The first entry in the list where all criteria match is the rule which is applied.
+Some rule criteria additionally allow for a list of criteria, when one of these criteria in the list match a request that
+criteria is considered a match for that specific rule.
+
+This is particularly __important__ for bypass rules. Bypass rules should generally appear near the top of the rules
+list. However you need to carefully evaluate your rule list __in order__ to see which rule matches a particular
+scenario. A comprehensive understanding of how rules apply is also recommended.
+
+For example the following rule will consider requests for either `example.com` or any subdomain of `example.com` a match
+if they have a path of exactly `/api` or if they start with `/api/`. This means that the second rule for
+`app.example.com` will not be considered if the request is to `https://app.example.com/api` because the first rule is
+a match for that request.
+
+```yaml
+- domains:
+    - 'example.com'
+    - '*.example.com'
+  policy: bypass
+  resources:
+    - '^/api$'
+    - '^/api/'
+- domains:
+    - 'app.example.com'
+  policy: two_factor
+```
+
+[Rule Matching Concept 1]: #rule-matching-concept-1-sequential-order
+
+### Rule Matching Concept 2: Subject Criteria Requires Authentication
+
+Rules that have subject reliant elements require authentication to determine if they match. Due to this these rules
+must not be used with the [bypass] policy. The criteria which have subject reliant elements are:
+
+* The [subject] criteria itself
+* The [domain_regex] criteria when it contains the [Named Regex Groups].
+
+In addition if the rule has a subject criteria but all other criteria match then the user will be immediately forwarded
+for authentication if no prior rules match the request per [Rule Matching Concept 1]. This means if you have two
+identical rules, and one of them has a subject based reliant criteria, and the other one is a [bypass] rule then the
+[bypass] rule should generally come first.
+
+[Rule Matching Concept 2]: #rule-matching-concept-2-subject-criteria-requires-authentication
+
 ## Named Regex Groups
 
 Some criteria allow matching named regex groups. These are the groups we accept:
 
-| Group Name |    Match Value    |
-|:----------:|:-----------------:|
-|    User    |     username      |
-|   Group    | groups (contains) |
+| Group Name | Match Value | Match Type  |
+|:----------:|:-----------:|:-----------:|
+|    User    |  username   |   Equals    |
+|   Group    |   groups    | Has (Equal) |
 
-For the group name `Group` the regex pattern matches if the user has the specific group name matching the pattern. Both
-regex groups are case-insensitive due to the fact that the regex groups are used in domain criteria and domain names
+Named regex groups are represented with the syntax `(?P<User>\w+)` where `User` is the group name from the table above,
+and `\w+` is the pattern for the area of the pattern that should be compared to the match value.
+
+The match type `Equals` matches if the value extracted from the pattern is equal to the match value. The match type
+`Has (Equal)` matches if the value extracted from the pattern is equal to one of the values in the match value (the
+match value is a list/slice).
+
+The regex groups are case-insensitive due to the fact that the regex groups are used in domain criteria and domain names
 should not be compared in a case-sensitive way as per the [RFC4343](https://www.rfc-editor.org/rfc/rfc4343.html)
 abstract and [RFC3986 Section 3.2.2](https://www.rfc-editor.org/rfc/rfc3986#section-3.2.2).
 
+We do not currently apply any other normalization to usernames or groups when matching these groups. As such it's
+generally *__not recommended__* to use these patterns with usernames or groups which contain characters that are not
+alphanumeric (including spaces).
+
+[Named Regex Groups]: #named-regex-groups
+
 ## Detailed example
 
 Here is a detailed example of an example access control section:
diff --git a/docs/layouts/index.redirects b/docs/layouts/index.redirects
index 7ab74319e..d116bbe08 100644
--- a/docs/layouts/index.redirects
+++ b/docs/layouts/index.redirects
@@ -11,5 +11,8 @@
 /l/bug                  https://github.com/authelia/authelia/issues/new?assignees=&labels=type%2Fbug%2Funconfirmed%2Cstatus%2Fneeds-triage%2Cpriority%2F4%2Fnormal&template=bug-report.yml
 /l/fr                   https://github.com/authelia/authelia/issues/new?assignees=&labels=type%2Ffeature%2Cstatus%2Fneeds-design%2Cpriority%2F4%2Fnormal&template=feature-request.yml
 
+## Short Links (docs)
+/c/acl-match-concept-2  /configuration/security/access-control/#rule-matching-concept-2-subject-criteria-requires-authentication
+
 ## The following maps the old site to the new one.
 /docs/						                                  /
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index bc66dba8b..5865968b4 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -201,7 +201,7 @@ const (
 		"https://www.authelia.com/c/acl#bypass"
 	errAccessControlRuleBypassPolicyInvalidWithSubjectsWithGroupDomainRegex = "access control: rule %s: 'policy' option 'bypass' is " +
 		"not supported when 'domain_regex' option contains the user or group named matches. For more information see: " +
-		"https://www.authelia.com/c/acl#bypass-and-user-identity"
+		"https://www.authelia.com/c/acl-match-concept-2"
 	errFmtAccessControlRuleNetworksInvalid = "access control: rule %s: the network '%s' is not a " +
 		"valid Group Name, IP, or CIDR notation"
 	errFmtAccessControlRuleSubjectInvalid = "access control: rule %s: 'subject' option '%s' is " +

From 3a70f6739b82a523fc8112a29ac156446253fc58 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 17 Oct 2022 21:51:59 +1100
Subject: [PATCH 135/263] feat(authentication): file password algorithms
 (#3848)

This adds significant enhancements to the file auth provider including multiple additional algorithms.
---
 cmd/authelia-scripts/cmd/gen.go               |   2 +-
 config.template.yml                           |  32 +-
 .../en/configuration/first-factor/file.md     | 257 +++++---
 .../proxies/nginx-proxy-manager/index.md      |   2 +-
 .../reference/cli/authelia/authelia_crypto.md |   2 +
 .../cli/authelia/authelia_crypto_hash.md      |  42 ++
 .../authelia/authelia_crypto_hash_generate.md |  54 ++
 .../authelia_crypto_hash_generate_argon2.md   |  56 ++
 .../authelia_crypto_hash_generate_bcrypt.md   |  51 ++
 .../authelia_crypto_hash_generate_pbkdf2.md   |  52 ++
 .../authelia_crypto_hash_generate_scrypt.md   |  54 ++
 ...authelia_crypto_hash_generate_sha2crypt.md |  52 ++
 .../authelia/authelia_crypto_hash_validate.md |  46 ++
 .../cli/authelia/authelia_crypto_rand.md      |  55 ++
 .../cli/authelia/authelia_hash-password.md    |   8 +-
 docs/content/en/reference/guides/passwords.md | 108 ++--
 docs/data/configkeys.json                     |   2 +-
 go.mod                                        |   8 +-
 go.sum                                        |  17 +-
 internal/authentication/const.go              |  34 +-
 internal/authentication/file_user_provider.go | 299 ++++------
 .../file_user_provider_database.go            | 222 +++++++
 .../authentication/file_user_provider_test.go | 136 +++--
 internal/authentication/ldap_user_provider.go |  64 +-
 .../ldap_user_provider_startup.go             |  14 +-
 .../authentication/ldap_user_provider_test.go |  98 +--
 internal/authentication/password_hash.go      | 220 -------
 internal/authentication/password_hash_test.go | 322 ----------
 internal/commands/acl.go                      |   2 +-
 internal/commands/configuration.go            |   6 +-
 internal/commands/const.go                    |  91 ++-
 internal/commands/crypto.go                   |  96 ++-
 internal/commands/crypto_hash.go              | 527 +++++++++++++++++
 internal/commands/crypto_helper.go            |  15 +-
 internal/commands/hash.go                     | 121 ----
 internal/commands/root.go                     |   2 +-
 internal/commands/storage_run.go              |   6 +-
 internal/commands/util.go                     |  13 +
 internal/commands/validate.go                 |   2 +-
 internal/configuration/config.template.yml    |  32 +-
 .../configuration/schema/authentication.go    | 197 +++++--
 .../configuration/schema/configuration.go     |  30 +-
 internal/configuration/schema/const.go        |   7 +-
 internal/configuration/schema/keys.go         |  39 +-
 .../validator/access_control_test.go          |   6 +-
 .../configuration/validator/authentication.go | 438 ++++++++++----
 .../validator/authentication_test.go          | 558 ++++++++++++++----
 .../validator/configuration_test.go           |   2 +-
 internal/configuration/validator/const.go     |  69 ++-
 .../configuration/validator/const_test.go     |  12 +
 .../validator/identity_providers_test.go      |   2 +-
 .../configuration/validator/theme_test.go     |   2 +-
 internal/configuration/validator/totp_test.go |   2 +-
 internal/handlers/handler_verify.go           |   4 +-
 internal/handlers/handler_verify_test.go      |   4 +-
 internal/notification/smtp_util_test.go       |   8 +-
 internal/server/template.go                   |   2 +-
 internal/suites/suite_cli_test.go             | 176 +++++-
 internal/utils/const.go                       |  21 +-
 internal/utils/hashing_test.go                |   4 +-
 internal/utils/strings_test.go                |   8 +-
 61 files changed, 3242 insertions(+), 1571 deletions(-)
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
 create mode 100644 internal/authentication/file_user_provider_database.go
 delete mode 100644 internal/authentication/password_hash.go
 delete mode 100644 internal/authentication/password_hash_test.go
 create mode 100644 internal/commands/crypto_hash.go
 delete mode 100644 internal/commands/hash.go
 create mode 100644 internal/configuration/validator/const_test.go

diff --git a/cmd/authelia-scripts/cmd/gen.go b/cmd/authelia-scripts/cmd/gen.go
index f20f2dddc..16fa23923 100644
--- a/cmd/authelia-scripts/cmd/gen.go
+++ b/cmd/authelia-scripts/cmd/gen.go
@@ -7,5 +7,5 @@
 package cmd
 
 const (
-	versionSwaggerUI = "4.14.2"
+	versionSwaggerUI = "4.14.3"
 )
diff --git a/config.template.yml b/config.template.yml
index ef0a3bd35..fee3739eb 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -393,12 +393,32 @@ authentication_backend:
   # file:
   #   path: /config/users_database.yml
   #   password:
-  #     algorithm: argon2id
-  #     iterations: 1
-  #     key_length: 32
-  #     salt_length: 16
-  #     memory: 1024
-  #     parallelism: 8
+  #     algorithm: argon2
+  #     argon2:
+  #       variant: argon2id
+  #       iterations: 3
+  #       memory: 65536
+  #       parallelism: 4
+  #       key_length: 32
+  #       salt_length: 16
+  #     scrypt:
+  #       iterations: 16
+  #       block_size: 8
+  #       parallelism: 1
+  #       key_length: 32
+  #       salt_length: 16
+  #     pbkdf2:
+  #       variant: sha512
+  #       iterations: 310000
+  #       salt_length: 16
+  #     sha2crypt:
+  #       variant: sha512
+  #       iterations: 50000
+  #       salt_length: 16
+  #     bcrypt:
+  #       variant: standard
+  #       cost: 12
+
 
 ##
 ## Password Policy Configuration.
diff --git a/docs/content/en/configuration/first-factor/file.md b/docs/content/en/configuration/first-factor/file.md
index 786db99a4..d8c474b7b 100644
--- a/docs/content/en/configuration/first-factor/file.md
+++ b/docs/content/en/configuration/first-factor/file.md
@@ -21,12 +21,31 @@ authentication_backend:
   file:
     path: /config/users.yml
     password:
-      algorithm: argon2id
-      iterations: 3
-      key_length: 32
-      salt_length: 16
-      parallelism: 4
-      memory: 64
+      algorithm: argon2
+      argon2:
+        variant: argon2id
+        iterations: 3
+        memory: 65536
+        parallelism: 4
+        key_length: 32
+        salt_length: 16
+      scrypt:
+        iterations: 16
+        block_size: 8
+        parallelism: 1
+        key_length: 32
+        salt_length: 16
+      pbkdf2:
+        variant: sha512
+        iterations: 310000
+        salt_length: 16
+      sha2crypt:
+        variant: sha512
+        iterations: 50000
+        salt_length: 16
+      bcrypt:
+        variant: standard
+        cost: 12
 ```
 
 ## Options
@@ -39,70 +58,7 @@ The path to the file with the user details list. Supported file types are:
 
 * [YAML File](../../reference/guides/passwords.md#yaml-format)
 
-### password
-
-#### algorithm
-
-{{< confkey type="string" default="argon2id" required="no" >}}
-
-Controls the hashing algorithm used for hashing new passwords. Value must be one of:
-
-* `argon2id` for the [Argon2] `id` variant
-* `sha512` for the [SHA Crypt] `SHA512` variant
-
-#### iterations
-
-{{< confkey type="integer" required="no" >}}
-
-Controls the number of hashing iterations done by the other hashing settings ([Argon2] parameter `t`, [SHA Crypt]
-parameter `rounds`). This affects the effective cost of hashing.
-
-| Algorithm | Minimum | Default |                                        Recommended                                         |
-|:---------:|:-------:|:-------:|:------------------------------------------------------------------------------------------:|
-| argon2id  |    1    |    3    | [See Recommendations](../../reference/guides/passwords.md#recommended-parameters-argon2id) |
-|  sha512   |  1000   |  50000  |  [See Recommendations](../../reference/guides/passwords.md#recommended-parameters-sha512)  |
-
-#### key_length
-
-{{< confkey type="integer" default="32" required="no" >}}
-
-*__Important:__ This setting is specific to the `argon2id` algorithm and unused with the `sha512` algorithm.*
-
-Sets the key length of the [Argon2] hash output. The minimum value is `16` with the recommended value of `32` being set
-as the default.
-
-#### salt_length
-
-{{< confkey type="integer" default="16" required="no" >}}
-
-Controls the length of the random salt added to each password before hashing. There is not a compelling reason to have
-this set to anything other than `16`, however the minimum is `8` with the recommended value of `16` being set as the
-default.
-
-#### parallelism
-
-{{< confkey type="integer" default="4" required="no" >}}
-
-*__Important:__ This setting is specific to the `argon2id` algorithm and unused with the `sha512` algorithm.*
-
-Sets the number of threads used by [Argon2] when hashing passwords ([Argon2] parameter `p`). The minimum value is `1`
-with the recommended value of `4` being set as the default. This affects the effective cost of hashing.
-
-#### memory
-
-{{< confkey type="integer" default="64" required="no" >}}
-
-*__Important:__ This setting is specific to the `argon2id` algorithm and unused with the `sha512` algorithm.*
-
-Sets the amount of memory in megabytes allocated to a single password hashing calculation ([Argon2] parameter `m`). This
-affects the effective cost of hashing.
-
-This memory is released by go after the hashing process completes, however the operating system may not reclaim the
-memory until a later time such as when the system is experiencing memory pressure which may cause the appearance of more
-memory being in use than Authelia is actually actively using. Authelia will typically reuse this memory if it has not be
-reclaimed as long as another hashing calculation is not still utilizing it.
-
-## Reference
+## Password Options
 
 A [reference guide](../../reference/guides/passwords.md) exists specifically for choosing password hashing values. This
 section contains far more information than is practical to include in this configuration document. See the
@@ -110,5 +66,164 @@ section contains far more information than is practical to include in this confi
 
 This guide contains examples such as the [User / Password File](../../reference/guides/passwords.md#user--password-file).
 
+### algorithm
+
+{{< confkey type="string" default="argon2" required="no" >}}
+
+Controls the hashing algorithm used for hashing new passwords. Value must be one of:
+
+* `argon2` for the [Argon2](#argon2) algorithm
+* `scrypt` for the [Scrypt](#scrypt) algorithm
+* `pbkdf2` for the [PBKDF2](#pbkdf2) algorithm
+* `sha2crypt` for the [SHA2Crypt](#sha2crypt) algorithm
+* `bcrypt` for the [Bcrypt](#bcrypt) algorithm
+
+### argon2
+
+The [Argon2] algorithm implementation. This is one of the only algorithms that was designed purely with password hashing
+in mind and is subsequently one of the best algorithms to date for security.
+
+#### variant
+
+{{< confkey type="string" default="argon2id" required="no" >}}
+
+Controls the variant when hashing passwords using [Argon2]. Recommended `argon2id`.
+Permitted values `argon2id`, `argon2i`, `argon2d`.
+
+#### iterations
+
+{{< confkey type="integer" default="3" required="no" >}}
+
+Controls the number of iterations when hashing passwords using [Argon2].
+
+#### memory
+
+{{< confkey type="integer" default="65536" required="no" >}}
+
+Controls the amount of memory in kibibytes when hashing passwords using [Argon2].
+
+#### parallelism
+
+{{< confkey type="integer" default="4" required="no" >}}
+
+Controls the parallelism factor when hashing passwords using [Argon2].
+
+#### key_length
+
+{{< confkey type="integer" default="32" required="no" >}}
+
+Controls the output key length when hashing passwords using [Argon2].
+
+#### salt_length
+
+{{< confkey type="integer" default="16" required="no" >}}
+
+Controls the output salt length when hashing passwords using [Argon2].
+
+### scrypt
+
+The [Scrypt] algorithm implementation.
+
+#### iterations
+
+{{< confkey type="integer" default="16" required="no" >}}
+
+Controls the number of iterations when hashing passwords using [Scrypt].
+
+#### block_size
+
+{{< confkey type="integer" default="8" required="no" >}}
+
+Controls the block size when hashing passwords using [Scrypt].
+
+#### parallelism
+
+{{< confkey type="integer" default="1" required="no" >}}
+
+Controls the parallelism factor when hashing passwords using [Scrypt].
+
+#### key_length
+
+{{< confkey type="integer" default="32" required="no" >}}
+
+Controls the output key length when hashing passwords using [Scrypt].
+
+#### salt_length
+
+{{< confkey type="integer" default="16" required="no" >}}
+
+Controls the output salt length when hashing passwords using [Scrypt].
+
+### pbkdf2
+
+The [PBKDF2] algorithm implementation.
+
+#### variant
+
+{{< confkey type="string" default="sha512" required="no" >}}
+
+Controls the variant when hashing passwords using [PBKDF2]. Recommended `sha512`.
+Permitted values `sha1`, `sha224`, `sha256`, `sha384`, `sha512`.
+
+#### iterations
+
+{{< confkey type="integer" default="310000" required="no" >}}
+
+Controls the number of iterations when hashing passwords using [PBKDF2].
+
+#### salt_length
+
+{{< confkey type="integer" default="16" required="no" >}}
+
+Controls the output salt length when hashing passwords using [PBKDF2].
+
+### sha2crypt
+
+The [SHA2 Crypt] algorithm implementation.
+
+#### variant
+
+{{< confkey type="string" default="sha512" required="no" >}}
+
+Controls the variant when hashing passwords using [SHA2 Crypt]. Recommended `sha512`.
+Permitted values `sha256`, `sha512`.
+
+#### iterations
+
+{{< confkey type="integer" default="50000" required="no" >}}
+
+Controls the number of iterations when hashing passwords using [SHA2 Crypt].
+
+#### salt_length
+
+{{< confkey type="integer" default="16" required="no" >}}
+
+Controls the output salt length when hashing passwords using [SHA2 Crypt].
+
+### bcrypt
+
+The [Bcrypt] algorithm implementation.
+
+#### variant
+
+{{< confkey type="string" default="standard" required="no" >}}
+
+Controls the variant when hashing passwords using [Bcrypt]. Recommended `standard`.
+Permitted values `standard`, `sha256`.
+
+*__Important Note:__ The `sha256` variant is a special variant designed by
+[Passlib](https://passlib.readthedocs.io/en/stable/lib/passlib.hash.bcrypt_sha256.html). This variant passes the
+password through a SHA256 HMAC before passing it to the [Bcrypt] algorithm, effectively bypassing the 72 byte password
+truncation that [Bcrypt] does. It is not supported by many other systems.*
+
+#### cost
+
+{{< confkey type="integer" default="12" required="no" >}}
+
+Controls the hashing cost when hashing passwords using [Bcrypt].
+
 [Argon2]: https://www.rfc-editor.org/rfc/rfc9106.html
-[SHA Crypt]: https://www.akkadia.org/drepper/SHA-crypt.txt
+[Scrypt]: https://en.wikipedia.org/wiki/Scrypt
+[PBKDF2]: https://www.ietf.org/rfc/rfc2898.html
+[SHA2 Crypt]: https://www.akkadia.org/drepper/SHA-crypt.txt
+[Bcrypt]: https://en.wikipedia.org/wiki/Bcrypt
diff --git a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
index 32246329b..e0bdf2ceb 100644
--- a/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
+++ b/docs/content/en/integration/proxies/nginx-proxy-manager/index.md
@@ -2,7 +2,7 @@
 title: "NGINX Proxy Manager"
 description: "An integration guide for Authelia and the NGINX Proxy Manager reverse proxy"
 lead: "A guide on integrating Authelia with NGINX Proxy Manager."
-date: 2022-06-15T17:51:47+10:00
+date: 2022-10-08T12:43:26+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto.md b/docs/content/en/reference/cli/authelia/authelia_crypto.md
index 8ce6ba2b0..f979b583f 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto.md
@@ -38,5 +38,7 @@ authelia crypto --help
 
 * [authelia](authelia.md)	 - authelia untagged-unknown-dirty (master, unknown)
 * [authelia crypto certificate](authelia_crypto_certificate.md)	 - Perform certificate cryptographic operations
+* [authelia crypto hash](authelia_crypto_hash.md)	 - Perform cryptographic hash operations
 * [authelia crypto pair](authelia_crypto_pair.md)	 - Perform key pair cryptographic operations
+* [authelia crypto rand](authelia_crypto_rand.md)	 - Generate a cryptographically secure random string
 
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md
new file mode 100644
index 000000000..b03de6d36
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md
@@ -0,0 +1,42 @@
+---
+title: "authelia crypto hash"
+description: "Reference for the authelia crypto hash command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash
+
+Perform cryptographic hash operations
+
+### Synopsis
+
+Perform cryptographic hash operations.
+
+This subcommand allows preforming hashing cryptographic tasks.
+
+### Examples
+
+```
+authelia crypto hash --help
+```
+
+### Options
+
+```
+  -h, --help   help for hash
+```
+
+### SEE ALSO
+
+* [authelia crypto](authelia_crypto.md)	 - Perform cryptographic operations
+* [authelia crypto hash generate](authelia_crypto_hash_generate.md)	 - Generate cryptographic hash digests
+* [authelia crypto hash validate](authelia_crypto_hash_validate.md)	 - Perform cryptographic hash validations
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
new file mode 100644
index 000000000..b9753f1a3
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
@@ -0,0 +1,54 @@
+---
+title: "authelia crypto hash generate"
+description: "Reference for the authelia crypto hash generate command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash generate
+
+Generate cryptographic hash digests
+
+### Synopsis
+
+Generate cryptographic hash digests.
+
+This subcommand allows generating cryptographic hash digests.
+
+See the help for the subcommands if you want to override the configuration or defaults.
+
+```
+authelia crypto hash generate [flags]
+```
+
+### Examples
+
+```
+authelia crypto hash generate --help
+```
+
+### Options
+
+```
+  -c, --config strings    configuration files to load (default [configuration.yml])
+  -h, --help              help for generate
+      --no-confirm        skip the password confirmation prompt
+      --password string   manually supply the password rather than using the terminal prompt
+```
+
+### SEE ALSO
+
+* [authelia crypto hash](authelia_crypto_hash.md)	 - Perform cryptographic hash operations
+* [authelia crypto hash generate argon2](authelia_crypto_hash_generate_argon2.md)	 - Generate cryptographic Argon2 hash digests
+* [authelia crypto hash generate bcrypt](authelia_crypto_hash_generate_bcrypt.md)	 - Generate cryptographic bcrypt hash digests
+* [authelia crypto hash generate pbkdf2](authelia_crypto_hash_generate_pbkdf2.md)	 - Generate cryptographic PBKDF2 hash digests
+* [authelia crypto hash generate scrypt](authelia_crypto_hash_generate_scrypt.md)	 - Generate cryptographic scrypt hash digests
+* [authelia crypto hash generate sha2crypt](authelia_crypto_hash_generate_sha2crypt.md)	 - Generate cryptographic SHA2 Crypt hash digests
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
new file mode 100644
index 000000000..3f5b8f17a
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
@@ -0,0 +1,56 @@
+---
+title: "authelia crypto hash generate argon2"
+description: "Reference for the authelia crypto hash generate argon2 command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash generate argon2
+
+Generate cryptographic Argon2 hash digests
+
+### Synopsis
+
+Generate cryptographic Argon2 hash digests.
+
+This subcommand allows generating cryptographic Argon2 hash digests.
+
+```
+authelia crypto hash generate argon2 [flags]
+```
+
+### Examples
+
+```
+authelia crypto hash generate argon2 --help
+```
+
+### Options
+
+```
+  -c, --config strings      configuration files to load (default [configuration.yml])
+  -h, --help                help for argon2
+  -i, --iterations int      number of iterations (default 3)
+  -k, --key-size int        key size in bytes (default 32)
+  -m, --memory int          memory in kibibytes (default 65536)
+      --no-confirm          skip the password confirmation prompt
+  -p, --parallelism int     parallelism or threads (default 4)
+      --password string     manually supply the password rather than using the terminal prompt
+      --profile string      profile to use, options are low-memory and recommended
+      --random              uses a randomly generated password
+      --random.length int   when using a randomly generated password it configures the length (default 72)
+  -s, --salt-size int       salt size in bytes (default 16)
+  -v, --variant string      variant, options are 'argon2id', 'argon2i', and 'argon2d' (default "argon2id")
+```
+
+### SEE ALSO
+
+* [authelia crypto hash generate](authelia_crypto_hash_generate.md)	 - Generate cryptographic hash digests
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
new file mode 100644
index 000000000..f2c0685e6
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
@@ -0,0 +1,51 @@
+---
+title: "authelia crypto hash generate bcrypt"
+description: "Reference for the authelia crypto hash generate bcrypt command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash generate bcrypt
+
+Generate cryptographic bcrypt hash digests
+
+### Synopsis
+
+Generate cryptographic bcrypt hash digests.
+
+This subcommand allows generating cryptographic bcrypt hash digests.
+
+```
+authelia crypto hash generate bcrypt [flags]
+```
+
+### Examples
+
+```
+authelia crypto hash generate bcrypt --help
+```
+
+### Options
+
+```
+  -c, --config strings      configuration files to load (default [configuration.yml])
+  -i, --cost int            hashing cost (default 12)
+  -h, --help                help for bcrypt
+      --no-confirm          skip the password confirmation prompt
+      --password string     manually supply the password rather than using the terminal prompt
+      --random              uses a randomly generated password
+      --random.length int   when using a randomly generated password it configures the length (default 72)
+  -v, --variant string      variant, options are 'standard' and 'sha256' (default "standard")
+```
+
+### SEE ALSO
+
+* [authelia crypto hash generate](authelia_crypto_hash_generate.md)	 - Generate cryptographic hash digests
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
new file mode 100644
index 000000000..b42daf681
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
@@ -0,0 +1,52 @@
+---
+title: "authelia crypto hash generate pbkdf2"
+description: "Reference for the authelia crypto hash generate pbkdf2 command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash generate pbkdf2
+
+Generate cryptographic PBKDF2 hash digests
+
+### Synopsis
+
+Generate cryptographic PBKDF2 hash digests.
+
+This subcommand allows generating cryptographic PBKDF2 hash digests.
+
+```
+authelia crypto hash generate pbkdf2 [flags]
+```
+
+### Examples
+
+```
+authelia crypto hash generate pbkdf2 --help
+```
+
+### Options
+
+```
+  -c, --config strings      configuration files to load (default [configuration.yml])
+  -h, --help                help for pbkdf2
+  -i, --iterations int      number of iterations (default 310000)
+      --no-confirm          skip the password confirmation prompt
+      --password string     manually supply the password rather than using the terminal prompt
+      --random              uses a randomly generated password
+      --random.length int   when using a randomly generated password it configures the length (default 72)
+  -s, --salt-size int       salt size in bytes (default 16)
+  -v, --variant string      variant, options are 'sha1', 'sha224', 'sha256', 'sha384', and 'sha512' (default "sha512")
+```
+
+### SEE ALSO
+
+* [authelia crypto hash generate](authelia_crypto_hash_generate.md)	 - Generate cryptographic hash digests
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
new file mode 100644
index 000000000..d727d8d5d
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
@@ -0,0 +1,54 @@
+---
+title: "authelia crypto hash generate scrypt"
+description: "Reference for the authelia crypto hash generate scrypt command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash generate scrypt
+
+Generate cryptographic scrypt hash digests
+
+### Synopsis
+
+Generate cryptographic scrypt hash digests.
+
+This subcommand allows generating cryptographic scrypt hash digests.
+
+```
+authelia crypto hash generate scrypt [flags]
+```
+
+### Examples
+
+```
+authelia crypto hash generate scrypt --help
+```
+
+### Options
+
+```
+  -r, --block-size int      block size (default 8)
+  -c, --config strings      configuration files to load (default [configuration.yml])
+  -h, --help                help for scrypt
+  -i, --iterations int      number of iterations (default 16)
+  -k, --key-size int        key size in bytes (default 32)
+      --no-confirm          skip the password confirmation prompt
+  -p, --parallelism int     parallelism or threads (default 1)
+      --password string     manually supply the password rather than using the terminal prompt
+      --random              uses a randomly generated password
+      --random.length int   when using a randomly generated password it configures the length (default 72)
+  -s, --salt-size int       salt size in bytes (default 16)
+```
+
+### SEE ALSO
+
+* [authelia crypto hash generate](authelia_crypto_hash_generate.md)	 - Generate cryptographic hash digests
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
new file mode 100644
index 000000000..2537ea192
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
@@ -0,0 +1,52 @@
+---
+title: "authelia crypto hash generate sha2crypt"
+description: "Reference for the authelia crypto hash generate sha2crypt command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash generate sha2crypt
+
+Generate cryptographic SHA2 Crypt hash digests
+
+### Synopsis
+
+Generate cryptographic SHA2 Crypt hash digests.
+
+This subcommand allows generating cryptographic SHA2 Crypt hash digests.
+
+```
+authelia crypto hash generate sha2crypt [flags]
+```
+
+### Examples
+
+```
+authelia crypto hash generate sha2crypt --help
+```
+
+### Options
+
+```
+  -c, --config strings      configuration files to load (default [configuration.yml])
+  -h, --help                help for sha2crypt
+  -i, --iterations int      number of iterations (default 50000)
+      --no-confirm          skip the password confirmation prompt
+      --password string     manually supply the password rather than using the terminal prompt
+      --random              uses a randomly generated password
+      --random.length int   when using a randomly generated password it configures the length (default 72)
+  -s, --salt-size int       salt size in bytes (default 16)
+  -v, --variant string      variant, options are sha256 and sha512 (default "sha512")
+```
+
+### SEE ALSO
+
+* [authelia crypto hash generate](authelia_crypto_hash_generate.md)	 - Generate cryptographic hash digests
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md
new file mode 100644
index 000000000..a70bb80d8
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md
@@ -0,0 +1,46 @@
+---
+title: "authelia crypto hash validate"
+description: "Reference for the authelia crypto hash validate command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto hash validate
+
+Perform cryptographic hash validations
+
+### Synopsis
+
+Perform cryptographic hash validations.
+
+This subcommand allows preforming cryptographic hash validations. i.e. checking hash digests against a password.
+
+```
+authelia crypto hash validate [flags] -- <digest>
+```
+
+### Examples
+
+```
+authelia crypto hash validate --help
+authelia crypto hash validate '$5$rounds=500000$WFjMpdCQxIkbNl0k$M0qZaZoK8Gwdh8Cw5diHgGfe5pE0iJvxcVG3.CVnQe.' -- 'p@ssw0rd'
+```
+
+### Options
+
+```
+  -h, --help              help for validate
+      --password string   manually supply the password rather than using the terminal prompt
+```
+
+### SEE ALSO
+
+* [authelia crypto hash](authelia_crypto_hash.md)	 - Perform cryptographic hash operations
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
new file mode 100644
index 000000000..764bfefd2
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
@@ -0,0 +1,55 @@
+---
+title: "authelia crypto rand"
+description: "Reference for the authelia crypto rand command."
+lead: ""
+date: 2022-08-27T10:46:58+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia crypto rand
+
+Generate a cryptographically secure random string
+
+### Synopsis
+
+Generate a cryptographically secure random string.
+
+This subcommand allows generating cryptographically secure random strings for use for encryption keys, HMAC keys, etc.
+
+```
+authelia crypto rand [flags]
+```
+
+### Examples
+
+```
+authelia crypto rand --help
+authelia crypto rand --length 80
+authelia crypto rand -n 80
+authelia crypto rand --charset alphanumeric
+authelia crypto rand --charset alphabetic
+authelia crypto rand --charset ascii
+authelia crypto rand --charset numeric
+authelia crypto rand --charset numeric-hex
+authelia crypto rand --characters 0123456789ABCDEF
+```
+
+### Options
+
+```
+      --characters string   Sets the explicit characters for the random output
+  -c, --charset string      Sets the charset for the output, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+  -h, --help                help for rand
+  -n, --length int          Sets the length of the random output (default 80)
+```
+
+### SEE ALSO
+
+* [authelia crypto](authelia_crypto.md)	 - Perform cryptographic operations
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_hash-password.md b/docs/content/en/reference/cli/authelia/authelia_hash-password.md
index e0fc9c883..7c7f97048 100644
--- a/docs/content/en/reference/cli/authelia/authelia_hash-password.md
+++ b/docs/content/en/reference/cli/authelia/authelia_hash-password.md
@@ -21,7 +21,7 @@ Hash a password to be used in file-based users database
 Hash a password to be used in file-based users database.
 
 ```
-authelia hash-password [flags] -- <password>
+authelia hash-password [flags] -- [password]
 ```
 
 ### Examples
@@ -38,13 +38,13 @@ authelia hash-password --key-length=64 -- 'mypass'
 ### Options
 
 ```
-  -c, --config strings    Configuration files
+  -c, --config strings    configuration files to load (default [configuration.yml])
   -h, --help              help for hash-password
   -i, --iterations int    set the number of hashing iterations (default 3)
   -k, --key-length int    [argon2id] set the key length param (default 32)
-  -m, --memory int        [argon2id] set the amount of memory param (in MB) (default 64)
+  -m, --memory int        [argon2id] set the amount of memory param (in MB) (default 65536)
+      --no-confirm        skip the password confirmation prompt
   -p, --parallelism int   [argon2id] set the parallelism param (default 4)
-  -s, --salt string       set the salt string
   -l, --salt-length int   set the auto-generated salt length (default 16)
   -z, --sha512            use sha512 as the algorithm (changes iterations to 50000, change with -i)
 ```
diff --git a/docs/content/en/reference/guides/passwords.md b/docs/content/en/reference/guides/passwords.md
index 87a56bd85..1e2fd4963 100644
--- a/docs/content/en/reference/guides/passwords.md
+++ b/docs/content/en/reference/guides/passwords.md
@@ -52,25 +52,33 @@ users:
 
 The file contains hashed passwords instead of plain text passwords for security reasons.
 
-You can use Authelia binary or docker image to generate the hash of any password. The [hash-password] command has many
-tunable options, you can view them with the `authelia hash-password --help` command. For example if you wanted to
-improve the entropy you could generate a 16 byte salt and provide it with the `--salt` flag.
+You can use Authelia binary or docker image to generate the hash of any password. The [crypt hash generate] command has
+many supported algorithms. To view them run the `authelia crypto hash generate --help` command. To see the tunable
+options for an algorithm subcommand include that command before `--help`. For example for the [Argon2] algorithm use the
+`authelia crypto hash generate argon2 --help` command to see the available options.
 
-Example: `authelia hash-password --salt abcdefghijklhijl -- 'password'`.
-
-Passwords passed to [hash-password] should be single quoted if using special characters to prevent parameter
-substitution. In addition the password should be the last parameter, and should be after a `--`. For instance to
-generate a hash with the docker image just run:
+Passwords passed to [crypt hash generate] should be single quoted if using the `--password` parameter instead of the
+console prompt, especially if it has  special characters to prevent parameter substitution. For instance to generate an
+[Argon2] hash with the docker image just run:
 
 ```bash
-$ docker run authelia/authelia:latest authelia hash-password -- 'password'
-Password hash: $argon2id$v=19$m=65536$3oc26byQuSkQqksq$zM1QiTvVPrMfV6BVLs2t4gM+af5IN7euO0VB6+Q8ZFs
+$ docker run authelia/authelia:latest authelia crypto hash generate argon2 --password 'password'
+Digest: $argon2id$v=19$m=65536,t=3,p=4$Hjc8e7WYcBFcJmEDUOsS9A$ozM7RyZR1EyDR8cuyVpDDfmLrGPGFgo5E2NNqRumui4
 ```
 
 You may also use the `--config` flag to point to your existing configuration. When used, the values defined in the
-config will be used instead.
+config will be used instead. For example to generate the password with a configuration file named `configuration.yml`
+in the current directory:
 
-See the [full CLI reference documentation](../cli/authelia/authelia_hash-password.md).
+```bash
+$ docker run -v ./configuration.yml:/configuration.yml -it authelia/authelia:latest authelia crypto hash generate --config /configuration.yml
+Enter Password:
+Confirm Password:
+
+Digest: $argon2id$v=19$m=65536,t=3,p=4$Hjc8e7WYcBFcJmEDUOsS9A$ozM7RyZR1EyDR8cuyVpDDfmLrGPGFgo5E2NNqRumui4
+```
+
+See the [full CLI reference documentation](../cli/authelia/authelia_crypto_hash_generate.md).
 
 ### Cost
 
@@ -88,11 +96,11 @@ all algorithms. The main cost type measurements are:
 * CPU
 * Memory
 
-*__Important Note:__ When using algorithms that use a memory cost like [Argon2] it should be noted that this memory is
-released by Go after the hashing process completes, however the operating system may not reclaim the memory until a
-later time such as when the system is experiencing memory pressure which may cause the appearance of more memory being
-in use than Authelia is actually actively using. Authelia will typically reuse this memory if it has not be reclaimed as
-long as another hashing calculation is not still utilizing it.*
+*__Important Note:__ When using algorithms that use a memory cost like [Argon2] and [Scrypt] it should be noted that
+this memory is released by Go after the hashing process completes, however the operating system may not reclaim the
+memory until a later time such as when the system is experiencing memory pressure which may cause the appearance of more
+memory being in use than Authelia is actually actively using. Authelia will typically reuse this memory if it has not be
+reclaimed as long as another hashing calculation is not still utilizing it.*
 
 To get a rough estimate of how much memory should be utilized with these algorithms you can utilize the following
 command:
@@ -114,7 +122,7 @@ widely considered to be the best hashing algorithm, and in 2015 won the [Passwor
 customizable parameters including a memory parameter allowing the [cost](#cost) of computing a hash to scale into the
 future with better hardware which makes it harder to brute-force.
 
-For backwards compatibility and user choice support for the [SHA Crypt] algorithm (`SHA512` variant) is still available.
+For backwards compatibility and user choice support for the [SHA2 Crypt] algorithm (`SHA512` variant) is still available.
 While it's a reasonable hashing function given high enough iterations, as hardware improves it has a higher chance of
 being brute-forced since it only allows scaling the CPU [cost](#cost) whereas [Argon2] allows scaling both for CPU and
 Memory [cost](#cost).
@@ -123,10 +131,21 @@ Memory [cost](#cost).
 
 The algorithm that a hash is utilizing is identifiable by its prefix:
 
-|  Algorithm  | Variant  |    Prefix    |
-|:-----------:|:--------:|:------------:|
-|  [Argon2]   |   `id`   | `$argon2id$` |
-| [SHA Crypt] | `SHA512` |    `$6$`     |
+|  Algorithm   |  Variant   |      Prefix       |
+|:------------:|:----------:|:-----------------:|
+|   [Argon2]   | `argon2id` |   `$argon2id$`    |
+|   [Argon2]   | `argon2i`  |    `$argon2i$`    |
+|   [Argon2]   | `argon2d`  |    `$argon2d$`    |
+|   [Scrypt]   |    N/A     |    `$scrypt$`     |
+|   [PBKDF2]   |   `sha1`   |    `$pbkdf2$`     |
+|   [PBKDF2]   |  `sha224`  | `$pbkdf2-sha224$` |
+|   [PBKDF2]   |  `sha256`  | `$pbkdf2-sha256$` |
+|   [PBKDF2]   |  `sha384`  | `$pbkdf2-sha384$` |
+|   [PBKDF2]   |  `sha512`  | `$pbkdf2-sha512$` |
+| [SHA2 Crypt] |  `SHA256`  |       `$5$`       |
+| [SHA2 Crypt] |  `SHA512`  |       `$6$`       |
+|   [Bcrypt]   | `standard` |      `$2b$`       |
+|   [Bcrypt]   |  `sha256`  | `$bcrypt-sha256$` |
 
 See the [Crypt (C) Wiki page](https://en.wikipedia.org/wiki/Crypt_(C)) for more information.
 
@@ -140,27 +159,44 @@ adequately determine the [cost](#cost).
 While there are recommended parameters for each algorithm it's your responsibility to tune these individually for your
 particular system.
 
-#### Recommended Parameters: Argon2id
+#### Algorithm Choice
+
+We generally discourage [Bcrypt] except when needed for interoperability with legacy systems. The `argon2id` variant of
+the [Argon2] algorithm is the best choice of the algorithms available, but it's important to note that the `argon2id`
+variant is the most resilient variant, followed by the `argon2d` variant and the `argon2i` variant not being recommended.
+It's strongly recommended if you're unsure that you use `argon2id`. [Scrypt] is a likely second best algorithm. [PBKDF2]
+is practically the only choice when it comes to [FIPS-140 compliance]. The `sha512` variant of the [SHA2 Crypt]
+algorithm is also a reasonable option, but is mainly available for backwards compatability.
+
+All other algorithms and variants available exist only for interoperability and we discourage their use if a better
+algorithm is available in your scenario.
+
+#### Recommended Parameters: Argon2
 
 This table adapts the [RFC9106 Parameter Choice] recommendations to our configuration options:
 
-|  Situation  | Iterations (t) | Parallelism (p) | Memory (m) | Salt Size | Key Size |
-|:-----------:|:--------------:|:---------------:|:----------:|:---------:|:--------:|
-| Low Memory  |       3        |        4        |     64     |    16     |    32    |
-| Recommended |       1        |        4        |    2048    |    16     |    32    |
+|  Situation  | Variant  | Iterations (t) | Parallelism (p) | Memory (m) | Salt Size | Key Size |
+|:-----------:|:--------:|:--------------:|:---------------:|:----------:|:---------:|:--------:|
+| Low Memory  | argon2id |       3        |        4        |   65536    |    16     |    32    |
+| Recommended | argon2id |       1        |        4        |  2097152   |    16     |    32    |
 
-#### Recommended Parameters: SHA512
+#### Recommended Parameters: SHA2 Crypt
 
-This table suggests the parameters for the [SHA Crypt] (`SHA512` variant) algorithm:
+This table suggests the parameters for the [SHA2 Crypt] algorithm:
 
-|  Situation   | Iterations (rounds) | Salt Size |
-|:------------:|:-------------------:|:---------:|
-| Standard CPU |        50000        |    16     |
-| High End CPU |       150000        |    16     |
+|  Situation   | Variant | Iterations (rounds) | Salt Size |
+|:------------:|:-------:|:-------------------:|:---------:|
+| Standard CPU | sha512  |        50000        |    16     |
+| High End CPU | sha512  |       150000        |    16     |
+
+[Argon2]: https://www.rfc-editor.org/rfc/rfc9106.html
+[Scrypt]: https://en.wikipedia.org/wiki/Scrypt
+[PBKDF2]: https://www.ietf.org/rfc/rfc2898.html
+[SHA2 Crypt]: https://www.akkadia.org/drepper/SHA-crypt.txt
+[Bcrypt]: https://en.wikipedia.org/wiki/Bcrypt
+[FIPS-140 compliance]: https://csrc.nist.gov/publications/detail/fips/140/2/final
 
 [RFC9106 Parameter Choice]: https://www.rfc-editor.org/rfc/rfc9106.html#section-4
 [YAML]: https://yaml.org/
-[Argon2]: https://www.rfc-editor.org/rfc/rfc9106.html
-[SHA Crypt]: https://www.akkadia.org/drepper/SHA-crypt.txt
-[hash-password]: ../cli/authelia/authelia_hash-password.md
+[crypt hash generate]: ../cli/authelia/authelia_crypto_hash_generate.md
 [Password Hashing Competition]: https://en.wikipedia.org/wiki/Password_Hashing_Competition
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index c3bb2436f..015075211 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/go.mod b/go.mod
index e8038dc4c..d21b81f6f 100644
--- a/go.mod
+++ b/go.mod
@@ -10,6 +10,7 @@ require (
 	github.com/fasthttp/router v1.4.12
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/go-asn1-ber/asn1-ber v1.5.4
+	github.com/go-crypt/crypt v0.1.13
 	github.com/go-ldap/ldap/v3 v3.4.4
 	github.com/go-rod/rod v0.111.0
 	github.com/go-sql-driver/mysql v1.6.0
@@ -29,7 +30,6 @@ require (
 	github.com/pkg/errors v0.9.1
 	github.com/pquerna/otp v1.3.0
 	github.com/prometheus/client_golang v1.13.0
-	github.com/simia-tech/crypt v0.5.1
 	github.com/sirupsen/logrus v1.9.0
 	github.com/spf13/cobra v1.6.0
 	github.com/spf13/pflag v1.0.5
@@ -37,6 +37,7 @@ require (
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
 	golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
+	golang.org/x/term v0.0.0-20220919170432-7a66f970e087
 	golang.org/x/text v0.3.8
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
@@ -57,6 +58,7 @@ require (
 	github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 // indirect
 	github.com/fsnotify/fsnotify v1.5.1 // indirect
 	github.com/fxamacker/cbor/v2 v2.4.0 // indirect
+	github.com/go-crypt/x v0.1.3 // indirect
 	github.com/go-redis/redis/v8 v8.11.5 // indirect
 	github.com/go-webauthn/revoke v0.1.3 // indirect
 	github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b // indirect
@@ -106,7 +108,7 @@ require (
 	golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8 // indirect
 	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
 	golang.org/x/net v0.0.0-20220722155237-a158d28d115b // indirect
-	golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f // indirect
+	golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43 // indirect
 	golang.org/x/tools v0.1.12 // indirect
 	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
 	google.golang.org/grpc v1.42.0 // indirect
@@ -115,4 +117,4 @@ require (
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 )
 
-replace github.com/mattn/go-sqlite3 v2.0.3+incompatible => github.com/mattn/go-sqlite3 v1.14.14
+replace github.com/mattn/go-sqlite3 v2.0.3+incompatible => github.com/mattn/go-sqlite3 v1.14.15
diff --git a/go.sum b/go.sum
index b130a365b..bfbd3e379 100644
--- a/go.sum
+++ b/go.sum
@@ -239,6 +239,10 @@ github.com/globalsign/mgo v0.0.0-20181015135952-eeefdecb41b8/go.mod h1:xkRDCp4j0
 github.com/go-asn1-ber/asn1-ber v1.5.4 h1:vXT6d/FNDiELJnLb6hGNa309LMsrCoYFvpwHDF0+Y1A=
 github.com/go-asn1-ber/asn1-ber v1.5.4/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkProFKoKdwZRWMe0=
 github.com/go-bindata/go-bindata v3.1.1+incompatible/go.mod h1:xK8Dsgwmeed+BBsSy2XTopBn/8uK2HWuGSnA11C3Joo=
+github.com/go-crypt/crypt v0.1.13 h1:MdmKsHjuT17LmFROTMtGEXBgojN23OyWhmV6JfGZNvw=
+github.com/go-crypt/crypt v0.1.13/go.mod h1:VNLdWMD0go46arq5WVZB2MV/9Vw02FOWhKDORXl7K2c=
+github.com/go-crypt/x v0.1.3 h1:3YSlHqOZsw4gcPzfqrcc5kg4GIhTKmkjl/ZVqJ3CbbU=
+github.com/go-crypt/x v0.1.3/go.mod h1:/6X1DjQki055ajXV/7pCHZM0OmMR1+csiXFkxK73Kc8=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
@@ -959,8 +963,7 @@ github.com/mattn/go-sqlite3 v1.9.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOq
 github.com/mattn/go-sqlite3 v1.10.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOqkbpncsNc=
 github.com/mattn/go-sqlite3 v1.11.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOqkbpncsNc=
 github.com/mattn/go-sqlite3 v1.14.6/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
-github.com/mattn/go-sqlite3 v1.14.14 h1:qZgc/Rwetq+MtyE18WhzjokPD93dNqLGNT3QJuLvBGw=
-github.com/mattn/go-sqlite3 v1.14.14/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
+github.com/mattn/go-sqlite3 v1.14.15 h1:vfoHhTN1af61xCRSWzFIWzx2YskyMTwHLrExkBOjvxI=
 github.com/mattn/go-sqlite3 v1.14.15/go.mod h1:2eHXhiwb8IkHr+BDWZGa96P6+rkvnG63S2DGjv9HUNg=
 github.com/mattn/goveralls v0.0.2/go.mod h1:8d1ZMHsd7fW6IRPKQh46F2WRpyib5/X4FOpevwGNQEw=
 github.com/mattn/goveralls v0.0.6 h1:cr8Y0VMo/MnEZBjxNN/vh6G90SZ7IMb6lms1dzMoO+Y=
@@ -1248,8 +1251,6 @@ github.com/shurcooL/highlight_go v0.0.0-20170515013102-78fb10f4a5f8/go.mod h1:UD
 github.com/shurcooL/octicon v0.0.0-20180602230221-c42b0e3b24d9/go.mod h1:eWdoE5JD4R5UVWDucdOPg1g2fqQRq78IQa9zlOV1vpQ=
 github.com/shurcooL/sanitized_anchor_name v0.0.0-20170918181015-86672fcb3f95/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
-github.com/simia-tech/crypt v0.5.1 h1:rQa3qz8Xx4zNu4Uwtl4e6l7AKZBhYLrawZGfZjRLJYU=
-github.com/simia-tech/crypt v0.5.1/go.mod h1:VUAuUEkBhS6nI4JupmA8WBg+tkcZCSANpFSMLpsJAcQ=
 github.com/sirupsen/logrus v1.0.4-0.20170822132746-89742aefa4b2/go.mod h1:pMByvHTf9Beacp5x1UXfOR9xyW/9antXMhjMPG0dEzc=
 github.com/sirupsen/logrus v1.0.6/go.mod h1:pMByvHTf9Beacp5x1UXfOR9xyW/9antXMhjMPG0dEzc=
 github.com/sirupsen/logrus v1.1.0/go.mod h1:zrgwTnHtNr00buQ1vSptGe8m1f/BbgsPukg8qsT7A+A=
@@ -1317,7 +1318,6 @@ github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.2.0/go.mod h1:qt09Ya8vawLte6SNmTgCsAVtYtaKzEcn8ATUoHMkEqE=
 github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
-github.com/stretchr/testify v1.2.0/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
@@ -1493,7 +1493,6 @@ golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2/go.mod h1:T9bdIzuCu7OtxOm
 golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20220214200702-86341886e292/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.0.0-20220427172511-eb4f295cb31f/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8 h1:GIAS/yBem/gq2MUqgNIzUHW7cJMmx3TGZOrnyYaNQ6c=
@@ -1722,11 +1721,13 @@ golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f h1:v4INt8xihDGvnrfjMDVXGxw9wrfxYyCjk0KbXjhR55s=
-golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43 h1:OK7RB6t2WQX54srQQYSXMW8dF5C6/8+oA/s5QBmmto4=
+golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.0.0-20220919170432-7a66f970e087 h1:tPwmk4vmvVCMdr98VgL4JH+qZxPL8fqlUOHnyOM8N3w=
+golang.org/x/term v0.0.0-20220919170432-7a66f970e087/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
diff --git a/internal/authentication/const.go b/internal/authentication/const.go
index 61a5d246a..201f3fff2 100644
--- a/internal/authentication/const.go
+++ b/internal/authentication/const.go
@@ -65,6 +65,10 @@ const (
 	ldapAttributeUserPassword = "userPassword"
 )
 
+const (
+	ldapBaseObjectFilter = "(objectClass=*)"
+)
+
 const (
 	ldapPlaceholderInput             = "{input}"
 	ldapPlaceholderDistinguishedName = "{dn}"
@@ -75,37 +79,17 @@ const (
 	none = "none"
 )
 
-// CryptAlgo the crypt representation of an algorithm used in the prefix of the hash.
-type CryptAlgo string
-
 const (
-	// HashingAlgorithmArgon2id Argon2id hash identifier.
-	HashingAlgorithmArgon2id CryptAlgo = argon2id
-	// HashingAlgorithmSHA512 SHA512 hash identifier.
-	HashingAlgorithmSHA512 CryptAlgo = "6"
+	hashArgon2    = "argon2"
+	hashSHA2Crypt = "sha2crypt"
+	hashPBKDF2    = "pbkdf2"
+	hashSCrypt    = "scrypt"
+	hashBCrypt    = "bcrypt"
 )
 
-// These are the default values from the upstream crypt module we use them to for GetInt
-// and they need to be checked when updating github.com/simia-tech/crypt.
-const (
-	HashingDefaultArgon2idTime        = 1
-	HashingDefaultArgon2idMemory      = 32 * 1024
-	HashingDefaultArgon2idParallelism = 4
-	HashingDefaultArgon2idKeyLength   = 32
-	HashingDefaultSHA512Iterations    = 5000
-)
-
-// HashingPossibleSaltCharacters represents valid hashing runes.
-var HashingPossibleSaltCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/"
-
 // ErrUserNotFound indicates the user wasn't found in the authentication backend.
 var ErrUserNotFound = errors.New("user not found")
 
-const argon2id = "argon2id"
-const sha512 = "sha512"
-
-const testPassword = "my;secure*password"
-
 const fileAuthenticationMode = 0600
 
 // OWASP recommends to escape some special characters.
diff --git a/internal/authentication/file_user_provider.go b/internal/authentication/file_user_provider.go
index c4ea7af4e..6c81139e1 100644
--- a/internal/authentication/file_user_provider.go
+++ b/internal/authentication/file_user_provider.go
@@ -4,11 +4,8 @@ import (
 	_ "embed" // Embed users_database.template.yml.
 	"fmt"
 	"os"
-	"strings"
-	"sync"
 
-	"github.com/asaskevich/govalidator"
-	"gopkg.in/yaml.v3"
+	"github.com/go-crypt/crypt"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 	"github.com/authelia/authelia/v4/internal/logging"
@@ -16,196 +13,148 @@ import (
 
 // FileUserProvider is a provider reading details from a file.
 type FileUserProvider struct {
-	configuration *schema.FileAuthenticationBackendConfiguration
-	database      *DatabaseModel
-	lock          *sync.Mutex
-}
-
-// UserDetailsModel is the model of user details in the file database.
-type UserDetailsModel struct {
-	HashedPassword string   `yaml:"password" valid:"required"`
-	DisplayName    string   `yaml:"displayname" valid:"required"`
-	Email          string   `yaml:"email"`
-	Groups         []string `yaml:"groups"`
-}
-
-// DatabaseModel is the model of users file database.
-type DatabaseModel struct {
-	Users map[string]UserDetailsModel `yaml:"users" valid:"required"`
+	config   *schema.FileAuthenticationBackend
+	hash     crypt.Hash
+	database *FileUserDatabase
 }
 
 // NewFileUserProvider creates a new instance of FileUserProvider.
-func NewFileUserProvider(configuration *schema.FileAuthenticationBackendConfiguration) *FileUserProvider {
-	logger := logging.Logger()
-
-	errs := checkDatabase(configuration.Path)
-	if errs != nil {
-		for _, err := range errs {
-			logger.Error(err)
-		}
-
-		os.Exit(1)
-	}
-
-	database, err := readDatabase(configuration.Path)
-	if err != nil {
-		// Panic since the file does not exist when Authelia is starting.
-		panic(err)
-	}
-
-	// Early check whether hashed passwords are correct for all users.
-	err = checkPasswordHashes(database)
-	if err != nil {
-		panic(err)
-	}
-
+func NewFileUserProvider(config *schema.FileAuthenticationBackend) (provider *FileUserProvider) {
 	return &FileUserProvider{
-		configuration: configuration,
-		database:      database,
-		lock:          &sync.Mutex{},
+		config: config,
 	}
 }
 
-func checkPasswordHashes(database *DatabaseModel) error {
-	for u, v := range database.Users {
-		v.HashedPassword = strings.ReplaceAll(v.HashedPassword, "{CRYPT}", "")
-		_, err := ParseHash(v.HashedPassword)
+// CheckUserPassword checks if provided password matches for the given user.
+func (p *FileUserProvider) CheckUserPassword(username string, password string) (match bool, err error) {
+	var details DatabaseUserDetails
 
-		if err != nil {
-			return fmt.Errorf("Unable to parse hash of user %s: %s", u, err)
-		}
+	if details, err = p.database.GetUserDetails(username); err != nil {
+		return false, err
+	}
 
-		database.Users[u] = v
+	if details.Disabled {
+		return false, ErrUserNotFound
+	}
+
+	return details.Digest.MatchAdvanced(password)
+}
+
+// GetDetails retrieve the groups a user belongs to.
+func (p *FileUserProvider) GetDetails(username string) (details *UserDetails, err error) {
+	var d DatabaseUserDetails
+
+	if d, err = p.database.GetUserDetails(username); err != nil {
+		return nil, err
+	}
+
+	if d.Disabled {
+		return nil, ErrUserNotFound
+	}
+
+	return d.ToUserDetails(), nil
+}
+
+// UpdatePassword update the password of the given user.
+func (p *FileUserProvider) UpdatePassword(username string, newPassword string) (err error) {
+	var details DatabaseUserDetails
+
+	if details, err = p.database.GetUserDetails(username); err != nil {
+		return err
+	}
+
+	if details.Disabled {
+		return ErrUserNotFound
+	}
+
+	if details.Digest, err = p.hash.Hash(newPassword); err != nil {
+		return err
+	}
+
+	p.database.SetUserDetails(details.Username, &details)
+
+	if err = p.database.Save(); err != nil {
+		return err
 	}
 
 	return nil
 }
 
-func checkDatabase(path string) []error {
-	_, err := os.Stat(path)
-	if err != nil {
-		errs := []error{
-			fmt.Errorf("Unable to find database file: %v", path),
-			fmt.Errorf("Generating database file: %v", path),
+// StartupCheck implements the startup check provider interface.
+func (p *FileUserProvider) StartupCheck() (err error) {
+	if err = checkDatabase(p.config.Path); err != nil {
+		logging.Logger().WithError(err).Errorf("Error checking user authentication YAML database")
+
+		return fmt.Errorf("one or more errors occurred checking the authentication database")
+	}
+
+	if p.hash, err = NewFileCryptoHashFromConfig(p.config.Password); err != nil {
+		return err
+	}
+
+	p.database = NewFileUserDatabase(p.config.Path)
+
+	if err = p.database.Load(); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// NewFileCryptoHashFromConfig returns a crypt.Hash given a valid configuration.
+func NewFileCryptoHashFromConfig(config schema.Password) (hash crypt.Hash, err error) {
+	switch config.Algorithm {
+	case hashArgon2, "":
+		hash = crypt.NewArgon2Hash().
+			WithVariant(crypt.NewArgon2Variant(config.Argon2.Variant)).
+			WithT(config.Argon2.Iterations).
+			WithM(config.Argon2.Memory).
+			WithP(config.Argon2.Parallelism).
+			WithK(config.Argon2.KeyLength).
+			WithS(config.Argon2.SaltLength)
+	case hashSHA2Crypt:
+		hash = crypt.NewSHA2CryptHash().
+			WithVariant(crypt.NewSHA2CryptVariant(config.SHA2Crypt.Variant)).
+			WithRounds(config.SHA2Crypt.Iterations).
+			WithSaltLength(config.SHA2Crypt.SaltLength)
+	case hashPBKDF2:
+		hash = crypt.NewPBKDF2Hash().
+			WithVariant(crypt.NewPBKDF2Variant(config.PBKDF2.Variant)).
+			WithIterations(config.PBKDF2.Iterations).
+			WithSaltLength(config.PBKDF2.SaltLength)
+	case hashSCrypt:
+		hash = crypt.NewScryptHash().
+			WithLN(config.SCrypt.Iterations).
+			WithP(config.SCrypt.Parallelism).
+			WithR(config.SCrypt.BlockSize)
+	case hashBCrypt:
+		hash = crypt.NewBcryptHash().
+			WithVariant(crypt.NewBcryptVariant(config.BCrypt.Variant)).
+			WithCost(config.BCrypt.Cost)
+	default:
+		return nil, fmt.Errorf("algorithm '%s' is unknown", config.Algorithm)
+	}
+
+	if err = hash.Validate(); err != nil {
+		return nil, fmt.Errorf("failed to validate hash settings: %w", err)
+	}
+
+	return hash, nil
+}
+
+func checkDatabase(path string) (err error) {
+	if _, err = os.Stat(path); os.IsNotExist(err) {
+		if err = os.WriteFile(path, userYAMLTemplate, 0600); err != nil {
+			return fmt.Errorf("user authentication database file doesn't exist at path '%s' and could not be generated: %w", path, err)
 		}
 
-		err := generateDatabaseFromTemplate(path)
-		if err != nil {
-			errs = append(errs, err)
-		} else {
-			errs = append(errs, fmt.Errorf("Generated database at: %v", path))
-		}
-
-		return errs
+		return fmt.Errorf("user authentication database file doesn't exist at path '%s' and has been generated", path)
+	} else if err != nil {
+		return fmt.Errorf("error checking user authentication database file: %w", err)
 	}
 
 	return nil
 }
 
 //go:embed users_database.template.yml
-var cfg []byte
-
-func generateDatabaseFromTemplate(path string) error {
-	err := os.WriteFile(path, cfg, 0600)
-	if err != nil {
-		return fmt.Errorf("Unable to generate %v: %v", path, err)
-	}
-
-	return nil
-}
-
-func readDatabase(path string) (*DatabaseModel, error) {
-	content, err := os.ReadFile(path)
-	if err != nil {
-		return nil, fmt.Errorf("Unable to read database from file %s: %s", path, err)
-	}
-
-	db := DatabaseModel{}
-
-	err = yaml.Unmarshal(content, &db)
-	if err != nil {
-		return nil, fmt.Errorf("Unable to parse database: %s", err)
-	}
-
-	ok, err := govalidator.ValidateStruct(db)
-	if err != nil {
-		return nil, fmt.Errorf("Invalid schema of database: %s", err)
-	}
-
-	if !ok {
-		return nil, fmt.Errorf("The database format is invalid: %s", err)
-	}
-
-	return &db, nil
-}
-
-// CheckUserPassword checks if provided password matches for the given user.
-func (p *FileUserProvider) CheckUserPassword(username string, password string) (bool, error) {
-	if details, ok := p.database.Users[username]; ok {
-		ok, err := CheckPassword(password, details.HashedPassword)
-		if err != nil {
-			return false, err
-		}
-
-		return ok, nil
-	}
-
-	return false, ErrUserNotFound
-}
-
-// GetDetails retrieve the groups a user belongs to.
-func (p *FileUserProvider) GetDetails(username string) (*UserDetails, error) {
-	if details, ok := p.database.Users[username]; ok {
-		return &UserDetails{
-			Username:    username,
-			DisplayName: details.DisplayName,
-			Groups:      details.Groups,
-			Emails:      []string{details.Email},
-		}, nil
-	}
-
-	return nil, fmt.Errorf("User '%s' does not exist in database", username)
-}
-
-// UpdatePassword update the password of the given user.
-func (p *FileUserProvider) UpdatePassword(username string, newPassword string) error {
-	details, ok := p.database.Users[username]
-	if !ok {
-		return ErrUserNotFound
-	}
-
-	algorithm, err := ConfigAlgoToCryptoAlgo(p.configuration.Password.Algorithm)
-	if err != nil {
-		return err
-	}
-
-	hash, err := HashPassword(
-		newPassword, "", algorithm, p.configuration.Password.Iterations,
-		p.configuration.Password.Memory*1024, p.configuration.Password.Parallelism,
-		p.configuration.Password.KeyLength, p.configuration.Password.SaltLength)
-
-	if err != nil {
-		return err
-	}
-
-	details.HashedPassword = hash
-
-	p.lock.Lock()
-	p.database.Users[username] = details
-
-	b, err := yaml.Marshal(p.database)
-	if err != nil {
-		p.lock.Unlock()
-		return err
-	}
-
-	err = os.WriteFile(p.configuration.Path, b, fileAuthenticationMode)
-	p.lock.Unlock()
-
-	return err
-}
-
-// StartupCheck implements the startup check provider interface.
-func (p *FileUserProvider) StartupCheck() (err error) {
-	return nil
-}
+var userYAMLTemplate []byte
diff --git a/internal/authentication/file_user_provider_database.go b/internal/authentication/file_user_provider_database.go
new file mode 100644
index 000000000..6c415ca17
--- /dev/null
+++ b/internal/authentication/file_user_provider_database.go
@@ -0,0 +1,222 @@
+package authentication
+
+import (
+	"fmt"
+	"os"
+	"sync"
+
+	"github.com/asaskevich/govalidator"
+	"github.com/go-crypt/crypt"
+	"gopkg.in/yaml.v3"
+)
+
+// NewFileUserDatabase creates a new FileUserDatabase.
+func NewFileUserDatabase(filePath string) (database *FileUserDatabase) {
+	return &FileUserDatabase{
+		RWMutex: &sync.RWMutex{},
+		Path:    filePath,
+		Users:   map[string]DatabaseUserDetails{},
+	}
+}
+
+// FileUserDatabase is a user details database that is concurrency safe database and can be reloaded.
+type FileUserDatabase struct {
+	*sync.RWMutex
+
+	Path  string
+	Users map[string]DatabaseUserDetails
+}
+
+// Save the database to disk.
+func (m *FileUserDatabase) Save() (err error) {
+	m.RLock()
+
+	defer m.RUnlock()
+
+	if err = m.ToDatabaseModel().Write(m.Path); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// Load the database from disk.
+func (m *FileUserDatabase) Load() (err error) {
+	yml := &DatabaseModel{Users: map[string]UserDetailsModel{}}
+
+	if err = yml.Read(m.Path); err != nil {
+		return fmt.Errorf("error reading the authentication database: %w", err)
+	}
+
+	m.Lock()
+
+	defer m.Unlock()
+
+	if err = yml.ReadToFileUserDatabase(m); err != nil {
+		return fmt.Errorf("error decoding the authentication database: %w", err)
+	}
+
+	return nil
+}
+
+// GetUserDetails get a DatabaseUserDetails given a username as a value type where the username must be the users actual
+// username.
+func (m *FileUserDatabase) GetUserDetails(username string) (user DatabaseUserDetails, err error) {
+	m.RLock()
+
+	defer m.RUnlock()
+
+	if details, ok := m.Users[username]; ok {
+		return details, nil
+	}
+
+	return user, ErrUserNotFound
+}
+
+// SetUserDetails sets the DatabaseUserDetails for a given user.
+func (m *FileUserDatabase) SetUserDetails(username string, details *DatabaseUserDetails) {
+	if details == nil {
+		return
+	}
+
+	m.Lock()
+
+	m.Users[username] = *details
+
+	m.Unlock()
+}
+
+// ToDatabaseModel converts the FileUserDatabase into the DatabaseModel for saving.
+func (m *FileUserDatabase) ToDatabaseModel() (model *DatabaseModel) {
+	model = &DatabaseModel{
+		Users: map[string]UserDetailsModel{},
+	}
+
+	m.RLock()
+
+	for user, details := range m.Users {
+		model.Users[user] = details.ToUserDetailsModel()
+	}
+
+	m.RUnlock()
+
+	return model
+}
+
+// DatabaseUserDetails is the model of user details in the file database.
+type DatabaseUserDetails struct {
+	Username    string
+	Digest      crypt.Digest
+	Disabled    bool
+	DisplayName string
+	Email       string
+	Groups      []string
+}
+
+// ToUserDetails converts DatabaseUserDetails into a *UserDetails given a username.
+func (m DatabaseUserDetails) ToUserDetails() (details *UserDetails) {
+	return &UserDetails{
+		Username:    m.Username,
+		DisplayName: m.DisplayName,
+		Emails:      []string{m.Email},
+		Groups:      m.Groups,
+	}
+}
+
+// ToUserDetailsModel converts DatabaseUserDetails into a UserDetailsModel.
+func (m DatabaseUserDetails) ToUserDetailsModel() (model UserDetailsModel) {
+	return UserDetailsModel{
+		HashedPassword: m.Digest.Encode(),
+		DisplayName:    m.DisplayName,
+		Email:          m.Email,
+		Groups:         m.Groups,
+	}
+}
+
+// DatabaseModel is the model of users file database.
+type DatabaseModel struct {
+	Users map[string]UserDetailsModel `yaml:"users" valid:"required"`
+}
+
+// ReadToFileUserDatabase reads the DatabaseModel into a FileUserDatabase.
+func (m *DatabaseModel) ReadToFileUserDatabase(db *FileUserDatabase) (err error) {
+	users := map[string]DatabaseUserDetails{}
+
+	var udm *DatabaseUserDetails
+
+	for user, details := range m.Users {
+		if udm, err = details.ToDatabaseUserDetailsModel(user); err != nil {
+			return fmt.Errorf("failed to parse hash for user '%s': %w", user, err)
+		}
+
+		users[user] = *udm
+	}
+
+	db.Users = users
+
+	return nil
+}
+
+// Read a DatabaseModel from disk.
+func (m *DatabaseModel) Read(filePath string) (err error) {
+	var (
+		content []byte
+		ok      bool
+	)
+
+	if content, err = os.ReadFile(filePath); err != nil {
+		return fmt.Errorf("failed to read the '%s' file: %w", filePath, err)
+	}
+
+	if err = yaml.Unmarshal(content, m); err != nil {
+		return fmt.Errorf("could not parse the YAML database: %w", err)
+	}
+
+	if ok, err = govalidator.ValidateStruct(m); err != nil {
+		return fmt.Errorf("could not validate the schema: %w", err)
+	}
+
+	if !ok {
+		return fmt.Errorf("the schema is invalid")
+	}
+
+	return nil
+}
+
+// Write a DatabaseModel to disk.
+func (m *DatabaseModel) Write(fileName string) (err error) {
+	var (
+		data []byte
+	)
+
+	if data, err = yaml.Marshal(m); err != nil {
+		return err
+	}
+
+	return os.WriteFile(fileName, data, fileAuthenticationMode)
+}
+
+// UserDetailsModel is the model of user details in the file database.
+type UserDetailsModel struct {
+	HashedPassword string   `yaml:"password" valid:"required"`
+	DisplayName    string   `yaml:"displayname" valid:"required"`
+	Email          string   `yaml:"email"`
+	Groups         []string `yaml:"groups"`
+}
+
+// ToDatabaseUserDetailsModel converts a UserDetailsModel into a *DatabaseUserDetails.
+func (m UserDetailsModel) ToDatabaseUserDetailsModel(username string) (model *DatabaseUserDetails, err error) {
+	var d crypt.Digest
+
+	if d, err = crypt.Decode(m.HashedPassword); err != nil {
+		return nil, err
+	}
+
+	return &DatabaseUserDetails{
+		Username:    username,
+		Digest:      d,
+		DisplayName: m.DisplayName,
+		Email:       m.Email,
+		Groups:      m.Groups,
+	}, nil
+}
diff --git a/internal/authentication/file_user_provider_test.go b/internal/authentication/file_user_provider_test.go
index 01c6baa87..4461d7f78 100644
--- a/internal/authentication/file_user_provider_test.go
+++ b/internal/authentication/file_user_provider_test.go
@@ -39,24 +39,16 @@ func TestShouldErrorPermissionsOnLocalFS(t *testing.T) {
 	}
 
 	_ = os.Mkdir("/tmp/noperms/", 0000)
-	errors := checkDatabase("/tmp/noperms/users_database.yml")
+	err := checkDatabase("/tmp/noperms/users_database.yml")
 
-	require.Len(t, errors, 3)
-
-	require.EqualError(t, errors[0], "Unable to find database file: /tmp/noperms/users_database.yml")
-	require.EqualError(t, errors[1], "Generating database file: /tmp/noperms/users_database.yml")
-	require.EqualError(t, errors[2], "Unable to generate /tmp/noperms/users_database.yml: open /tmp/noperms/users_database.yml: permission denied")
+	require.EqualError(t, err, "error checking user authentication database file: stat /tmp/noperms/users_database.yml: permission denied")
 }
 
 func TestShouldErrorAndGenerateUserDB(t *testing.T) {
-	errors := checkDatabase("./nonexistent.yml")
+	err := checkDatabase("./nonexistent.yml")
 	_ = os.Remove("./nonexistent.yml")
 
-	require.Len(t, errors, 3)
-
-	require.EqualError(t, errors[0], "Unable to find database file: ./nonexistent.yml")
-	require.EqualError(t, errors[1], "Generating database file: ./nonexistent.yml")
-	require.EqualError(t, errors[2], "Generated database at: ./nonexistent.yml")
+	require.EqualError(t, err, "user authentication database file doesn't exist at path './nonexistent.yml' and has been generated")
 }
 
 func TestShouldCheckUserArgon2idPasswordIsCorrect(t *testing.T) {
@@ -64,6 +56,9 @@ func TestShouldCheckUserArgon2idPasswordIsCorrect(t *testing.T) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("john", "password")
 
 		assert.NoError(t, err)
@@ -75,7 +70,11 @@ func TestShouldCheckUserSHA512PasswordIsCorrect(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("harry", "password")
 
 		assert.NoError(t, err)
@@ -87,7 +86,11 @@ func TestShouldCheckUserPasswordIsWrong(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("john", "wrong_password")
 
 		assert.NoError(t, err)
@@ -99,8 +102,11 @@ func TestShouldCheckUserPasswordIsWrongForEnumerationCompare(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
 
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("enumeration", "wrong_password")
 		assert.NoError(t, err)
 		assert.False(t, ok)
@@ -111,7 +117,11 @@ func TestShouldCheckUserPasswordOfUserThatDoesNotExist(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("fake", "password")
 		assert.Error(t, err)
 		assert.Equal(t, false, ok)
@@ -123,12 +133,16 @@ func TestShouldRetrieveUserDetails(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		details, err := provider.GetDetails("john")
 		assert.NoError(t, err)
-		assert.Equal(t, details.Username, "john")
-		assert.Equal(t, details.Emails, []string{"john.doe@authelia.com"})
-		assert.Equal(t, details.Groups, []string{"admins", "dev"})
+		assert.Equal(t, "john", details.Username)
+		assert.Equal(t, []string{"john.doe@authelia.com"}, details.Emails)
+		assert.Equal(t, []string{"admins", "dev"}, details.Groups)
 	})
 }
 
@@ -136,12 +150,19 @@ func TestShouldUpdatePassword(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		err := provider.UpdatePassword("harry", "newpassword")
 		assert.NoError(t, err)
 
 		// Reset the provider to force a read from disk.
 		provider = NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("harry", "newpassword")
 		assert.NoError(t, err)
 		assert.True(t, ok)
@@ -153,17 +174,24 @@ func TestShouldUpdatePasswordHashingAlgorithmToArgon2id(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
-		assert.True(t, strings.HasPrefix(provider.database.Users["harry"].HashedPassword, "$6$"))
+
+		assert.NoError(t, provider.StartupCheck())
+
+		assert.True(t, strings.HasPrefix(provider.database.Users["harry"].Digest.Encode(), "$6$"))
 		err := provider.UpdatePassword("harry", "newpassword")
 		assert.NoError(t, err)
 
 		// Reset the provider to force a read from disk.
 		provider = NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("harry", "newpassword")
 		assert.NoError(t, err)
 		assert.True(t, ok)
-		assert.True(t, strings.HasPrefix(provider.database.Users["harry"].HashedPassword, "$argon2id$"))
+		assert.True(t, strings.HasPrefix(provider.database.Users["harry"].Digest.Encode(), "$argon2id$"))
 	})
 }
 
@@ -171,20 +199,26 @@ func TestShouldUpdatePasswordHashingAlgorithmToSHA512(t *testing.T) {
 	WithDatabase(UserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		config.Password.Algorithm = "sha512"
-		config.Password.Iterations = 50000
+		config.Password.Algorithm = "sha2crypt"
+		config.Password.SHA2Crypt.Iterations = 50000
 
 		provider := NewFileUserProvider(&config)
-		assert.True(t, strings.HasPrefix(provider.database.Users["john"].HashedPassword, "$argon2id$"))
+
+		assert.NoError(t, provider.StartupCheck())
+
+		assert.True(t, strings.HasPrefix(provider.database.Users["john"].Digest.Encode(), "$argon2id$"))
 		err := provider.UpdatePassword("john", "newpassword")
 		assert.NoError(t, err)
 
 		// Reset the provider to force a read from disk.
 		provider = NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("john", "newpassword")
 		assert.NoError(t, err)
 		assert.True(t, ok)
-		assert.True(t, strings.HasPrefix(provider.database.Users["john"].HashedPassword, "$6$"))
+		assert.True(t, strings.HasPrefix(provider.database.Users["john"].Digest.Encode(), "$6$"))
 	})
 }
 
@@ -192,9 +226,10 @@ func TestShouldRaiseWhenLoadingMalformedDatabaseForFirstTime(t *testing.T) {
 	WithDatabase(MalformedUserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		assert.PanicsWithError(t, "Unable to parse database: yaml: line 4: mapping values are not allowed in this context", func() {
-			NewFileUserProvider(&config)
-		})
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error reading the authentication database: could not parse the YAML database: yaml: line 4: mapping values are not allowed in this context")
 	})
 }
 
@@ -202,9 +237,10 @@ func TestShouldRaiseWhenLoadingDatabaseWithBadSchemaForFirstTime(t *testing.T) {
 	WithDatabase(BadSchemaUserDatabaseContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		assert.PanicsWithError(t, "Invalid schema of database: Users: non zero value required", func() {
-			NewFileUserProvider(&config)
-		})
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error reading the authentication database: could not validate the schema: Users: non zero value required")
 	})
 }
 
@@ -212,9 +248,10 @@ func TestShouldRaiseWhenLoadingDatabaseWithBadSHA512HashesForTheFirstTime(t *tes
 	WithDatabase(BadSHA512HashContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		assert.PanicsWithError(t, "Unable to parse hash of user john: Hash key is not the last parameter, the hash is likely malformed ($6$rounds00000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/)", func() {
-			NewFileUserProvider(&config)
-		})
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error decoding the authentication database: failed to parse hash for user 'john': sha2crypt decode error: provided encoded hash has an invalid option: option 'rounds00000' is invalid")
 	})
 }
 
@@ -222,9 +259,10 @@ func TestShouldRaiseWhenLoadingDatabaseWithBadArgon2idHashSettingsForTheFirstTim
 	WithDatabase(BadArgon2idHashSettingsContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		assert.PanicsWithError(t, "Unable to parse hash of user john: Hash key is not the last parameter, the hash is likely malformed ($argon2id$v=19$m65536,t3,p2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM)", func() {
-			NewFileUserProvider(&config)
-		})
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error decoding the authentication database: failed to parse hash for user 'john': argon2 decode error: provided encoded hash has an invalid option: option 'm65536' is invalid")
 	})
 }
 
@@ -232,9 +270,10 @@ func TestShouldRaiseWhenLoadingDatabaseWithBadArgon2idHashKeyForTheFirstTime(t *
 	WithDatabase(BadArgon2idHashKeyContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		assert.PanicsWithError(t, "Unable to parse hash of user john: Hash key contains invalid base64 characters", func() {
-			NewFileUserProvider(&config)
-		})
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error decoding the authentication database: failed to parse hash for user 'john': argon2 decode error: provided encoded hash has a key value that can't be decoded: illegal base64 data at input byte 0")
 	})
 }
 
@@ -242,9 +281,10 @@ func TestShouldRaiseWhenLoadingDatabaseWithBadArgon2idHashSaltForTheFirstTime(t
 	WithDatabase(BadArgon2idHashSaltContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
-		assert.PanicsWithError(t, "Unable to parse hash of user john: Salt contains invalid base64 characters", func() {
-			NewFileUserProvider(&config)
-		})
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error decoding the authentication database: failed to parse hash for user 'john': argon2 decode error: provided encoded hash has a salt value that can't be decoded: illegal base64 data at input byte 0")
 	})
 }
 
@@ -252,7 +292,11 @@ func TestShouldSupportHashPasswordWithoutCRYPT(t *testing.T) {
 	WithDatabase(UserDatabaseWithoutCryptContent, func(path string) {
 		config := DefaultFileAuthenticationBackendConfiguration
 		config.Path = path
+
 		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
 		ok, err := provider.CheckUserPassword("john", "password")
 
 		assert.NoError(t, err)
@@ -261,16 +305,9 @@ func TestShouldSupportHashPasswordWithoutCRYPT(t *testing.T) {
 }
 
 var (
-	DefaultFileAuthenticationBackendConfiguration = schema.FileAuthenticationBackendConfiguration{
-		Path: "",
-		Password: &schema.PasswordConfiguration{
-			Iterations:  schema.DefaultCIPasswordConfiguration.Iterations,
-			KeyLength:   schema.DefaultCIPasswordConfiguration.KeyLength,
-			SaltLength:  schema.DefaultCIPasswordConfiguration.SaltLength,
-			Algorithm:   schema.DefaultCIPasswordConfiguration.Algorithm,
-			Memory:      schema.DefaultCIPasswordConfiguration.Memory,
-			Parallelism: schema.DefaultCIPasswordConfiguration.Parallelism,
-		},
+	DefaultFileAuthenticationBackendConfiguration = schema.FileAuthenticationBackend{
+		Path:     "",
+		Password: schema.DefaultCIPasswordConfig,
 	}
 )
 
@@ -385,6 +422,7 @@ users:
       - admins
       - dev
 `)
+
 var BadArgon2idHashSaltContent = []byte(`
 users:
   john:
diff --git a/internal/authentication/ldap_user_provider.go b/internal/authentication/ldap_user_provider.go
index 0c4b2ed9f..46db74610 100644
--- a/internal/authentication/ldap_user_provider.go
+++ b/internal/authentication/ldap_user_provider.go
@@ -17,7 +17,7 @@ import (
 
 // LDAPUserProvider is a UserProvider that connects to LDAP servers like ActiveDirectory, OpenLDAP, OpenDJ, FreeIPA, etc.
 type LDAPUserProvider struct {
-	config    schema.LDAPAuthenticationBackendConfiguration
+	config    schema.LDAPAuthenticationBackend
 	tlsConfig *tls.Config
 	dialOpts  []ldap.DialOpt
 	log       *logrus.Logger
@@ -42,15 +42,15 @@ type LDAPUserProvider struct {
 }
 
 // NewLDAPUserProvider creates a new instance of LDAPUserProvider.
-func NewLDAPUserProvider(config schema.AuthenticationBackendConfiguration, certPool *x509.CertPool) (provider *LDAPUserProvider) {
+func NewLDAPUserProvider(config schema.AuthenticationBackend, certPool *x509.CertPool) (provider *LDAPUserProvider) {
 	provider = newLDAPUserProvider(*config.LDAP, config.PasswordReset.Disable, certPool, nil)
 
 	return provider
 }
 
-func newLDAPUserProvider(config schema.LDAPAuthenticationBackendConfiguration, disableResetPassword bool, certPool *x509.CertPool, factory LDAPClientFactory) (provider *LDAPUserProvider) {
+func newLDAPUserProvider(config schema.LDAPAuthenticationBackend, disableResetPassword bool, certPool *x509.CertPool, factory LDAPClientFactory) (provider *LDAPUserProvider) {
 	if config.TLS == nil {
-		config.TLS = schema.DefaultLDAPAuthenticationBackendConfiguration.TLS
+		config.TLS = schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS
 	}
 
 	tlsConfig := utils.NewTLSConfig(config.TLS, tls.VersionTLS12, certPool)
@@ -126,9 +126,9 @@ func (p *LDAPUserProvider) GetDetails(username string) (details *UserDetails, er
 	}
 
 	var (
-		filter        string
-		searchRequest *ldap.SearchRequest
-		searchResult  *ldap.SearchResult
+		filter  string
+		request *ldap.SearchRequest
+		result  *ldap.SearchResult
 	)
 
 	if filter, err = p.resolveGroupsFilter(username, profile); err != nil {
@@ -136,18 +136,18 @@ func (p *LDAPUserProvider) GetDetails(username string) (details *UserDetails, er
 	}
 
 	// Search for the users groups.
-	searchRequest = ldap.NewSearchRequest(
+	request = ldap.NewSearchRequest(
 		p.groupsBaseDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases,
 		0, 0, false, filter, p.groupsAttributes, nil,
 	)
 
-	if searchResult, err = p.search(client, searchRequest); err != nil {
+	if result, err = p.search(client, request); err != nil {
 		return nil, fmt.Errorf("unable to retrieve groups of user '%s'. Cause: %w", username, err)
 	}
 
 	groups := make([]string, 0)
 
-	for _, res := range searchResult.Entries {
+	for _, res := range result.Entries {
 		if len(res.Attributes) == 0 {
 			p.log.Warningf("No groups retrieved from LDAP for user %s", username)
 			break
@@ -254,35 +254,35 @@ func (p *LDAPUserProvider) connectCustom(url, username, password string, startTL
 	return client, nil
 }
 
-func (p *LDAPUserProvider) search(client LDAPClient, searchRequest *ldap.SearchRequest) (searchResult *ldap.SearchResult, err error) {
-	if searchResult, err = client.Search(searchRequest); err != nil {
+func (p *LDAPUserProvider) search(client LDAPClient, request *ldap.SearchRequest) (result *ldap.SearchResult, err error) {
+	if result, err = client.Search(request); err != nil {
 		if referral, ok := p.getReferral(err); ok {
-			if searchResult == nil {
-				searchResult = &ldap.SearchResult{
+			if result == nil {
+				result = &ldap.SearchResult{
 					Referrals: []string{referral},
 				}
 			} else {
-				searchResult.Referrals = append(searchResult.Referrals, referral)
+				result.Referrals = append(result.Referrals, referral)
 			}
 		}
 	}
 
-	if !p.config.PermitReferrals || len(searchResult.Referrals) == 0 {
+	if !p.config.PermitReferrals || len(result.Referrals) == 0 {
 		if err != nil {
 			return nil, err
 		}
 
-		return searchResult, nil
+		return result, nil
 	}
 
-	if err = p.searchReferrals(searchRequest, searchResult); err != nil {
+	if err = p.searchReferrals(request, result); err != nil {
 		return nil, err
 	}
 
-	return searchResult, nil
+	return result, nil
 }
 
-func (p *LDAPUserProvider) searchReferral(referral string, searchRequest *ldap.SearchRequest, searchResult *ldap.SearchResult) (err error) {
+func (p *LDAPUserProvider) searchReferral(referral string, request *ldap.SearchRequest, searchResult *ldap.SearchResult) (err error) {
 	var (
 		client LDAPClient
 		result *ldap.SearchResult
@@ -294,7 +294,7 @@ func (p *LDAPUserProvider) searchReferral(referral string, searchRequest *ldap.S
 
 	defer client.Close()
 
-	if result, err = client.Search(searchRequest); err != nil {
+	if result, err = client.Search(request); err != nil {
 		return fmt.Errorf("error occurred performing search on referred LDAP server '%s': %w", referral, err)
 	}
 
@@ -307,9 +307,9 @@ func (p *LDAPUserProvider) searchReferral(referral string, searchRequest *ldap.S
 	return nil
 }
 
-func (p *LDAPUserProvider) searchReferrals(searchRequest *ldap.SearchRequest, searchResult *ldap.SearchResult) (err error) {
-	for i := 0; i < len(searchResult.Referrals); i++ {
-		if err = p.searchReferral(searchResult.Referrals[i], searchRequest, searchResult); err != nil {
+func (p *LDAPUserProvider) searchReferrals(request *ldap.SearchRequest, result *ldap.SearchResult) (err error) {
+	for i := 0; i < len(result.Referrals); i++ {
+		if err = p.searchReferral(result.Referrals[i], request, result); err != nil {
 			return err
 		}
 	}
@@ -321,30 +321,30 @@ func (p *LDAPUserProvider) getUserProfile(client LDAPClient, username string) (p
 	userFilter := p.resolveUsersFilter(username)
 
 	// Search for the given username.
-	searchRequest := ldap.NewSearchRequest(
+	request := ldap.NewSearchRequest(
 		p.usersBaseDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases,
 		1, 0, false, userFilter, p.usersAttributes, nil,
 	)
 
-	var searchResult *ldap.SearchResult
+	var result *ldap.SearchResult
 
-	if searchResult, err = p.search(client, searchRequest); err != nil {
+	if result, err = p.search(client, request); err != nil {
 		return nil, fmt.Errorf("cannot find user DN of user '%s'. Cause: %w", username, err)
 	}
 
-	if len(searchResult.Entries) == 0 {
+	if len(result.Entries) == 0 {
 		return nil, ErrUserNotFound
 	}
 
-	if len(searchResult.Entries) > 1 {
-		return nil, fmt.Errorf("there were %d users found when searching for '%s' but there should only be 1", len(searchResult.Entries), username)
+	if len(result.Entries) > 1 {
+		return nil, fmt.Errorf("there were %d users found when searching for '%s' but there should only be 1", len(result.Entries), username)
 	}
 
 	userProfile := ldapUserProfile{
-		DN: searchResult.Entries[0].DN,
+		DN: result.Entries[0].DN,
 	}
 
-	for _, attr := range searchResult.Entries[0].Attributes {
+	for _, attr := range result.Entries[0].Attributes {
 		attrs := len(attr.Values)
 
 		if attr.Name == p.config.UsernameAttribute {
diff --git a/internal/authentication/ldap_user_provider_startup.go b/internal/authentication/ldap_user_provider_startup.go
index 723d4cb5c..2956fd42e 100644
--- a/internal/authentication/ldap_user_provider_startup.go
+++ b/internal/authentication/ldap_user_provider_startup.go
@@ -47,14 +47,14 @@ func (p *LDAPUserProvider) StartupCheck() (err error) {
 
 func (p *LDAPUserProvider) getServerSupportedFeatures(client LDAPClient) (features LDAPSupportedFeatures, err error) {
 	var (
-		searchRequest *ldap.SearchRequest
-		searchResult  *ldap.SearchResult
+		request *ldap.SearchRequest
+		result  *ldap.SearchResult
 	)
 
-	searchRequest = ldap.NewSearchRequest("", ldap.ScopeBaseObject, ldap.NeverDerefAliases,
-		1, 0, false, "(objectClass=*)", []string{ldapSupportedExtensionAttribute, ldapSupportedControlAttribute}, nil)
+	request = ldap.NewSearchRequest("", ldap.ScopeBaseObject, ldap.NeverDerefAliases,
+		1, 0, false, ldapBaseObjectFilter, []string{ldapSupportedExtensionAttribute, ldapSupportedControlAttribute}, nil)
 
-	if searchResult, err = client.Search(searchRequest); err != nil {
+	if result, err = client.Search(request); err != nil {
 		if p.config.PermitFeatureDetectionFailure {
 			p.log.WithError(err).Warnf("Error occurred during RootDSE search. This may result in reduced functionality.")
 
@@ -64,7 +64,7 @@ func (p *LDAPUserProvider) getServerSupportedFeatures(client LDAPClient) (featur
 		return features, fmt.Errorf("error occurred during RootDSE search: %w", err)
 	}
 
-	if len(searchResult.Entries) != 1 {
+	if len(result.Entries) != 1 {
 		p.log.Errorf("The LDAP Server did not respond appropriately to a RootDSE search. This may result in reduced functionality.")
 
 		return features, nil
@@ -72,7 +72,7 @@ func (p *LDAPUserProvider) getServerSupportedFeatures(client LDAPClient) (featur
 
 	var controlTypeOIDs, extensionOIDs []string
 
-	controlTypeOIDs, extensionOIDs, features = ldapGetFeatureSupportFromEntry(searchResult.Entries[0])
+	controlTypeOIDs, extensionOIDs, features = ldapGetFeatureSupportFromEntry(result.Entries[0])
 
 	controlTypes, extensions := none, none
 
diff --git a/internal/authentication/ldap_user_provider_test.go b/internal/authentication/ldap_user_provider_test.go
index aeaf5b835..a74e24477 100644
--- a/internal/authentication/ldap_user_provider_test.go
+++ b/internal/authentication/ldap_user_provider_test.go
@@ -23,7 +23,7 @@ func TestShouldCreateRawConnectionWhenSchemeIsLDAP(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:      "ldap://127.0.0.1:389",
 			User:     "cn=admin,dc=example,dc=com",
 			Password: "password",
@@ -55,7 +55,7 @@ func TestShouldCreateTLSConnectionWhenSchemeIsLDAPS(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:      "ldaps://127.0.0.1:389",
 			User:     "cn=admin,dc=example,dc=com",
 			Password: "password",
@@ -105,7 +105,7 @@ func TestEscapeSpecialCharsInGroupsFilter(t *testing.T) {
 	mockFactory := NewMockLDAPClientFactory(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:          "ldaps://127.0.0.1:389",
 			GroupsFilter: "(|(member={dn})(uid={username})(uid={input}))",
 		},
@@ -163,7 +163,7 @@ func TestShouldCheckLDAPServerExtensions(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -228,7 +228,7 @@ func TestShouldNotCheckLDAPServerExtensionsWhenRootDSEReturnsMoreThanOneEntry(t
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -294,7 +294,7 @@ func TestShouldCheckLDAPServerControlTypes(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -359,7 +359,7 @@ func TestShouldNotEnablePasswdModifyExtensionOrControlTypes(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -424,7 +424,7 @@ func TestShouldReturnCheckServerConnectError(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -457,7 +457,7 @@ func TestShouldReturnCheckServerSearchError(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -519,7 +519,7 @@ func TestShouldEscapeUserInput(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsersFilter:          "(|({username_attribute}={input})({mail_attribute}={input}))",
@@ -553,7 +553,7 @@ func TestShouldReturnEmailWhenAttributeSameAsUsername(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -624,7 +624,7 @@ func TestShouldReturnUsernameAndBlankDisplayNameWhenAttributesTheSame(t *testing
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -695,7 +695,7 @@ func TestShouldReturnBlankEmailAndDisplayNameWhenAttrsLenZero(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -769,7 +769,7 @@ func TestShouldCombineUsernameFilterAndUsersFilter(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			UsernameAttribute:    "uid",
@@ -820,7 +820,7 @@ func TestShouldNotCrashWhenGroupsAreNotRetrievedFromLDAP(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -893,7 +893,7 @@ func TestShouldNotCrashWhenEmailsAreNotRetrievedFromLDAP(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:               "ldap://127.0.0.1:389",
 			User:              "cn=admin,dc=example,dc=com",
 			Password:          "password",
@@ -954,7 +954,7 @@ func TestShouldReturnUsernameFromLDAP(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1027,7 +1027,7 @@ func TestShouldReturnUsernameFromLDAPWithReferrals(t *testing.T) {
 	mockClientReferral := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1119,7 +1119,7 @@ func TestShouldReturnUsernameFromLDAPWithReferralsInErrorAndResult(t *testing.T)
 	mockClientReferralAlt := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1244,7 +1244,7 @@ func TestShouldReturnUsernameFromLDAPWithReferralsErr(t *testing.T) {
 	mockClientReferral := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1331,7 +1331,7 @@ func TestShouldNotUpdateUserPasswordConnect(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1398,7 +1398,7 @@ func TestShouldNotUpdateUserPasswordGetDetails(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1475,7 +1475,7 @@ func TestShouldUpdateUserPassword(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -1582,7 +1582,7 @@ func TestShouldUpdateUserPasswordMSAD(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -1692,7 +1692,7 @@ func TestShouldUpdateUserPasswordMSADWithReferrals(t *testing.T) {
 	mockClientReferral := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -1820,7 +1820,7 @@ func TestShouldUpdateUserPasswordMSADWithReferralsWithReferralConnectErr(t *test
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -1939,7 +1939,7 @@ func TestShouldUpdateUserPasswordMSADWithReferralsWithReferralModifyErr(t *testi
 	mockClientReferral := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -2071,7 +2071,7 @@ func TestShouldUpdateUserPasswordMSADWithoutReferrals(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -2185,7 +2185,7 @@ func TestShouldUpdateUserPasswordPasswdModifyExtension(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -2292,7 +2292,7 @@ func TestShouldUpdateUserPasswordPasswdModifyExtensionWithReferrals(t *testing.T
 	mockClientReferral := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -2419,7 +2419,7 @@ func TestShouldUpdateUserPasswordPasswdModifyExtensionWithoutReferrals(t *testin
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -2532,7 +2532,7 @@ func TestShouldUpdateUserPasswordPasswdModifyExtensionWithReferralsReferralConne
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -2650,7 +2650,7 @@ func TestShouldUpdateUserPasswordPasswdModifyExtensionWithReferralsReferralPassw
 	mockClientReferral := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -2781,7 +2781,7 @@ func TestShouldUpdateUserPasswordActiveDirectoryWithServerPolicyHints(t *testing
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -2892,7 +2892,7 @@ func TestShouldUpdateUserPasswordActiveDirectoryWithServerPolicyHintsDeprecated(
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -3003,7 +3003,7 @@ func TestShouldUpdateUserPasswordActiveDirectory(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "activedirectory",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
@@ -3114,7 +3114,7 @@ func TestShouldUpdateUserPasswordBasic(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			Implementation:       "custom",
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "uid=admin,dc=example,dc=com",
@@ -3222,7 +3222,7 @@ func TestShouldReturnErrorWhenMultipleUsernameAttributes(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3288,7 +3288,7 @@ func TestShouldReturnErrorWhenZeroUsernameAttributes(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3354,7 +3354,7 @@ func TestShouldReturnErrorWhenUsernameAttributeNotReturned(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3416,7 +3416,7 @@ func TestShouldReturnErrorWhenMultipleUsersFound(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3499,7 +3499,7 @@ func TestShouldReturnErrorWhenNoDN(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3565,7 +3565,7 @@ func TestShouldCheckValidUserPassword(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3633,7 +3633,7 @@ func TestShouldNotCheckValidUserPasswordWithConnectError(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3672,7 +3672,7 @@ func TestShouldCheckInvalidUserPassword(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3740,7 +3740,7 @@ func TestShouldCallStartTLSWhenEnabled(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3815,7 +3815,7 @@ func TestShouldParseDynamicConfiguration(t *testing.T) {
 	mockFactory := NewMockLDAPClientFactory(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3853,7 +3853,7 @@ func TestShouldCallStartTLSWithInsecureSkipVerifyWhenSkipVerifyTrue(t *testing.T
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldap://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
@@ -3936,7 +3936,7 @@ func TestShouldReturnLDAPSAlreadySecuredWhenStartTLSAttempted(t *testing.T) {
 	mockClient := NewMockLDAPClient(ctrl)
 
 	ldapClient := newLDAPUserProvider(
-		schema.LDAPAuthenticationBackendConfiguration{
+		schema.LDAPAuthenticationBackend{
 			URL:                  "ldaps://127.0.0.1:389",
 			User:                 "cn=admin,dc=example,dc=com",
 			Password:             "password",
diff --git a/internal/authentication/password_hash.go b/internal/authentication/password_hash.go
deleted file mode 100644
index 31f78366f..000000000
--- a/internal/authentication/password_hash.go
+++ /dev/null
@@ -1,220 +0,0 @@
-package authentication
-
-import (
-	"crypto/subtle"
-	"errors"
-	"fmt"
-	"strconv"
-	"strings"
-
-	"github.com/simia-tech/crypt"
-
-	"github.com/authelia/authelia/v4/internal/utils"
-)
-
-// PasswordHash represents all characteristics of a password hash.
-// Authelia only supports salted SHA512 or salted argon2id method, i.e., $6$ mode or $argon2id$ mode.
-type PasswordHash struct {
-	Algorithm   CryptAlgo
-	Iterations  int
-	Salt        string
-	Key         string
-	KeyLength   int
-	Memory      int
-	Parallelism int
-}
-
-// ConfigAlgoToCryptoAlgo returns a CryptAlgo and nil error if valid, otherwise it returns argon2id and an error.
-func ConfigAlgoToCryptoAlgo(fromConfig string) (CryptAlgo, error) {
-	switch fromConfig {
-	case argon2id:
-		return HashingAlgorithmArgon2id, nil
-	case sha512:
-		return HashingAlgorithmSHA512, nil
-	default:
-		return HashingAlgorithmArgon2id, errors.New("Invalid algorithm in configuration. It should be `argon2id` or `sha512`")
-	}
-}
-
-// ParseHash extracts all characteristics of a hash given its string representation.
-func ParseHash(hash string) (passwordHash *PasswordHash, err error) {
-	parts := strings.Split(hash, "$")
-
-	// This error can be ignored as it's always nil.
-	c, parameters, salt, key, _ := crypt.DecodeSettings(hash)
-	code := CryptAlgo(c)
-	h := &PasswordHash{}
-
-	h.Salt = salt
-	h.Key = key
-
-	if h.Key != parts[len(parts)-1] {
-		return nil, fmt.Errorf("Hash key is not the last parameter, the hash is likely malformed (%s)", hash)
-	}
-
-	if h.Key == "" {
-		return nil, fmt.Errorf("Hash key contains no characters or the field length is invalid (%s)", hash)
-	}
-
-	switch code {
-	case HashingAlgorithmSHA512:
-		h.Iterations = parameters.GetInt("rounds", HashingDefaultSHA512Iterations)
-		h.Algorithm = HashingAlgorithmSHA512
-
-		if parameters["rounds"] != "" && parameters["rounds"] != strconv.Itoa(h.Iterations) {
-			return nil, fmt.Errorf("SHA512 iterations is not numeric (%s)", parameters["rounds"])
-		}
-	case HashingAlgorithmArgon2id:
-		_, err = crypt.Base64Encoding.DecodeString(h.Salt)
-		if err != nil {
-			return nil, errors.New("Salt contains invalid base64 characters")
-		}
-
-		version := parameters.GetInt("v", 0)
-		if version < 19 {
-			if version == 0 {
-				return nil, fmt.Errorf("Argon2id version parameter not found (%s)", hash)
-			}
-
-			return nil, fmt.Errorf("Argon2id versions less than v19 are not supported (hash is version %d)", version)
-		} else if version > 19 {
-			return nil, fmt.Errorf("Argon2id versions greater than v19 are not supported (hash is version %d)", version)
-		}
-
-		h.Algorithm = HashingAlgorithmArgon2id
-		h.Memory = parameters.GetInt("m", HashingDefaultArgon2idMemory)
-		h.Iterations = parameters.GetInt("t", HashingDefaultArgon2idTime)
-		h.Parallelism = parameters.GetInt("p", HashingDefaultArgon2idParallelism)
-		h.KeyLength = parameters.GetInt("k", HashingDefaultArgon2idKeyLength)
-
-		decodedKey, err := crypt.Base64Encoding.DecodeString(h.Key)
-
-		if err != nil {
-			return nil, errors.New("Hash key contains invalid base64 characters")
-		}
-
-		if len(decodedKey) != h.KeyLength {
-			return nil, fmt.Errorf("Argon2id key length parameter (%d) does not match the actual key length (%d)", h.KeyLength, len(decodedKey))
-		}
-	default:
-		return nil, fmt.Errorf("Authelia only supports salted SHA512 hashing ($6$) and salted argon2id ($argon2id$), not $%s$", code)
-	}
-
-	return h, nil
-}
-
-// HashPassword generate a salt and hash the password with the salt and a constant number of rounds.
-func HashPassword(password, salt string, algorithm CryptAlgo, iterations, memory, parallelism, keyLength, saltLength int) (hash string, err error) {
-	var settings string
-
-	if algorithm != HashingAlgorithmArgon2id && algorithm != HashingAlgorithmSHA512 {
-		return "", fmt.Errorf("Hashing algorithm input of '%s' is invalid, only values of %s and %s are supported", algorithm, HashingAlgorithmArgon2id, HashingAlgorithmSHA512)
-	}
-
-	if algorithm == HashingAlgorithmArgon2id {
-		err := validateArgon2idSettings(memory, parallelism, iterations, keyLength)
-		if err != nil {
-			return "", err
-		}
-	}
-
-	if algorithm != HashingAlgorithmSHA512 {
-		err = validateSalt(salt, saltLength)
-		if err != nil {
-			return "", err
-		}
-	}
-
-	if salt == "" {
-		salt = crypt.Base64Encoding.EncodeToString(utils.RandomBytes(saltLength, HashingPossibleSaltCharacters, true))
-	}
-
-	settings = getCryptSettings(salt, algorithm, iterations, memory, parallelism, keyLength)
-
-	// This error can be ignored because we check for it before a user gets here.
-	hash, _ = crypt.Crypt(password, settings)
-
-	return hash, nil
-}
-
-// CheckPassword check a password against a hash.
-func CheckPassword(password, hash string) (ok bool, err error) {
-	expectedHash, err := ParseHash(hash)
-	if err != nil {
-		return false, err
-	}
-
-	passwordHashString, err := HashPassword(password, expectedHash.Salt, expectedHash.Algorithm, expectedHash.Iterations, expectedHash.Memory, expectedHash.Parallelism, expectedHash.KeyLength, len(expectedHash.Salt))
-	if err != nil {
-		return false, err
-	}
-
-	passwordHash, err := ParseHash(passwordHashString)
-	if err != nil {
-		return false, err
-	}
-
-	return subtle.ConstantTimeCompare([]byte(passwordHash.Key), []byte(expectedHash.Key)) == 1, nil
-}
-
-func getCryptSettings(salt string, algorithm CryptAlgo, iterations, memory, parallelism, keyLength int) (settings string) {
-	switch algorithm {
-	case HashingAlgorithmArgon2id:
-		settings, _ = crypt.Argon2idSettings(memory, iterations, parallelism, keyLength, salt)
-	case HashingAlgorithmSHA512:
-		settings = fmt.Sprintf("$6$rounds=%d$%s", iterations, salt)
-	default:
-		panic("invalid password hashing algorithm provided")
-	}
-
-	return settings
-}
-
-// validateSalt checks the salt input and settings are valid and returns it and a nil error if they are, otherwise returns an error.
-func validateSalt(salt string, saltLength int) error {
-	if salt == "" {
-		if saltLength < 8 {
-			return fmt.Errorf("Salt length input of %d is invalid, it must be 8 or higher", saltLength)
-		}
-
-		return nil
-	}
-
-	decodedSalt, err := crypt.Base64Encoding.DecodeString(salt)
-	if err != nil {
-		return fmt.Errorf("Salt input of %s is invalid, only base64 strings are valid for input", salt)
-	}
-
-	if len(decodedSalt) < 8 {
-		return fmt.Errorf("Salt input of %s is invalid (%d characters), it must be 8 or more characters", decodedSalt, len(decodedSalt))
-	}
-
-	return nil
-}
-
-// validateArgon2idSettings checks the argon2id settings are valid.
-func validateArgon2idSettings(memory, parallelism, iterations, keyLength int) error {
-	// Caution: Increasing any of the values in the below block has a high chance in old passwords that cannot be verified.
-	if memory < 8 {
-		return fmt.Errorf("Memory (argon2id) input of %d is invalid, it must be 8 or higher", memory)
-	}
-
-	if parallelism < 1 {
-		return fmt.Errorf("Parallelism (argon2id) input of %d is invalid, it must be 1 or higher", parallelism)
-	}
-
-	if memory < parallelism*8 {
-		return fmt.Errorf("Memory (argon2id) input of %d is invalid with a parallelism input of %d, it must be %d (parallelism * 8) or higher", memory, parallelism, parallelism*8)
-	}
-
-	if keyLength < 16 {
-		return fmt.Errorf("Key length (argon2id) input of %d is invalid, it must be 16 or higher", keyLength)
-	}
-
-	if iterations < 1 {
-		return fmt.Errorf("Iterations (argon2id) input of %d is invalid, it must be 1 or more", iterations)
-	}
-
-	// Caution: Increasing any of the values in the above block has a high chance in old passwords that cannot be verified.
-	return nil
-}
diff --git a/internal/authentication/password_hash_test.go b/internal/authentication/password_hash_test.go
deleted file mode 100644
index 3cd3ade7a..000000000
--- a/internal/authentication/password_hash_test.go
+++ /dev/null
@@ -1,322 +0,0 @@
-package authentication
-
-import (
-	"fmt"
-	"testing"
-
-	"github.com/simia-tech/crypt"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"github.com/authelia/authelia/v4/internal/configuration/schema"
-	"github.com/authelia/authelia/v4/internal/utils"
-)
-
-func TestShouldHashSHA512Password(t *testing.T) {
-	hash, err := HashPassword("password", "aFr56HjK3DrB8t3S", HashingAlgorithmSHA512, 50000, 0, 0, 0, 16)
-
-	assert.NoError(t, err)
-
-	code, parameters, salt, hash, _ := crypt.DecodeSettings(hash)
-
-	assert.Equal(t, "6", code)
-	assert.Equal(t, "aFr56HjK3DrB8t3S", salt)
-	assert.Equal(t, "zhPQiS85cgBlNhUKKE6n/AHMlpqrvYSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1", hash)
-	assert.Equal(t, schema.DefaultPasswordSHA512Configuration.Iterations, parameters.GetInt("rounds", HashingDefaultSHA512Iterations))
-}
-
-func TestShouldHashArgon2idPassword(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024,
-		schema.DefaultCIPasswordConfiguration.Parallelism, schema.DefaultCIPasswordConfiguration.KeyLength,
-		schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.NoError(t, err)
-
-	code, parameters, salt, key, err := crypt.DecodeSettings(hash)
-
-	assert.NoError(t, err)
-	assert.Equal(t, argon2id, code)
-	assert.Equal(t, "BpLnfgDsc2WD8F2q", salt)
-	assert.Equal(t, "kYempka60N8ETZ+EedP+Fn3z83mEPMl08RQEXTwY6u0", key)
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.Iterations, parameters.GetInt("t", HashingDefaultArgon2idTime))
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.Memory*1024, parameters.GetInt("m", HashingDefaultArgon2idMemory))
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.Parallelism, parameters.GetInt("p", HashingDefaultArgon2idParallelism))
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.KeyLength, parameters.GetInt("k", HashingDefaultArgon2idKeyLength))
-}
-
-func TestShouldValidateArgon2idHashWithTEqualOne(t *testing.T) {
-	hash := "$argon2id$v=19$m=1024,t=1,p=1,k=16$c2FsdG9uY2U$Sk4UjzxXdCrBcyyMYiPEsQ"
-	valid, err := CheckPassword("apple", hash)
-	assert.True(t, valid)
-	assert.NoError(t, err)
-}
-
-// This checks the method of hashing (for argon2id) supports all the characters we allow in Authelia's hash function.
-func TestArgon2idHashSaltValidValues(t *testing.T) {
-	var err error
-
-	var hash string
-
-	datas := utils.SliceString(HashingPossibleSaltCharacters, 16)
-
-	for _, salt := range datas {
-		hash, err = HashPassword("password", salt, HashingAlgorithmArgon2id, 1, 8, 1, 32, 16)
-		assert.NoError(t, err)
-		assert.Equal(t, fmt.Sprintf("$argon2id$v=19$m=8,t=1,p=1$%s$", salt), hash[0:44])
-	}
-}
-
-// This checks the method of hashing (for sha512) supports all the characters we allow in Authelia's hash function.
-func TestSHA512HashSaltValidValues(t *testing.T) {
-	var err error
-
-	var hash string
-
-	datas := utils.SliceString(HashingPossibleSaltCharacters, 16)
-
-	for _, salt := range datas {
-		hash, err = HashPassword("password", salt, HashingAlgorithmSHA512, 1000, 0, 0, 0, 16)
-		assert.NoError(t, err)
-		assert.Equal(t, fmt.Sprintf("$6$rounds=1000$%s$", salt), hash[0:32])
-	}
-}
-
-func TestShouldNotHashPasswordWithNonExistentAlgorithm(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", "bogus",
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024,
-		schema.DefaultCIPasswordConfiguration.Parallelism, schema.DefaultCIPasswordConfiguration.KeyLength,
-		schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Hashing algorithm input of 'bogus' is invalid, only values of argon2id and 6 are supported")
-}
-
-func TestShouldNotHashArgon2idPasswordDueToMemoryParallelismMismatch(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, 8, 2,
-		schema.DefaultCIPasswordConfiguration.KeyLength, schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Memory (argon2id) input of 8 is invalid with a parallelism input of 2, it must be 16 (parallelism * 8) or higher")
-}
-
-func TestShouldNotHashArgon2idPasswordDueToMemoryLessThanEight(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, 1, schema.DefaultCIPasswordConfiguration.Parallelism,
-		schema.DefaultCIPasswordConfiguration.KeyLength, schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Memory (argon2id) input of 1 is invalid, it must be 8 or higher")
-}
-
-func TestShouldNotHashArgon2idPasswordDueToKeyLengthLessThanSixteen(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024,
-		schema.DefaultCIPasswordConfiguration.Parallelism, 5, schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Key length (argon2id) input of 5 is invalid, it must be 16 or higher")
-}
-
-func TestShouldNotHashArgon2idPasswordDueParallelismLessThanOne(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024, -1,
-		schema.DefaultCIPasswordConfiguration.KeyLength, schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Parallelism (argon2id) input of -1 is invalid, it must be 1 or higher")
-}
-
-func TestShouldNotHashArgon2idPasswordDueIterationsLessThanOne(t *testing.T) {
-	hash, err := HashPassword("password", "BpLnfgDsc2WD8F2q", HashingAlgorithmArgon2id,
-		0, schema.DefaultCIPasswordConfiguration.Memory*1024, schema.DefaultCIPasswordConfiguration.Parallelism,
-		schema.DefaultCIPasswordConfiguration.KeyLength, schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Iterations (argon2id) input of 0 is invalid, it must be 1 or more")
-}
-
-func TestShouldNotHashPasswordDueToSaltLength(t *testing.T) {
-	hash, err := HashPassword("password", "", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024,
-		schema.DefaultCIPasswordConfiguration.Parallelism, schema.DefaultCIPasswordConfiguration.KeyLength, 0)
-
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Salt length input of 0 is invalid, it must be 8 or higher")
-}
-
-func TestShouldNotHashPasswordDueToSaltCharLengthTooShort(t *testing.T) {
-	// The salt 'YQ' is the base64 value for 'a' which is why the length is 1.
-	hash, err := HashPassword("password", "YQ", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024,
-		schema.DefaultCIPasswordConfiguration.Parallelism, schema.DefaultCIPasswordConfiguration.KeyLength,
-		schema.DefaultCIPasswordConfiguration.SaltLength)
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Salt input of a is invalid (1 characters), it must be 8 or more characters")
-}
-
-func TestShouldNotHashPasswordWithNonBase64CharsInSalt(t *testing.T) {
-	hash, err := HashPassword("password", "abc&123", HashingAlgorithmArgon2id,
-		schema.DefaultCIPasswordConfiguration.Iterations, schema.DefaultCIPasswordConfiguration.Memory*1024,
-		schema.DefaultCIPasswordConfiguration.Parallelism, schema.DefaultCIPasswordConfiguration.KeyLength,
-		schema.DefaultCIPasswordConfiguration.SaltLength)
-	assert.Equal(t, "", hash)
-	assert.EqualError(t, err, "Salt input of abc&123 is invalid, only base64 strings are valid for input")
-}
-
-func TestShouldNotParseHashWithNoneBase64CharsInKey(t *testing.T) {
-	passwordHash, err := ParseHash("$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$^^vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM")
-	assert.EqualError(t, err, "Hash key contains invalid base64 characters")
-	assert.Nil(t, passwordHash)
-}
-
-func TestShouldNotParseHashWithNoneBase64CharsInSalt(t *testing.T) {
-	passwordHash, err := ParseHash("$argon2id$v=19$m=65536$^^wTFoFjITudo57a$Z4NH/EKkdv6PJ01Ye1twJ61fsmRJujZZn1IXdUOyrJY")
-	assert.EqualError(t, err, "Salt contains invalid base64 characters")
-	assert.Nil(t, passwordHash)
-}
-
-func TestShouldNotParseWithMalformedHash(t *testing.T) {
-	hashExtraField := "$argon2id$v=19$m=65536,t=3,p=2$abc$BpLnfgDsc2WD8F2q$^^vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
-	hashMissingSaltAndParams := "$argon2id$v=1$2t9X8nNCN2n3/kFYJ3xWNBg5k/rO782Qr7JJoJIK7G4"
-	hashMissingSalt := "$argon2id$v=1$m=65536,t=3,p=2$2t9X8nNCN2n3/kFYJ3xWNBg5k/rO782Qr7JJoJIK7G4"
-
-	passwordHash, err := ParseHash(hashExtraField)
-	assert.EqualError(t, err, fmt.Sprintf("Hash key is not the last parameter, the hash is likely malformed (%s)", hashExtraField))
-	assert.Nil(t, passwordHash)
-
-	passwordHash, err = ParseHash(hashMissingSaltAndParams)
-	assert.EqualError(t, err, fmt.Sprintf("Hash key is not the last parameter, the hash is likely malformed (%s)", hashMissingSaltAndParams))
-	assert.Nil(t, passwordHash)
-
-	passwordHash, err = ParseHash(hashMissingSalt)
-	assert.EqualError(t, err, fmt.Sprintf("Hash key is not the last parameter, the hash is likely malformed (%s)", hashMissingSalt))
-	assert.Nil(t, passwordHash)
-}
-
-func TestShouldNotParseHashWithEmptyKey(t *testing.T) {
-	hash := "$argon2id$v=19$m=65536$fvwTFoFjITudo57a$"
-	passwordHash, err := ParseHash(hash)
-	assert.EqualError(t, err, fmt.Sprintf("Hash key contains no characters or the field length is invalid (%s)", hash))
-	assert.Nil(t, passwordHash)
-}
-
-func TestShouldNotParseArgon2idHashWithEmptyVersion(t *testing.T) {
-	hash := "$argon2id$m=65536$fvwTFoFjITudo57a$Z4NH/EKkdv6PJ01Ye1twJ61fsmRJujZZn1IXdUOyrJY"
-	passwordHash, err := ParseHash(hash)
-	assert.EqualError(t, err, fmt.Sprintf("Argon2id version parameter not found (%s)", hash))
-	assert.Nil(t, passwordHash)
-}
-
-func TestShouldNotParseArgon2idHashWithWrongKeyLength(t *testing.T) {
-	hash := "$argon2id$v=19$m=65536,k=50$fvwTFoFjITudo57a$Z4NH/EKkdv6PJ01Ye1twJ61fsmRJujZZn1IXdUOyrJY"
-	passwordHash, err := ParseHash(hash)
-	assert.EqualError(t, err, "Argon2id key length parameter (50) does not match the actual key length (32)")
-	assert.Nil(t, passwordHash)
-}
-
-func TestShouldParseArgon2idHash(t *testing.T) {
-	passwordHash, err := ParseHash("$argon2id$v=19$m=65536,t=3,p=4$NEwwcVNuQWlQMFpkMndxdg$LlHjiLxPB94pdmOiNwr7Bgy+uy3huSv6y9phCQ+mLls")
-	assert.NoError(t, err)
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.Iterations, passwordHash.Iterations)
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.Parallelism, passwordHash.Parallelism)
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.KeyLength, passwordHash.KeyLength)
-	assert.Equal(t, schema.DefaultCIPasswordConfiguration.Memory*1024, passwordHash.Memory)
-}
-
-func TestShouldCheckSHA512Password(t *testing.T) {
-	ok, err := CheckPassword("password", "$6$rounds=50000$aFr56HjK3DrB8t3S$zhPQiS85cgBlNhUKKE6n/AHMlpqrvYSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1")
-	assert.NoError(t, err)
-	assert.True(t, ok)
-}
-
-func TestShouldCheckArgon2idPassword(t *testing.T) {
-	ok, err := CheckPassword("password", "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM")
-	assert.NoError(t, err)
-	assert.True(t, ok)
-}
-
-func TestCannotParseSHA512Hash(t *testing.T) {
-	ok, err := CheckPassword("password", "$6$roSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1")
-
-	assert.EqualError(t, err, "Hash key is not the last parameter, the hash is likely malformed ($6$roSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1)")
-	assert.False(t, ok)
-}
-
-func TestCannotParseArgon2idHash(t *testing.T) {
-	ok, err := CheckPassword("password", "$argon2id$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM")
-
-	assert.EqualError(t, err, "Hash key is not the last parameter, the hash is likely malformed ($argon2id$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM)")
-	assert.False(t, ok)
-}
-
-func TestOnlySupportSHA512AndArgon2id(t *testing.T) {
-	ok, err := CheckPassword("password", "$8$rounds=50000$aFr56HjK3DrB8t3S$zhPQiS85cgBlNhUKKE6n/AHMlpqrvYSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1")
-
-	assert.EqualError(t, err, "Authelia only supports salted SHA512 hashing ($6$) and salted argon2id ($argon2id$), not $8$")
-	assert.False(t, ok)
-}
-
-func TestCannotFindNumberOfRounds(t *testing.T) {
-	hash := "$6$rounds50000$aFr56HjK3DrB8t3S$zhPQiS85cgBlNhUKKE6n/AHMlpqrvYSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1"
-	ok, err := CheckPassword("password", hash)
-
-	assert.EqualError(t, err, fmt.Sprintf("Hash key is not the last parameter, the hash is likely malformed (%s)", hash))
-	assert.False(t, ok)
-}
-
-func TestCannotMatchArgon2idParamPattern(t *testing.T) {
-	ok, err := CheckPassword("password", "$argon2id$v=19$m65536,t3,p2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM")
-
-	assert.EqualError(t, err, "Hash key is not the last parameter, the hash is likely malformed ($argon2id$v=19$m65536,t3,p2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM)")
-	assert.False(t, ok)
-}
-
-func TestArgon2idVersionLessThanSupported(t *testing.T) {
-	ok, err := CheckPassword("password", "$argon2id$v=18$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM")
-
-	assert.EqualError(t, err, "Argon2id versions less than v19 are not supported (hash is version 18)")
-	assert.False(t, ok)
-}
-
-func TestArgon2idVersionGreaterThanSupported(t *testing.T) {
-	ok, err := CheckPassword("password", "$argon2id$v=20$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM")
-
-	assert.EqualError(t, err, "Argon2id versions greater than v19 are not supported (hash is version 20)")
-	assert.False(t, ok)
-}
-
-func TestNumberOfRoundsNotInt(t *testing.T) {
-	ok, err := CheckPassword("password", "$6$rounds=abc$aFr56HjK3DrB8t3S$zhPQiS85cgBlNhUKKE6n/AHMlpqrvYSnSL3fEVkK0yHFQ.oFFAd8D4OhPAy18K5U61Z2eBhxQXExGU/eknXlY1")
-
-	assert.EqualError(t, err, "SHA512 iterations is not numeric (abc)")
-	assert.False(t, ok)
-}
-
-func TestShouldCheckPasswordArgon2idHashedWithAuthelia(t *testing.T) {
-	password := testPassword
-	hash, err := HashPassword(password, "", HashingAlgorithmArgon2id, schema.DefaultCIPasswordConfiguration.Iterations,
-		schema.DefaultCIPasswordConfiguration.Memory*1024, schema.DefaultCIPasswordConfiguration.Parallelism,
-		schema.DefaultCIPasswordConfiguration.KeyLength, schema.DefaultCIPasswordConfiguration.SaltLength)
-
-	assert.NoError(t, err)
-
-	equal, err := CheckPassword(password, hash)
-
-	require.NoError(t, err)
-	assert.True(t, equal)
-}
-
-func TestShouldCheckPasswordSHA512HashedWithAuthelia(t *testing.T) {
-	password := testPassword
-	hash, err := HashPassword(password, "", HashingAlgorithmSHA512, schema.DefaultPasswordSHA512Configuration.Iterations,
-		0, 0, 0, schema.DefaultPasswordSHA512Configuration.SaltLength)
-
-	assert.NoError(t, err)
-
-	equal, err := CheckPassword(password, hash)
-
-	require.NoError(t, err)
-	assert.True(t, equal)
-}
diff --git a/internal/commands/acl.go b/internal/commands/acl.go
index 0b0851b55..ad6e7d3fc 100644
--- a/internal/commands/acl.go
+++ b/internal/commands/acl.go
@@ -56,7 +56,7 @@ func newAccessControlCheckCommand() (cmd *cobra.Command) {
 }
 
 func accessControlCheckRunE(cmd *cobra.Command, _ []string) (err error) {
-	configs, err := cmd.Flags().GetStringSlice("config")
+	configs, err := cmd.Flags().GetStringSlice(cmdFlagNameConfig)
 	if err != nil {
 		return err
 	}
diff --git a/internal/commands/configuration.go b/internal/commands/configuration.go
index fb65fea69..3bbaad050 100644
--- a/internal/commands/configuration.go
+++ b/internal/commands/configuration.go
@@ -15,9 +15,9 @@ import (
 // cmdWithConfigFlags is used for commands which require access to the configuration to add the flag to the command.
 func cmdWithConfigFlags(cmd *cobra.Command, persistent bool, configs []string) {
 	if persistent {
-		cmd.PersistentFlags().StringSliceP("config", "c", configs, "configuration files to load")
+		cmd.PersistentFlags().StringSliceP(cmdFlagNameConfig, "c", configs, "configuration files to load")
 	} else {
-		cmd.Flags().StringSliceP("config", "c", configs, "configuration files to load")
+		cmd.Flags().StringSliceP(cmdFlagNameConfig, "c", configs, "configuration files to load")
 	}
 }
 
@@ -33,7 +33,7 @@ func newCmdWithConfigPreRun(ensureConfigExists, validateKeys, validateConfigurat
 
 		logger = logging.Logger()
 
-		if configs, err = cmd.Flags().GetStringSlice("config"); err != nil {
+		if configs, err = cmd.Flags().GetStringSlice(cmdFlagNameConfig); err != nil {
 			logger.Fatalf("Error reading flags: %v", err)
 		}
 
diff --git a/internal/commands/const.go b/internal/commands/const.go
index ad9cc1879..b4fb7986b 100644
--- a/internal/commands/const.go
+++ b/internal/commands/const.go
@@ -310,6 +310,57 @@ This subcommand allows preforming cryptographic certificate, key pair, etc tasks
 
 	cmdAutheliaCryptoExample = `authelia crypto --help`
 
+	cmdAutheliaCryptoRandShort = "Generate a cryptographically secure random string"
+
+	cmdAutheliaCryptoRandLong = `Generate a cryptographically secure random string.
+
+This subcommand allows generating cryptographically secure random strings for use for encryption keys, HMAC keys, etc.`
+
+	cmdAutheliaCryptoRandExample = `authelia crypto rand --help
+authelia crypto rand --length 80
+authelia crypto rand -n 80
+authelia crypto rand --charset alphanumeric
+authelia crypto rand --charset alphabetic
+authelia crypto rand --charset ascii
+authelia crypto rand --charset numeric
+authelia crypto rand --charset numeric-hex
+authelia crypto rand --characters 0123456789ABCDEF`
+
+	cmdAutheliaCryptoHashShort = "Perform cryptographic hash operations"
+
+	cmdAutheliaCryptoHashLong = `Perform cryptographic hash operations.
+
+This subcommand allows preforming hashing cryptographic tasks.`
+
+	cmdAutheliaCryptoHashExample = `authelia crypto hash --help`
+
+	cmdAutheliaCryptoHashValidateShort = "Perform cryptographic hash validations"
+
+	cmdAutheliaCryptoHashValidateLong = `Perform cryptographic hash validations.
+
+This subcommand allows preforming cryptographic hash validations. i.e. checking hash digests against a password.`
+
+	cmdAutheliaCryptoHashValidateExample = `authelia crypto hash validate --help
+authelia crypto hash validate '$5$rounds=500000$WFjMpdCQxIkbNl0k$M0qZaZoK8Gwdh8Cw5diHgGfe5pE0iJvxcVG3.CVnQe.' -- 'p@ssw0rd'`
+
+	cmdAutheliaCryptoHashGenerateShort = "Generate cryptographic hash digests"
+
+	cmdAutheliaCryptoHashGenerateLong = `Generate cryptographic hash digests.
+
+This subcommand allows generating cryptographic hash digests.
+
+See the help for the subcommands if you want to override the configuration or defaults.`
+
+	cmdAutheliaCryptoHashGenerateExample = `authelia crypto hash generate --help`
+
+	fmtCmdAutheliaCryptoHashGenerateSubShort = "Generate cryptographic %s hash digests"
+
+	fmtCmdAutheliaCryptoHashGenerateSubLong = `Generate cryptographic %s hash digests.
+
+This subcommand allows generating cryptographic %s hash digests.`
+
+	fmtCmdAutheliaCryptoHashGenerateSubExample = `authelia crypto hash generate %s --help`
+
 	cmdAutheliaCryptoCertificateShort = "Perform certificate cryptographic operations"
 
 	cmdAutheliaCryptoCertificateLong = `Perform certificate cryptographic operations.
@@ -324,11 +375,7 @@ This subcommand allows preforming certificate cryptographic tasks.`
 
 This subcommand allows preforming %s certificate cryptographic tasks.`
 
-	cmdAutheliaCryptoCertificateRSAExample = `authelia crypto certificate rsa --help`
-
-	cmdAutheliaCryptoCertificateECDSAExample = `authelia crypto certificate ecdsa --help`
-
-	cmdAutheliaCryptoCertificateEd25519Example = `authelia crypto certificate ed25519 --help`
+	fmtCmdAutheliaCryptoCertificateSubExample = `authelia crypto certificate %s --help`
 
 	fmtCmdAutheliaCryptoCertificateGenerateRequestShort = "Generate an %s private key and %s"
 
@@ -444,11 +491,43 @@ const (
 	cmdFlagNamePKCS8 = "pkcs8"
 	cmdFlagNameBits  = "bits"
 	cmdFlagNameCurve = "curve"
+
+	cmdFlagNamePassword     = "password"
+	cmdFlagNameRandom       = "random"
+	cmdFlagNameRandomLength = "random.length"
+	cmdFlagNameNoConfirm    = "no-confirm"
+	cmdFlagNameVariant      = "variant"
+	cmdFlagNameCost         = "cost"
+	cmdFlagNameIterations   = "iterations"
+	cmdFlagNameParallelism  = "parallelism"
+	cmdFlagNameBlockSize    = "block-size"
+	cmdFlagNameMemory       = "memory"
+	cmdFlagNameKeySize      = "key-size"
+	cmdFlagNameSaltSize     = "salt-size"
+	cmdFlagNameProfile      = "profile"
+	cmdFlagNameSHA512       = "sha512"
+	cmdFlagNameConfig       = "config"
+
+	cmdFlagNameCharSet    = "charset"
+	cmdFlagNameCharacters = "characters"
+	cmdFlagNameLength     = "length"
 )
 
 const (
+	cmdUseHashPassword  = "hash-password [flags] -- [password]"
+	cmdUseHash          = "hash"
+	cmdUseHashArgon2    = "argon2"
+	cmdUseHashSHA2Crypt = "sha2crypt"
+	cmdUseHashPBKDF2    = "pbkdf2"
+	cmdUseHashBCrypt    = "bcrypt"
+	cmdUseHashSCrypt    = "scrypt"
+
+	cmdUseCrypto      = "crypto"
+	cmdUseRand        = "rand"
 	cmdUseCertificate = "certificate"
 	cmdUseGenerate    = "generate"
+	cmdUseValidate    = "validate"
+	cmdUseFmtValidate = "%s [flags] -- <digest>"
 	cmdUseRequest     = "request"
 	cmdUsePair        = "pair"
 	cmdUseRSA         = "rsa"
@@ -459,6 +538,8 @@ const (
 const (
 	cryptoCertPubCertOut = "certificate"
 	cryptoCertCSROut     = "certificate signing request"
+
+	prefixFilePassword = "authentication_backend.file.password"
 )
 
 var (
diff --git a/internal/commands/crypto.go b/internal/commands/crypto.go
index 0ffd245f1..60b33948b 100644
--- a/internal/commands/crypto.go
+++ b/internal/commands/crypto.go
@@ -17,7 +17,7 @@ import (
 
 func newCryptoCmd() (cmd *cobra.Command) {
 	cmd = &cobra.Command{
-		Use:     "crypto",
+		Use:     cmdUseCrypto,
 		Short:   cmdAutheliaCryptoShort,
 		Long:    cmdAutheliaCryptoLong,
 		Example: cmdAutheliaCryptoExample,
@@ -27,13 +27,84 @@ func newCryptoCmd() (cmd *cobra.Command) {
 	}
 
 	cmd.AddCommand(
+		newCryptoRandCmd(),
 		newCryptoCertificateCmd(),
+		newCryptoHashCmd(),
 		newCryptoPairCmd(),
 	)
 
 	return cmd
 }
 
+func newCryptoRandCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     cmdUseRand,
+		Short:   cmdAutheliaCryptoRandShort,
+		Long:    cmdAutheliaCryptoRandLong,
+		Example: cmdAutheliaCryptoRandExample,
+		Args:    cobra.NoArgs,
+		RunE: func(cmd *cobra.Command, args []string) (err error) {
+			useCharSet, useCharacters := cmd.Flags().Changed(cmdFlagNameCharSet), cmd.Flags().Changed(cmdFlagNameCharacters)
+			if useCharSet && useCharacters {
+				return fmt.Errorf("flags '--%s' and '--%s' are mutually exclusive, only one may be specified", cmdFlagNameCharSet, cmdFlagNameCharacters)
+			}
+
+			var (
+				charset string
+				n       int
+			)
+
+			if n, err = cmd.Flags().GetInt(cmdFlagNameLength); err != nil {
+				return err
+			}
+
+			if n < 1 {
+				return fmt.Errorf("length must be at least 1")
+			}
+
+			switch {
+			case useCharSet, !useCharSet && !useCharacters:
+				var c string
+
+				if c, err = cmd.Flags().GetString(cmdFlagNameCharSet); err != nil {
+					return err
+				}
+
+				switch c {
+				case "ascii":
+					charset = utils.CharSetASCII
+				case "alphanumeric":
+					charset = utils.CharSetAlphaNumeric
+				case "alphabetic":
+					charset = utils.CharSetAlphabetic
+				case "numeric-hex":
+					charset = utils.CharSetNumericHex
+				case "numeric":
+					charset = utils.CharSetNumeric
+				default:
+					return fmt.Errorf("invalid charset '%s', must be one of 'ascii', 'alphanumeric', 'alphabetic', 'numeric', or 'numeric-hex'", c)
+				}
+			case useCharacters:
+				if charset, err = cmd.Flags().GetString(cmdFlagNameCharacters); err != nil {
+					return err
+				}
+			}
+
+			fmt.Printf("Random Value: %s\n", utils.RandomString(n, charset, true))
+
+			return nil
+		},
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.Flags().StringP(cmdFlagNameCharSet, "c", "alphanumeric", "Sets the charset for the output, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex'")
+	cmd.Flags().String(cmdFlagNameCharacters, "", "Sets the explicit characters for the random output")
+	cmd.Flags().IntP(cmdFlagNameLength, "n", 80, "Sets the length of the random output")
+
+	return cmd
+}
+
 func newCryptoCertificateCmd() (cmd *cobra.Command) {
 	cmd = &cobra.Command{
 		Use:     cmdUseCertificate,
@@ -55,26 +126,13 @@ func newCryptoCertificateCmd() (cmd *cobra.Command) {
 }
 
 func newCryptoCertificateSubCmd(use string) (cmd *cobra.Command) {
-	var (
-		example, useFmt string
-	)
-
-	useFmt = fmtCryptoUse(use)
-
-	switch use {
-	case cmdUseRSA:
-		example = cmdAutheliaCryptoCertificateRSAExample
-	case cmdUseECDSA:
-		example = cmdAutheliaCryptoCertificateECDSAExample
-	case cmdUseEd25519:
-		example = cmdAutheliaCryptoCertificateEd25519Example
-	}
+	useFmt := fmtCryptoCertificateUse(use)
 
 	cmd = &cobra.Command{
 		Use:     use,
 		Short:   fmt.Sprintf(fmtCmdAutheliaCryptoCertificateSubShort, useFmt),
 		Long:    fmt.Sprintf(fmtCmdAutheliaCryptoCertificateSubLong, useFmt, useFmt),
-		Example: example,
+		Example: fmt.Sprintf(fmtCmdAutheliaCryptoCertificateSubExample, use),
 		Args:    cobra.NoArgs,
 
 		DisableAutoGenTag: true,
@@ -98,7 +156,7 @@ func newCryptoCertificateRequestCmd(algorithm string) (cmd *cobra.Command) {
 	cmdFlagsCryptoCertificateCommon(cmd)
 	cmdFlagsCryptoCertificateRequest(cmd)
 
-	algorithmFmt := fmtCryptoUse(algorithm)
+	algorithmFmt := fmtCryptoCertificateUse(algorithm)
 
 	cmd.Short = fmt.Sprintf(fmtCmdAutheliaCryptoCertificateGenerateRequestShort, algorithmFmt, cryptoCertCSROut)
 	cmd.Long = fmt.Sprintf(fmtCmdAutheliaCryptoCertificateGenerateRequestLong, algorithmFmt, cryptoCertCSROut, algorithmFmt, cryptoCertCSROut)
@@ -146,7 +204,7 @@ func newCryptoPairSubCmd(use string) (cmd *cobra.Command) {
 		example, useFmt string
 	)
 
-	useFmt = fmtCryptoUse(use)
+	useFmt = fmtCryptoCertificateUse(use)
 
 	switch use {
 	case cmdUseRSA:
@@ -184,7 +242,7 @@ func newCryptoGenerateCmd(category, algorithm string) (cmd *cobra.Command) {
 
 	cmdFlagsCryptoPrivateKey(cmd)
 
-	algorithmFmt := fmtCryptoUse(algorithm)
+	algorithmFmt := fmtCryptoCertificateUse(algorithm)
 
 	switch category {
 	case cmdUseCertificate:
diff --git a/internal/commands/crypto_hash.go b/internal/commands/crypto_hash.go
new file mode 100644
index 000000000..72eb8f7d9
--- /dev/null
+++ b/internal/commands/crypto_hash.go
@@ -0,0 +1,527 @@
+package commands
+
+import (
+	"fmt"
+	"strings"
+	"syscall"
+
+	"github.com/go-crypt/crypt"
+	"github.com/spf13/cobra"
+	"github.com/spf13/pflag"
+	"golang.org/x/term"
+
+	"github.com/authelia/authelia/v4/internal/authentication"
+	"github.com/authelia/authelia/v4/internal/configuration"
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
+	"github.com/authelia/authelia/v4/internal/configuration/validator"
+	"github.com/authelia/authelia/v4/internal/utils"
+)
+
+func newHashPasswordCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     cmdUseHashPassword,
+		Short:   cmdAutheliaHashPasswordShort,
+		Long:    cmdAutheliaHashPasswordLong,
+		Example: cmdAutheliaHashPasswordExample,
+		Args:    cobra.MaximumNArgs(1),
+		RunE:    cmdHashPasswordRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmdFlagConfig(cmd)
+
+	cmd.Flags().BoolP(cmdFlagNameSHA512, "z", false, fmt.Sprintf("use sha512 as the algorithm (changes iterations to %d, change with -i)", schema.DefaultPasswordConfig.SHA2Crypt.Iterations))
+	cmd.Flags().IntP(cmdFlagNameIterations, "i", schema.DefaultPasswordConfig.Argon2.Iterations, "set the number of hashing iterations")
+	cmd.Flags().IntP(cmdFlagNameMemory, "m", schema.DefaultPasswordConfig.Argon2.Memory, "[argon2id] set the amount of memory param (in MB)")
+	cmd.Flags().IntP(cmdFlagNameParallelism, "p", schema.DefaultPasswordConfig.Argon2.Parallelism, "[argon2id] set the parallelism param")
+	cmd.Flags().IntP("key-length", "k", schema.DefaultPasswordConfig.Argon2.KeyLength, "[argon2id] set the key length param")
+	cmd.Flags().IntP("salt-length", "l", schema.DefaultPasswordConfig.Argon2.SaltLength, "set the auto-generated salt length")
+	cmd.Flags().Bool(cmdFlagNameNoConfirm, false, "skip the password confirmation prompt")
+
+	return cmd
+}
+
+func cmdHashPasswordRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		flagsMap map[string]string
+		sha512   bool
+	)
+
+	if sha512, err = cmd.Flags().GetBool(cmdFlagNameSHA512); err != nil {
+		return err
+	}
+
+	switch {
+	case sha512:
+		flagsMap = map[string]string{
+			cmdFlagNameIterations: prefixFilePassword + ".sha2crypt.iterations",
+			"salt-length":         prefixFilePassword + ".sha2crypt.salt_length",
+		}
+	default:
+		flagsMap = map[string]string{
+			cmdFlagNameIterations:  prefixFilePassword + ".argon2.iterations",
+			"key-length":           prefixFilePassword + ".argon2.key_length",
+			"salt-length":          prefixFilePassword + ".argon2.salt_length",
+			cmdFlagNameParallelism: prefixFilePassword + ".argon2.parallelism",
+			cmdFlagNameMemory:      prefixFilePassword + ".argon2.memory",
+		}
+	}
+
+	return cmdCryptoHashGenerateFinish(cmd, args, flagsMap)
+}
+
+func newCryptoHashCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     cmdUseHash,
+		Short:   cmdAutheliaCryptoHashShort,
+		Long:    cmdAutheliaCryptoHashLong,
+		Example: cmdAutheliaCryptoHashExample,
+		Args:    cobra.NoArgs,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.AddCommand(
+		newCryptoHashValidateCmd(),
+		newCryptoHashGenerateCmd(),
+	)
+
+	return cmd
+}
+
+func newCryptoHashGenerateCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     cmdUseGenerate,
+		Short:   cmdAutheliaCryptoHashGenerateShort,
+		Long:    cmdAutheliaCryptoHashGenerateLong,
+		Example: cmdAutheliaCryptoHashGenerateExample,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return cmdCryptoHashGenerateFinish(cmd, args, map[string]string{})
+		},
+
+		DisableAutoGenTag: true,
+	}
+
+	cmdFlagConfig(cmd)
+	cmdFlagPassword(cmd, true)
+
+	for _, use := range []string{cmdUseHashArgon2, cmdUseHashSHA2Crypt, cmdUseHashPBKDF2, cmdUseHashBCrypt, cmdUseHashSCrypt} {
+		cmd.AddCommand(newCryptoHashGenerateSubCmd(use))
+	}
+
+	return cmd
+}
+
+func newCryptoHashGenerateSubCmd(use string) (cmd *cobra.Command) {
+	useFmt := fmtCryptoHashUse(use)
+
+	cmd = &cobra.Command{
+		Use:     use,
+		Short:   fmt.Sprintf(fmtCmdAutheliaCryptoHashGenerateSubShort, useFmt),
+		Long:    fmt.Sprintf(fmtCmdAutheliaCryptoHashGenerateSubLong, useFmt, useFmt),
+		Example: fmt.Sprintf(fmtCmdAutheliaCryptoHashGenerateSubExample, use),
+		Args:    cobra.NoArgs,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return nil
+		},
+
+		DisableAutoGenTag: true,
+	}
+
+	cmdFlagConfig(cmd)
+	cmdFlagPassword(cmd, true)
+	cmdFlagRandomPassword(cmd)
+
+	switch use {
+	case cmdUseHashArgon2:
+		cmdFlagIterations(cmd, schema.DefaultPasswordConfig.Argon2.Iterations)
+		cmdFlagParallelism(cmd, schema.DefaultPasswordConfig.Argon2.Parallelism)
+		cmdFlagKeySize(cmd, schema.DefaultPasswordConfig.Argon2.KeyLength)
+		cmdFlagSaltSize(cmd, schema.DefaultPasswordConfig.Argon2.SaltLength)
+
+		cmd.Flags().StringP(cmdFlagNameVariant, "v", schema.DefaultPasswordConfig.Argon2.Variant, "variant, options are 'argon2id', 'argon2i', and 'argon2d'")
+		cmd.Flags().IntP(cmdFlagNameMemory, "m", schema.DefaultPasswordConfig.Argon2.Memory, "memory in kibibytes")
+		cmd.Flags().String(cmdFlagNameProfile, "", "profile to use, options are low-memory and recommended")
+
+		cmd.RunE = cryptoHashGenerateArgon2RunE
+	case cmdUseHashSHA2Crypt:
+		cmdFlagIterations(cmd, schema.DefaultPasswordConfig.SHA2Crypt.Iterations)
+		cmdFlagSaltSize(cmd, schema.DefaultPasswordConfig.SHA2Crypt.SaltLength)
+
+		cmd.Flags().StringP(cmdFlagNameVariant, "v", schema.DefaultPasswordConfig.SHA2Crypt.Variant, "variant, options are sha256 and sha512")
+
+		cmd.RunE = cryptoHashGenerateSHA2CryptRunE
+	case cmdUseHashPBKDF2:
+		cmdFlagIterations(cmd, schema.DefaultPasswordConfig.PBKDF2.Iterations)
+		cmdFlagSaltSize(cmd, schema.DefaultPasswordConfig.PBKDF2.SaltLength)
+
+		cmd.Flags().StringP(cmdFlagNameVariant, "v", schema.DefaultPasswordConfig.PBKDF2.Variant, "variant, options are 'sha1', 'sha224', 'sha256', 'sha384', and 'sha512'")
+
+		cmd.RunE = cryptoHashGeneratePBKDF2RunE
+	case cmdUseHashBCrypt:
+		cmd.Flags().StringP(cmdFlagNameVariant, "v", schema.DefaultPasswordConfig.BCrypt.Variant, "variant, options are 'standard' and 'sha256'")
+		cmd.Flags().IntP(cmdFlagNameCost, "i", schema.DefaultPasswordConfig.BCrypt.Cost, "hashing cost")
+
+		cmd.RunE = cryptoHashGenerateBCryptRunE
+	case cmdUseHashSCrypt:
+		cmdFlagIterations(cmd, schema.DefaultPasswordConfig.SCrypt.Iterations)
+		cmdFlagKeySize(cmd, schema.DefaultPasswordConfig.SCrypt.KeyLength)
+		cmdFlagSaltSize(cmd, schema.DefaultPasswordConfig.SCrypt.SaltLength)
+		cmdFlagParallelism(cmd, schema.DefaultPasswordConfig.SCrypt.Parallelism)
+
+		cmd.Flags().IntP(cmdFlagNameBlockSize, "r", schema.DefaultPasswordConfig.SCrypt.BlockSize, "block size")
+
+		cmd.RunE = cryptoHashGenerateSCryptRunE
+	}
+
+	return cmd
+}
+
+func cryptoHashGenerateArgon2RunE(cmd *cobra.Command, args []string) (err error) {
+	flagsMap := map[string]string{
+		cmdFlagNameVariant:     prefixFilePassword + ".argon2.variant",
+		cmdFlagNameIterations:  prefixFilePassword + ".argon2.iterations",
+		cmdFlagNameMemory:      prefixFilePassword + ".argon2.memory",
+		cmdFlagNameParallelism: prefixFilePassword + ".argon2.parallelism",
+		cmdFlagNameKeySize:     prefixFilePassword + ".argon2.key_length",
+		cmdFlagNameSaltSize:    prefixFilePassword + ".argon2.salt_length",
+	}
+
+	return cmdCryptoHashGenerateFinish(cmd, args, flagsMap)
+}
+
+func cryptoHashGenerateSHA2CryptRunE(cmd *cobra.Command, args []string) (err error) {
+	flagsMap := map[string]string{
+		cmdFlagNameVariant:    prefixFilePassword + ".sha2crypt.variant",
+		cmdFlagNameIterations: prefixFilePassword + ".sha2crypt.iterations",
+		cmdFlagNameSaltSize:   prefixFilePassword + ".sha2crypt.salt_length",
+	}
+
+	return cmdCryptoHashGenerateFinish(cmd, args, flagsMap)
+}
+
+func cryptoHashGeneratePBKDF2RunE(cmd *cobra.Command, args []string) (err error) {
+	flagsMap := map[string]string{
+		cmdFlagNameVariant:    prefixFilePassword + ".pbkdf2.variant",
+		cmdFlagNameIterations: prefixFilePassword + ".pbkdf2.iterations",
+		cmdFlagNameKeySize:    prefixFilePassword + ".pbkdf2.key_length",
+		cmdFlagNameSaltSize:   prefixFilePassword + ".pbkdf2.salt_length",
+	}
+
+	return cmdCryptoHashGenerateFinish(cmd, args, flagsMap)
+}
+
+func cryptoHashGenerateBCryptRunE(cmd *cobra.Command, args []string) (err error) {
+	flagsMap := map[string]string{
+		cmdFlagNameVariant: prefixFilePassword + ".bcrypt.variant",
+		cmdFlagNameCost:    prefixFilePassword + ".bcrypt.cost",
+	}
+
+	return cmdCryptoHashGenerateFinish(cmd, args, flagsMap)
+}
+
+func cryptoHashGenerateSCryptRunE(cmd *cobra.Command, args []string) (err error) {
+	flagsMap := map[string]string{
+		cmdFlagNameIterations:  prefixFilePassword + ".scrypt.iterations",
+		cmdFlagNameBlockSize:   prefixFilePassword + ".scrypt.block_size",
+		cmdFlagNameParallelism: prefixFilePassword + ".scrypt.parallelism",
+		cmdFlagNameKeySize:     prefixFilePassword + ".scrypt.key_length",
+		cmdFlagNameSaltSize:    prefixFilePassword + ".scrypt.salt_length",
+	}
+
+	return cmdCryptoHashGenerateFinish(cmd, args, flagsMap)
+}
+
+func newCryptoHashValidateCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     fmt.Sprintf(cmdUseFmtValidate, cmdUseValidate),
+		Short:   cmdAutheliaCryptoHashValidateShort,
+		Long:    cmdAutheliaCryptoHashValidateLong,
+		Example: cmdAutheliaCryptoHashValidateExample,
+		Args:    cobra.ExactArgs(1),
+		RunE: func(cmd *cobra.Command, args []string) (err error) {
+			var (
+				password string
+				valid    bool
+			)
+
+			if password, _, err = cmdCryptoHashGetPassword(cmd, args, false, false); err != nil {
+				return fmt.Errorf("error occurred trying to obtain the password: %w", err)
+			}
+
+			if len(password) == 0 {
+				return fmt.Errorf("no password provided")
+			}
+
+			if valid, err = crypt.CheckPassword(password, args[0]); err != nil {
+				return fmt.Errorf("error occurred trying to validate the password against the digest: %w", err)
+			}
+
+			switch {
+			case valid:
+				fmt.Println("The password matches the digest.")
+			default:
+				fmt.Println("The password does not match the digest.")
+			}
+
+			return nil
+		},
+
+		DisableAutoGenTag: true,
+	}
+
+	cmdFlagPassword(cmd, false)
+
+	return cmd
+}
+
+func cmdCryptoHashGenerateFinish(cmd *cobra.Command, args []string, flagsMap map[string]string) (err error) {
+	var (
+		algorithm string
+		configs   []string
+
+		c schema.Password
+	)
+
+	if configs, err = cmd.Flags().GetStringSlice(cmdFlagNameConfig); err != nil {
+		return err
+	}
+
+	// Skip config if the flag wasn't set and the default is non-existent.
+	if !cmd.Flags().Changed(cmdFlagNameConfig) {
+		configs = configFilterExisting(configs)
+	}
+
+	legacy := cmd.Use == cmdUseHashPassword
+
+	switch {
+	case cmd.Use == cmdUseGenerate:
+		break
+	case legacy:
+		if sha512, _ := cmd.Flags().GetBool(cmdFlagNameSHA512); sha512 {
+			algorithm = cmdUseHashSHA2Crypt
+		} else {
+			algorithm = cmdUseHashArgon2
+		}
+	default:
+		algorithm = cmd.Use
+	}
+
+	if c, err = cmdCryptoHashGetConfig(algorithm, configs, cmd.Flags(), flagsMap); err != nil {
+		return err
+	}
+
+	if legacy && algorithm == cmdUseHashArgon2 && cmd.Flags().Changed(cmdFlagNameMemory) {
+		c.Argon2.Memory *= 1024
+	}
+
+	var (
+		hash     crypt.Hash
+		digest   crypt.Digest
+		password string
+		random   bool
+	)
+
+	if password, random, err = cmdCryptoHashGetPassword(cmd, args, legacy, !legacy); err != nil {
+		return err
+	}
+
+	if len(password) == 0 {
+		return fmt.Errorf("no password provided")
+	}
+
+	if hash, err = authentication.NewFileCryptoHashFromConfig(c); err != nil {
+		return err
+	}
+
+	if digest, err = hash.Hash(password); err != nil {
+		return err
+	}
+
+	if random {
+		fmt.Printf("Random Password: %s\n", password)
+	}
+
+	fmt.Printf("Digest: %s\n", digest.Encode())
+
+	return nil
+}
+
+func cmdCryptoHashGetConfig(algorithm string, configs []string, flags *pflag.FlagSet, flagsMap map[string]string) (c schema.Password, err error) {
+	mapDefaults := map[string]interface{}{
+		prefixFilePassword + ".algorithm":             schema.DefaultPasswordConfig.Algorithm,
+		prefixFilePassword + ".argon2.variant":        schema.DefaultPasswordConfig.Argon2.Variant,
+		prefixFilePassword + ".argon2.iterations":     schema.DefaultPasswordConfig.Argon2.Iterations,
+		prefixFilePassword + ".argon2.memory":         schema.DefaultPasswordConfig.Argon2.Memory,
+		prefixFilePassword + ".argon2.parallelism":    schema.DefaultPasswordConfig.Argon2.Parallelism,
+		prefixFilePassword + ".argon2.key_length":     schema.DefaultPasswordConfig.Argon2.KeyLength,
+		prefixFilePassword + ".argon2.salt_length":    schema.DefaultPasswordConfig.Argon2.SaltLength,
+		prefixFilePassword + ".sha2crypt.variant":     schema.DefaultPasswordConfig.SHA2Crypt.Variant,
+		prefixFilePassword + ".sha2crypt.iterations":  schema.DefaultPasswordConfig.SHA2Crypt.Iterations,
+		prefixFilePassword + ".sha2crypt.salt_length": schema.DefaultPasswordConfig.SHA2Crypt.SaltLength,
+		prefixFilePassword + ".pbkdf2.variant":        schema.DefaultPasswordConfig.PBKDF2.Variant,
+		prefixFilePassword + ".pbkdf2.iterations":     schema.DefaultPasswordConfig.PBKDF2.Iterations,
+		prefixFilePassword + ".pbkdf2.salt_length":    schema.DefaultPasswordConfig.PBKDF2.SaltLength,
+		prefixFilePassword + ".bcrypt.variant":        schema.DefaultPasswordConfig.BCrypt.Variant,
+		prefixFilePassword + ".bcrypt.cost":           schema.DefaultPasswordConfig.BCrypt.Cost,
+		prefixFilePassword + ".scrypt.iterations":     schema.DefaultPasswordConfig.SCrypt.Iterations,
+		prefixFilePassword + ".scrypt.block_size":     schema.DefaultPasswordConfig.SCrypt.BlockSize,
+		prefixFilePassword + ".scrypt.parallelism":    schema.DefaultPasswordConfig.SCrypt.Parallelism,
+		prefixFilePassword + ".scrypt.key_length":     schema.DefaultPasswordConfig.SCrypt.KeyLength,
+		prefixFilePassword + ".scrypt.salt_length":    schema.DefaultPasswordConfig.SCrypt.SaltLength,
+	}
+
+	sources := configuration.NewDefaultSourcesWithDefaults(configs,
+		configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter,
+		configuration.NewMapSource(mapDefaults),
+		configuration.NewCommandLineSourceWithMapping(flags, flagsMap, false, false),
+	)
+
+	if algorithm != "" {
+		alg := map[string]interface{}{prefixFilePassword + ".algorithm": algorithm}
+
+		sources = append(sources, configuration.NewMapSource(alg))
+	}
+
+	val := schema.NewStructValidator()
+
+	if _, err = configuration.LoadAdvanced(val, prefixFilePassword, &c, sources...); err != nil {
+		return schema.Password{}, fmt.Errorf("error occurred loading configuration: %w", err)
+	}
+
+	validator.ValidatePasswordConfiguration(&c, val)
+
+	errs := val.Errors()
+
+	if len(errs) != 0 {
+		for i, e := range errs {
+			if i == 0 {
+				err = e
+				continue
+			}
+
+			err = fmt.Errorf("%v, %w", err, e)
+		}
+
+		return schema.Password{}, fmt.Errorf("errors occurred validating the password configuration: %w", err)
+	}
+
+	return c, nil
+}
+
+func cmdCryptoHashGetPassword(cmd *cobra.Command, args []string, useArgs, useRandom bool) (password string, random bool, err error) {
+	if useRandom {
+		if random, err = cmd.Flags().GetBool(cmdFlagNameRandom); err != nil {
+			return
+		}
+	}
+
+	switch {
+	case random:
+		var length int
+
+		if length, err = cmd.Flags().GetInt(cmdFlagNameRandomLength); err != nil {
+			return
+		}
+
+		password = utils.RandomString(length, utils.CharSetAlphaNumeric, true)
+
+		return
+	case cmd.Flags().Changed(cmdFlagNamePassword):
+		password, err = cmd.Flags().GetString(cmdFlagNamePassword)
+
+		return
+	case useArgs && len(args) != 0:
+		password, err = strings.Join(args, " "), nil
+
+		return
+	}
+
+	var (
+		data      []byte
+		noConfirm bool
+	)
+
+	if data, err = hashReadPasswordWithPrompt("Enter Password: "); err != nil {
+		err = fmt.Errorf("failed to read the password from the terminal: %w", err)
+
+		return
+	}
+
+	password = string(data)
+
+	if cmd.Use == fmt.Sprintf(cmdUseFmtValidate, cmdUseValidate) {
+		fmt.Println("")
+
+		return
+	}
+
+	if noConfirm, err = cmd.Flags().GetBool(cmdFlagNameNoConfirm); err == nil && !noConfirm {
+		if data, err = hashReadPasswordWithPrompt("Confirm Password: "); err != nil {
+			err = fmt.Errorf("failed to read the password from the terminal: %w", err)
+			return
+		}
+
+		if password != string(data) {
+			fmt.Println("")
+
+			err = fmt.Errorf("the password did not match the confirmation password")
+
+			return
+		}
+	}
+
+	fmt.Println("")
+
+	return
+}
+
+func hashReadPasswordWithPrompt(prompt string) (data []byte, err error) {
+	fmt.Print(prompt)
+
+	if data, err = term.ReadPassword(int(syscall.Stdin)); err != nil { //nolint:unconvert // Conversion required.
+		if err.Error() == "inappropriate ioctl for device" {
+			return nil, fmt.Errorf("the terminal doesn't appear to be interactive either use the '--password' flag or use an interactive terminal: %w", err)
+		}
+
+		return nil, err
+	}
+
+	fmt.Println("")
+
+	return data, nil
+}
+
+func cmdFlagConfig(cmd *cobra.Command) {
+	cmd.Flags().StringSliceP(cmdFlagNameConfig, "c", []string{"configuration.yml"}, "configuration files to load")
+}
+
+func cmdFlagPassword(cmd *cobra.Command, noConfirm bool) {
+	cmd.Flags().String(cmdFlagNamePassword, "", "manually supply the password rather than using the terminal prompt")
+
+	if noConfirm {
+		cmd.Flags().Bool(cmdFlagNameNoConfirm, false, "skip the password confirmation prompt")
+	}
+}
+
+func cmdFlagRandomPassword(cmd *cobra.Command) {
+	cmd.Flags().Bool(cmdFlagNameRandom, false, "uses a randomly generated password")
+	cmd.Flags().Int(cmdFlagNameRandomLength, 72, "when using a randomly generated password it configures the length")
+}
+
+func cmdFlagIterations(cmd *cobra.Command, value int) {
+	cmd.Flags().IntP(cmdFlagNameIterations, "i", value, "number of iterations")
+}
+
+func cmdFlagKeySize(cmd *cobra.Command, value int) {
+	cmd.Flags().IntP(cmdFlagNameKeySize, "k", value, "key size in bytes")
+}
+
+func cmdFlagSaltSize(cmd *cobra.Command, value int) {
+	cmd.Flags().IntP(cmdFlagNameSaltSize, "s", value, "salt size in bytes")
+}
+
+func cmdFlagParallelism(cmd *cobra.Command, value int) {
+	cmd.Flags().IntP(cmdFlagNameParallelism, "p", value, "parallelism or threads")
+}
diff --git a/internal/commands/crypto_helper.go b/internal/commands/crypto_helper.go
index 1a097f37c..d85c70798 100644
--- a/internal/commands/crypto_helper.go
+++ b/internal/commands/crypto_helper.go
@@ -416,7 +416,20 @@ func cryptoGetCertificateFromCmd(cmd *cobra.Command) (certificate *x509.Certific
 	return certificate, nil
 }
 
-func fmtCryptoUse(use string) string {
+func fmtCryptoHashUse(use string) string {
+	switch use {
+	case cmdUseHashArgon2:
+		return "Argon2"
+	case cmdUseHashSHA2Crypt:
+		return "SHA2 Crypt"
+	case cmdUseHashPBKDF2:
+		return "PBKDF2"
+	default:
+		return use
+	}
+}
+
+func fmtCryptoCertificateUse(use string) string {
 	switch use {
 	case cmdUseEd25519:
 		return "Ed25519"
diff --git a/internal/commands/hash.go b/internal/commands/hash.go
deleted file mode 100644
index 33608c67f..000000000
--- a/internal/commands/hash.go
+++ /dev/null
@@ -1,121 +0,0 @@
-package commands
-
-import (
-	"fmt"
-
-	"github.com/simia-tech/crypt"
-	"github.com/spf13/cobra"
-
-	"github.com/authelia/authelia/v4/internal/authentication"
-	"github.com/authelia/authelia/v4/internal/configuration"
-	"github.com/authelia/authelia/v4/internal/configuration/schema"
-	"github.com/authelia/authelia/v4/internal/configuration/validator"
-)
-
-func newHashPasswordCmd() (cmd *cobra.Command) {
-	cmd = &cobra.Command{
-		Use:     "hash-password [flags] -- <password>",
-		Short:   cmdAutheliaHashPasswordShort,
-		Long:    cmdAutheliaHashPasswordLong,
-		Example: cmdAutheliaHashPasswordExample,
-		Args:    cobra.MinimumNArgs(1),
-		RunE:    cmdHashPasswordRunE,
-
-		DisableAutoGenTag: true,
-	}
-
-	cmd.Flags().BoolP("sha512", "z", false, fmt.Sprintf("use sha512 as the algorithm (changes iterations to %d, change with -i)", schema.DefaultPasswordSHA512Configuration.Iterations))
-	cmd.Flags().IntP("iterations", "i", schema.DefaultPasswordConfiguration.Iterations, "set the number of hashing iterations")
-	cmd.Flags().StringP("salt", "s", "", "set the salt string")
-	cmd.Flags().IntP("memory", "m", schema.DefaultPasswordConfiguration.Memory, "[argon2id] set the amount of memory param (in MB)")
-	cmd.Flags().IntP("parallelism", "p", schema.DefaultPasswordConfiguration.Parallelism, "[argon2id] set the parallelism param")
-	cmd.Flags().IntP("key-length", "k", schema.DefaultPasswordConfiguration.KeyLength, "[argon2id] set the key length param")
-	cmd.Flags().IntP("salt-length", "l", schema.DefaultPasswordConfiguration.SaltLength, "set the auto-generated salt length")
-	cmd.Flags().StringSliceP("config", "c", []string{}, "Configuration files")
-
-	return cmd
-}
-
-func cmdHashPasswordRunE(cmd *cobra.Command, args []string) (err error) {
-	salt, _ := cmd.Flags().GetString("salt")
-	sha512, _ := cmd.Flags().GetBool("sha512")
-	configs, _ := cmd.Flags().GetStringSlice("config")
-
-	mapDefaults := map[string]interface{}{
-		"authentication_backend.file.password.algorithm":   schema.DefaultPasswordConfiguration.Algorithm,
-		"authentication_backend.file.password.iterations":  schema.DefaultPasswordConfiguration.Iterations,
-		"authentication_backend.file.password.key_length":  schema.DefaultPasswordConfiguration.KeyLength,
-		"authentication_backend.file.password.salt_length": schema.DefaultPasswordConfiguration.SaltLength,
-		"authentication_backend.file.password.parallelism": schema.DefaultPasswordConfiguration.Parallelism,
-		"authentication_backend.file.password.memory":      schema.DefaultPasswordConfiguration.Memory,
-	}
-
-	if sha512 {
-		mapDefaults["authentication_backend.file.password.algorithm"] = schema.DefaultPasswordSHA512Configuration.Algorithm
-		mapDefaults["authentication_backend.file.password.iterations"] = schema.DefaultPasswordSHA512Configuration.Iterations
-		mapDefaults["authentication_backend.file.password.salt_length"] = schema.DefaultPasswordSHA512Configuration.SaltLength
-	}
-
-	mapCLI := map[string]string{
-		"iterations":  "authentication_backend.file.password.iterations",
-		"key-length":  "authentication_backend.file.password.key_length",
-		"salt-length": "authentication_backend.file.password.salt_length",
-		"parallelism": "authentication_backend.file.password.parallelism",
-		"memory":      "authentication_backend.file.password.memory",
-	}
-
-	sources := configuration.NewDefaultSourcesWithDefaults(configs,
-		configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter,
-		configuration.NewMapSource(mapDefaults),
-		configuration.NewCommandLineSourceWithMapping(cmd.Flags(), mapCLI, false, false),
-	)
-
-	val := schema.NewStructValidator()
-
-	if _, config, err = configuration.Load(val, sources...); err != nil {
-		return fmt.Errorf("error occurred loading configuration: %w", err)
-	}
-
-	var (
-		hash      string
-		algorithm authentication.CryptAlgo
-	)
-
-	p := config.AuthenticationBackend.File.Password
-
-	switch p.Algorithm {
-	case "sha512":
-		algorithm = authentication.HashingAlgorithmSHA512
-	default:
-		algorithm = authentication.HashingAlgorithmArgon2id
-	}
-
-	validator.ValidatePasswordConfiguration(p, val)
-
-	errs := val.Errors()
-
-	if len(errs) != 0 {
-		for i, e := range errs {
-			if i == 0 {
-				err = e
-				continue
-			}
-
-			err = fmt.Errorf("%v, %w", err, e)
-		}
-
-		return fmt.Errorf("errors occurred validating the password configuration: %w", err)
-	}
-
-	if salt != "" {
-		salt = crypt.Base64Encoding.EncodeToString([]byte(salt))
-	}
-
-	if hash, err = authentication.HashPassword(args[0], salt, algorithm, p.Iterations, p.Memory*1024, p.Parallelism, p.KeyLength, p.SaltLength); err != nil {
-		return fmt.Errorf("error during password hashing: %w", err)
-	}
-
-	fmt.Printf("Password hash: %s\n", hash)
-
-	return nil
-}
diff --git a/internal/commands/root.go b/internal/commands/root.go
index c532d562e..282c1df03 100644
--- a/internal/commands/root.go
+++ b/internal/commands/root.go
@@ -42,12 +42,12 @@ func NewRootCmd() (cmd *cobra.Command) {
 	cmdWithConfigFlags(cmd, false, []string{})
 
 	cmd.AddCommand(
+		newAccessControlCommand(),
 		newBuildInfoCmd(),
 		newCryptoCmd(),
 		newHashPasswordCmd(),
 		newStorageCmd(),
 		newValidateConfigCmd(),
-		newAccessControlCommand(),
 	)
 
 	return cmd
diff --git a/internal/commands/storage_run.go b/internal/commands/storage_run.go
index b911fd64f..50b40a876 100644
--- a/internal/commands/storage_run.go
+++ b/internal/commands/storage_run.go
@@ -29,13 +29,13 @@ import (
 func storagePersistentPreRunE(cmd *cobra.Command, _ []string) (err error) {
 	var configs []string
 
-	if configs, err = cmd.Flags().GetStringSlice("config"); err != nil {
+	if configs, err = cmd.Flags().GetStringSlice(cmdFlagNameConfig); err != nil {
 		return err
 	}
 
 	sources := make([]configuration.Source, 0, len(configs)+3)
 
-	if cmd.Flags().Changed("config") {
+	if cmd.Flags().Changed(cmdFlagNameConfig) {
 		for _, configFile := range configs {
 			if _, err := os.Stat(configFile); os.IsNotExist(err) {
 				return fmt.Errorf("could not load the provided configuration file %s: %w", configFile, err)
@@ -406,7 +406,7 @@ func storageTOTPExportGetConfigFromFlags(cmd *cobra.Command) (format, dir string
 		break
 	case storageTOTPExportFormatPNG:
 		if dir == "" {
-			dir = utils.RandomString(8, utils.AlphaNumericCharacters, false)
+			dir = utils.RandomString(8, utils.CharSetAlphaNumeric, false)
 		}
 
 		if _, err = os.Stat(dir); !os.IsNotExist(err) {
diff --git a/internal/commands/util.go b/internal/commands/util.go
index ef83e1627..96043bfba 100644
--- a/internal/commands/util.go
+++ b/internal/commands/util.go
@@ -2,6 +2,7 @@ package commands
 
 import (
 	"fmt"
+	"os"
 )
 
 func recoverErr(i any) error {
@@ -16,3 +17,15 @@ func recoverErr(i any) error {
 		return fmt.Errorf("recovered panic with unknown type: %v", v)
 	}
 }
+
+func configFilterExisting(configs []string) (finalConfigs []string) {
+	var err error
+
+	for _, c := range configs {
+		if _, err = os.Stat(c); err == nil || !os.IsNotExist(err) {
+			finalConfigs = append(finalConfigs, c)
+		}
+	}
+
+	return finalConfigs
+}
diff --git a/internal/commands/validate.go b/internal/commands/validate.go
index 8a8cbf4b9..b55377373 100644
--- a/internal/commands/validate.go
+++ b/internal/commands/validate.go
@@ -31,7 +31,7 @@ func cmdValidateConfigRunE(cmd *cobra.Command, _ []string) (err error) {
 		val     *schema.StructValidator
 	)
 
-	if configs, err = cmd.Flags().GetStringSlice("config"); err != nil {
+	if configs, err = cmd.Flags().GetStringSlice(cmdFlagNameConfig); err != nil {
 		return err
 	}
 
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index ef0a3bd35..fee3739eb 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -393,12 +393,32 @@ authentication_backend:
   # file:
   #   path: /config/users_database.yml
   #   password:
-  #     algorithm: argon2id
-  #     iterations: 1
-  #     key_length: 32
-  #     salt_length: 16
-  #     memory: 1024
-  #     parallelism: 8
+  #     algorithm: argon2
+  #     argon2:
+  #       variant: argon2id
+  #       iterations: 3
+  #       memory: 65536
+  #       parallelism: 4
+  #       key_length: 32
+  #       salt_length: 16
+  #     scrypt:
+  #       iterations: 16
+  #       block_size: 8
+  #       parallelism: 1
+  #       key_length: 32
+  #       salt_length: 16
+  #     pbkdf2:
+  #       variant: sha512
+  #       iterations: 310000
+  #       salt_length: 16
+  #     sha2crypt:
+  #       variant: sha512
+  #       iterations: 50000
+  #       salt_length: 16
+  #     bcrypt:
+  #       variant: standard
+  #       cost: 12
+
 
 ##
 ## Password Policy Configuration.
diff --git a/internal/configuration/schema/authentication.go b/internal/configuration/schema/authentication.go
index 9ed48bf07..1b286a3db 100644
--- a/internal/configuration/schema/authentication.go
+++ b/internal/configuration/schema/authentication.go
@@ -5,8 +5,86 @@ import (
 	"time"
 )
 
-// LDAPAuthenticationBackendConfiguration represents the configuration related to LDAP server.
-type LDAPAuthenticationBackendConfiguration struct {
+// AuthenticationBackend represents the configuration related to the authentication backend.
+type AuthenticationBackend struct {
+	PasswordReset PasswordResetAuthenticationBackend `koanf:"password_reset"`
+
+	RefreshInterval string `koanf:"refresh_interval"`
+
+	File *FileAuthenticationBackend `koanf:"file"`
+	LDAP *LDAPAuthenticationBackend `koanf:"ldap"`
+}
+
+// PasswordResetAuthenticationBackend represents the configuration related to password reset functionality.
+type PasswordResetAuthenticationBackend struct {
+	Disable   bool    `koanf:"disable"`
+	CustomURL url.URL `koanf:"custom_url"`
+}
+
+// FileAuthenticationBackend represents the configuration related to file-based backend.
+type FileAuthenticationBackend struct {
+	Path     string   `koanf:"path"`
+	Password Password `koanf:"password"`
+}
+
+// Password represents the configuration related to password hashing.
+type Password struct {
+	Algorithm string `koanf:"algorithm"`
+
+	Argon2    Argon2Password    `koanf:"argon2"`
+	SHA2Crypt SHA2CryptPassword `koanf:"sha2crypt"`
+	PBKDF2    PBKDF2Password    `koanf:"pbkdf2"`
+	BCrypt    BCryptPassword    `koanf:"bcrypt"`
+	SCrypt    SCryptPassword    `koanf:"scrypt"`
+
+	Iterations  int `koanf:"iterations"`
+	Memory      int `koanf:"memory"`
+	Parallelism int `koanf:"parallelism"`
+	KeyLength   int `koanf:"key_length"`
+	SaltLength  int `koanf:"salt_length"`
+}
+
+// Argon2Password represents the argon2 hashing settings.
+type Argon2Password struct {
+	Variant     string `koanf:"variant"`
+	Iterations  int    `koanf:"iterations"`
+	Memory      int    `koanf:"memory"`
+	Parallelism int    `koanf:"parallelism"`
+	KeyLength   int    `koanf:"key_length"`
+	SaltLength  int    `koanf:"salt_length"`
+}
+
+// SHA2CryptPassword represents the sha2crypt hashing settings.
+type SHA2CryptPassword struct {
+	Variant    string `koanf:"variant"`
+	Iterations int    `koanf:"iterations"`
+	SaltLength int    `koanf:"salt_length"`
+}
+
+// PBKDF2Password represents the PBKDF2 hashing settings.
+type PBKDF2Password struct {
+	Variant    string `koanf:"variant"`
+	Iterations int    `koanf:"iterations"`
+	SaltLength int    `koanf:"salt_length"`
+}
+
+// BCryptPassword represents the bcrypt hashing settings.
+type BCryptPassword struct {
+	Variant string `koanf:"variant"`
+	Cost    int    `koanf:"cost"`
+}
+
+// SCryptPassword represents the scrypt hashing settings.
+type SCryptPassword struct {
+	Iterations  int `koanf:"iterations"`
+	BlockSize   int `koanf:"block_size"`
+	Parallelism int `koanf:"parallelism"`
+	KeyLength   int `koanf:"key_length"`
+	SaltLength  int `koanf:"salt_length"`
+}
+
+// LDAPAuthenticationBackend represents the configuration related to LDAP server.
+type LDAPAuthenticationBackend struct {
 	Implementation string        `koanf:"implementation"`
 	URL            string        `koanf:"url"`
 	Timeout        time.Duration `koanf:"timeout"`
@@ -34,68 +112,59 @@ type LDAPAuthenticationBackendConfiguration struct {
 	Password string `koanf:"password"`
 }
 
-// FileAuthenticationBackendConfiguration represents the configuration related to file-based backend.
-type FileAuthenticationBackendConfiguration struct {
-	Path     string                 `koanf:"path"`
-	Password *PasswordConfiguration `koanf:"password"`
+// DefaultPasswordConfig represents the default configuration related to Argon2id hashing.
+var DefaultPasswordConfig = Password{
+	Algorithm: argon2,
+	Argon2: Argon2Password{
+		Variant:     argon2id,
+		Iterations:  3,
+		Memory:      64 * 1024,
+		Parallelism: 4,
+		KeyLength:   32,
+		SaltLength:  16,
+	},
+	SHA2Crypt: SHA2CryptPassword{
+		Variant:    sha512,
+		Iterations: 50000,
+		SaltLength: 16,
+	},
+	PBKDF2: PBKDF2Password{
+		Variant:    sha512,
+		Iterations: 310000,
+		SaltLength: 16,
+	},
+	BCrypt: BCryptPassword{
+		Variant: "standard",
+		Cost:    12,
+	},
+	SCrypt: SCryptPassword{
+		Iterations:  16,
+		BlockSize:   8,
+		Parallelism: 1,
+		KeyLength:   32,
+		SaltLength:  16,
+	},
 }
 
-// PasswordConfiguration represents the configuration related to password hashing.
-type PasswordConfiguration struct {
-	Iterations  int    `koanf:"iterations"`
-	KeyLength   int    `koanf:"key_length"`
-	SaltLength  int    `koanf:"salt_length"`
-	Algorithm   string `koanf:"algorithm"`
-	Memory      int    `koanf:"memory"`
-	Parallelism int    `koanf:"parallelism"`
+// DefaultCIPasswordConfig represents the default configuration related to Argon2id hashing for CI.
+var DefaultCIPasswordConfig = Password{
+	Algorithm: argon2,
+	Argon2: Argon2Password{
+		Iterations:  3,
+		Memory:      64,
+		Parallelism: 4,
+		KeyLength:   32,
+		SaltLength:  16,
+	},
+	SHA2Crypt: SHA2CryptPassword{
+		Variant:    sha512,
+		Iterations: 50000,
+		SaltLength: 16,
+	},
 }
 
-// AuthenticationBackendConfiguration represents the configuration related to the authentication backend.
-type AuthenticationBackendConfiguration struct {
-	LDAP *LDAPAuthenticationBackendConfiguration `koanf:"ldap"`
-	File *FileAuthenticationBackendConfiguration `koanf:"file"`
-
-	PasswordReset PasswordResetAuthenticationBackendConfiguration `koanf:"password_reset"`
-
-	RefreshInterval string `koanf:"refresh_interval"`
-}
-
-// PasswordResetAuthenticationBackendConfiguration represents the configuration related to password reset functionality.
-type PasswordResetAuthenticationBackendConfiguration struct {
-	Disable   bool    `koanf:"disable"`
-	CustomURL url.URL `koanf:"custom_url"`
-}
-
-// DefaultPasswordConfiguration represents the default configuration related to Argon2id hashing.
-var DefaultPasswordConfiguration = PasswordConfiguration{
-	Iterations:  3,
-	KeyLength:   32,
-	SaltLength:  16,
-	Algorithm:   argon2id,
-	Memory:      64,
-	Parallelism: 4,
-}
-
-// DefaultCIPasswordConfiguration represents the default configuration related to Argon2id hashing for CI.
-var DefaultCIPasswordConfiguration = PasswordConfiguration{
-	Iterations:  3,
-	KeyLength:   32,
-	SaltLength:  16,
-	Algorithm:   argon2id,
-	Memory:      64,
-	Parallelism: 4,
-}
-
-// DefaultPasswordSHA512Configuration represents the default configuration related to SHA512 hashing.
-var DefaultPasswordSHA512Configuration = PasswordConfiguration{
-	Iterations: 50000,
-	SaltLength: 16,
-	Algorithm:  "sha512",
-}
-
-// DefaultLDAPAuthenticationBackendConfiguration represents the default LDAP config.
-var DefaultLDAPAuthenticationBackendConfiguration = LDAPAuthenticationBackendConfiguration{
-	Implementation:       LDAPImplementationCustom,
+// DefaultLDAPAuthenticationBackendConfigurationImplementationCustom represents the default LDAP config.
+var DefaultLDAPAuthenticationBackendConfigurationImplementationCustom = LDAPAuthenticationBackend{
 	UsernameAttribute:    "uid",
 	MailAttribute:        "mail",
 	DisplayNameAttribute: "displayName",
@@ -106,12 +175,16 @@ var DefaultLDAPAuthenticationBackendConfiguration = LDAPAuthenticationBackendCon
 	},
 }
 
-// DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration represents the default LDAP config for the MSAD Implementation.
-var DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration = LDAPAuthenticationBackendConfiguration{
+// DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory represents the default LDAP config for the MSAD Implementation.
+var DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory = LDAPAuthenticationBackend{
 	UsersFilter:          "(&(|({username_attribute}={input})({mail_attribute}={input}))(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(pwdLastSet=0)))",
 	UsernameAttribute:    "sAMAccountName",
 	MailAttribute:        "mail",
 	DisplayNameAttribute: "displayName",
 	GroupsFilter:         "(&(member={dn})(objectClass=group))",
 	GroupNameAttribute:   "cn",
+	Timeout:              time.Second * 5,
+	TLS: &TLSConfig{
+		MinimumVersion: "TLS1.2",
+	},
 }
diff --git a/internal/configuration/schema/configuration.go b/internal/configuration/schema/configuration.go
index 27ed0f142..3dc891d9a 100644
--- a/internal/configuration/schema/configuration.go
+++ b/internal/configuration/schema/configuration.go
@@ -8,19 +8,19 @@ type Configuration struct {
 	DefaultRedirectionURL string `koanf:"default_redirection_url"`
 	Default2FAMethod      string `koanf:"default_2fa_method"`
 
-	Log                   LogConfiguration                   `koanf:"log"`
-	IdentityProviders     IdentityProvidersConfiguration     `koanf:"identity_providers"`
-	AuthenticationBackend AuthenticationBackendConfiguration `koanf:"authentication_backend"`
-	Session               SessionConfiguration               `koanf:"session"`
-	TOTP                  TOTPConfiguration                  `koanf:"totp"`
-	DuoAPI                DuoAPIConfiguration                `koanf:"duo_api"`
-	AccessControl         AccessControlConfiguration         `koanf:"access_control"`
-	NTP                   NTPConfiguration                   `koanf:"ntp"`
-	Regulation            RegulationConfiguration            `koanf:"regulation"`
-	Storage               StorageConfiguration               `koanf:"storage"`
-	Notifier              NotifierConfiguration              `koanf:"notifier"`
-	Server                ServerConfiguration                `koanf:"server"`
-	Telemetry             TelemetryConfig                    `koanf:"telemetry"`
-	Webauthn              WebauthnConfiguration              `koanf:"webauthn"`
-	PasswordPolicy        PasswordPolicyConfiguration        `koanf:"password_policy"`
+	Log                   LogConfiguration               `koanf:"log"`
+	IdentityProviders     IdentityProvidersConfiguration `koanf:"identity_providers"`
+	AuthenticationBackend AuthenticationBackend          `koanf:"authentication_backend"`
+	Session               SessionConfiguration           `koanf:"session"`
+	TOTP                  TOTPConfiguration              `koanf:"totp"`
+	DuoAPI                DuoAPIConfiguration            `koanf:"duo_api"`
+	AccessControl         AccessControlConfiguration     `koanf:"access_control"`
+	NTP                   NTPConfiguration               `koanf:"ntp"`
+	Regulation            RegulationConfiguration        `koanf:"regulation"`
+	Storage               StorageConfiguration           `koanf:"storage"`
+	Notifier              NotifierConfiguration          `koanf:"notifier"`
+	Server                ServerConfiguration            `koanf:"server"`
+	Telemetry             TelemetryConfig                `koanf:"telemetry"`
+	Webauthn              WebauthnConfiguration          `koanf:"webauthn"`
+	PasswordPolicy        PasswordPolicyConfiguration    `koanf:"password_policy"`
 }
diff --git a/internal/configuration/schema/const.go b/internal/configuration/schema/const.go
index c43eefb9d..23491b648 100644
--- a/internal/configuration/schema/const.go
+++ b/internal/configuration/schema/const.go
@@ -5,7 +5,12 @@ import (
 	"time"
 )
 
-const argon2id = "argon2id"
+const (
+	argon2   = "argon2"
+	argon2id = "argon2id"
+	sha512   = "sha512"
+	sha256   = "sha256"
+)
 
 // ProfileRefreshDisabled represents a value for refresh_interval that disables the check entirely.
 const ProfileRefreshDisabled = "disable"
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index d3cbdc8d6..2d64f1f7d 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -46,6 +46,35 @@ var Keys = []string{
 	"identity_providers.oidc.clients[].userinfo_signing_algorithm",
 	"identity_providers.oidc.clients[].authorization_policy",
 	"identity_providers.oidc.clients[].pre_configured_consent_duration",
+	"authentication_backend.password_reset.disable",
+	"authentication_backend.password_reset.custom_url",
+	"authentication_backend.refresh_interval",
+	"authentication_backend.file.path",
+	"authentication_backend.file.password.algorithm",
+	"authentication_backend.file.password.argon2.variant",
+	"authentication_backend.file.password.argon2.iterations",
+	"authentication_backend.file.password.argon2.memory",
+	"authentication_backend.file.password.argon2.parallelism",
+	"authentication_backend.file.password.argon2.key_length",
+	"authentication_backend.file.password.argon2.salt_length",
+	"authentication_backend.file.password.sha2crypt.variant",
+	"authentication_backend.file.password.sha2crypt.iterations",
+	"authentication_backend.file.password.sha2crypt.salt_length",
+	"authentication_backend.file.password.pbkdf2.variant",
+	"authentication_backend.file.password.pbkdf2.iterations",
+	"authentication_backend.file.password.pbkdf2.salt_length",
+	"authentication_backend.file.password.bcrypt.variant",
+	"authentication_backend.file.password.bcrypt.cost",
+	"authentication_backend.file.password.scrypt.iterations",
+	"authentication_backend.file.password.scrypt.block_size",
+	"authentication_backend.file.password.scrypt.parallelism",
+	"authentication_backend.file.password.scrypt.key_length",
+	"authentication_backend.file.password.scrypt.salt_length",
+	"authentication_backend.file.password.iterations",
+	"authentication_backend.file.password.memory",
+	"authentication_backend.file.password.parallelism",
+	"authentication_backend.file.password.key_length",
+	"authentication_backend.file.password.salt_length",
 	"authentication_backend.ldap.implementation",
 	"authentication_backend.ldap.url",
 	"authentication_backend.ldap.timeout",
@@ -67,16 +96,6 @@ var Keys = []string{
 	"authentication_backend.ldap.permit_feature_detection_failure",
 	"authentication_backend.ldap.user",
 	"authentication_backend.ldap.password",
-	"authentication_backend.file.path",
-	"authentication_backend.file.password.iterations",
-	"authentication_backend.file.password.key_length",
-	"authentication_backend.file.password.salt_length",
-	"authentication_backend.file.password.algorithm",
-	"authentication_backend.file.password.memory",
-	"authentication_backend.file.password.parallelism",
-	"authentication_backend.password_reset.disable",
-	"authentication_backend.password_reset.custom_url",
-	"authentication_backend.refresh_interval",
 	"session.name",
 	"session.domain",
 	"session.same_site",
diff --git a/internal/configuration/validator/access_control_test.go b/internal/configuration/validator/access_control_test.go
index 5af97a0a9..42ac82258 100644
--- a/internal/configuration/validator/access_control_test.go
+++ b/internal/configuration/validator/access_control_test.go
@@ -62,7 +62,7 @@ func (suite *AccessControl) TestShouldValidateEitherDomainsOrDomainsRegex() {
 }
 
 func (suite *AccessControl) TestShouldRaiseErrorInvalidDefaultPolicy() {
-	suite.config.AccessControl.DefaultPolicy = testInvalidPolicy
+	suite.config.AccessControl.DefaultPolicy = testInvalid
 
 	ValidateAccessControl(suite.config, suite.validator)
 
@@ -135,7 +135,7 @@ func (suite *AccessControl) TestShouldRaiseErrorInvalidPolicy() {
 	suite.config.AccessControl.Rules = []schema.ACLRule{
 		{
 			Domains: []string{"public.example.com"},
-			Policy:  testInvalidPolicy,
+			Policy:  testInvalid,
 		},
 	}
 
@@ -183,7 +183,7 @@ func (suite *AccessControl) TestShouldRaiseErrorInvalidMethod() {
 
 func (suite *AccessControl) TestShouldRaiseErrorInvalidSubject() {
 	domains := []string{"public.example.com"}
-	subjects := [][]string{{"invalid"}}
+	subjects := [][]string{{testInvalid}}
 	suite.config.AccessControl.Rules = []schema.ACLRule{
 		{
 			Domains:  domains,
diff --git a/internal/configuration/validator/authentication.go b/internal/configuration/validator/authentication.go
index 59ea0518a..280d383ec 100644
--- a/internal/configuration/validator/authentication.go
+++ b/internal/configuration/validator/authentication.go
@@ -5,26 +5,18 @@ import (
 	"net/url"
 	"strings"
 
+	"github.com/go-crypt/crypt"
+
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 // ValidateAuthenticationBackend validates and updates the authentication backend configuration.
-func ValidateAuthenticationBackend(config *schema.AuthenticationBackendConfiguration, validator *schema.StructValidator) {
+func ValidateAuthenticationBackend(config *schema.AuthenticationBackend, validator *schema.StructValidator) {
 	if config.LDAP == nil && config.File == nil {
 		validator.Push(fmt.Errorf(errFmtAuthBackendNotConfigured))
 	}
 
-	if config.LDAP != nil && config.File != nil {
-		validator.Push(fmt.Errorf(errFmtAuthBackendMultipleConfigured))
-	}
-
-	if config.File != nil {
-		validateFileAuthenticationBackend(config.File, validator)
-	} else if config.LDAP != nil {
-		validateLDAPAuthenticationBackend(config, validator)
-	}
-
 	if config.RefreshInterval == "" {
 		config.RefreshInterval = schema.RefreshIntervalDefault
 	} else {
@@ -42,110 +34,306 @@ func ValidateAuthenticationBackend(config *schema.AuthenticationBackendConfigura
 			validator.Push(fmt.Errorf(errFmtAuthBackendPasswordResetCustomURLScheme, config.PasswordReset.CustomURL.String(), config.PasswordReset.CustomURL.Scheme))
 		}
 	}
+
+	if config.LDAP != nil && config.File != nil {
+		validator.Push(fmt.Errorf(errFmtAuthBackendMultipleConfigured))
+	}
+
+	if config.File != nil {
+		validateFileAuthenticationBackend(config.File, validator)
+	}
+
+	if config.LDAP != nil {
+		validateLDAPAuthenticationBackend(config, validator)
+	}
 }
 
 // validateFileAuthenticationBackend validates and updates the file authentication backend configuration.
-func validateFileAuthenticationBackend(config *schema.FileAuthenticationBackendConfiguration, validator *schema.StructValidator) {
+func validateFileAuthenticationBackend(config *schema.FileAuthenticationBackend, validator *schema.StructValidator) {
 	if config.Path == "" {
 		validator.Push(fmt.Errorf(errFmtFileAuthBackendPathNotConfigured))
 	}
 
-	if config.Password == nil {
-		config.Password = &schema.DefaultPasswordConfiguration
-	} else {
-		ValidatePasswordConfiguration(config.Password, validator)
-	}
+	ValidatePasswordConfiguration(&config.Password, validator)
 }
 
 // ValidatePasswordConfiguration validates the file auth backend password configuration.
-func ValidatePasswordConfiguration(config *schema.PasswordConfiguration, validator *schema.StructValidator) {
-	// Salt Length.
+func ValidatePasswordConfiguration(config *schema.Password, validator *schema.StructValidator) {
+	validateFileAuthenticationBackendPasswordConfigLegacy(config)
+
 	switch {
-	case config.SaltLength == 0:
-		config.SaltLength = schema.DefaultPasswordConfiguration.SaltLength
-	case config.SaltLength < 8:
-		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordSaltLength, config.SaltLength))
-	}
-
-	switch config.Algorithm {
-	case "":
-		config.Algorithm = schema.DefaultPasswordConfiguration.Algorithm
-		fallthrough
-	case hashArgon2id:
-		validateFileAuthenticationBackendArgon2id(config, validator)
-	case hashSHA512:
-		validateFileAuthenticationBackendSHA512(config)
+	case config.Algorithm == "":
+		config.Algorithm = schema.DefaultPasswordConfig.Algorithm
+	case utils.IsStringInSlice(config.Algorithm, validHashAlgorithms):
+		break
 	default:
-		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordUnknownAlg, config.Algorithm))
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordUnknownAlg, config.Algorithm, strings.Join(validHashAlgorithms, "', '")))
 	}
 
-	if config.Iterations < 1 {
-		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordInvalidIterations, config.Iterations))
+	validateFileAuthenticationBackendPasswordConfigArgon2(config, validator)
+	validateFileAuthenticationBackendPasswordConfigSHA2Crypt(config, validator)
+	validateFileAuthenticationBackendPasswordConfigPBKDF2(config, validator)
+	validateFileAuthenticationBackendPasswordConfigBCrypt(config, validator)
+	validateFileAuthenticationBackendPasswordConfigSCrypt(config, validator)
+}
+
+//nolint:gocyclo // Function is well formed.
+func validateFileAuthenticationBackendPasswordConfigArgon2(config *schema.Password, validator *schema.StructValidator) {
+	switch {
+	case config.Argon2.Variant == "":
+		config.Argon2.Variant = schema.DefaultPasswordConfig.Argon2.Variant
+	case utils.IsStringInSlice(config.Argon2.Variant, validArgon2Variants):
+		break
+	default:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordInvalidVariant, hashArgon2, config.Argon2.Variant, strings.Join(validArgon2Variants, "', '")))
+	}
+
+	switch {
+	case config.Argon2.Iterations == 0:
+		config.Argon2.Iterations = schema.DefaultPasswordConfig.Argon2.Iterations
+	case config.Argon2.Iterations < crypt.Argon2IterationsMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashArgon2, "iterations", config.Argon2.Iterations, crypt.Argon2IterationsMin))
+	case config.Argon2.Iterations > crypt.Argon2IterationsMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashArgon2, "iterations", config.Argon2.Iterations, crypt.Argon2IterationsMax))
+	}
+
+	switch {
+	case config.Argon2.Parallelism == 0:
+		config.Argon2.Parallelism = schema.DefaultPasswordConfig.Argon2.Parallelism
+	case config.Argon2.Parallelism < crypt.Argon2ParallelismMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashArgon2, "parallelism", config.Argon2.Parallelism, crypt.Argon2ParallelismMin))
+	case config.Argon2.Parallelism > crypt.Argon2ParallelismMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashArgon2, "parallelism", config.Argon2.Parallelism, crypt.Argon2ParallelismMax))
+	}
+
+	switch {
+	case config.Argon2.Memory == 0:
+		config.Argon2.Memory = schema.DefaultPasswordConfig.Argon2.Memory
+	case config.Argon2.Memory < 0:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashArgon2, "memory", config.Argon2.Parallelism, 1))
+	case config.Argon2.Memory < (crypt.Argon2MemoryMinParallelismMultiplier * config.Argon2.Parallelism):
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordArgon2MemoryTooLow, config.Argon2.Memory, config.Argon2.Parallelism*crypt.Argon2MemoryMinParallelismMultiplier, config.Argon2.Parallelism, crypt.Argon2MemoryMinParallelismMultiplier))
+	}
+
+	switch {
+	case config.Argon2.KeyLength == 0:
+		config.Argon2.KeyLength = schema.DefaultPasswordConfig.Argon2.KeyLength
+	case config.Argon2.KeyLength < crypt.Argon2KeySizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashArgon2, "key_length", config.Argon2.KeyLength, crypt.Argon2KeySizeMin))
+	case config.Argon2.KeyLength > crypt.Argon2KeySizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashArgon2, "key_length", config.Argon2.KeyLength, crypt.Argon2KeySizeMax))
+	}
+
+	switch {
+	case config.Argon2.SaltLength == 0:
+		config.Argon2.SaltLength = schema.DefaultPasswordConfig.Argon2.SaltLength
+	case config.Argon2.SaltLength < crypt.Argon2SaltSizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashArgon2, "salt_length", config.Argon2.SaltLength, crypt.Argon2SaltSizeMin))
+	case config.Argon2.SaltLength > crypt.Argon2SaltSizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashArgon2, "salt_length", config.Argon2.SaltLength, crypt.Argon2SaltSizeMax))
 	}
 }
 
-func validateFileAuthenticationBackendSHA512(config *schema.PasswordConfiguration) {
-	// Iterations (time).
-	if config.Iterations == 0 {
-		config.Iterations = schema.DefaultPasswordSHA512Configuration.Iterations
-	}
-}
-func validateFileAuthenticationBackendArgon2id(config *schema.PasswordConfiguration, validator *schema.StructValidator) {
-	// Iterations (time).
-	if config.Iterations == 0 {
-		config.Iterations = schema.DefaultPasswordConfiguration.Iterations
+func validateFileAuthenticationBackendPasswordConfigSHA2Crypt(config *schema.Password, validator *schema.StructValidator) {
+	switch {
+	case config.SHA2Crypt.Variant == "":
+		config.SHA2Crypt.Variant = schema.DefaultPasswordConfig.SHA2Crypt.Variant
+	case utils.IsStringInSlice(config.SHA2Crypt.Variant, validSHA2CryptVariants):
+		break
+	default:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordInvalidVariant, hashSHA2Crypt, config.SHA2Crypt.Variant, strings.Join(validSHA2CryptVariants, "', '")))
 	}
 
-	// Parallelism.
-	if config.Parallelism == 0 {
-		config.Parallelism = schema.DefaultPasswordConfiguration.Parallelism
-	} else if config.Parallelism < 1 {
-		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordArgon2idInvalidParallelism, config.Parallelism))
+	switch {
+	case config.SHA2Crypt.Iterations == 0:
+		config.SHA2Crypt.Iterations = schema.DefaultPasswordConfig.SHA2Crypt.Iterations
+	case config.SHA2Crypt.Iterations < crypt.SHA2CryptIterationsMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSHA2Crypt, "iterations", config.SHA2Crypt.Iterations, crypt.SHA2CryptIterationsMin))
+	case config.SHA2Crypt.Iterations > crypt.SHA2CryptIterationsMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashSHA2Crypt, "iterations", config.SHA2Crypt.Iterations, crypt.SHA2CryptIterationsMax))
 	}
 
-	// Memory.
-	if config.Memory == 0 {
-		config.Memory = schema.DefaultPasswordConfiguration.Memory
-	} else if config.Memory < config.Parallelism*8 {
-		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordArgon2idInvalidMemory, config.Parallelism, config.Parallelism*8, config.Memory))
-	}
-
-	// Key Length.
-	if config.KeyLength == 0 {
-		config.KeyLength = schema.DefaultPasswordConfiguration.KeyLength
-	} else if config.KeyLength < 16 {
-		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordArgon2idInvalidKeyLength, config.KeyLength))
+	switch {
+	case config.SHA2Crypt.SaltLength == 0:
+		config.SHA2Crypt.SaltLength = schema.DefaultPasswordConfig.SHA2Crypt.SaltLength
+	case config.SHA2Crypt.SaltLength < crypt.SHA2CryptSaltSizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSHA2Crypt, "salt_length", config.SHA2Crypt.SaltLength, crypt.SHA2CryptSaltSizeMin))
+	case config.SHA2Crypt.SaltLength > crypt.SHA2CryptSaltSizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashSHA2Crypt, "salt_length", config.SHA2Crypt.SaltLength, crypt.SHA2CryptSaltSizeMax))
 	}
 }
 
-func validateLDAPAuthenticationBackend(config *schema.AuthenticationBackendConfiguration, validator *schema.StructValidator) {
-	if config.LDAP.Timeout == 0 {
-		config.LDAP.Timeout = schema.DefaultLDAPAuthenticationBackendConfiguration.Timeout
+func validateFileAuthenticationBackendPasswordConfigPBKDF2(config *schema.Password, validator *schema.StructValidator) {
+	switch {
+	case config.PBKDF2.Variant == "":
+		config.PBKDF2.Variant = schema.DefaultPasswordConfig.PBKDF2.Variant
+	case utils.IsStringInSlice(config.PBKDF2.Variant, validPBKDF2Variants):
+		break
+	default:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordInvalidVariant, hashPBKDF2, config.PBKDF2.Variant, strings.Join(validPBKDF2Variants, "', '")))
 	}
 
+	switch {
+	case config.PBKDF2.Iterations == 0:
+		config.PBKDF2.Iterations = schema.DefaultPasswordConfig.PBKDF2.Iterations
+	case config.PBKDF2.Iterations < crypt.PBKDF2IterationsMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashPBKDF2, "iterations", config.PBKDF2.Iterations, crypt.PBKDF2IterationsMin))
+	case config.PBKDF2.Iterations > crypt.PBKDF2IterationsMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashPBKDF2, "iterations", config.PBKDF2.Iterations, crypt.PBKDF2IterationsMax))
+	}
+
+	switch {
+	case config.PBKDF2.SaltLength == 0:
+		config.PBKDF2.SaltLength = schema.DefaultPasswordConfig.PBKDF2.SaltLength
+	case config.PBKDF2.SaltLength < crypt.PBKDF2SaltSizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashPBKDF2, "salt_length", config.PBKDF2.SaltLength, crypt.PBKDF2SaltSizeMin))
+	case config.PBKDF2.SaltLength > crypt.PBKDF2SaltSizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashPBKDF2, "salt_length", config.PBKDF2.SaltLength, crypt.PBKDF2SaltSizeMax))
+	}
+}
+
+func validateFileAuthenticationBackendPasswordConfigBCrypt(config *schema.Password, validator *schema.StructValidator) {
+	switch {
+	case config.BCrypt.Variant == "":
+		config.BCrypt.Variant = schema.DefaultPasswordConfig.BCrypt.Variant
+	case utils.IsStringInSlice(config.BCrypt.Variant, validBCryptVariants):
+		break
+	default:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordInvalidVariant, hashBCrypt, config.BCrypt.Variant, strings.Join(validBCryptVariants, "', '")))
+	}
+
+	switch {
+	case config.BCrypt.Cost == 0:
+		config.BCrypt.Cost = schema.DefaultPasswordConfig.BCrypt.Cost
+	case config.BCrypt.Cost < crypt.BcryptCostMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashBCrypt, "cost", config.BCrypt.Cost, crypt.BcryptCostMin))
+	case config.BCrypt.Cost > crypt.BcryptCostMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashBCrypt, "cost", config.BCrypt.Cost, crypt.BcryptCostMax))
+	}
+}
+
+func validateFileAuthenticationBackendPasswordConfigSCrypt(config *schema.Password, validator *schema.StructValidator) {
+	switch {
+	case config.SCrypt.Iterations == 0:
+		config.SCrypt.Iterations = schema.DefaultPasswordConfig.SCrypt.Iterations
+	case config.SCrypt.Iterations < crypt.ScryptIterationsMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSCrypt, "iterations", config.SCrypt.Iterations, crypt.ScryptIterationsMin))
+	}
+
+	switch {
+	case config.SCrypt.BlockSize == 0:
+		config.SCrypt.BlockSize = schema.DefaultPasswordConfig.SCrypt.BlockSize
+	case config.SCrypt.BlockSize < crypt.ScryptBlockSizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSCrypt, "block_size", config.SCrypt.BlockSize, crypt.ScryptBlockSizeMin))
+	case config.SCrypt.BlockSize > crypt.ScryptBlockSizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashSCrypt, "block_size", config.SCrypt.BlockSize, crypt.ScryptBlockSizeMax))
+	}
+
+	switch {
+	case config.SCrypt.Parallelism == 0:
+		config.SCrypt.Parallelism = schema.DefaultPasswordConfig.SCrypt.Parallelism
+	case config.SCrypt.Parallelism < crypt.ScryptParallelismMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSCrypt, "parallelism", config.SCrypt.Parallelism, crypt.ScryptParallelismMin))
+	}
+
+	switch {
+	case config.SCrypt.KeyLength == 0:
+		config.SCrypt.KeyLength = schema.DefaultPasswordConfig.SCrypt.KeyLength
+	case config.SCrypt.KeyLength < crypt.ScryptKeySizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSCrypt, "key_length", config.SCrypt.KeyLength, crypt.ScryptKeySizeMin))
+	case config.SCrypt.KeyLength > crypt.ScryptKeySizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashSCrypt, "key_length", config.SCrypt.KeyLength, crypt.ScryptKeySizeMax))
+	}
+
+	switch {
+	case config.SCrypt.SaltLength == 0:
+		config.SCrypt.SaltLength = schema.DefaultPasswordConfig.SCrypt.SaltLength
+	case config.SCrypt.SaltLength < crypt.ScryptSaltSizeMin:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooSmall, hashSCrypt, "salt_length", config.SCrypt.SaltLength, crypt.ScryptSaltSizeMin))
+	case config.SCrypt.SaltLength > crypt.ScryptSaltSizeMax:
+		validator.Push(fmt.Errorf(errFmtFileAuthBackendPasswordOptionTooLarge, hashSCrypt, "salt_length", config.SCrypt.SaltLength, crypt.ScryptSaltSizeMax))
+	}
+}
+
+//nolint:gocyclo // Function is clear enough.
+func validateFileAuthenticationBackendPasswordConfigLegacy(config *schema.Password) {
+	switch config.Algorithm {
+	case hashLegacySHA512:
+		config.Algorithm = hashSHA2Crypt
+
+		if config.SHA2Crypt.Variant == "" {
+			config.SHA2Crypt.Variant = schema.DefaultPasswordConfig.SHA2Crypt.Variant
+		}
+
+		if config.Iterations > 0 && config.SHA2Crypt.Iterations == 0 {
+			config.SHA2Crypt.Iterations = config.Iterations
+		}
+
+		if config.SaltLength > 0 && config.SHA2Crypt.SaltLength == 0 {
+			if config.SaltLength > 16 {
+				config.SHA2Crypt.SaltLength = 16
+			} else {
+				config.SHA2Crypt.SaltLength = config.SaltLength
+			}
+		}
+	case hashLegacyArgon2id:
+		config.Algorithm = hashArgon2
+
+		if config.Argon2.Variant == "" {
+			config.Argon2.Variant = schema.DefaultPasswordConfig.Argon2.Variant
+		}
+
+		if config.Iterations > 0 && config.Argon2.Memory == 0 {
+			config.Argon2.Iterations = config.Iterations
+		}
+
+		if config.Memory > 0 && config.Argon2.Memory == 0 {
+			config.Argon2.Memory = config.Memory * 1024
+		}
+
+		if config.Parallelism > 0 && config.Argon2.Parallelism == 0 {
+			config.Argon2.Parallelism = config.Parallelism
+		}
+
+		if config.KeyLength > 0 && config.Argon2.KeyLength == 0 {
+			config.Argon2.KeyLength = config.KeyLength
+		}
+
+		if config.SaltLength > 0 && config.Argon2.SaltLength == 0 {
+			config.Argon2.SaltLength = config.SaltLength
+		}
+	}
+}
+
+func validateLDAPAuthenticationBackend(config *schema.AuthenticationBackend, validator *schema.StructValidator) {
 	if config.LDAP.Implementation == "" {
-		config.LDAP.Implementation = schema.DefaultLDAPAuthenticationBackendConfiguration.Implementation
+		config.LDAP.Implementation = schema.LDAPImplementationCustom
 	}
 
-	if config.LDAP.TLS == nil {
-		config.LDAP.TLS = schema.DefaultLDAPAuthenticationBackendConfiguration.TLS
-	} else if config.LDAP.TLS.MinimumVersion == "" {
-		config.LDAP.TLS.MinimumVersion = schema.DefaultLDAPAuthenticationBackendConfiguration.TLS.MinimumVersion
-	}
-
-	if _, err := utils.TLSStringToTLSConfigVersion(config.LDAP.TLS.MinimumVersion); err != nil {
-		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendTLSMinVersion, config.LDAP.TLS.MinimumVersion, err))
-	}
+	var implementation *schema.LDAPAuthenticationBackend
 
 	switch config.LDAP.Implementation {
 	case schema.LDAPImplementationCustom:
-		setDefaultImplementationCustomLDAPAuthenticationBackend(config.LDAP)
+		implementation = &schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom
 	case schema.LDAPImplementationActiveDirectory:
-		setDefaultImplementationActiveDirectoryLDAPAuthenticationBackend(config.LDAP)
+		implementation = &schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory
 	default:
 		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendImplementation, config.LDAP.Implementation, strings.Join([]string{schema.LDAPImplementationCustom, schema.LDAPImplementationActiveDirectory}, "', '")))
 	}
 
+	if implementation != nil {
+		setDefaultImplementationLDAPAuthenticationBackendProfileMisc(config.LDAP, implementation)
+		setDefaultImplementationLDAPAuthenticationBackendProfileAttributes(config.LDAP, implementation)
+	}
+
+	if config.LDAP.TLS != nil {
+		if _, err := utils.TLSStringToTLSConfigVersion(config.LDAP.TLS.MinimumVersion); err != nil {
+			validator.Push(fmt.Errorf(errFmtLDAPAuthBackendTLSMinVersion, config.LDAP.TLS.MinimumVersion, err))
+		}
+	} else {
+		config.LDAP.TLS = &schema.TLSConfig{}
+	}
+
 	if strings.Contains(config.LDAP.UsersFilter, "{0}") {
 		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendFilterReplacedPlaceholders, "users_filter", "{0}", "{input}"))
 	}
@@ -167,7 +355,53 @@ func validateLDAPAuthenticationBackend(config *schema.AuthenticationBackendConfi
 	validateLDAPRequiredParameters(config, validator)
 }
 
-func validateLDAPAuthenticationBackendURL(config *schema.LDAPAuthenticationBackendConfiguration, validator *schema.StructValidator) {
+func setDefaultImplementationLDAPAuthenticationBackendProfileMisc(config *schema.LDAPAuthenticationBackend, implementation *schema.LDAPAuthenticationBackend) {
+	if config.Timeout == 0 {
+		config.Timeout = implementation.Timeout
+	}
+
+	if implementation.TLS == nil {
+		return
+	}
+
+	if config.TLS == nil {
+		config.TLS = implementation.TLS
+	} else if config.TLS.MinimumVersion == "" {
+		config.TLS.MinimumVersion = implementation.TLS.MinimumVersion
+	}
+}
+
+func ldapImplementationShouldSetStr(config, implementation string) bool {
+	return config == "" && implementation != ""
+}
+
+func setDefaultImplementationLDAPAuthenticationBackendProfileAttributes(config *schema.LDAPAuthenticationBackend, implementation *schema.LDAPAuthenticationBackend) {
+	if ldapImplementationShouldSetStr(config.UsersFilter, implementation.UsersFilter) {
+		config.UsersFilter = implementation.UsersFilter
+	}
+
+	if ldapImplementationShouldSetStr(config.UsernameAttribute, implementation.UsernameAttribute) {
+		config.UsernameAttribute = implementation.UsernameAttribute
+	}
+
+	if ldapImplementationShouldSetStr(config.DisplayNameAttribute, implementation.DisplayNameAttribute) {
+		config.DisplayNameAttribute = implementation.DisplayNameAttribute
+	}
+
+	if ldapImplementationShouldSetStr(config.MailAttribute, implementation.MailAttribute) {
+		config.MailAttribute = implementation.MailAttribute
+	}
+
+	if ldapImplementationShouldSetStr(config.GroupsFilter, implementation.GroupsFilter) {
+		config.GroupsFilter = implementation.GroupsFilter
+	}
+
+	if ldapImplementationShouldSetStr(config.GroupNameAttribute, implementation.GroupNameAttribute) {
+		config.GroupNameAttribute = implementation.GroupNameAttribute
+	}
+}
+
+func validateLDAPAuthenticationBackendURL(config *schema.LDAPAuthenticationBackend, validator *schema.StructValidator) {
 	var (
 		parsedURL *url.URL
 		err       error
@@ -191,7 +425,7 @@ func validateLDAPAuthenticationBackendURL(config *schema.LDAPAuthenticationBacke
 	}
 }
 
-func validateLDAPRequiredParameters(config *schema.AuthenticationBackendConfiguration, validator *schema.StructValidator) {
+func validateLDAPRequiredParameters(config *schema.AuthenticationBackend, validator *schema.StructValidator) {
 	if config.LDAP.PermitUnauthenticatedBind {
 		if config.LDAP.Password != "" {
 			validator.Push(fmt.Errorf(errFmtLDAPAuthBackendUnauthenticatedBindWithPassword))
@@ -237,47 +471,3 @@ func validateLDAPRequiredParameters(config *schema.AuthenticationBackendConfigur
 		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendFilterEnclosingParenthesis, "groups_filter", config.LDAP.GroupsFilter, config.LDAP.GroupsFilter))
 	}
 }
-
-func setDefaultImplementationActiveDirectoryLDAPAuthenticationBackend(config *schema.LDAPAuthenticationBackendConfiguration) {
-	if config.UsersFilter == "" {
-		config.UsersFilter = schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.UsersFilter
-	}
-
-	if config.UsernameAttribute == "" {
-		config.UsernameAttribute = schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.UsernameAttribute
-	}
-
-	if config.DisplayNameAttribute == "" {
-		config.DisplayNameAttribute = schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.DisplayNameAttribute
-	}
-
-	if config.MailAttribute == "" {
-		config.MailAttribute = schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.MailAttribute
-	}
-
-	if config.GroupsFilter == "" {
-		config.GroupsFilter = schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.GroupsFilter
-	}
-
-	if config.GroupNameAttribute == "" {
-		config.GroupNameAttribute = schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.GroupNameAttribute
-	}
-}
-
-func setDefaultImplementationCustomLDAPAuthenticationBackend(config *schema.LDAPAuthenticationBackendConfiguration) {
-	if config.UsernameAttribute == "" {
-		config.UsernameAttribute = schema.DefaultLDAPAuthenticationBackendConfiguration.UsernameAttribute
-	}
-
-	if config.GroupNameAttribute == "" {
-		config.GroupNameAttribute = schema.DefaultLDAPAuthenticationBackendConfiguration.GroupNameAttribute
-	}
-
-	if config.MailAttribute == "" {
-		config.MailAttribute = schema.DefaultLDAPAuthenticationBackendConfiguration.MailAttribute
-	}
-
-	if config.DisplayNameAttribute == "" {
-		config.DisplayNameAttribute = schema.DefaultLDAPAuthenticationBackendConfiguration.DisplayNameAttribute
-	}
-}
diff --git a/internal/configuration/validator/authentication_test.go b/internal/configuration/validator/authentication_test.go
index 9df81a38b..328e90590 100644
--- a/internal/configuration/validator/authentication_test.go
+++ b/internal/configuration/validator/authentication_test.go
@@ -14,22 +14,28 @@ import (
 
 func TestShouldRaiseErrorWhenBothBackendsProvided(t *testing.T) {
 	validator := schema.NewStructValidator()
-	backendConfig := schema.AuthenticationBackendConfiguration{}
+	backendConfig := schema.AuthenticationBackend{}
 
-	backendConfig.LDAP = &schema.LDAPAuthenticationBackendConfiguration{}
-	backendConfig.File = &schema.FileAuthenticationBackendConfiguration{
+	backendConfig.LDAP = &schema.LDAPAuthenticationBackend{}
+	backendConfig.File = &schema.FileAuthenticationBackend{
 		Path: "/tmp",
 	}
 
 	ValidateAuthenticationBackend(&backendConfig, validator)
 
-	require.Len(t, validator.Errors(), 1)
+	require.Len(t, validator.Errors(), 7)
 	assert.EqualError(t, validator.Errors()[0], "authentication_backend: please ensure only one of the 'file' or 'ldap' backend is configured")
+	assert.EqualError(t, validator.Errors()[1], "authentication_backend: ldap: option 'url' is required")
+	assert.EqualError(t, validator.Errors()[2], "authentication_backend: ldap: option 'user' is required")
+	assert.EqualError(t, validator.Errors()[3], "authentication_backend: ldap: option 'password' is required")
+	assert.EqualError(t, validator.Errors()[4], "authentication_backend: ldap: option 'base_dn' is required")
+	assert.EqualError(t, validator.Errors()[5], "authentication_backend: ldap: option 'users_filter' is required")
+	assert.EqualError(t, validator.Errors()[6], "authentication_backend: ldap: option 'groups_filter' is required")
 }
 
 func TestShouldRaiseErrorWhenNoBackendProvided(t *testing.T) {
 	validator := schema.NewStructValidator()
-	backendConfig := schema.AuthenticationBackendConfiguration{}
+	backendConfig := schema.AuthenticationBackend{}
 
 	ValidateAuthenticationBackend(&backendConfig, validator)
 
@@ -39,23 +45,18 @@ func TestShouldRaiseErrorWhenNoBackendProvided(t *testing.T) {
 
 type FileBasedAuthenticationBackend struct {
 	suite.Suite
-	config    schema.AuthenticationBackendConfiguration
+	config    schema.AuthenticationBackend
 	validator *schema.StructValidator
 }
 
 func (suite *FileBasedAuthenticationBackend) SetupTest() {
+	password := schema.DefaultPasswordConfig
+
 	suite.validator = schema.NewStructValidator()
-	suite.config = schema.AuthenticationBackendConfiguration{}
-	suite.config.File = &schema.FileAuthenticationBackendConfiguration{Path: "/a/path", Password: &schema.PasswordConfiguration{
-		Algorithm:   schema.DefaultPasswordConfiguration.Algorithm,
-		Iterations:  schema.DefaultPasswordConfiguration.Iterations,
-		Parallelism: schema.DefaultPasswordConfiguration.Parallelism,
-		Memory:      schema.DefaultPasswordConfiguration.Memory,
-		KeyLength:   schema.DefaultPasswordConfiguration.KeyLength,
-		SaltLength:  schema.DefaultPasswordConfiguration.SaltLength,
-	}}
-	suite.config.File.Password.Algorithm = schema.DefaultPasswordConfiguration.Algorithm
+	suite.config = schema.AuthenticationBackend{}
+	suite.config.File = &schema.FileAuthenticationBackend{Path: "/a/path", Password: password}
 }
+
 func (suite *FileBasedAuthenticationBackend) TestShouldValidateCompleteConfiguration() {
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
 
@@ -74,20 +75,8 @@ func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenNoPathProvi
 	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: option 'path' is required")
 }
 
-func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenMemoryNotMoreThanEightTimesParallelism() {
-	suite.config.File.Password.Memory = 8
-	suite.config.File.Password.Parallelism = 2
-
-	ValidateAuthenticationBackend(&suite.config, suite.validator)
-
-	suite.Assert().Len(suite.validator.Warnings(), 0)
-	suite.Require().Len(suite.validator.Errors(), 1)
-
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'memory' must at least be parallelism multiplied by 8 when using algorithm 'argon2id' with parallelism 2 it should be at least 16 but it is configured as '8'")
-}
-
 func (suite *FileBasedAuthenticationBackend) TestShouldSetDefaultConfigurationWhenBlank() {
-	suite.config.File.Password = &schema.PasswordConfiguration{}
+	suite.config.File.Password = schema.Password{}
 
 	suite.Assert().Equal(0, suite.config.File.Password.KeyLength)
 	suite.Assert().Equal(0, suite.config.File.Password.Iterations)
@@ -101,51 +90,384 @@ func (suite *FileBasedAuthenticationBackend) TestShouldSetDefaultConfigurationWh
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.KeyLength, suite.config.File.Password.KeyLength)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Iterations, suite.config.File.Password.Iterations)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.SaltLength, suite.config.File.Password.SaltLength)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Algorithm, suite.config.File.Password.Algorithm)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Memory, suite.config.File.Password.Memory)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Parallelism, suite.config.File.Password.Parallelism)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.KeyLength, suite.config.File.Password.KeyLength)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Iterations, suite.config.File.Password.Iterations)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.SaltLength, suite.config.File.Password.SaltLength)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Algorithm, suite.config.File.Password.Algorithm)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Memory, suite.config.File.Password.Memory)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Parallelism, suite.config.File.Password.Parallelism)
 }
 
-func (suite *FileBasedAuthenticationBackend) TestShouldSetDefaultConfigurationWhenOnlySHA512Set() {
-	suite.config.File.Password = &schema.PasswordConfiguration{}
+func (suite *FileBasedAuthenticationBackend) TestShouldMigrateLegacyConfigurationSHA512() {
+	suite.config.File.Password = schema.Password{}
 	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
-	suite.config.File.Password.Algorithm = "sha512"
+
+	suite.config.File.Password = schema.Password{
+		Algorithm:  digestSHA512,
+		Iterations: 1000000,
+		SaltLength: 8,
+	}
 
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
 
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal(schema.DefaultPasswordSHA512Configuration.KeyLength, suite.config.File.Password.KeyLength)
-	suite.Assert().Equal(schema.DefaultPasswordSHA512Configuration.Iterations, suite.config.File.Password.Iterations)
-	suite.Assert().Equal(schema.DefaultPasswordSHA512Configuration.SaltLength, suite.config.File.Password.SaltLength)
-	suite.Assert().Equal(schema.DefaultPasswordSHA512Configuration.Algorithm, suite.config.File.Password.Algorithm)
-	suite.Assert().Equal(schema.DefaultPasswordSHA512Configuration.Memory, suite.config.File.Password.Memory)
-	suite.Assert().Equal(schema.DefaultPasswordSHA512Configuration.Parallelism, suite.config.File.Password.Parallelism)
+	suite.Assert().Equal(hashSHA2Crypt, suite.config.File.Password.Algorithm)
+	suite.Assert().Equal(digestSHA512, suite.config.File.Password.SHA2Crypt.Variant)
+	suite.Assert().Equal(1000000, suite.config.File.Password.SHA2Crypt.Iterations)
+	suite.Assert().Equal(8, suite.config.File.Password.SHA2Crypt.SaltLength)
 }
-func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenKeyLengthTooLow() {
-	suite.config.File.Password.KeyLength = 1
+
+func (suite *FileBasedAuthenticationBackend) TestShouldMigrateLegacyConfigurationSHA512ButNotOverride() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+
+	suite.config.File.Password = schema.Password{
+		Algorithm:  digestSHA512,
+		Iterations: 1000000,
+		SaltLength: 8,
+		SHA2Crypt: schema.SHA2CryptPassword{
+			Variant:    digestSHA256,
+			Iterations: 50000,
+			SaltLength: 12,
+		},
+	}
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal(hashSHA2Crypt, suite.config.File.Password.Algorithm)
+	suite.Assert().Equal(digestSHA256, suite.config.File.Password.SHA2Crypt.Variant)
+	suite.Assert().Equal(50000, suite.config.File.Password.SHA2Crypt.Iterations)
+	suite.Assert().Equal(12, suite.config.File.Password.SHA2Crypt.SaltLength)
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldMigrateLegacyConfigurationSHA512Alt() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+
+	suite.config.File.Password = schema.Password{
+		Algorithm:  digestSHA512,
+		Iterations: 1000000,
+		SaltLength: 64,
+	}
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal(hashSHA2Crypt, suite.config.File.Password.Algorithm)
+	suite.Assert().Equal(digestSHA512, suite.config.File.Password.SHA2Crypt.Variant)
+	suite.Assert().Equal(1000000, suite.config.File.Password.SHA2Crypt.Iterations)
+	suite.Assert().Equal(16, suite.config.File.Password.SHA2Crypt.SaltLength)
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldMigrateLegacyConfigurationArgon2() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+
+	suite.config.File.Password = schema.Password{
+		Algorithm:   "argon2id",
+		Iterations:  4,
+		Memory:      1024,
+		Parallelism: 4,
+		KeyLength:   64,
+		SaltLength:  64,
+	}
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal("argon2", suite.config.File.Password.Algorithm)
+	suite.Assert().Equal("argon2id", suite.config.File.Password.Argon2.Variant)
+	suite.Assert().Equal(4, suite.config.File.Password.Argon2.Iterations)
+	suite.Assert().Equal(1048576, suite.config.File.Password.Argon2.Memory)
+	suite.Assert().Equal(4, suite.config.File.Password.Argon2.Parallelism)
+	suite.Assert().Equal(64, suite.config.File.Password.Argon2.KeyLength)
+	suite.Assert().Equal(64, suite.config.File.Password.Argon2.SaltLength)
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldMigrateLegacyConfigurationArgon2ButNotOverride() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+
+	suite.config.File.Password = schema.Password{
+		Algorithm:   "argon2id",
+		Iterations:  4,
+		Memory:      1024,
+		Parallelism: 4,
+		KeyLength:   64,
+		SaltLength:  64,
+		Argon2: schema.Argon2Password{
+			Variant:     "argon2d",
+			Iterations:  1,
+			Memory:      2048,
+			Parallelism: 1,
+			KeyLength:   32,
+			SaltLength:  32,
+		},
+	}
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal("argon2", suite.config.File.Password.Algorithm)
+	suite.Assert().Equal("argon2d", suite.config.File.Password.Argon2.Variant)
+	suite.Assert().Equal(1, suite.config.File.Password.Argon2.Iterations)
+	suite.Assert().Equal(2048, suite.config.File.Password.Argon2.Memory)
+	suite.Assert().Equal(1, suite.config.File.Password.Argon2.Parallelism)
+	suite.Assert().Equal(32, suite.config.File.Password.Argon2.KeyLength)
+	suite.Assert().Equal(32, suite.config.File.Password.Argon2.SaltLength)
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldMigrateLegacyConfigurationWhenOnlySHA512Set() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+	suite.config.File.Password.Algorithm = digestSHA512
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal(hashSHA2Crypt, suite.config.File.Password.Algorithm)
+	suite.Assert().Equal(digestSHA512, suite.config.File.Password.SHA2Crypt.Variant)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.SHA2Crypt.Iterations, suite.config.File.Password.SHA2Crypt.Iterations)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.SHA2Crypt.SaltLength, suite.config.File.Password.SHA2Crypt.SaltLength)
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorOnInvalidArgon2Variant() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+	suite.config.File.Password.Algorithm = "argon2"
+	suite.config.File.Password.Argon2.Variant = testInvalid
 
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
 
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Require().Len(suite.validator.Errors(), 1)
 
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'key_length' must be 16 or more when using algorithm 'argon2id' but it is configured as '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: argon2: option 'variant' is configured as 'invalid' but must be one of the following values: 'argon2id', 'id', 'argon2i', 'i', 'argon2d', 'd'")
 }
 
-func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenSaltLengthTooLow() {
-	suite.config.File.Password.SaltLength = -1
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorOnInvalidSHA2CryptVariant() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+	suite.config.File.Password.Algorithm = hashSHA2Crypt
+	suite.config.File.Password.SHA2Crypt.Variant = testInvalid
 
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
 
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Require().Len(suite.validator.Errors(), 1)
 
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'salt_length' must be 2 or more but it is configured a '-1'")
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: sha2crypt: option 'variant' is configured as 'invalid' but must be one of the following values: 'sha256', 'sha512'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorOnInvalidSHA2CryptSaltLength() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+	suite.config.File.Password.Algorithm = hashSHA2Crypt
+	suite.config.File.Password.SHA2Crypt.SaltLength = 40
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: sha2crypt: option 'salt_length' is configured as '40' but must be less than or equal to '16'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorOnInvalidPBKDF2Variant() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+	suite.config.File.Password.Algorithm = "pbkdf2"
+	suite.config.File.Password.PBKDF2.Variant = testInvalid
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: pbkdf2: option 'variant' is configured as 'invalid' but must be one of the following values: 'sha1', 'sha224', 'sha256', 'sha384', 'sha512'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorOnInvalidBCryptVariant() {
+	suite.config.File.Password = schema.Password{}
+	suite.Assert().Equal("", suite.config.File.Password.Algorithm)
+	suite.config.File.Password.Algorithm = "bcrypt"
+	suite.config.File.Password.BCrypt.Variant = testInvalid
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: bcrypt: option 'variant' is configured as 'invalid' but must be one of the following values: 'standard', 'sha256'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenSHA2CryptOptionsTooLow() {
+	suite.config.File.Password.SHA2Crypt.Iterations = -1
+	suite.config.File.Password.SHA2Crypt.SaltLength = -1
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 2)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: sha2crypt: option 'iterations' is configured as '-1' but must be greater than or equal to '1000'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: sha2crypt: option 'salt_length' is configured as '-1' but must be greater than or equal to '1'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenSHA2CryptOptionsTooHigh() {
+	suite.config.File.Password.SHA2Crypt.Iterations = 999999999999
+	suite.config.File.Password.SHA2Crypt.SaltLength = 99
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 2)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: sha2crypt: option 'iterations' is configured as '999999999999' but must be less than or equal to '999999999'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: sha2crypt: option 'salt_length' is configured as '99' but must be less than or equal to '16'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenPBKDF2OptionsTooLow() {
+	suite.config.File.Password.PBKDF2.Iterations = -1
+	suite.config.File.Password.PBKDF2.SaltLength = -1
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 2)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: pbkdf2: option 'iterations' is configured as '-1' but must be greater than or equal to '100000'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: pbkdf2: option 'salt_length' is configured as '-1' but must be greater than or equal to '8'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenPBKDF2OptionsTooHigh() {
+	suite.config.File.Password.PBKDF2.Iterations = 2147483649
+	suite.config.File.Password.PBKDF2.SaltLength = 2147483650
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 2)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: pbkdf2: option 'iterations' is configured as '2147483649' but must be less than or equal to '2147483647'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: pbkdf2: option 'salt_length' is configured as '2147483650' but must be less than or equal to '2147483647'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenBCryptOptionsTooLow() {
+	suite.config.File.Password.BCrypt.Cost = -1
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: bcrypt: option 'cost' is configured as '-1' but must be greater than or equal to '10'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenBCryptOptionsTooHigh() {
+	suite.config.File.Password.BCrypt.Cost = 900
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: bcrypt: option 'cost' is configured as '900' but must be less than or equal to '31'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenSCryptOptionsTooLow() {
+	suite.config.File.Password.SCrypt.Iterations = -1
+	suite.config.File.Password.SCrypt.BlockSize = -21
+	suite.config.File.Password.SCrypt.Parallelism = -11
+	suite.config.File.Password.SCrypt.KeyLength = -77
+	suite.config.File.Password.SCrypt.SaltLength = 7
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 5)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: scrypt: option 'iterations' is configured as '-1' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: scrypt: option 'block_size' is configured as '-21' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[2], "authentication_backend: file: password: scrypt: option 'parallelism' is configured as '-11' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[3], "authentication_backend: file: password: scrypt: option 'key_length' is configured as '-77' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[4], "authentication_backend: file: password: scrypt: option 'salt_length' is configured as '7' but must be greater than or equal to '8'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenSCryptOptionsTooHigh() {
+	suite.config.File.Password.SCrypt.BlockSize = 360287970189639672
+	suite.config.File.Password.SCrypt.KeyLength = 1374389534409
+	suite.config.File.Password.SCrypt.SaltLength = 2147483647
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 3)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: scrypt: option 'block_size' is configured as '360287970189639672' but must be less than or equal to '36028797018963967'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: scrypt: option 'key_length' is configured as '1374389534409' but must be less than or equal to '137438953440'")
+	suite.Assert().EqualError(suite.validator.Errors()[2], "authentication_backend: file: password: scrypt: option 'salt_length' is configured as '2147483647' but must be less than or equal to '1024'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenArgon2OptionsTooLow() {
+	suite.config.File.Password.Argon2.Iterations = -1
+	suite.config.File.Password.Argon2.Memory = -1
+	suite.config.File.Password.Argon2.Parallelism = -1
+	suite.config.File.Password.Argon2.KeyLength = 1
+	suite.config.File.Password.Argon2.SaltLength = -1
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 5)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: argon2: option 'iterations' is configured as '-1' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: argon2: option 'parallelism' is configured as '-1' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[2], "authentication_backend: file: password: argon2: option 'memory' is configured as '-1' but must be greater than or equal to '1'")
+	suite.Assert().EqualError(suite.validator.Errors()[3], "authentication_backend: file: password: argon2: option 'key_length' is configured as '1' but must be greater than or equal to '4'")
+	suite.Assert().EqualError(suite.validator.Errors()[4], "authentication_backend: file: password: argon2: option 'salt_length' is configured as '-1' but must be greater than or equal to '1'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenArgon2OptionsTooHigh() {
+	suite.config.File.Password.Argon2.Iterations = 9999999999
+	suite.config.File.Password.Argon2.Parallelism = 16777216
+	suite.config.File.Password.Argon2.KeyLength = 9999999998
+	suite.config.File.Password.Argon2.SaltLength = 9999999997
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 5)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: argon2: option 'iterations' is configured as '9999999999' but must be less than or equal to '2147483647'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "authentication_backend: file: password: argon2: option 'parallelism' is configured as '16777216' but must be less than or equal to '16777215'")
+	suite.Assert().EqualError(suite.validator.Errors()[3], "authentication_backend: file: password: argon2: option 'key_length' is configured as '9999999998' but must be less than or equal to '2147483647'")
+	suite.Assert().EqualError(suite.validator.Errors()[4], "authentication_backend: file: password: argon2: option 'salt_length' is configured as '9999999997' but must be less than or equal to '2147483647'")
+}
+
+func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenArgon2MemoryTooLow() {
+	suite.config.File.Password.Argon2.Memory = 4
+	suite.config.File.Password.Argon2.Parallelism = 4
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: argon2: option 'memory' is configured as '4' but must be greater than or equal to '32' or '4' (the value of 'parallelism) multiplied by '8'")
 }
 
 func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenBadAlgorithmDefined() {
@@ -156,29 +478,7 @@ func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenBadAlgorith
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Require().Len(suite.validator.Errors(), 1)
 
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'algorithm' must be either 'argon2id' or 'sha512' but it is configured as 'bogus'")
-}
-
-func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenIterationsTooLow() {
-	suite.config.File.Password.Iterations = -1
-
-	ValidateAuthenticationBackend(&suite.config, suite.validator)
-
-	suite.Assert().Len(suite.validator.Warnings(), 0)
-	suite.Require().Len(suite.validator.Errors(), 1)
-
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'iterations' must be 1 or more but it is configured as '-1'")
-}
-
-func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenParallelismTooLow() {
-	suite.config.File.Password.Parallelism = -1
-
-	ValidateAuthenticationBackend(&suite.config, suite.validator)
-
-	suite.Assert().Len(suite.validator.Warnings(), 0)
-	suite.Require().Len(suite.validator.Errors(), 1)
-
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'parallelism' must be 1 or more when using algorithm 'argon2id' but it is configured as '-1'")
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: file: password: option 'algorithm' is configured as 'bogus' but must be one of the following values: 'sha2crypt', 'pbkdf2', 'scrypt', 'bcrypt', 'argon2'")
 }
 
 func (suite *FileBasedAuthenticationBackend) TestShouldSetDefaultValues() {
@@ -193,42 +493,11 @@ func (suite *FileBasedAuthenticationBackend) TestShouldSetDefaultValues() {
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Algorithm, suite.config.File.Password.Algorithm)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Iterations, suite.config.File.Password.Iterations)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.SaltLength, suite.config.File.Password.SaltLength)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Memory, suite.config.File.Password.Memory)
-	suite.Assert().Equal(schema.DefaultPasswordConfiguration.Parallelism, suite.config.File.Password.Parallelism)
-}
-
-func TestFileBasedAuthenticationBackend(t *testing.T) {
-	suite.Run(t, new(FileBasedAuthenticationBackend))
-}
-
-type LDAPAuthenticationBackendSuite struct {
-	suite.Suite
-	config    schema.AuthenticationBackendConfiguration
-	validator *schema.StructValidator
-}
-
-func (suite *LDAPAuthenticationBackendSuite) SetupTest() {
-	suite.validator = schema.NewStructValidator()
-	suite.config = schema.AuthenticationBackendConfiguration{}
-	suite.config.LDAP = &schema.LDAPAuthenticationBackendConfiguration{}
-	suite.config.LDAP.Implementation = schema.LDAPImplementationCustom
-	suite.config.LDAP.URL = testLDAPURL
-	suite.config.LDAP.User = testLDAPUser
-	suite.config.LDAP.Password = testLDAPPassword
-	suite.config.LDAP.BaseDN = testLDAPBaseDN
-	suite.config.LDAP.UsernameAttribute = "uid"
-	suite.config.LDAP.UsersFilter = "({username_attribute}={input})"
-	suite.config.LDAP.GroupsFilter = "(cn={input})"
-}
-
-func (suite *LDAPAuthenticationBackendSuite) TestShouldValidateCompleteConfiguration() {
-	ValidateAuthenticationBackend(&suite.config, suite.validator)
-
-	suite.Assert().Len(suite.validator.Warnings(), 0)
-	suite.Assert().Len(suite.validator.Errors(), 0)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Algorithm, suite.config.File.Password.Algorithm)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Iterations, suite.config.File.Password.Iterations)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.SaltLength, suite.config.File.Password.SaltLength)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Memory, suite.config.File.Password.Memory)
+	suite.Assert().Equal(schema.DefaultPasswordConfig.Parallelism, suite.config.File.Password.Parallelism)
 }
 
 func (suite *FileBasedAuthenticationBackend) TestShouldRaiseErrorWhenResetURLIsInvalid() {
@@ -270,6 +539,37 @@ func (suite *FileBasedAuthenticationBackend) TestShouldConfigureDisableResetPass
 	suite.Assert().False(suite.config.PasswordReset.Disable)
 }
 
+func TestFileBasedAuthenticationBackend(t *testing.T) {
+	suite.Run(t, new(FileBasedAuthenticationBackend))
+}
+
+type LDAPAuthenticationBackendSuite struct {
+	suite.Suite
+	config    schema.AuthenticationBackend
+	validator *schema.StructValidator
+}
+
+func (suite *LDAPAuthenticationBackendSuite) SetupTest() {
+	suite.validator = schema.NewStructValidator()
+	suite.config = schema.AuthenticationBackend{}
+	suite.config.LDAP = &schema.LDAPAuthenticationBackend{}
+	suite.config.LDAP.Implementation = schema.LDAPImplementationCustom
+	suite.config.LDAP.URL = testLDAPURL
+	suite.config.LDAP.User = testLDAPUser
+	suite.config.LDAP.Password = testLDAPPassword
+	suite.config.LDAP.BaseDN = testLDAPBaseDN
+	suite.config.LDAP.UsernameAttribute = "uid"
+	suite.config.LDAP.UsersFilter = "({username_attribute}={input})"
+	suite.config.LDAP.GroupsFilter = "(cn={input})"
+}
+
+func (suite *LDAPAuthenticationBackendSuite) TestShouldValidateCompleteConfiguration() {
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+}
+
 func (suite *LDAPAuthenticationBackendSuite) TestShouldValidateDefaultImplementationAndUsernameAttribute() {
 	suite.config.LDAP.Implementation = ""
 	suite.config.LDAP.UsernameAttribute = ""
@@ -277,7 +577,7 @@ func (suite *LDAPAuthenticationBackendSuite) TestShouldValidateDefaultImplementa
 
 	suite.Assert().Equal(schema.LDAPImplementationCustom, suite.config.LDAP.Implementation)
 
-	suite.Assert().Equal(suite.config.LDAP.UsernameAttribute, schema.DefaultLDAPAuthenticationBackendConfiguration.UsernameAttribute)
+	suite.Assert().Equal(suite.config.LDAP.UsernameAttribute, schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.UsernameAttribute)
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 }
@@ -490,7 +790,7 @@ func (suite *LDAPAuthenticationBackendSuite) TestShouldSetDefaultTLSMinimumVersi
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal(schema.DefaultLDAPAuthenticationBackendConfiguration.TLS.MinimumVersion, suite.config.LDAP.TLS.MinimumVersion)
+	suite.Assert().Equal(schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS.MinimumVersion, suite.config.LDAP.TLS.MinimumVersion)
 }
 
 func (suite *LDAPAuthenticationBackendSuite) TestShouldNotAllowInvalidTLSValue() {
@@ -512,20 +812,20 @@ func TestLdapAuthenticationBackend(t *testing.T) {
 
 type ActiveDirectoryAuthenticationBackendSuite struct {
 	suite.Suite
-	config    schema.AuthenticationBackendConfiguration
+	config    schema.AuthenticationBackend
 	validator *schema.StructValidator
 }
 
 func (suite *ActiveDirectoryAuthenticationBackendSuite) SetupTest() {
 	suite.validator = schema.NewStructValidator()
-	suite.config = schema.AuthenticationBackendConfiguration{}
-	suite.config.LDAP = &schema.LDAPAuthenticationBackendConfiguration{}
+	suite.config = schema.AuthenticationBackend{}
+	suite.config.LDAP = &schema.LDAPAuthenticationBackend{}
 	suite.config.LDAP.Implementation = schema.LDAPImplementationActiveDirectory
 	suite.config.LDAP.URL = testLDAPURL
 	suite.config.LDAP.User = testLDAPUser
 	suite.config.LDAP.Password = testLDAPPassword
 	suite.config.LDAP.BaseDN = testLDAPBaseDN
-	suite.config.LDAP.TLS = schema.DefaultLDAPAuthenticationBackendConfiguration.TLS
+	suite.config.LDAP.TLS = schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS
 }
 
 func (suite *ActiveDirectoryAuthenticationBackendSuite) TestShouldSetActiveDirectoryDefaults() {
@@ -535,25 +835,25 @@ func (suite *ActiveDirectoryAuthenticationBackendSuite) TestShouldSetActiveDirec
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendConfiguration.Timeout,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.Timeout,
 		suite.config.LDAP.Timeout)
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.UsersFilter,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.UsersFilter,
 		suite.config.LDAP.UsersFilter)
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.UsernameAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.UsernameAttribute,
 		suite.config.LDAP.UsernameAttribute)
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.DisplayNameAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.DisplayNameAttribute,
 		suite.config.LDAP.DisplayNameAttribute)
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.MailAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.MailAttribute,
 		suite.config.LDAP.MailAttribute)
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.GroupsFilter,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.GroupsFilter,
 		suite.config.LDAP.GroupsFilter)
 	suite.Assert().Equal(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.GroupNameAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.GroupNameAttribute,
 		suite.config.LDAP.GroupNameAttribute)
 }
 
@@ -569,25 +869,25 @@ func (suite *ActiveDirectoryAuthenticationBackendSuite) TestShouldOnlySetDefault
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
 
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendConfiguration.Timeout,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.Timeout,
 		suite.config.LDAP.Timeout)
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.UsersFilter,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.UsersFilter,
 		suite.config.LDAP.UsersFilter)
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.UsernameAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.UsernameAttribute,
 		suite.config.LDAP.UsernameAttribute)
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.DisplayNameAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.DisplayNameAttribute,
 		suite.config.LDAP.DisplayNameAttribute)
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.MailAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.MailAttribute,
 		suite.config.LDAP.MailAttribute)
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.GroupsFilter,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.GroupsFilter,
 		suite.config.LDAP.GroupsFilter)
 	suite.Assert().NotEqual(
-		schema.DefaultLDAPAuthenticationBackendImplementationActiveDirectoryConfiguration.GroupNameAttribute,
+		schema.DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory.GroupNameAttribute,
 		suite.config.LDAP.GroupNameAttribute)
 }
 
diff --git a/internal/configuration/validator/configuration_test.go b/internal/configuration/validator/configuration_test.go
index 4021c1f33..e212fbf95 100644
--- a/internal/configuration/validator/configuration_test.go
+++ b/internal/configuration/validator/configuration_test.go
@@ -18,7 +18,7 @@ func newDefaultConfig() schema.Configuration {
 	config.Log.Level = "info"
 	config.Log.Format = "text"
 	config.JWTSecret = testJWTSecret
-	config.AuthenticationBackend.File = &schema.FileAuthenticationBackendConfiguration{
+	config.AuthenticationBackend.File = &schema.FileAuthenticationBackend{
 		Path: "/a/path",
 	}
 	config.AccessControl = schema.AccessControlConfiguration{
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index 5865968b4..448e02c23 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -21,10 +21,24 @@ const (
 	policyDeny      = "deny"
 )
 
+const (
+	digestSHA1   = "sha1"
+	digestSHA224 = "sha224"
+	digestSHA256 = "sha256"
+	digestSHA384 = "sha384"
+	digestSHA512 = "sha512"
+)
+
 // Hashing constants.
 const (
-	hashArgon2id = "argon2id"
-	hashSHA512   = "sha512"
+	hashLegacyArgon2id = "argon2id"
+	hashLegacySHA512   = digestSHA512
+
+	hashArgon2    = "argon2"
+	hashSHA2Crypt = "sha2crypt"
+	hashPBKDF2    = "pbkdf2"
+	hashSCrypt    = "scrypt"
+	hashBCrypt    = "bcrypt"
 )
 
 // Scheme constants.
@@ -35,18 +49,6 @@ const (
 	schemeHTTPS = "https"
 )
 
-// Test constants.
-const (
-	testInvalidPolicy = "invalid"
-	testJWTSecret     = "a_secret"
-	testLDAPBaseDN    = "base_dn"
-	testLDAPPassword  = "password"
-	testLDAPURL       = "ldap://ldap"
-	testLDAPUser      = "user"
-	testModeDisabled  = "disable"
-	testEncryptionKey = "a_not_so_secure_encryption_key"
-)
-
 // Notifier Error constants.
 const (
 	errFmtNotifierMultipleConfigured = "notifier: please ensure only one of the 'smtp' or 'filesystem' notifier is configured"
@@ -59,6 +61,10 @@ const (
 	errFmtNotifierStartTlsDisabled                = "Notifier SMTP connection has opportunistic STARTTLS explicitly disabled which means all emails will be sent insecurely over plain text and this setting is only necessary for non-compliant SMTP servers which advertise they support STARTTLS when they actually don't support STARTTLS"
 )
 
+const (
+	errSuffixMustBeOneOf = "is configured as '%s' but must be one of the following values: '%s'"
+)
+
 // Authentication Backend Error constants.
 const (
 	errFmtAuthBackendNotConfigured = "authentication_backend: you must ensure either the 'file' or 'ldap' " +
@@ -71,19 +77,16 @@ const (
 		" configured to '%s' which has the scheme '%s' but the scheme must be either 'http' or 'https'"
 
 	errFmtFileAuthBackendPathNotConfigured  = "authentication_backend: file: option 'path' is required"
-	errFmtFileAuthBackendPasswordSaltLength = "authentication_backend: file: password: option 'salt_length' " +
-		"must be 2 or more but it is configured a '%d'"
 	errFmtFileAuthBackendPasswordUnknownAlg = "authentication_backend: file: password: option 'algorithm' " +
-		"must be either 'argon2id' or 'sha512' but it is configured as '%s'"
-	errFmtFileAuthBackendPasswordInvalidIterations = "authentication_backend: file: password: option " +
-		"'iterations' must be 1 or more but it is configured as '%d'"
-	errFmtFileAuthBackendPasswordArgon2idInvalidKeyLength = "authentication_backend: file: password: option " +
-		"'key_length' must be 16 or more when using algorithm 'argon2id' but it is configured as '%d'"
-	errFmtFileAuthBackendPasswordArgon2idInvalidParallelism = "authentication_backend: file: password: option " +
-		"'parallelism' must be 1 or more when using algorithm 'argon2id' but it is configured as '%d'"
-	errFmtFileAuthBackendPasswordArgon2idInvalidMemory = "authentication_backend: file: password: option 'memory' " +
-		"must at least be parallelism multiplied by 8 when using algorithm 'argon2id' " +
-		"with parallelism %d it should be at least %d but it is configured as '%d'"
+		errSuffixMustBeOneOf
+	errFmtFileAuthBackendPasswordInvalidVariant = "authentication_backend: file: password: %s: " +
+		"option 'variant' " + errSuffixMustBeOneOf
+	errFmtFileAuthBackendPasswordOptionTooLarge = "authentication_backend: file: password: %s: " +
+		"option '%s' is configured as '%d' but must be less than or equal to '%d'"
+	errFmtFileAuthBackendPasswordOptionTooSmall = "authentication_backend: file: password: %s: " +
+		"option '%s' is configured as '%d' but must be greater than or equal to '%d'"
+	errFmtFileAuthBackendPasswordArgon2MemoryTooLow = "authentication_backend: file: password: argon2: " +
+		"option 'memory' is configured as '%d' but must be greater than or equal to '%d' or '%d' (the value of 'parallelism) multiplied by '%d'"
 
 	errFmtLDAPAuthBackendUnauthenticatedBindWithPassword     = "authentication_backend: ldap: option 'permit_unauthenticated_bind' can't be enabled when a password is specified"
 	errFmtLDAPAuthBackendUnauthenticatedBindWithResetEnabled = "authentication_backend: ldap: option 'permit_unauthenticated_bind' can't be enabled when password reset is enabled"
@@ -92,7 +95,7 @@ const (
 	errFmtLDAPAuthBackendTLSMinVersion = "authentication_backend: ldap: tls: option " +
 		"'minimum_tls_version' is invalid: %s: %w"
 	errFmtLDAPAuthBackendImplementation = "authentication_backend: ldap: option 'implementation' " +
-		"is configured as '%s' but must be one of the following values: '%s'"
+		errSuffixMustBeOneOf
 	errFmtLDAPAuthBackendFilterReplacedPlaceholders = "authentication_backend: ldap: option " +
 		"'%s' has an invalid placeholder: '%s' has been removed, please use '%s' instead"
 	errFmtLDAPAuthBackendURLNotParsable = "authentication_backend: ldap: option " +
@@ -288,7 +291,17 @@ const (
 	errFilePOptions = "config key incorrect: authentication_backend.file.password_options should be authentication_backend.file.password"
 )
 
-var validStoragePostgreSQLSSLModes = []string{testModeDisabled, "require", "verify-ca", "verify-full"}
+var validArgon2Variants = []string{"argon2id", "id", "argon2i", "i", "argon2d", "d"}
+
+var validSHA2CryptVariants = []string{digestSHA256, digestSHA512}
+
+var validPBKDF2Variants = []string{digestSHA1, digestSHA224, digestSHA256, digestSHA384, digestSHA512}
+
+var validBCryptVariants = []string{"standard", digestSHA256}
+
+var validHashAlgorithms = []string{hashSHA2Crypt, hashPBKDF2, hashSCrypt, hashBCrypt, hashArgon2}
+
+var validStoragePostgreSQLSSLModes = []string{"disable", "require", "verify-ca", "verify-full"}
 
 var validThemeNames = []string{"light", "dark", "grey", "auto"}
 
diff --git a/internal/configuration/validator/const_test.go b/internal/configuration/validator/const_test.go
new file mode 100644
index 000000000..4fe7d56f0
--- /dev/null
+++ b/internal/configuration/validator/const_test.go
@@ -0,0 +1,12 @@
+package validator
+
+// Test constants.
+const (
+	testInvalid       = "invalid"
+	testJWTSecret     = "a_secret"
+	testLDAPBaseDN    = "base_dn"
+	testLDAPPassword  = "password"
+	testLDAPURL       = "ldap://ldap"
+	testLDAPUser      = "user"
+	testEncryptionKey = "a_not_so_secure_encryption_key"
+)
diff --git a/internal/configuration/validator/identity_providers_test.go b/internal/configuration/validator/identity_providers_test.go
index e087c589b..e8f7d0404 100644
--- a/internal/configuration/validator/identity_providers_test.go
+++ b/internal/configuration/validator/identity_providers_test.go
@@ -88,7 +88,7 @@ func TestShouldRaiseErrorWhenOIDCPKCEEnforceValueInvalid(t *testing.T) {
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
 			IssuerPrivateKey: &rsa.PrivateKey{},
-			EnforcePKCE:      "invalid",
+			EnforcePKCE:      testInvalid,
 		},
 	}
 
diff --git a/internal/configuration/validator/theme_test.go b/internal/configuration/validator/theme_test.go
index 1b29d0e38..abe796611 100644
--- a/internal/configuration/validator/theme_test.go
+++ b/internal/configuration/validator/theme_test.go
@@ -29,7 +29,7 @@ func (suite *Theme) TestShouldValidateCompleteConfiguration() {
 }
 
 func (suite *Theme) TestShouldRaiseErrorWhenInvalidThemeProvided() {
-	suite.config.Theme = "invalid"
+	suite.config.Theme = testInvalid
 
 	ValidateTheme(suite.config, suite.validator)
 
diff --git a/internal/configuration/validator/totp_test.go b/internal/configuration/validator/totp_test.go
index 85cd7471f..956f074c4 100644
--- a/internal/configuration/validator/totp_test.go
+++ b/internal/configuration/validator/totp_test.go
@@ -30,7 +30,7 @@ func TestValidateTOTP(t *testing.T) {
 		{
 			desc: "ShouldNormalizeTOTPAlgorithm",
 			have: schema.TOTPConfiguration{
-				Algorithm:  "sha1",
+				Algorithm:  digestSHA1,
 				Digits:     6,
 				Period:     30,
 				SecretSize: 32,
diff --git a/internal/handlers/handler_verify.go b/internal/handlers/handler_verify.go
index eacd23b43..883852da7 100644
--- a/internal/handlers/handler_verify.go
+++ b/internal/handlers/handler_verify.go
@@ -373,7 +373,7 @@ func verifySessionHasUpToDateProfile(ctx *middlewares.AutheliaCtx, targetURL *ur
 	return nil
 }
 
-func getProfileRefreshSettings(cfg schema.AuthenticationBackendConfiguration) (refresh bool, refreshInterval time.Duration) {
+func getProfileRefreshSettings(cfg schema.AuthenticationBackend) (refresh bool, refreshInterval time.Duration) {
 	if cfg.LDAP != nil {
 		if cfg.RefreshInterval == schema.ProfileRefreshDisabled {
 			refresh = false
@@ -433,7 +433,7 @@ func verifyAuth(ctx *middlewares.AutheliaCtx, targetURL *url.URL, refreshProfile
 }
 
 // VerifyGET returns the handler verifying if a request is allowed to go through.
-func VerifyGET(cfg schema.AuthenticationBackendConfiguration) middlewares.RequestHandler {
+func VerifyGET(cfg schema.AuthenticationBackend) middlewares.RequestHandler {
 	refreshProfile, refreshProfileInterval := getProfileRefreshSettings(cfg)
 
 	return func(ctx *middlewares.AutheliaCtx) {
diff --git a/internal/handlers/handler_verify_test.go b/internal/handlers/handler_verify_test.go
index ae2cc9d25..304339ed6 100644
--- a/internal/handlers/handler_verify_test.go
+++ b/internal/handlers/handler_verify_test.go
@@ -22,9 +22,9 @@ import (
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
-var verifyGetCfg = schema.AuthenticationBackendConfiguration{
+var verifyGetCfg = schema.AuthenticationBackend{
 	RefreshInterval: schema.RefreshIntervalDefault,
-	LDAP:            &schema.LDAPAuthenticationBackendConfiguration{},
+	LDAP:            &schema.LDAPAuthenticationBackend{},
 }
 
 func TestShouldRaiseWhenTargetUrlIsMalformed(t *testing.T) {
diff --git a/internal/notification/smtp_util_test.go b/internal/notification/smtp_util_test.go
index 62c33fd09..39c2d6617 100644
--- a/internal/notification/smtp_util_test.go
+++ b/internal/notification/smtp_util_test.go
@@ -73,16 +73,16 @@ func createMIMEBytes(include8bit, crlf bool, lines, length int) []byte {
 		for j := 0; j < length/100; j++ {
 			switch {
 			case include8bit:
-				buf.Write(utils.RandomBytes(50, utils.AlphaNumericCharacters, false))
+				buf.Write(utils.RandomBytes(50, utils.CharSetAlphaNumeric, false))
 				buf.Write([]byte("£"))
-				buf.Write(utils.RandomBytes(49, utils.AlphaNumericCharacters, false))
+				buf.Write(utils.RandomBytes(49, utils.CharSetAlphabetic, false))
 			default:
-				buf.Write(utils.RandomBytes(100, utils.AlphaNumericCharacters, false))
+				buf.Write(utils.RandomBytes(100, utils.CharSetAlphaNumeric, false))
 			}
 		}
 
 		if n := length % 100; n != 0 {
-			buf.Write(utils.RandomBytes(n, utils.AlphaNumericCharacters, false))
+			buf.Write(utils.RandomBytes(n, utils.CharSetAlphaNumeric, false))
 		}
 
 		switch {
diff --git a/internal/server/template.go b/internal/server/template.go
index fedf2df57..3f1d914f9 100644
--- a/internal/server/template.go
+++ b/internal/server/template.go
@@ -64,7 +64,7 @@ func ServeTemplatedFile(publicDir, file, assetPath, duoSelfEnrollment, rememberM
 		}
 
 		baseURL := scheme + "://" + string(ctx.XForwardedHost()) + base + "/"
-		nonce := utils.RandomString(32, utils.AlphaNumericCharacters, true)
+		nonce := utils.RandomString(32, utils.CharSetAlphaNumeric, true)
 
 		switch extension := filepath.Ext(file); extension {
 		case ".html":
diff --git a/internal/suites/suite_cli_test.go b/internal/suites/suite_cli_test.go
index 0fd51c2cc..0357b89b1 100644
--- a/internal/suites/suite_cli_test.go
+++ b/internal/suites/suite_cli_test.go
@@ -10,7 +10,7 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/suite"
-	"gopkg.in/yaml.v3"
+	yaml "gopkg.in/yaml.v3"
 
 	"github.com/authelia/authelia/v4/internal/model"
 	"github.com/authelia/authelia/v4/internal/storage"
@@ -84,16 +84,180 @@ func (s *CLISuite) TestShouldFailValidateConfig() {
 	s.Assert().Contains(output, "failed to load configuration from yaml file(/config/invalid.yml) source: open /config/invalid.yml: no such file or directory")
 }
 
-func (s *CLISuite) TestShouldHashPasswordArgon2id() {
-	output, err := s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "hash-password", "test", "-m", "32", "-s", "test1234"})
+func (s *CLISuite) TestShouldHashPasswordArgon2idLegacy() {
+	output, err := s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "hash-password", "test", "-m", "32"})
 	s.Assert().NoError(err)
-	s.Assert().Contains(output, "Password hash: $argon2id$v=19$m=32768,t=3,p=4$")
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=32768,t=3,p=4$")
 }
 
-func (s *CLISuite) TestShouldHashPasswordSHA512() {
+func (s *CLISuite) TestShouldHashPasswordSHA512Legacy() {
 	output, err := s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "hash-password", "test", "-z"})
 	s.Assert().NoError(err)
-	s.Assert().Contains(output, "Password hash: $6$rounds=50000")
+	s.Assert().Contains(output, "Digest: $6$rounds=50000")
+}
+
+func (s *CLISuite) TestShouldHashPasswordArgon2() {
+	var (
+		output string
+		err    error
+	)
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-m=32768"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=32768,t=3,p=4$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-m", "32768", "-v=argon2i"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2i$v=19$m=32768,t=3,p=4$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-m=32768", "-v=argon2d"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2d$v=19$m=32768,t=3,p=4$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--random", "-m=32"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Random Password: ")
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=32,t=3,p=4$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-p=1"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=65536,t=3,p=1$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-i=1"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=65536,t=1,p=4$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-s=64"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=65536,t=3,p=4$")
+	s.Assert().GreaterOrEqual(len(output), 169)
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "argon2", "--password=apple123", "-k=128"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $argon2id$v=19$m=65536,t=3,p=4$")
+	s.Assert().GreaterOrEqual(len(output), 233)
+}
+
+func (s *CLISuite) TestShouldHashPasswordSHA2Crypt() {
+	var (
+		output string
+		err    error
+	)
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--password=apple123", "-v=sha256"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $5$rounds=50000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--password=apple123", "-v=sha512"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $6$rounds=50000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--random", "-s=8"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $6$rounds=50000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--password=apple123", "-i=10000"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $6$rounds=10000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--password=apple123", "-s=20"})
+	s.Assert().NotNil(err)
+	s.Assert().Contains(output, "Error: errors occurred validating the password configuration: authentication_backend: file: password: sha2crypt: option 'salt_length' is configured as '20' but must be less than or equal to '16'")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--password=apple123", "-i=20"})
+	s.Assert().NotNil(err)
+	s.Assert().Contains(output, "Error: errors occurred validating the password configuration: authentication_backend: file: password: sha2crypt: option 'iterations' is configured as '20' but must be greater than or equal to '1000'")
+}
+
+func (s *CLISuite) TestShouldHashPasswordSHA2CryptSHA512() {
+	output, err := s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "sha2crypt", "--password=apple123", "-v=sha512"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $6$rounds=50000$")
+}
+
+func (s *CLISuite) TestShouldHashPasswordPBKDF2() {
+	var (
+		output string
+		err    error
+	)
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "pbkdf2", "--password=apple123", "-v=sha1"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $pbkdf2$310000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "pbkdf2", "--random", "-v=sha256", "-i=100000"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Random Password: ")
+	s.Assert().Contains(output, "Digest: $pbkdf2-sha256$100000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "pbkdf2", "--password=apple123", "-v=sha512", "-i=100000"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $pbkdf2-sha512$100000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "pbkdf2", "--password=apple123", "-v=sha224", "-i=100000"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $pbkdf2-sha224$100000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "pbkdf2", "--password=apple123", "-v=sha384", "-i=100000"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $pbkdf2-sha384$100000$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "pbkdf2", "--password=apple123", "-s=32", "-i=100000"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $pbkdf2-sha512$100000$")
+}
+
+func (s *CLISuite) TestShouldHashPasswordBCrypt() {
+	var (
+		output string
+		err    error
+	)
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "bcrypt", "--password=apple123"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $2b$12$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "bcrypt", "--random", "-i=10"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Random Password: ")
+	s.Assert().Contains(output, "Digest: $2b$10$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "bcrypt", "--password=apple123", "-v=sha256"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $bcrypt-sha256$v=2,t=2b,r=12$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "bcrypt", "--random", "-v=sha256", "-i=10"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Random Password: ")
+	s.Assert().Contains(output, "Digest: $bcrypt-sha256$v=2,t=2b,r=10$")
+}
+
+func (s *CLISuite) TestShouldHashPasswordSCrypt() {
+	var (
+		output string
+		err    error
+	)
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "scrypt", "--password=apple123"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $scrypt$ln=16,r=8,p=1$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "scrypt", "--random"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Random Password: ")
+	s.Assert().Contains(output, "Digest: $scrypt$ln=16,r=8,p=1$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "scrypt", "--password=apple123", "-i=1"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $scrypt$ln=1,r=8,p=1$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "scrypt", "--password=apple123", "-i=1", "-p=2"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $scrypt$ln=1,r=8,p=2$")
+
+	output, err = s.Exec("authelia-backend", []string{"authelia", s.testArg, s.coverageArg, "crypto", "hash", "generate", "scrypt", "--password=apple123", "-i=1", "-r=2"})
+	s.Assert().NoError(err)
+	s.Assert().Contains(output, "Digest: $scrypt$ln=1,r=2,p=1$")
 }
 
 func (s *CLISuite) TestShouldGenerateRSACertificateRequest() {
diff --git a/internal/utils/const.go b/internal/utils/const.go
index d72aa5cd7..d55fab0f8 100644
--- a/internal/utils/const.go
+++ b/internal/utils/const.go
@@ -110,9 +110,24 @@ const (
 	HoursInYear  = HoursInDay * 365
 )
 
-var (
-	// AlphaNumericCharacters are literally just valid alphanumeric chars.
-	AlphaNumericCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"
+const (
+	// CharSetAlphabetic are literally just valid alphabetic printable ASCII chars.
+	CharSetAlphabetic = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
+
+	// CharSetNumeric are literally just valid numeric chars.
+	CharSetNumeric = "0123456789"
+
+	// CharSetNumericHex are literally just valid hexadecimal printable ASCII chars.
+	CharSetNumericHex = CharSetNumeric + "ABCDEF"
+
+	// CharSetSymbolic are literally just valid symbolic printable ASCII chars.
+	CharSetSymbolic = "!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~"
+
+	// CharSetAlphaNumeric are literally just valid alphanumeric printable ASCII chars.
+	CharSetAlphaNumeric = CharSetAlphabetic + CharSetNumeric
+
+	// CharSetASCII are literally just valid printable ASCII chars.
+	CharSetASCII = CharSetAlphabetic + CharSetNumeric + CharSetSymbolic
 )
 
 var htmlEscaper = strings.NewReplacer(
diff --git a/internal/utils/hashing_test.go b/internal/utils/hashing_test.go
index 81ed04299..5a86c83be 100644
--- a/internal/utils/hashing_test.go
+++ b/internal/utils/hashing_test.go
@@ -22,7 +22,7 @@ func TestShouldHashString(t *testing.T) {
 	assert.Equal(t, "ae448ac86c4e8e4dec645729708ef41873ae79c6dff84eff73360989487f08e5", anotherSum)
 	assert.NotEqual(t, sum, anotherSum)
 
-	randomInput := RandomString(40, AlphaNumericCharacters, false)
+	randomInput := RandomString(40, CharSetAlphaNumeric, false)
 	randomSum := HashSHA256FromString(randomInput)
 
 	assert.NotEqual(t, randomSum, sum)
@@ -39,7 +39,7 @@ func TestShouldHashPath(t *testing.T) {
 	err = os.WriteFile(filepath.Join(dir, "anotherfile"), []byte("another\n"), 0600)
 	assert.NoError(t, err)
 
-	err = os.WriteFile(filepath.Join(dir, "randomfile"), []byte(RandomString(40, AlphaNumericCharacters, true)+"\n"), 0600)
+	err = os.WriteFile(filepath.Join(dir, "randomfile"), []byte(RandomString(40, CharSetAlphaNumeric, true)+"\n"), 0600)
 	assert.NoError(t, err)
 
 	sum, err := HashSHA256FromPath(filepath.Join(dir, "myfile"))
diff --git a/internal/utils/strings_test.go b/internal/utils/strings_test.go
index 0e2b92651..c086dd0ae 100644
--- a/internal/utils/strings_test.go
+++ b/internal/utils/strings_test.go
@@ -54,11 +54,11 @@ func TestStringJoinDelimitedEscaped(t *testing.T) {
 }
 
 func TestShouldNotGenerateSameRandomString(t *testing.T) {
-	randomStringOne := RandomString(10, AlphaNumericCharacters, false)
-	randomStringTwo := RandomString(10, AlphaNumericCharacters, false)
+	randomStringOne := RandomString(10, CharSetAlphaNumeric, false)
+	randomStringTwo := RandomString(10, CharSetAlphaNumeric, false)
 
-	randomCryptoStringOne := RandomString(10, AlphaNumericCharacters, true)
-	randomCryptoStringTwo := RandomString(10, AlphaNumericCharacters, true)
+	randomCryptoStringOne := RandomString(10, CharSetAlphaNumeric, true)
+	randomCryptoStringTwo := RandomString(10, CharSetAlphaNumeric, true)
 
 	assert.NotEqual(t, randomStringOne, randomStringTwo)
 	assert.NotEqual(t, randomCryptoStringOne, randomCryptoStringTwo)

From 84cb457cb0496cb8d971cafd4b34b3bb9c863a22 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 17 Oct 2022 22:31:23 +1100
Subject: [PATCH 136/263] feat(authentication): file provider hot reload
 (#4188)

This adds hot reloading to the file auth provider.
---
 .../en/configuration/first-factor/file.md     |  7 ++
 .../cli/authelia/authelia_crypto_hash.md      |  2 +-
 .../authelia/authelia_crypto_hash_generate.md |  2 +-
 .../authelia_crypto_hash_generate_argon2.md   |  2 +-
 .../authelia_crypto_hash_generate_bcrypt.md   |  2 +-
 .../authelia_crypto_hash_generate_pbkdf2.md   |  2 +-
 .../authelia_crypto_hash_generate_scrypt.md   |  2 +-
 ...authelia_crypto_hash_generate_sha2crypt.md |  2 +-
 .../authelia/authelia_crypto_hash_validate.md |  2 +-
 .../cli/authelia/authelia_crypto_rand.md      |  2 +-
 docs/data/configkeys.json                     |  2 +-
 go.mod                                        |  2 +-
 go.sum                                        |  6 +-
 internal/authentication/const.go              |  9 +-
 internal/authentication/file_user_provider.go | 51 ++++++++++-
 .../file_user_provider_database.go            |  6 +-
 internal/commands/root.go                     | 85 ++++++++++++++++++-
 .../configuration/schema/authentication.go    |  1 +
 internal/configuration/schema/keys.go         |  1 +
 19 files changed, 165 insertions(+), 23 deletions(-)

diff --git a/docs/content/en/configuration/first-factor/file.md b/docs/content/en/configuration/first-factor/file.md
index d8c474b7b..b2b403c83 100644
--- a/docs/content/en/configuration/first-factor/file.md
+++ b/docs/content/en/configuration/first-factor/file.md
@@ -20,6 +20,7 @@ aliases:
 authentication_backend:
   file:
     path: /config/users.yml
+    watch: false
     password:
       algorithm: argon2
       argon2:
@@ -58,6 +59,12 @@ The path to the file with the user details list. Supported file types are:
 
 * [YAML File](../../reference/guides/passwords.md#yaml-format)
 
+### watch
+
+{{< confkey type="boolean" default="false" required="no" >}}
+
+Enables reloading the database by watching it for changes.
+
 ## Password Options
 
 A [reference guide](../../reference/guides/passwords.md) exists specifically for choosing password hashing values. This
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md
index b03de6d36..7068a1ca9 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash"
 description: "Reference for the authelia crypto hash command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
index b9753f1a3..0ddbe8ab6 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash generate"
 description: "Reference for the authelia crypto hash generate command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
index 3f5b8f17a..7c1423243 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash generate argon2"
 description: "Reference for the authelia crypto hash generate argon2 command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
index f2c0685e6..c09dcfa63 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash generate bcrypt"
 description: "Reference for the authelia crypto hash generate bcrypt command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
index b42daf681..4578b612a 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash generate pbkdf2"
 description: "Reference for the authelia crypto hash generate pbkdf2 command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
index d727d8d5d..945b8f40a 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash generate scrypt"
 description: "Reference for the authelia crypto hash generate scrypt command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
index 2537ea192..e0533e68d 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash generate sha2crypt"
 description: "Reference for the authelia crypto hash generate sha2crypt command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md
index a70bb80d8..839569b71 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_validate.md
@@ -2,7 +2,7 @@
 title: "authelia crypto hash validate"
 description: "Reference for the authelia crypto hash validate command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
index 764bfefd2..74293cdff 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
@@ -2,7 +2,7 @@
 title: "authelia crypto rand"
 description: "Reference for the authelia crypto rand command."
 lead: ""
-date: 2022-08-27T10:46:58+10:00
+date: 2022-10-17T21:51:59+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index 015075211..cfae593a8 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/go.mod b/go.mod
index d21b81f6f..c34bc790a 100644
--- a/go.mod
+++ b/go.mod
@@ -9,6 +9,7 @@ require (
 	github.com/duosecurity/duo_api_golang v0.0.0-20220927171823-f4576e85b96c
 	github.com/fasthttp/router v1.4.12
 	github.com/fasthttp/session/v2 v2.4.13
+	github.com/fsnotify/fsnotify v1.6.0
 	github.com/go-asn1-ber/asn1-ber v1.5.4
 	github.com/go-crypt/crypt v0.1.13
 	github.com/go-ldap/ldap/v3 v3.4.4
@@ -56,7 +57,6 @@ require (
 	github.com/dlclark/regexp2 v1.4.0 // indirect
 	github.com/dustin/go-humanize v1.0.0 // indirect
 	github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 // indirect
-	github.com/fsnotify/fsnotify v1.5.1 // indirect
 	github.com/fxamacker/cbor/v2 v2.4.0 // indirect
 	github.com/go-crypt/x v0.1.3 // indirect
 	github.com/go-redis/redis/v8 v8.11.5 // indirect
diff --git a/go.sum b/go.sum
index bfbd3e379..7fe02452f 100644
--- a/go.sum
+++ b/go.sum
@@ -229,8 +229,8 @@ github.com/franela/goblin v0.0.0-20200105215937-c9ffbefa60db/go.mod h1:7dvUGVsVB
 github.com/franela/goreq v0.0.0-20171204163338-bcd34c9993f8/go.mod h1:ZhphrRTfi2rbfLwlschooIH4+wKKDR4Pdxhh+TRoA20=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
-github.com/fsnotify/fsnotify v1.5.1 h1:mZcQUHVQUQWoPXXtuf9yuEXKudkV2sx1E06UadKWpgI=
-github.com/fsnotify/fsnotify v1.5.1/go.mod h1:T3375wBYaZdLLcVNkcVbzGHY7f1l/uK5T5Ai1i3InKU=
+github.com/fsnotify/fsnotify v1.6.0 h1:n+5WquG0fcWoWp6xPWfHdbskMCQaFnG6PfBrh1Ky4HY=
+github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw=
 github.com/fxamacker/cbor/v2 v2.4.0 h1:ri0ArlOR+5XunOP8CRUowT0pSJOwhW098ZCUyskZD88=
 github.com/fxamacker/cbor/v2 v2.4.0/go.mod h1:TA1xS00nchWmaBnEIxPSE5oHLuJBAVvqrtAnWBwBCVo=
 github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
@@ -1715,12 +1715,12 @@ golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43 h1:OK7RB6t2WQX54srQQYSXMW8dF5C6/8+oA/s5QBmmto4=
 golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
diff --git a/internal/authentication/const.go b/internal/authentication/const.go
index 201f3fff2..48d31c186 100644
--- a/internal/authentication/const.go
+++ b/internal/authentication/const.go
@@ -87,8 +87,13 @@ const (
 	hashBCrypt    = "bcrypt"
 )
 
-// ErrUserNotFound indicates the user wasn't found in the authentication backend.
-var ErrUserNotFound = errors.New("user not found")
+var (
+	// ErrUserNotFound indicates the user wasn't found in the authentication backend.
+	ErrUserNotFound = errors.New("user not found")
+
+	// ErrNoContent is returned when the file is empty.
+	ErrNoContent = errors.New("no file content")
+)
 
 const fileAuthenticationMode = 0600
 
diff --git a/internal/authentication/file_user_provider.go b/internal/authentication/file_user_provider.go
index 6c81139e1..5730470b3 100644
--- a/internal/authentication/file_user_provider.go
+++ b/internal/authentication/file_user_provider.go
@@ -2,8 +2,11 @@ package authentication
 
 import (
 	_ "embed" // Embed users_database.template.yml.
+	"errors"
 	"fmt"
 	"os"
+	"sync"
+	"time"
 
 	"github.com/go-crypt/crypt"
 
@@ -13,18 +16,48 @@ import (
 
 // FileUserProvider is a provider reading details from a file.
 type FileUserProvider struct {
-	config   *schema.FileAuthenticationBackend
-	hash     crypt.Hash
-	database *FileUserDatabase
+	config        *schema.FileAuthenticationBackend
+	hash          crypt.Hash
+	database      *FileUserDatabase
+	mutex         *sync.Mutex
+	timeoutReload time.Time
 }
 
 // NewFileUserProvider creates a new instance of FileUserProvider.
 func NewFileUserProvider(config *schema.FileAuthenticationBackend) (provider *FileUserProvider) {
 	return &FileUserProvider{
-		config: config,
+		config:        config,
+		mutex:         &sync.Mutex{},
+		timeoutReload: time.Now().Add(-1 * time.Second),
 	}
 }
 
+// Reload the database.
+func (p *FileUserProvider) Reload() (reloaded bool, err error) {
+	now := time.Now()
+
+	p.mutex.Lock()
+
+	defer p.mutex.Unlock()
+
+	if now.Before(p.timeoutReload) {
+		return false, nil
+	}
+
+	switch err = p.database.Load(); {
+	case err == nil:
+		p.setTimeoutReload(now)
+	case errors.Is(err, ErrNoContent):
+		return false, nil
+	default:
+		return false, fmt.Errorf("failed to reload: %w", err)
+	}
+
+	p.setTimeoutReload(now)
+
+	return true, nil
+}
+
 // CheckUserPassword checks if provided password matches for the given user.
 func (p *FileUserProvider) CheckUserPassword(username string, password string) (match bool, err error) {
 	var details DatabaseUserDetails
@@ -73,6 +106,12 @@ func (p *FileUserProvider) UpdatePassword(username string, newPassword string) (
 
 	p.database.SetUserDetails(details.Username, &details)
 
+	p.mutex.Lock()
+
+	p.setTimeoutReload(time.Now())
+
+	p.mutex.Unlock()
+
 	if err = p.database.Save(); err != nil {
 		return err
 	}
@@ -101,6 +140,10 @@ func (p *FileUserProvider) StartupCheck() (err error) {
 	return nil
 }
 
+func (p *FileUserProvider) setTimeoutReload(now time.Time) {
+	p.timeoutReload = now.Add(time.Second / 2)
+}
+
 // NewFileCryptoHashFromConfig returns a crypt.Hash given a valid configuration.
 func NewFileCryptoHashFromConfig(config schema.Password) (hash crypt.Hash, err error) {
 	switch config.Algorithm {
diff --git a/internal/authentication/file_user_provider_database.go b/internal/authentication/file_user_provider_database.go
index 6c415ca17..930d63fa1 100644
--- a/internal/authentication/file_user_provider_database.go
+++ b/internal/authentication/file_user_provider_database.go
@@ -7,7 +7,7 @@ import (
 
 	"github.com/asaskevich/govalidator"
 	"github.com/go-crypt/crypt"
-	"gopkg.in/yaml.v3"
+	yaml "gopkg.in/yaml.v3"
 )
 
 // NewFileUserDatabase creates a new FileUserDatabase.
@@ -168,6 +168,10 @@ func (m *DatabaseModel) Read(filePath string) (err error) {
 		return fmt.Errorf("failed to read the '%s' file: %w", filePath, err)
 	}
 
+	if len(content) == 0 {
+		return ErrNoContent
+	}
+
 	if err = yaml.Unmarshal(content, m); err != nil {
 		return fmt.Errorf("could not parse the YAML database: %w", err)
 	}
diff --git a/internal/commands/root.go b/internal/commands/root.go
index 282c1df03..0fe843523 100644
--- a/internal/commands/root.go
+++ b/internal/commands/root.go
@@ -6,14 +6,17 @@ import (
 	"net"
 	"os"
 	"os/signal"
+	"path/filepath"
 	"strings"
 	"syscall"
 
+	"github.com/fsnotify/fsnotify"
 	"github.com/sirupsen/logrus"
 	"github.com/spf13/cobra"
 	"github.com/valyala/fasthttp"
 	"golang.org/x/sync/errgroup"
 
+	"github.com/authelia/authelia/v4/internal/authentication"
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 	"github.com/authelia/authelia/v4/internal/logging"
 	"github.com/authelia/authelia/v4/internal/middlewares"
@@ -83,11 +86,11 @@ func cmdRootRun(_ *cobra.Command, _ []string) {
 
 	doStartupChecks(config, &providers, logger)
 
-	runServers(config, providers, logger)
+	runServices(config, providers, logger)
 }
 
 //nolint:gocyclo // Complexity is required in this function.
-func runServers(config *schema.Configuration, providers middlewares.Providers, log *logrus.Logger) {
+func runServices(config *schema.Configuration, providers middlewares.Providers, log *logrus.Logger) {
 	ctx := context.Background()
 
 	ctx, cancel := context.WithCancel(ctx)
@@ -151,6 +154,15 @@ func runServers(config *schema.Configuration, providers middlewares.Providers, l
 		return nil
 	})
 
+	if config.AuthenticationBackend.File != nil && config.AuthenticationBackend.File.Watch {
+		provider := providers.UserProvider.(*authentication.FileUserProvider)
+		if watcher, err := runServiceFileWatcher(g, log, config.AuthenticationBackend.File.Path, provider); err != nil {
+			log.WithError(err).Errorf("Error opening file watcher")
+		} else {
+			defer watcher.Close()
+		}
+	}
+
 	select {
 	case s := <-quit:
 		switch s {
@@ -186,6 +198,75 @@ func runServers(config *schema.Configuration, providers middlewares.Providers, l
 	}
 }
 
+type ReloadFilter func(path string) (skipped bool)
+
+type ProviderReload interface {
+	Reload() (reloaded bool, err error)
+}
+
+func runServiceFileWatcher(g *errgroup.Group, log *logrus.Logger, path string, reload ProviderReload) (watcher *fsnotify.Watcher, err error) {
+	if watcher, err = fsnotify.NewWatcher(); err != nil {
+		return nil, err
+	}
+
+	failed := make(chan struct{})
+
+	var directory, filename string
+
+	if path != "" {
+		directory, filename = filepath.Dir(path), filepath.Base(path)
+	}
+
+	g.Go(func() error {
+		for {
+			select {
+			case <-failed:
+				return nil
+			case event, ok := <-watcher.Events:
+				if !ok {
+					return nil
+				}
+
+				if filename != filepath.Base(event.Name) {
+					log.WithField("file", event.Name).WithField("op", event.Op).Tracef("File modification detected to irrelevant file")
+					break
+				}
+
+				switch {
+				case event.Op&fsnotify.Write == fsnotify.Write, event.Op&fsnotify.Create == fsnotify.Create:
+					log.WithField("file", event.Name).WithField("op", event.Op).Debug("File modification detected")
+
+					switch reloaded, err := reload.Reload(); {
+					case err != nil:
+						log.WithField("file", event.Name).WithField("op", event.Op).WithError(err).Error("Error occurred reloading file")
+					case reloaded:
+						log.WithField("file", event.Name).Info("Reloaded file successfully")
+					default:
+						log.WithField("file", event.Name).Debug("Reload of file was triggered but it was skipped")
+					}
+				case event.Op&fsnotify.Remove == fsnotify.Remove:
+					log.WithField("file", event.Name).WithField("op", event.Op).Debug("Remove of file was detected")
+				}
+			case err, ok := <-watcher.Errors:
+				if !ok {
+					return nil
+				}
+				log.WithError(err).Errorf("Error while watching files")
+			}
+		}
+	})
+
+	if err := watcher.Add(directory); err != nil {
+		failed <- struct{}{}
+
+		return nil, err
+	}
+
+	log.WithField("directory", directory).WithField("file", filename).Debug("Directory is being watched for changes to the file")
+
+	return watcher, nil
+}
+
 func doStartupChecks(config *schema.Configuration, providers *middlewares.Providers, log *logrus.Logger) {
 	var (
 		failures []string
diff --git a/internal/configuration/schema/authentication.go b/internal/configuration/schema/authentication.go
index 1b286a3db..c4e72200f 100644
--- a/internal/configuration/schema/authentication.go
+++ b/internal/configuration/schema/authentication.go
@@ -24,6 +24,7 @@ type PasswordResetAuthenticationBackend struct {
 // FileAuthenticationBackend represents the configuration related to file-based backend.
 type FileAuthenticationBackend struct {
 	Path     string   `koanf:"path"`
+	Watch    bool     `koanf:"watch"`
 	Password Password `koanf:"password"`
 }
 
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index 2d64f1f7d..ddc9c5fa3 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -50,6 +50,7 @@ var Keys = []string{
 	"authentication_backend.password_reset.custom_url",
 	"authentication_backend.refresh_interval",
 	"authentication_backend.file.path",
+	"authentication_backend.file.watch",
 	"authentication_backend.file.password.algorithm",
 	"authentication_backend.file.password.argon2.variant",
 	"authentication_backend.file.password.argon2.iterations",

From b993c290b024b866b3bfca14e81a1e9bc9baaff6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Oct 2022 06:35:23 +1100
Subject: [PATCH 137/263] build(deps): update golang.org/x/term digest to
 8365914 (#4189)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 4 ++--
 go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/go.mod b/go.mod
index c34bc790a..681f84599 100644
--- a/go.mod
+++ b/go.mod
@@ -38,7 +38,7 @@ require (
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
 	golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
-	golang.org/x/term v0.0.0-20220919170432-7a66f970e087
+	golang.org/x/term v0.0.0-20221017184919-83659145692c
 	golang.org/x/text v0.3.8
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
@@ -108,7 +108,7 @@ require (
 	golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8 // indirect
 	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
 	golang.org/x/net v0.0.0-20220722155237-a158d28d115b // indirect
-	golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43 // indirect
+	golang.org/x/sys v0.1.0 // indirect
 	golang.org/x/tools v0.1.12 // indirect
 	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
 	google.golang.org/grpc v1.42.0 // indirect
diff --git a/go.sum b/go.sum
index 7fe02452f..f755d7090 100644
--- a/go.sum
+++ b/go.sum
@@ -1721,13 +1721,13 @@ golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43 h1:OK7RB6t2WQX54srQQYSXMW8dF5C6/8+oA/s5QBmmto4=
-golang.org/x/sys v0.0.0-20221013171732-95e765b1cc43/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.1.0 h1:kunALQeHf1/185U1i0GOB/fy1IPRDDpuoOOqRReG57U=
+golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.0.0-20220919170432-7a66f970e087 h1:tPwmk4vmvVCMdr98VgL4JH+qZxPL8fqlUOHnyOM8N3w=
-golang.org/x/term v0.0.0-20220919170432-7a66f970e087/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.0.0-20221017184919-83659145692c h1:dveknrit5futqEmXAvd2I1BbZIDhxRijsyWHM86NlcA=
+golang.org/x/term v0.0.0-20221017184919-83659145692c/go.mod h1:VTIZ7TEbF0BS9Sv9lPTvGbtW8i4z6GGbJBCM37uMCzY=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=

From d610874be46f531992cf13f75547bf01336bf5c0 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 18 Oct 2022 09:10:53 +1100
Subject: [PATCH 138/263] feat(authentication): disabled users in yaml file
 (#4193)

Allows setting users as disabled.
---
 docs/content/en/reference/guides/passwords.md          | 4 ++++
 internal/authentication/file_user_provider_database.go | 5 +++++
 2 files changed, 9 insertions(+)

diff --git a/docs/content/en/reference/guides/passwords.md b/docs/content/en/reference/guides/passwords.md
index 1e2fd4963..a9f8218eb 100644
--- a/docs/content/en/reference/guides/passwords.md
+++ b/docs/content/en/reference/guides/passwords.md
@@ -31,21 +31,25 @@ users:
     groups:
       - admins
       - dev
+    disabled: false
   harry:
     displayname: "Harry Potter"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: harry.potter@authelia.com
     groups: []
+    disabled: false
   bob:
     displayname: "Bob Dylan"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: bob.dylan@authelia.com
     groups:
       - dev
+    disabled: false
   james:
     displayname: "James Dean"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: james.dean@authelia.com
+    disabled: false
 ```
 
 ## Passwords
diff --git a/internal/authentication/file_user_provider_database.go b/internal/authentication/file_user_provider_database.go
index 930d63fa1..fba0b128e 100644
--- a/internal/authentication/file_user_provider_database.go
+++ b/internal/authentication/file_user_provider_database.go
@@ -145,6 +145,10 @@ func (m *DatabaseModel) ReadToFileUserDatabase(db *FileUserDatabase) (err error)
 	var udm *DatabaseUserDetails
 
 	for user, details := range m.Users {
+		if details.Disabled {
+			continue
+		}
+
 		if udm, err = details.ToDatabaseUserDetailsModel(user); err != nil {
 			return fmt.Errorf("failed to parse hash for user '%s': %w", user, err)
 		}
@@ -206,6 +210,7 @@ type UserDetailsModel struct {
 	DisplayName    string   `yaml:"displayname" valid:"required"`
 	Email          string   `yaml:"email"`
 	Groups         []string `yaml:"groups"`
+	Disabled       bool     `yaml:"disabled"`
 }
 
 // ToDatabaseUserDetailsModel converts a UserDetailsModel into a *DatabaseUserDetails.

From a0b2e78e5d1f07ea07252382f51b2c13b01b9c22 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 18 Oct 2022 11:57:08 +1100
Subject: [PATCH 139/263] feat(authentication): file case-insensitive and email
 search (#4194)

This allows both case-insensitive and email searching for the file auth provider.

Closes #3383
---
 config.template.yml                           |   4 +
 .../en/configuration/first-factor/file.md     |  27 +++
 docs/data/configkeys.json                     |   2 +-
 internal/authentication/file_user_provider.go |   2 +-
 .../file_user_provider_database.go            | 116 ++++++++-
 .../authentication/file_user_provider_test.go | 226 +++++++++++++++++-
 internal/configuration/config.template.yml    |   4 +
 .../configuration/schema/authentication.go    |   8 +
 internal/configuration/schema/keys.go         |   2 +
 9 files changed, 377 insertions(+), 14 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index fee3739eb..26742f953 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -392,6 +392,10 @@ authentication_backend:
   ##
   # file:
   #   path: /config/users_database.yml
+  #   watch: false
+  #   search:
+  #     email: false
+  #     case_insensitive: false
   #   password:
   #     algorithm: argon2
   #     argon2:
diff --git a/docs/content/en/configuration/first-factor/file.md b/docs/content/en/configuration/first-factor/file.md
index b2b403c83..3ced89c64 100644
--- a/docs/content/en/configuration/first-factor/file.md
+++ b/docs/content/en/configuration/first-factor/file.md
@@ -21,6 +21,9 @@ authentication_backend:
   file:
     path: /config/users.yml
     watch: false
+    search:
+      email: false
+      case_insensitive: false
     password:
       algorithm: argon2
       argon2:
@@ -65,6 +68,30 @@ The path to the file with the user details list. Supported file types are:
 
 Enables reloading the database by watching it for changes.
 
+### search
+
+Username searching functionality options.
+
+*__Important Note:__ This functionality is experimental.*
+
+#### email
+
+{{< confkey type="boolean" default="false" required="no" >}}
+
+Allows users to login using their email address. If enabled two users must not have the same emails and their usernames
+must not be an email.
+
+*__Note:__ Emails are always checked using case-insensitive lookup.*
+
+#### case_insensitive
+
+{{< confkey type="boolean" default="false" required="no" >}}
+
+Enabling this search option allows users to login with their username regardless of case. If enabled users must only
+have lowercase usernames.
+
+*__Note:__ Emails are always checked using case-insensitive lookup.*
+
 ## Password Options
 
 A [reference guide](../../reference/guides/passwords.md) exists specifically for choosing password hashing values. This
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index cfae593a8..76fc3c6a9 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/internal/authentication/file_user_provider.go b/internal/authentication/file_user_provider.go
index 5730470b3..1099b47be 100644
--- a/internal/authentication/file_user_provider.go
+++ b/internal/authentication/file_user_provider.go
@@ -131,7 +131,7 @@ func (p *FileUserProvider) StartupCheck() (err error) {
 		return err
 	}
 
-	p.database = NewFileUserDatabase(p.config.Path)
+	p.database = NewFileUserDatabase(p.config.Path, p.config.Search.Email, p.config.Search.CaseInsensitive)
 
 	if err = p.database.Load(); err != nil {
 		return err
diff --git a/internal/authentication/file_user_provider_database.go b/internal/authentication/file_user_provider_database.go
index fba0b128e..4d710e34b 100644
--- a/internal/authentication/file_user_provider_database.go
+++ b/internal/authentication/file_user_provider_database.go
@@ -3,19 +3,24 @@ package authentication
 import (
 	"fmt"
 	"os"
+	"strings"
 	"sync"
 
 	"github.com/asaskevich/govalidator"
 	"github.com/go-crypt/crypt"
-	yaml "gopkg.in/yaml.v3"
+	"gopkg.in/yaml.v3"
 )
 
 // NewFileUserDatabase creates a new FileUserDatabase.
-func NewFileUserDatabase(filePath string) (database *FileUserDatabase) {
+func NewFileUserDatabase(filePath string, searchEmail, searchCI bool) (database *FileUserDatabase) {
 	return &FileUserDatabase{
-		RWMutex: &sync.RWMutex{},
-		Path:    filePath,
-		Users:   map[string]DatabaseUserDetails{},
+		RWMutex:     &sync.RWMutex{},
+		Path:        filePath,
+		Users:       map[string]DatabaseUserDetails{},
+		Emails:      map[string]string{},
+		Aliases:     map[string]string{},
+		SearchEmail: searchEmail,
+		SearchCI:    searchCI,
 	}
 }
 
@@ -23,8 +28,13 @@ func NewFileUserDatabase(filePath string) (database *FileUserDatabase) {
 type FileUserDatabase struct {
 	*sync.RWMutex
 
-	Path  string
-	Users map[string]DatabaseUserDetails
+	Path    string
+	Users   map[string]DatabaseUserDetails
+	Emails  map[string]string
+	Aliases map[string]string
+
+	SearchEmail bool
+	SearchCI    bool
 }
 
 // Save the database to disk.
@@ -56,6 +66,79 @@ func (m *FileUserDatabase) Load() (err error) {
 		return fmt.Errorf("error decoding the authentication database: %w", err)
 	}
 
+	return m.LoadAliases()
+}
+
+// LoadAliases performs the loading of alias information from the database.
+func (m *FileUserDatabase) LoadAliases() (err error) {
+	if m.SearchEmail || m.SearchCI {
+		for k, user := range m.Users {
+			if m.SearchEmail && user.Email != "" {
+				if err = m.loadAliasEmail(k, user); err != nil {
+					return err
+				}
+			}
+
+			if m.SearchCI {
+				if err = m.loadAlias(k); err != nil {
+					return err
+				}
+			}
+		}
+	}
+
+	return nil
+}
+
+func (m *FileUserDatabase) loadAlias(k string) (err error) {
+	u := strings.ToLower(k)
+
+	if u != k {
+		return fmt.Errorf("error loading authentication database: username '%s' is not lowercase but this is required when case-insensitive search is enabled", k)
+	}
+
+	for username, details := range m.Users {
+		if k == username {
+			continue
+		}
+
+		if strings.EqualFold(u, details.Email) {
+			return fmt.Errorf("error loading authentication database: username '%s' is configured as an email for user with username '%s' which isn't allowed when case-insensitive search is enabled", u, username)
+		}
+	}
+
+	m.Aliases[u] = k
+
+	return nil
+}
+
+func (m *FileUserDatabase) loadAliasEmail(k string, user DatabaseUserDetails) (err error) {
+	e := strings.ToLower(user.Email)
+
+	var duplicates []string
+
+	for username, details := range m.Users {
+		if k == username {
+			continue
+		}
+
+		if strings.EqualFold(e, details.Email) {
+			duplicates = append(duplicates, username)
+		}
+	}
+
+	if len(duplicates) != 0 {
+		duplicates = append(duplicates, k)
+
+		return fmt.Errorf("error loading authentication database: email '%s' is configured for for more than one user (users are '%s') which isn't allowed when email search is enabled", e, strings.Join(duplicates, "', '"))
+	}
+
+	if _, ok := m.Users[e]; ok && k != e {
+		return fmt.Errorf("error loading authentication database: email '%s' is also a username which isn't allowed when email search is enabled", e)
+	}
+
+	m.Emails[e] = k
+
 	return nil
 }
 
@@ -66,6 +149,20 @@ func (m *FileUserDatabase) GetUserDetails(username string) (user DatabaseUserDet
 
 	defer m.RUnlock()
 
+	u := strings.ToLower(username)
+
+	if m.SearchEmail {
+		if key, ok := m.Emails[u]; ok {
+			return m.Users[key], nil
+		}
+	}
+
+	if m.SearchCI {
+		if key, ok := m.Aliases[u]; ok {
+			return m.Users[key], nil
+		}
+	}
+
 	if details, ok := m.Users[username]; ok {
 		return details, nil
 	}
@@ -145,10 +242,6 @@ func (m *DatabaseModel) ReadToFileUserDatabase(db *FileUserDatabase) (err error)
 	var udm *DatabaseUserDetails
 
 	for user, details := range m.Users {
-		if details.Disabled {
-			continue
-		}
-
 		if udm, err = details.ToDatabaseUserDetailsModel(user); err != nil {
 			return fmt.Errorf("failed to parse hash for user '%s': %w", user, err)
 		}
@@ -224,6 +317,7 @@ func (m UserDetailsModel) ToDatabaseUserDetailsModel(username string) (model *Da
 	return &DatabaseUserDetails{
 		Username:    username,
 		Digest:      d,
+		Disabled:    m.Disabled,
 		DisplayName: m.DisplayName,
 		Email:       m.Email,
 		Groups:      m.Groups,
diff --git a/internal/authentication/file_user_provider_test.go b/internal/authentication/file_user_provider_test.go
index 4461d7f78..4b6039f69 100644
--- a/internal/authentication/file_user_provider_test.go
+++ b/internal/authentication/file_user_provider_test.go
@@ -3,6 +3,7 @@ package authentication
 import (
 	"log"
 	"os"
+	"regexp"
 	"runtime"
 	"strings"
 	"testing"
@@ -304,6 +305,137 @@ func TestShouldSupportHashPasswordWithoutCRYPT(t *testing.T) {
 	})
 }
 
+func TestShouldNotAllowLoginOfDisabledUsers(t *testing.T) {
+	WithDatabase(UserDatabaseContent, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+
+		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
+		ok, err := provider.CheckUserPassword("dis", "password")
+
+		assert.False(t, ok)
+		assert.EqualError(t, err, "user not found")
+	})
+}
+
+func TestShouldErrorOnInvalidCaseSensitiveFile(t *testing.T) {
+	WithDatabase(UserDatabaseContentInvalidSearchCaseInsenstive, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.Email = false
+		config.Search.CaseInsensitive = true
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error loading authentication database: username 'JOHN' is not lowercase but this is required when case-insensitive search is enabled")
+	})
+}
+
+func TestShouldErrorOnDuplicateEmail(t *testing.T) {
+	WithDatabase(UserDatabaseContentInvalidSearchEmail, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.Email = true
+		config.Search.CaseInsensitive = false
+
+		provider := NewFileUserProvider(&config)
+
+		err := provider.StartupCheck()
+		assert.Regexp(t, regexp.MustCompile(`^error loading authentication database: email 'john.doe@authelia.com' is configured for for more than one user \(users are '(harry|john)', '(harry|john)'\) which isn't allowed when email search is enabled$`), err.Error())
+	})
+}
+
+func TestShouldNotErrorOnEmailAsUsername(t *testing.T) {
+	WithDatabase(UserDatabaseContentSearchEmailAsUsername, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.Email = true
+		config.Search.CaseInsensitive = false
+
+		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+	})
+}
+
+func TestShouldErrorOnEmailAsUsernameWithDuplicateEmail(t *testing.T) {
+	WithDatabase(UserDatabaseContentInvalidSearchEmailAsUsername, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.Email = true
+		config.Search.CaseInsensitive = false
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error loading authentication database: email 'john.doe@authelia.com' is also a username which isn't allowed when email search is enabled")
+	})
+}
+
+func TestShouldErrorOnEmailAsUsernameWithDuplicateEmailCase(t *testing.T) {
+	WithDatabase(UserDatabaseContentInvalidSearchEmailAsUsernameCase, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.Email = false
+		config.Search.CaseInsensitive = true
+
+		provider := NewFileUserProvider(&config)
+
+		assert.EqualError(t, provider.StartupCheck(), "error loading authentication database: username 'john.doe@authelia.com' is configured as an email for user with username 'john' which isn't allowed when case-insensitive search is enabled")
+	})
+}
+
+func TestShouldAllowLookupByEmail(t *testing.T) {
+	WithDatabase(UserDatabaseContent, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.Email = true
+
+		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
+		ok, err := provider.CheckUserPassword("john", "password")
+
+		assert.NoError(t, err)
+		assert.True(t, ok)
+
+		ok, err = provider.CheckUserPassword("john.doe@authelia.com", "password")
+
+		assert.NoError(t, err)
+		assert.True(t, ok)
+
+		ok, err = provider.CheckUserPassword("JOHN.doe@authelia.com", "password")
+
+		assert.NoError(t, err)
+		assert.True(t, ok)
+	})
+}
+
+func TestShouldAllowLookupCI(t *testing.T) {
+	WithDatabase(UserDatabaseContent, func(path string) {
+		config := DefaultFileAuthenticationBackendConfiguration
+		config.Path = path
+		config.Search.CaseInsensitive = true
+
+		provider := NewFileUserProvider(&config)
+
+		assert.NoError(t, provider.StartupCheck())
+
+		ok, err := provider.CheckUserPassword("john", "password")
+
+		assert.NoError(t, err)
+		assert.True(t, ok)
+
+		ok, err = provider.CheckUserPassword("John", "password")
+
+		assert.NoError(t, err)
+		assert.True(t, ok)
+	})
+}
+
 var (
 	DefaultFileAuthenticationBackendConfiguration = schema.FileAuthenticationBackend{
 		Path:     "",
@@ -343,7 +475,99 @@ users:
   enumeration:
     displayname: "Enumeration"
     password: "$argon2id$v=19$m=131072,p=8$BpLnfgDsc2WD8F2q$O126GHPeZ5fwj7OLSs7PndXsTbje76R+QW9/EGfhkJg"
-    email: james.dean@authelia.com
+    email: enumeration@authelia.com
+
+
+  dis:
+    displayname: "Enumeration"
+    password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
+    disabled: true
+    email: disabled@authelia.com
+`)
+
+var UserDatabaseContentInvalidSearchCaseInsenstive = []byte(`
+users:
+  john:
+    displayname: "John Doe"
+    password: "{CRYPT}$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
+    email: john.doe@authelia.com
+    groups:
+      - admins
+      - dev
+
+  JOHN:
+    displayname: "Harry Potter"
+    password: "{CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"
+    email: harry.potter@authelia.com
+    groups: []
+`)
+
+var UserDatabaseContentInvalidSearchEmail = []byte(`
+users:
+  john:
+    displayname: "John Doe"
+    password: "{CRYPT}$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
+    email: john.doe@authelia.com
+    groups:
+      - admins
+      - dev
+
+  harry:
+    displayname: "Harry Potter"
+    password: "{CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"
+    email: john.doe@authelia.com
+    groups: []
+`)
+
+var UserDatabaseContentSearchEmailAsUsername = []byte(`
+users:
+  john.doe@authelia.com:
+    displayname: "John Doe"
+    password: "{CRYPT}$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
+    email: john.doe@authelia.com
+    groups:
+      - admins
+      - dev
+
+  harry:
+    displayname: "Harry Potter"
+    password: "{CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"
+    email: harry.potter@authelia.com
+    groups: []
+`)
+
+var UserDatabaseContentInvalidSearchEmailAsUsername = []byte(`
+users:
+  john.doe@authelia.com:
+    displayname: "John Doe"
+    password: "{CRYPT}$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
+    email: john@authelia.com
+    groups:
+      - admins
+      - dev
+
+  harry:
+    displayname: "Harry Potter"
+    password: "{CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"
+    email: john.doe@authelia.com
+    groups: []
+`)
+
+var UserDatabaseContentInvalidSearchEmailAsUsernameCase = []byte(`
+users:
+  john.doe@authelia.com:
+    displayname: "John Doe"
+    password: "{CRYPT}$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
+    email: JOHN@authelia.com
+    groups:
+      - admins
+      - dev
+
+  john:
+    displayname: "John Potter"
+    password: "{CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/"
+    email: john.doe@authelia.com
+    groups: []
 `)
 
 var MalformedUserDatabaseContent = []byte(`
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index fee3739eb..26742f953 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -392,6 +392,10 @@ authentication_backend:
   ##
   # file:
   #   path: /config/users_database.yml
+  #   watch: false
+  #   search:
+  #     email: false
+  #     case_insensitive: false
   #   password:
   #     algorithm: argon2
   #     argon2:
diff --git a/internal/configuration/schema/authentication.go b/internal/configuration/schema/authentication.go
index c4e72200f..35466e2e6 100644
--- a/internal/configuration/schema/authentication.go
+++ b/internal/configuration/schema/authentication.go
@@ -26,6 +26,14 @@ type FileAuthenticationBackend struct {
 	Path     string   `koanf:"path"`
 	Watch    bool     `koanf:"watch"`
 	Password Password `koanf:"password"`
+
+	Search FileSearchAuthenticationBackend `koanf:"search"`
+}
+
+// FileSearchAuthenticationBackend represents the configuration related to file-based backend searching.
+type FileSearchAuthenticationBackend struct {
+	Email           bool `koanf:"email"`
+	CaseInsensitive bool `koanf:"case_insensitive"`
 }
 
 // Password represents the configuration related to password hashing.
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index ddc9c5fa3..ddb262c40 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -76,6 +76,8 @@ var Keys = []string{
 	"authentication_backend.file.password.parallelism",
 	"authentication_backend.file.password.key_length",
 	"authentication_backend.file.password.salt_length",
+	"authentication_backend.file.search.email",
+	"authentication_backend.file.search.case_insensitive",
 	"authentication_backend.ldap.implementation",
 	"authentication_backend.ldap.url",
 	"authentication_backend.ldap.timeout",

From ce28ab8e872377e991e8876f39c135f9307bb75d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Oct 2022 12:46:17 +1100
Subject: [PATCH 140/263] build(deps): update module golang.org/x/text to
 v0.4.0 (#4192)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 681f84599..411411e88 100644
--- a/go.mod
+++ b/go.mod
@@ -39,7 +39,7 @@ require (
 	github.com/valyala/fasthttp v1.40.0
 	golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
 	golang.org/x/term v0.0.0-20221017184919-83659145692c
-	golang.org/x/text v0.3.8
+	golang.org/x/text v0.4.0
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
 )
diff --git a/go.sum b/go.sum
index f755d7090..911d66f7e 100644
--- a/go.sum
+++ b/go.sum
@@ -1738,8 +1738,8 @@ golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/text v0.3.8 h1:nAL+RVCQ9uMn3vJZbV+MRnydTJFPf8qqY42YiA6MrqY=
-golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
+golang.org/x/text v0.4.0 h1:BrVqGRd7+k1DiOgtnFvAkoQEWQvBc25ouMJM6429SFg=
+golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=

From e6504316bdf44d5f4de041d2b169571dffd2686d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Oct 2022 13:23:59 +1100
Subject: [PATCH 141/263] build(deps): update typescript-eslint monorepo to
 v5.40.1 (#4190)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 107 ++++++++++++++++++++++++---------------------
 2 files changed, 58 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index bd3bdefa6..14d2fbb59 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.40.0",
-    "@typescript-eslint/parser": "5.40.0",
+    "@typescript-eslint/eslint-plugin": "5.40.1",
+    "@typescript-eslint/parser": "5.40.1",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.11",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 2ee220679..d9f6fcb1e 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.40.0
-  '@typescript-eslint/parser': 5.40.0
+  '@typescript-eslint/eslint-plugin': 5.40.1
+  '@typescript-eslint/parser': 5.40.1
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   broadcast-channel: 4.18.0
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
-  '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+  '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
+  '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
   '@vitejs/plugin-react': 2.1.0_vite@3.1.8
   esbuild: 0.15.11
   esbuild-jest: 0.5.0_esbuild@0.15.11
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_4ubwuetphstteqvh3rzlgov3gq
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
-  eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
+  eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
   eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
   eslint-plugin-react: 7.31.10_eslint@8.25.0
@@ -3585,6 +3585,10 @@ packages:
   /@types/scheduler/0.16.2:
     resolution: {integrity: sha512-hppQEBDmlwhFAXKJX2KnWLYu5yMfi91yazPb2l+lbJiwW+wdo1gNeRA+3RgNSO39WYX2euey41KEwnqesU2Jew==}
 
+  /@types/semver/7.3.12:
+    resolution: {integrity: sha512-WwA1MW0++RfXmCr12xeYOOC5baSC9mSb0ZqCquFzKhcoF4TvHu5MKOuXsncgZcpVFhB1pXd5hZmM0ryAoCp12A==}
+    dev: true
+
   /@types/stack-utils/2.0.1:
     resolution: {integrity: sha512-Hl219/BT5fLAaz6NDkSuhzasy49dwQS/DSdu4MdggFB8zcXv7vflBI3xp7FEmkmdDkBUI2bPUNeMttp2knYdxw==}
     dev: true
@@ -3619,8 +3623,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.40.0_25sstg4uu2sk4pm7xcyzuov7xq:
-    resolution: {integrity: sha512-FIBZgS3DVJgqPwJzvZTuH4HNsZhHMa9SjxTKAZTlMsPw/UzpEjcf9f4dfgDJEHjK+HboUJo123Eshl6niwEm/Q==}
+  /@typescript-eslint/eslint-plugin/5.40.1_ukgdydjtebaxmxfqp5v5ulh64y:
+    resolution: {integrity: sha512-FsWboKkWdytGiXT5O1/R9j37YgcjO8MKHSUmWnIEjVaz0krHkplPnYi7mwdb+5+cs0toFNQb0HIrN7zONdIEWg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3630,10 +3634,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
-      '@typescript-eslint/scope-manager': 5.40.0
-      '@typescript-eslint/type-utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
-      '@typescript-eslint/utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/scope-manager': 5.40.1
+      '@typescript-eslint/type-utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 4.3.4
       eslint: 8.25.0
       ignore: 5.2.0
@@ -3658,8 +3662,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q:
-    resolution: {integrity: sha512-Ah5gqyX2ySkiuYeOIDg7ap51/b63QgWZA7w6AHtFrag7aH0lRQPbLzUjk0c9o5/KZ6JRkTTDKShL4AUrQa6/hw==}
+  /@typescript-eslint/parser/5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+    resolution: {integrity: sha512-IK6x55va5w4YvXd4b3VrXQPldV9vQTxi5ov+g4pMANsXPTXOcfjx08CRR1Dfrcc51syPtXHF5bgLlMHYFrvQtg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3668,9 +3672,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.40.0
-      '@typescript-eslint/types': 5.40.0
-      '@typescript-eslint/typescript-estree': 5.40.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.40.1
+      '@typescript-eslint/types': 5.40.1
+      '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.25.0
       typescript: 4.8.4
@@ -3686,16 +3690,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.40.0:
-    resolution: {integrity: sha512-d3nPmjUeZtEWRvyReMI4I1MwPGC63E8pDoHy0BnrYjnJgilBD3hv7XOiETKLY/zTwI7kCnBDf2vWTRUVpYw0Uw==}
+  /@typescript-eslint/scope-manager/5.40.1:
+    resolution: {integrity: sha512-jkn4xsJiUQucI16OLCXrLRXDZ3afKhOIqXs4R3O+M00hdQLKR58WuyXPZZjhKLFCEP2g+TXdBRtLQ33UfAdRUg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.40.0
-      '@typescript-eslint/visitor-keys': 5.40.0
+      '@typescript-eslint/types': 5.40.1
+      '@typescript-eslint/visitor-keys': 5.40.1
     dev: true
 
-  /@typescript-eslint/type-utils/5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q:
-    resolution: {integrity: sha512-nfuSdKEZY2TpnPz5covjJqav+g5qeBqwSHKBvz7Vm1SAfy93SwKk/JeSTymruDGItTwNijSsno5LhOHRS1pcfw==}
+  /@typescript-eslint/type-utils/5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+    resolution: {integrity: sha512-DLAs+AHQOe6n5LRraXiv27IYPhleF0ldEmx6yBqBgBLaNRKTkffhV1RPsjoJBhVup2zHxfaRtan8/YRBgYhU9Q==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3704,8 +3708,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.40.0_typescript@4.8.4
-      '@typescript-eslint/utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
+      '@typescript-eslint/utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 4.3.4
       eslint: 8.25.0
       tsutils: 3.21.0_typescript@4.8.4
@@ -3719,8 +3723,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.40.0:
-    resolution: {integrity: sha512-V1KdQRTXsYpf1Y1fXCeZ+uhjW48Niiw0VGt4V8yzuaDTU8Z1Xl7yQDyQNqyAFcVhpYXIVCEuxSIWTsLDpHgTbw==}
+  /@typescript-eslint/types/5.40.1:
+    resolution: {integrity: sha512-Icg9kiuVJSwdzSQvtdGspOlWNjVDnF3qVIKXdJ103o36yRprdl3Ge5cABQx+csx960nuMF21v8qvO31v9t3OHw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3745,8 +3749,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.40.0_typescript@4.8.4:
-    resolution: {integrity: sha512-b0GYlDj8TLTOqwX7EGbw2gL5EXS2CPEWhF9nGJiGmEcmlpNBjyHsTwbqpyIEPVpl6br4UcBOYlcI2FJVtJkYhg==}
+  /@typescript-eslint/typescript-estree/5.40.1_typescript@4.8.4:
+    resolution: {integrity: sha512-5QTP/nW5+60jBcEPfXy/EZL01qrl9GZtbgDZtDPlfW5zj/zjNrdI2B5zMUHmOsfvOr2cWqwVdWjobCiHcedmQA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3754,8 +3758,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.40.0
-      '@typescript-eslint/visitor-keys': 5.40.0
+      '@typescript-eslint/types': 5.40.1
+      '@typescript-eslint/visitor-keys': 5.40.1
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3784,16 +3788,17 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q:
-    resolution: {integrity: sha512-MO0y3T5BQ5+tkkuYZJBjePewsY+cQnfkYeRqS6tPh28niiIwPnQ1t59CSRcs1ZwJJNOdWw7rv9pF8aP58IMihA==}
+  /@typescript-eslint/utils/5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+    resolution: {integrity: sha512-a2TAVScoX9fjryNrW6BZRnreDUszxqm9eQ9Esv8n5nXApMW0zeANUYlwh/DED04SC/ifuBvXgZpIK5xeJHQ3aw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
-      '@typescript-eslint/scope-manager': 5.40.0
-      '@typescript-eslint/types': 5.40.0
-      '@typescript-eslint/typescript-estree': 5.40.0_typescript@4.8.4
+      '@types/semver': 7.3.12
+      '@typescript-eslint/scope-manager': 5.40.1
+      '@typescript-eslint/types': 5.40.1
+      '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
       eslint: 8.25.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.25.0
@@ -3811,11 +3816,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.40.0:
-    resolution: {integrity: sha512-ijJ+6yig+x9XplEpG2K6FUdJeQGGj/15U3S56W9IqXKJqleuD7zJ2AX/miLezwxpd7ZxDAqO87zWufKg+RPZyQ==}
+  /@typescript-eslint/visitor-keys/5.40.1:
+    resolution: {integrity: sha512-A2DGmeZ+FMja0geX5rww+DpvILpwo1OsiQs0M+joPWJYsiEFBLsH0y1oFymPNul6Z5okSmHpP4ivkc2N0Cgfkw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.40.0
+      '@typescript-eslint/types': 5.40.1
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5301,14 +5306,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_vj4r73z62tfyv4m5ogwqh4y7je
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
-      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
+      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.25.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
-      eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
-      eslint-plugin-jest: 25.7.0_nc3c3bdiyy2hxtl32wv7esmvmq
+      eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
+      eslint-plugin-jest: 25.7.0_jclyiyhknb4v7brhmoaml5jk5q
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
       eslint-plugin-react: 7.31.10_eslint@8.25.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
@@ -5346,7 +5351,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.25.0
-      eslint-plugin-import: 2.26.0_gidjymaeg63pis2633rh62obay
+      eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5356,7 +5361,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_owmdenaxfv5vuzuk4jnrvv2zs4:
+  /eslint-module-utils/2.7.3_6rnc4xtmo5gwf7dzqvzvazx7ja:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5374,7 +5379,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
@@ -5401,7 +5406,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_gidjymaeg63pis2633rh62obay:
+  /eslint-plugin-import/2.26.0_kveaa6wnjes3jwdpngialwsaea:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5411,14 +5416,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.25.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_owmdenaxfv5vuzuk4jnrvv2zs4
+      eslint-module-utils: 2.7.3_6rnc4xtmo5gwf7dzqvzvazx7ja
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5432,7 +5437,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_nc3c3bdiyy2hxtl32wv7esmvmq:
+  /eslint-plugin-jest/25.7.0_jclyiyhknb4v7brhmoaml5jk5q:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5445,7 +5450,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.40.0_25sstg4uu2sk4pm7xcyzuov7xq
+      '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
       jest: 29.2.0_@types+node@18.11.0
@@ -5531,7 +5536,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.40.0_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
     transitivePeerDependencies:
       - supports-color

From 36d72bfb51dd5ece817fa81ef0bc004f200dd031 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Oct 2022 13:48:28 +1100
Subject: [PATCH 142/263] build(deps): update module golang.org/x/sync to
 v0.1.0 (#4191)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 411411e88..7a5ced379 100644
--- a/go.mod
+++ b/go.mod
@@ -37,7 +37,7 @@ require (
 	github.com/stretchr/testify v1.8.0
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
-	golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
+	golang.org/x/sync v0.1.0
 	golang.org/x/term v0.0.0-20221017184919-83659145692c
 	golang.org/x/text v0.4.0
 	gopkg.in/square/go-jose.v2 v2.6.0
diff --git a/go.sum b/go.sum
index 911d66f7e..dd2c36d80 100644
--- a/go.sum
+++ b/go.sum
@@ -1622,8 +1622,8 @@ golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0 h1:cu5kTvlzcw1Q5S9f5ip1/cpiB4nXvw1XYzFPGgzLUOY=
-golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.1.0 h1:wsuoTGHzEhffawBOhz5CYhcrV4IdKZbEyZjBMuTp12o=
+golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sys v0.0.0-20180816055513-1c9583448a9c/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=

From bcdbedee1113f1b16f9df95ecab036c34cea7811 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Oct 2022 14:13:56 +1100
Subject: [PATCH 143/263] build(deps): update module github.com/go-rod/rod to
 v0.112.0 (#4185)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 7a5ced379..c361d8488 100644
--- a/go.mod
+++ b/go.mod
@@ -13,7 +13,7 @@ require (
 	github.com/go-asn1-ber/asn1-ber v1.5.4
 	github.com/go-crypt/crypt v0.1.13
 	github.com/go-ldap/ldap/v3 v3.4.4
-	github.com/go-rod/rod v0.111.0
+	github.com/go-rod/rod v0.112.0
 	github.com/go-sql-driver/mysql v1.6.0
 	github.com/go-webauthn/webauthn v0.4.0
 	github.com/golang-jwt/jwt/v4 v4.4.2
diff --git a/go.sum b/go.sum
index dd2c36d80..209d3ec91 100644
--- a/go.sum
+++ b/go.sum
@@ -315,8 +315,8 @@ github.com/go-openapi/validate v0.19.3/go.mod h1:90Vh6jjkTn+OT1Eefm0ZixWNFjhtOH7
 github.com/go-openapi/validate v0.19.10/go.mod h1:RKEZTUWDkxKQxN2jDT7ZnZi2bhZlbNMAuKvKB+IaGx8=
 github.com/go-redis/redis/v8 v8.11.5 h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI=
 github.com/go-redis/redis/v8 v8.11.5/go.mod h1:gREzHqY1hg6oD9ngVRbLStwAWKhA0FEgq8Jd4h5lpwo=
-github.com/go-rod/rod v0.111.0 h1:aMNNdz10GYPYec9z1WsFqwAdRYVsuufVTOrah7whG3I=
-github.com/go-rod/rod v0.111.0/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
+github.com/go-rod/rod v0.112.0 h1:U9Yc+quw4hxZ6GrdbWFBeylvaYElEKM9ijFW2LYkGlA=
+github.com/go-rod/rod v0.112.0/go.mod h1:GZDtmEs6RpF6kBRYpGCZXxXlKNneKVPiKOjaMbmVVjE=
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.4.1/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-sql-driver/mysql v1.5.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LBy8hT2VhHyBg=

From a4edf2132038500d1346ff59dbb72ddf567e16f6 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 18 Oct 2022 19:14:34 +1100
Subject: [PATCH 144/263] fix(authorization): subject wildcard domain rule not
 matching (#4187)

This fixes an issue where the subject wildcard domain rules (those containing {user} and {group}) are not considered matches even though they may be once a user authenticates.

Fixes #4186
---
 .../authorization/access_control_domain.go    | 24 ++++++++++++-------
 internal/authorization/access_control_rule.go |  2 +-
 internal/authorization/authorizer_test.go     | 10 ++++----
 internal/authorization/util.go                | 12 ++++++----
 4 files changed, 30 insertions(+), 18 deletions(-)

diff --git a/internal/authorization/access_control_domain.go b/internal/authorization/access_control_domain.go
index d19bdf3dd..463e3293d 100644
--- a/internal/authorization/access_control_domain.go
+++ b/internal/authorization/access_control_domain.go
@@ -9,7 +9,7 @@ import (
 )
 
 // NewAccessControlDomain creates a new SubjectObjectMatcher that matches the domain as a basic string.
-func NewAccessControlDomain(domain string) AccessControlDomain {
+func NewAccessControlDomain(domain string) (subjcets bool, rule AccessControlDomain) {
 	m := &AccessControlDomainMatcher{}
 	domain = strings.ToLower(domain)
 
@@ -19,15 +19,15 @@ func NewAccessControlDomain(domain string) AccessControlDomain {
 		m.Name = domain[1:]
 	case strings.HasPrefix(domain, "{user}"):
 		m.UserWildcard = true
-		m.Name = domain[7:]
+		m.Name = domain[6:]
 	case strings.HasPrefix(domain, "{group}"):
 		m.GroupWildcard = true
-		m.Name = domain[8:]
+		m.Name = domain[7:]
 	default:
 		m.Name = domain
 	}
 
-	return AccessControlDomain{m}
+	return m.UserWildcard || m.GroupWildcard, AccessControlDomain{m}
 }
 
 // NewAccessControlDomainRegex creates a new SubjectObjectMatcher that matches the domain either in a basic way or
@@ -65,11 +65,19 @@ func (m AccessControlDomainMatcher) IsMatch(domain string, subject Subject) (mat
 	case m.Wildcard:
 		return strings.HasSuffix(domain, m.Name)
 	case m.UserWildcard:
-		return domain == fmt.Sprintf("%s.%s", subject.Username, m.Name)
-	case m.GroupWildcard:
-		prefix, suffix := domainToPrefixSuffix(domain)
+		if subject.IsAnonymous() && strings.HasSuffix(domain, m.Name) {
+			return true
+		}
 
-		return suffix == m.Name && utils.IsStringInSliceFold(prefix, subject.Groups)
+		return domain == fmt.Sprintf("%s%s", subject.Username, m.Name)
+	case m.GroupWildcard:
+		if subject.IsAnonymous() && strings.HasSuffix(domain, m.Name) {
+			return true
+		}
+
+		i := strings.Index(domain, ".")
+
+		return domain[i:] == m.Name && utils.IsStringInSliceFold(domain[:i], subject.Groups)
 	default:
 		return strings.EqualFold(domain, m.Name)
 	}
diff --git a/internal/authorization/access_control_rule.go b/internal/authorization/access_control_rule.go
index 7b2989e8a..f95189025 100644
--- a/internal/authorization/access_control_rule.go
+++ b/internal/authorization/access_control_rule.go
@@ -22,7 +22,6 @@ func NewAccessControlRules(config schema.AccessControlConfiguration) (rules []*A
 func NewAccessControlRule(pos int, rule schema.ACLRule, networksMap map[string][]*net.IPNet, networksCacheMap map[string]*net.IPNet) *AccessControlRule {
 	r := &AccessControlRule{
 		Position: pos,
-		Domains:  schemaDomainsToACL(rule.Domains),
 		Methods:  schemaMethodsToACL(rule.Methods),
 		Networks: schemaNetworksToACL(rule.Networks, networksMap, networksCacheMap),
 		Subjects: schemaSubjectsToACL(rule.Subjects),
@@ -33,6 +32,7 @@ func NewAccessControlRule(pos int, rule schema.ACLRule, networksMap map[string][
 		r.HasSubjects = true
 	}
 
+	ruleAddDomain(rule.Domains, r)
 	ruleAddDomainRegex(rule.DomainsRegex, r)
 	ruleAddResources(rule.Resources, r)
 
diff --git a/internal/authorization/authorizer_test.go b/internal/authorization/authorizer_test.go
index ff303f9d5..c1047a637 100644
--- a/internal/authorization/authorizer_test.go
+++ b/internal/authorization/authorizer_test.go
@@ -151,17 +151,17 @@ func (s *AuthorizerSuite) TestShouldCheckDynamicDomainRules() {
 		WithDefaultPolicy(deny).
 		WithRule(schema.ACLRule{
 			Domains: []string{"{user}.example.com"},
-			Policy:  bypass,
+			Policy:  oneFactor,
 		}).
 		WithRule(schema.ACLRule{
 			Domains: []string{"{group}.example.com"},
-			Policy:  bypass,
+			Policy:  oneFactor,
 		}).
 		Build()
 
-	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://john.example.com/", "GET", Bypass)
-	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://dev.example.com/", "GET", Bypass)
-	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://admins.example.com/", "GET", Bypass)
+	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://john.example.com/", "GET", OneFactor)
+	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://dev.example.com/", "GET", OneFactor)
+	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://admins.example.com/", "GET", OneFactor)
 	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://othergroup.example.com/", "GET", Denied)
 }
 
diff --git a/internal/authorization/util.go b/internal/authorization/util.go
index cfcd1a5f2..50be55e48 100644
--- a/internal/authorization/util.go
+++ b/internal/authorization/util.go
@@ -70,12 +70,16 @@ func schemaSubjectToACLSubject(subjectRule string) (subject SubjectMatcher) {
 	return nil
 }
 
-func schemaDomainsToACL(domainRules []string) (domains []AccessControlDomain) {
+func ruleAddDomain(domainRules []string, rule *AccessControlRule) {
 	for _, domainRule := range domainRules {
-		domains = append(domains, NewAccessControlDomain(domainRule))
-	}
+		subjects, r := NewAccessControlDomain(domainRule)
 
-	return domains
+		rule.Domains = append(rule.Domains, r)
+
+		if !rule.HasSubjects && subjects {
+			rule.HasSubjects = true
+		}
+	}
 }
 
 func ruleAddDomainRegex(exps []regexp.Regexp, rule *AccessControlRule) {

From a894e272cbaf234a24a1a2fe5543c27bbe253df1 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 18 Oct 2022 21:22:13 +1100
Subject: [PATCH 145/263] docs: add synology dsm docs (#4167)

---
 .../openid-connect/synology-dsm/client.png    | Bin 0 -> 113596 bytes
 .../openid-connect/synology-dsm/index.md      |  91 ++++++++++++++++++
 2 files changed, 91 insertions(+)
 create mode 100644 docs/content/en/integration/openid-connect/synology-dsm/client.png
 create mode 100644 docs/content/en/integration/openid-connect/synology-dsm/index.md

diff --git a/docs/content/en/integration/openid-connect/synology-dsm/client.png b/docs/content/en/integration/openid-connect/synology-dsm/client.png
new file mode 100644
index 0000000000000000000000000000000000000000..9442ebfd26f74e5f32f009fb22492d269ac67011
GIT binary patch
literal 113596
zcmdqJXIN9)7Qd?-mEHvD5CJLDoAja-(T%{yLXjpQO$bFgp;+iuMJXa6h@jFzLJyMA
ztAda~fEXemgb->d32;}~dd~UZPxs6HaPN8^!b)3Z&N=2B<Nb}1#DC0;nHl&PPMkQw
zeEpi?%@ZeRYEGQ^%Zcs`@JiMLH8}9^WWY^h{S%eL0!zS?Q|?zxubenhlg>zSIt@Ih
z_q%2jaN-0Dg8Fx|$M?hi6DN+|UpKsRJJeyNjrQp|BV^^lVSE5AV<c>oBVthFsbs?2
zvxYD3v$5Sa985ZU%HrfXj;kqjPo8{`JnzON`66Ig`RAJ&ShFRuzI1Yx_i{Y_aHP{@
zT}v6TwUi<4%RcQF=>J^9BCtru=sW-X@Akp(<PZa7N09F5r*ub_KAmt38}MLgg!TKo
z;qcZJqxA7};NkWKyQ=2kOXlU&_o**hJl6=6WUn(0l;HaFH7P!i2}Hc|OrqGm*xw(!
z9T@RYBGLNa!^W_k6AE+w&s%&y6VLrQn5TNg?lW1j|GpXezi&QE`0oe*-`O9camCJK
zqd~)`j`HM-af`O{zi-_2dZl>Z_$8RGX}FHCW5iL5wxkt%u3U^kJj*%$-U}U!W#t>o
zJ-;t6q5p<1^DBqN=tVhck$EZSbna8&=6}o$^L1tdr&>aY^tMo+x@yRd4;l&?$*&Gr
zlw*XDR))Iu{C?aEKB(kDGOFk0|8BXLr#-<><1S8DD{^xBsI>jHL@<_dxjf)K)hgDF
zVN>;)64<tW4qb1YztWV13KSm7*V3b?fUjn&M!Km|C<B8E0i@~b`%4?%!idD-GVcDk
z(8tCpLi}f#qBN&5?w1>@kfPZ2()>Ec-DO)*_)}Iru6-sRf&A#bZSO<a(fZ=oI^w%R
z;yd%W#|Ck6<6aX}`vy5Gzx%GJ{4zQ;TVbzEVK;{xu594Q?8^iaoG7>V_5W(+3BC$+
zCUWiIyC=3O%YoILHByWz(P?tyRStL_?J}NjFDEj=8nyPd&~HF+Cq7ec_Uu$3O!jkX
z;f(2w0h&j1_Mvg(_Ao8{pp7;r<Z3ECWM{QL5(Tu4;3Kiv{6m6?ydP`%=Cf1|#B3Wx
zzv__2;J^)Ruo-M`P^YREi?<DCQtNEbl67QXO)erWcUS1Y<5G*OoFOvjs`}O+^hE7m
z|9~tuZ7e((DntzFz$vlG-Ul5|jl-WO55)U&|2rZR^pa8^Um9BX+7(W^Dd1NH+cV=V
ztuhkUlJcHzyqK8v?s~~kwqSnbdi~mlmv4NQGY@GY;h$=!r{KD+ev3N42uUmRmB&wM
z4YDLp*#@<a$4Ki>#JHg43OzZ~D>Q@ZFbTbj4gy>(0_uK-Crht~Xqe%+#Xw7ut(Rf>
z8<8IDMnU9C9T~kyAzlFoK9VKR*4E~NS@hgwmOc_qWSm)zlGIlEwNwoz2cv;L5|0(H
z(25PV509zTS!HD8mao}f4R2r+@_ife(kR69w^5IuG{WAcYg?bp!el>+oKMAydti7k
zsd}TKh`Cz9g<(ezG+R{+_dAxN5Sh@s^B-^9)x9c9=;BB|Z`cV<ds07E5pvhbqVYf|
zx__d+Wht1WaR?p4tY==}NfwUc4QWnZFKr2SXB31IQM@D~#<yoJBWB1J8Z$3#HECq+
z_zw?>fcC``^gI0&O8TOzI&rz~>O%aF+akK8lJPyL_M=Csu`_j$^uz}ne}N)3FRJ*A
zD=uu4zRr^%h$luyBC2`m6=-Pet1_gut{;v#S=Tdh>%zRh>~Bkr)>oQ>*Y_TNu-DC3
zm~1Vlvr$3*ssW+3FIRi?J>;m6Z{08PtX*^r6CKQH_zG=$bP4FF+mh_b)?MT<Bu%7u
z+orS37cM~`MRs%%VhEcWa&;1>>^{OsbB3Az;N4e();&M#&!Hc;(Iszr5&b;2dfokZ
zyjGm6VJ@6~fi^H4Y!>^iV<g76gmTY6p(SiHlZQCuHwNCZj#`5Ux6TiLb^pSF#Tpkd
zIYyJ8c0mY)=c+=PIN09suN9*n4oGo=y*Hj!;94iKc{|n#l`Dz>jMAs)@&!z|)yUeK
zi+P+p>`)crva2%jd)8csT(Nj7eZ%E`Cuq1)5!WrDPuj-%YsjP&?1p{6H2|+}xEfbz
zVcvAhe`?DHnqK<+0DUM0lFCdVgnD`KA_RA~YZZ$_)tyLh!c@CI+h?IoJ9WwMGU#D)
zRcXuup*hA)@hf3>m6mMtrn^Eb-YXZ%%po4_xxOH4eP93cbvtv-;tv0{WmV6y$x)ue
zRi5PJ5a_K2Em_l1eRWZ{+|I2k&uPupgH>`S5dzs}Mb@`|J0;DbO+eL*k&Zkl&qXF$
zIO<q^_HrT9?t9lZM#l}cOg1no3-cM*3*2$!F81HHh)Kp*e(rv|xZJy=+nWZtMD${k
zXNI8TEOa?y2_brvmoq&(xQ0?I2cS0xP*#S5A`=~mM0ZZ?Qa-8%6zPlxY|6mWLn-m*
zJ4q?_f)tku<Y&`t%DkF*43V&X&0~rrZX1mo3d!c)9+TuEE>EiET$5T&|L{iH_i?1Y
z`%j3AK|@RU-5ob*9jGq!y{*U^d~}8fYntU=kk_bgzA{mP1|};P-J*ZQMp(D`J(T4+
z!h1feo8is+Vk~b!nCCUD@BX`Jt}k}fbDMBK=2r!?_@+nbp@UE~I48X$sc{pPx-FId
zTm~`c^)%=zN;YsgI3$$#G#%0V4P;oO-rHFOG1M}=()4ir0Xp61OSuGFd|y^09Vo4U
z#{uGX-}>|YoFSH#zqn2gesOh=?1+<$BGQ594!t2OiSBh_;d|Ry)f!ItJ_!P1ux+?d
z$4V}~5ebSEnSNxfCX`kA#h9Z;??788X(cU_b%Q+KfU!Zk!b9|K4CRZ89Fjq$VrthF
zIWE)xJCk&-znF-SJC!A4>x59W|Dwx%dZmRJ%|lv6yRYjw7!~O!qAYoZ<E=LKB~S4;
zEZ?7r=50^v_5N1qwHr9fz2ZrZJeWyeXzHv>ln7dFJq^_zYBU!|!4gaBa!tS9|LdDv
zZxy!iFg^Ftg~0YjVQDt#H@=RP-U?jQ3^7cBlgme8<kw@GzEftQ&gn*-;URPE?|SZr
zgMI(jZr52Q3a)<sDlyHTrF)p!3e)pxC5Zm<S&CGy;dPJ(kR5_r<h;v0`atRK!o>`Y
zFuS7`k$<q-HFO$=LP7&1d*6{jZkVk0*PU+)Uc=hxc-|OcLSmQK{-(ULw~TBZqo}Gz
zlUiImf0y{2B74v2SpK>m*AlEmL1bTysC|4(r}nOQmnVC&M6f|gviuUFCfwN`u&cQ;
zRnoYTOb-G-wb5-WTg@Vjp6kv<tc742B3b%4emh!{M$?`>$Xh&7ds~c%S{LW_-VL>)
z%=H?R%u01<(3)%5!w({f)-i(EOs&=ACzp8TlOVYxzZygD7nCQMhB@c(c-~zY(@MBy
zPR>Xy$o(2<zEXRxY^7KyHC{+4JE1RhT4-l`I7+|tvtfC(v-=h;DAy{-ze){Qa<i4A
zuUNMQ+grB=hFLd97!4x(t1I80FTdL+?%lW4Ec1JoZRh^Xeo}Gy$rhSe66ap@$TfHl
zm{MoL)1nT?IXUX&+cG1Z<H2Rf@;Vi%7th4x{}DFyo=a@)YMxwpx_gTIHML<#S-gG4
zCUVa70q?B6r<*gnI&l5PW-J(w_hm{h&g{kJI^>6{=62c~HHzl#=AFT6>{`)IO5(xG
zpLq+h%!1y3Nr^uVKOlr4V3B0++&bs^2mG`vptGdb-|lNCvEx!KqxJ4mRt{FfO)Tnw
zU|0@Q6e+jKO&IrWFL<3-!;>!4?270%g;o^NO)}sT+nRa~7GzyT#9$l)s!zCI(q2nO
zku2VfZu4~HaMeUT=6ROV+j%Rw`oikhEJs$vtN{CJV|%(_#-ps4=0DUw>sGToM&n=(
z?d&zhi9fmn-e_t0b8rml=p%)8Vq=pz*aw1R<Z%&wwDt+)ZWV_pa3lSKM1Gj!bVScV
zVN_l4diUNp()#8fFA`&N*JS9mmb}&(u9L}JHq8<5!ODe@U)5pv3&OB>HapK|jimTY
z*2?miwg&ZgY;e}dsjv!Yd*t5~512!jHEcB^C!Y3P$JsyLGxM&KG+T#HculDS&S7(f
zyVfF(Txs3ZFYaFJ+uz;D{JKG{CNz@sWrQ@;h_j5CdeA!;K4qtp%yHT?Yc(YP$rF8B
zB8S!t;4pgl8Ib+#lUWMgF~)V6L_y`%48NdvnTZ~&qcd*C!5%Y>i-l1O9b)pKZhdNx
zU9gJXCR*EzjxtfOfImK!OIHxP32gR>0^odfK99Sc*Kq!ubm#RgW2GE|1V?+dZx?L8
zTT47RCn9*U(%!fjn9zC5SKbQCXNS~{yfcq+fA=VGV}3xVMtO0N`GA(C=1Yhbw_A6?
zez5#KRE<l#{UcgXlr}@(A$FK{f9k$PI!l!JV7@YDjxDS8OXE6+L6z|toBaH=y~)~3
zo?&YQ#4MjDCWN5;gFc{UQ^z)Y<KQ+&{eg4-8D`!GE_NN8ogrR&`D-@6xW@?N(f1n3
z9Z}fX>;hV{j*t-VR-pE3OtsF!x&F=WKe0}fouAV4vG{@;4C#8?cA;*+%CM7J4vb^&
zLr`_^5CV4Jb0@zI`!ro5MtG$CY#bBd7e|D9ST}~|fJM`Kq*?p#bmm_hUCe;^<TiNI
z;~5!D|Iu{yKWyr`jPjZOJh_oEoct#^IOD;_{pN-Y`QUqjOEwpmyp2$U7&;&*>B#NL
zjHj|2T364sfH#`h*F7>*D)W&o-#U}7InWPiJftF|s;9@`wb@A4QhQ<++WA>I85}Y9
zyri_ij5Z>2mGpwNdHKzjYJ74BbW8V-qhZ`vDr=oJA=K0^Efsy&-23%(^5cI3YqA|2
zxr)<`B}e{P-r;m{(3xgL9=P(#d8_DR<QQ|4I<0+}g_z-=xG_PG_H51X!wO3=|9^4c
zh8?1Q`1slXEs*|z{ZVKDrATDd{<%BD(`QaH9(@iNfmM4EqfY<t7R$gNyfVvATG8S;
z^jvyv>NGhu#PEM?=Tv2E+7!zt8<i<zhcvW^$4}!q|Bp?|8`W}jSv~ZZf{XJdt(xBh
zBOz%B>j*r3@;{rt82#jA;$Fe;j{uQ-UzCKUh~<BRedGV`zrXVTxBZ);_Pt7iEQ=J&
z-`wNFrw;J@4Sni;iZs2dePBp+Y7!^{PRg!_awZo51R-Jsl}j1OgOFmGZA0R=a~tA=
za)UeH|87$KJ4|Q;Y-XMly0Q)HclC0~wu_C|b%1dgzKY);p;^)MQz(~2on5GqWD0P}
zu4}z~<=?IF@AxLgd;GFCEf-g&S}@)vpAUWx)LuTmj@eHMkL+8+T{x>wPs}ySAG-0o
zIJ1J}&bIs+6Vaqc1Q(L|=U5g2ZBD2+Mv$v=ifzGI(ImZ|=OTZD%yWQ{+zuN(w_UrP
zJ4AkPF5p2fwYv@Ph=ExNdVZ2J4s{m?9c_4kfYSr-u_kW<xelDzV%}eVg=7ywOwY$U
z;U?@!TK2+_`HHvyZvTuwLF@Y{e?yt?%)u+P>ii>YZO*ex$9&iboo@*qgI3=gKZBRc
zs7$$|#{jfpkrWQf27Mksk8eQjTKn04DyO2F+hMJTE=m&JVJBV%*jV)*+s3(b4au#~
zqwio<@i&=V!OGV=8H7J+I~-NmwO^94Zdy-Z_}5+L#6Ahyj;nB*O)6f;AYYvWCW{2A
zbY!$NV^M;Ay|68NnFA;FfRZ9$(F&<)zJ;onz!?)BcHs34SKxQ}3BKcr$0uy>0vC_-
z|1y&SuAXiF2{QWkv?GR7ePQT*8a~h=A4BW7Sd2W!ZA@pOv9<_RN<>YEOYAgI8?iI-
z3n4{H+Ig&Ji(`a4f}D6EQbs&bBXsSpEPXtSSONO{npR%cg;il&24N|Q!y8#y3ETT!
zM`lRno)@fA8-Y53GUQ`hqX<n8Ka)_MlgMY`xlhX?Fqm{L-D;|MOxsfNuAQ!#;b9D$
z1Xr|=beY7lZ5EaLkqz=uF6ZqPmfB4iM*~i__>V2D^%ajG5_WXyd{aZ^Bi4sPoJMBb
zxPpnZ;G!v<oDEdFRXN;y*R@-Q99b@6O=sc1wqGm~>byflgMwG51W6#2Z+r3pZBVLj
zt|qv7++e_}ycYA_;<%k8{%X+s1UQn6um((|{Pg<e0zcm>WB3f~Hsem`*G+5>{1Fh~
z%ER(s$iC!wZay0L)Ng&%wa^Bg3-4RB=Q@lcy~kqAH1zDotHZK&+#LpQ9r@v8b>JzJ
z0d;$!;N2GN5gC~Q=6{nwp%*rjIh@YSN_c;`zV8P_yZXuezVz~Kq|5_3vu7onNWv;D
zBKjaJ1JS$FGfAYOWkKDfHe%6de}2P!RBxURIp&t!2lnAI3$-`Vd*fJ2qjt;G9c*#H
zr+5=Dq?$!bB$*`{|3sO<KCc!XpuZF(d>FFpcQ(tvQrBlNoj_(Mt<G>aV>aK?qs(Sj
z89*roY~85^JXg~XBnNZbCG9LrEp~gF#t}cON>H%1)ofP8#YH3?)$70%FLp$83z8e`
z-v!{NG=9Fx0;tg&9ty8Cm>us~z2%O^KmN&Up6`n}v$Gv_fwHMLOb-Mm;Pymw0rLTz
z$n7>={N5T4`_r1$!tpVYrb|$(&7OL1bJqUoD<Z0+JKs96gC><sGzCI@nKF*-3xkeq
zB@~5m?V7A{FsE7Dj}0mgh@rWN8|*lb$R3C<xF_c+n%3@wten9Xz24TJxhjhootFmZ
z)rDYS3iD(T0(mQnE?3QWX!YqLO*#RQuH)H07G{$6eDC=abyz!F5oLW5s$x`592q_R
zKn|9#E);zT?{eD6a*RKnoQWa^>L!^i!e(jU7-t<7(mQiP1H?H!*xOtyl8HKd-WD1q
zZaiI|Nwd_P_!0gylyD+lo}GV5`QEcI4UB-IW?e}FayClMF0|{Cg&njv$)vT`BvX!+
zU(Kf$Q|-00TJ1c(EUDB0j7$Xp_Ax8F4bcOjfftr25;(tn2`Y59aL)@>6X3opp7ecF
zzFqwDa;R6f2E@mjckC|g;VS|wo{<p|7pk4>E#(l}d#)xwAH;9qKMOZ<+OWdJU3ZKS
zbQ{U@#Xk-e`r&6+Y3q0o=dHm~+`uSo#&nqSDlWlPuWqTGQO$=5W1h#QySI|8u)VnC
zG*&VMg?$*lHV4MkD3{we%ywg*mSThY(;5$Y8jp-Q#N*}L_vFeQ9eKh@kusF+auYZ$
z$h=y;X%-D&uPKFu5f`1#8f4d&V7e%EiRteHg=HP(M@E7YQP+sZXYQ)aB4>p>@$Av3
z?sBe0INWWyqK+SxMvRQPqey*@QTz|=W+b(Bw#KW&hnm0c)RgM?*sjtcRXhcSmh}{J
zN$Gk=&UmkJU%uhiV#~%43-#D$E&_sMq?OHxSXu6r5L#(d<@v#(!J?7!x|<qi6j}i8
zJC>P%VAV6N+j`y5e(`hbdS-e2sf{q_nN7uzjv_z2z0Ob_BzRj>@u(j0iurY{7U&m$
z>@q_#VqJ$d^vRNHr0XD_V+7`bzcz5(eh!W=p%N2gq2!qzgE7@SgY7cDxH0)kUb!-e
zy~j7~g2KW(b8oGYMu@p%luKy&(@IufSH7)sxxw!z2U))^l%UJgGzmqou@pWlG|wU4
z+1}_NXM}^iuk}uUAg#e#Fx00!{u9!Z^K}FMY`8AP1K@}r{<nLm=JJZ8;nLR|zNry<
zTOf*e=*q`J>^F&m^vA9~p}N{!S?OK#<r<sbj!3zlB+xAp)j5%1l&xs_c||y>=kgmk
zGrxYl2PH4)I$>>WD~Ah|j=&5zU-;ez3;HngHcTBicXxuo^SnRQa(BN4WI%}XF7rHt
z1Md7Dhl2fGt&(%6{nN?e?mAq=bh7$)Aim-YMH=}>M0#+gwp!*j=X9t?P6#9;RMQ??
zAp`P9I2Z#KWUB**KStg8<+mxQdVS!l)oj8U_pG(_%}?=Z4YN+O_ebALs|*m(!7==r
zfy_tY8)4X0S`ajF)CCQ!3umIc{~q8l(fL7c-(N`Zb1N^9tGuH(J&ikD`yL=4o7OPR
zE7wTj^FoC~zVjsaWJdtV`0H9hsUuIE_EFM73CoE%rLUr~n(w1FN!Z!={n!?vP<6YR
z##iH)O6~l@cs89xfHeZ+8}`;gQ+Xn2vFCsa<tOT%mY33t>>g1F<tydOUCcelUPV_o
zIPHMU8iQV4I)~X~hM(Jh9Y0V77J6VeCIj0{{;R#}Lx=$|@~(eZF@?wUIZncSyac3u
zaMwDowrZ`TMKJ^A7w2NFFe*=p&HS1%ugYFjegQ=(^~Fffk>W`92!3J;OLCSB<A7y3
z(<Zk}ZDnYlZ;Qm6VC=cVoktz(bDTpH8sL2y{OiG=77>5<Y}N!$ZuqUb1{M8UVTbyl
z-S7g2+jo#N_nu7Nl~p4D-0XbF5!7_xu-T|h9`#yZkm7?tgV4byN8cGA#HhLCXYBTs
zsst0J&aDFI&(0s5;n54bhX(|xxlY`OyJv!RzE!l_QvKt_P55hM9ILW@WL|@DtFH*u
zp$<y&6wsT_u=qLpcE_$<>ruqluEwrZHQT(6%a|Vcu(g$XJc}UH%<8hIi?iOYI(v-*
zwobkx?Hx9?kkgY(&VjEvuw7!%v9WVhFYsDW3edV1yjY!8{Y-2^+deBx5MMn@>fIm~
zWc>;!A5@Y7+0cB^ZmiheW3<F%_x>C=w4Dgi4vk1e(dDDY<QlcL4}S(YIjK-eM&1aD
zn;l9q32d~|-|767Y%$o}LdMZ&m~KJw4_hLUm$H1LvmcP{#~SaT8ijcs`(d-AYtsW&
zIfbbAJ&~l`RvGKhC^ust%yw`Ky>*YS%w&4y7pn>1%%C=d%7oL}_1tz*_4Jbw5$od(
z!Id;;^uX;0Jky3Lv9_FDq1ZSPgV*O{)ctprEkC(9yMzL)27I%*1+?NGM28;>Vqm`e
z-38apO+PJBl;E0|Y<=&A*0Ok<db#`!2d>$tG;Gk6M8Vvp{6Y0YAlP>65#q%EbKYk)
zIqACK`8Km-(`StCp)so|&5ssa&de-ysADON+T@o#?_A}LQu@3Sn#<g9ibU2?eMA&x
z=MP&09GBBpb{r2J(4DQtDH!Kg?yEdFr==%7KTT!{U`ppmg_eJT@fox)lYyL&{WF_m
zZfL@-sZQ~7Zgo<x&AXl{*E%=#wK+g-v$mGGst<Iorc>}zuw7%Lr4Bwn0zJbz)rj&5
z*}0La_!&Q{^Tyv|$dBCC2B!ilQ2Tlen=9+c`In?lv&b_{EE0LQWK$xDG-Sdy{bToh
zr!y)gir*iBA4#anIwz95wceEr6Q4gefLHnJkz7S2%?I2iNUNQvEq+1UmPmdRVpegy
zb#Ass1uGffm4USz@Z6--P$$#c7r)6Oj8p5KvXH7^5Z~ut9!1ar!VbE#kxRlQ<FaO|
zO9#%R^XeMkTBLP%h&|@hyVUFRT8TUl$J~eeI;HqPaS~kXq0uU{)4MphVt_)cV#Lct
zJ8=u=gDT#qBRHiNiHuSepP7r^y`egLpHGW$5fdOGV`?-wuk<bsEkFny;uvUDZU!Nf
z$k```PYu_YaW3nSb$pbiGUNwb+^!>a_2lrQ^A}<yBLP=QmYs1>b@n5AM%<bA@JqO_
z;pSo<eF0ldB(3)Iywf@b5>WGLGfngMwNHdBl~%E!Q`4BmZ=$+22$@x;=zAiiuF@I2
zGY8rE?bGd4QPM)=di&TxBx`}$;b=1_@)Jg6iXlBVHJ2k2m%6+L@jihu7Eyg6$ibi5
zJolrhkxo!=J%A%U;x2s5X~|(c<ZAk*cj^8$Utm8fSOP~}ic0vWFy1~P*#%2x6k|gf
z&-VRpy3N;LW7(j@X-{QVQEPfF90m>b9brHP{-CI5I`TNm|2y7ai)4y%e9q&<$M5I~
z_~I$=vHok-H;K%AO5c~|dL^7e(aRdPJAfC1_FbkkkAHSx=H1QF5>C*}W!_tPP!A40
z<G<Eg66?J$wrFzfS~*Z6hqY!e4UV)AGF7!{C}};u@7a13sR#HF`y5)FmGn&>YhhO)
z_jFR^%{twn%FpSae0EA^S-{@oU-~w~lTEk$ow1UR&_b%lRNwO-&D%{6ci!W|b=6lg
zS7^>Wz__0>2V$P}HO=DB;=vn{1-$zY)aNODPHSTZ6>4;7yIvvPK=o-Pp1o{mmiLl)
zi#cqy(>GNB%rQBGE{ld1rUkyCB{L7EB$^t^q~349AP3@PQ-sLRD@;JPR8x&M8zt^d
zhro{9_Ka6fVyr||o%2y1gKfGLdvc!YDZ!`~tg5cGGia!LlOTgEw*|faymY^ym?wWP
zCidxNLIm0#yXEmiXA@q%au_P}H)joV+7L&J)8>L7I74;eblB=EWZhC}j<T=Q?p!W0
ztykHZ40r*IvRXlmRjqqzT_!tLzrAx=^Kv9VCSvE^IE|HRV~5)*GiAtX1pmV?3P}Y~
z*L4NY>}l7Gm5eZD+1X&?E=TBXFAh$fYGzUM!i<x6b93^taqVl%{Mhf3Z*%Kg`nq>Z
zh0{A-RYTS&$I<Tw0y0bBnO&cK${4X{yry!&S(H_e6cffgE1=jPb?Zk{*jz(0%3M6s
z>CD}#D4M!;Z{DX6uRUEHFZXz@ujEEfewRsB9Dt`EWXOD*X}Gc(>@+X|o;=`|b2uya
z>COmDnQY4r`O;mhv~>G!XByvT;rzR!FT$i;f4?sw-n{8?lCaIkx`4}$i7ANAahhQu
zcLx|<-if4K*MdUg_k6r_hiBl9!>y=hT6l*+ACD#w*COzbMmcL_c2*|&SC{wv)HNp9
zQ}535h({g1N}NpB&Es5F^Kyr8KEGma+qN*17!MH3H$r#`amZg~q9hPqUdxQ&aAUFM
z2N1r($u~76=*Q2m#Pw2d>r;<Mw*MiX=y9wIZi|dsdAa!jwHU^eH4x$?apMp!{)(JF
zCii(H^)c*N_DFC6!gFeTJ(og!ci0fEcgd^K>HB<=T2#wr!A-0Lww*Gd2M1d`3)glG
z7hct?*3;gb9uU959+&bQkY#r2%3=Z4b~x%6W+xXA3U+tK<miBfQjwg<&pmX5C&+BO
z46ZR=*}qC##T<>?@E<WaAgFmxuCpHTT}=`4($AqU`L(>W6G~~%3-VOI$X7{+w{Usk
z6E%C9j~(3@)U&2{h*QBc(7mZzG^g`-UfZuyF_fvU+NrjNI^X#fwPPTD<0yPV%#!us
z(uA?feMM<<^Y&@3^ql^aPWzZc0w=kZClr5?W5gcQoI#JdCD%AT>LlRZ;}c?|vw74N
zdG)^A71HMtvs`wc<*4+b@5728kE}-%;y*alJgn~;3pvh-@h@*oy<qNre_^G`Y0$X9
ztu%7jij5L{rNND$$x#c;;Qieu#Eiq-oCNllDJGEh`UW@vyz6H06y<Z(kv%M%&u;8t
zOUv1Rq1ELaIRBcprKNclF*q3Ne$YsHIxlS*w+@6e4aP9;d_ZBy?VZQb7sQ_ac0LIA
z(%kJty9OyceJ*V1H5hNl2?R|7K+puNWe$#tx9{C7*NSVq1Q+*rMs@zIf(@y@U?0Ja
zW_P13b@xs$fxVFDVnQ%S3fkM#1K2Jn-?(&%C^wwr<YJpY4)JN+OIB!I2Ndx-#XL#a
zFCMnhoLZH~wpj~%`xS~H>R265fI8DYA8JKNhS){862Ylg$5`#W`6+>cwr;U?cc~Cz
zDd|Ij%o2$S|C7tb(HycN5dTouNNs_Nv|9(qQ5UX@KpW;P%454!S+~a^(v}w5xg!U8
zmR8_kETFcqJG5IB(Q_R-Z$8$*9wAt~dD7d&xAf7Znf8RldIlx5b?e2p*n5fptXWI$
zSwf(t@E-h0OnzE!rSgy7z$9JeZcX!yASM$@A5ht?xfelw#G)L`?`$e#1mR4WvpL%m
ze5*YGnRjipr;mAQTR&l=s{jGmp4sYVJ`3#7`dW`Utz%aDwEEHyJP<3=38&FEfT%38
zNML=RXqa%EL6xA#;Uh|gWriAa+Xeq3b;CYjU>swu1Y~pq>U5dveQD?M<YSy;R17Y@
z6KhM&sw!$-+xMN{mvpxB`Ha!M{(^dn7)khP{4%pGqLoV4=q%(y4;qT@nOHYUeN2fY
zIgF?Ndl3C`{(Y-+qj~Cks}VNn8~;K$t5z>HaNTMrtx`ez`rmiA-%$_vNy&%Ni9gI5
z7G+{x8=O%Q@*f6hSMGzUR~xi<;8FFNac#FD2EDTy{=+u!$TrIUR2>`EAr}qZW@Bhr
z9qe8QyFLc)uc-gl?Y%?3%nFRaLZ#&AevLL$>XK6Q=>;^N1XAbZs+zoSpU6sOnxo7|
z$6wJmY~A*YE>GdEn&pZ0z9KnYtGtrjJ{hb&@jSt<s`K1$hJLtm65X>>;K8Uk{a}DJ
zqZ-{C;k#zuC40<&?+8^zv<VsZD)o)ET3^Av%KKl4OWVxq!mr2@jGR4iQ+`j7aLhbS
zZN29rw%pxfvMKz~RVKWeFDqV^kYMr~`Nw|Zf!eaxgIh>$kgE58aB)n+KeXXG9?@vW
z<8~Iw67?<_#JDC>`?a{Y;-!v)xN1n=f1$IF^egV)+!FZ0|8wc&IUKK_`KPTJ+L`|x
z=ee-`Mac0uV51I{joMeo?E3}4b3xP<P5<SMsbDFu;}>bR&tsm(wvkBy32%t+@=}cn
zlb(og8ep8OJwNzI2>Bq=0S0*&#+ET4sG|z#Pk0q2S@l*Jz0ENl?~!(@qHS132`-$s
zb9vtuaZpn2hJaQF<Dk{zXZ~}AcZ3@Wh=)cUnbqeRCMO3bVxP!r!Lf*WiTl)XEb>tO
z7O&4ty~LmmR9D8fq3<qVWE=G+4DX!D^&lS7Of>32JVox?cV^aSQfV;2pEqWre>|&K
zkh5=56wnToY)O^t7Bc<=<v*SF7S^uv;jfr&yfm1kAB@b8gt9yy*srAu1OOlR#g~9v
zyjOal_K=kjpV;#7V+wgE(N3!uT+&9~u|??3q}UY9T5?_cmtyZJ*>q4|#V*9Y|9h+7
z`oD$|Mx*Dnw?E|cZJ8N5`+vY}RogOWyXO@tchruXos<5K?@z}&jbekgHus{l>W8T2
z4KVkEhKC24)qeAFyDh!H^D>kCI+k@%qxgP?e;XLz{wn7qu1&<UO_Dl^SQt*}!a1am
zXNMT->=0X))E!K<ApHbUfBx(Fz^o!^+<KS+v=enY;B9z*!MV$~8s9PWY!6+PUd65d
zQs^*(I^$4>LkjxZ9m~#=^d*2_FKsWi2OtU_Z-xELAFEmyv01~!+<2omu*YbTzZ(!(
zWazygW=iWAB61xh;V8+hofqM`SZM+r5a_9S1O~g&xlky@ryeyN%yIs%&D3j=QM8hD
z(jk{VMUKL&$u2UHKe>Y2_fq$6KWH*lr95}pgXNddI$E)R=ndll4$`@fCHeu=I)D%v
zOtPw&sH7m4U)60w$mTqmL|~M*tY9g#tQx8`FSW?&(_xJ|2><nreq!igKfdBAt;8Z^
z?cQ184R?(Y;eP(;OtbqTa}i6E%8^eBT+9plqmZjQiYvoH4WH8pOXt7t0H8Q{W%^ZQ
z)5{6P<91bC3xT{kSF=P^APFfb+-~`FrE%_cH?}!bElyA?7!?ffNb$?P<nHic?1PcV
z1gXT2?J@Tz#eFZ+WgiZ*Yf%-jtM5OIgJ)L2<K)y_+iGc%<@B@@<<NGGqm9O3eM-)n
z`!B;V=L3zI+92EPtvxI3CXkU;P%<*;b0pfc5y{%6=?^I60Pi&{{>x+nF}=rloCEpJ
zx_#A*esc83*TQ0<S!ks3uc#3N>=Wrq`npBg>L7u4Z>tqj_SP~KqUL^90|dnO$o*pr
z5I!Y*ibJz*bY2zurS*lWAo;-r<07(AlPPkZ**5*;!c|m?O#u8HQk5QA|BH>~eoO^7
z&lwBY546s%ZXc;=Ta19vWRSu@r+;{cQnnPee~RV>JK-ms!1X4GVMSs*0z!&QZ3tn_
zh3K+H>G+*rIrOu$hAfFW8T9ZI)bj6=PLsBAWPfc_VZ-%Z<%c4M-pxXxF1sK6Hkz_x
z>&hI@Js9_OE6UhjS_Dyu5%|$)jt?Lkxx2M8(+?L9s8au31PFf($$!#)Bo9<sj!^+1
zo-1c_yN=w+jRX6ej|}2p%uh&;YRv?js~^Cn;e(R_V8MvJp_hKkr?cWsD$9LSpZ^Gx
zx%f!_IFbZ9x6aV}XJJ%&d_a*CvJg)Yzg-0$6)$(l2;|pg>*Bk|>9k7?pTnF_imq6z
z&u(hnZEji;^rhILR{cp4JN78Q0A%%YRWv=nFHED{7p1_d0@L+w-Oj9DE^d!!RtsW*
zv>yqx*L*yPVQXiNj{DoTv!r0;fV>l50@jRAe)p^__zuF)X67pPz#oSr71ylp%sH=>
zI=aO$%C&2LZ`|LvcIUdZ5jF)dMY^EM7GXQ|XH!&DfV--rnP%0G=(@m~+~g|bVgwY7
zHpl|<McwTmx>}aQi^NO}0PY;uQxGm!Ztr*xpJXz2-B<qNamsN&SF}8U2g3D~B#%)x
zkjB8&FgrQcdX5@|cTIAq>SZh9ud(A}jgacizuI<}a|=fvbxh<D4rkM2vK*teWE^t>
z2gLIE0{}yeu^^^17MShBQ`$a`xy4X(h_%8=HIbPzwm$1o2iw*3i;Ip?I@3|URY0DV
z1RQw_riSaM*?mY(6U2^<z^FnCy?rx=Ux-)bLIkM`=|r4ugU*Z~vzm7IP?&EDGi2QN
zYS{1{r=eKxm`mJmKoj=%YAbmg6{)Z4)pK@XtoD1|QCps&0iBY{e8ONl2H_3dNN?gs
z=L@cFZswpopEhM6#m-9o0ASC<WQeW6PKgj9dk+d}Qw4X+aC8IYO<TV+{2)ex^hwgW
z%5zkcVHsE%P7d-|R=Ei0v1T5=IFV*#=WBgxbZ50Q@Z2z<ItY=oe+(<<jCVYZhaWaZ
zVqgd2q%kywxTSeKe}WFpG80m_!UFwv2Xe9iEE?s~jj|bk5a0Zb$F?=lM!efsr^cuo
zy|UII`Dm#!*sQ*6aKInHns86<38wL7J8o*Y5|_yzd@E}A;v3sGvqq_sXh+T#iGmOt
zby2>TE75K$Fg_JuZWx6`refjA<}tYocI?B=Tm61Msm)HizZ7{9gn#-k+p$f}2Ih9*
zvVQ^wQOWFXXQ#Z?Sk*v(V;G4$iW`jGQPOAy+oHCy#!fTyS-FpldMhjZZBToMWbD_8
z3a<F<rAR8gT((2PhZplghaY{jUQvu?i_<fZfOFutzl+ku$7Bpw2;~dy|DCPjW!9)N
zaVyk_TgKr<>f*>UNl<IZYi|_qYr}1SFL%)sUMzo{fF4Cz;<i-_AZdGfw0sUm`0ZUv
z1!Fn@JwphxF}b#!E9wo>uBqo&W!;`rL~?V+_~RtvT0jw~<uM>>56H^mdoE~>@7bUL
z3G+-<%phK$HvD7B7~2@jJfGB_P+b7CqM&3ApX9J131>C%tiTyP9Tg_Xrr_pZT0nkX
z!d`^p^vovq>nB`=s#}9;sZZh2TVbcEt(;6bGRN<Ef9GLXk~Q&_?O{IZ<kKRyHkFiu
zt)>ImN3ss~<)&B6m2YhCUgbB2Dm|F+dVQ|O=iZQQwPavplX2+kdt^Ce*2>~h6dUtr
zhjgY|MQC85XxipXx*i%;ZsMh;polIz`m#3ByW`z@7cDn~IGyFlVdQ7eQ5_oO$baa=
zqx;}SBkph(+bWrczXZ<ByON{romg}h3o)zLEOc-0F+DMo-ovlw^w49ru<ZS&hl;pP
z6s*=PTGbud=wDcEQ&+w08_k#tAu-|kFEPZ*`q0^i@352|`rnlF2((8X^hsdXV3E)f
zYzp`N!=kRjt21~+dtP`HU_ub+a0?%Ua8ggfb0B6Rd3P_qt`=ob6Te;Ll<Xk-^)tb=
zCaq<9S?HQxnb$-G>*Dwauc9>GNnzQCpk+15V*wNaC|&K>pML&?Y#N470)rmF;DTmt
zYYb(%C(LD1y{uF{gr<7-H}uTfd--O5J&Cx=nMaucY7i#774;^79DV%^)jWjbaAPlD
zpAW!w{DN?n*zeYQ0W#sG>HxR_N*!*NS@G95DwYofN-XgBwkm5<cB1uU-$eP#@?RZY
ziwmBZc^#+DCt?gJyt&+&4#&w&l6sU#8FTL#pD)om<QHq$(u|^x4KE-Q?7K&&J=h`k
zbn;pAuB{wTc3YK;bOp1MHSazI>6wz{bOxV6M!NIGdJH-pZg1W-VeH6t>rdCqQETWP
zPlbO_1jXv)RDP)rCp7!rLGZ(Qzx{a4Z}h2@3jX4i<v+UqrJB{W$sPMTM-c|(deuZu
ztKY~_9aRln;h7k3QC-PV>Vkq>3DD}j$FwWNHoZf(31k_!s*<gui!&}NUkDz)HYRUv
zwG4_r?3#Gb>?mv)MX`|so6EpCb@%VzRM$)Dn#gO8oq>>0r5^c_{@L3nmi(iuM8!j&
z1f7nZxYTIVk_-QI$qSr^Wd9odV+;#gyv+zCBx5GPK%yDn)UQ~5-&X}uIlLt!uU*>i
zww`3QxK1NbRKI@*8Jpz*k)GfflO5(5Y2%@iDZ`~FU5O#D0&`A$vT2dS7H@t+KVuAs
z0ExQQ*NcCBd}ztpUoocvMpgHb3a?ZFNcs>Up5A*8%LZ&`Lro+T$Xd6eviZ*F=zI_F
zd1f9LJ(%Q7p3I7~2@`&Ryn2Q8QxDZ&O?r$LonKBILRp_H(o)Pvr31==&fNN;E)D!6
z_xFSWW7*-YoPfd0h<DF@oh6tw<`gPPuhim<alc}}Hk!J7jYk6trE<+#c1Toeb72QF
zfuPo7KsPp%?K?gP{_@l$OZVOzt~%k($%0&BBgSxLN0Is78>DH&j7yyGlWZRZzp78t
zlOQh?=Vl$4Oag?<)rr*f$yXgMv+spj9facNbmO67_H;H@eg?_ag|~W&2>!NE6U8{N
zTMF+#LbIn?N0*M5plhCq*3qjJn}`obm&@XXBIkG^S3ibw%h(CXrNP$$eaX#zW4rkz
zd-7ZFDQJKLJDRvIj3v4|J`kBGbV`l<wVKPi(|MD7D6c`GPW2?asV|pX!j2}-)zm$O
zHxE1J3yCh~Q$#yJyBi9x`$|6bOZCkNM{<HI{3C$Kpd*A6iy1<;xo%?%vJ-?HC$X(B
z*R$SJ!>4}kXi!#Zf-4L22ObesK39<Wn>RKb@b8}O*=kP|OCoS=@+a(v*E&U{CP4-s
zJF7aXt7XAY7bb#sfP{-2wR2A^fpKq2SDLD0C{t7iH1A--M&P4LNWy)n%e6Vhb#MxI
zOP#x;RyUIO9e8LeXu<vqo9m!VoYc%)owZz_@IYb!?yD`!-%nmR{UtHy3t7miK6szC
z;wv7paT6D^VO-0mPtm2=NHMeH$xXlRwt6>(U0#~0c@QLWO)yUSpMq8r=~|h4Yo$Ls
zy4bX|`r$U8t#JddIohZ^#HeJa|GT4Gwgfa7!S7uwo@Q>3h`IhH8&w8mFAG$f=Nld@
z>c7BpNANACV&4(e(8Q?f0@KTv)|LuY$?GqP(F}T&t>n{Dn7zwH>k)gd?nvzp(v^sX
zaA#pzXC(K9dHnYIzxH#1bZBa^lDYO~(a^20fUprPRO)CwmPXULv%yXcd-kxTYhg*K
zNM7=LcmgV2Ji@JghbZCFJ{3A1{l->Ddv^^dexJQ2QDQ<*K0uwS<he!I-)w<}X~(r|
ziI*sAP>J+cAT7r9J8*9Hk3e490N>5klO6cS*L07Pyx{vc8r0O@kX9zWI1103wefGj
zyG-;ET!Mq4KLzq5m+BSn{~Ew9aXZuiJJJ&~*{-V>Bt1vDXOBo2PjA!w#={1F_#Tvz
z>L^|F40q-oU}bWBE6gbWtEa|c|Nh*fQv}msTG~CA75sLER@c63dRM%Nxpyh>ca_sX
z*IZ`i$t3N1*7t(zx~;GdjsePvL9-Q1qUlDC3Y{(ml_CBCsC%(bW>qu%7Uo~EZ`po0
z(6=}hN{-eNqdyAo4^#CQj249hZt;#lh6L9y{Xq(CspD;F$|5hfjs1|ukJvWKYjJE!
za%FFlwJ+y!%)d8B#68^Zv{Yfo=Ub;JKt(BRl_`#{(4n{?w5{5`?#{m|b^{f4iM7qx
zA@+AqM=q~00XmGEoKQZJ1Fh@zqv@Y6yi-0((wXsQhT2IXOv^Nf);z6k{5K$GTUE9A
zo?=r6w)cD{$G-_XyAp5sk?nn|-mUjy&TYbpnz&&y+4{gx&_61*ES>JV^5D%uo`a8L
zCGP2c4Y$jXp4mtalhECo(zLbCC&|{$9E%)4yx6&6qjbK2RtZh+QZd(Rk2CdKRPn`h
zxp@=y)-IN*Nthif-8fv%y|Jr$V}B06*3nZirND%8uHyg=apc}u>0D!NHW6Lp4I!_`
zjNI^$x2;i<v4O(fZs_h&2H-&6$lVA41OR}{`3KPj5Qr)hOh<Gny>Cmw&>we!WDb)D
zYILc#A+;%WM=MR6@Oh*iXj$cflRd;~1oo3Z;gS1<HdmN-&7NU7#CbE(dZ$ywxqWZd
z*w$F68H1L7!-d?2P%hdUbKg(7X3qa>c5#OEcT2gBPP4W0=3@W27h*WC#aj^lH#t<F
zGP&kn{JEK<CBgNtV#cD&ZQ2ZtT1DBBA22vTG5<^X<W9;!3D}2W@phF<&?_8=)}@r7
z?{n`5WOTGkX0NH;TdSK;U(B~oi$!g&cFxjW6a2Ytrps<3P~Zr73)|LrJA>PI3fFet
z<jaWFRAf&kj)_dTOI!^UeYRIAJO46{I2_zgzJiZ6XuY3z%t<ZS*LG?Qy)RgGiu6vi
z8NQkLgi!%fyq+hT=$h6XT~;dbn*TIj7_KtC7Wnmjs=2n`O=+tN`ggNO3P6rTkW$T<
zVz_hqoz5uo!EIYwkZJaP4kIjkln&pcP@YEz*@>H*RV6WpH1YR)5bwLdo<H_%&!*bP
z96A>H59}&^RaX*DOG6sH7j_Ptjc`1L_2jl^UtOJ4s~kC+-sI(ld784a9p$TJ^xIoh
zB?isU^H;Cou@_92uflZlNS(E;MKzXfB@+Q%5?a@8l_#VwolN!fWFLTLIe>gz4s1hU
zvgEcYJH@_~&aG=F=YAv_z2PDznmPpE_!1IaU#4G{)^Oj^(7{SLF30OpA^*lP%{j*y
z4YIOf&*ide6XNx7DT=tU^4K78_irXR0vl^JTkU@<utnK?rQ-rFl-;Lg@e27nO*a}?
z4Z-?#{+vZTm;2Ocy<!?>FD?i7ED8))MBQnG+Mvr%F2Y|_La3BrIJM||Pv^cWo^SUu
zXp^N;Vq(PU%MbS=;qWHYABJj;x-@5EA>rGsV9k)a)raGF)ucGP(fL)wMC<Ow2~QN<
zkgWBtXR6r%0G<Nps*e5+aF)o|ib3hkZK{U@Fpi~4azqc^`Z!TDUNg0saNu8Htu5s?
zVNs>nbT<EQal_Z@du7(N+x5+9{+~SAO<Wu|gVj#MdiH^mxbknQHlsNvC)jF&`0MGm
zo!hcTI83sz_nm=>Ovd3>YsZb%z|A~X)b4FJFL%=J>0~bSN*AD%^64He+a{-H6Q*!c
z<g4Jygl+Q`s;lYtP;%5&jwY=sn6Up(qrVG)Ymnljzyxq#Xr>^VnwJZ}+OvncnG&i>
z_tw}p{i60Kxk<U#El{g*j1GftU|%JRq;D}Nf01!}E5SQ7q$UQYE4q7+I<|mJ0Da=&
zQ&Yp{4>Tzf%`@vKqq$$oZS8WcFcVthfRG_&NgSiQ1%|xCk}hM6hc1(y9&98EHn%BS
zrmn(MmL5D&<lDTmbGa4qGtu8w0Mo94UwXymz+#eBK?f`zmqz+N)PN>6nZ5^VFbYQ{
z>xsT!N_2JBFhsrD&Yc`wF5g^yez~=noq+V~p^1dIzlq4d)Z5f6Nd8t@Bh=K-*S+k3
zQBv`k7(OM%amC(pXMc@Y>cB=7gVOpW;3y)X!q#_dg}*regjxp3fR^K;wFtAx!+S@a
z6c7F@?WsHWuVo6T)Sk^D>_CuAV2;RWr>NSU>#Dlc-F5I$jUI>y-15Iizk%57Qt*Rn
z6)yJEm0qm)<-w2#d15A6Qz4F?=j~c__g1AbB)2)8R%pa%d6ahhnIW`|;IPI`<D>bM
zWO#ZF><sq-&;>D)j?-6PB&6PZ`xTxpc}kv+l_#9XlQd+hlxH(iD)tBrP(-?0umZk?
zAxECz)f=$&zu#P#5g|&%vCR;!NnCG{l$Ws~7Q9^xf_;wY2K(Ho>1&`lBaDf2oiN?#
zFqH6N%9kA7!##PSr{_5Fep4c5SN1UFWn99xd%Ddi@BZ50S1UruYF#hpdx#ACW3X?t
z>@>QpJ*dG|FlZ2uz@&NxD*79T;N)hA^~4g`{({zmu%Mo>GP^^Gh`S60XRgD2cQ&++
zz8mi>;CA`Ua*r)B;ylBAJUqXxul1xr55ClDHngYnV`<;|f!#!<t*?Q|U7+lEv>a1j
zafvhoRFDG9?|$w**5J<YEMKf@I+{vi@b`wAg9>jow3M^^ZDtnZ71v}5wEIle0cFVI
z)Vwjm4v9g}G#3!`!ff??u_DPP4x{rDRBwEv1JeVrU?Enq`Km^+YnYh;-XlzAfCA`N
zg3+ob2Ax8w(}A0U@j)=5=Y2b6><ME2_chz&z_tyxG_xQvwdfS|3^2#o71*q6T`z43
zLPM(~_Ws@+K33A5amQ#kY7SOej1fECO1n3~@g@R4Hh`N6*6!H3Xga!7Vi2CkRuoF%
zy+}~32?Uu%^GW2n?KePl0@_l`&2ea1!c!yVMzXHVObgyG;u=&ij4AW5VNos5O|#lj
zQ*SAVlIM`6mC}JMO=qU$nQ`>W>v&u5SD(F?GiycV<MU73(+6&Kj&5>FwNjI@%{U#7
zUd2j~tk<|7)5ZuDtZr!UDW&#ox7*v5AonmmCYsEr++d&6vqZ;kh_7o+X&m1OWj!Pi
zzy*AR)S?Ot*Y*9XqTfPZQWE;w{6*)s(wt+JYi=7P65R3WzVrLq$`mSu6qeHTBzxS!
za#4RSfvVk&XxB)qp?sSgj!`^7?>m|w80;llQ{M;Vsv}D-Z&h<|yITvdjw?Y7jcC!5
zIsBsQox`>k&+HvDgENj#ggaLilC1G22dftHmnaoVC45Ri8+f8U=EHp{S=8itrJfcR
zZl4(^*(9xCVm-#vqUXI;`X`BFGWx2wK62V^s{QD)HP7jlez>g7Nj$p$uRq#D8<{1h
z$)d9oD1Kl$dVM?1K~Y-r-|hDNm(n$*ZVO3NtLUIzEl_e^-(%Sn5B*&sQ0_c@J1!O|
zwV=v9^|{bk8rqB;B9*uRWdYwD^tFAapwfdjFx_&QX+A=!XsnNoFjdre9(cMnYK){H
z%`h2TrWUiE8xm8YMT!A*wzvwdjQ`ea(D{(7r>ldEt($#rWj6&@M1I5m=rC}Va}fM}
z>3UTOdksN7tJM()3ko57`wA|7uN5NKry6hnsToOfO5MI~TN~_xY6O=iUTer5RlWWD
zA|hTXocnqBlokP_`J=Mk(OO9d%7F~E_5Y)w88j<d<{hgt>$ao8H^U}P{#6a_FaBvH
zNs4M?#cc<wjC6eKF&|X^pY9tnR598}{ci04IgVjm;QMk-3+jlTYbYiF8ei7G8ef&t
zZ1mbcsQM5`R1L%z1<U<!V=+OFl{**>t+M6lbLg!<wJj12XLSXnyWxNuH+P92vEqt{
zr-*sMx4OI#On-DvDc*?~8xv&gX+Q#;N=26!>fJRnPC(Xv&!FBc`*lXtozu4EMGine
zpjsoXP;EPxsYOhvI{E)x{q5KvP}Tvk)=mtdT$ewN?wc}o!W=%eA%85dFFqc_w{D+|
zuXY=QD!5PXSNo%fm8zcoYcevZzt=I;YL?b>r=2`GYk|y5vq=kAceQ`(OF|u;c4iNp
zR+F|TOwWwIs{K<TrC-FW2FAFyO+Z&r;P#sL)A>@2)K&t_>LsHpk#5t9D`tjFLi<*w
zv_;+4xp-_fhLy}Q;7$xJs}O_9gb&jIqbk~$)iw5CBijbyv=^#m1}(q3+6yyMd-L|~
zQ7F4p*Zz>|w_D-1#{-9|=o!1VR=<&QIX1*37O2H23Itz<SE#B^AhX`j{73hz1w{Gk
zhX&9m|Nhd7@!XSfNcH>w(GbO*t<JgqkL*tnrG^1iY0scj&aS@W@IOOu`s&>_r!qtD
zupf&n)Zfw=nBH#cKql+SFX7Aahl`z6?}1wY?2ejNaNE_W95iOGd7u@N!?F|v2!2Sx
z)Ihs}R25U$HYKlIUNch?J|J-rvfq#)Zw6EjKI!ov#gBF%4;;KPw>8^Ki1B*QDnD57
zUXqms!uBbh3<g-G)N@^8;95}A0Prv$E2#Af#5xHsx_vF{W52rIUcY2prO2~kb4~Ro
z{3tp}RB$JBr-I?9G)O+@ljYT>#Z}>hmf9B(A)`VMTN_+Y#YR2~v5rbG%KUOPwpRnr
zc_v>_z6qAt&^Eh26@7IS`CeVy%%^p0KTtjJ*FWk!G|^gJge-?>?cFG-_TPM+8X~X{
zFL&#u0dVH&H*)sV+`)5Q_d}9<Lu2iS5A$~{Hn-hr_|IQlq-?i*5ZH0{5BoVOzjR=K
zwux*B&~=kh*Do03GDm6tC?T1H)=_*C0w*zV5jG&Q6LF9;HyyFG_!=n9TEl(N@=prX
z{k#9x_0wHbE*c;??Um^!X_>pVDl(2u{ZV8X6`F2x%d*%ufEzI7dZBCgteYOxcVXJ2
zql4S7UF#Q#4l5q`sM0^^>+mjSD{ax*_~-K^VFx0jruLCRu3G$oNoEYfU$C0;3jE$r
zt|($1?=Y2*ir{P*Le>plIuVf71+Gfq%u<^G$sR4KOFY?H-+cA)Aa5@(`TyeRJp8Hp
z|2Uoz%1+r^M%g3t-b-1DNGdX}6_P#gwUex@QrWIh)Hj)tz3z2yGOm?tUtC=Ky4JP*
zPQU-)x{u?Y&*$}iJ)dt3ha}5KzdQR-nYhaqrkHG2JG{23p9}nFSV{H6p&R2GZfE^p
zlrrfLA)Pb#-$6>NAzIqO!01y>R5E;DAHKPW>txkFb!wY_yEPgs6q&;b4d2*MASYEI
z0ccT%WitF2NEwlg$QdS~D9sz|(_FDGuJ~fVSshUWiHO7d>U*zxkbm!6Px{~~B>-<6
zrLowouzl*c&o|2D$&fM`$l_+%bW`SO<J71?Pt|{yBkg80vult51H#@4TuhJi<s{F;
zaGTTruJ_0-bLTsA0MpI#Z!`f7ajy3Y^H>P;JA}gBM#i?z>dA9!H}LVmfYusR-iDX1
z^cybOnwS(r0>>|AK*LiNv_cSMM3f-y874O5Te+VUL`ACCJL-x;mB;pbAuFePiyaj<
zKz!Fm48|NE4_mcGTwN>4Zwj7lB(w-gD}N9n_N2Q71MRHWq|!6~wV9$&kboP$HDd0&
zPaCU{*@4U`a~tVU_Wt^qqJ5LIof7aZb)vfM(QEbJpXW+lYnB0K8gal(<Mj<~lUjVF
zeL_+7*tNBH*fzu!bohb$*srLl{ljkza0pOw=Y$~CHImah_>LVH|GTA#FL+&0iv5Yl
z_(y>IfM7XpP$>NBKjx*aisQRx<i=C)nQHN7N(aVq_2<fX^*1R>7paTHoM+fXIBqAw
ze#7uqPoHHB7oTc`t{XZ6`P{hI#~&bd%x*}3j<S6C!HV15^jD)90cANEn^q<7wBW!p
zj?^crlGNI!z{5~~R7eq{L7szG)(1`z@$0StgXmKaP!O>|qt2+l(Y&Wp^YWAJ952PR
zbLOxBy@M#f^QO@Klxs`T>-X1VvrVzs_lq4d-Q>1|r6%8wYq%`+i)q8BGw}dbhGQV<
z&(W62k5wxE+zhw*8vHlNai#iN-ONt+e&Fw4sXCOnz(@u`HJH&>y?B=yy(Io<R|yu;
z`e4X!r$bd9C!%Z5a=s?-_Bt$dzXrc@dO`|XV+87eYpCruRg;2Sm{BTb`g6ad*tvCM
zkN7sU2X^m#ay)YaPkhpLa|#}irl1TN&^bGS=4gaL{||)SAleJ6dQLrGyZ6UO4kZpA
zQx1ADrU~~|Z&p^chBcpsT7`x5`AQM8@u%aTE4`KneBmU>@y78x15NdnHvO*7iu=Gr
zq$c|02bAOg^je_lUS;^=3meNk@*+lyZLJ*`^ea?hdM;J#$|@Nrx08wr+k!m&<&Rn{
z2Zilvx4|!Z<LBDWkKLc(#hfDe9*{WV<9e0l8<cD#?>lS3Mh`U#7)}nj?{Y_}WQ7tW
zFnb=cB7rN9nUP;=`CfnNc^}$Vzb2I`RIVMaw34)iQ<i6u^=TfD3}8Otee7}qeWnpK
zk$eDYR<WI|uf0{Sqklszid9Sn3v}Jp!Ev%Szs5DW$usnG1?PU=^*|iCp+*e+*?inW
z2686nQ@<C>$73A(TC%C%Z+^(frB$@t5<S61X=s4Ry^Q1jKi09StkT@T9kNjO=OH3;
z?r$Zl;p6N0hLERQkqv-BU@q!}xH1<*<^Y1E@GzH-3XvQ~)G}+Qi>1BL*-mm2^8cV=
zk9NUTDF6PGf0yk-yUfiwo<9;hCLjI=QMSvf0lU;05|B?-YvN){ytLx4-Ox<~d8J%)
zXesg1O@Wj9lbqZplC$e(m>J|of52vZ5F@~U-GpY;%cOv|<50CHY*oN)I;g%iNb-2Y
z#cvYK8W)Ai?b4SKc4GgVIqIEttxE9xxtgiJ@|mh>XnyHO2*$SAbNe0CehMGbotR4+
z>u$UbHNsHd5WnE?ETvs*+grszDj$A$Lu!hx+;ac~6ciq3fqkNX(A*Sko@VxWE+he%
zq(W+dXjug4wi*|D7iY}vCcTI|>YK>9Tj}ijTKPvUch286mCJy`sxGK&@s^M+V?nd~
zWB@kyan!kum3>>}7<i>d4>j7Vw4Mu=_S`(wu?pxobhPWsnR5Wq&xie9gr~~?p>H$z
zvXN-l<Q-8jF*B(WI_UgbC8WbCYjBJ}w(_AsZJl;&6AVsn-M5YnAxFA`J2Sq-^G(2*
zEo~>ShXdi)@qN~783?zt5(Ggl+6|Y=lQ|AQ$sG4?6Vvy5-;Nj5Rx1|}gRHF(j;{C<
z)Y3xAIb&xjRju?~<+Q0tpw9tiEzPq>hB~|~&F7cqVI{d>s=!`mnDeEnoyDXt#L0P=
z)FxkYy02Xi%M-lkcy-tOL6sA&ho=Wzw>qNhzrS^6n?WW*1fVY|scn=k)VtLEi)tn8
zu8;9~zK>R$5%!OqjkjS*0Uv%?_#kp6Lb#<5t6kpfz2l+@W~vGdg*@pSrUoTvqK=M7
zwS+41o;$N`4RtHk_eu%md-G~5=KBlMap{{k`jMo>g?fFgx2E?|-lgtZ*$E7x>ZeK#
zG5vgO_PC0F`$YQxLzxyWr(Ut4z@e2&uz+MsFStbBcp`o;&$u<ffAR%DP?B3_WJcaN
zPVNiTv7phggNDq%%&hxiQ<0?<S(a2PY_o#QKdQ-<<^tB<yVZZE_wZ0NV<o(laHw<&
z^Pj$#T0qKb-Ss+~%rt_ePD$pobnJAWW|$%=(YrpY=X8A&lUh_h0+nq(W~tfdIbVhy
zv&*%fmXHqT_sK3sE*X6C5y^owL*%=RblRtP4$_9@83cS<hI#qH%xP=xR{8vyD!#iy
z>L^}w36ry-c{UtDh&jy-Lsm*C{2cHH%&M)8N1RRWm<mJvTzXYIU+E_y#cNmN8DBv8
z=s;wX1DVS>K>h;m&ATND0tZ?h{Ick0&2OA`NwHqp1q)!gI)-{tMrx^HCxi~lw`x&U
zX-+3`OJXDE95C<(;K|ee(GY1qJHvkrV|jgvpZZ$5G%{h(*$XT$H@`8~pgi&)PQ{jA
zUP1Ol9v#;oY<yB<`6q?4WT*J@lGYjTyk44ZL;W)R)iX6ahF_$+H@$}@YTPP<a)a2G
zfd1E|e-fH_mINZk#Yodv3SsOxXRsD$!JU?(=&?p%<`$d4!wX;=6CbCS-m-k;v)dhV
zN6sPRWePlLMz>*_1%bIXwV^)*wAR@F*w)ND<Sxo?&wKb}TmHm~#caSrwa@w3jk|1`
z=9mo=0LxU=3ucZKW!!aU=-2PX3iZNJW$V&*zUypNTwV01>C${Ba_q*ojCpS1TNIN+
zRRG~<AGLcbUH0AYsg-4mwG}KRrLx>RzjBd`K^A&Vrq^ftlPfc;lU*{rWnEjoW*yYt
z@M7<&Kbm09iBEC@S}CKr(z%Q8q5gOP$x$3B!=W1g5(z*74Sn1UJ=nw)D0^%pHR|6L
zpwm7|;5AD>dx>{ME&yeQr=yc!2tQy?1#~swcJqE;8FOk|ZrE}Y8fLYvBap3!e|D|r
z?5N<DYe2X+;yxm}B+v8TTi5BvR{(BNR|p+e<y5mrG|y=9uCE<)!6M6~H=DQZu=7Jw
zEOj40;OA2}4*z5Z?+e~=w_%CoZ)17ib~L*AzWf*7qwN&l9>SF=ul8*AIdS7EOt8$D
zs78V1%#YF>FZNUjso_=o#njAB_Jaa>eoR+}l=0<o?lDL$fl}jl&$_;J9nEj@{OPDO
zY@%kX+AaCYt_wgAhszdg?qneQ+<^Jvgi|sV=LN!?wv^?^e4>5{dPV76UqDve)?_~G
zhj}HW%byLZBkH@R%~no64--NwH*!f)Km9lS?0sqom4+<{sg)Vo8$O5o1gn*Z6VlY4
z`%nm09Itp6GrTQ6?J5~@_Bcz?!+ZZJ#j7jd9&cDsiTF?uzTa?aT57|;qTZFyu{MP1
zJ<X5XI~?-e-pGWM%dbF82%FAk5RbND8Jmn7x#MlJx#@peRkjF^?AUWPBzkN}t31+Q
zdph~DIpH^@Mp=R3)J-H1i>nR#6KNu<<w14l2gCBNyFc3+497mW-*y8_q7RH-OUb@U
z7;)Y3zMKZg9A&x_%(&kEJQHk7@Omr2v36|%(8m>8o<|n~zP>n1d^l!Q@x~*d_7w{x
zdkosxtZPsJ#I3LLVBL`sLv5z5k*Qx2r_;`RlE(|(%GN7<{wmsX$BysGYFRImroB(8
zbe4aSLYq=Vf*e^qiMLxfHW7~Iz0xb84Ur&6pz98}e6APdAuX`2-2eE66r<zi;l#Nm
zLCSbf^^;TALgTcszBQVLLlb1<5L=ZHDpTM`d7hS^Mu`xYVEBO|M+1Pw)dewx92ASH
zrl^^;qXl6=p9{)1`uIEN=#wUu_57R<7ZrbV9i%6A9<hes%)qzIZM-A7q>(1|yO0%w
ziCZY>HPQxS@$A%Fo*l5-46z`B92D*y#lWW~PLU#Cn!<qSfsup*R*-zx`S8u-!cU(D
zco(_V5)9wQX`yxI#BJ-GT&(yqH}gNu^@P?w>yJ)chNMwPyJevj4sH#z-Q7CzKM7&v
z1i+Xc2yEt#$2xVI@r9wMf@wYJ2K-xIg4i{wRgqA$W`%Xx<Bh}J9lF*0wgS7pRrQKe
z&;zqs$E<CnnMC04TwL2M`DK7rmH)@ZHQy4sZ7-Q`T))+1kNEkDeE?4Vb)$LvsQZYL
zpqn?~;mW^1`zzQ^3Grg%Xivi7UxFSW5XBs@)X!P~+?x(Gmt1z1WI3^blc7hvWd?hU
zvuBO(BHOl}ENL|v>~PB5^D>_2Lhndwdng?m3B~J#Z*t5Z=)Kl)zWJVG8?gY!D02JH
ztq7%J_MIzJ5wf3YfG8uuMG@cly)T(==<L)eMzWHXS>^*D<uVR~JLd6E!IeGrpop(e
zH(`eg-I$r*{nK*p@#9GEZP|NNwGHFl=71Tv^>~2U=V3B@<-jyFw;<|-Jwwh$u;k>x
z;y^A=-#AlzO$=pRihLk3Z_>}NHvLgeAhUXQe8*WPaU}}yhpqY5d4&zuQt^7!XKE)A
zH-Zy^!&Tk6>)G4)^ICgz7)14Ut@Cli=dA+}W2Ago<eR#Uw0VbE4Qk<*{9{D(AU9(x
z^X1EoNPvvLB4L0$B-*>8h~JiHD6sS9*d){XguNa5{(!!mAc<h#D;M@Sv4<HyY&Iwv
zvXh>_FC4nIvXEL9ov=M!h3{T^?C6Jk!zI8%-YPq}jhSv}fs2AN+Er8C#+r5+BibXl
z$nybkMp)9%mus(tZ)XkMT}h1%d>WF2C<Pj6>Un-fvbi?2zRw?2zz^TD_J<5{*^k%m
zz}}S-R+N0Gf=ca`R|U4)0~&nIol5V77VNg%&W;dR^FzGTAcHgN{(>R<gG2EAI+xWO
zp@OFe0seLX(Ho%Gct&ZpqHN7fBDyn6iI^q9v%}2nQRg)B?guc!YMo*x8R6&`UNC>x
zrw3tSs~@4u6V5mMrGLi@fgoWb3<SU8Bi~^4fp>Yx&eS1459%0Ff{px;ts9=&wNEb?
zsq$v5r?W<$x#lPqR?voNh`M((mu7?zKzw@m&}}|zz5#uSxM!{zg^3|qe31;^CbTMt
znyC1fGr%b8eEX=(bo-Zpe^kv(+WBKn?b?+WBVK_ht8Z@h;eAK(+CT$<9BDjSby_8f
zV0MFsyQnu=Zw!Fn3?j^TXW2!(hgH=C=B{Z(nyvpZzb=ljs<@!0=loAfiHt({y}R_H
zF^}rnaP8p1?U!QK8j$H{ik{dCb6kIeODT{j&etPKE831l9#w?p*S5}zEC=Ig3j2f9
zUIS3H=%eoe`O{l0ahC}C6)zIFM80twc?_nzC>HD??Xk_*GkoSdN?yIz5?tmu+u2R(
zRIWNnFm@RRy$NUP^T_?FSV3_olfKU@8WDP}Zi~9QJKmp{{OBg<Db38@!_B}|^=M=v
z?d?wmK^DsXs+$YtzykZ!8Zu`IVB_;P2~nh64Q0>9HPfBe@|NXJDF^vW9{t+#S5-ZD
z>)Q6Mm2?%4pKZEymcZo)7PCEIJ{4!<9-+;LY%cNkxg3j$E+BD^(W%o1+F|?H#@%~i
z<zI(eljS3b#Fd(PWt^z3-~IOwzz`x%)m>oid%roT_VO?M@dFi>R+fLjr*{MG=&(Aj
zGNfq$=rip1>ZXN-#fJ7x#Hr2jxG;mK(uj}R{-lQJ#^)jrjNZ!%Vl(*eFnsL?ro4N7
zA(?+u_Beu`^Z->SZ&e<~#g32$$2*N9MiGJnd9W+DR;l*qcuJ`@{~X;f_OpF^pZ*|M
z#};vIl~Ir5z_0aaziB{pDf=kiEw{R9cH5&f$ow}RANI1Peb`-;_bc+b`flb=A7>4R
zE#*Sj5@}V3ye(+Qa%<V<Ug2$-9tpDD1Nn@Wq;I#D61}{1ZDs^^9D(X1B-m~Rtmk|O
z02xhs?=&)PI}&pfYt-MAG=)Jt=MVA@pr2+IkDNao)xN$|5aAB|-N$m{Mrl&YZNWkj
zM^B%#Rls_zOm{V@XTZte&zT%4<;{%PA5hF@n;f~Bt#0<P>+3wU@x}~|7@m(SbP7ND
zClNF#yPJBzXExi})pG~%Jv>Diy%(gi6>6-HrZ994%;yhD%w(!a1^AHVN_&@G25K=8
z5|tfcL;NC6H53E?)aEdEHdpTM5c15kUUB9TyRa#~6m+rKRn*aL#4F3vFd3n8wG<Q=
z?mxFE;6;5pmkalSYchNQLW@L-LW@xOE%rFIpTl0TY&+@|;&SUun$?tATv~P5#wxnI
z2D39&vg74Ax*j5N<@tlssy7DkrP!}RX{Xz3NLgmAn>Ru$sA;lX#EBDb05auG!-5C)
z_QT2slj5#y1!{Ajf173moVc#40#-u$FPh4yf2>KgRKE0Tb_PJalD#X15W;D%Ms4c;
zKz-W#LR)XHUVGnpP*n^<@I{*<YMd*KJSgd;foWV_(%S6drPxRAv`inzAb5D!ItG`*
zh1-I)F~@HkV~(;_)Z;S8mt<{z45knhHQ$Ei{md5YinaA`VVw*aNeb#axb$9DK&T?o
z?Sp|Lq7WWbO-#rK^gjq!OOZ#>arx-M{*|i*tP-h&)}nG`WQ)wGvAUEiHrL1fb59az
zOKm>CF`D>_?xJcbHr{Bvo>X36S2Yg%OQ`kWE$C4*Y;~J7ilL+W=cm=eK?hw4(}Q1K
z=)>Id1W5MlW0<0rS{Q!D6MDiuC8_@Gs}RpV%r#u~n^1^bgM#iD4e>6`MtdoO6=~Qi
zWF6exRh|U4^eYGxTzBhCaX!#;xO3HEH@%Q5W^bjD)Z<g~n$M>N$*-G-kF~VrTg#Vo
z)$;$*pxPe!I{Y9sBhpl5>7klEt|+2jYLxkN4|uTQ80^@&P@x3KZ(p|j(}J!eN*R@j
zy7|9BY%fi>Lf>7w_w5%q@@T?FY~wW2{io$OE_c1fmPWD55ktgCM^E`6&st69jp^P8
zqMNcR%zjd4n>&(-2*vlMpTm@V(+Z=caDa=&-NmHg0p@QS?v2p{k%$=#&GBsj-+bsR
z<4*ok?GXO?m+J6z26Y9#EPq;tbvL5ddnnN3qP)Rq3wZU^bIx!0;rOjYHH^G6(Mp>6
z2lVINhwOtz9ma`C%$T)AuW`i{(`KpRziHVAn&?bM#Iu`HddU_K>Ic0wp^=YN0vSJj
z$$gXYq_~m1RGj{)h$^*DriFRlIR4E`vJl*ZZApfng@?Dl{%b~1lbFD~Sk_8#lH#KL
zP59hjwcY`J9YRV_p^2K~O#{JDA?=QocFlgqcPCTE6|s*!(&c(Tz=rGWJj2%l<lDT-
z?=xEQGs<N<{-=O6%LFzr;T1WVpQRXNsVA1Ob9D1EeCu-2NFxWPGGeT<a;Z6>bHZ5u
zQqxS7wrAAYVP)NuAC<((8;;I6Imf<nx7fWDUh$f1HD*hW6IbkC^*M!@llQ*(i3gnE
zEsPSXJ1WfGlg9p%d0LcsuQ!jt>#`QUIjY!Ze}2VvCGK9#(nj&t-A3$C4|NPjOmV1+
z123w+nO`xOlqyg0X+7=;HGV6I4L)5muMcegyQ(=l+-atnQpBFZrq9O47L;JiJEV}s
zehYpp`e4|#S1BejafDZu<dE_z;ofTD`~GjPMVOXS@2x3#PrfQAy)({jJqY<{-UVR<
zU0`5&Ed<XmIOB8XV;^j`vpk+mL;9nZtLm6(zS&$AFj>D7DVMq@G2PWT6IsBcH51^}
ze{!*Ev%Zt}+Dbl+w`b*gFfImgc!BZgd+#7KwK;n^;s!7oni-7`A;nV7K21cCNuR!n
zy<j^jwN;N9uD$uNZxJ}HqTBq;{l+i4PQ6uVvQ#b|I<(-@xQ)1l82D${M{v6KAxK*7
zl>86Udt%2AU;(EgFh4JMCf}uAJBRsP$}CVraY;+jDS1aFGBLNLb%#V1(`h#-MGy!J
zy(*mG0*Vt9VwEErJ{`WRLy9)2l9@pJFXaF8y_9(ZXpnaZ`s*UZG>+QNogz$Ptf0@H
zqK}TFLWA!%a(hlyj2yyKbI=qkC%9zD-6X5ggCJyB`)QKzJYvCvPQHu6h)WDhIu7%@
zdJ1htAP8;X7WvkkE2}6N%ZeQbrRAR{KjZnBxkQx4j?<d?NB;9lo{th^^DWVDqfWZr
zHbC&ydajf2mm}MD1iP#jBGyxI0^SYC89x;Vv9pk+Dj4_8E-*^NZ{~A6hG{5dX~xx-
z9}7xZo~)A;gv4E3L>5T%W-dF0`iHX~x6EOUnzGEAQpqPPi&UPaib(+;(<^np!eSt{
z?cK`+NCi9T7BIBRS0c0u<01QOsTdC9*+cycLOfUakQF?l8I8YVnI^x9J!ksV!R@%b
z&y>uk-My)}dTaZ4Gp)*O!*fjyh%rsEaEaP0A&=wK{L%W(J%hXHW}%PGDZ)x@rvOD)
zU9Xd-An|EkfW)q|T$2LYX0o7D*8)Mnn!g!?+9qF^%)$^K9k<uXy<4^lPgz5R<prGW
z*82I{>LS}(0DCK$=PQrk8;Z;W=uDOlfgP7lF<k@11GDhf-AaNwNDZVr8+2rWZSxG4
ztYf5XE)E*#U2wLqPW57V`l<J&nZ=O9pVKLI2p861lKcfXQ%5&p(f^&DgtO`WPGTt-
zbcS4x(mqbNQpHVb-E1gr%3dZk0twpU|9h<gyB^q<Bv~UGc6cONCV)hqDN>v(2UM`9
zreYUY9*zn{SwFK08()}l+fVND-y_^V4Qae|f0HsnZY|neZ0V>uA(h%Wv<XOvfPuCd
zRvwo~ZW@^$DNJ}y+W4(Zi*4O)+*6;oLk7*Ad2&?TVou0}{%tR3WM){%Byv^#X<#e&
zp8B(DwweY>li<i3{Q4*0wiq>hTtQ2jxuO}k>ZQ<p){n?kp~I<4zD1H#x$vcb-dN3|
zqdTQ&%YFWKL*ukfkGn1df}qx_+$nuFR=SUWzx$+CZZs<>Za%-J|GdiEEqvVBWZ=ae
zuD7<MhQ%-AQ!*=Hi@E&v&w-!fFIPVCb?-~P)e3HsX0L?p{RBnh@187mVU2S)I~t~V
zQZA!JYRV7&*nOu?ya*{NI;J&YSSZKcQndfUEaBPcE$j2Ip5K1Y2vMqj5F9^W%%h)T
znmDM0!^Ex6q?D~Aho|?wljB$xlW^i()*kF1x!*z)j{w9kw1UAFwZEzTJM#E2`aFdz
z_6?*!lG99D9yY4Xp%|xHFj@FG@lRJ%#-yV1$6(-CtX(nvULy8BY=(!$)m3BWaDUQq
z<6~`SVK1DRUu+oP$GUepejZHUDkNVGAPC-eYMcv!9qiXQ+EgX)p#0k&+A9d|X2Myu
z;Drj$8?fKj_<5(FH_wUR!^Vd{D0R5rWGR<#v5I&?){h??6y-g{yMkW7lq%XpD$F<R
zhQ2WXGfhXPX?G<~YPy+}oo8JfOyRWOzVod772p~Q*2CSie;E0*)fxT(Cd@gE<%$Zk
zBX6%&d8g4~EwGaB>l|$1ybQ99?V-^8r{>oOHKU&98;sgbbi73S7DopJlt?>j+QSTV
z<1-<zx^HhOzT-6L+!rtmKBNVy;%e`rMU<oCqC{z*zwG+G$ZO#fooOyN?w?3}C8Bq#
zelX6Jb^xMw+D1!-!b=abqCS;-USsxMg@i8oGBuhwoj4vifT&m4mU-{uI(FA9b)>c5
ziwwPdC5gK2Dg57mf4!fRevStu(NfjWiN%GO4KXMm_W0De+!HXg^how8ux0<6#11m4
zhT&pZZ8D$4m)9~-&vZ4DPFVW)P)?s_zeKDyWd0*;#!wP=pHKP8g3itP;n1M97sSQ2
z5M#pR@_xL|U8eKf5-j}52Cta~4L>mocGd)kbC!N7*T5yY#Ts1QR4(wOdu}oxkpxD<
zL0CpX&r$O@mCja9{ZD*#3ztX?xP4$ng0(e>Pv#WbIqYwsa+h9TjK>NatnHn%8wns>
zJR4c7a|o+omT6gXoU>4#MN8eS=ONa>5|O{2SH3ffmK7T>0l)`?+E3Dz44M0S*_o0C
zniRY&4D!~iH>b&AP7&ZM&Wt;;F<~!>7tLfaXpSWIR4bI})*(%EGsf&>YEyjG+*LI=
zjCD&#MCrLg5f!_7rX`-2eGQ$n<W*uAUlX$Pgl`+Y=lbxbHY|_T*6ei!mMMvgeGs#w
zldpsPpj*NBXBE)XyES!)WwA*m@T^J*tugIZ6Ancxyp4T5wILMgU`gy?@>3&A+f~yH
zbuV6hz%A|i^(imJu=_a1XasJW4-A;5Qy(7#QTP{Je0<B`4DApy;CDn{jj0dosNd;x
zenKONpOm>9&>j%fBfx4!fqBC0&(G@3*7Gqt+P=Sc#=X0A%xHO^tlHu`8wIpThPfYh
zd<#vjZLxJ~)2^Z^9(QyLbX#6Vz+YTN6`0;bqmClXuY5MvH6TuID%xaeYJx#AFgA+F
zqMj`;uD*?}2Z@*c&)D(N)wQzHcWE9(BDU#6BYm3M$^%!OVpO{b_Nl<YXD_!T(lJv4
zMc#fH?x8miHe(IaEqI{XB51VkxoQ$BIglGqk)!;89m47}Jd3L?3}G|{!wYW80)cgd
z#xl~hW4q7N!S=@VGafF3JYc8F%uPG!)(L_ims`kbKR<In7+G?E^cDl*E#K>>a`<pb
zj(Pkesh>B8Ul8pgwa<?x30JCqE||~t<|(U9g~H5~8GPD)WqQ$6Jp1H}l;D_{`n?+?
z=_MG>m3BI>;rzgy>cScVzNG*CDts&YU_~W_VXXh~(D-Fl-6Kv4Xaql$r4<$3qPNU)
z+nC)ho=jcC{O+Fd379NFZ^p%Ld}ww8y5Y0^TlK7@hx((u9p6b;&ylSaY|9~C5ce*8
zX$N(rIL(m+yHGqr*kT6S$A1om2J086zCL;m{*O;uz0py4Cea7e3s<{Wqg92pKdBpk
zW2Oz}moaIS*A&!lF?}R=GLfIKiE1vxro~YS8f<xe#!K>En8J~sp_QnZE#;i1+qd3K
z?7U7`6r}hl3`hL_Wu95LIU<{PrC?F0L;_m0yZ>!CQqlQ!`TN~E2QXSVh`MuRCzFv3
zx-g>y?cZfED&U9?O%y-GIN#H?-W;>u7jZZlyxdm<x%EcQ7kP`TKV>rj{)O$iR}s5z
z1ol92h*nRgGp6CvR`M%inz*2&E6jzz2-!>vC?~x{gV*Yw31P()$~g+(Jcl+kKBtSQ
zh*E?o`ntQgwZ$kF9BzSz{$?C~po<MZQ3}ZTn-9+(!rTTCg7iNROE0~<t-IbRB3!5M
z7f&1@EZvD&?X>c?eLquWT2fAIA%t|oi(&nbnR6%A6@+Ew=|O`d-SE|y9t%O>IF-Xi
z@WP5;-iyJztwm4^jv^gRXi0NY1LaT!QK8kzk^9sTxg%b?h6!zZtdg9>WD`$OkMjhu
z=WgED2!t*I#0sbdZ$S8NdHVkhgau&L*tm+*%eOyp7znXpNcWjSwqF;n;^i*t$s!8P
ziV|LZ&P(@r1=m`cdNG&S%hdFtf;Bcod_rrCdV15e`Fx#tc!y!amfw6`xZH{;cslP8
zH9t6<th5+Dz1hyL<C6x+8*7OeV#Z4?!rrXrPCq4R%xZ)u`9>c-bI_RW%<|GcrV0+g
zH5l%DXhaDOvv~62uEz?(3I!U7%?c}ztl1xj`mL<pMKa?0(=H-7gFJ_F7d1VEX;4=w
z0yyu$I=<&h${^p(-I79S8Ors6%GWqnpE}msB9A7@=k~ge?AbjM5XN6U^D_;Sjv|)2
zEBCJ4v3!VaA_f?Smo!vVg=Hzf+@NhM;J)&5<6atV)aGgHr&6KC;r{}DiJ?_%wEb>y
z{h{|M3o|+_*WR<j#=jpgP9z3hNcpak>faWo_EeAG?l?PSChc9^+N+3UE_{5RL)3QS
z*JEYq<E>_S>*}dh;q`FRL#70)RbyTgflzVt{y<8QTUvqE${>TYvy-wN$tVfUw<)_?
zS#-S4=YjGY><v;SxrB2aoLpErzI=k%f*Ppk3`*VRZwnp(Y=psB7NJ|JlLN`8{l}6U
z7xy${VH2^Lm@tvmi%V?2f;?FXR)I{u;o2-m*WI~|XdwfqdFTrWzlxqj(qiw{{q3#Y
z0X@{6qm$HYz<~=UxzG3yA($hPU%^&`OCQ$-{spW6Ij#)UHH`N7#^T3Wfb(Pf4`ZPv
zdYB%r<^H$2+?7m+_QC=^{FA=>eKdDs*PT<d^5)@so=Q~~x@$u{G<|qRPR^8%cjZ@1
zld0lGj6Jm7Yx?XJejaU$Ql6OoA=DjQA<zX3uE;A>w;86K4)kvn0tPTv7PJf<4RF_0
zyzC&TC-|^A>nFodKJ7nTGqIBuWA-y5;#DS#U6>UVaw-!Na_D!M%Xu3LNldt(YV<qy
zAaWDfv~h12@Du>Mav-gr)9;2kMSw*!%B8texL*X$6&-WP#={w(2hk>5?`veOJlQkU
z_tY#;30Ty0`7`UF0;Qa7=^os2W>5%I6yd5n+$-wp9X2VIy~!ErWr{+Xj#&1ZCRc4x
zF1m9p-+6(KdLhFP<+0vwz_!FE^4)Hg54tS7V)7r-C+geNsRK1Mo%2N7!I73tl<+2L
z(!Im9HN+a9e1A4T0CXHE`6WphyUA)1)nAu>T$OfFn?->$C4_o8G@<Z=DTY}wSsC%P
z(Ka2n%4&uj&Q=Ud4I+R3E<rSfff^glan8xxMsjV|a!!h(Em~DV?_Hjt3<ww1>58(*
zU7wp=Jce36)<ZLYB;nX~ugTL+6UPibojG=EC9EySCGu%B9B4%BcUdlxKSjT%d(hY}
zE^^4{BflpEZOI>m(_$I-v`Nx>+QuLhBqSX}_MfbDe9vrj+iGw+bJIm7^?@sQzdLCv
zRZ7ANJEn;~6DJnrNe(<_Blp4;v?<SyE0!+Ko~|PAziiApPL_KI?03T=nsDO@Ov=@S
zmeoVkB&!N7qFcG7=%uQ4m!L4$@rKFiM2b|aE<E@|-TilkwysaB@}Ko+`lFLzTM6UM
z+p{yIz%{$2TTY#v^C7~5Bxoql7L;FGk%!~b6fF6R9<cnwjkWO4;lM>UR;@e90VOi^
zmSeDmW1%d?P-l=t<@C-rAPE1#)EFqAQ#-B;u_C#==^HAG;0nWrl2rJq0u?{QXbEB~
z=6<v7k$gMJzl21p{4BzQowmd6qO09fSvJKsag)lF8_p1(BK`1W*G4q;-e^^VRXd~u
z(IH1b?CQvad`7524rBf%`x;KWR!y+_(yH(6q{r0ZN8`jNrC|P^sjep6Z3fOb7`ZP*
z@A}&EH-qUr5bi%{O=(Q;UWq4nk&Zw&3VaDbAK@Smf^rJy2-WUqF%k&#p<}(l2yATm
zz*CXyv%+5HO4V5tx-n!TT*0pe@9a%4MjPQ->O-(yjv!}RwY5@imwbmWo!ku>vmseE
z%zN!bFhtrXANn?blnkKv6{0Rs*BzU|h3V{{Ju9HeZfp!|UK&H8oWaNjDS6(5Mj`Vw
z@n}aO247G~Y__0RpkK+E%akHUSO6<jl;v>`c{!@4f4}?9n4T>SVZWgjej{nfsQ+EK
zo10`m+-dFyd$E^^2GoC3F?960-Kvd^uEg<BQ1<px#QWe6I{wMmE86R4c8@1_=Ask9
zW{`@wAbE-sP<Z-PHq}s&NQyo%`TRS;C_j;YY<T7TfK6I?rud`;;wYq3;IKxRrms`R
z)8G)Wn=PMZ^0R!j`)$MwZ3F?AZ}kREnKl$SRgn_E6uBBPa>_b$U*6%AtBc(KxpiP=
z>M#rWc!A^Q*8Bo`Nn&p!FuJjRw6@S(g+*a&IVbwp%S~6>#=Hj|{fY8cq)6XpXD9d5
z(pN3lmtr_M&@2O22nB!V4CV~zK~;~EQ9GMAJa?YVMU$5Ry+t6+Y@ER1487rpG~i;D
z;3(9rKGj=R+{29@|MJ-Pwu~0KM$zx8JR7vG*@}IVfpQ#5QKRW@daWQqJH?Uojylrz
zlgy1Z=N*&;tF+ymI%}gc+uxqo>VowW+(mFiud*pB;r@Ey?Ln03dXJSeFB|-}Elf9l
zT{3lSQ*9d%uFjIZLOw*Cf=+zw9|k|NelqwheQTp=eh#+;sB(DhmpL{oQ+{3w>>{{y
z)=Nl|QNhVh#ozj#F$D|hgUpOz^K|>RfcQ`!dy^uF7_%TGWp&^8w41{J8t(M6+m>%t
zT8sU(b|ZkrHaJKutp6Lmf+?E{yw~3iLfemIHnh*2F~!{xGQK6*nisvZr9QKfLVni#
zI(w^=@V2DXxCboAjG{%W5>$Ku=fpo(x6|}Q$B<cTcJ|8z@OSHt;!vmI=|n|`^3*t!
zX|$~Kq1$U8P#p<C9Fqm~WZs(n;XPvIbqZ3NCOAa7M#w=`fvb??p+SPvdO+lg4)!XD
z3fO%mH5rl7d=Q}nHW8yM;*eK4P?dL{3HYEL1SXkm_m5f4+=9RSW=KlIO?7Y>M<x&v
zvSvvGKkc|U9<ESga811##>nNJZ{_co5>tY-5Yk*qc`<F4S!EXq1yx<pR71FvGrtXG
z5hwAG{a$i$kE}EkWYdDzm%VBh*C!%dF3A)r;jV7r%Yls%!s;{5sFrI?A2(|`G=dnI
zDmrHOE<L<3_bTG;J}R`>0B^PLJwiP><$*OJFn}a{sOua*1elcbEUppi1F-T!D<}Tg
zon#SF4S7Tqn!ARXm4&#~19Vf=lk;DWRjbTvqsNusF_9jXQ{j{;yaV}}Yg-W|M0&yy
zu<*-2933|lQ5}&fm?6ok;=PscIe)<=L*<D|8s+!jeOMbN-Dki??DkTlx$7*#s<~HA
zxOwVp?r&vN2CmP^`b#16JX>h3Hnj`U<Kn}Q^9&eg;p!G_N`Y<Sa*MjBNe7so?v}XB
z{Np!X$*}ujJnVyGGL~xI`FpNMs+&}+hUmmbZbD9HTuLsXW&(|V!L^rncl#cMyC>-_
znf%dcTyIjjq#GYtvp9{^`|LeDml(v(cxL<1vPM2dbvHG9xBGJyi}~+}+YO69F!SKs
z;JB<WIDuxhP3P}X*`NEc!`MUv`^GX0`hmBz3!zTkj6t$QjMfM?jVC)gT)BcqRCOcK
z<&KKyZ`FKd%G1nA8vL_T$2h;H_Id}tiR~%l@jwkh<1Ku9-laT7@HZ=L1X?vs8xZ!-
z@3ny@2x-s4-YMv6FP<&b82K>GhiVMN@16n{Ln`2&d}Ex$=27PGgZ2naz!ENl*h%qY
zmp1df@y^y4z2NyPQ<{}VO^TJnxpr*xBYD7bxhASM=>3;lWWX-PyoQsU*1EKNiasd%
z2mzOf2tmgMNb9JdHwPP03s(Zc4o<A-?I9(T%%t7>z)n6}_O(eeYFoH5VR3BAYU-t#
zwh$Kl<X&FbLxXM&C5hJ&%}rIMT{6$|v_7g{+x0RBg)X+M^WKcO87=WcD~DmXN=Nar
zO~!R6cMX|s6sNosRdl~9+K}vzI;aX*0x1z^<%6t^L*|A%lL}2hTZ#D!o$YB|WkV*r
zu~efPyo`|i)=a86K3UI4Wq{S;=Wg=}sQw+b%qa;Nh2$El1_(`%uIw8V7Nu{>Mar7J
zmgEFhmW|q{M+&8%N&6%-M5WQa1#;wTAx^pDr@f6a*$0U7v_x6pll)}|F>WU6qa-Gi
zK($W{N6}l)pQVJB?S#Hc{PNtT?YQtvRYHjH#w{ze`PXu&;8?tK)w31?R^6@`9_Ri5
zd7*bY6W>!L{JGqzS)8M&Ds}d-W2;bR>%#oIPsf04M{IS5%<;Zk>m?bU@Pp51#gVwW
zQgyuz&Y-{$Nl5g1C0X||#8yT~u>z5%hmt^83B`3bz*~l+w%C-jfbyM-3J2z56MZt1
z&sCI7vUy6vGox8>XT(cP!U2NwEzYC3zVianE@40%60+A0`5XbXHM6VYbc~eOH(<r=
z7T{LaH;tbL-$qkmHI$65I9xp@=jsu1*V=tKW}8nq3|O^Qug_rq0)pPi&9lg@&D3PG
zJ%8Y}LEG3i+;YvaUFPdle1nTVlGO<hR-_%;J$_%k6MEj&tH32;w4gT0Fn+4k)&R3M
zpy4V^k(6!fBXk9ZF>^n|##3^r^<)rM=RfI5V4t6x9LydR6!qZ_Z0=Y?bd>Ka`@4~g
zwS2SgrZccI%4}OwzgmNYXVL9!FZi1>z5tNiVG-leZ$%>n`!$d*{9_hRUKK{ZOR4%N
zA&P164$6tR^^N`Y=qMcAa&jpFQXZYg_{C!bIPSD<ig##G1+xYTLRB^|@=krlOjZ6m
z9xQkEKbx{2(S|R8n13AxZ_c;`yt*!`%CiQF>JZ)O_s5E|X+*uk^Chq~pYazU+*?nH
zE6P_o28iZsEw6sNa9?=PHUxk9>-~)XE*r}E68tHk@BjmkS5KNV_2H(#4puJ+pt8HM
zT=r2O;LDW)*<tP5Io%c~1wqj;`9k8yS>~K%qDz#k0;O3&FGWcgb%owML+1VVTBN;v
z4LDmYb`QAh4uW!3ZqB<eLJ#f(`w19VIn81Wj8^T}A7QXKJ<oV4C+C)6753xZfz0>l
z7{_k-WS}s<0b!+WU{py0V2Ii^jjeA)r_(2oe2#-(;eWwB*ke?#Uce=7L}CXN^h5Si
zh^x+@R!n;#aHr^c1h8hqn1h`UACHlDN&;2&R&{86qRKLq?1sIQJz4r~o&o4rjj6O9
zN!I%VVlidu#d~yS)CHUu<ao(h+!v#*#hy6){4@ODq9oO$${$*I*P5ZdFd6o^!`X{H
zG<2BL{ITc4L)I%Cj|U168B&en13?+B>u1|$X^DWviGC6I2z+mItAVWs60bU>@v?)n
zw^8FSgVy$wo}1jv!4*5+vE-6S`NWj{p|fy`drc4G-h~?5rtiBoItZ%5h&nwbvR)^=
zUS>(IELroH3;f$2)2BP5to-zqnR!}5mwLOE<o&vk#^Ivdai!GAI4=5Qcu13EM&@+C
zUH6`>bTg>_te2bO87`6~DPv)B_{aDW)5*k#j|qD}`#AXQQIHss>xi-bL0_*N0ZBxp
z1~s#DV8fp`fLsXPI70u!SwR2v@b53fU^Ti`Y7~R={Lxr>_*+(M&z7EYv*snNBV;J#
znUWCg1$qCi0AYAUS{9PcF9uDa)b~QVcTB*u1<wJ0)?BO9+hNg+2nBw3?qaSq>}GDi
z^7|l#*5BZ&R#qr;@>q&oxHBYN8?7wHpLDG%rYIq0FDuE4OQHdoO&GB$r*Gd7DqtG;
zwHV{Ia0wZQHQI`7m%h_53#{|&as(=7HLai8K};ht7DZbZHW@4IvmY(P^<`4tHHePl
zTY$5~%HkWV8AApICYv@ExoT+WsjRdz=ze6fSR;qqP)Rd3(Ix2c*8Nm&d{DFRnZiwF
z&u<Z#lYo9_e|s;y9nliz>CZi*3mF$7u8F?%K4cm!G`@+?4%&V*)*Iw!=4p*Oy4ACX
zDoHsz2c6#8;kSrf08$BjPmY<_7XMC&9Pj7;WUPsk&A|QO?|mwLS#G><>LpByvSc&4
zlj0=y$#Os9-(+7KHzrx>mlYT{k~?%8t1fKW&Rui6@+E~&Et|*@eRq0cU%%0lO};D9
zig(KnC3+{?jgJ0eov@RDy6SN{YiNpyg1USZ1bCh52=e~g^en&>4x-mMQ6j20r>l4-
z{}8>l`l|~VN5e%kHrlH=%sj7F@sQ*fsmDx5A|TQ~7nK9fP!8#4p2p2vkt~ttl>)3v
z6w#oJOmcv{IAMg87JQ8y;u<cbccZ|flV{$3cs5^0KsSG`z<GNc8%w-^PCfqljNPV4
zQuS~C!71zd(NKV5M5Mt<So>^gU!+->lSV4uQt-fQ&3RT$cWe2Jo|>Oecu$7Si54?6
z?JhTJ&Dck39&W4P<J(Jv3<$TUpq99*qEP?d_W@=ivlZSWH?<lHS@~!~L(&nTsxJvi
zBkaYH%F7*1V#2R~^QhfePm!PVDED!hwuWy--1L5BH&TBxpL-)al7!3QD{#lD86scb
zOW>mZC@lK|i0yJS%IzMh&boBevohTl6qZ~uodUP6SN!r;h!i7FKd~O?Ug+n(9?x~r
z&gC0wJJAa2`UsVLOk1az)kcste_&AfNA25^ysZ-*znZ!%wD$_!f)bXd!1R)fem?bE
z(~2Bwy}La)*&tc7ZmugZx~I-6bYG1S1?L_zc$0bYM*_D3x2Yiz&mO*0eIMlb%<=cY
z7dkQ8n789M$O8i}x+!Ah3(<T}!!6!t=G$`&Ex@7P3AT-h0=|^LyD<sG%gDsz7$3q=
zpYIfgV_lpWT_v2POn82`rhZ2qdIFt=I@{97;wk9uqU{TKxtoHKtRHF<Twbw4pSzpM
zV3`qgaWvt(M&@cyw@we%sebH`TGjd^OXqmVn<#s;8#&qBS++4gKF(hif|I!9p%1M`
z+%NWDbY^voDeN4(<*TT%5NoO1^!%za8ll;-(|-l)(sy7xya%&WVTs^7I8@GyAw7Pd
zxdN<s)Wk2niV3}NyZ!njX(fYn-N===-(kYj`P@FTYf=Fa<+pKk3J?*LXWeGv#ntOe
z>YpM}FR`&3fwHous3SLsE$ZkqKQ~A3y$H9f{eb~XQx^)8t2#@0(y=Wr$rV>k&UU9+
zwa1MoC`e(VdN{DF#%9&8{JxVFXOQ3Lo&dtZOd%hc-dz222e%8g&JLUY;QWao`x+&r
z4HN%iEI-S+#Ic@@kmjBc7$XF%7g{OQWtF96nwP}WDyh&`R^a1lLvJcdB##%IHYL%b
ze{Dz3g30F1qyWd?%&Js=_R1B#E~CEr2-$1P58ve9raU3tyaa3jAI?{YPCBz!sVom5
zldyYK7^243oUyix#N%x@Ccu3Yy4&rhJ6ZnAt?j(KHo)($CUZ`0P1s_(^jfS9$;9<n
zusJ5+ZZUTqmu~t=_<C#d@$lUk=TAWx@9|I><{$=_I=NwsS5?0-H=R!T-yjQ^C4!x%
zYO!DMofZ6Mu<_JiZ+#YVMTp#4lWvJZH)5JNj?0EeVvV>)dV2SJVtGbFTq}#Gj9I4A
zU{g4)Q8nB|i!t~W_g(;SnWAW5si!?om35#Pz_Y9YL!0L&^i7$0+O#@-(V+iI9B#SK
z_6!RBw=48SA*?B?uDj5Xuf>$D!^Cp|gXA#I7I6xgd-|!FyR*tKVE!AL{q;_~hvsae
z+d8E8q8nDtBJ%e{uy}~mH#eKWW$RZ7vj0^)SD&vpfuh{dLl2?`@Ad?9oiE_9%3Pyi
zf*Er5?)Yb46p?%tLo%tsCvNr<LBbpxj!6IW!{b3mQA@~pSFM}(<<jeBGD!8WQE4}w
zSQj{|^buAFT}V=QRd)7d1tXS@^e0X&u(ENj+XVdR;rNHwB#T90!SO!hs{!Q4{$E)W
zZV*MnBseYM!E63$XlqV-^5MOk>(^0Ny?WWN(J2RR&zeU+F!!wrxj_b7l5%v7Ic0Y&
z(V6UUD4gmH+m`33oTM?uA6}fuDJ-P6aBYF!T-Z;>`vG0<@Wv(f9_H>U9@xdHN@%pA
z*24MWWcIiZ$gjo^@kldVA)hc%`zli|?(z@KN9o>q?=oNob3TA86TApA#tv`Oqna`w
z+;(uN?Au|vKRI>vjD*Lg(s>R2F%WE#`MP|z_hH9th>OHIH|bAayO@0Xsf(@3Xz^}W
zPwniN-Ui>4tXsTen4ZOHMMCGf)(Stzh1r#=-JKA?Qd)LpNz1FbSDgzYq<3f$LhkHl
zwvF24JAX~R5;75W)hs^qUVfac32MH<lxX+Jq}f}8T{PoT%zyg2q6G;N8^B6qzzyVB
z;}wIS4AemS7Je7Mb1`l8D@D6ExZ#UmLRfZMquB02@OG1*mcfNd#h+j04^S)?=fm%*
zWAYW>h41p4Cs5cGwwm_qamiMV>+G3yiqPht^TR{o7L=wRVbbo$%J*pa@FOVXtZ0{g
z2C&H39sT7O%Z_KYd<V9`FU}46aI#q!vNZZje9wCR^phnEv2%;P|Kn2&#s7HRdVvzj
ztA+#@p~lnNM6>|)yUkC5nF}`2KgZs)Fu(29S)IQW^U^F((VKA&dqTBa?%1h)?nzyg
z_f+B1p`Hx&tEy7Ss2>TT_k6C(LBbUM<66u2bdQs66t*n+Yud`5E|>ml1g~6HErQNG
zlq2M1t{83A%5$DrxX2WG6k=nB%x-gL3z*U!3F&3M&84A72Nia8EQzL6OIdN#ZwNbu
zSo)<N>a8=Ap-u<=pL>a))M0H{A)ejj=?XXxs5Qxoy6C0HR*+1LniKRl4apbv9%exw
zsz0cI_1!f~v@<FoEw}a9@jpAQ+)C*g`sNz<gFNoo%PEQ`PyXJx9LDPoG7GoJqJ*wV
zQHQWn;c}eE6%YrI&I<<o_X{*IkRT;Mucpd#jU$LXO>qMr2dAsYM<F0RGsoeX2!uoO
z<8ZBjw1XB0yh5teVA#7a`krmixwi6Q=xM6sgGlaP+a0-Ic(*nUNJ=$>jcdWuQDr}t
z^~A^3rM2+1Pc@OZr9+s^&DDb6Od*M)uMRtVPDyge$o|O`Urbzn#?68?IugJJH-At;
z?Ia4Jgx;?@#Dt%2P*gPp?9Tk;>hGg!OK-P4VRCm4Uk6@mK$x_<YurgXcY|_sl8Dk}
zR4-3|Yq{WjW-azxOU<uOU+B^pbTE@wlP4hK)15_}+#QPhi>a7@qw_+HNQwv-eqlIo
zwiQ#w7c<qavThy0^y<^Un^byKF2B{?x19Z%vvm@V7aOgD%ZPcW&0DlP$q&kbM?h5+
z`z!2fG*+1GsV!I#;Vb!;zQ?9{AH+8nuHx{ZLb!doC8qs$nKQiwtclH`=quo%sjYx1
z(5A@s^e!aT6UR#_41y1~PAn?&!^R&=EY(x0uCWiOY=ia}0-l&j_NOgOWszQ+=^epc
z@BUF_uY!ktqZty-K(q1=a2qnJ)A`Ojq*)7aRV@C4%zCBYzkG;L|0vg54Gs2e%)Ad7
zT12PI7r!+OjTl<YAR^E#jpi2i$~8)4I9{<>yG|Anfp%2B%`KWa^XLP(PMx?((VcH;
znJO3Y?FAguULfr$u>|~X0MhN(Z|r2YS<x486+`$Y*yrjNWhYGN`h14h$gjSl`@Sw^
zcx+;j6xisS*=fYZu8;SP4j_Pi`{Y2z{o8Db+s$zMOcw5^phrI+99{@%`?LboZI{b?
z?!SH)d<<qC*KJ>a%`H9-PvW$(o)J${ncaY4awPjOCKu40c<rv=TU=r*2asf%#S+&e
zSjmp7uQuXNGBWU&V#S5!D<<DF3#8Xt7}*3b-t=@WL%npC!OglsPwrEcwN(`sDd3hP
zx6)2Ya2>~Uc0w)`9@YGKeE34Eq#@&tk8%gCFa7i^SsJ^KkXaCKNVpbe_KRV|meP{#
z!7_v{2Ro5D8N}e6dXS8zsS62R3H%lqV&r!US2S0h;tNmC=lnX=9@<C@Kek&s&iNL2
zE`?w@Y}e}Y`&t>WBMTg)yzUtTEd|d4;e<FWzP~&e^;+j_%A5$$!(ff$ORS>-w#hni
zA_|FgDPR@hIq_W)rf}Z)^3Q=u&$J2#=G9f^FEHD2n{q$)#AN*%A14@Jo9p3*&04{q
z9GV8DV~xw$6WSs0l&otfna>wucowp~Q{ge^IQ#xeIXL&7&s`03vCp2^@#5jB@AtY7
zj}EEcC!Fl{8m~`cXPMv4x_9J?%_PMQ+!_@&Di)L-%HyEpkPqYi(%e&>bg}sf{2KdB
z24>(O7jLw*taJjbeHq#ED~X*+k=7FgTdBkTtk|1DaDP}2mP8HMQ+&?^47Z7NG<!?u
z0F+r4d2uyj_V64Z1@2+GM4MBPDNAU0C_g{9IPuo7alt<_JT3+yAvR;o`+(f}R<hA8
zN>fA86)b>$<<ES!C`8N=(T7qY8E?Od)^DiN7LCV#QAwh-Yh!i@G-v($8<Vnv#DqB(
zhKp?y;acg(TS$`_D&i)NA?Cd8Z1RQ#i@>HMD2%p0b`5p<=4&bWo%atF245CvDt9!(
zaPvy)2BuV6`Vf7v)LK>j2PiTAkF)m-YocoxaIGNHMS2rZKq;XqAdsjuk!GiNY0_(`
zL8MC+lp+wMi3JF~L!?G(5R}kcz|cbo5FilF;QM~x-e><iC%?G3W->Ett(mNO*7MxA
z{|_&a$!!X3-lX=JjIjS8t%dmJJ!W&o+R}ncof{>Tonl?@MZY;XG&O*ZH&+d6TfpN?
zKLkfAfZ<#LW<N~?f*EwN1PZo_c76OTsUY#K-L0i#3chGe>EbAg#7)^q-$aXKvk)`4
z!LOtEgNNwMxf-uXJpbNH#T<L#Am`XWpbpmxt4Xl`-J7__4@|ZDNS(eQN#m8A<?cz<
za^=lYf-?E)GiU8I$h{ms%jlO}h&L-S+W9{kWF~j+%shOU^efx1&~KU}Er+5<h&C*h
zdnW|{p7`hzOvOLsxYjR`Feda7E`awtyZpOTyg6$EGjlCvO8N@}`YN%=kF&8=J6Qc_
z)2#^34?9#Wf8P{ElUHOFlyD!t`uaGIv|;;baPXAZo_ik<dP4c$eUQ&ilBZV$Pn4%g
z?B^4bH2lGx=d&tv*v-=F@eX^N=2Ygw9dj&CP1DNx6Kc21Kx?vzgaGN7B7U)W{>(W+
zISzLT1*#d^KLI~qsU6k3YsrYbj<sK7<B|4bV=inmSh6Bu>OejMDTmkMh16d&E^(sB
zZ|sxnD9(>zzcNQtVf5+emXU`<t&wLlgu^FL!qHQB_cpX}`57tX*f+I5oPL_4GcX3b
z1^x)f`thW7%}~i#(H`UQ_O>~yTY*)9{pc9ZIl|r(s0ZSSh)J{~v0mAZMsNQ3r8PN$
zd|-H%5jSvjk28gzE0plTgwuXn)(>*Lilnr2<%N3Hb~Rj3;gF19RL|ErAXm|4=JzrE
zyc0ZctAYJ<9An#_rTjerf@aR|GFH8XNg-$Bscg>59s-G5i1btYL??gcJ@BP+N6)Rd
znTX`AjOo<C%JE-|8L=?I+0jCy$ohT#+MZW#`uwt_y~2zftbiHYGV(OzT@Re6_~o=x
zrjT>Uw38=FOJkl#%&A-tF{QW0E7QO%DpG{>v9R`M$y@fzGbUYOw>-8CgcE|4Y?7E1
zo%81y5&T`EAn7<)W2@!G?+>YkD|3A^T-yPWQ7~d;*m^4p58E39dv(Qn0tn_8^ZGq4
zIw~y?1cz%r3icvr`TMA6zH<-b6Wu#0)HA3=tTx@lu8%`LZ!=<z@aDPRrVuui-yeVl
z9!1-hQ(DQf5x1lIy>tM(*p>9j)Zt;lPG&uo)W{wk_sl?-Hp6l-N6S4Y`7W+0>gEZK
znYzwO)lL2B0-`2Z0~I6{$vG+7N*)Mkx-_kxax_Gi>3A)`h(OBrbR9{9x$=RUB%qK<
z-k~A0futZ$&!uxciqZPE++YR$(pb0w&*{yMO3-K=VIiz^%x^;rGiT^mrKpL>Z&tc-
zrHz@&X@pWUnf^PK%pufAT!0(WeFo~Qel|3FxHU85wVI3^!={E?S=tqYxbeAlLnAE8
zx^bSRDsWKT-3GcRlHT2Ytfyv<<@$Tzc&$%S-}lN-oo*M2HIK$*HpNqBg&HA;=Dw<L
zW!j%SfND3H=qzlxG#&FMETe3f=p(%j;M*>KiT-wnjTOr-a-JS>h)-9sqsu;_q!c)h
zn8T^qRb@y*4lQXSZ3brV7>Id<^yQ1vV$#Y%yIDRgsx4pO@}O^)r{3REfNQRO)&e;D
zXhsb%--F%UN8&EtM0w0|zM+Uep6*WiRg9Pio!`N=Ih0+OO~T@o$FQv?UZlx=!Rh7Y
zw|DkU{5w{c35SNJGidAPA3oL=_XA7PBrF_JZKqqEN8CDZpJvAU-R{7-3D>ke=^@&n
zorM!nLimLU0SBN~r!(Dnno$`F3l4_NOGTXq67ybr@|?3Pnn-rV!K1u4cUl&B@8CN$
zbNoiKq<(3FO(Z9dU^vRBpW$8Lj-4`jO~asou15)aEm(m&{>aUNT)zAPpum@Q!yh^G
zDv;Cu{<zb|#M1k_weBmYIvP}M*h%zL(9k^?Y?m)?hl{0Jg*+tX^uopy9O>o`@e6)G
z;3T>1vaIkc@tsODy`RYDK2U)e816T%(3^GH6lpNc;cDC07)GVYUb^s`80!@u*qg0h
zfSsEB0$q0OsKn;+`yn6NQH&l6{~`uGhW{!tPpbq6GfY~%yXjLP@9wF~JdVW@GkB1q
zK!G4Xpj(_r*>|6P@9MaDkDySDJ42@B8`3_`jI}oFRL<tOpP2+x6d@$zt3wf_paPKO
zgrUVG5IQ^WFZNRUn%VI>;m~a>6>r)~%$ZJ{f#+-o6n$QMGr#8x(Vu@;<#zjMW+Rj1
zL(;T7|FU0!uDhXT{Q_Sv$x6k)yIB}8VCeMJESZ=2WXxQP2wFVSBzTK6W(4_vD@3rL
z<Pif1-{T8Bn4H)k9)L8KofuP?=>a~ZMA<0n&!=5Zlz@xaxu9&+Nw~UUW^^4tJ3_>4
zA^m)cPg8V|;W;LZ>VfI-zGTACXp#7A`togpp%qfD9vSMhOa!OOh)S4#2e2&GA_$b1
zB3y>#tu1I_v>>G7D+Q9~9O{wKypPL3Chnx8XuD*ag*N}ZYSz{pBqUtxw+T+@`7op`
z?6^2>zr20@>~U~0N}~VpbiAkE{t{e&d><|VvD-LW_RYnTw+2pyb2*ZN>Kx7#$}JP2
zdq;sQ<wIA3_5b`?CCxgPDUTm*czE?5J0SJt;GnG>H_9olbLk!N(^At?DS<gWVl9bk
zYcyBPlEjY$3o*}L4DDZiT63sW@4uTd>xnsW_^23;!wplXU!|DiLWtrExBe(_@VLsA
zsbF4Nnl(73@rPaGU$j5Gg3Z}mkAHHQ4NfhxCwEp2#Y<`(3N?}oNdl0C>}#hTmTlv1
z*z{k#n5>^ujs(S^DuOW+>qHP1tS3C8wFO()S1Q)dQPM`I;aZ9530Tw_fXiQ_FC8E1
zOtkSoXo){kp|`+=n0)XsxeZRDT8$Nh&R$!aFhVC2i9v>0exP^Whe8P{M%2EHwuzYw
zDRq1^MB0L9L()G|3UhQp=zWxntEiCm^6MWQstxZv-O3R;u{hamhKaFMNz{Bz<&FK|
z7e@O-#CI)4!;a-w6Wl~Lp|>SaiL0x_<WM|gO*}D{d}pJkU^1jJe$U%c{o!nLfi`$b
zh*MLCr#G!ryp3e51slTr8U_pM!M8RG@j01pjNfmH-8g;`?Ag*?z2hgoZYaHX`-)zR
za%#9+QQw=1G;hV{4bH=;Ex%=3S4t2~w~BEUzvJb!1Q4+h7gFigQgI$M9OQ4+-Liev
z(xOY}dE?hm6$9^Md!<zs*avT}f_0Q#24#IB6fWj%3#^7iF8lL@1X7kyEqfcK9ZHUa
zctOFut+nOb0bQ888{qooLQEi^p@Au296?!Wal!ca-0s~@01eyr$OJQpAGy_B!);9j
zmA^nv5<$zRZ-%sczLRV}TN8cF+6N70%BC&1nOal&lIXZHmIvZ%GwTX~vY_&L@(G&o
zL_=qxPUtu&2i8tcygY~JqnP^?dXJB4E7uwmYb1%*+W0i#X0Ut#hCK>-Zofqk8wh|D
z-Z$$AWK)&FUCrI%{Xk^ir;LsOH_pQogG-)%Zu;X|Gng0DTw2ww3z6SDm{E1*0;G6)
zmpOv(uq$+Z{h5A`^f)2INt{<7oLr{~kB!P(M`>)pfNg>@$j}y_!U#xv+*m=TtPRbS
zsKmMrFK8KCL`-Qcl}W(|d1BsEQzoUHU&Z`rITYr!005@fo8ytgt(ee2Yfg<V$gyXG
zj|kNWE;dIyAkcMlN948l!E%y0Dey;{UW*T<7UUI%0BQSS+V^5|qL4X0U*gv(q$i*Y
z$G$!LH7|m;`=OI*I%^!nRJKJ_EMDZVdkZl0vEJ>Vm@6YWl>4fBio3?TaXqu93587$
z-aHxWF<C$%gs_#%w+1-$m1jOW1$l4BMF(a5aKgun^cDAx4s55pJgVP>s?3DgflqaP
zljW3Tfsf66Q9RS+aSnz)TKsQk{H2H%a620rbiL;UiKJFd7d6f=n#`Md;>!>$d0&Z{
z_E+uo=pNl9I3+H9g!N+zpG9K@rtS~|Hw1PGN6%SZPk6=ATWzaI*45hZ2r>DNnfD0R
zadhZ44F(POfXQ4Y+q(zgDuRnlUBu_XJ+E%1M3P28)2Gj-1*^s@=7_N2kfQb15YPDF
z5MoDZ(#e;3wgOhN^O+&om}gV}SjnzFZO(-dI)rmJ#GEp<{%Y0;Z=n5MFPx*GSmOU%
zCRiU|6*Tp!%&-6L%w3S!KUhZgZzjGQ3|?snM($eH;0s_g`LFQHC(OcUf*1zROh-WB
zW+z)Rk=1wSe{0$Jl)V+ijVoL2M5h}e`)hY5lcq{P{_}bG{;X7s?}?mkpkfC=p?8?~
zxa>iG{vG01rz#ZO)bAQr1*ncz*gzGM_BZ|t6V#qX#t1>zrnyrQ6FhdBryKpr8%%lO
zI<%Ajn&SvPnAO(oM?Yj*S*BhvRcd2gFKS~tXaC0u$n^NuAVAVA$qm_fBWej<qr@LA
z^j6#f+CxC*A>+X|QAZQ$NG>hQv-C2&B<6C%^?ww3(o%1qw5IZ&fHCdF-lx4fe}a3A
zE?B+uI|^uraHh_%l7-#J{-e5o8KbRYFa8B|o{zAhT|5yh{@v<c^n<YfKYzdY$oC&E
z>O+OyhkXCElNt3_@JTO(i^8{RGXJ#(&d%wW`7I63mD%FpWdZFY0ATe~ne)`2{|#1s
zVhFhIoF{9<coh78IA2>6#w6L6Tsx8d0R+zQX1>X0Xoz8zooaexP_SXyS1EDh=DYuX
zavxAT=hXuy!hJE?wh^;Hm<?pVLj3Qr`!T0uTW3E*DZBD~;OVcbTN@Df?<4=PIBgkt
zlpW@Mx<ADK?eEnAl}Gh_%WozA9bSl_<$Fzj>l!R&fxGp75-)B4bFrU$PA};-c~1$i
zme)W-tU+^ho9lm_lX*Q@b3^0HxDrGDTW&M9NH4J$zf(?{;`4)r@w=|F>ywS3ah>y4
zN2%*I;O3IQCwSr|G;8!QNk>*ltwG#3qyLX9u-A6=mJ#DEOEaVK6H;vSjYLd{80{?+
z18YRI%1IyJd+IYOxurn?h^o%XBBKAjlMdWE4<xMSdg%KeJ^W;5{TC&BgI3aTpKh*+
zHA1sk>_3-z!VKPzKcO1~+gvSJ7i!_|l@b?qYW(+>JYZyQbpK67Hu1?j8801f9^5qg
z#U}&i9gF$#|B?b;Drdb6VnK>7&*XU~2kIWVJ*p-I{vF4FiQvTvb-RDofAijbY6}ZK
z_sKA7#xD1z=q4WFjx#z4BC<DGXzMaDC9`NtFgq%_jnJ_#R4}}M(;RKV$XhXUZ?9Q^
zInxq-|G>X{|HwZ7M)o)0WC)rBQofoqL%siXL=!7?vSJ{SKhakG(ihYNEhF*qRLCV<
zfan|DGXQ_{fgm@CSc~Yr#*GM9m`BH3c*Tqg<<cE;>ZGA^s+|u_8Tm)5Pqc(@+SgA3
z%7l#={8S@oZLCrr7>-vOTZ)O%(q{pZ6fL?*LA>eUPjq@t*jSV6M2%3fi3OAI#<(pZ
zC>TJIcAOHMERzPzQx^dJV6D&MTYgkxfAZnlL@m1XTf|;%n(ZZ#a6s`kanqjLV-to8
z3m$T0*Vf~i0Hyv!P&0(DBbqMxh8%n;QOd$8T>B(O@!s1>jn*x*FH9#M%cg2SyM1EA
zoll&{YsQSyZCIJsztnXId_o#5)g}!#02qMbKm9e+wP~!9d4NioZ=m$K(l6IR<u}DD
zH3=>N<DUnplw|`{)Z-&>A@>}yxF&o2^od{MFK}{Q$#?uVeu$1c@0H8c7ZU)*wJNoU
z%5mm3``Am1#v~W^w(peOjyzGwtUhq~wbkVg;ECFSl78`lnsuOFmvUCM(${S5!^~i=
zlf&=jkwJj}lj}taY!eF0VUWf3Ro5l8us>)J37VLj3an_EZf}G}Ro`@q)P<hNV2@XG
zML)~Z3j>~AO4i=Zv}oN;-0EO%yVYo>kZMYed<0&`=fS}kxpLO$x0qWK3s>#(<r7}s
z(Wl(MI#|tl-&bnR;n+qT5dh550x~nPEQ5U4zcjI^M^)uh^zq&T<&sms-yu^7->4I%
zYKFA+#z}Y2ZOM1N!KcKhb)!MD_EBQ_uUz=fk4%eR9n+Ycz_0QWjb!P9cXVS>Ez34T
z*Cev}A)jne=!J-NcvRRIKfb8NgV$|;HB>9BCK2k|sa;15QD><cUJO^SdrX`+FlA}k
z`=c~*{5`a)wo(+r6N?<it)5o4Xc-{&sxVsoX&*KRq;GYSZ=P@Y0uGV(YX&2XJDJtA
zDjRs-TP}KP;?^~~muHL2yd!SXnNAe=)P0?!pL^rP6-AW%#!c~X-2n`NtM`grp%J#d
z2IF9J$<Db6M*Ix_#Y}m|%z#N|hEfZ+yy}mg^j5v!?|KAY2y8h97k>+J89i7?>4p(_
zhH<EUzE#E8o*0WKF{9@oP&kSD0L(_&=f_2Q06eo*Keod$O64pr&;oIK?)dPi_(V>&
zMxq!ZPYBiX_Ya$mPS*RnL<QGoLcSXxA?j*890r@r6ppu??g3?H16@kfL8({0-<aU3
zxTtupSOXhqIZQUB#28)~_;7QzZSp*ATcmELOExa?g-U$TyDEuzRJ%hsFdD<1GHYVa
zAao6@?Mh0tRWYlbk0vDzs}z2BDr&V8Qxk3a^|^Kl+i$cnn81S>804m@={K0e(5K2H
zsu@6f=*#k%eWXda>3D7r&|KC4I-nIPx7NH(ATz$bJyC^OGV%59+Dn6ohInHQW@O*4
zmq!MOal}WV6jB8!o^}^ltk$okh2O;Gu=_S0yfmEo2pb(;A1SMzX}9`qaeV3Ghg&p_
zU2)}mQBPh!drE&8kd_*4J2UycS+AX?HHZH-%APm=WeY`qf+pjrVs%vHJzI!LzP7Yu
zVHkcj?-wR;{9KI+fJFLhj3cmsD_xfB&S?wj-@bMp;u^qj@%nhc4A&YG$b+g~6lz9N
z?_OgBplo>XS@;E!Y!j8ZppdL}tSVnZT+TU)p4-_(?5cRnI&q?cuxeylPXlxfD{F{;
zHw!nx6>%a8yqF!3tBRRuj{<CYTn6$C)hqJ!y#~b<uL)@?RHyn(%A^kETpHr*U+65>
z&Kz?@Hmk_c@v8{;Wh1}Ozsli<_ZoTqiLkKitC;b&$v*6q2Pzh481f-|3dM%?<0CBm
z*fX$<x6z}**O_~FcOoKE2U10ogR-ed8+<ZpYHKx{`KN=A+c%GXIgTBLdKuNf^w~T7
zcHQdNXkwd~8yzE}`N%b0VPCs94JDv*Zmj@~ya=clr5G1S6T$SAcIav^%_R@>?=wVp
z$(mBs_m+aUhZp96oVs>^_KV$TU}S+D4|NUR8;^di2w-nd%=g$Q(xb4w<+SwLx8=?=
z)jJ6&5KU9-yG478U?-qDrlS#xudxZ>eDeGRh1m4NBADD<(rdewHlrpm(b3>ryFR3H
zacW%?Zo#*fB@=?TD7)eud`Kw!(?*;3v00&5k-Sz$S^3tU@H4+Xw_i(D%~f$$0M6Fy
z9MCjy!9{f0FVAxx(<rCr9Dtlj(P#;VxtU*qS|F5S!}j?6z+~`l0gV!Sxnx7awQL}0
zkQim7^{rrgc;dmEsOY0r;0;crBUKn>9P)101E88m54FuadIqFG(KKRG$`ieLPXsyy
z+mIhkWq=z=R++T5T9fU^p${hj;t2Yit2g7jP_v>zf#J0I7X&FrY37dB_(jo?@12kD
z&UFob?u?)7sdM=;XmAhvocBa92pITgJy%!W6nO!wi4yvfbVatx<&Mm;0$V_EFj5v&
zYWw<<LS*e=W$9hwZtnOq`Zj=INrQWiU;#XSlBP2&T~Y#Xo(`dG#*3$P=MMdX8u|nW
z1{$hrXqpfDCn7xf^?z_F13b3sLa+Vb7?a!KAEfo!e>dH#s{dj#TIZNjXoU2iaPQwK
zY3~~&Izu2)uV1&FAcWg&eYlOx2WqgU++5Rx0zrG-S107VLmun#HcoNAly_i*2W%7q
zw4LVXrQX?}GUd&;0H^8n{9DNGwT1cB!*RU?!QH$MJI+DkHnB(PukNUIJZ8&5`8iiQ
z@eZSsuAZ_rSpT{zer#dapcBZq)f!N<H!_u@%ish;FpoS(u#IFvT}7S8WO&BYFZjo%
zU3WthQ8{`S4MyDTn$NUkY=xB&m17}{u;X`jQ0qpLj3ZEy3ZQhll;%QP61y5)KE^j6
z#%Sa<lbw~CRU#7uAb`5dp4|U1e48?vb|Sl*=G%wUUwb8CQWIIu54+U4_@dDQ2Qs}J
z*|MckhYbbi9)B+q2N&cpBJ??)=rcy04$GmL!mqOez}#otWc);M_aK#;xR2*Ji?#~&
zM2%am^udWRbqc>~yR(fRPNBN@;}66~Qr51&TtKL{^I&NJ9^9^(17rKtpUyh%57kLm
zk$3c)YzfxnQ2Emiu(1<M3^W2l(A>?BG!po@!5Io;urSp1gaXqPq~ocefTeGQL;i~@
z{IE$b8hr5QkUapA9LbCiw)ALHl3tb(KK@;+5l$w%)AKVTS~5&kx%5@^zuCa2xukC&
z9`@=48a%Xr*hSh2xEdGd$i^m2V%ynDgy>gdXFNi3r1mn{OFUTb_YR+koo@(IS^%uO
zq1tJby^eh^x7#hNT^|i8DX~pQc5~*2Nf?6jaz|xakj8yr3<WAsKYG4?gQWxjEAjKK
zL8PkIJsW9+&*c3ws%??_^(HUPBg5X@)AlpFx|l}aQ8RTo_qfl^P@wZ8t#+FPL9QM^
z{Y45A?(f0D8ZY6VyK^vs|8S*c_Kj1!1ay)g9<sbMh$j>|-^))yH;U77Y{zwCIr=A{
z@vCmKs?2ViPteWIDYDrtXxz{^y*LBv1FQOSzqG_TrKy+uWJ=4~6J%7BNZw!pS&G19
zdUM6x&7Z1=Eo`Stlt~|1_Q@xP4*<#j<ly6NnEE~3b9(Nu6BBdAJJGK<q4tBrCsU^p
zC+m0`ofqo2(@e*{chtxJ$d9?L54fg^((h<?eBwU)UA;IS7f*QQl9h6-Yl+mWowi+6
zZ9hK|Gq+q&?jp^TKwis~mc8ujz(0}|{Csq<)XdP}o1LKr!d%p0NTC>vjVtpR{OE4^
z>}~B#CnOT*$ZpCknLuJb!(}@A1{mKt?^8ua@MZzg+p%X7anV#);I*_i&3CeWUp65&
zV4ri=iLEFWXNFS&*8%tMWR$Xj+$e$66`!fvf1q1J__K;nZg^{-)sQT`piKMAzCimU
zbK>pjh95b+AsTFw#yqY~iwPW%4CpH==^>TcgJ*L;Mc~y99jgnf1al}e*`tSrwh}i`
z8#AiF7VrKmQ?BC?KO@gp&}bSnl+Vu<9<+O{SC&4WCli;A{DunFS3IuRbS}nQ0bs<r
zgArbvY#(($d{|<o?MkS!G9XAxMZkmktAmyGz(L&e+&}jXmC*&Q#EajE=vZ5IFhHw&
zLH_}-=0Qj2Hr8yf@3%(~kwA9jQi#DZv9CzCt=jA@K3s5RUp>fdn6a5E8^itb<FoJb
z%u66&zi7%OJBk_p2+j{B^tvURi<(n_p{%Cf0X)2)cN}zoqCZ6^rpD04e`4KXdnxbi
zN_ELB!YInn+a_YnN&22Evev+`%ps=aEEw0eR?FdSmVe6kXNQOf#}ofYB>}lJ9|d+5
zxv1Uj0Q6ZOHkx{fc+=&exJhugTqK89B>PE!oVZ0)+QJ9n?u7?H;gI9%aFgP^%BryL
zWVRA8JrqmUdgED73<cXw#_^FK+3Csv2F>{Z-SPBU^!fHEuW$Y?!&1R^g4T)yCioV&
z$jgfjc2fZ+_*vbqbl2hinzBsJAe$gdyCq^?bSG^ruA^0I{Zf2oh?+FTUC#A%D~`N~
zO^h~-+NQ}8^8XXG^w^o6I>V*D47pxut9^pD6*YB=;1$x0Z2u`G;V|7N?0XyF>W^;y
z5VG32UKFlNnoL<^AKrF4es+0fy>Xh)wFL`qWc&`Gx^b=e9Do`+35DSS+Nh_(eiPS-
z-}YfI!UPniFAQ@{Y5n;mtm{@n*u$6OpDJVcNM}5A_M5wyXjWvnCIQvaSwG1y>@)yv
zu+V>db5q9T_VjO}WaGGSfk|cQ_xThNcw?&kv^83vYzR%*-(<=3*^7s2bOwBj|E-t^
z*~#h@u>h)~AlWZgyIE94xlo6KmX5P|I2u)vrTu&Dv)u&c&5L1a=l5?*e9~8)%m+xX
zd@p+D_YEv+x9)a4*7y!?pW(H!)y(H>=Xz!1_3SyqjQvEJe2xf`O*!c9?d^qFoLaH%
z$<V?AB2dLuf{f%yH(=WaUa|7RvcFlJ{TLcrQ6x`=Q#%SLL6^h`T(_L;eZnyICt~fM
zQ~_x@!z-{EKYMRKt5K73({baoR4J@Ov+iisBWrVwQKn?y@`PM*N5jeLz}mva{l6wM
zE?1#vK%y$>WrA)j^jP!;;VDD#O=(zGX5gf~H6epN`8fbUKNT8^YDGP=UK<=@@LsNv
zY?5%J18$!(AE*3i)uo><KJAgZH3>Gdt}FmIx{Xe;VM&I86(-rmk||~#>X9FkxO#gs
zNK<_BYR-kc?YQ=&6VEHI-{Nu$e5=`CS<0PhSRYKXp8PO*`2xo2LsgCblDKJ8$B@RI
zWbnjwZ8{~j;>7)_YA0yjH(dMA3*Q{g)vtib%ptmRR2kRPWwKJXz(OyLaD0U3417~t
z?9VIh7n*8GLcXR$V%@U``GTo7Ooty5fn`P|u(=p%fW^})yQrK*#<zzq_O81rSFWyN
zXfp$Lt7ghbMLF%Ew!M{Pzko??K*SrbL9SU-NyZ!Id15hDRm$ajd~2jSnvW;W+sf(-
z;A^*hjDPNVo}+JP*_?Hmf$xVuZ(?^GbYhMWnYaIyo~KcgQHe8lqgVF(#W~G#&Y@V<
zTOba$=V-iZn(jl&S~19=uC`Qtbe2zwE$1MaPl8sK{<X3NP<!FG*bfzl=(M3K-%?rW
z2nk?G%$YoyUH9yGilEdp69bFDoz4i5kA{jj&x89HeRde1q<C$*_Q`ELqTY1<czV`h
zZy!;~IcZ|tF4CrwMop%#k}emjfR7#l+P$Ln>{;`9xjsiJl{XIfdTC(6dzZm!q$bt}
zt*4sEn-FN*{%1@;jKM61us#2*$Vyhx;ASfDBJnwWPpSApptacxsg^I#!|a5!?E12J
z0l_G@ug2-FOJVbed#_PRl`+xtFlt$ivwW(?waY8r-RXvX(M(;B1@;{FH3!eY?}zh|
zEw6e6ow*mgxb47Uo%K7Wi)H>i2jW>?bibdr5oy5-l))?u%mSQwBcszKv=iEsZORL@
z`OIER7jJ&Hd^cnkzjz|UP9!)_%3jZ>=a&B<lIk^IdGots;6VXUPv$tx0@z232u*|i
ziPB!M7FbYIBXnntdmv^4a<oQtHui%oy*V0VpBYu;QGUAZ$V+#>Cz{}#1V#nDOO4(M
zLLMGW*gf?$cU5MC2F+k7!dLe4IY7=c(+x~s2%dq0xyvEK^XNA-LWPSlJLH7&9B)j~
zqgW4wlJ7>}bY%jR)4bU(o1RsHRM8;(>TvIu3-I!JOU`Mg6Rfp(FTtb6kIbYVCA-Sh
z6m8Ts4j#0B<%6;{tyRTeK6kxc?v)0FE0@WM2N8_n8(HTBi6XU7>T8<Ufy`TwAJq}}
z*czVx<=QY|q_LRNHgS<oWp>PMO3{(0VA`600<<B!w9H;C>7y@>YxUr$2sPYkh*TCR
z-cOK2p<-8pj<M(wOAPL($UOi6ZS?UQ;iCW=b#RT-pm)LDJNT2*P5K}np={E0A|2RT
zM;vp>s=o+1?pxpghwBHFUW-~dm{PqS;)c*%lgIS*`fVIWj0EpBu<;hh{YbO`m99SX
zOa1nnhL%ml2Hs5hJA315YX8{tX0)oDG$+DR@}5usP9+e)dCuFIao_PbVPx>LEy`ii
z%&qIU{LGO9xd8)I9(E0Nppg|b#UweX=4n%e(Zs_N-}X%xJBV`P1(jU_KHl1a=Z#=|
zu$>xnubRG}{4G0hwyaB6Uw-uH3mx%D9fT&8F;vEQKPE-#E-fx@FcN`0Y8AE@gypC5
z7SqnQpUsg;?3-c)3gYO>{N!ShR@hJOx|hoVc!KLl5`~A(u`zl_x*T{TmiwtUHoq?*
ziF5LQGeKaJ1+T`XN7ZVyxRFo64Z|r5AY}E-g-3MKmNJ}b;#5Lq)5N4ih@iEKS+5%%
zM<PiR%VXuPFP^`x@=iNo3i0mAjb^!;5W7Y|tl$|p*%S?7hv{m2>4*=yckF2?7t85P
z0sKCz%}UUC!2>#rQ^?xSjhhDo;{o8q^b+jYJQ%X`nrp5bXHl^iEoteyrR{X{LN%hX
zHNbP!L)QP3q;;{dBcbVxqjc4oME=+Bum`g1@lF>kl=F19&s``hj_&W1cs0A?Jux+R
z*t<He_OzS$RvBP-qD2K+PX7o{uKndDx#7u8qyq4Zi6#=OF*{?wmucGk#u_lSbg^mT
zm3tSgn<^#pk~%AUZqIU@C{zqFF9$L=Ybzyb(mJ6RcfbJfTDO<I8TR?qb&&)-fE>Ro
zd@tD7dgM{sP+iZ>g50;zffRIylLCQg$kwgYHlxWR65^ubu@QsQV&vb2_(>_E>S@`=
zMwbA_DI>QHXT<<<pfNIl5SI?+XTweaQR(P6RCuY+$%40n^Tee$q%Lz5dD{Yyp$%mz
zqo1r8IqCKY8XYO+Nki>e!=cu6_jU(Wxl5~RXBpAga^R-{`7BVnsjWQZC2%WvB+Gpz
zB5k5pXFr^l=Qj)a?jv@Huu<Er%^w^6%tGp8UCgA?2Hr)2=*?^QyjLzxx;;IpO}U|a
ze>UQiHXp7X`dCE;Vv*`SC(E2k=qR<YU^1>kj;ZnIOcVTC&@D&gJWJT9+I2qek<)@~
z`r<jqr^Dq@uYp2W+`CvrKDT5Dd9B0y>_B!l2SQQsmWon&(dzzrwf&p%6X|!?SbPg>
zar6F`8D!E=SP>BY5uum@(kyyrS{TyZLZ))h1qyLMUu%}T5J&GawfsC#_`6Er%+Y4b
z&Aexbi62c-K`U==mut}Zz0?|x5QL9vBb+VahFzF2`3|N;tq%$#ql_tI!vy8W7Q*PA
zx9D^bKWyzfi`8^WctDT(S`??gxQ_#1iA`6?k#?$C*PJy~WTe18A7g70(bfauJ`2|*
z28<3on9Kjf^hX<p-;Q^QYsCkd$lM(|;rLDb)x)m0Yn%Q888%&Q0tdaL8D!3flx^-d
z;!Vs}7TeDS^4Jd!tFG5Aqy-V>Th#%%@KHn1?xOtMNMpb_Ihr^->F~6WXHPt<oem{z
z&A;Myk9X2*Lon5Kdb$_2Dgl!f{-7wp*24lQ|MFh9E3te%?9c;roj>9_U-Ah98Y;sE
z=ZN@ywa?`R6L=uAx1E!49(`4R<RH5n0TuDJaS!>ES#YAiWU1qbb(P!e&|^1+xfoX8
zW=@DP_)Y<Q4whF0)|PtcAewg#D@1A>bi`T8$`WXbc(ziUlBCXF$C^kRrr9aCaX7nv
zY*G5t{w`WqCJIR3ynr}I#qICTc*;Gi0b>hPyLEL8?MN{9-fVBgv--yoE`0~2$bGVR
zIJanMisaOa!=e`t>oxqW%{s=5l4TrSCyW<jc8n6ehF{2V3cqb-YTAfoxHXWVuwew|
z;)?=CrNq};KzUJWbi_90!hNnGCS?Tb_89~>U+b!gZxuNm7e-FMT{MxcQo`OPhG1lL
zqYJ^ToCcphTd<6#!-@j=&(>P}O>nDaGY`m~D50YQ?*dhEKucm}_t$r#VypQ`q;j`5
z8N%g>FL+Ot@;>u8QF~_zYlZH>$JBmD>PIoSp}>MTKeu9)+MqwZSmwhzePwcTc2S_U
z5gr%w@r5&pK3iu)^T?p_t`~Q$wlN>#YBV)S8h-qm>z0jN5;Ypq3qZVXr9dp(u9eQ!
zLUiZ>8_>{-bhvoR-I91b>&I1jLAJ!oSOYXakfg1)V#2SvhM~pZ!m|qpJ%(DJL^63p
z5YLVDi;<I@@{vF8IkRfEM#kR?y9U2)JfeaGmk*C7LR97pk-k$64%^#Osvd($1;2Th
zV38th9!era-FucwW-$nW%19SOV2Kr$&UoI|p~oS<JQf3_<_{aMF8l5dd@eTvot8RH
z!-ws*2)2P6G<}Wp;a0RW9Wk_SVwWHQp#}Rc;he9hhPq}eWM+e8&CZ1ej}7eGtCW8k
zi{Y&88db1k@v))3pGYX=u=YF6)YK6r$eg*X$Afrpfnc=WCu$|w>~u6plYsE5$p?<j
zpoX)DALe2fi7KWRJ<)Q@kE5w0&@O|#O{#L%8S(FkIa1d-kxn)ri9F=QdGpI%=j5X`
z?1{VbQT(uj&JlmbXyC=15diq=#jT=Ilm4`8M%VWIg1a=&OdZstmfyA&I7O=qzZ6n|
zv%^h(h*+zj#R-7N`wMqAbv_3L<^Ox#r06>liz?Li#ExW_SjBVx3XQB@>(B!p1CAtr
z?=t_Z`+O3cI)1nPUNZZ|Vbs0bPH_5PF^-p4x`;a&!@ONl^SOme9^)*%9v1*`3)m`}
z8msX|)fI_I>(s`myrcIKXjA59xN1Fy^<d~jd>=Jk;kge%Gj@1t1zM9jw}WbCO@a4d
zzL%y`KL&<HhHQN2XWopyP;{G{cZSZJGMg;KG(U!)c+6S(LP*cGn0sl*;~Bz5@4XzI
zz>jy63;3MvW2D;xlxc$+LS4-m_|TQ0<{PHL!D5-`mH{<HguS`n?~dtioVgwLC8yg0
zuC~Q8tiL5@E;K#hVBf&GOHUaNgi2-e@d?xiYIkeJOcXBMvx|RGyfNL}t&?7$X`ncd
zgt#`9cws&7D}zgpg6u-av>?$M3yt^?%SiTB=HDDq-a>!Kp$6(g+b3kR%!Fntx{ElC
zv%6WMmp~;`QbN`&Sk}#VQWMt!3;|tV<l&ljd-1Bkl{P1go2#td8Qh)Pm%`3~?2aqf
zaWZiu!jF!RQ=!AIx8puVaM2^e*UYt6Iw&XP{XWdu6yG&nCu*I+6Cvp}OJywyw^#mw
zZ-ER58{eHI(j=tKaJZ(l)P*jYKW`D}mJj9R{!!PEiJgf%{poEO`T($(7v8i6uv#8O
z-s8mC_>1_E&2pNH4c;=>>GpisLii3T*ZX6#{UifA1L4ve+fAEpCPZcZeXFlG<IGrc
z3_6(n5+mB^GxIL2InbMWkJ;8(tKD!6XmBqUOx5pDfKaw$cOpM((qgSuC^hR7Hi!0W
zmBv7XtUF<>V8e%534BvYnqGJN!$-+Q*{2Ni#iUoQbK8bFLYJYagJf?%yFI;KM}p$U
zuXR0cCt$KVyq?jfq}_a{`Hx^K4&5XDBx=*esY8VD*+7wTXy^7HhduwHXjFa5$P-ly
zn#>yKnAiRmhUG7-{VkSx!xTvP4jG!?*m4G#)#wBpsu#Zfi6Yb9lLI}gdh->!gEeOK
zYU#=Pbu@&VVqTIgI1+IR+qrZ*iZmp`x0P1Q9vR35$=FuE9GVuT{St$QF;KN%czc&t
zC2|;05Ij;?UVC{f^Xg1Op^{A9-B#yj4)Y6g9n4fHKq4?|JVQ8R?Oke=8KljM5Iwvc
z&#K1FH@O|I7R=AfL&1f>;YU1YQI;xZw#)@_i?-HpksaGK9GcNic*#cR&KoRa_GXWJ
z<8&K_kJgK|C1#+Sp=9*2g8XLo-Li^kZSeB<7X}>fy~*Sdk!+VXA8gl)WDd0}Gg037
zgq*V}5daK|`6x{``H)Fe-fnLpAPEX8(vWbiI<$Uwx~tft@{tXM?!<Ao>rcBG>;>3S
zE-oBrdnfo*elocd$%U+EpfpeP|4e_8$JTSoCiNO&ztK2*HE%A^z;D00HZgrWT;{Yz
zs<5Q>zBu#zSQGNmURYY#9&wiR5D?i}9&?X(1|DQ-m$cHk3DH|HZu46DoNZQPy01J2
zgOG`u%3S3fLd)={2#Z4sw!WdxP9^jA6e{ST+-PV?Q{}DecBrNUT^vbHR$vB0e!KaL
z2+DW}2BLw_sb%QSMgw*J(`VsjxSuNJ@I=_7$z;9wZ@^F84!;A-bDs@gr~)?6__<~y
z`-p{%tR1>MW>>+DONiMUxLS4L5k!A+h@`9%Av8{8#NM?=K*WayVV|itRT1yvEW|^<
zwMu~V9eiyTW18!GtYagHiSiN%UYS3sJDXgefQADFSuB*JDq7Xynru~cOZUx!$<InL
zy-**=cjv(6s?dc-{uesVp3~Fc!Ztd71@B<%4>sA5)7~PkJj6RT*%*(OllAG(4tq+~
zJptB=!m=Clk1TnLzf|3K71(pL>v@qSo^!)p=#_Lihj|>q_|otlhak$Lys+mHIg}^%
zlpl~qT9lJFXtVpUYi=vsD2`g5X;=fjG1XX7m~9hy+u6k6p`}@p3J9(rl^WQ<PP7Wz
zieNS{Oy~FkXW+Zv#O#-}oT}_{AWqavhAMxT-1<J;RoPek(c3H&SjI~Q(ec%wEviPh
z8l0eSQKO0K4GZixmp!`nl))|w1w?%#nJ;u2JO#CL>a)Xl;))`+YvfuIHeSDzIIWuC
zVSCtYy}07+Z?i-QRx9PkefJ#*yJi!4T|{ImLSe>3`>cMNlaf8G?@6C_gLp>{E%H<0
zRCam{Z0Y=6cEbRbK}!^_bQ3O9dWoQ=9HJ3iL(sR$4rfp0V-I4B^P$8w)@88f+-(>g
z`h5#v3426{9&Dzl1$ojnz4jh1qNWy1-PrHQeaoOfYmkAzN0v4m(mq$N5sY2EpR<9I
z6aV?6L!?1LKHMFMqmSZTU)fwzwoslxH|@OyydYt7fcZ`8w2E8nJu+Af#lhAaUN;@R
zAecJVo8g>jGs|qpD=QdS&l`Ug)~Br;!X=nd_r{-tY0xxH8}ZVT$ho=v@kw5KA@0Ip
zNrwMv4)f6Oi-(6?^P!7e8_|oiISP4TjgP|*A3criuGue_wBew|e)Li)|K$b%YhPki
z|M^)1W;JO=(JJZw`l<EN{hBSxJQ5b(>KaKfg6<ISEq3{<lUD#ILqUkOegB7rO4|Cv
zN7zv1w0Be!iEJWiHe*ri0AM{$6)aWpW};TGRj~k_FSB6ul;P0)h6^+8w)LHG3FC@i
zT-B)v<KPYj?T}9~=%fDR{nMLt2XReuyM6&JFCgc>gm_&Z(hk4EqF#@=6r_|CrT$1t
zT4-yfdbI*e(n|B=yC0=dJr7suIvV;xocfjHqU`+qmEBONchD96<^3}p4_+lvM1|_E
z%kGloVClE}15~9(Qump!WK+uTOnL_iUswoilFO1dVs%f*a&mQ}Z3vJxIeM*5;G$eY
z%=P%uL$A?C+%bQ3v>b!A32060C||7x9q(8RJCvpsE&lWJ7m3XO3QSB|uCh3WU6ltd
z?{u_3bPszYUGAsIk>6Q!WOsO#;7K~GCXTfqi_%~73lR4rbx%Q{ffe}j^%U|%H#_PW
zumBVh6!<_#@(YyRYkong6sW7|abtmt_|b=bx0zI7-kITE`g#xLsUQJf%rW>;L84C;
z`N>n*;fK`7Xx%4|xtz7#pt%ni>AHGlp2N-AW_QdS7r)ebPZIsb-=*uVkVpCK`x|^l
zuo2Q*Ev~2pUaN&AM(5(yYTb#^aHumjXqfDaBnfZ}Z?%1M8+SvnB(UmJ4}}zU*MhU7
zfc*2ulYA!oj+tP<2S3H|nF&5>6QR@iNRz#I7*xy&&e*O$+SU4a7!<Tj$QaGnm|At=
zZ;+}~!B}oB;;+e<c>gd<BP&78J_Jp8VHSnt^=|Lo7WgVdp?g;&vg`L6^XOz<Fa)wX
z<c<jglc7Ve?!DTU;SI_L5nX!OJ<k_K1(6p_Z~_*$C2#GM+X3xn9Eb%h4L*iP@zqFw
z*)FiMh6sN>i%2|L>>#;k^nI~w7PcD6+OO$951BJ0?4h_4pgBQ=;A~I``W7%_%gdX?
zf4;FCb0m~xAny+Qa7!hK@>@Pv3Mi%GZ-JMZ>L_gOV`jz;4Mbh}1=N0jUque>cJPTw
zT4t=RNBWvM&lmB-KKQDc8E^_5n<seFl>Yu$@1Mb$7y$T7U3Bn161T$%z>>c%`}_iV
z3K>ZWiyU=s3mS=Xk@P%~fIkB71scLfv1(LtOnGvI+l5VP;wZs|H&v6iw(aQNZYbY=
zO%W+y`I40rq;ewYr0oTI*g~kaJ17jwNOQ~Onf)K^0Gs#1BOk);Q_PK5o_E#zs2L>%
ziXWS$`ip{wY|V!DpBKt7|Fcp#AY6Q7Qjj@Nxq!C&Snqg1vt@7D=U(*JSj=g$5x0Q=
z>t;`J+997uxAz))9&Gr(yS&xeZI(unI0<cR2`mfjeDk-)m57%4*dD=3t4^K`q7qFM
zlSTL_5TyRAfq!b7P!$i;UHkNG>m=d2ewGyvEUcHPdyvdqh(=HE1{{43czlw<_bkSg
z`$uzG&~?j`yvDJEg<*fbo{RtZ?Zw)%19v0pdofWrxobNu)LH+>eSXQ3xNBxLl3Z=|
z#Pm$fyNM_NCN!p$rW?47a{W;g&|Zv7I$1dgXL=iFUhp%ACYud0#=*d+qg)x?^B=Rj
z2Xo-kpjGCq<4A>%m3nJxnG2Bb>2}=eK0BLRc6_JezbTX#TV425m3;Bl(=X+ALB`Dj
zYh%zWPLTK2sqcVfVIV1zLVU3Iu$TkmGHxf!icYZh{R5nv2Aw$T<$pe3t<$T$v;8gi
zs|H#`UoMxYjwIQB5jn{g6`c36Y>=F6JhmKdadJCJ)};&lcc;r=9Y$T6hkfx%uY7L~
z{l{q^{^KG1efh}{P_w<_BJw`1`NX)+bp3z1;oIE8CLS!FXx;y|!2g$w*@Df6q{9C=
z=Kt6Cytr@B^OfafunNGm$MtT20#EWS1q7FS6pl!_s!{E&s>hJP<I^STKX=G^xP-v2
z`oJ}hjVV%=^Z;0Cx*3TNBswL0O!m@CR%g1*boJt!SIN)roPT?jQ|&7C>6lAuT9>Zk
zve*^vS4Z4-Wpkc=^B)mx>VWni=Pea|`zGe&^ZO8!^(?qwDdA6FhOGTSmZI0#PxXqy
zomaAvTSG^YZw<p*lh&Di+YZRv^|7w#w=AyMjds`mgtM;wyI~ZElO0a>Oyiw8T?@kq
z)DmYsp!0qH0+qP{Nuh;b>XMTb2OVGc0H(2u#eQ-;n|kV#ismFGUu5d%6Wk<W7&j#y
zqTKcK-><QkR8n{k<kt+A54%oK^6xp23bQXeRg-niSv9QbsZ?vIk8*q?nMQoz--i?}
z8a#JGz5A%bS}lQNFmflwl$tjFNyt)IwJlV24H>@<f)qNvz!&wsxH@7f^&-##6}Y_h
ztkwf<RZHF^EPP;Ww)^ktXY+>tK4#iq8jKlsT~7$x*xrxzWcYHm@96bEEs)D=HQrrW
zLABc#@r$=&C*_}mR<OwQ++CI#E)+AE90_)GbsMLl2^)4Io&D!zqkLNe6SI<h%8Ci6
z9$1%z$Z^mC`z2-PZaoy`UI%+mx{N`uw(pS73zbua2~4Pxkt$J%js1ba_E}5OB^Li|
zZh4=&;w_WWab|Z&s@0d{qj#Bc9b9yg&W!8FyFB2znl&wL-@$*|ATsV@TaR$MVOa!>
zMEmbK?1m&6%9W2Zn;;#4RysL;!b9+ot>G-JSNFf0<i$*73L{JO|2<?K^9`X4VW81C
z_^wnP%l_@dlRa-f)sVTA`RdPIF#+$D5D4?9Kw0+4#+m3M{y(aTjAsakpJ@>)ebKm^
z%JPR^cXPg+wB1SHL>A}DB)=U!C&y?^ll$bDI$jEtOMA3&Yn~9bTyVfk3LNy~*m768
zu*z7_6U_1Fkyy^0#*(bu|2gjWc44`fFa`5^&rY-YfSdlVb&8)wO1?Q^O6z;mKqB0x
ze(P3uWgrXvIQAkO=7@+{MUrKH>|AM@`xyz=K565>Cu5{)dsV2M&#Dz+TECK7Vz`(}
zY3M02Z0<4(zO%qQe}1HNW}yeU`{~<MS$(75a`Hl$lh|{F&y!DRPm>yalDie>hOnGo
zLP5y&x70hsGXS>7+Y5KR088J=R|>j%sbl9f<U&%-9|Zbi?ndFg!l|kZuM`a5i|LBj
z;JXP(at(B6(+c`ohZAbIHX7X|Jf45A?HW9E?q@g{@_){eMs(SzAt<8vEwUg9j@!EI
zHBp1Ve4KRI5!O!Z%ZePv_Gd*t*`hP*f70~&+rwtSl|1))FE^tE2%K*qk9QPF>Ucz_
zevA=^=8dBJJ`&zs8dznYgDP^FmjUS!&UIsOZb|kE=CvG&Ut!5y@@d!6+?TYezIx&!
zO!!<|-Q)Vb>OFruy>?rwW(`Wi&Kj1oz1{12xZpU?o+#wKQiOV{hgg>0$a$XwN9AG=
zfq4P20aNJCpa22sIr~Z}X_XZkFzT*|+?e>jf1Y;ocNlfvW=qh;c-8C!PCnNqS(*Rc
zzdgHGpVO9nKtErH_$pp}=js0@6^ghli49=n5TpngZOUI|kWZ#kUt;ION~$dtUG@F_
z!Kc)6xu?{#KOk>?;kG}o!kP)@qrVubea-(;!l5JIlTP}&Qc6a|>A9Oj^Q5;``K9;k
zUzXk<d+EBm%R7&{8Bgr^^5mX-X7J!Z$wb+8f6(l~4v=yu|J!YHCp<@RqlnbO+(p<o
zIGUQV_^~PsI}S4)R*urkMPey$o>ErW4_5JYA$EiIP=B&-Exuc1GS|~~s{Z;+<F}S+
z#>+Pr2K2I)BoSt-3AbG4cMm6!^}}J*+Iw`Lx?-wiKKT=?=o#4#icjw4zvJ=+{rk5%
zEUUQ%f0lmQl)fm$n2mjPs}q)hc!L(i=5F|JUC8~_!<<$JV!dK$<zJO#ba&Wb(}cz{
ztK&>tiil32YF>2X`|Zbf@r=w}(8CTbgD#AA#tpZ+>_$?w#f7$tjqR=Xy%eZ-Viza+
zi8609A93K+%FQ?tJy-0YoI;mY@t^Cgcd5S2Cy+aOPi;QI9rw!h#g`Y(1RhN)LOu3n
zpmoMKYayBp(1Pc>P$>&@Xx(FVXxR%I=oP3W)OXDgDk0H-G|=%1r1{mGE|Fn-e~R|f
zH^TjiyngES2%GeQqYJUaWw}VfjhttOOpJlw_UjC+Jh*Oc8+07upa1=jf6IUWQ+bhg
z-pcJJKk0_JUV9|v%^)MR64-e`=nwmRWLa%Gu95Ta!|8GrNJh6<pS#jP%5~@|$+=W;
zBO7YcSTa%5==u9)<D`0Tqk3$bmcno4mt9Ceezdb9|HEansk7w3rDS#b8{*rJuk6nx
z20m~Puad86o8w-kJ-S|C8i{_D>k3rUxXz)qO^fuA?uh1{1gDX&+1#=oZyJ-XeAUuj
zbCXXt+}aujX`9vZHK!QsAIfFZvP(8764@HifjeGqH(lqZ9e;KOk3m10RK3Vh3jPxp
zuIRNJm#OUXX?5sG8?)D3Q)-+|Rcd$iskB`rha4F4U_t05lalYcuNjy;#CqN2H|v)F
z^0p(Ry!(=TX<A~+ZH17HrVd5-z1lp1u1OAu;Lv`PnwaN}u2_=kd--YKb;y37Zstvc
zXwa3c<QX@Vp0~vgzc|;754U_HJeaCMo=eWBnp-aIU^+xfraFE@Ys&Xmj?E3-;^bq0
z+7PysHAD;FnjT#FeN&<oQrv8#A!H2mEQH8wupfU=njiAqi~Ugi&m@;?Xh>uZjPRap
zwVUXf0MR?oG{mU_t3Vu|e$3{+Zv1rM>6PaaKgT?<lQ4Z_#)W?Dt_nF$Y2;Hilfn06
zhuY9oTS5hEsb<b;*B|mTF@Jboyic8*dsS1|sAXNvduIGqOVsRFH;~n#)#&EbsW~OO
z4LNbmp=V3YA7Z7%qjA#8n6d!a#A0j&y-0~nq;8JRIq1`t*#-*L+)ek&GAq6(5x<G=
z7PYrouGoxDh*@-%aSq2s(XZaa(<4^ht}IjG=7_^(0em2fcew39w+q}0LKg#_{97FN
zOQ((ZuR5<8+gaUJPLwa94KedD=w*+LFU+3<Zqd2BcgeZVy4G3-)MxHv1NnV?^%wf^
z-6Id{DbrEelQVGi>TTbndjrpezVRM7!6%imT5g?~)p~X!8#DwaoE9ix;X(2nI5U6j
zTlswBvq**U;92U#y2ESctn_XrwV4el^FEP{`bqVvCm>c&^y2lEao?32FATKSdUWK<
zvm1k#DL5NYoixj*=$t<;ND)-YxQ|C7PIMOT_vMvH_OnUt^V-^qe1XykZn=3Sny5(9
z`!-wK5>ZSn^5BEm!>`Fm5E2n~rqm}&U-_qsm`A12um!yTnm^jCxGC@!l(~BqxCHEt
zrrl2tWp}|L*$M{5#zMFx6{!i9m8MP$pTxx<xUIC}r3VJ3%Wzm>5+c8?v=D)PQiQ&r
z@l@*bJdF?mLnvTP*?@qLl7U~W@W7SDdz6+o__loV&4z<Rg|1u}k3ji?&pc^((KKh~
z1Y!l+!*z}0m}lZyLgvGkhN<9$#j82boRI4`n#~P_72rGQl~_cJZ<=JT2gPh;jPe_0
zR@LUTQ3axgb+oz;9Y$WLY-xA}A`O@YURo}qWfZ6r*2GInnyn<<auQzH`6yCO&Vlvt
zmOgCF&XyZ9)7DXQ81uRGht@)GoEiOCM81lblh1s~3u$uoR#V!oJOz*W0;RNc_cP(N
z?U6`-QpT@G9W#}iq%kktWK4<(i@i})^BOrkUo*d3<;uvp@-i#<GGusSGyd$;$gO?l
ztp2<pE5jb&E>h(iztK&SVh?Ur@9newC8Eqbka|-_Dw?{{$Z-A1T@JQM!<Ns-RN?Wc
zlDh1zY)Hs7FT_L8Bh|;S=e=*Hk4J4!n!x|V)mer`^?iLGL<x~rQo5u&B!-ewLP5HF
zknZkokOnC!k?tO(W9aVgW?+C}h-du${{Q>Fp8L(YE_iX~oU_;7Yp=CF-?fiRR0juj
zaB;{U0e%~S!mf#s3pCq8Z_m;B?<vHL62Gf1TAGs5)?XND;)aU49A4?M<pf3?oAmSG
z{M~Tlyj&zQ^HMCs&%nxTkohp07(<Rx!)1B+Dm7nRUZY(}%I*23;#u(rv^JO$W@@5h
zt_a5cuTO3hhL6Yc;P8npy}?Mn<tYv#!jZIRSY{5&t`NdXsw3NG{<C6(Wo0oA7atJC
zCd57P*11B`cJw|6-z_&nFH?nJsocU~f?X+%Tkn2=sHo5e0a~^)mI8$*uq&3Tv|M#$
zz`A9UE_3Cw1{iVj=X=@FG0?|PDV5G-{B|ygVu<rvOeX6Fl^v#^*5;HWcf4X2S3kUC
zH!`L2^bEGjrhi=u{7&7iQK6q8#02|>rO~9I*62CnDIer*yI3=_bF(d2%weZ&u*!GD
z-((}~I;7N@{B737&xbwkNNk%7qjI~#HOL&K^a-QcZlNJRlg|yr7}OCN+F)9kaVo70
z42vUWG2)@MTr3jwO&RY|(Kr-anH#};T-ae&;cwnZYzUdyV*GR)ncXz1cb;giUGH@U
zu*9MFCdnDoQQ+M`vVoJ?2{>`=vTVr2WWMv=X3E%kT=7}VZ&dhN_q6TQoRUtJYu>5h
zdgj`{R2Mtjo5Ha-8vFJDn{ePv$@y?Q)^C3H<N=(svT-=G0`s_}yLZV+Ntl-<TckK`
zU{HrMmAy|(@+|%GX)afbrCLP13T=@>jm7DFoVuFz*W9+K1EuRJL*`O|`+QwpzH!Ot
z$^&?X{#FX;3^r{8c|aep$_OjX{_%?B{UV=tWBr&c=G<}6^=W^I7?`gs1Y048PoqqA
z--N8*dJ9C(^JNmN+j6<o2PT&Z;c}3JC4KF`thRk%SjerY7_;-qvAdhd@27FhGfLbM
zJ_OH|=9I3{wR@BCFi|F|OLar)zj3IOiC>mtj|<fL`KQ=zr(pnA<c^Azw)%b-c^qAz
zvQZM2W*Du-Cc6RD=AodDy>#gvEBYN(h_eYSws|ZNG9klny+|{+xnuHPJ`R9VI2xWA
zF^L%1p?c0TijIpNk7DVsM2f3V10!h!Co6wkTu24BR$8?|Zc9yhYq1G~v0shm?3QV~
zIO5T=T@WH*+jlvkD>W{yR!<ieD*TX#3yXGdIDmC-)5wxT^M2YcMIW>_Ya4H6q$wJE
zW%4ByLVsPf?)jQQ$dgjQyz8bS!Ou3h_t0_(r<Nx;rb`y4d3$L*_ft`}I`=1=(Sq}a
z@s+f{`+T{MTN8H9Ed+M+73{WdcnG-w-5h7?gKm6a>Xk8l2k!HTAbW_89r|hh25@}r
zs|U^0ovIQ<L?-T^#{ut_zH73T#f$mfvrFhAvdrk4#PgbzQP()nP;k|Gx9mVu%c42O
zX+-*crfCwW4`_b0q#$i*X46)G{(?5@XF1j$ccZ}PA^Vf<#RX6aIJ<mTi=)doC*xp(
zx+nq$SvtaDy{dusufLKQx%fm9bW_h2`?K5OE3-BeMGEnm?%8ivJg@L<jyX9LZl`<V
zNR}tnzBO|vTQvuT<p*#-hoW~%T}F+U`2r<!yi0P4x`gCfsLkCSBh^Wby>I1AA78Gz
zx0Xz^pxjD}`G?*9a&o(w+j9aJAYXh5b#D`Y5Hwa-)ML_m=*0YryAl8A(5ZJgv%VuO
z!EUMgQ$+}|fMtdqqld1BvQjdY?}A@E@SGa`wnWT)zR<^~+KQ)(=fY|!Lh7NC0<ejl
z^6pd#da_rM130Ph3fMGE=sG>_k(YEH8_PPvPGQ{{Rmz~-SeTa|ys0czZ$*}py=xGW
zHit-<ACOQ`0Cn0kGc-@;QoJ@2&5*|Sn3xIV6&ehY1N?vIfG4Z2l%b>@j6S%+bp#Yg
zXk~1!CkvU>tUUo{L<+8!n!c%s5=Ya8j&mD(528~t#~FE|uO^>ibKZ7n6=^mo1w>Fv
z*fmLH7;&+X`milzqupJhnf1=#w8~pL_)ka<-PQmd`2&YK#d{x01^r)9h&`Fx-e}Gk
zE}=1|Q31Ptf%gk01EXr1g&G^L(5j?3jKO!-pFx{%zJp((mu_hFCH(eY5vAVp)C8qF
z?bAj@^`aAa1s6tVwL;sdSqU^049!>#@X}4Cbd-p(z}sZo?_p&GJ1lAkeUK~>m&L?k
z>{Aj99U77pU$2Kg#fYkdBSttDDLeG{PCmOM5mV}0DV`*|(`O_oT@Z)W5-Xf$icq}{
zhgy~|)iO2S+b>FU5!M!|&Oapk+BJ%D4;VGgv&CjcXAKn~yK@lL=Kl$kPF$dQM+wVa
zjZ7(JaACf<t0DzGt>ZcB4Qae%HefdZ**8aqlHZL0t5+wg6ox^^arul2N})4@=`W&E
z<W>NcE(vpUA#RApTd}X$sL^(fsRrXBWT#ZUI8XR=hp=m3R8y$_sz*>C!2eCR)yU+v
z-OttWp+?)M2;I4cVY{+A^~VMVl1fCNFCsTi6kuH*G4sk$J@ilDAB5`yUh5)8#V2IE
znnJ~*Be|eThM?2(@u$J|+q?)8)6JEW5I`^ss>+NKLhLISPH}@!Vh_wUCGzE^Vc~I*
zs!kd|&<CPuCWJ7k%N-|$2P31uGVfqpa{cavPT^tZ|58!2`%Y%vl)*cVaTB-pM(ptT
z_pB|I<O^*=?m<ubx`Dzrq+&^ID|2>(*iA;jP_#dB!hAixK-V*#adeR=LfL|>b6gon
zu>8DE%<7xG=o+gAs>fH^Vh=S6qxol3`YF6JvFZES*JBasrhiO>0R6byGO<A8r#oF+
zyfnPmxD1fj961|_!gmT2tUT!f>V`2yo_NOg_cGy<PBHN>jMSdB`|PnBT$5(srZ{2x
z+~4M@NtncV@ber3OD{B1UpmIno=`&^HN1rvZ?+Rpzdk)W#&!%t;M^8(Qa2_70Nt(9
z#xA1#XTxYGVuX1e_UX*}xaIG<-Z4C&gV$oB7$n^(JHx+h6+AH=!`Zs<viZ)JpCrQK
z=%baqCmOUWaC<Y+b&6`@ae04<cUN3JAV1^Xc*!uy$l4_^i+yF)*1b)ls8TXiZyFd;
zhXEFC(+Tm`{>W^9l||`%`vKBl?+%lRiD9J;&%DWmKH^5YYoa3^4Fp`HY%wT9cUaQ&
zK_9Z2C^H0dck;(RONg1kJ~nGuwb7fWYXcZwrlAk36%1qTu<V}&0IgtY;lIxpb+|EP
zyo2enSY6YQG@FIA8zeOEI<bAD0|!js<+vr;orizHR|oeuNx*(qX@i(0e~@<E<ONSu
zO_`74VdC`VnQA^|`c~;D-q1&ft~8lt_E7IIlh3@kkys`cR?3M`@E_zM1f-`_y1!_o
z$$Ow>-IA77w%*$5mKa9GdQ$IF850DQrcm&|3=2wwk`S{IO^W10Esp0PmVaMEF4suF
zZiStWM-BE--CGZx7WP8ne!R~^-AFTK;5C!RjM&=1*VJ>MSm~_oI}=q+B2AkM_9|BC
z?#U;&OB0^w{A#ePsFxXgB(;7DdH_no6V6;;WUmkB6@A^4q573`a$WIgZ25m@2|AE6
zshqExS+i`dPAixKHT5E~C?cKJ9Q3y1&Qp%=GpzGj&9krW5ySeQ5KY!MClrb8%gBux
z4Q2z4Ut)583fXsvtB9k+dBuO<CxR)dk^6OLTl=-S7|93jxgMoAV&*_G*gXrLBpNmu
zlhI~Ra-DPEkMtvCz+03zJvVX69jsll6Ob9xP{K|sn(8laf%@Y;G~tHWubi(5af`nh
zPf!H4!?BwnGlz0*OKzu1y8*PZo;|@aT5yaA=<i%a`H5!!zG>a!qScd)rv2W$Av4{M
z{?Ld*@)u?Qslhb?O-wo=!vrvN0`lyXQ8|O-IVt3m&TS*3Q;VMuO&Gk9(J^xCCMU;3
z`gF{oM#WK;dHgUxF67=7R+icmRMi*ySp;WzIG`vIUptg)t;wobxpnFR-W<iEA?*w3
za41+KUCCE^c!eWyMY6(%U%LA<EVdw`A=Kp<eNr&k__^xy3x0C3WM_9YAh`VDy`%tL
zh<z|4>$Bs`v$i96$-Z8GM<6bK$`L7{teEyzxy<08NEZUONg-;Y{a$P&EqK#YZrYnM
zh&A@-PEluh3M3}JkJIfqyw%Neff_dD4a3hov%CwYS61kfu$QL{d(Rr2F1Trgch6-v
z+wzCYGF=Nck4eqCHce8yQtP3TS{cm9ZzX!6ZW#M&Ls1P7UWRYyPmfmcp27}<|AvlL
z8}Nc4^td2L3zpIFEj7;@D5RQ<!$uCaVAqRfSb1kMN8w|-$!9YEa#B{c*qTmG^DV*8
z638nqGhL&O=UvDtb>rA}h?x`JEG6@S0MlQ7<s;wGr)Iv&;28*4b*_haX>8w{6QBs|
z&Y$}%`)L%}zDcs7y*LgympB7;AjIgT=N2gf`;v8sMQ7%rMJ1xqNsL2_-2-!Lrb^_g
z7o!>Jt%!GzSX{Kn_!bL@{mye!@oxPdhB=8^@9jZg)GQF@=j)Q$#%NUU9qo4kaVYTC
z)cSFGVF?2r3%oPa%tlj3KbA)3Chz|n%LByW-PWIs)sT>V(69+4Vvz9z2iJdy5Hho6
z2?om6am9Z+UDhZzDu@W_dB#hs9bwI>((+M}16SP<?5oE#cS9+XHr*p>j9j21e{6Te
zKae|W=-x_~0&zZ^l|m=fR;%NhtC05Sv?NC5_xC?9VAMp{7KLNu{v2UYi68L|k{J+E
zn$^5(rSoRSC!3}2NZjqgz;E>$186LUS&Z)q7%^3DM|gSbYj%W~^SxH$!pVQ6uBPHX
zi#1O!HjGSd{Z%%FtnKFTi&8e2^Ev<Xm)Vx1f%N1@d(J*d*w==W(+867gWb1GQ!CTy
zwbJMo1n-uU4r<$;c)19s;r1OBx+h!gCy~jOyVn$g?~bmrA!E;sf?8;!Q$*iP8*G7J
z8l{~#0@kWTJb6Xh#x0!Zc&kC=NVCp0)LN&;7)En9CW3M(iDoBakGhk2?H_usYJ2Fk
zg-UQc=R1VUR_Ju6`_ed%lDW&`=UZYDX9?HCw44Zf>KwUQW$$zVmZ1m5&r08*13Ohn
zx*b2<Y9uQ94{|*G#3$?8sPm?Dfhi1yN!?;c#Dpe`z#-KoIkPVkk;*WOI>J+NzW4Vz
zs(?O-P7(dO{@CqEXK)n(JbRtlXbZ0KZs|w<lMz-;qm(9yf756(1y|rt_F{{IR0m|I
z#94&TD4Oq>K(I<_yBw6`00xZNE}j5;g)6lyI-E~5HcptnchYxz?s^~SDl>o?Z@jKg
z6R)^gDAfgC^0WWGP#0hJ7S#O;QsI^;8Otc-s9&>X=s60l0*IDX)UgY4Kbon7G(-n6
z!HxD4#uNAbjMVQ8Hfq#N$IyBwcUX3`!dzI5+PjtK(gV9KWecrgpNi%JD5$H0LgT)-
zJ(F|ELM<60La?bYf|N>)j(`%dMo;4Wq09Fa!=^_mnQ+z*dLgiN56){T_kh{3f0t~(
zG&Xr_&Cd#I;IHLu1raOuYfrzTC~<`cNbzHjKi_+<FmSKeO7!f2CxlpX>0Ec0VJgJW
z$$}+Nam**Uq)m!QYia!7SAR2ZJe#M#!Bu||T9|zd$mZ$jiSoeHtiGEaiGX8Mu$$Lr
zwIG_G$A2w7f2Mh)69#R|){V`&ZP&#_wv-ZH%D<U=WNpcbDNl>&EpP{4lj9Sa>Z5%e
z)rzCfm=Au>)k-*LGc7sXk`^#0vX9sK+{pxW{za5;f;-Z4{F?W6My5sO2mXVq7U2x)
z@?}MoVRsG%6}TdZ)Q>X%x}obsNh$&oQPiOyX((a&!{dJ3dvDBK0Zo4Mld}VE;Us_R
z0V#ZDo5Z+{-s|VbWuS69z?zdzJ^Xa0Q9;L7)kqMwG2suGYHem9l+83T;aU_TFu9^l
z3!q7Y_>Md}1O(4DjJ1aBAnisAV#O6cUwoUZ{;o|{Ax)kb>nN@*Gpm*1j&iYl3@x)Y
z0;7ZIYUUm<Am=em`MX{R1r#k<)b+k8-caE^msQ_%idPyH^9G!VUz7I7742$uwX!DQ
ztv2u7e7e|Zs`q|tSV}}yLDs9I5NBS)H8=og-;~71(|qUX))EIJe<!Hm=gg2M=r=d@
zpaodY0PJ>ui=k0VvBTmk1tTVNuE9a$GK2WLcU8r+#Ok;mC)tw<<WMF;U{)kUd-8+Z
z2R!s++90jR1)f1ftGvx3?-0E(<w>_KG)+3LYBUU*6;sW%%35FiUn#z+V`6kMgJ1Z1
zcL#2@3TKxFUFKB)Vtv&CUxpws?}No}Y?SI>(v$5b>wxX$fFtB?5Yz~h9zqt<+vV>`
zNq)SKGhe__3#slT7>As!wi>MFxWlS+f9uwQQW-hP<A(b2e*~H_H|v5#j5HbE45^nU
z>J~=_rPX|SZRK9*!*KWvBIl_Yg<Osau;|}D!`it#dkyzOVx!DK-zE=D>jU>gsKwin
z8B9o65{>97lg*5OT9yt(>t9;`o6bT*q_d94KBYv6Yd~WfSMq|**|FtFQ0OIJYRipO
zW)N^_<CklE!D16{1<No%5srYT8$lb;A~N*}Ju))d7`b|>r;@oXJ`0RYtQEuC!qvDu
zfD?S%W8OXj71RdD>?9Kan)7Eg^wL`s!kF<tWo*J+L7ZoZu0te1W7;18pT)!u0qLgC
zmxAQCNFATP$^nfDGCy)j_%Cd10od#E{2?_dgjJ(oUp!L)zdoSj&x?RMSZO;bT5E!E
z5BtA}RrA<R-fZ41EkbJ;4w{#HbuV!iqc{sskOO0PnH4CXs>;^G8TUQo0NwJcez->H
zMprvsg}pz1#MJq(R>E2`#|0OXBD0DR>B~eRdyYw-Wxai#79BdmeXnYhJzLlhqGzH<
z5)0lD^7-s5Uh;xnK;hjf{j7Oir7psRn^!b9u9rC6-hfD2hL|#8@7-h?<HEr8PnvQ>
zIffHeceYi1uW7pB0j`JDM3834%#rClvie$rLCOR3GhUC7eaSMs-wQ_MK+VbdW~)YP
z-PatHWR%EVK+P0^D%5z9&-^3cFwokJOV1$0L#5L((j9il>#b2{%3GEa2Zg@(ZW)BY
zd_|ZI?ywO%X?n1RJGUw{6jD7(9K2(KpGc2uq}fO9$`c#5()i?Gw$Ya7oz*JeROKDd
z;K~rXZ2Hb1Xt#z?;8j%7DcCot&=&(|f`&B_D=hY{d}wcgCC~0alU#N^`*@R7Jkkd5
znC4Rf^O`_@{~E6AT0l_E1+li>Q2!Txz~S`F!RY9>6USS*3?SVghmF?d$o9`u@3)9m
z_o;JGkSnanTXVv2w-m91V11tef$^g;r9jlmHc~3(IC4U>c>MB!3YIy+W^vC`j`vA5
zx-4PyP65z$?-~CVL&?`{Wfd0Km&0y<sM|@v8ee%&qbm`6^_QH;@xQ&%uqj7z2{+-;
z_you@Q0xofWn{@+whuhf2<vZQArORas-wt?f@bLdw1nx6$)BNT(WfTtY<~B?#`iS=
z9cqC7L%t#b(os*Ebm-@w)P@#fsLFNu(xUQ`nf@5RH^(>X3K&xAmBU0zdPUGSwn~wu
z%tSG}6o8H|s6XVEeh=(9v@k*1k;pYvWk97ENcUymh@|YnrP8iH+m!JZ&<}nsCu|;Q
zBjj=!c*^cJOVF&S)7T6^361DWwi=Ad!iRodSPS}m<5BqtQW}j2^8PIom_^&IeC+=s
ziV!?36gU|C=XHFRA4xFDw2s^DG{H<MjodRi*0oH<Lc|7&8-0yEA|%Nq^4B9mRrkGR
z7gi6ytu<YdY=eD8&YVqx(m5XvzlYqHpbZCdwLacn>Z_nF`t#YLYaPo(Gdz=MvFW$n
ztn^Sw9&1I;a*%Zzz41@a6{mVuXVKk_WkckqLr{8>h(QDZcb)DX`$yqo^S&LgLT@7|
zx~JN$OM4}ia^>}V5eKNbNWKfr@ts(5fgOJmxNohN2cu$<6?MiQ=fL?F7xwbU{um94
zqIOl03Ruaeqxbv{R(4{0a7n%mbNHsY3Pw=CFo+LRj}WtgXA>u@aHB7eXP{qye$|?C
zj*pZ+pS32S>r#v3!PWMj!e1tCEJb>UEMs{^<W;GI-E!Lql<akKTvkjfUCNJO#Qj`<
zo(Q-H_kaa{Ygu8ag!B%{fWuNeU+!Su<#4h-Fsln7CJcYqqIRywY*ojT@5<a!96lp-
zcrUn%e7yU%^Sc?#GEqC4T;|aU#_L6Q+|Ze(5=Phi8OT9_J#ld;y&rARo`Bii@T&(a
zV!}_9WybqsmSY5<9BPwfoFt>kXLR7X{K_P|fq^sc)}f!?V2uH%d~XAfbi*yehbt9N
zL9D0+&YZ@B<1I5rudL_T-IjoH(^?5y55wh*vwr1xX4Wl)i|K|uP(5D>Q~Cm0>pdoK
zmKeIh+G)L*`tTN6oz$8_T9bbya2N&aKeaP)c&;^~yhm%EUkC(08rRH-`Cgozm6VW6
z_H>BCzNev?pg!k>oAu$Va=KDid}&N5)y%KBHFE9yBdM+ZnYX%kNP|c+3`W8OT~-BY
z+oYFB^9)(o5GM_yX;yp24EIU?VyEM6=?P=lF`)4KQdcP+F&vna8oq$fQ!#uiS+{UP
z)FCF82}aa^=W*=k%uMnbeKO+J`2CD{2thcX0OOL}nBaAE-Y1k$UzX>HV1Sjqw$>%H
z?scuvpNzM&&@x@}bOKt=&wgn%KcU`Sehw3+=N>q-bK-_vC%wVgKoY9Wv0dhjW!wnC
ztHlq>ixZnwUoid{ToOq>2+|Z(GfmA$BrwQsWjsw8_ZM*v^SYhR(w4NFreu0^caPL=
z*S>J^7X67O>vX?o;YdHS52P*V<T05<35dC!M+CdVO%-%E`VvbobGVGYBbTGKHa%l2
z-Pm|x^L$xRv5aP>6*=5sDx6Z4`W23?fOT5j?U}nSaO$;@COr!^qGS}ggh3{TllNSr
z^UOW{^?huAvIoreRi;*(P$wx(8%3b~Mb*V6ZV961<b5uz5AZ$GHnJD?0A=ogSy{uw
zV%8`h8M1Hdb=V9<tV7oXEWsP~?i7F8S#y*ag37uO^g?$~;I;I^_nzN|V|^0wle^it
zS&H5k?8BHHE>)dZ$xxlN-E#S~KSq717}oP`_1;#vfkS%)`d&xm3pT0Fyx6%JnsSCm
zv3h!l8g`0HfpyxI`c?`+EUG}oK10^reL{iX<4Fo;ib|!V5KUE5>le+Ryh%Y$x4;`&
zFA{GW&Sd$uLQQ!%2s#DmS+iTW=fY!H^CqbDh6+g63VYnK!ceJdPhL*8c|s!@ErWcT
z7HjwkvAEW7wuQZP!=_bbz0Hw<Flw!|XDa%TXb;}S)rPFrh+R@(b0?hA^%_=whBzLH
zdM}URx<4dJ_r3C6dI(xcFmkT%+jN(rXeWF!doDREZ$wfkdBhHgHVioONo6;1q?L(F
zRn(o&jdJ<8-TdvOk=~|GE?BL2%&Nz2>qD)<Qlh?iI`43MU`Al#b!lb$4k_=G_$=Zi
zvEq%5kcJpUCA^!z_yJ>Y!!G{t*BrDFlq&uJZPf3mubTLPgYJidRk~r>xabOXBi10k
zHs1k@SbJ(oh_K4Csov^1n9OU!p4I#|;=4adigTarzPq=;yIxIE?w0ZKQa9>`NV_Dg
z;#g{8Rhqr@3v&oDvMWZEEp^q6pe;#*Ui5y9xHy@4-ko;1p)U{>c!BXMQhi975kUu3
zd#LK>m-hzr>%U%05>XCsW#BL6-J0VTPL0WWnesh`1L;UnOPDmUO8YawBhSisV(1w^
zw~<eJ;Q7UsE!u`53MYwijCMGu?`)^d5@_mVrBQ4nk#s}Ux+jn+-4^hI8|)+^7O&3V
zKFQayPRVqZ70Ao;N#JzMjiQ8d_C=qBCfgRq)BVCS2Akko!HWwB*((R2S1VD5W=xpL
z{xrvjeae<`WxN}l%CHWJ-&P2#zWDcIL@dfI`7~Z)5I!#EoR>p0g8-Yt|I$tWy>LcT
zyvg(1mlTs;7Hgw;L@lZ49h2&*{O1y4boC4UL8{o78gYvd-^j0Xn|uFUs5j@fMefPP
z$DrE8GI5dr+*)!ppK{R3Q}o{E@3s{mQH5RNtM;TLXc|{WOuu=12Iz=eM$`dY&U}Kq
zZ`{k*eI+-@a;%ge_Oi2tZ|EK*i1o?G;ZV>0eg&I-qK=9^s?*{<>MqW==?Ch5qD7G!
zWBFd(MR~IAgp%E%N)KBX!5!UAT~^fGp--Y_dV_q;*+T7{<kBLn9cpmyr(%O`RT^Mp
z_t}BvyjRFoTLF92#zrV0-%A3)QvL(OJ*MY!t27|waZCfH-!*3wYOa&VxR7RTLz92W
zVvX&hr%gJJVJjQ+ReZf!X4-VXD2ad-z9OIn-09%mIRta|KB!PrFsNzc(01Khf}o9e
zjB%@Z<>iQ4<V~uDQ!Anl7du1}EI`a1)PVPY*tSLtdZS#m*3lZSgj2#2E3M7(bIbl%
zaHxd!W6$1ae|;X2jPbqx;>h3Azt4Wp*seENZ^1(+wnGx|x<_(tdgRLfVfj#{W<Qe*
z${pL#locSF0}YYRmqx4@@vwy5sTwx)S{(VY-RFOG?T#70{zJN^TC9YS#LbLlmv5-&
zp8TI%ly%yt;x$-UErn)EETPl6Uary(#?CLs{^w_eBw@g_1OgdjJ2WGD#1RAniXrEB
z<*O#{ytsgV9X&>C&fsxZnv8i-%ZP^8F0ubX4MUxOm9-=CCx}1K*K;4%vb+1G366YD
zy)6DlHGltGg|dMDEFw6V!F4OUTmA{oBtR0uNBnAmV)5cs7=PrQek-BN=%R%7)4%X0
zwXl>KJ#|&YS}P8@o6dFN8GT@@!9R>`jc6UMi05J1QqxhDu*Y@a4=dU7D&NV!^d+j4
ztE4WrO8UWOA=q{*ySt{D;BliKj{G0$RCo=nQ4z`D+8<ytIOcM|_YcpDAc32Y59gJ`
z+bzEG3)x>K>9lU;3VUsQzwKpwJmdQpTMKgy?H~K$cH~Ck+=`Q9PsFa*TuEN@?-%Rt
zerZa>aF0VSd@}2yb&xBzS$yi-^>^3?t_Q}E;eP!}Sx!f;<j!Pnlqrgs*py;h2y%A|
z+pGWoXMqKcg@#Gz>xHq=1KLx@LCkT}TMz#KaHVoo$KhjoP21O$qV%nAc$S)6`>FkS
z|3R1$L^3#*J!83F<pe=3%csllFo>>l5dZzMsBu*U*l;O5l<&?zGXDjhcZbc;iffcN
ziHGF!j-5M<{?fw4_~^nWM+E<wCbl2mF^azP82rcTo}&w!{r4NacM=dvPNsPMKN#QN
zQQb%g_%HbSj~$3`|4Tvt*C=FB|8lqg!l-|3VBpWc_Z<htZ`B`lw6e_kx}}c%hsNHm
zscj`Cuk>7am-IisgXUv6&ty;wnD}ROgEmm9Xf8(P_uX3VoyGordXYMuX{7~t6BJ(A
zlJ|+DY4mceIrehwe_vQx;OxiI&80`9DcmfWJ|St+tjPKOp>OBE10;v9d64AiRy?Zb
z#wVNO`lL~uf9mJ)6b?7Ypy2<XFT7gOi+4l0SloP%qTCdNRuMUTl{*|2^AFL8=0kPb
zvtY&U*FkXlv~U=1#lI7+<8~e??68p`?6J|(q)PO^Zy2Tu+uQE7vhA-ft=Q|jJYDmm
zfr|kEhw7)ztlY1?!k6vXE&oNh-vzY0p15ha&NJO~G$=Y<@*7N+Vp#k;m*Vvj*l|t-
z9cLc$;9qVu=S)uL)2%kqO4@R~C;xq|rj&hjBAfQ(M@pMX-QxFq+xJ5VebZ{t>6eI#
ze=&B8QQd2&Y{9#y_?SOsimA&TRxUlz$AdQAy$pQte`ie4*#0;gNMI)#9+!nUfv>nC
z(lXjLepc*Xl5=46vljY7xJ%WXX!;1>dN6ouuj$t5!FTA>zqECKVd<AA4expR8$Z|g
zhu#7|#{aCYVK4k=D2+mfq*Fx$q}7?>Crmd_mN^V_Uu|3dJH>C^1>Om6C&9&pC@-_@
zTOz9eoohkV<O+}7<ls1=lgGxm*vK6G<^N&I<*oDbikF`jV85KZZoFjvYcfV?HDBli
z9!`gRyoMe+7XMjvLeT<W(KUd%U|9c5l)naQ8a$*3H2!BuyHWl@;r~8os7_GAeAshs
z*Yf-G<#YSa?Bosoe{C3H{@vx&ONsNGifr!8MEV`6x!e_cttn+moH#~zp595gV}AF#
z3Cs%jp6W{7`&^I0$(WUEuZ`TF%4`oPf;JeMmgx9bD`rXzTqQM65f1yFSO^+L+vZwZ
z6&glRl5MpAcd$dlh>9Yx#P3WQ91l7w_1l@1F5NgFuw1ZjDOFB}#-R-Q4f!;tQL|X7
z*H2D?&?&DeJ!d8Tirc-Ov#(7TpaHXFwA{J(k%_fr32hVz_hkF#<|Dx;;piKq1q`F~
z66M1H5KV1M_~Fr_;?XCLi7?;~D&g6S{Mh|;ixu{NmTmh^-s;BmBJ*oojqiP}W=pOD
zPN&|DR%80_HNLw*ht%9)5VI#?(Fa*9tr@L-KY^hlXo^~fL%}PuA7B?bFUh8M&-2{Y
zD*L=v*WKtJ2C_(-@B6kmiEWV)50d#ZT~F1|aty?F8Id#2Au{9wnjpONBTmp-J;%{w
zHg#nyJr9*d(Gq3x`s-)T?P-@1H5K0~+&`ktT}*K-Gv@g103ORy;q#QO2xuF0=NXPb
zHAUP`@84sjw(YU+YFJ!|9YWIKaZh(mM?8jUKN4pjgTm+x&V1&z<SOpO(1T-4##SF}
z4=Pz!CQSNw?#;*IL};%NEmi#-DeK_#2r5f<v>UR2M!=}t%%0<O062T77k0l5zYW-7
zQEznxWdk05Hu}jtzK2=N%!n0Jw4*hBF=1>80)dba4RuE5$`FV-NEviKHYcW&?bI44
z<`k7$5q}hnb(x0_es$XmOTXA!0Tt&srp{JIb$v)poa^>_6`HwWo2Y36E>_BMMG1{@
zZby6N!l;}@*zxt`KIcta*dk6rA-PkI-^`j~I$%n##aX`Mh)*<I)NRxUk=-~F05%~Q
zTx)KHw~H2)dL4s48}MK9Q|1HBcVra4`%a?v=eb7+RyXtf!P)I%Q~Kf)bolQYeSZFj
zw^|~DZPC^KF9Df7qShn&@R9oF3LLVW$nnP6&yTv&tHh9L?tEp|cCSLzF)oc9=5^&8
zi~i%bR5eeoGEC_K-EF3oMWaIQ*4E(KB@Qm~itN2imp=l`YteX_3iSY=5whvC`;rRC
zzH#0W*(g3(|325|$L$xv>8Ti(9(uFQ!&}`4J?8nda|Pu#TO2mkjJ<Gw^TVVF4RAEG
z_Hff7as)V@RvYcEy7L-)L^(~@4beOOx#L4_jVE?KvVU=kD6?+s59qLZDy@p{<jf#w
zcE$~suYOZ(_hu2nSX&R%iF0CNmyuqpYd6-XG^em-=?4#X0r#GF%@sRCNPc3Z>h_j1
z%x-mGXx$t<u3n9fWuIUZvTs)$uhQ=k?T+2dtvP7KeFzpVi>f+BdNf*n722w3>_OSN
z>I2t{y{BJUyN6d>jR7vEtQ>%uJ%=WJ%O17}jB1&Q9u#3kiW-%GNO{_a#T5*~u+B!M
z0?$R?LPp$9#U3`~=jtua3Shr>Go3j7CXCn6_T1=MW^jLIF0^{?e0=S@ofdIwK;hLn
zV>_=qdH}|XL%nK#Z249X-%{mh&47}&CKfA27?_`h|6L|2u!$qECXc6~n98=1Ey|$%
zlUdvOZ3Hed`_N|EJUmWV`guk4@}tpQ-Aov_@R-jWK~XzZEi%s2*BzA@)3*f=b9;`h
zo%-|7mX$rl*l!0PIISv#J@12W`?m`4)zDReX`jO}sm<iR`nqSWr6<b{@{50ZXxzJO
z!B8y%!$xp>$ySyu);ZIu#4}%R9-#1!zxb%;SXesknAs>p3gonf@G7fEH8Iy8wnDR)
zEA(rXc)QkOv(}kseltF=2f_|*`$t#sQ+IEcn=en7VV9@vaV<@Zj)d`b@5Ro@sjSm*
zkbN;OH!gWBnuA`vY<d_I-BWTtIUJ4t%NH{5k0QXR*m~=YYcT|i{k5U2wawM$wMJwM
zA2D}#`(zKr`Pr9}$ja8`UgoBDIF6jxwy61oppVQv+Ii+yH36euZ-!lSmsx3(3y5R8
zz5R##%}l%Y7F)Wm&g~_B`s>#12s^>|GQ=lO_V?IRN%r@jbW<<a0bLun<r_ShnbBiX
zasF$bG4?y99S1K{OE%%rP)9wuLYJKGs?o&7Z4_)7QOQW0drgY7)8u~f{XU!1EW?Y-
z0Aubx=o&v%u)7Uc2HZubpQe#(G@X;LV2!VTKh-@+!Rxa*)#hM8Y@t4GpTT~CYmgLn
zW#xZ+u?GvgF$<@~W4M}v^PW~6lQPr_ZZAK@o_^{;Gi{T}R_!l7DD`v4nd2?%Yd1d;
zx^c{#tdIvc__m4C`Wgww&}vaU>732*+J<uK5*vJtjfSRj>GC#Mq*R3Vis_rjJoVKS
z^phwr{k5t$|5(-S!QM|7=_#WAs|B$ZjmRXI<~G&xT-Qf!|4*sxtq4Y_36b`0QA21t
zMVRYUy3b$HAlg+pb+A6nu<2AI#0S311l^!hj<H=wDG&*p5iWo8-ta>0X%i7ERNwxw
zOWN&x+{g`L%IoxsUB87c18;ytF7(FXc(qko!66l1=Xw%5yZmf(F8>i#HjX^8rUId6
zvRMJqTAE9zne@lDx>CBiAr6KY1Ku{C$}N6z+ds$4xyCC&!y*cFdLzVX<2{TSnf5G*
zv+OanXO~UCGx_|PJ1V}g<!|7}-yJZeE=Kb0TI(5s4^EFKX%U<KPS55lW&06I9S1)T
z_D1-9Y30t_&UJG+Ky4kb+fN;Vzv`yOr(UAv&Nh$b#~<&PH-?gz4=UlURu*GsoQ$(I
zxg$SC&!Z*WM+}i}B6}bdZ`d?O+K(|9eZ-l8nm!urw{Go@<(>$=&TreL*sM(=Sp-S{
zGD7d}=y&kgNdWJIPP|}L{BflURjE};?pf;fRQw5%$bxsVG#T}B52MHVT-`Dp=dE)g
z%bYXpW7{D%+)dP58A^;smx3|MaOOw1_d8<baKW<0!88T+F+ExAYV6qe4_|w>TGQ|(
z#u=JcZ^9eyC`wa83y~9Ctz@w&FW<OBgUY8}c~%0vv$iE6L@HA;cw;lXI7_Q(T&xt*
zzXdMCGJAt2myE;kjvGvS@XPP_(O>Vu*(GNkZyu%$ATZ`TUgFvuqblO*L3pr>;6t?u
zil5NLBaNvMDIyLX>aH&l8dm7lUd{F-8uhLyb9U$Uc<30)n)D7pfsFb)IbJ#-wiDsI
z9Ynk9T}1aCDs7~h9!DH2C7t@C&EI!cXxJ2lew*-4f}_8@W<owAdZ$^rhAO26A0?t{
zg3?QedpuviRDUu(qUL_0c;lUIyg8&+x+Uaxbns$12%lkiNlQ7c<5*x|=J#698)nsB
z1SML>qFPw=>b#6Z=;Y|9#3ha{qNx4Xv*?z5tZbb-;&-g{P|+&CUa~!aT=5lA{}hV3
zf5gKVcHO-BDPOK$Y(z5(bkz=tZ6FtWQ+qzT(vfteK!}uuD^38P+q-N+;5ms-ybAtn
zO<xV;ab85K8eE0TSwDK)`c-HwA0(_HnzI-oJ4gq1yUe+*f7Yn@W;3@)02KG#f|?Ah
zHl=3F8}F3DZ<?YN_%A3}Z!N3IgdC&EM138<7vN{}NA-3g*rMdY+`vK>40)Y1c<Gzc
z*(Nrf#)#&fUA86foX?-+SU*uB2;*b*3Vqr{{lzt#l?Ew>Kl@>FP8T%>E8%B-&0L8^
zMIB=x_q){%B%g(@9HQ30nwr0ex`${I=fs@7Ha}!kp+r3g38^(#{)5EVp0~2lDR-of
zdIR9f20`^YmA-gKuERllnp|y<zsqGw1y90FB4c+qi2MjO?pA3?#Buofjqd5sia{^R
zkHn`_=V@;_44SpeWI-_7wlZ+BzGN;|_o2nsZn>i`WLsX~sQ(3b!h5&Qp9LN)hTKjQ
zn`YcHG3n>+OD&?FuG>7UZf`gE9(*>sq}Mbmo!4&f3D(*|#MY|JJ#VsoPBn7;vc<-o
zldj@#Vlo?V8!j@1-33WAn^FgnAn!dE6$HGeHA(V+>99rhp#aIq_-(I0a8JhaAj9*=
zz@Kx9)1CI3>+&aBkvPxH%jlJ|w><qQ(YI(H*g!tz5SN!)I}{LZ<7q(;?C3E6bL~;V
zh#4zS@>0@8NE(LfcJpV#ReEt^Md3GBq_Ph_k6kY;iMAM(-Ao?f=item8bUJQVx-HF
zKud(GFK)WwbsT2m!8dQxJtYJ7Y?L#O^>*TorMD*h>hjd_Vlv8UtY_@A<}YKwf7jm^
zf7joy_`=THK)esQprrM8dB&pj+UkFhu!|IOc0$^RB+Cx@eAawKugLJy#usa3YP~9b
z@s%)J1~FN1#RqIVRg(3B%*%E232o?OMS6!?8J!57gFq3pmVpmp*sVkLtFB|PI;})R
zXwmbfXo&1|X6~q^-)Ywkp;CPPeaKM36Fr$;bkH=*t~UcJ@}8Xa=u4E^FKR0}ghh2`
ziTDU<;iRz$Tz3(hl3)H7Amevae0aaxtPJ`p&MSoe4w}*SS61^5#&-NL<Q1q3@+8;j
zBj5{G!}ZJlv1Wsx>8*s(HCpWeZa8fgk=9#7?#8#2kz_UMgr5Ki@jr<o`NT49oH1et
z6AwpnlxuBGew%Ye!z3bn7R8X_Qk_PEh;*m*7C@qwzN|O5KXZ|7XDVtD*qc*JB;O&!
z&-M<E^o@=F_Sv4@>oaE4o%+Vr1h-7L`w;KmhgLnsU@x1vPbuX|^`~uXZGJ%dsN2Uw
zgsNy6fv>TENz-ui{XXe)Xv|Qu3~bLAvEh-FF8wOJDSekoF>~|qBGIT!uNa5zOLZtC
zQ$D>SE48~U>>-PB#;kNEr3oRJ(7oek7}6Z&0^Yu(WS}8DICCU2Na5xlECxTTTka{o
zF!oSsab!z34W`>7LbQs;;k8|mIedYS(`3+HuGRR3;d=k_9h#4@%h%s3icG3oH;W&e
zz^NoWzHS|!k`j6ZsDW2MI4}umLWaJ&Qr0~QHqQ#4>^pEd__pht%#}XjPWab`rauxM
zQQjF2&}D3Y<fA=l6cIKMqxV@G2o0t>+~Y=Q(0mM)9%LShR8oj8Q{(UV*tKWXN>|3&
z?##5f@7oX>IFqmRB~OUZCPK`m5-K*G=yA<z2uZG=Tb63phd#VL3AujJX_1a?*8kk+
zKFQLta+al_>^o&gB;0~$n&88o%Od4Yah7`JWvtFt#BzoUnfD{9+>-m@PGC(j^6u%H
zd*CZxWed>=6A?E34ZfS^v#rvOh0ll47Bapc+wL-=sl_j=JVzGkBFt!cb1x*Y*RD-?
zPlSsp4Lo9#%754ut6B`FaP~+oIF$JNU3ve|sRC9j*b}{j{VpJx@p=DbeH4|P&?g~m
zvs7JLht<Wkpy>5(XQ>+CG&#fFw$#!t5|!<P)|_G^^wFo*;JKOk&vfXCY-~Yu5yFF>
zv5kee_Q01O6UP#5XiFXc2L9d8X%V4P8o|>@BAL046sOc30=AY0mYkw#nunU5pWjdj
z{n#DyfP{*34dSq(b0+L={MM;+FL_lHuj=}Sfz3QCvo2b0b7@2jS8`xIU~5$!x6DwH
z^`?sF><F4MupYyiFJ9Vd*dvaUK)xw|qAfOGi#Ls`oW!Bqw7v@eRa>U>@bd;K{b8o=
zno^Jsg~`16Z&~IRmjUl5RqC7esyg!%R3^qpboZ@dg=C4x+Y32#Q$;3I`~ZLZ9`KhV
z-ZGs(uoYfL-;;6~j2v{JD5GK)we~q;Hzz-OY=!cP$lETl=k93x;J7Ek_AF7kDX2Gc
z=*(%&?`+V@m%5=C?Ug+mWXA<=Fm%9P5zY&Ryw471NP%`E+H__%rT_~c=pbgC{$A3?
zH?SLYeCEJXqCXQupsAX2tEB@~jg`c*y~`Bb@2xIycFV@h2HV7&9}x}S+5R)o=XEo(
zdZvz;1m3*5<bVgs+0v<^h4FB=NWQ$=sbW0koeXG!og^G%Fa+Iu{E<NUdFD%bj|t4V
z+FkZ|5qyfx0lK%(M9&8Q7_CK0%c0~D1-qYWSiOv0ACX~O?hwiDp0Qb`DH;4p`TZu&
zKEf@Np5{vJSO&YxEp9D%rP(X40OgCAD<aN0Pzh@Hy1`_UJg-F1(=|HxsoAWClCP*O
zCd&rl2@EN4&B#t|-@X?qqE#5He>T=y%t5h{$$leqdeV*kiGV-cukOl#leOW?b9HK7
zb3+6xn{U3!Wr>?|hJ+#s0IvhAwgwfGwe2t`Dz}eFFv%wij~&)2_2Di%q#Dy=I;S?f
zQ%3lND$~EDtu9zLrj`@ZSPN|dXVCg+4cvv92te{JA;*JS_8X5JQM<fb6xZai`408Q
zgzd|tPTFN6(7hcmkUcov_3~(FjSk!Xd>oI7awqJVdqP~V#!HkSA6ItKI5v=8&sX^#
zh-M??d-!eEj^^Uc4a|5m_;!FJV_N8uWOBB|529yqdcaJVhVg8XO&d5O#jMDhtJrp!
zBR~L-S+&{fQ~bd!tmF5GuAajSdo7lFKBHlk=$RP#jrnjo;|JcbF}IV(%w`IN8kgPo
zRT<P(mHI~#7N^H!EaRqfhpy(~))Yniia>r}Gog*ptuuJ2D0IzB<z*e4s`)C*&`6K`
zN*`M<^8vIaW=AxdAxjkR#>gE_2X57-<Kd%ch;jXZgGW8*@HgvE;riDxTIXnPEwpqO
zOCA$1b3rX1C4}+xiJwyyiHnV$L#q<9qj!{TKfjhmQ;w$Y5V{0gb9d1NacANq<F()?
zkMlJ!5Q-aHapHOyQPWk^wj1`bp6ckw3;*EcdKuucNZ@;3zIOExtSm#tE1BlyjvVAU
zUwh_{4n)U7D23^aHphaY70lw2!&Hd~?GewB0E)xGX-~Z7ET!AQW8sgmgZ(ofePWq;
zxxxrD^{l}l%i7(cbufF0p4SzgM7RX$1`=*6f0ZyzHARc?#SXdf@*tpnCAodVbJI!e
zo{DrHj4?8`W3#keqA$ABS}m@4iWDe1<_nJnGMe0XbCbQg`Q9^>p~*1-!Kkdl2@uay
z3t4B%d)~&Pw)%@>n@3lS@);yJ^k`1a3LkKg8z=7WJ8?s=s8gR<|MYV9M9SSGOvh*X
zee*0uISGLdYg9Oj)2Hwhd@i5V1u6gf<}2wmE)+Ha*;Ouvv;A&)yOBGrK{w^Bz6Aso
zIhg~c<dz&w4>x^}F_zoT*n#_UAe8;!v*GMr5~D{81L5#R0rnBmojF^M@z|=5F}BzJ
zhdTMS4O-d494Xq_YAYPAsM6fH(5t*&^XABmw?T+w#F|x-tzHghox&w@g&F!K^wvkS
zMHy!W6s&7hozM@He6aUZsh6j*3{_IResz%A@j>X$%784Tpo@m%^)XYF@w@GXMCEp|
z9yD@5N<&|*IwxMVYtluG83+7Y_LDBs1*iUGac!_PBLlK2K{=lf%v4MrWhi{mrM>U0
z`A2qH!-c7nm*K~#=BuR<K>Qxm)|i$ZcdqBVTVKoQif2>5{s80dj>FZVnC8%Ak<^^&
zLj4KTG)`C_xz)Qe%y}j;3c}j804doaQCzdW4dXZZ;Pc_mIVlhx8?Oo94z-B;QrxA&
zs~OAN3Qgp9zi=4JsIS^sHoUN_@PCSW&o{UBxGXeM$4vb-YxBQmeUIp1K_ZtPV{Uj4
zu5C6G_oKGs74Bf8qGDz}&r(7CU@p4ka=^~>khZ&TSBLlNaRqctdqW-0rMg&SBa4^q
z>`y>*RN3#wh?<_D35ponbN{+8H9vkEZq;{8Y1T)0!X-%z``&f|-x`yyeP(Gv&h|$)
zR_jo*kR?hzNRYSU)=qbhB7s3&F}LeTJnrSFi%f>yS!l-mXH7;51kEr!j2p-Y;N1ZN
zn)=oeu?{30HEZyh`6&#QEqre;R?d3UHwI;(ISzijJ!tC}OSDoLqtD5})*g#_igET&
zLWZWgO%`b2^!nY&WUTasByZi5MDDKM+xHBM<FVI6sHSNZ#`0ZCC&ALfbOocrqg+@c
zY6ZG=!qs9HwREdor+b>U`UE#kXOt<G(a*oNV{1xb!kE=yE^Ean$zEv+`5ZR87>tW;
zU&A|8aY<NB=4+|iLZ<-9JCs)kY0ql&ImcTj0D+I#+{zwW9N{@iv(;ZHb}Ka9?%U|N
z>kBJ;9YcBhl(QLvlOMl!-l@oakv5P89@aeD4h6Ma&n&7Cir@E)s61B)rDpu7@Jn`t
ztmo7YA*+!K^T5t?L9QC_d`&d9^VKkh!$+t<?Fgr;lrM)}iWYOidZH*1euU}K!%A91
zw8LlOhnXgBSSvNFCwV+Uhc8CZOUh1D&9@xodu*ig0thcC1J+pPX#1ACjSnU&^Z{p=
zzb#sbeDS-?BIM4K7e?tRCKxN@8U2zQTzAG3afVcRXQTMN=TIg>SQKW)fnJ8kZV-`D
z8l0;OoaXY=2sYCIX6~sv*TH_<O%oXpwz3h>N3@`Ln*J!##WfRuBq?rEdYlgmjKEq<
z|7rA-tx5xRz4=4Y32XA5E<-;Yo0NU84LpsOB5A^?lu%u3wxr}3!^=zgPY$3Pkpp0;
z9Z%!o`?er68(V#JijWB>286i?39TO>4Xs~2%4V5`67Z1E4pK!|$$W|f>Qd`a`caH*
z*8rlCNwC-~OUH|o&n@EslE!w@1Yk6nmcZ48g~8B+5HUArz+;f?fOyy-k?f#GyZ|J`
zBjcq(nVH$TsmZ(N$l~7H%12C*Vne0hj1dxoGVs@Rz)a8eWe}64QA+W}(Ss-AGrk+=
z|B#vY;Sp%e)oyG;!e8{KtVKFAmgaMQy&(b4pFfm+rCmKI-;Cej6OFN4+*f*a-W-B_
zPTe?w$a(@tC`0eZ>zKUWl?B7NiT||IR9hbxv=W>_g7N%*G;|_MbtJeY@D;!0UzY&W
z6VgVEI8jxJFO{Dvl^w}?G(t(wNHgXc4cNC|oEU7cvVb0}GOX288+%GYl+0`ecvSIH
z#uK?}6>4h)N!hlCh@|m#R_k~3_KY)xB-5Znf_6D4+qd^db*jy;Z;(GL`Ul`hmh0lf
zQiRyq@9PokKi#Mr@ykvigK0Qa|E|N{&A6i4OBgIig+|ZZe!2>;s)gGw(^dBwrlXDD
z^<1Srrn?jzdx+l){=sw1%ok^BJl`uE^bB5h#Hv;Ai$XAf^0(kryJIjf01`rvN06E}
zUsIIGy)i%KPs=b>)*dV<RS*#CRuIRBZ&jN9p=_z3P}mnzpljmz{no*7={n2T`j`f+
zOT#k@!O)QCo1aB2#`f#u3B2+*g@J{=D$<vj^WML|fEy+Oeh?3w9LzJBGi0gl#dy4f
zL=bL|P|RwwL)=IjFKFO_J=4D$h0m<O26@0sC?X~WT$MnQ*b>d;oq>U02@UBsC3V_u
zqi1$spvw3#0bvm=&ayw=>o<{Ou+j*KmGwWu{S>>Mqu8Yh{+&}vbEZ3G5fGX_h|W*k
zO<C25y2bVB8+!k3@l7=mDm2&w#EJu%yGpNKAhxVlpY;mQ>9a%>;c$4Odr&P88C|KQ
zBkRfd!F_T-<+X3q+!+#367_(S?$MQ=g5PI<Hcnq_BXhJ>Q3nYH^PyU<KoinGqmr7-
zNH~fsz2c{2MAXqFjVBOdnu!7=RQAnrZZ6@mVVJC5OEax(+(%!{qe71@0UpF@0XaTe
zEyl^{3FrdDxmLQQl(MMeK87pL6cHyVqz4?O5}*hOd#Wgr2#WG5bpiFLL}<5ZUe#U}
z_ElOLBUn|#kBDv}I3LnX6^XRXa9?UL^DeVT%sBI9m*IwD_{mDXAp7}2QtqFGq&5Ng
zw5J6-(dsU{8q9tsCHI^LUuW(OlZLcw><eabt5yWl>X1ZNJ@*r&;0t$qsd!8P64R;z
z%5SIc=OB^x(`0LkC6@luX$8<!14Hj_ee1021xz0p2?=r82XF|Yt=~T9U7I-j)q(yX
zcxZRG^8JlfWS@c?WXAWqmpf&phvYk9B6yv%AJQGxb05wXc(pZ36k+bcL2FsY{4Jv^
zVk606{sYk-iRcsF-8Z=}KFW`XCRR*FNG=j<u^zv!&$Q<Xx@$1%lEmowbzj2QafDqG
zn-)R{-&JGd&7uh_N{Lg)@E!8wpYV=FKnt4?0%U^H{M~Gz<$JkLms2xweDR{;<hzyP
zQ*>_+&Ijok6gAht^MgHq5JLiY<sag+no;T_KGey}(3~|p><iHbMWwQX?=<^%q!Cn>
z$Hb8j8kUnEbZ#E^WjqLIOeUS7>FR?TJm<x^XC9sZaPWL+Xr_Z+{y2gF5i$&pGdk|3
z)>K^rj^w&qy6W1Lx_4_5s0fk8r#{<PK*JA&ZAeeJ9v88p3;XYLMofnD0h)f;=X(^q
zrEiz~An77*<lRUanhXOAc%<jphfduPd3o0L#hGBW*QAbetpAU*w~UJ_?ALJVkY)rV
zBm@SLZj|nj5|Hjj8l+o>80nC15TskWyCjB?mXvN7nzQhI_ul7sKA!Kxux4h>TF?BS
z`?~J2J{i^%o6M(3hH*&jZ|YIt?Mqms&fnSRBA2JO-PwO5fOj_fVTpaiLdxi%VBc)+
zv>WmkFG#y7=6Fu?zIXqx#we7FwyGiPo;t!YI2-A@jg*~7!n*_er~R*7WHMIV>7J;J
zbKjxLqQeP9-!(W_&j=Y!G^y3$^zFyJE(W^sXY5R6X{w04vjKv8!2eF?3`D4sdOuvA
zeUo7@?GeMfdb9x&py7^yC~s(wsjX_PalbhH4kjiH2NTz*;I}yd>NZJvlM?}_)BIA;
zkBZEG^5Q(pDxmQ8Q~`OdM_rz(nBP~f;PLITZ3nFaf<7$m3_-g@g{vxp=MX5oRVip|
zkSBmFaV1Ah#UVX!$z0L2zueGl+cF?-JW}`P;JifG^DKsmhS$jb*CO|?G<dB-cY?Ta
zUm_=~V~s)^m0<ykBPsBBt48g|Xf%9hnUwPyp8a3%^|PT%HGCOAkk|V4h!pp8dnXE2
z*60%36y!=%qd$>4rW*RO9h>K{&hazdBzpAur72Gi@Dujr+_UPK)kZUa5JT3kbCZ~(
zj$u#G?iSO@I=8M&iBqC@eU*<L-<C|nl)Ul%aH41T#)gGzukc&XLkstt_KmSZ%r!b<
zBMu_KkPx)o-)COh89Y#Y?QErl4W(bK{#GJoGqR-<Awq4cPrs(P@$r6LiKo;T4VP#Q
zK<O<pE7lW3V0TqpR~f`*y<J#mu6Nw}t)Yr@9#KK&{f9qTsjDLT_csx{+%TZ@2l<|y
zz>RL{9Gh;YU&@E95ZFEx9APIU&u2{4QZ@-?Q20EMjH`m(Hj-<qvuN3&azZ--?E8F0
z=z6EhV;UJWw)jJC`JKOHfLL=tkqSm_9>68C1u4oa+U7i`o53@4A}k>q>XY^P%M(hK
z&LJR=3PDpSYKV3<w?#sA+90oX5=ELjhF*Mv%#NmTE=;|_J*0^a;3>!W%tpe>vX`<Z
zE8sOXT{^3UW)6PVpgCJZ!_65Wp;gyH#zrn`><8DQ9B^0|KoKMesm%UH5|QH3QA@tf
z)wVz_r06oz!&rWDO9j;?!Kfg`{^JL1sQb&CynSP~o;mL@?2NqR`;p<|Tv(PlZR~gu
z--lgf+UA_782a%vm?&fmdemXE)P<5(j;x5fmOr+720l+|YExf<t5f5pDoH5IQ|qtx
z$>{Z4Q}~1vm&5?u{sWE66|+0dbAidq1jb*VQO79=Be{LY8-=>&vJz46e_Zy^<$bmx
z&?@TA@GGJx7dra2XITM+Rm)uJ;5Q#{RU0!;oGUkVeu*y*>&y)sJGwi#_9-8m?KVrn
z(GXVPtaKteaS<W&0h5q2T?^uM&}r?NonJBXeKM(`t}5MYA%%WFu%NE892-<>Rp=9M
zL4+t_QV)MfmNjzsKDh0U%wT6gEA^x|6eQ1Z44dzbbp2L*`21$Mk_ycxjkNxABQA(h
zN2B*>c22gmxs)N)2kErjb)Z@9zGjYSCGz89M2~8yyh&rh!R%AK$V1(jj#oB510#k0
z!Q!)-(g=dgmO9sO|6@lE7gG|srR7Y-Z;Gie#<g#eJ2$!bu)S<IIvDJ!%S;(0n?ayV
z;1&h$S75iO+iw{p`ygBvkPSxqRUaFGOkGuXm;J5KBN&@5kw;_9vkNNyeEUxn?Fz;9
z;VVy5QOor=!Xa%=!y4Cg;`MB|O-bPiM5~HaU8Qf&q!5fnE$hXFi#kHr3rCaJ(SH?i
z{@6QA&ue85*h)QOd-C*Pyfe4ZkKdxjy?fDcKfNK%>a$R86Ww+?hdL6#5!#g>xg^Tu
zfvCjiCzg$vd_)5|o}<Y&|44&+fJH`WQ7zzlK;ws?R(C<p8*X%Ko0<D6fF|3-9+PwU
zEaQuh@!<f2n-=nAf1x3PozhKRL{~VC_qtfD7I?&Ljakg(yWNdVj7q7r^sTU@7**bh
ziTvQ<Uz))2y_WD|XvSMhu@LyzyQv=wk~j3S7^`Dh?bO5kem9=hs(ar9HY)u@9IBoT
z4vJ3mn;>?(7hl(oNhv4RQvDh5lDRRHB?3XN7!fB<^BBukYQM#(EPc?dkUBa%I=!Ep
z$5|n=W13fALM81A+xgpUm-}FtB<(l`m=8A=nhTY)2CuO1mED;8bRc670TQ7JJ#DTF
zbeFU%GNE+Dqx7Odn%~`!Claf16FnTQI(Bq-M6_#Cose0EygC7~Tt=Fpuf>$|tv9vu
z5t!FZ73U53Pejmpm3-eIXfrsUi(q~%I_W0e11#uXI~`M_3$99H8}19jpH`<!<bLfB
z%#-F_coQZoDN-PRZX2`^abCPry%XDAg0c;|>tO2s%^*IMt+e3|Xvwpt<oKi)QdJL-
zE9IZ3=c~m?LEO9THgHPPvlNV@gKiaG)Qei@i}{VMPk?0Oa_mQ?!t;|19n=fXk-~ly
z6~Heza7JezLj(mnd?QkSZ_h7Yi$E=w{+-NIF$Z#`U|e8{91rA#E+MvIDC*Q|{SnR!
zO8VxrCfwL+1*0*J*!HE7qnm@jv$96%kui~lk=c;ZgCaj!Gt#C#H!kky;kBe@hJW<S
zYlGY?3*)^*#-i5t`IF8r;3jPof*}6a{~D%dqJz>U7EWtT6X0`zZqo*W{zO#d+HtzO
z#kw}@R}`krha+%LSW&)ap!;^bh}9{Rtr9PcW`*`?NQ{5zzR=RZNo3@!o6OYJ+8+Z7
z3$=sRV`!z=oNVX~H7g28Au@#?4I}H*<!vO%?}r*TzN}?LK?c$E8*d;v@=EqTy1o66
z@cyJCin6fb$;!iBX?_stB}lma@qld%oW*xN$~@-&<+bpT*HWF;Lgzh@lA#^ryPscr
zKYYBsZV>l7E|YHKl8&7S8VnI-PQcg}m?|*kqp>{y2vmHL@eN*FbUEti&?Uon`Lw|6
zzgt4b{35bAmwc!FW#ht56n`ZN0X#>za<OR0oaEP+J=!)}>t*g{b4Y(+Yz}<hhBx@U
z!?euJ5jEvmuBqpk3dGgn?4Fus&q1o^BFTok?k27hxd5ewiMW%RyrITY+U9*{F}Z(2
zfeO(p@+_Od8gCK}3bSSe7nhO*+lpFYdBkDoh%!kV{usvzrB;~Q15WpQ503Xk9X$xH
zeSET=1cq76nnijwe)5F6o$<P0YSmaRx0J$PZE{*QKkA<Cc?>ee=K@;_1R@zI8@J_J
z7oz!|(mus@yAgBMu{7`b0DGJ5&9cm3^%>?%H}?=TuACp%c@vPBSa*FA9Dp@@bzx9E
zxo0vV(VSCG-P+Sl$GH9jiBPvmRZ-h8<7<!V%K2Q8EOVAb?m=~D)=kEVWD_7Z%+J&|
zyf<$TG{J<GJW|ia?3|FC4fli`cHmtpG1KYH)~`h`G<b$5tB7pvHR#p7Ga>%fv;%0R
z65Zs5OupiBvzj4JTFBUplp&gO1ssbjRpA<`l^2POB+BW|V6XREI){Z0qMUZ|Ykk-7
zO~FrTx2n2bE2*H*s+CGSK`1McW|^054PEh`w!ydAWuMwNP}B?Rsjhk<pn6LlXU_K&
zMSKZF5hwLpY=f=nKmQad#mK0GG~{4P9!s!e9z70%rdL-YT>$t$;bjoPKD+NylW!;<
z$x=mdaB}rwT{vE7Oz&YFI_^v2oUehZd;*9Vn)uxgLL5O?jO>H-RJQquVFDvAS81G)
z=SVcECZ~NyA&#Agk)P0BgfJXB^eG&R?-<R+tnJaz(&I5GNfv16;Lf-h&nTpDjJ@PE
zsZHhpMTcPKoa_-Wp9gW7_c5n*w$zW2cQKLsA&e#oBagIb)t7?5cnLj_+aaY|aSK|G
zWw^JOEl?K>`{bh2q|l~1q7dOPd-LJ<!NW-?taXb{ZP^2Wbk{eCsNNiP<dJqLIr`4+
z;5_W{yuVP-kZt>m8P(>BX>C~y2gDi-d6rn5K-cB-w-(T(<YHEloB`Sm!O$3Br|VU`
zVH@q&4jjw??8lR$q@D<>weWynoLC*+0V<=-P}E)^rMCWXx6kyHUSp0r#<&vzp@g=S
z%<Yroq&7c3Bw5mDty%)okh*&w@W6OtkqE|0t5r?LqIgH(OnAr#8LI2=3}P{%R;p~#
zx83n?^)uX4u{bu}?Xu82?ybbDngZ_F#rh8i{Jpl!=Z+B6#tjoCA=s6lzucJKR}t#^
zy7hdlR3J)GQ9sk0$fYl@Kkiuv0%?qVMpox#8eknnNQ#^c1}wjb>pS*hKY^&(-i>9y
z%XNH(DVWN2G7iei8-RpwB)ooE%CL(S->f3DlLxh(E)TyA@-O!cZ+~NoeZmzr?QoOX
z)9XyKc7MjzxZxsdb^EY+LZbh)m8lnSjBhWT^po~PQImygUWI%1ajsrj-wza51DHJJ
z7Y>dVD!*iWnS;ds>_^k+d4DfM9xMf_5)dLqPsJschZvuMxvK&`cMPq}3?9O*_KFy~
zCZZTgPV#WjQW>}x1zo^juD4iRyMFh^^2<b~0anK%M%Py-o-!VZvsMC<rpmfk*-QPW
ze)lQtahJoVxSS6hu@b4Ntcf6np=vC?KTV0zW5@R-hRQpjcRRCBdmElV_V(s1IVIBn
zjl6(J>Tlh^EvA~gRjQ-&b>r?c_EN%{=1BIjra<VI(J;<nNHp5fNVbzD&o}{?*(HqK
zfpq9->|=NCc;KZ5enFD<JRTCBngKQ*+aWJ>+AWmVrj;S0l;NWt#q9aJ6|vrgSXzvV
zD&n|JT$sh^H)SVLK~I^Bn<BNsrMOL|jfI5$zF{)S0UTe9tsbioc8A4kyJm<nDRR7=
zl>wq}SYK~5?uX6hYM;{(xq`Q6B=YI=Y*tx$a9enO=%}~b{yYmD=<BQ(<!}u)193CQ
zKL~qYmTLXTW}KnN@5xyW2>B>-%IUO=XJ0!;zS*ZhdfMVOdP9c@t5oPJJAK#)u4WIc
zv+eyf$BkvB{hIs)kQ4G)<CZ!(nu*80gS~X@zN>_>jztYhW;>aHN2-az64Pc{M=<vN
zK+!ZKLZ`+2qos5zk|93V6r<@%tB`A9CT|>sR?X<rK=VON>j^(@!-Uwn5nAa;pr$-O
z<(xXX#FxxxS1yo|<=`vkqQ|vds5!Nu>3vVe7LH24j^8LK?ZuG0309J8jlbTXg$Ijk
ziyOU_!~uo_(2qubBZ-O?pSK<%^JtD_3|Uep4C_+w6Puml3jt-C@^0{rF;^+OvN!x?
zOv4YZx@Q;_$h>UvZo)3*{PU;~63HED<B8HUg@Rw{wDE#xB=>Q5%rSjMC#S4N&wgzX
z0v{0_^qpB3!g$3t&$97piGV~Xob+j{7#ju*k2pOBvCUse7)x!(j&SC&tonGM&T^cI
zhpBd|1s6NghOtu;HEb9hp7{+5((&pec<GO>K95VHrqaU#05AGwNitDbzhU>_{V9{F
z$KBgmL8Mlh^$EwEB3%s(7{p9w&x{u0gw*u|`AW^c3*iF&CXIHsh-+F@Hs#Lu^ls{U
z@8t6#an}|10sELc7fW|uG;m>iBpBzd@rrhE%lKJNE^uGHF$-~!K2~~dzo}0x<mo{8
z*U2i=Q7brGD06jCI$6`trYXi|CZsx(*#Cw#3fN}1m{nc1Fdpna=yB&0YdV3B@~dvL
zly)D#KoY@mZ_gRK7)h}*WvFf5<1NtT4sOU8T(8V1K$?yzW>pPz)b8zfjbthjRPC=%
z-LhLX=y{s6!7&P;t?$QMY&L_H?ul{?x2KNmUs1X*7Ww}NW_y@1-4<^zjd|m<J+)#q
zfZL#%suhLNb27+%A31~GsZ%Gii?^Nr(FoU{iPIo@ZIv&c#}=husR3v_Wp5IwYLKLW
zOkd^lPp*e&F`bkB(Mf=BV*tv#zs}xB-M@zVqp6hpKz%Y=ZTHvb?}HbkvHTKmIn$oQ
z&e$pM%l@XK;}p&o!AA~19H&`=ZbD_C3^2>2*Zz)*(TnlB!a_-Zi8ey>n$FpwSIF(;
zYsa%tnS0R}c&zWD{X$()d&aW*&x&QboRzl=+b_tRY|{7dbnBho&tYR9&_29tB-`SO
z2sPE%OxSx!HRwMPprn+2#|LF<;qxm8m^{y4%;^t(k6RZBRgt?#Bjx`&ul`|X$M}DY
zVLhMxOWW11gWH|vQ}Td_M7F=@E6X^#Vkt?FCl2sX{Bb0EmP6N^?*bTKTHud#(~95b
z(hr+u&~MFnRTxCmwun$_MALNHIFa0lyzV(8cz4kb>RHFgxLIO4RzSR!u5<$J875WS
zC{C(7yE9ym->NnOOxP<wLl6JEdP)hB8{mi}-2PQ47<phEv&a4x2)<mU&?X-M+u9Zv
z_~9YjreFVs2y1dTm9m*1{ILIQKDG$#aXnlc{X>u_k<93-K3HNy>-<h;vM+iFU`Eqz
z01`3adQV*Z^yC1c;c?ZOT;{CS=%D;xgah>;0t@%;=0o(aiFz$6b4BKt0<7m;FAj-H
z51tO^63H2K?+rY>`Em4Vq0cV(La&MJ!e1&RQ{j_Ix1#>PXJvm;EuhZY^qGj1akA&(
z)@{NP>8Ktx?Y~tBTwf!>>28k`@xSB${=VSxt)bha`VY@!X8D5|V*B|bH7WYeGq96k
z=}ag(Tx9mBu;srM4B4)zBBjk653@h5?K{@2B=UzjVJ|Ks=imMxnZ#FEjbBZm)plEb
z`{<Xv)iff^1nf+F(^|&+$8P~-oS0#Y^U~(FZ`XZjl+02=kmmWP&-xD$BdPzzxvFEs
z>1eJG9zlcKQ;jyPmMiOrBK7ZGyrX4Syh7FGlW&2X3h>_j$;nv#Ra<h%wiMO)*esE{
z*Sg&z;FjoM^y$&+KL05)jvcZO`AoWf_kGX)G&LMhgi*LWdM|MEnRe4Rb`h4|j?zDo
zF+df=jR-{sd&c=MTFoUUU*!h>N8{96yq8f;{<Ff0KVu%<8!os0w_T%$elv?3{&@NK
z(Yu)&F4FYU^^DJuIAup()aZyI>pz_bh_7Dl3G~~{F74waE#9tVIaNfx+Z>8~$3k`S
zfB2PsR7TiJisO9b^+m3L3(c#TiKw2_vo=Dl|C~L7+sJiPwGZP@uLEe8a0y$???<Qp
z4_+98Fi+wv$>hB`e{_mT`9CmQqwQX~bbkrnfDb?J|I(WOPBOFqJmr7S4eV&_|3ADN
z4dRX1|NN`BF7=0$DF3AhF9Y$aC3v5X5;&iq;}5;Z6Sx0QHvr~1o`Ldta8iYytBg{n
zs{k&gOB$TgDGi=~o%g@MmfL5U#h>>wOM#|^OTq6oB{jTaBxn8ue2pt<-FCwMvNlC}
z<2K_o<2D|kM>Q>lDmMuI-{<lBK+t2v?(}rxMj!pDlf*tI>)b=+zwco!m!QjoNnDG#
zMTLGd_~GdYfwyyxbU^+us{yfiv;AMOB)8L2hH_G#>i=!raBBk$#V!Dy32ht!D4>@A
zYZ=jhIb6p7WpCEs-8)KB^0I}YE_UT&<Kln7G6{jM^}?~n$Y#98c+0V2&lZWF{~v<0
z>-(^Yj?bUpj3;;%OaJ?YxIR=C*b&&E&5gwYpvC{!cQGGy_oR<Fcn7?~r7ZA6?8<$7
z($l;CKlLH3%}1WmW|p?TdH-G*n#8*gACVg21DF$iUv62r{)a_<Jb3%L%Wf`yYYZkJ
z^Pl$scxXc9;rstj)yV$OP_Tx8$sWmnt_LqB35H~1!T&xDc0qirM|9{?HJ`8Dlg8@b
zSxE~NiYWfO42fDjTK>E0J)NvJKO)TNE@=W14XFa&U2wg?ery?cU;KBy0{-kj%&#p{
zDtZ}Yyy&qN&04S7ZB+l_&@Z1vrlmzN`}j_bIx{PjMj5Sp3G&mFw(60;s|{!@f&ZY+
zJi2Op^)Y#T%;-vn;Ai1@Q5JA0iw;&RrgXd^-mxT+YD`-C+exI=O_yT<9zs9VM1oec
zUe5oD>{$-0WK$u@e5|2iRx9Q#HY~P5>lQ(>Q=aL2TF>Af0JSV$5Y)epR|7!4-Z53c
z?M{+29?lt^+V`|7{cCvPepG99fJ^a?&d=+>kGeDz8Az7`bF=24P*{8WId%4qL7Q{$
z0g%!L8VaT}guIpRDAh9omIl+VU)to+$*R>U|EQ;${@nYw7$wiq*Y`<m&Fc(GO-z~<
zV4q2X#K>xALx7IE%fnazX_(Abi0B+8bQ)d#4Z0MPHUW)y`ky7*m8%225<73|^iG~t
zGzMjktWrHguMgjY-u}uEIRaELzb>}9I$pw2Nb%Xa(D{AnMn4vPT)98E7PKG!d9dc*
zP8GKG9abpxk9>NPP5<5XuXnol%C-OXfzLFr=>&-!<E-Y%W4BsYuU8HvMY{kA2h}W2
zh|J5IC~{~k!A(@fLgfSikS*N*bPGyf&nk}Mz6%Z~S-J&;`i)-`U2JCTp0|5Xhb}3q
zfLUfwiAwY`LPqr`o=xiqs(#aZs>EmnD72E<a(9uDhl!W`9<NC+W2gkaCY0<xrF>t?
z3B2(GNKAY5c>|@)cL!Vd=i#+=YK6)S3%@H${9I7qYdXIaxnI<8a1^^MjU>emK}S4D
zsuqGyi<bnz>MW_?dYLANz-H`H__ch)QJ-SmUaB@ug&)6P=<GQlU`WIWa;sMdY~d&A
zsEacP0-N*GC7QiXLI>L%@GXH+{a;AmpLVEwqEnPlL*9SW*rsElQaYMA&VhNa&z>7l
zTmb>ar1p)H@>@U-the5r5?&}a$7A4X+yn>%;S_?O>9qM4-1g(VyPM|PAG0gch|523
zrUE2h2_252az_5&_1V)B5sYXE*3tB>;|af03JoP|1Vc@OIAHG}Hs)Cz&13@DZuSRt
zI3x;6oGGPY{Rg3+odxKr30Vl5Sy%#Bomhh0ALRE1&nk0Zj$RRuQO(CXR{~6htL1u)
zuiDevR({>D0AQfa{4VWV8K#ut$l{gjGm`xFt92M#v!Uh#7(SkqkF<K>!KBo^dt#v!
zyGzE}QgCeuXo83JOVhn+9Go;yE}FzGY^Ln!);~<o<1A)n4Q}=+-5DIB-U{XTo^E~t
zGStg)P|Xf+ifEC;E*m}xK_3m^iFCHPBPi7xpN{97;g#-~*mhD%cxZT5zrKeMSN=0{
z_tm;%ci@3@b?WV0E@aXx(dJB=%_P3f-onZs>UZnw*3kX5t4D+qY1?hKR>Z&?fy)lS
zbp{TahrfVcSjQ7AUc3C&zn)$GEH(VmWqObMGn)sYZiyevtU+Lu0R<J%eDytHO*DhI
zxRP64G|6HWOW7$gf9(X^z&;L;En2@3Y;FCq{rMd(OGz%Dt$ppc?b>AZSZm#4=?Dc=
zI()Zy(&AcSC7Kn`%hY#WEx1;h)kA3oF3lM0O0NFf?gA&4#D;Iohz{M>FmvFL{?fI^
zcy8=^^s;rp_;KMEwJY9pe_nsHp8Pv3^aDv|zkg_0=tN$V2bpLEB2g(|r)Th8kBMCw
zd>ha5E&#H6fdPG*ZQtI8doB%4$5P`Ky$?QKZoneA+4;uKtR!c(y|((i=<f66Q|ZGZ
ztm3&_*}U)m<$=iS{MGSQT6-XSR_;C4R(|4bw=`*}2|oOq=r5R6pIma&w?K&7v&W!-
z-gCb;E3wVf%0S6`j#trp@1P+<qY7B?ab^i0P6ga>Abuw{)aO{yTF<^eOWR!<cvf_X
zm~Od6(u7~{tmwbTL8(Mw0E3&}{#rT=a?@Y*rgC#`zT5|iRGQ6I0HC6j-tf<tOV<!E
zZ;c0V$5=HGzoq12xKt6d{?!u9D)SHr`0L?|W8q1Sxtp|HtQNh4ralOLrLJ4)o}>yv
zbt=v7N3MW?X-C5o@oOc6Qu=2ADj@ozKn6qyNL(^fYW&aprQ$-L2q?Z~dvMK>_vHae
z&HPDxVWZNL7r+2s4c#~VVSr-gzbn^k?E@z5lK>$zeL=}S1u%iys_{9V=*{p$cTjuQ
z;ZOS&n!hA$`pz~p4xekbe!1`YXm=KrEi9dDyDR|(6q^+ID|pM%jyY+o!|c9WdVCJ6
zV~6{VRw0RqP8ahy_KQ77OPYpwP6r~_i>{ZOF9g>FNa+GAqy}Mw@r8>Ga%%dq&s`<b
zV>EWrBcENoEC+`2UjU=UppcLk9zJLr7->4C@j8675gk@)OV-akzsHL^eCxkbOX~6u
z_<iSov{UfFzMv0{-5BX`^<7p_QAm3$GkNs8E|i>oUzhK(u$NF|b&3&)MsF9~eAY(3
z2Yg=kYY96BMq#_}BH(Mi?;jf32)Xutw&_X8M7i0_NP)jm+qw*El)9}vvcC@#1{(vz
zUuUXYXV)|Fqx5SmU)`|z#x2@Upi`LLV)b++1y`r<@9)h|<u-;QT#JLS!cCp$tU{0Y
z5Kk<UMmaUh2D^p4L1G-!24AbzCtWVwdFp2@slA&J(b|{$vW*M3?ql7T0kxCL*8T;v
zYuB^K5bx$W^g{=>jYdXjtG*SPli6n098WM{^KF^_5qusDl+>{PrD45&*omtMKh7AA
z=m~MMKvTT6X!zDpEpB1G$b6tXv@%-0@{0RqRK4m<>1n~NJ$?De+5k46&2T-rVZzw?
z${;WJVd7r{+p2NkrO;ezPaJE?_?$!7j49j31*9NJ511a6c?-(;DRZ|ax&UJ9%H*2X
z%Pj#QKc=~K`mH2>*2!pN8}qOz=~>gvfk^CGRuZ#28_Amk14cdR!$Ixrd<;f>jXRps
zQjwyM?NIN*EdN!x_c_%cfu<LdxVj?cc2(Jt2$~nzMyc)q*!edYV(kMoUopx2(yiTz
zSxlE>@`+$b^oMWm?+)Tfe&x~J2>krXlMtr~zRO_aa_hla+M$jUU-$ZmeldJG7H!k>
zyR5cmwFyrBaJ>7ewCAxuAj;%CZdI>Lc<P{Gl*wG%3^udTXVGp`9ZGMqA8Ih|SN>{o
z6^S;w=;HacX;im<&{rpOG}CeRLVV@S^Q&B@!R3h{V4WTQSX&x12mp-?=)N;Ubylzm
zp}n)I`{A~7K(_RK@q-YF<6ED3;O|LPOI=4eaPJaC*>qaeXFdRNn96)*?JLCxrmHLW
zqa}t_MmA4Upi7BKy`Xv{);Z4MR6-lwpX*)9GGN8i%Wz-*<}v=urqP*%>1d&UR@`wg
zD-H%w2OHf)?vXyt^!f@ljI*GJEBVz)&PK88Iz9f=ZaU;KHp|X!?XA=Htc#s&(nq@k
zFQ{%eGFa<P%huj#zd+AllI>>W24A`?xIT52SC+782PZ1{wH5rE(4aLing!Ug>K3&C
z$4>;EJ&TqPONKv9zAZG`M3Zl?WT74T{n_R98}prW$cBf5v(+0SC&QM5ffMlC<_jQ9
z<Mvb#rI5{Rc%9bb4e55mv)OC9b!76_1)9eAx1}S<n0)ONSKzL@^RTjo7-8!lM=U!1
zY`~@fcgKZfdH`lVz>vsYznL!mo7w`;5y{$qDpK&?@Aa|oE#@I)<?1wCU)ArBtY7Ic
zKK;dN*f`{Rc5P-7>yD+iT!T6Myw!5$0lB>JsKoNu^@m?6=_Z_?V=DN-L$%S!C9|bx
z<}Wrr@%hZQ9`60{u4uE5Wm8sXo8U6FvuPLW)=zm;x1n!4`@K2ZCV%f>Wde9jvF!0}
zS%){b?8*2pxT<klh6XHL!<uN=*L_dDAtl>;+xGx_JP5P2V8@znSR1#|v6#HEIOm_;
z1}d#gBAXuO>YM=fz;OjwP~yA*#v|#Z`xh4yBEuVbnOt-H9ZAr09>rbj2j%uFUfBD-
zX)ncP7a*zOYQtw6x0heGb98aPrg@Lv%=qBPLUr(=f~)O=A@lnW6z8tf4&&@|@oU>v
zpz4C;hhx{3t@+RUZ^jg07%*`x;UN(?-n>8aL6c{R+oU0@L7Vul(w_7%0s2E~|4RY)
z=D;>Tppr{EvlF-txq%8Fs7-OkxuYqB-mD)&7-1Vr_r^2PxhWOe6;MD>XyDhPN3**9
z`1h)5f3mDl&t?OtR)^t_S7L9t44rFFCUW%q1E7e>^!UU2*y0zdcDjXtC`*Na(+BMH
zG1*~^f4{OqQRm@iKn)Krd$M)a<?DKqKLq6iAf$I0yf!83c?GL;EF|&kExk-(9q0`O
zv+V%&hjESVw-{R4{SGE>UhEO4CM|3E*hzaQDl~#aCM-YDdjevRJoaidvWC|(P)*+(
zMIi(jb%5z()JE)*%EM%93Z(S#zfFF#xo&9trbx=(UUKCnM3WJDmtABtfDpvl!&pHQ
zN4-NYcrA(V*^k9<MS$4zGIznUgZ*tGHinbob!XjU3_*DXN$$<{o&U)+!bG<C@-CmR
z$Xn_xLC^W=OLH;ru#T<*=5?^5%YpFq$R>P8HSrqDKhZ<`C^g5vZ95~!{zWNGFECOg
z5mS_7hG(`rPJAr7_!(m=d$^6M_B23rYi)^9tNd)vF-U%@X!Zqz_3C(3#EKz5)%%Tl
z1#K6v>*6YGOv=&cm8BR#41#Ov1+n-ZWgu=Rsp?7}78!;LhU^p`*gxi%E2bDWHHBbW
zbC@kZY!$}VlFhjUih$<Y74DDf)+L=QWxZwU;zA)W!*&&M=zOJ2hc*~uDo8%h;F{f>
z_{!=`&uL=^#&&}NeH_5*nnLvy6Ghv|^1j6*TYb1Xe_yV1fM&q{l5O6;cBQP<NM;^m
zK??(4<4DYO1kCw(Rz>3LLrW(d#yyK&k5^XTTm+rw9j->1M>30YeTc~;xfAHAk$SyS
z=N%0R>IhU8K00_fwPkH&@E`noh^O2}cSLbN%=MtZ=4%XltB4$G(WVB^JY;+n=J+5b
zqO%;DhX=Uf7ZFB5c3S`ye%aFytdRXw&uBIY!6X5@JWD9w@Oy9Dm;WA}dgk%cObKqB
zG`2y(LJ+_`a|}tT9iZL2O4+~ObMee~04wQ(N{(zPcKwIqjZu7tI!>VJ*Gq<3W3)%{
ziBzEXymf)xfrg0>ySLZdLV?FzVnAz)b91|gj4(B#Rcyb~jRAPa16OKD!?pKLKw;&*
z2nwc!slaYRRp{qr*;kKKSof%8=3sWQQLo5ehbji5uQ5H~*&gt&H{f{4uPDT(XKFnx
zzGB}va2WgRIx5HrQ}mJ*Sw1}1%UXJ)+*2~+xA0deYXfok)jZMWcYot`DrWKL0Cni-
ze?C?pQZZH`1pTF(`{i8U|9GrA+5d7%2!xykKV<X0Q1fds;Y@h=>e$2QH>o}tDqNT)
zc;dhNUHtH%piEK#?{$emD7A2GUVzr`*Dvx?5JuPc68tWrm0OveV!(Ex4{3J<p)=&>
zn{V$&|E^!R^qS|!$tmsPaJe#n3ur^9sb!tcs?>5l8F>#hFl2(pk{gmg3ueWzA=qUN
zDqi}F_WkkQ@RcH7O|G~qF`4c)dv13C>~IcyOY8n6J>M4)T{G6BRw^y_xNHGMzy!IL
z?e1P6)0`<-?eKs3{@l~&yNdN(zr;UXlOXeW8^gcqpI-_7kKMLAQ#4WXSC>?R+wv_s
z5@@U=9D%7d1mJS$H$--hm}2lx#eU^Y3Tls!r6-BreR$l~GSLh^uvk6N9y*yts&;%a
zbrwLWOLP0k4-GutD5gnm0|juoBW9sSm#ylXvrEIl^7QC>$4d=^xl0nF+d@WR3$^BH
z3|~pU+cGF+#<3??ymGvFnXKfcYCKs>`YN5q!&Z63C%(c)xIGj^7Rdk3=d=-fE6c08
znA*3D++t`wjJNd@4U$EJ%UKLTp42#~+EvgrL)>b@Adg2983CVoLWwrOcsXK=AEgF{
zft+=@&C(U|GoIgr@=7`DA`im=<G^V^;kqR_&b{jtO6~T79*`AADnjJZYi^S*Z=Wv#
zE_=z20Q?^oQh{j5Il+UW_nq^fP$n%68DFKMa_iBwZQs}7qd;Db{6Iuu$RgPtfEBRp
z6wH1_8`bp`<IGAR_z~kWHOsYifMMt&RE1U>-9T;Gz+-jWq?@XhiQEs%q%hJ(B$YVU
z+s8!RT8Tl>XPcj@CtZfx%;s8#dkP$(&7de`Dr5=|vs`&X)A(IO6h2d*=Zzw#_CEx*
z6TH$X6my|+tJ<e)14<J30Fy`3So{!BJ_)@fa>O%>7RKHCGL-4ae!>MvOj7Ow1t$*|
zuHpERahC!L%i|*M^7wD>QetvPVM*#|2V^CLvee}593M1iKyHT<wOo7MwM(2%>h(^;
z1G_mYq&rj=SMb<Vt{ja45EI5hy(w7MLo{QHQKJ(S=WNo5BnENh!ko<;6J=z}j{-I+
z`GC4e`}+{Z(<1iT{@`Kt*g+-mHG+;g7+(2hK&`Z8ie)Sujy-zyjVZ~z8XpOT17;Z`
z4;m)g4LZRRkGOnU@~!pu@_k#%bI5DXRWwd-|7oAQhzhDc!QJO-cHsB3Wh-<}I4|Ey
z%UV~RPA`6)j@=?ZX5MzEp1^m)0Q(Z8PFCFD#j<z%8p@_e)WzR>h*SFO){FIJr)O@c
zIT%0o^dS0L!QjFQO3n}<$ZP2l!et>dZzxKhE!=zEBsx4`#&GfV=dF}7S(Wr$6N`=s
zC?&6+aBbnI8ef%)R=ZR9t>=z295_KZmm@RyrFMfqt4(J_5imb?OhVy*7OFs?u|EM;
z>Oe4EbzZT;F9_uRw%%<CtXXUOu}XHW@#4bnNM;4>c#+o1w$1{?+p6EgGwrt)QBNOg
zAFo`BNWgE#Cv7rcV7+kZSGZbc(P>f0oZIEu>)k~VAHL<K&0$0rxKAEvknolPPw-ki
z4KV+GnRRVU1`(_!c#|W|s9y>hJFk6$Xi&Klh*6Hx852PGL+E(FfqAW!7HK#cr16bH
zD5{YW=ho2QuNmP>YtbqV;HGL}fKzolcp49ns5rb@us!sJu3<wGYM48pP9J0l(aDG+
zNkn;*%X$^wbM(avV0=m%dljhihbl1P=u?6}N@Pq=9A!{-pQ4s57uQX4Wwkv>#ji}W
zL*cEBBdK7&V&<;g-`AQIgSWXf8ef!`jvFz`$Oqh8?4u|JC{t#{O<M7@MaM<MfS#ro
zZ!L2X%BbP-NketJgUmNmDHElF<R3XO)Od;P>!N7NlAD~$%+sR8O9K<>AxeHm;3$M}
zUb4WXPW=kTDRq!oU<$n0l`Jeq(u)F<YB?y2(3dFrq<Me17frJiQ~D}UumnnjPq-J1
zO`lO~qc0HJhcl_WHa#o(V~rBRJ~UJVHW<JrM&zHoovAlI?I1J9kMr6MZ>Vc6X<xm}
zxp3nHQr<eZAt`M_oSi|UU;8*wzPuSG@^J5VP0I2le4iE|DgHxz<iRN?CZOv<I78ON
z83W+?qy#`ZOZYJ&+}f>#kl+?ElO3CdD`EJLqcicRz%$0sen$!D69VCTU3Ee%KkX)Q
z3^HPh(w*p_Rvc<;`QqBLzMKnGXc_ESpN1m7z~osvhY!$>vIJrya&)-ylRXOT5K|hr
z#i8PnzF}<bBVb|B;Eq6Tv2+ss>1kQg^1<*1jEWNPF<Tlwa!o|SnodH96+7XCZZ_2;
zjr{KD*xOD(?oq~bE&DNuu2m<m+`-|4-}*t6%MCcHv|k3MxjrgQst`hZ$4aJC8;Ng;
zN=F<gNuI+7!xZW`%ho?Fr7_&c!beXOv!c@V`^~u8?PAE9DnHVv7OOQ;aLd^bNK8QI
zur!dJW*~93@tMYH`T6NV#GTmPo7rNvi@dFEnq<Kq=dYE!;*RB>;%EWbTo1j0P*21a
zw;_$P3|og}m3Y?m)l<<D9IN44I3NWY$V4$t6ZYIqXxUpV0nO|669zoIBdS~zFZh!&
z#d%E01yvmvc`sY~&;ID4mF=tibEaoEJ2C{DivexYP>|6$U>*QRDLATnHo|#Aup1zj
zMxvq~WxoVCjm)G>Bmgx!e;1`Bjv^{Go(_TD>=JbDv)oysI7%9o@$$?Z-u`Ys8EM#u
zq{G$?y;+$!yu;80u4AK_(j9i%;f~&UN)|kn;JqYPnbfTj?kcYhkSP5d={?aoNlaiX
z9{~r6Ocezeg<vSss8504^An7w)&2!@ojraf;`M|eEk!XHU;t=7l+s9Nn@VR?%A@gQ
z0i}Z~BR@hI6v!sPwN@}W6cgU!+(lKtqXE8}yM#1tzY)6bQwTN79l<#{T^Ki{P3Iuw
zR6CauW)UVW-vvIj)PE%oOyt^R`%0W#rfz7X9lVUm#Ik-$>7<I_z;{Rtp=ju5W|4Vw
zw^VZXigyp8<cDHmA3(e#!H7t&bZ~d^Xu_L5hKfc&m$EWFdtFag&);rOIKs2Xj_j>X
zE`XoV=<>SKOc>iWRsuIsKD($|^Xmf~>+$f)!54nE9caM31VKjE<Uj}oHx6BFi;~wh
zueGw^o3L?r0gK68r?hcPp=qCT;?F677_}2nXqk9~+@l?UXejp(x=hRc_*qy|D)^!F
ztjwy%ru7Ed=Cl<G=h=1-3*nxNLm#yr_Vce*L4INHHW4Pw6uD#32!;%Eb1|;0`(K?#
z^5PsY+u-a(Bg8x7ql>nOVDil$DC)lAvdu(}`mF6eyg_K@v(jnhV@wFW=-dbr{_15c
z{`DAWSdY2L)dph2D2VfI#hDab6VIw7k;Blm(*1>#Z`yWm^_V#lO0D!?)3rk{zg)ku
zlVG4r&Q5q&Xy@UqU#0}Cx=N4~_c@hKtb=OthOl$rg{|qG?#b`)O{}R(Uyme3tL+hT
zCe|3qk&=JrJpN1HK9nq;{z*w8!)6)y(uBQU_b3|Tq4({Iqnbpa^%WWVJwFvqg77$x
zle@{pqT`Nl0yS5+FpJ@ruri>zt!SNNua?%jUcea(xB=pnZC1*zCIOoaf<P@PuRNXo
zZjhI8&;aMh<rqbVZYPyNK@dd*Vtk?0UZnPAzLDZ#OK`hKip7_G&p?HMO;S^S;ujBS
znE$rM1o!{5OeCEBEaNQ}KDHw&8-CpxctM@a>twc-7)WZzkoFpZ6yZKVbqP<&L@6B~
ztRC>n09gIg5sT1Qja=>Gw)T7{%Aq69!8gWrR9uIo-}U0v+HPbcX)i?SOI3;v&|-W3
z`LTKH*Jn!_rp-2J6uPo~qP9T^(ffrclm3hZAQ!IxVC0z5V(vm*^RW}IN@yu(Xsa~7
z)~?u2iO>ANy%1;Gs<ZN>t}|YG4gGGfN^lp`Q*1qVvd$oB)otbk+)tr0d-7+UeLAJ>
z<boy%i+QP95W{KF;2mmp6+V3N5hBEso*e6dX`9($mp=ma3E^_V{VvaA>PoDrele`=
z2sr-mW|nEoPoWw2329eO=cgwxz)$+5NFUu^`1cHp?XyZqTTm{~uqe=3^pKo`K2Pj8
zg(VLDLXlP(06wY*oyw<4G_Nd+3`gm=<2#3&)>|+?w~|P$KmO4kSn!|0<N<&M5J|IZ
z2J$ZRMZ6GFT6U7ne%1_l1(omGC^=QTwr}(A6@m7S;Z(&Nz7FrmfT*`y?Sc=vrLJZN
z#ek7*sQLJ>r2)aJ4quGe9*AJ`gD@NE0-+?oa+R|jBAEz2LzSjrl_?=M=ZKeDmskO}
zAV@{a$B5HcAXO_2YjZUNT+Z%*0moM@CFQk`!a&(molxSv&Cb|I7xkoO*KvqZ2g^)k
zR?+APDsfLJXo)rTaQ0X}#`zQ1E!)4L)8IQ<okNt}ALXtpc71fcaLBF76ZBzA`Wx%R
zyIiI5?PgHFwp6#-FMfl;KqgfggUVv#yq&pqqLQK$HLF5BRf`)cXj5B&PsP$)o|AR4
zj%4jnaeE@Uj<p^#J`v4HtR`J)b>f^vYp4ez@5KTt-V%wcW!uYlR9K^!!*hH;R-7rV
zMGcHx4<<dsbXq5^CQf;9>Vm`K$bGB@o!CzT9v$}h!UpXv#t^uCh8~?)CkMTNqsdd?
zJ+=E|npsO29cMECLPvK^ug2bVZN6@!c`5rEozwVBDS`(>Wu@^N2F$fj{1kDbHy26f
zS{R-`qnW)};{vyTiYu(<gaG5)xSkMHDNw&H-JUWvO)~yOV2yA*EqQu^$AxR-FZ(Z?
zOa~59+otGBDJ*caurBtPZR}fM4Q;{B02V?+;YkVZStG#}6*pOl;;zDQ@uD(DNJF4W
z5I4EVEEn<)FCZ|%_*|fc{-M@?BWUcGBd!)xagSyv&tfDU?<+a%kWUXoIvg0xl9$O0
zaf>pPjP+YYYj1#BVq7FLldg>&XMZie5oenvQ4<~|76zvuZ%?*ZVi5*iF<#W1a&1Yb
z(u|705ohc_XiRIFyql@E%ZE-!ei*3d?fX8gDc@N0s_Mk0<36q4mgH>t!#aa!;1M#-
z$-c)(>bnjyI>_M+CQfa^dmoCADq`!sU|lN{|4Ss@&n(4;6m}}3`|KZJcdwxULgtzc
z&*1l*oOL+I+2FCEH7V7puLzY)ZAuIDR{geg94)qYZvV-|a|@%Enck@Ewcib^QzUIc
zX{{^wfjrvyfTW#CemczWoH84{ckU1{##beb2h*4BZeWDv-&gGw^FOA!16v>A-<JqU
zka(;`P2S?I|6S^TQy{wYl@w*0T(<Nml&sE*Y10(MyEc9r*eqre*e235oT|<{W-4g(
z79$()gQD#XYt4@DCGeJ;=l-}V;psU~_2}YH2`iaB7oy32S9BR2_uKcDR*_kQp4l~E
zz@)c(L*s6)k}^d<VU9og4!9F=XHD_F=i9acCT#vQA6#&NSc06bMe6UED?P<?SS@KL
z4Jbj!^26eXW(m{52EDuK*|<a&tHKm+0!3T#crO+X(k`KhzeU_t@+KFQU2mY~qj1wU
z->OVvd=gW}_oB;oFflOAwl39JieV<-`sapD(tiATVwy2QnUSJ?rDNBOHBxp~g)2WV
z=X6K|6LhmNpky|$DMvr4<T8XwwXHZtUsOl4T=Jq<vfHI`l7VxOoEXbWm!r@k)MN&(
zN>%!3PGZ(a3YPLkagMeIY|&2%1MliqaH2!U7ORed#qa9^rmY-o3R}PK)FeP`KHP_i
zZDb393`T1_FR(1-n^Yu75Dhe@?av?Yp(KIPK-#v|xOciRjXFH?#9#_?%*dH>S{Ja4
z5Yl6H{N6i7%nxTXFCqNKYtO=zMXFqw=zfj`$bw3)@9gi)2!_}#yKM0tsm9TtRhegi
zbVL-sA_i6TaR9zA8Y9x(zN8FH<Xtpl)b>hy>MI9c1>61SrBHL0V^af_=~J2nE1_cw
zj&Bkk#$`-l+*K*@T0~9uQlM~CPKjC0V1C!#1d?jq;nJ(h*a_Ayt5ZfkaZ)=h6=^W~
z^Np-4trAJf>qBO0|94_y0%B_6Xkp6Hug8CKVP>a!oG{nDthB~WyI_~g>mnqVj1@t#
zAkxS^hYccRN9Y)c8YE*Ijhej14}rh1f2rdDG{xKwTDIo1)X;sg?2}CR=}M8-FLYQ@
zGZ=Zv5TkWyEJ1VUI4ONk5Q%$_jl_GzV_jLE`VfHGmL_%<Qp9<$+#vSy8d2e}s+-N%
zPJ=Gd9inI##-QCMDa^=lWFNFumUq;%9P+j*POH}B$_4KTrG2gg?~8tsM(f7SM;-=g
zP)VxAG^-lxfH{rwtE%(BY>?sh?|{G4vn%qK*Nfe^m%s;2OZZ+yyIjYPCUKwLkAYfb
zis27PS}>@yJMV8_b97N-!ZZizqDpDvTB_DONJniXKd>id+cfz+@1Ff__86W&STKxl
zp1-6eL4rl+cPPS{4F>sGpkpoi0ToTIAm~O=>Ic-Ed5!W$|ByzAS1%5;FKVLa6GkSJ
z9f6DEJgZYBRiKizv&czsHU$F6K;h@y?_Jr-52hMM$c)PzBT!fUhRgMqpj;@6p<?ad
zfZEU4CTm}vjMv}<P<kITPCdzyFmpoTj#|>1&Fgcc)}L(X|HS8%ZdNPtc05(@297bw
z(JZE)6(Hqfm(ikptt)?qhHb$iV)Y2c2csEte~tO}#({f4bm}$pUM<-WwVI^Dx7tM?
zs>HowD1C;4+`daAaD9#z_=8G}!H>+Hg)z<}u9pU6k(2R_!L800sT)FoexcQzuq0J0
zprdm{*i04`^4=ik!&>+LJ12HWjT19W@gdfB>>lhcTfsmTwGuzIqWVgEd}%W7a5ST~
zO&LMaJ@8b|ZUJXNo##kX(iyVAUJ8+d^l__Ud6o9eNqlSpBH|VmeU+**rZGZUPiRKd
z*Xw%1ccN*lYQj@oTn7Q8;?(d2#2W54%pxO8b2pcdos<VGtI3@*dAXt<9gr8sxz1(v
z-|cz)tp<+^U#euqDL*Rk+AqIy74@DPHE(b`9w5+c8Y0it-rLPmYq-YyLJnd{PTxZb
zc$NuaIzp}KcOg#DmqXmKdP!!FcXM~R)u*&5;&o@{IkwB^DPqlvy@ODj_o*#<O=vu_
z1HmG=c5Zd0z@J#=tgFdoMx|y$eD>(%r7;+BLY=WlJbOkM_@U^V)|Y2v0xWca8i<IV
z>R&#;>rKsJ)NRdj3)o^*5a_PyTYF{DaF3aRa_VnA+}EB6KALGzIbrPrt!kf-1$4y6
zl+_^@j4LFZh!_K*msF+K5efn&VRa}CYgrQ_z^!vG{nD4AnFYphJo+)Xt^Zjcv+u7Q
zkw5A@+X+-yWV{)wgcYJLI0WA*bXKUj2usGkv{DUS-BQ~%K?&^ChZo$(F|L<+i1`A%
z=X%09BIT546iY;6^bcG8ecVm-LAvwN-=6tOYqbq<otg)YAPE<d{A|a!QelMcU63)r
zrt`%2KsBb^zX81xf42v@KU)5GyDvv{E21Xxo>HK+x6sIq@LYTGFFl;)qS7a7dq@Y!
z2w5BJt#M8?v00^Zw#NU~7J(ACnLvXP3_aPUTIrZn`HhTsZlIyF#oXhT2R+B{)0b)^
zZrA%gb$b)GCkaJdf)jsSu)nuf9%m-cRnwp&Qv|){8o}4=h+sPrdp39Q!g&%fb?enr
z`ckY|ZITDawD1Xbt^+Ie_ka?l<Shre0AiVF*aZ;TAUONz)+Nc`vzWk*FKgZ!9{SA8
zb|2zD=7+pV5rcaut!PVkNBulE&<KqJ#xI-*P}1{Wubx3oeRV>kMMy?@jrhzUg-GAu
z3`e|$s9Hc<J3_|$s}yg;dQ|zaCw=01TkXB*b_>d;aBx>KO$y0%wp~8W{j9<0^|?gg
z?6ZCQ1&oqdr%>9B3K2RA7M*^buLnwFXNcl;lUFps#BxHns(T#H%1m^)5gVdO_9;BF
zW3!4wOLP2jNjZ{QFDhIgXpzOE5hIC$(Ut;KU}sW|r43>z^kf}7ZNR&FEL(4$s@aEF
zGh&o@^>vP6CQvoZuRsln_1UU7ufK^R6S?C_%XJiMBI<_JFcycgD$<v5gvI+|;oSR8
z?_?j)`I961nhrG1S@R1IhtEk|7C~ISB@??I4cL(R4xP3Pzkajw(`N=Q0RUL?sm-rm
zaCyq;uEw)t6no*NYPBH_ZCSQhVq7u!rWw0CB`P1^E6%^7W`Ud#+X-N5TjV+b-Qekd
z?&kv&d6|&1gtj%C6*r=mtQOOh*xx=WF<O%<gn+OEdc*>IynOKb;iD50=`cQ3<%3j4
zO{eLeH0{TYt4K}=*d%;rf*o`vuxSiz6Sz&LwB~HT0$scQsLe;GOH2GvoM8wf8_4UN
zz_v8+4;N<)*Nxz*vc5B3)<j^Bcmd!aXjF~)O>!zl$9qRNn+#Q>A3HCyD!r(&j8WN*
zz8E~OB5U8$CP)l|w;AocA*9MrXp7D`Bqg7?Tr<p7jkL0>K!=Mf?4YmH5%-^UaM%l{
zXl3SttBq!&&%QtAAAY9g=s+<R6Di*qF`T?OxkyZOQ<#6|OKS7e^RV$*(l@9^E5l?@
zB0=0J*PoZ!8Jxd<!q?gFof>!R;$3BgcfC*LbiXf>;ibCpe#mF}`H4iE%E}X%934as
zTHf3t(K8KNSiBnyxT`WgBYvceNZh1NVwJj}oiTQoH}Mr5yM@0zvvTY!?Cdj+Xx#U#
zwCiW}Eaaf4++Puq6}lIFL#X>27250E{|`zX2Y&zR#%aB*ocn_o7>pCVT{;+QA<q<4
zNkQ^Zt&RfbPP3Vnv3W)+NKMm&*k}SKIWyrEFs^wnEWTX4)K5qSE?*219S{xw)B9({
z2m@+l6k=4lz=|x@a1y^oLO5K2jeV0ULWH7)jI1qYCGomz5t?$hx)SxRlWa{<Z!yT?
zcnlCU3*F|&Yn88lP9!!?#QP0biqYCFY@rgQsj@;GpslIKe}g7A^vkQL@r*={EIG|@
z166Jp6<zKXMRS7N#RfMaQj_fBr^()cmlfoGHTDr#_*b%;vw7B;6EkruN#;18#Nh61
z)Gi`f<XTrQX1_|s5#~P%XLXx(uwg2e&d_Kz`Fu+thv^aZ$<ab)1Vk}jF|T~3Q-rvj
zMv9^rO$}m<mbB}l7;@(+I9FN_hZ3XW@XW8i-apD+`g<D)<SW1NL({yZv6_IQS^_<c
zl7k>0>e80o;fygXXN+h;s(DR7Rs8-?XGkbPZ1O~go52bzSup28Hrz7!XOOajHR)6-
zzB5EL>SI8h7OZFatq1WR`xve4gLv95<|EWG5Z7>Drh<9}Omv>$KFE(OoE{^<b@KeB
zl^%g#O2WFDNu#e81~VDcGM^%Hb_xTw&7U1|YFbG5=a<fBK<2R2Uj!z?7W5q<Z65o@
zO=LREesZNye=;i<`m8;E^cDzEO!Q|BzdeZbPTtOCKIh2qcaPyfw>V=Q>TfP36ZTbJ
z8+XG3)}10w6G!Z<>?c8@kGcL?S(iI8c-e5H!y!qS0E-R-1Lo&ym1VXg>iW`@O~2C~
zc+y02&P0KdxkDhNk!>|4VXe9Tyzt#b0Z0}=WCjJpz7pyoG_HAfC<rpj<@z;5zuf<S
zxcjTHs<!`)8x}!Akd*FPfRxg`D5XI`q`SL8U{TVIbazUJ(jeU}9ZO0i7u^e<iSGT|
z|Mxw5j-Tt|0GKi6$T{X1-~0Y-6aGej(RP;@qwgBY0B^r^@O9H*$f?tQdiw)mK}8oj
zJ8?0kG_LnDu}TG;MqTsEd)m$_Zgt+scO-nSLnk!4FlQ_sHj}IBH5jcEQ`-ysnxGUi
zasL)9-#y_I>~272z>?i+u-xgP4PwbU8AG$89xR2fJQ-3ePvm(Gj@*27F%DIB9Te5H
z<|w!_)p^mK6*(|hiV(>YSB0<ZDR=D(GMhlf)6H@s+fiyZVtsM(&aRHZ9r^5*v-mLe
zG*1ZK3x#@IKH@MU*2)mirN@|K*MENau>LD)cl4#p@fB;9QX*<ZmXN||<;}McjPG;t
zU9(CW;2_TPs&@q5EnEFe@^{z6gTm^5@7U#$0$@Mc<q`+BYUVoly*hvOI+6n6(5*q|
z)AJri45-iik+Qhn#U#80lOzt)Y>3u5C+Rud*<Gx(8WQxf^+-h*qSJPd5L}6NAtIB9
zJo3lh)uXDi{6tXBEtEp`v+IUvLtSpbx{RhJ3XQe!8$>*CUb_xAj8XeE?KX~=-a>SJ
zq5+$aPTugGtR`=lihAwGliI5vI+IsUgM|)<q@7pmw^`jklI)<$Zw3jb73fX_w|jSy
z9}n?5s!Tr{zj*}eOO}7<%_V?w>Fde;jBGo$?P<^s7B(`M-A+*-c23qxt<4Q4)7BU6
zT}jT|Pl3JBwCuhf!jO$(2uiHo6AA%{`a+&~7s3LHX<A*ijqZ2UU4>n|DpFRGC&RH!
zf~FRA{ziR@bTTcLp}rdfS%?cr+i$mq8zi(#tTI+nJSfElB!f7Dp_9|Qe}i*Z=0dl+
zaadoN*6h_qB~tiZDJbE7?5l(SZuXr<2Gz#!^1OMW{O!wLZ}?#pPy7W%z_u^v-SQsT
zJRk-qz*-)Mnj2fLOu!XpfaO~(zYbD#0nBd`X;If#YhSAORdwyXgHqrF8>{%APN!!l
z@=2~XDXzmQyindOF!_+<BJp>SQQELHSBguE&e;V3o?fI@hSY*A3_nSyeh@EM&*0Yt
z34N(_p6onWP442TE{54%Ms06>P43=EYs5AR5yoVth3<Tq(vFO?bE)0%v+MhU#<+=O
zzFXyOu-?JFON)#6veZNaE$exgGpV_I33DRSII`^3%a~e2{4X-s@^rb4Gg~EBQHVbD
zTf02Av7x9e4gew~(L3}m%52QzUO4nwas!GDr%i~?URMEIYE)v162aHq;}mmbi#&7r
z`H-m1r|}sc0O9=9&ssX@>>0_i;a#Hy#uc)4Ex_6>KqV!z5ZF$g`%>Y8;u`Ctvx3;K
znU`p@9ENl>Bao+;#^LqN{MUdAwVv4zQbGFm#X=)TJ>=s`_oq4D9vRiX9$yq7ZLR&B
zhubF@>Pn-6UmUCff}N^IYlRT$wMO=tWZOq}i}mYPt>ZE{7hYdo-#pqbZG{879`X0A
zR+g7=1|61$<oKVhpO<g&wmB6!2Re)Vey`(~dXXoTy_Yz*>fa&V0pun2l{vun$nqQ$
z=7>acQrhOO;;|R+5Xmo%zyiJoSKg@>)g_r!w^St?>5^>m?qx|L=*U`B(HN}kc*y0M
z5A$YciEsEXLe71rDYF50G6P5|a$ngb0?CZMUG|x0Jy-S9HPm$j<xev7_z?)R?sp48
z<6MRy5#w%i{=SHN^R=|%u#YQiTk_`n^UX@2Y4PqZcpmDyKON0&E%Kpj&ORk>DKvDG
zG}AY<8e{X&V#Si5OZyhSrXrYZ{elUJ*AoTy{HWzP{bC=S+#&zmSQXTos7h29Y`$CV
z?e`P={KHMcOR_5oJfey*6oZ9TJ05*we=*QIWwAw<%MA6OS-IAr;%*XbJEHo>k7YB&
z4xCRIzngj4J~`r>_=2mKzbUU%(HvMMpUkeJ1~A$cVqN|yhH~JV0K#tPmGcfE&1t)e
zThT@EMPU0GS%7!_+S&!<nzu#<RKcyt0XpDSa)1W!ggUhI0YT?Z^(2bR`$1}A&zuao
zs*@8-eS}z0qw9CLS}0U>{*9OCVu)(y%lRqPQelIN8%})fn*#-PJ&L4lVK``@P?Cc4
zzgY7o>w=O*Un87hb(M611A<g`6Av@rkKX_@f|Zx7uMr2~Pa_$eeQ9Uc2rxY&f~TBb
z3;FEi^4Sf0ezBse^%U>>`ap;tJ98uRu-U<KGWOc>lL!uYq}$@Gkx1JzQPr3{=zZLy
zhD#Bfe<67#8!adl)UL9{{uEE3wXhvuGm)|NcYQ3kG)rNhx#~o6aJ}W+OGP;O7~c4y
zXxFxT$YE;JM+lHWj`xxCY4T3$U6dZ8hZ5PBWyK(+r9AJHp1h0yL@=r9{;N31?4NP5
zr@Iw1c~nNHp@;SoH|@>kp-)J#fGvQ+9I&^gA_m&kY@bs<$cl=NRy5inVAi2zasujx
zXK-6G*@DkFA+|fL`F@72Lc3P+K+4LM!67IFswBc)xl_~*d(wHyFMIt849_5LKmk@*
zzJ5(!HMAY+)la^!X{*sb6F9K9whPq~OKw{st<1vCX%C9NVXDJ2p1m^DW!iX}Sh6?w
zI`d`IC_y(Y{3h7_>2f&@#@MSc_PngSwlviBO`=2zAc!7N^$5Kf_Z|Y~jfbeT5R3WO
zaoknb*vNaW9$eXD+qyAxS_l>;Rbxf%4;Tc%&XR3wLFS%QVyOS_38l*c8>lDEpBu1X
zJ@03m;$E@b8?dImVq+2fpjNv4R-~Y}>4T`c3l@ohShc}A!9~;9i6HAD9WOhC==cwx
zYBBg6`iJqhiXeUimfri-Diup!eHI=h^=!uUK^kSx4hW+>qthSOM})qh>S@BsGyiai
za2574x%k_&NWNE%#IP+eD}V*-s99;Hc(j!9EYCReXZ^oLlcrxV$p5B5HW%Tu)Rh1~
z=&^)6vhREM6*z(00nU6F3xHq?qRmykveo9+`;TZ1OE4yqDkcN~m-8M(wMBZjZ-O4a
zY^fI|Zou5(p#o;KHUFF$hEem`Z9DG%Zw}fd1XsEkM*Aby=1(T-nZNq~xSP0^`6~jO
zM{^*S23^CCfG}v=-8QcJMLdm)lK(>_Y_Z=CTddlxT6Efw3{qT7|5vn^o)l@H*;|+)
zv^!%B{;8PRN_C7|6F;bOf%q4aCgriUx0JJ9wA_?|@|t<bl>eVcLyit;ab6pCPdSCU
z{BAIk=mns4cSkZ08F|oi!p;DE9->9jQYtyhgC@|V@M!o-?qDf!=wL7KxB2Kl=_iq=
z4~mdQXNfR$yX;5#+irEN9~>u`_g$fM(Eg+7+`q4*?Ijm<8QtfzA1;Tw^uxc|v}?8Q
z`+_NA{*Uy~{>2Ryx|ps8is$7evD?|g*L+i+_?!d6zsg3bIW*=9-R1)z6m@M>uW4^o
z?=<Sai+P;)$Q?JoFjS)D$7cL<iNs?AK#Z6BS02|DiMpAOLeKtJ+55<#$ok(5m>s++
zs+sivACT=&>HNRM4F1(w0#3TbfAq9}q@e$!CUUyvsc3AA{lNgfq{DU{oMHG&wR^b~
z@>bE~?Q!fMvf-ihG_hW*>#|M@g#Nn!qK6cGZS(K5CFv{yD$J#X(pg+(Wy|^Pf0=@)
zf(9-R%tt{?GN)ZPa>sU?Mc4;B!JpA68~?u*(=Tr2M&_(_QP9}cH`Y)(E0m(pFQ0?q
z(*Ca|^Q6@q?&e0dAFoxr?z{NyzF1Dsy*Gp3XCR~5em<iWoBThrpufs|@cPlz)>1`R
zU*Pb8(8nd6Hpl(8IJLlkw9Mo$mw*1#&H!YG+0s`@ln2p0P@pmUt4|7cS2FmVI&9`#
z`u7E#mvow4g=6yM@g6$a#j^z*-G+}nHgjHc`*MQYby66DrvJ)Y8}|-G7fNb#KMOyQ
zIBDfdgk1hAN{v0uiz3cl00`&7Qjgq(wNdW>e|G}Vflxp`>auuV)VLfRJ=ECrKa}51
zd#jY<M_f<3c`+#LKVsl(M$%PRN`V6&m~ias0{l;-h}qBiLmOQt*p8SIH2+t!iDXQh
zvUky*atm#^v7fy69#r_--Ga}3JTbHEwa)YD|2z2&qrq|#fksuJ_y3fw=RPs&!-jRV
z-@O0f2vU>hK=OyGzQYp%`QtybQc1jKUIlNhtiQz44tqf3xn_m=&u}Pq1OC%lAM~FZ
z5+?c9a)#UrtaSosDgoXpfv<#GLcq0`SLHOSWI0fO(PVES@b%*1p+wd+m@_o8Ucn^?
zniur(uFLWF-v{Vg4veav*Ts`tFh(l6LOsE|mTCBzN`2$!irsXBrT|Nv#Oz#xK_1ph
zA$P<wESuvs<3760uB`J=-R8uVEs?=&j9FZh8#8y?zkR4|yqagx$`JM(i)Jin5oJt<
z6p#xsEO$r*FI}M%ZfL{po@fZeZdM2&9_<py6}ky3QEFI}uCrqq;iHwF2G@i57oKlL
ztSYhCPv>uIKdTRBZ}#u#pmzz&_P-d5Hgx|-<eY6}{f)jlm9I|&%x0h0r{r*hNhW{I
zG*00Az>0$PD!HN)uqK|A1#onAA!bhDEBzK-zYuW-s3GH#SzN%E8J+aca?z}dKy<?8
zAH=oGzB#nZ*U!>=U~P4Q-9t=lt53WyOd4v;q6K5vvjk6;8L2A_LT=#7q_&hmL1>JG
zeq}Km&2(w6&|LpDd_ORf%sE!B-U=#dg*?BRGS0F;%GGK!{Hk?1g!@1;Jo0=#Wc1K0
zy7C?+Fax_#=Yt8Q4|Jx3cK9a$MOPUmo;S`mLK3@FI|?T0=G|^qmW%2xSNzGivph2!
zKzIypSK)81=zBkFI~xd0%{ZM5k`FIN9+=abx5+600TScr&_Rl}IhCq(M8q8SK-r7T
z!u<@ue9e**5XsKmi^zo!bjyztZzz2{JL*F}JL*&}4>NHz6Wl32@iM5$0>efjH|5O@
z)+y<F!uH?E8P&%#h&eTZD#^J%jp;ZToGG7ZY-i7WlblHL3=3KF{yrjA-HZ1dY-yi_
z%W5+dQWA4B1?U^WLT9m_Y)bFkcnpLO855Ig{FXh>n?4o1Xnw%QUtslh!?ISd{#Y*@
zz7+49vsN+$_>;c?<px9N^wL#0uJ<;HfHd2s=_%5M<mjggK>W5TB*S?7&ZiFtSLZuS
zzRTmjY-hFCnIkB&0{YQMsI_dWUz0ZW#r;l_#{4M>>J%niq8qLfh;X^f9aS=kEF_l^
zZ+<Q&NL`IrD4%o!2wy>KpQlK_Uz<g$MJLnv@Y=@i&eTS0T`g)Jg%_1C++b_62?t@{
z4|C)k&c31s?Iq|mKOnf4{gxV+1}KD=HY3xPIt(+h<<oz&v1tE}dSChL{B}F~V0fGw
zmtx;qC^{$@Wr5;=AavT3|9I)^$g1-`2zYVpPC-4QGlRWJFpJxJ2`d~DZg4NOTRu*B
z%{8XoETX&XJm@@mp^<TSb!zP$2a^SI10VTJ`}I1N)~E8$RfypniJU@8_-}IVwoRy(
zPdz(t&WcyJ)fi7QTW@rFW}%LN;%PmK9Q+x>tu&-4?nSgmL=v@k<ZXTutr4G#2SuP#
zyx?nfc*cv&hOEq8;BzOtJ<nc@!j@Xdh6lbv3PT7$TYt9xHo)6Jdnsw>3Rr~jUtRS(
zA9-Ua9QwNUd@lTIIo%yhe`^bX4BALxcX#3<7XW77k%E%%6_cR*P90#e8gEY6X?5HC
zO8Nz0uD=zP!MCcIAwo+chTS{x86wFB7g-y>wIG@%@ORo8ZO#Kkg@F7T1W^X7_Y+y*
zVM=*FKi2;Qi78ASKp6D+fo=t0z7#L>!SbCrl<p1bRMDDjE+hmoSe;oyF0x3PfkCar
zotKvi{2RoVc`KD?D|M>*p{lr~sd!oK_OISiGAPdm2lo<AUu|yiOOb6(n;|ORTown1
z6XrPv&W3<T^zud+xhNue5l=~6w$~eLeA)%i?`{r6?;r<nkJb+K+gc7{7-~?$2^@l%
z<K4D=(zhz~TCfAL*78~E2$Ag1<We$M+r)P7buA4!)9AXuoY<K>X*+H9pBON`pr;LP
zPz1G_$z3+3>Zi7S6~b#p;|<)_WS3S%QAaKI!nK}HL_V6Dd}l9p#y7Yw>4Yu%j3<<S
zSlncJtGwbC^P+XJr@U9J!9D`DgEI_V^xoU|BZp_9uayBM@|wH6DtM`Abu!vfI&?TQ
ziAGg}J90R)C^7t{fv)Y=KQ-rjKJ>;A7SqkqkJAH)ZI_FW;&cG1=<67!Bg<z%;Hu}r
zi7tFOw`Yis{OOm#<tmHP-8&PoTAnR!QmHw=TD7UpEFcJ({OS=35qs0@Ge7GEfKjN`
z1l?etxf`<}D?=^^GgIVz&U57a9zVQpHP~khJeBG_Vcr8qUBAk8s@3$I60D}3vd(t4
zq9}wDhY_V_oW0M^uxHDrr5=PK754LA286IExo5})$heX5J*dn4r6L?zHS67Wd2L-)
z%tl>CwA}1_;KG%&HhUiD#Ekhk@@ZFjR#U4gCBZ=Omp$u(v-86;hm|H<c`&Vo)N-}~
z?egM?W+Q}N*M*+Bjm_n<YtLP|o^Qm7?6PF)GLc1#dSQZ>w2k?(lg@p*$o-f02lgTp
zVu+PtrC#&F=;hYzgV!i`#fKt4=C$3tkAWl=wt0!Rzj^aoeLX}w-;4?3dOT?STkj1R
z>K#r98j-*4&(U8|uI}3J2Pqtsdiz7*T(M0yGhZ^&GGD4fch?`Fsim;pX7fhNV+>?W
zN~Wu97R}5us)dkl*vZMSX2eEaSCo?t*9YWHl-KwR2m01g35C5H{L*Dl5f}hbp&5I$
zB%2!KiDI)3?7j~PMwlM{u6D+o&B&CTL<Zn%vFX~YSG&UUw)(iG#`0oh@`KoH!=yIm
z``3}SSA)~GfMxnXDD@hh7swM}r0(eUt1Y!&FKFd{rK{+Ynv8|Bz@9fiwrdy~o0lKd
z{eW{_%wD)?GAPb$sS?IbW!DGE8~|HP!5k_a5Jyv3!jt?2a_#akw7%JnRUM@Tp~LtO
zy5ib<hP++0yi%AhO1W2@`Hzz>gSo5C%bDExLJMbqS1P9SZAV?!ST%NfZcBW#UOWJR
zal1pcJ%IOs^sQeII`j;Vg4y&Cur}9qnTtB4K&~>o8n8)!FK<DssT84#0{<8Q&c>X%
zyw1ruYQZOAxP)Kq;-UbmFx^_+O#c0lCROuHg#8c?;M*u7T?H&u`yjHnK&&hNxmF;j
zj3wuzvw8EooOnkT=dMur&DcF}{XEzw6Cnib^XJQtY+PhsdJmi(YEtEYdwbR>1PD>l
z8v(pmSmV-(d-%gEtp<>PC_66GQ+fA8DdAtkDrfOI-mT!Z_2~|8J-x0%7g|-OLVXTE
z|AaG2tE?`Lw!|^+FE`{40Kv}ZL+h9tuRcYzlLtoTAgNt5SOi|<$>WBTRR8hG14r;6
zH2sNomz$QHI~P`Pi)bg@=K@g1hE-grJ=1ycYberV+Pga!r=U(i#g+BN*4_DN*dHVf
zi0|V)ubv$lD=fzGqc^=_U2Ia+@oeaG+_-RwpWS5ATxm_N42Z6cVOA|ETx_;$k6|kx
ziq!S>KFM%1u_3$isaHTzEA_^^sH^PS@=8a<wNe;xVsvKe*JRX(2pb2)Ujecy*DJXX
z&Iyp^wwU_lvUi>Z<{I^VMOdjGYZS5SRZbVWOjw(_B464jz9;zXE9gbP_R`rpGqGdq
zr22$yYN}SD?HcLjet&1UV(dvx31-y=T?N+>yil2kZ>Ol;Ix(&5vT64UA1NbDh<i<V
z`j%?fW(pN;-JT5Sl(h&IF~D6wWRJGZ8*P0r2uEIkTLpP-)8$Ha7WaJ)G+wc;WUaq;
ztFotd%e7K->#2|Yo%p+8hObZlb_HAnIUt5AQms%;onl-((Y$vH@7@t~>W&Kty7Q`7
z&TdS5<(YX?Ea#@y+rG>0QKMQ1ahW}ZM=v3>Zy<6vnoVv;)~7XL310DRKxaQ2ff_#S
zi=2CpXzyZXq53_xp6oWBv$ErMeAwD^Yc=j6nJf}Jd_HA5?0|oJb1M6}rb2&PwxU-H
zc6rN%2S)Wz#Osvs2J8X1Gml`unMD+@C&g&n@M<La$h<V7yFHO`^sW{KW~+AzCs8KA
z)fUf<E25P0RGZl*qZQKyx`1KV=;A|OB8Ns1>7`gi5QKB#!MS>6tO!CJmQV?D036oT
z(DL9Bznu2+VFlj5?|-McLp65gyneB$zmU1(zAg9VI!zh5-zHQmlx5|0-uP`y<`LNd
z1<(z!yd7xFXt6__HoUMLa5R}NfSK%--2D<X>@7blGX`FNUKvei&Iy(?XWh;Dl$Buv
zm&fmtY-J`(0_?BL8aYHFQeM7hc@GTEKUZv)#Xtr(7-TQp^OTs>MuLy}R=v~XuaDpk
zfTM?Y;Er9BSeMj*x{Nw`ct6aljrFCw3|NNZn9xTRM2+HeqQjA%=yesQ%7J!l((Y%w
zb^*Q=xc^>XH27d8qO+-aM*pnp=T^`0t$8^6r9*>sqh-Z1!*bvwD+mb#0TW`d4|80#
zJ4A1oNPQUG=cZZbFeHS4955~LV2ae$1vr!d_A}I>Prz*IbdS|o!RG8I{(FA@!6qM)
z=db*_h{)3D6f9Fl*Z@cz4pp$1;0LY}2Bplzd3&y)m=posIY~YwR6SHqRJpN_1|<NZ
z1$S$h|3s2D99u%5(!&5dw_9J>qtp1P%h;~l%}58(hwHGh3sq>=Dz4=Z7kS;nQKIeT
z5-XpVW28Pm{`O;wG6%;{z_jyXdvz?`0rrtbo&@6*pmCpxPhd8>0oqu$$}!4L(#MZJ
z!BWpi>ES&?Y9abaVq}~SHQiD=D)r_d>gIi6e&|=Ttjb`O*l0AUlG~M>>T{YVFS8Fw
z%sLHMCV-?Tmf;B79SN6fQpn#Xvm1~RM>6ZRep{?|st>SP3*3n5#^wFh<=>j!@^L<_
zSR@MgM&JjLguT#J4_NZ%^^OfFV%2W-c#Y(eN&C2HEvcY=ur@cd0oL~fEZ4N*fBYp|
zugV#pcND!->(<GzmNc^!)wAu{Btd^%A}eA`dn&Tta`P;C$-Az7pK}Yh?zlOpsiJ1Y
zz^6@9@SEl-#5UKPOs`&Y#u#Wu2A@o4aH=|zXq{oqQ|^8FKhvtk%VnBs*$?B_oQ)DU
zhMfW5^oB3QDrbtB?@o12z3Q4bZt9F1<;6GIH3lxMM)F|>h7mjxK9cF?O;iEhD4+Eo
zql*tolEfM9y{dA#!3+gr>Psrj8+T$UB&(e_H8a1rZ9)^mY;_FX>|BG#wg*u0l<asc
zSK9#m(lu@;_}ozU0Uuj}1)5QJ^nLvVPl9`w7r*BGW7KU8MS`0P5Z@!IB?Fa8t@Qjf
zm`{TzUwJ9=X&?`9Ig!)*F;jFD0jqb!XWCluId0tDA9~vrcU;t>x5}X^DTo@IcJqv!
z=}b&dXXe6Y1mdGSg11HXL{=6q-g{td#L&6JnTK^d%i#Di_UiR<%I~l6Ha*(q2Uz9}
zTs`kQM}T))XuWLaxY!%3kA{hh;65Kujv~^G-|gRRq0pJKSxJy?iu8BG-*N1102;ex
zHS_T3!^I}p^8mteA0x3-k<O4O1S~vn;Kj<PnP1-p#{!1u&tjX*{3UmS&fm-dB#lA4
zgDiftw(cSqG-4kBq*xKaQ2i{;=jY0ORd~$A7KAuiUf&RxG3A$cFA+#wI_oaU6{!Qn
zF4P5x&@W8b81S6Cha_L!$yc}@+!a**Hn%Ra-eONrItqqN1qobl-J3xD+FH3jyDBVd
zwKLV!t@1C8o^U<%($>K9fj5SBpSv+BxfQvb0AF}Yj(!Xd&M60b`0%{bfEb>N8c)y;
z;QdS^`R2WQo*(ni0aB37BZJ}y!b_qmPxqXI+pB(O=I+7~EuC#y?$<w+CyPXf#xGlW
zXo$oY`VsLf5-1+$MuH0AMSA_&E1R{t1BWr{b&c3njp(`8@3KuyXGo~mc5`SqGO_ip
zYH0LnHq0|d)0;(+2AU$FaVLCDXTNE?-8SYzakHM<Q#%_a?Y8T=ou#$GGKV$3doAR-
zty#XweyuvyQkW_KG&G}(RIp&iBNlWvkvI0J1gj29lk(DtXV?i#W)D|s!Tp1IIpA;?
z67ran8`aiA>G8`9biePB+uS4;An`{w$H;V(C~DD^ZWfWG&74pO-t@#o-hqC#;la{|
zdCkwkiVU{>a^B@D_mhqEo4Ry!&9*F&A%!&lt<NjO=UHe2W==`m)i+*?W@{LJw}3N6
z_i(&70!?)%9#<J16%iD)!tJZ!9jc}mH^46av*^w%-^OmCMpY!#X>$jkcL}fO0Z8_N
z)STO$!QNb+nxTc0(&tX~n7l_DUk+cIZ9k*U7a}T)MIrJ4L8jd>oBTnXnXjwZ8~jzq
zPZ|F;bF*z1s9NMZ(ly*wC!qVK1Are&8kjPbz4JcvVhBj5f7D`SzD<=x4&GlSxNG6#
zc%{>(yq3)G)+V3-;0$8B`;9!5t1|40#S1$ClNAK2`7!bZI@5T2NA6vs&%|ro{o7br
znE-?qo>&Q*J&?qcQ};5BD;kTx-d(75<G^fvqw_A9{TDkMUZL+Du>#Gm!}iv|{S&3r
z0j*RRVX}TQd>s-Re*6vuGFo)q0l{<6;X+b%KZF?SU||NdQgVX&xiROT5>M;D?k+Dp
zBVBHaOru{BK@1L^iTl=Tssp?m;y=DRvRzzNp)O?6%UMB-Hu~f%P%skUC6sEL$!f7$
z>GINSg(jug*Z$l7Wr>hcCc;>7&G?(~7o2D{u5jd|Ede=ks!4g48rPJ|VkOt&qRfd8
zwar|nheAV6TVtMvP^F5m+e8|)zl9%G)jslN8~J~pLkcy~&w{Ua2Iz6wuf}&5PIj~1
zxD=o&Lv(XW8Qz(%yTX>YU~-g)@hxKCbcfZnP1`gmui#j<J@3QqqV8ULW+r#O%8Pcz
z%T8h09eAc0KpuJ~D^P58$744S`lXJFwKXb5N-Q>vE&GUbPw6A>K<WqVr|9TDx;sHp
zWV8k^w_c-1{Oq&l)kG78<c6L}o-rx0%zBF9#)x1=UpCz!P#V~auhnv2t~Ow5#A+Pc
z3Y)O99lffJmT{J2-!oj}bLk~3K^YvunR;FKR7d1Sd2Q+%J?B~QSNR0XX}ne3ob*d3
z!C8lN#7GHnHK1xKXE;2G-OTN|It^dpVDcNFU9hVo)oJock;hvF9OHF%79V$#T+ozJ
zXIlvaAEMF$><bz{L~<dPZR5VQ_Ia(570c?T-?<$^ot`w~!#uAo+ytsg9Z*~Q4iCk%
z##*VWlcjPug`6d4lM4F;9fv=rytEv@_20ODgUbBtu;;~lB~AMPQM|!ahdSF;52+_<
z2@?!$`!|Bib$j(Lr1azq?hP||@<&MVCXe*Ig!xwEaLoJeZiku01-uGE2#9j!!P9wT
zvm)J*XWdPj!!p$0oqkDqd7vKX4<O{@(GZ}(3F#=}Or&4wi(?v2)hI~uqg+QMGXk&Z
zQE(mTLl!Yz;@xL&jrDOWV2DaM6&BL6p98BU2IwP*>!m(T#hXdzSk)Na;>I@}(_+Mn
zjfD7A65Z{q%R~z!|A-gDlx8t{l=$-Lh+tfekSAB|-u|OHp{Lh^Wq#`CuiWmGj`!x$
z^zS>04-mX)@k)RdQ^#4n_2j~8!)X#G@R%F}_Spgx6q%T^`n_gCvS>HUHLH><Qz;ua
zT8AXkKCnmdA~yk<<iYrlh(f4NY4n^f5#hOtB3E^c`mKbc)0Lwn(JO>R?pT0wd}o|F
zZ;A{-dNISz5kpff_7sPa>zS#W)wJCUx&#C`meMb0AIJ{9&ncTjw>GSDY|~Xjs2T}l
z$J|h_Url_b9EY$IU#cHVN}7dp2K7ssP7l`9yVlX(x6z&*axyILrjP6{j?6d&M^fJf
zVDTgy`sV<c$3b~WFi|MJLfM5GG6mSn{`O!yaJaoarZ18hOyBg2T#Aei|3qAVy_os7
z>HIe>UBbMp{Bqr`CgqRlip?jor{d<qRp*$iNO3iYx<5akdaZDI3D0g3&vrXL8+l8p
zRP*Y|tz53iOBo6E2x)7Bc_F!V+6q7zX&(2I+%ylbGgis>19`0+l8$^xqwAR_7ut6_
zp7=qH?{Ra1*P%r}Qs?My?Ow4eE{(Yvjg6&lR_rY?ZLM+#-X$L1HO<6b6H}1Y-NAT5
z1GTH&=Y|4@KnzOeP7C1d?F}zxJ^08*udrNFdBm{&E>EHpj~R`KO{q0RG9BChyp3{u
zsnx90iz!Zc9|A=PHR(ilaybxNFHBWmCX-#%tEXr+IYyZrf|pJIXyB`P6MLtBc=%4d
zcf3l>__u^Qt{7PhI~jL0U@wOMSh;+3QTzoHqDi7Fta7RdpHWAqj8dI>h%Sv!50lBC
zoiGuv5z=b2LQu}InbG&fSl2L@sSK}QNRHva+08H#D?e^dR|YH`M3=b9=<Au1-bGSS
z2Wto4d}+TiIFGh1VmN+!t^0k0>4L-bH?rTh%Zkdd|Ac9ct;WgNRtyzP@0^@&tDF8T
z**;)bP``M?{YOKnjE@&c9{1(9oDvZL33q9+lw9F<a9$uEYuKwm&fyo^445|MLsVbM
z%vPO1p#4NcO|~G8!`W*yVpKS<m9>jZkZzX&@|bdRkDO0}(*jCdSaNz^ilWH9q*vX+
zWr^Los!0k)9GE2fPqW4}&q^<sVTtO9$}l7jFa!MAy)DH9Bu;v9o~`L+jj$G4``%zj
zVGll7hH=|1>q=8Srusy^5dBNHL0@X1)@-Z^n7W7C_ceV$c70W(S<AMaTz%)heVlLq
z=`axBQ#B8uM~N~=)cM7#BgrCh`o_3!$~tF^d>RkHBtFVW_h(!741L=#f6_mJw**)^
zb#p~(9N+oB3Hg<{9E-5|L4k!Xk(|Nrmp^S`Cw6-^-qh^G+V`@?lVzhj%_3Xj*iX+%
ztager2;WfkB$LRJ(?$J2C$Zt7MM(XCir+cGLPgdiQ})RzfQh~uTb{Z)ZgRH!{OECV
zg{q00X@D0Gf>?O>FIrSZSwk^XI)aC^%qj|@sY!WK(c$CWBwRYd9{V2o<;c@kyb)a0
zfOpMFJl%}M$@h0YW?@wFM44O`(B!ee*=Jaon)es7csH?xhpOw{-1vvDuuM5hL<eL!
zQV?G<1bsIk7Kft5UR;9D5%lo{X5Mo$p*XA;W7evGtmnuxGRzQ2UP`mzL9CmQxT4R}
zzT$GeBg?0zpxj+gd2hIloJ}c)7fuj)5$IUeLM8CVp=OE=PD)Bx0!pybEZS4o>fic2
zASlC`$hHNH=6EU_=JgA5xtm7M81T%xCA`c%AmSltFV-4V6v`^#0o@!aSAcL>Mh}xK
zBc}V9)Slgo0nhf7`m`tB@9UT~-xG(aqfaocsf!cH#{*4MVdXLRaMc)vi&F|$tt|==
z<v?&^n)BC)FTh$kR_F2C*~;fkwD8kVya~4RC9wW)X$v!XjO?@C+>ng36mvQsdGP=_
z<MD3g`!b^$rD_X`5})Bvi`wg!#zJ@FM&xx48`2mCkfM2Cj4Q~w1hE{&rfY9$?Bk<T
z;)k8p)eeciEbGe9C+5$SZA|?!eCYYD#zavqI)oau#@f7Jj<Kgo9ZVy<_oFnZht1I&
zI1w^2)V71^UCAmQ<X?8O=eEdPg>K@81HrLW6Wt!v1~CkyzGtSYmhG%o%2G<nG~U#2
zqO)i?uS<qQ0a-(Z)C0B4e<a)9SE0Cgb~LlQ<^#G92yy(8&s<4bKqH>{bzc-E-o9cR
zF21oa)1B<-W%*h5YT6fm2XQ>P%$Ge9aic*m8~_smKOfVp*H$?uO?ZI9WDcN%p}TvK
zE9{lW%<*w4kzKj6kj!nkucfZ828)z>=7a_UL@N^sP`0MbnqIX>x#wj2EOu2s$n{E=
zny?Ii+B>L9_UX9yWThC<H)|+$eq;fbIh8{)9;Fauj$BbL?hg6(n`_rIx(|yl0^;xd
z(dcH(jr=-qa*uF$yEmL^e9R3SQ55z*y$<ie!X+io<C~}xGo+rpzQV7t$f!ZaRasZg
z<f}$!&00nq^7W_V$m#d877BKarN?h~7q2+W*{;@@1XqMc?sxzmFB~~xZ{DuY(#GK?
zZw3K7V{e4OJT_K~)oICt1U_fn7c2zq-nT@&7GDAk;#hZ5N5T~^IfBn3*3%2Hg1vOi
zQvs_lU4Y#Zh`50H!><hu_hx_2oR#%1wKCE>A{Q=Z_|?|jNPeePyP+<Ek^z@QQ<TEo
zlLcqKnmMC;^u&u6z$!6W>G=J^!M&+r7+jJ{L(%TSv77($6_<`@!6DTZ-Mt`#Ge=&h
zD$cEjB8ogNRDMUReYN5Wa0W*1@((^Am{05;q)K9ZNvcsC6ZjGjh2%+HS@P@ZS2#bt
zO`W63hc0ylpDgGg%jz%>n##n`4~LyKf6+vEiiC=+VqcW1e(W3bbi6x=j=%t$6U@~q
z`<;vJ(N&N$Fhx}c15BFKxppx_&Z%yYbeXp&mJP4wBh$v&ibY0m5?w!6EpDkJE744y
zPU@<6Z-ytIuL@f)e2RG*oBA-}WiX%7J<>isd85fQ?l%51rQt2ET-k$?9YxvFuvOm~
zF;roLvZ`x41Bgco+z@`pP)4}X+zY{^wdM>$K`FlnT9K-g;R?grhS#iHCOuY*AjBgK
zja*bv@im|!m42M%(DB^O%h1h$KHuTDa9L=p7~bwW-HP{d6u!NV=Q+-OnizLA5NYp#
zZE#H~%>c!XtT5AsmJxc_D|n^^r1LmcTpAciz_Fnn5>k+Mk1c2@y`8+J1C}SfC?LA|
zW-C;*O(y6dz7tbZ3gY2BTvl;)c(dMLsQZW}8Nj2eebXd&<Ifox#<<>trFXv>`}8W-
zgoirR#EH?B-_+=3U~l+qQC6jzD@i4DTrW<5YRIE#$nEnb)T9scz3}bjL~z{S=q1hZ
zJ7K^wg&Pr7z`74B#Xw)D#<~EN)}k-!={xswTiRFrn`t>sD>zlIb%2+GVPVhr5CZH^
zgTrne90?}%25ly&R55$kp^rMZm@c_6=sr1*({Rv^Ts(bM@B~uU-a^QOEl@*KjnSKI
zXhK&#aW>Yz!@l58t!w@WyXuQw%YNo*=OZh{6dbehd-o#_Ccv99!GxC9wGOHKbqj>>
zj9=+aIR&rQi38Lxus9~H2?nT)%{omN@pWiEcen1LSUCiEe03<OyhUT_iII78(gAkL
zj!2p_*xi-x`n1^6?iB3#`Xnq_j~YM9wE11T!zy1p<z&tI>F2U$@NJ^-OA)O#SD||R
z=mY2j1*}zVU%QIhL~c2a*Va_#Ex2FcZAzbok_Y(IQ2<^8(lUlPsTM{+qulMl?mWN`
zr6*TFKfd1Da%^OPG>^l&ceuO!{o2@p_f|OnD`+sLSi3*|W27gw?%X<&aq3=K(_&?o
zH{RGo5#KVJ2d}&N)J6QZK`;RT!d?LPe=V0ZAUHrbHi^&N!;U$eS#J~F<{9CtCSB%Z
zW+!V1Z>Ee@Z&l>itlMYw@&JNoW4+8!<qxj*2=Mfm`g&DZSoKl#xNAQQpTHlvyaDG+
zMsnHWD_4fPd9QTpk!9f<)_fj06dz8n73E5nk2;Wx;Rd}h9lK$Y+4BXByiwR&|6WV?
ztS(##v0uxyd1HzV*z-vp_K`F^fxZe|-soeL9|K}4HN-0K{EhDsc*4VGaY^?k)OrDb
zj_L?4ph%iA<9bJ=S=I#_e)gfP<tVhR_vOB~Np@sYKb5ParuGSKcnH5Z{F&qB2t;4_
zIw#Oo-_ZLr)V2Z<f-RYTgnkH)L!+(j6%lQu#i@!SX(z^`pE!tUv_(M^dt&b=%Bnx0
znv2ap4}j6(W|e6jTU5Qm+0Lon&=v7Vn4F9nNX=*$N@BQb6&NWkY&TdpO#+O;Y6_)C
z5M<C1Fsk15+{5g~n!WvlhWL|@yI7Kn%=xe0&>;$1<bKvSiU8o^18?NYMZ#v_xP(VD
zw&P3i-F1HBef)9ATOaeccZ+(N31?q@J?mP4wR+ckc;#3l4>=g;xM(aTl5ZTd>VyNT
zlfN?m44?D$&heE{&$8Qk?pTkxwgYyO?)ptsS@W9i%(#K9)coB+U<YpHjPyaS<}7-)
zHC2HF9*WhiI--<_bk?>0tn!S^k@el_=@8AKzOv#0PBux~jo-~lZDj+$uJrrc7UPt?
z+(8C#^6y8QN>Wi2_>*!=T5gh^e8!@cw8qud$(C1VSIevcV@Q$wHj#ErB%xk>*|470
z@$Si>6e^2}!aVuQssqUNaN{xgJFajD=kr}Wg=jSHy0S|va2I!aFM5gbGv*I8cDy&D
z{Tr^(3TiL&`6^BK=J^}LcL-F~>P#)?AM!A)3`65CLO0RtWM&-BFTAFEN3@oD6||Or
zq&OKnMqZGhV?IK-0tiNvK5X)uN|Nrgw_=8J?;#_ql~X^F70LpRr26rPu#@Y$1du!H
zN0JNzVe9h+=}MLFOM1*S06&tQNZ8h7C9mCb2Ye%x0_L+A1sVI+5~F^d4n$&z-aHmb
z>jgaTD1Hae--guWsTM?o$Y+i%+ve0B$))eu@i@j6jl^)boVx9uj=Bv_)Lj7Tuz)8l
zv^ng#uuZKNA-iijRMHRJr%BIJi>#!#XNj3b?!z*&^B|U<;~X`*DFc&02vEG!ZKY0R
z=99DZ*;!6OOch@3uE)LuVj#A;_hD#QAS6K-xOhL~I<ZYi0sqqqFsx5C@h+dH8d90g
zlNQ#UOV7Xx4<OE735zcW*`Qldh*Z{3$C-9kS%GaH)09JPX6ydx3~<kHdU!+cI6H%=
zASy9RirEFl@9IC_FKe3SOb@H0NRe?4CDWW};G6zVK{HjsFukId6732KD3pSVRSeuv
z4wz|M&e*Mye6?l{h(mZ@gF+-k{BzztR*b}4gqy9d8L(RyceNJEO8$y9B|bF&9X;h5
zu635h<MeHV@EKKeOsvS`)!V@KkT;GS$<78yDgpt|<->3=#ehYlyWTB-DhJUabgEYK
zZ#d~(HmymHv6znymU~%oUEqFJK*S!q?}&_dn8f<i9E+dt{R1A2Y`IHUCRR>eD`@e%
zE^UyOzlgvh;+f?3hDlt=8QR2GxET_f@Q8_36^StJvM4b&CJ9BR^j{lfW!`5wVo)4q
z_;^ze)-&U4eLJvMfGi<;k(ht-O9ZGroE4Gmgu6?pDhxRw0!~}$-qZm1uQSujpJwny
z^{sanb;G}97{jT@t%6Vx%kKe_(8SCuhsOhkks_w|fGtb}8P2tfp)9Yi1bW}s*v#Q^
z%z@zEKD!aZID@hRdbT=y`8x;7_7v<jJdH0h#)QV8rsU$M;Mz_>QEREmN#i_TX_7P&
z9IPW8!uFJ8%{H2AZyrs~m81KsIrJJ+^5PjKC@I%Rb5d&R1-G5ARYIo|K>XFIaa&B8
zL}18giuSy*MrY?frF7}UD^jK3y8U{}gTs<^S4N%3XMk&C{H2modu%#3)wA+SEtgdG
zwh`IujZNaLQ9Up3<o8C_tNj%Rp17o#6AVVwl9>ZoczD>H2Y$shDk2N2ky*4^olL6R
zE)zi_iL_Y(!F$RV)|LTJq74DC`2qO;h)Ibe&kOgrT&NWJ<#2TL{gED}n?G*WT!-Gx
zhimEM&U%{x6e`SK*1_O{s2`i*KTKX(#L3gt?D=O@;d5>cyWO9$D}`@+LW~%8K5<bE
zCKDi5SlrE3g&nhMl109g{glFGEM>$sa(wHRmUnl#fj5@Wrg!dm=tGk9cY%j!Nc7um
z_lq_E9}eK3HLH>#FXe^Cw7X8_Wf;d@^ujKM35CSEPuUO+4GuukU>3y3NtSX4NJqy@
z7$mw;9j$7WItrGtcK8O`M`nG<uc$eO%x-mOXm_vY`8Yy5^)G{S_D^&xLNmBr3az#K
z0?>Y?n{TLENq=k&e&#>kb_D-$j4kl}74b}8G?OD#tjh#V+>MeKPbfyBZLH*Cd<^6G
zZm(s?<9+t5Gw##u36pKaxS;Ofz#g}ChGxJ?nH~*YN?uMzij}3a1tH`Z*z7dHWlzUI
z@3J7K`e6O>hfhB$kpBzkexj@r1B^$jt;x3+zd1$g04=Voz^Y<8F6-~NN+M^T&2Ens
zf?K@6M&E8WYAfl;6RqDCC7UT7x%Atf3^=;?d6*53+a02&VDxxx?nWu?RJjsjo4pSz
zCS!S>BaDqHesymLlmA&(JX!~B=(aJ9y#n2FXqX-k@um#W=@~|ZBCBb?3~Qh}=%u$@
z!sC7KDn@{h{aQoktpf_-d&#%Y@wwR=a<XaqF%_V#ur}9r=uNtllH1wYi*lZ2m;Eif
z%=gP*REl;!WVEFht<=gVLz-7^Qhu3G^|IST3B9b2j<Ix<e24nbvd_kC+?LHIA6vVP
z;a?Csm94)9=^iw$AAUkaM2jNxjKd)2?~Ny~!~PCq*L|@@1hab;@nV=)_nU{F^rM!;
z)~yby;ntG#7RpR`Jku0WAmvZNhTSgh^^Y<ZnfG&PBT$q#ikX###E2d#kV8FwVd{XG
ziat2V%?b~_MUP};aw*LeWu|(h;Ha<<_deU>0&(j7k2tB#SJJRMYGmo%QLU6wg^TrX
zs%)QoJ-u0$1x677A}N9I{t7H)jE%#5GO2Q8GZ5y#zv9HV#INmrK=gB@@>rdvntb*^
zwC8bFX+b6Oc_aLncIJ)mSpSd?VHGrQpU3yay`H*e{TsFL%$arJb@1&`BL`&?!Iu5(
zPo1>|5g5NgGcUNlHSaKUNQa?l?g;DP&Td4cn(gU_(0U9zG#K}Md+3KR&kpJeU_Z~-
zNwm49-=#oj8!2_$4h7%y2QLN{@OqiFtFx~dE%@`c#&x}Z296$d`dNFCk~)^jb-4#0
zc``jHYSKpj<oN7YqziADi`mIM$L&0<<?8_=P(qbaH#P_7pqbT*j%6fmGGh_XZ-OmZ
z%N}yqVf(r*H~Oii<h5Vzw>pTcPQ9h-+iMRqr*y)#+!hzZFNlg;-Bk-qT)|5M)LQ6j
zz2AaDdwy@WM)B#+ltIUjKcU_n;dT|ABs$e%u^SDt^S9iHeytnD&=-vIZ|Ozb{g|?O
zj5M7{wA7!5e6_}zXfwIJHArZdFl5OdNv7_WwcJ{KP41k<TfRJd-H9%jgegbZ0Wmsi
zu9@|dO718aCv+MTc!&AJY(tl8?pCwCwi)aE_T%dGc_7WCXFK8{1!9%+?xUNLSNPDL
z8(d8Nc268MZIP8*d0lCh(V=Fnp}{26N4tDkSAEhYElGU6X)BPvW0#L7u5xxME{jV7
zqml4_#E%y#5SR9go0OYuOPT2V!EH3^0B7L?-V{(Gws;fv#m($H(2Q#TtlgaX@Q*QX
zPv339P@xPo`zxR6llQ+?6Wp{si(S*zY(1q^QrgvQ)AAfW7sp)FZcv^n=uId+r+s8p
zmCw5Ut7OV#txizE$-r(!7Xj9k=Lj{MPVHS4saG)DTyEnocBQCXIv>s6Y%z)3NpJ&G
z2VncGdZ$?!qEY9gJGA?dn;0%v6Va2>c8KtpWzx0jXLE_80(Gm|F>PZ0?@2GKhh|YU
zy+f{=)wLS70&Qu`b9Yh;zNsC26mbL2&KFp@p12l`|C6z&7dQ2`PVYrD2!D)~gQN7G
zBvB^5lv=q9xh<y;z!sNg^>4zc%lxb^j=C+d1cNpOg@ktR1SL`$-SOZ)q+Ca$YDQ&4
zH=~#}Gw%XQRTr18?}H!Ovb4WrN&al1<wJFKBmMAz2N9*{Ikv{T3JNu*PU;`5t;yx`
zId|o_ssmzdqi?7q=#-CFQ%7(^7sZm7u)g}Y#{r3>ZY#c@@z>5^$`}}svLZEBX_&CS
zIM~H_$mlY~#d<jE9s}v88bb+b$3Vk0ujjAd0YA&C$xak<zU~9Bh<;5@pT&;;8u>Oz
zc&|kYJR9n}rDy}14DN|JCEh@~%t6_bAMSSeKt*GV-#*=uW#TR${f=xT!(CC%4q#0G
z$;@RFR4jQmdWO3$dH(CQQ6!~xST18&Zt=mF=`#b)n5i1>Gh9n~ufn^H#0&%l7V3cb
z4j5JHkS`>M(NA6Z!!{Pr8y4L*wqm(|E-UthG`*rr>vR~{cv@KTLlv1|yc<_MWDSn<
z3r79$DE(XO<?Jr6TSFfzXt06O_|JumU%YmnKIHtNV5kFrU;st;=QnI|OXP>V{XM{q
z`0xmS4#cGTJ>22X0qGG@Jh^{P$v4doeW=@qKb1Kj690Rkg!upSx0eVH?Rgr(@~5Hv
zX)af)1<C^~yAcWh7Kk_`(&n``p@qC0S7r`S&HwyBUy#Yk7`<S3vD(e6v2}|0_y1wJ
zkkYSdG&Qf{4YSn$clO}D<u+dUJ?+00bc-RyQ24)_S-y$*KV_~-Q~h5}-eUfr+RJ&L
z`(HiLzQp~n{`BeotJk+IlmFcfhv>g6IIEQYPfK{{!PEf|Bl|OAmXZU8i#>SI#X@>&
zcA+U#f@*#-W<0YRqY<OkO3l`wA#0cPpDQgX?1X!@-q9|jTr4feT}Tky&-w<wDi>)0
zO}090j^p=e!prmjBq%-dX-BT~ow=3n@|JitU5T~sT1lDYx&>OP_)&fUsY;XLbeMSL
z^{_MX#MW%`urx<poOYY}i`rj}Nm;G+WOFXH3nd>b5rPmtzY1qN^9i+%YiZ$NpVCzv
z!mq`1yp2fS1GBzpPr>~xTqw!3W5r0*Y8yEybHOEh&w%TAQ%daar64xxZgox8qr5AJ
zZ|7c)|F<bCcfJ46xyPZ$NHRqdL2u$jcSk&}!d*IOMjS#<S6Ijs$1FYY-dbxYAdhpm
zamA^Fkx%?6c33Ad&dIEIGdQoSX1OZcnv;vsMdH1`sz2iw#6XS$6DuuNqeUx?n}IWf
zt3_G|jVdAb>i4BNHeMZ*jXn%|gnv8ZkLSg;bziiPI-3rLHjZ&4i}FRvf*6+6c?8fb
zLX@GBHbJMvr2eI2LUYMnIGSdrI{Zh8Y2|^uK2yfE)|mQ4z3j4bW1%=DyOeL8aAIsK
zf~rvm&buUzS*J0_xvA$r=L(1x3MC8?3=+w+3~Db^vHEBtdn!Z@ZusQWr`5i}_A(RP
zh2`h{?dsAaKg%oimr0&T>dN6N7)Lk+E)bD(^R0}TYQ3+YSel9dBGMOT(>uO%BBkOW
zX=)RATf149XEC5c_!7zV_1W)cjd`~(sk6)my8bi9@gqI;K`28*A3Chx+vXLs7kn}4
zw{-#$vMcMGdO|4@u7(^7f9JL=)L6}v_%M*8{cX~gPk(5%$Zj25>TA+gW|`R++f`tH
zK5L8rUK>2_HZ$$8ug~MU%qsZUF0<mwzG9p%NhCAIE~oJ@J9|&4GZlp>biXuNEo=v)
zF^NvlLSsp0$awj?@1C>E+n_PI#38o9s?@IXL$}F^zvEdxNL1&E_-0QzFQ~SLSRvR#
zmq~R~4udd(HD0z5gW3_c(_(w&a`?+6?PWNGgk{j6{<Xr?h|M%tU9#F64W_LAgxB#S
zHbWy3(e2Iec1Vxh42K-0ZoRA({<f<%Pi^5I;<>_KpiuhB&B89Os`r6H?=)I|et)Fb
zWB6`J(TaG7F(zr(zuDPH%$r-pTHbFrF63861&sOi)$4Eanw;Txb0LEVoJ=&O5;l?6
zQg`Lfbbp6|Bkqc*wHNP46h<udZSK{KG^eYwqnV$vY~m04Gvl3oeuMVfz<7vVOd$Ky
zL6jRZ0nVHr6cv$_YlItT-|#fyxLKS3bxPppWgkaLo+R3uQAY2K_PFvVe=7kJUYg0*
z^@x6Q-Vterm>^Yc=VaQ@ct{~!f!|U^j5nM;u#}gSv+RBoePr?ib1`6!c+N7&FBihh
zT5CGaz}i&=g_>XYCl0nZerJV0{^y<%<&qkq#wSm>>C1ZqCe*&@yhtJ@ng^!$djkUr
z)#q!IhM^PMX>~O|J#hn$c!u1SA=av#XwNr|z9wo263x4e6};_NAihX+Z~x~V1^u)W
zT3QzWgC*N8FT8W|yYhZQiZYrUE9YAtwU;J?lFIGk_(W&F#3vGm%tVF<>w}Pun;lQ_
zPue|35MED*jemON)mTqX67SOnVzjFmNaKjY35Wl}f0#rCV6SPl<PCr(`4_Pg;d);5
z7cA*wr{3p<yOxc+uSUYwOA`I8T1?7>saT_W;)OpO%V4raOGXqXTfdQ?Zfb!WMYr>U
zO3GMw4`4m)f16r&Qnu~nk~OVKk8+8149Q}I(5{+$BpK3r9n<q#P)o~5TE&OWR&Pjq
zWQTd$cGNA%t@R`3wsnPeZ(CUC*FJe4PFfc=<YA#It}5Le4VQk&GyM>IAF47K5Pf^I
zY1GkgNHJgf_;{nHEYZbcs%#GHpJeMB!enVoP@FiB$BPj8Q>;p{EBLYHWa&~8)CDSs
zBCc)~IBE|(>73|g@Kfo?l<Kc+y`LZWp!x%YMiR5xen-K`W?KGieDNufVbPQUr=itG
z20ynyk^$zV-<LatQn4nHADC1~jYci*Z*|z?P2#tkI>h*YjV3d}zQbED5&n*HmzY1~
z(#IoM^Lxj}3j3`VmINZKj6m$AyvQ5V^@;trgu0)7THtME+FI-r#-n>~+pX@?vG)5j
z*o7v;BPu52{nf_{T9nDKpnmJGMopRrS3iQ+W1002=4NWX(Z?VwFjqq?OcXsZo|+eA
zz3U<1KjD1;Y}YsY))68(nn|4GcM|K^lOAw;b@yhQ|CM3t7xBeJ7^&W)OC`psMIG{(
zj0(&_6w-ZYDD#cC@88K#Teqq*$Cdcd?;3Aj2-`7<wfq3y3E`j~TZ48K{}l`WMn9hM
zeb*i1|I^xc{xz|7T^|ohQHmHkB2oneBm`6hL8^45NRu9V)zG9`=t5|rh9(4pkVqAf
zE=q?`q)PyWBy=L7Lx4B;eLT<e`~mNLpZU#PW$nG!TGyVK8@@G1p)bzuNrx@VPS&cL
zcQcbv83hY?{{9p-)8p%b<z(jtRXp9P&9>*Lj6_91f^Fowx2}^O=ZSQRIXkpzqdIb&
zfv%rX#!h3X7xC)%7Jy$m&_aK0U<dj@yGxi(SetZ4D8imuTAnQ(SH%sQ64Z~>j&;|g
zFFNALX<^~Ei$q5c)qk?K1^fA9L~7B%XD+B7-#M4LONIT4oegskkAg$)#zBly|BaJV
z<wQBWr`&o`IAo~HtWVVCTrZe6ER`H^uGBjpb6pgGoD(Vwg#kl*!N$G&d0j5Ovq_VA
z0}|C?#z6)0lRO7OJujy)+xIgs4@e+Sa@XH{-A>5$BV2-vF!%IfFWu1sBkjKPLwWHP
z+z4v~TF#3uQ_|KmqhRhmwXU8xqRQRwY5kGgqy6k_>6+ye8|e5nTwPs|#r%^rzxt1K
zYajt(f2zN0mY&OtRjeyD$3H&w%<*Xc@X;%A<9OP%`Fxr{A~Al(XG||Yq)`kxF#f0l
z_?-_!APvw3$6fzqIGus--@a|4%SchvhQeg^!dVk|So9qo2Qg!~sgQ#Vs)-S3Gv3sq
z-T|rxv(R$Xsc|-bWD~mS)#$u|5q6h5?$$~*RsF<wHRXwd7n~R2<JL6dS$}Is2v!QR
zp7(VK0YC8JZ$C`%_szY0>eJfuGV^MpGQ60}br&498hIgbwZ%;!I6u<H7%3?1C6n$^
z%e%nsrhk7)LGI^oB~C!RCb~dR+_BxmigZcs$}Bt7Kjp*0Br9%KK=nIVWI0k+1+?ff
z{ud*C??Ay1Hw*qg;l^-#?K6)AuEN{gxP`s&y}TQ+a04M6bmA@scyL$S`kWffAM*Yj
z&1FfS_B1f+vDu|TMGwc#qY*Q}?C8Rz$8$b3w<`3kK@;J&8Q>8;8rg^msu~}jUz!UJ
zoTB_*T=gyK8_?c@RUGa@$aEF|gVr&qOqO^dfW)^Cos)hh_XMp)U2t|{w!x<oa)%!P
z#T4eHKTVzpB3vb~L^G;bHf&ZmUZKb<>`>9pZ5>5R(Imw^v~Kf>a^o4H46><bER%Gi
zr(}s^Sc+SkJF>AMS13pySXg}Q<}my|W1w_vNqD}zM<3R+d`AY8MkQA4KSkH^q|&^3
zRK}$ZU(X2{8<%$?Y?L~!-a<X2cKQmGs#88C_b&=TdctZQ5BC5#q+4KrOH}2`S=LOF
zpJo!Fv(DK86E^B$;IbpZJSkx)KI6wEIn<kI*|D&{X1X($7sVXI9CbR^`N1=G`V7X@
znv>Erz%`DeablOPnk|o$={ABcF;!gY69p}ima6S%yj`Ev8=f98*mKI<<1@A$?hPY4
zI}uJSg6y<Ry+cJMlz4gXhPeisAh4=>6DfgRj*GY58eQwXzC%4;YsqRnWdIKCWLmt)
zM!O~Ej*2|oHCMA59X|>|s6r-kBeACe8aF8UWb;CQ|5JB#Lrk3HJuhU6*Th}R?smk1
zcN=HP=NU4?|Ao`{p>3`S)Coqi0*f?q0yHqWjiwx2U@K!L=uV53sh6wNY;KUhJFph-
zDoUCzM*jZfdnconaYG<ve@&oWX@wTC!1Mg`b;x*}^iMdj256UaU0_%?=PhLQ%dc+n
zq@0&IxsZKz!t}#^d6WI=b0(zd&KG8|;~XIw=>uhnSriR=IRv8I?b6>CbK_&r!Nk%=
zBjd@EsJjtS`iO=bMp`|_2s>a=!__qgM1;&R*paB3DBWW%ZI>0=;@*03ythaT1P4qx
z2nN*Jgz$Tvbk&ziZixLx6ligQE=8DrTwIuQ)J1c3o+3LPjVU%Y3wM=uNgpX;K#GaX
z=IOr3ZGitKuM}Y-OGma|l}!-S`jHxb%XZg%#?@x#rdj4#xBrPEtVo!bzN#+b@_O?E
zOUiK;v}$1&V!7k<1jLqhTB?pi1aljD>eRNh3H#*4qBwgFe%ToZGnvem6)t#dKJpIh
z+K-p`Q}~+nOz6}!z8#Mtd)V=LsC`s^cuLlBYG`H3klzZMmYIr50Wr6W_1p)?4X<Pd
zZwZ<8S+HC4ee1!B8xunxdFN~=({lk$86S`?f}MTx0~*{W<H4iE{jUQwee>>;uL8f=
ze_x(9#@BQRIF27`Igfmx8h`n9WGEQYX7hMR#w@xz^k;SHAW*7!`G8vxM*M8%ovUCi
zc|!`DHD)|?)C{b4y@B=V6@m4{y^^y<&il6yhIyx8gU$uqO@}jWiDR=_j-ft-SGcu`
zJ%&0}Ry^ji`m<^#^P8R*x{g^LYGT!>nfFkpN5lXX783?s;P@lS8FML$>1Z{TJ}Wc%
z;jPE`9*!?`#v8lF#_@_(!3$?@#Sa5AJ;t-v_C45yg|fX<T{4z&g$Ff|<;8?S%hdF}
z6o{{ntiicFp97qhNU6&@KF@`paC7>$tS`LVOBuHKHjymSHy<3XfGQ|ghI*X+b?R42
z7LX8NE5@BQfKvNrH<QY@=Q)Sd@7%I<<e#PDa-3E;S-ffRPpC8EF}u@;o1iTpt<|V*
zVqSG`^mx`TCmv>?pvo}M*R4==E&@MtXxB0Jn$v7w3gNAgLf$R)uhlhlT3_jYRCK-(
zbxPf^>#x4>qupB0WM82w$*RzKr!G)2xj3Jx$L?%wfEp?lp$%=aF9O11(fp8LGR3rQ
zL&L)-&@;zBYBIUo7zNaLHFv8ZjMD4p_3Ev7XUxfs-~^<SnW9x=H-XzA$0Ou)uH^ec
zB#4qIB&9bf9Zt*Ku9(miKel`fbMq~jHD(WBJzUzV4U+@jG^~5~DiFXQurhTS@!;ob
zWaHyl@3)>67W0;Qna?O-Q?+aiSyO#6V~CODZ@53XYs_;!ZBAIDc-RkXCfl4@KGUk^
zZ_~OV2NZK-QNT}g0s(I7GW**la<!WgdY6tyS0J5F>QL}S_1nIbuEA`fskNsLF&FVS
zWV?QTJ1!!xX~<4EsX~Q^sR)9)k-$8!3{_$ka*APpe6DVc7E63>b@(}~qLCDzTM_*y
zKl(=55AF{4qQNzCYd(N0u)_}01Z2A4%u|CWTpN0Q&^`ouo%C8c%FwFX8zvsS!~+&2
zW*>c~=k$-*7&~zVl&D{vOni;K`Ko=5qA}0M^zKx)6h_Z5GS;>6c^=md1v|9G(S93T
z<e=Z*{khSIwD?_Jnh#EV+{xPGN&n-lX$2MU^-IlEqx|R;Ph?8t1i9pl!mK+v45zyN
zI@DrAZhSX$9uAq`o$6AkuA{U@5jL&l{ZuNMdpl=ZfEZUM=boHbZgSj=8c7<LsWgQJ
z%>d}MoHu@Y4h=qlSmw{qJV^!<Cqi6{W;!y$(Jz6&hXqtg%OTuOowcIb$L<==l6~6R
zP$^Q=ug0|1n1rRFeAZ0QLM@DLZSFmJZ%n1P5-DFpbk$d7jHt9Q<x0Kqbw3^7)^u8+
z&$aZ9fXPyEo<&WN-MQ4ffJ|$vOsJGe7mt0jqx?BN`K1{v=HzxowuWJYS32as{x={`
z6FNCwmp0LDN7y|YC9;f;3M4A&1uPsqp<prjuJN*oJR@ZEQPxyLrex;r80*_HXWNe8
z$dK}pjX+AO>Ui9iAJl<I7KnYX_;EEk{)8!g?qF47hpkPVPu4*SDwV?_vR39|D<jM{
z`r|40-5lDrV)?D~x!@b(%eHq%I83c_4jy1##ufrbWC>i14+(;xep1Kd{Pz!R7}r8t
zEMm$uiVrfLxnvRgJIu=|&4^s}uj|w=bT(;jxG|NFa@sMNQx<u{gcLWkI&P;KF`h8b
zo0&~?#Mj9N9epUgNhe#MSj07=x)rOPq<jJV`ur*8`|i}(HSIz=6?|<~!L62LZ_ZFR
z?uR}7R};#5(Sg!6wS)^)4}%Q*i)|{A{_Gr5dJVIOu^0O>Nxmh*;OE;aUqw-~SUE{J
zOe)OP&Eca|7MpIEQtO?+#&nMUPhs-js_kaZ1n%hJH4o~7@9X3p+jGhGwV-6|=}&=f
zkq6*7nTg2LSae&XV>Wqp+!uH6ghwnaNy)mx2qf=Lc5GaK^BCVmXRJ3i-){9hn^U}B
z!+}cp+7*EOd6b!8>L7gQ5i~njq4jx6BV%y~a0clN`fL1r7L{ogwC6gOHXUMpcq7Y&
zEeJ8Qoz1=n3Ue90e=glveEu9Z+@<kt@K}f{8Wnd#GD+b`7xUNw$W(pX_u1FIxK<LK
z?1KnbyH<$6aS^8^oHmE{1D7Vi{wd-eel)NP*H<DZ$}uJ)eah>$3KX=XCl(oa?%2Iv
zwYot8=UFxv$0o7dPt?2JQKGQYY!#R1k1B36{Z1RWH!$qOIMDF;QpsqRT}t6jY7Gzd
z+wXoom{=_&Rxk+sNrYH&r}sPb<FTEp4I65-dtB?4v|iUt?(}W7njS^7Er8Dd0<<X0
zy8w7ruM5p%QhWkuXRsij86%HG$o>N>$<Lw5oSYnER2_qIwX||Ov9V%s;@1tEkR?aZ
zqcP59Td~U4(>H<;^|8{ssJ%~9^TD>kdvZhcTv5(n?lTJSFP=?yD()<zB*u0h#U?18
zlKBB~b;1F)xZMDUeqN5*9Z8;>eWBHQudHc>*`{ji6-6=`nl!>uQ#-x6E|zf4r4|i$
zbIda7+A?|~$N}hYY^2v7;#MPsWs!&3=ne#^QVFk_fBe2MhtnX*A{bE?U7BB{;8Jh(
zIR^V=cujrd<s4t|vR4k}C|1zSae^pEf`f>`4+WIC+3)I^1Dk-<;g<D<cKb=M6x{}^
zbJ}-H;X|$FpEtH6b0Izmi(x_zZkgkvHU?CI&%77u<O}Z0_5DpQCdYf9Z~OBdovkF3
z-=leLPz4jZL<I#`LaMq+BPk@{USTC@t4lwaiPt<Ac#wnu0RGF?GJbgf-rGnleOz3~
zOU6|1u`KBO1Vs2Mb6-!sjUD_~5$A8Jq#@wg%9lgF#pMd6)WNJ?QEE-gsukHj*OK2@
zo#TPZ@K?!L$O-+<slDK+E$gWxdm9M}{|3e<Km-GHgzJH@dwL0ZaZ%e*eBE}&pDUE|
zA@!6rE-$Y8Ywscl=)Q5ImUM;J?x7apaDXOBroi4bWs=jl0mHfbyd_{c4ueB0L(&)T
z6q)Pq4A$h5Ves2S01qer%7}=XDcpyIFh!vSvxt?VO4qY10+DT{)6t><YtTZLAY5L8
zTSi#7>I+cOi^6Ha^LNbA%yeCl=a0^Obu~>r>&F&vQZ`z=FTWDUP|tkrPG$vT25u>M
zmdF}?1ryKA6CJb#loGkEqVAh`vM}U+HhIwpakBp0I(X9`j>MN-Wblj+cI8}n%5b)h
zA`v)0x4-$H_(rvNt<+rlV{~tOih0(34u0_3TOgP$C5!phlP?^ow3~&tGOKhO7wI-a
zE^Nfyp6cH`z@*tczU~3PjJR_HPTXqq@$ubomo4vQkC16S7}Z`?A_s#q*R$F8Q4S7F
zGevQfu>|slHR<a=SXTkv+W3+JcHBfJ11qG8*Vj~~muJ|W$hcXdLh9YPqbry+`7Ff#
zeuztUN+$3pfMkJkTR3@M0>oBIh7WW7e5sLG*`X<3L@r4Uv;UsoB*h=4*&u3}N=!6`
zm1xk8mb<5)Zwc=5Mr|wL-+b0AvrwVbmALKCWCs<saA`^L^CAt>f<`p1y(b1=Z#LGA
zUW2BMxpbFoEmF(j`M8xO%7Bf#+mYmEIMRCW>}(in&smD(AONr?cdG+r9A)!^huRKq
zzMDl8$}J4$&;+D~zNvA7VVr#=(3){@CxNum+3T@FS>Qc&_A}~w>wz+u^NIBbFN1Y$
zEb?J(fjtS;&b|(<fl^2Azt25F)n0)&7U(F3>3@S?9IE(zV`;o&lPhu|a{aAaM79<A
z>@j3b?$tfaJK+7X)n#jbgio&El6T|N3Jz(bM8zZVTAzk|nmz{D)}uUI@4W5gY)P63
zk-U=V05r0T_DgG$Vqd}|deykmIA9e(7r`^V>JHjt)D=(o0HQ=LdO&<x_*sS92%2+>
zeVA>Kw(GO746EXak6Bhn{>`kpg{^ZMxjn4Tc)~5g@+0fOF%#dde3}DU4C0m^Mb?D}
zm+tZgeB4zeID(rBCU+tM^>IJ~Y;$7S9PD8I>ZkibKNG}>PCzbVU(KFJa<j0Ze8vzE
z&+Luje7z;ep_m{Z8V&z$I&Q+2gNGd#DKrY+zM?p&JqU6g3q2*b8Y<5?+dT@uC+9$T
zUPoPKF>n1WIa9GOhdEIKo(Uh$VM9LSuZ}${5+yNJGWCV5lbn@yGj5y^-E~KK*{Ip{
z@<xkaPNgVYu-6y{;tu)<Z?Oj&8u=q0vn+KfHqU>EC+cso7OmczGY;>2vNf<l^M}or
zALKrV2npGWAH+Y6FvTSM)#X+PXs|_J8^h@~E!~h?JRF1CtC_F}P=S964~_+|$*~W7
zYUWL2%BW0z&m|h#kg_D)Pn?kAia-&zGedYjAW05jSLV2ftAke_rc6`IW>Dc@h1Vtx
zhMcj2^Iv$=QbV@hs*}cSi4x1U4@T7Vtrwn(y9`_3EG6&xxI;p6-2854O)Tll8*IID
zOq^dYK2r3UAkXjpL_l`qT)0#d{9H*1pIXN~nXUshGS>D4B>1Zz=O41S4k=16XS3@H
zPRbuw^G2Pd4C3@Ge1BY<|72{VpF_(#n6?i1kr(CW9xfv+h{)ILkCxK4-#f|1$o73^
zHzI|}7Pv|#xUSv}=DqXszP*Nc1&&9yWDn>eeXBM0O`a#fTZZ*6#i`C9U9PZlmE#~4
zIqKEC(w4DYq$A^Y)^%7l7|hN*<32Sh9&d(sI>-?qGzIL2Hf)Jt<*{HaF=oC-ubvt2
zJ-ndh@`vfRT^#(IC9c%6$Yp|F%WNRT+Vz+oL07o?TV5wKhdI*aA<%$fd7$QHUkoy?
z+N1v&Z#}b4R=FAbofI105bYcA(=>5%j{_h`ecsiy#jnd9)?K2$V~2xkqME5`HCVe@
zjrVUd6iv^cuDHbSw3kh7f3g|IF59F|Em(*ROnJ)m1n+e0@i7(WosjvnPj`Juq#R;D
zO#wP}?@cVQMKhjUz1f;%nnf6p<n=tr!5(~jaBS6FGihVx+wVVGwBeqRx*1}Dq4i^z
ztBviIfft;)dTItV3-R9?a!oTF7SsbQzA+GXY%en$^J71CNnzXh#-9pp`>?XqM4?wP
zEydX8`vOxa&UqK@ahch(;TQHtQClZxd%xa=d|VI423FRd6cTMbc4SVld#g=6qa3HM
zs-#*vdpY-D-EMKs{^?7ia$6NyWUGc>=4#JV+M3(5zJzsyj{5xh;?e~c!`-z1>lOG9
z>2IYj1RLO9A}p^4v=Dl&P!-^D8~XQ=9l2<?iD7qo`{ya$*+zlabp^i5Ma26}CxU;^
z<gmFplwn=y1tzN*PLjJr=reM5b9>oGpIPyK|H(Bf&T-P}_9D!?T_=A1b<1+swb|s-
z0tPgo%?zP<<sh{)y>|cgCqkA{t(A<t{jtp!+BpH)!=(;pi?IZG6g$^BHRX}+7Wcf?
z*}wF90FjI256c1jw{FU9Uc*FL&zm1?`L5q*A95p9OO(n^(WNVa{hWMt8(wAb$ya4$
zY})U5rJW3%<#~Gj*~2>Mjw)7GG&s%S-b7-7Uh34e@*dtvHrp?MNzouZ?CrCLXSEx1
zgvmKYV*TBojLh`%i~t??hc2_j=Ev$=mKcBaYpHiWC2EtM);cuTkEz@0h3}j@7X?(D
zJ3WI<%;DPFLAA+&?SVN5HbF_gvsjnP7PmaHVG9YUaowj0#aHv&bIONXpV?<og_IMY
z$)Q-gbA73mi~=(MztU3!lc}WbuD@WtkqyYK%>4va@)5hhTs}CJbDl9d+Y2+3pd%>e
z*MyO8rd8j$A~xbYWd1PVCpMCEyjOz_#T~JQyd(YQnRM3X+?l_LtifD&3i4^}S9c4I
z?6&PLmiZr=S_8qxM^Qz#|7f1EKFWKY*$ij|oe2D!L-??z%oCF-+B=F*Y_9e(b*CDM
z*XyGqAbXV0-MVkGQQdh{<2(dBEfeIA_+=_f!-Dtiz!GE2;;Ao{ET_e)UCSDtN<7}^
zZ~gb_N!5D*vo|WBp(kKU!}<g{3J^JG9EWC0U(@2Cir@2`PxM<C>!?TwW2F#HEfkG-
zVX|L|`m6GSK0Un&M(|0RExup;_|mzZpXR(JY%0}@0nJ<ZUori^FFs*tRU$;ut&P85
zi|cv-6@RK;k&vb7d0(>6Zzzo~O*HM+38d5W*l2p`=DmipUYt6m7!a|87sC~!o)vP6
zt9vmNqKgI{Mo>J_7jbVIq!<j>b-2vtPcQzN4Fi;0)n2-1g&mv){Jco}n~Gub)E9n8
zf#%F;to?($H>XWmWSL5bvOYC5^~3b!rVCOv%AjEps5m}wM!0kG%RUE3@{8e8-A2jd
zD!S@_HE;SMnH9^K-mmCsWS7m7iodU0<Ckmr3(V7M4?Ox4P-%g#t?W+U@hH~wUz7qQ
zEC|j)pG*b&av?&by)Q%SnFbIuGGs>M^fxuc=;|APryrI7kaWeu&;41!Y=gnIoYfp*
zj`z|}<ShZliC;!X0=To?-nHlrK9$ri7$Vr)KE!t~TA!D{+>ye(8z>;!=B5y#roK{A
zcDiq68Sjb>P<}sQR#xZq+M56G_zWrvZJ*JT`BObfHl`x3rQo08*Tnp`0K9$k7%rGG
zm?fu;Q7CZ&EUAG`Fi-1T;=M#@es!neE(ct_mBwlo(6Y{>>@@G)pMP(X1^3g<5bOvv
zPXsY|D;nLEMLy7}Ko@RozMj0$gdUTQs|mvGW{J<bp6j>xb_5U9{h4h|y<Z=#8iO49
zxYPA40f=M%9e3)tV)x`q+*NH46$XZ9p_Y051a$T|<X4`@v_u2-yf2G(eP4*em|#PD
zMh4Lug|yfFqHA3Pg~#M+L^`_20&I-eWw}}Q(($rrv9#*Ex|YJhUrv|%Z}u-H^+e-4
zC>-371t?Z}mXo5+{}G1WulYm`d_*|F`d9_88E}HAKv%#^x`|VV6mlse$aZh0X+<8M
zehXwFnxTyp{|qsd<dSf5^jI8vQ<4Yo3}+P5k^U8xwwrrB{T!stu=&*8mF7eAhq9<u
z5pJlpMtN27he|OCRS_K#W07YfU?h5vskg#%pD~Lqebz=x2mIqK?|nj3kR7H}|4@FF
z_FwZx+HITUNvD=QPTelpAWjgjnM3RK7oil3dkKRV=<%^;n0S34xBMnwRqp|H4P2)G
zk%nRS#65k1|MIMEb1=9<o}F#W(huW#n>7a?m9!(hkzIV<*Fbmwvk<@16L9sZoh+x>
zhhy0fe_qdw+A*d>nZl_h|A%kunO_h=6zKG$Zf{^KGbS(eUC%oTB>DflNZzi+gDzJ{
zE?EbrY3mt@Waz?{&|(NA4TAd{`AHq0+H`d%sPoEYHLKR)MoZ2r>6{1Y^~()YKcN8^
zIDSA=QpGK7liAI1jzckWL4FpdQ9|lrPo40h5;}K24i21fUpC^MXor!m-1uwBePGdL
zz)eE=zvXwb4}FE=(#Ndo#2pNh#CftE)a>!~?;Rh4jySA%XQchAF(Efdb~f}dkmU3a
z4))$lHC-BUcP{fmVtx1J=RMTb==I*)i`#j|yGvhYnYf^0p^~jKLt+eH?w`N+hd%j_
zJM90PmCQ?59Qv;n>1zAm!<PZ^PI<nyGBy9>kBZ(YFEP@Z%E6ygUGVVkfEYs+{-Ru3
M>iTLGDt2%GA2!l=rvLx|

literal 0
HcmV?d00001

diff --git a/docs/content/en/integration/openid-connect/synology-dsm/index.md b/docs/content/en/integration/openid-connect/synology-dsm/index.md
new file mode 100644
index 000000000..bf6d430a7
--- /dev/null
+++ b/docs/content/en/integration/openid-connect/synology-dsm/index.md
@@ -0,0 +1,91 @@
+---
+title: "Synology DSM"
+description: "Integrating Synology DSM with the Authelia OpenID Connect Provider."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+integration:
+parent: "openid-connect"
+weight: 620
+toc: true
+community: true
+---
+
+## Tested Versions
+
+* [Authelia]
+  * [v4.35.6](https://github.com/authelia/authelia/releases/tag/v4.35.6)
+* [Synology DSM]
+  * v7.1
+
+## Before You Begin
+
+You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
+parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
+choose to utilize a different client id, it's completely up to you.
+
+*__Important Note:__ [Synology DSM] does not support automatically creating users via [OpenID Connect]. It is therefore
+recommended that you ensure Authelia and [Synology DSM] share a LDAP server.*
+
+This example makes the following assumptions:
+
+* __Application Root URL:__ `https://dsm.example.com/`
+* __Authelia Root URL:__ `https://auth.example.com`
+* __Client ID:__ `synology-dsm`
+* __Client Secret:__ `synology-dsm_client_secret`
+
+## Configuration
+
+### Application
+
+To configure [Synology DSM] to utilize Authelia as an [OpenID Connect] Provider:
+
+1. Go to DSM.
+2. Go to `Control Panel`.
+3. Go To `Domain/LDAP`.
+4. Go to `SSO Client`.
+5. Check the `Enable OpenID Connect SSO service` checkbox in the `OpenID Connect SSO Service` section.
+6. Configure the following values:
+    * Profile: `OIDC`
+    * Name: `Authelia`
+    * Well Known URL: `https://auth.example.com/.well-known/openid-configuration`
+    * Application ID: `synology-dsm`
+    * Application Key: `synology-dsm_client_secret`
+    * Redirect URL: `https://dsm.example.com`
+    * Authorisation Scope: `openid profile groups email`
+    * Username Claim: `preferred_username`
+7. Save the settings.
+
+{{< figure src="client.png" alt="Synology" width="736" >}}
+
+### Authelia
+
+The following YAML configuration is an example __Authelia__
+[client configuration](../../../configuration/identity-providers/open-id-connect.md#clients) for use with [Synology DSM]
+which will operate with the above example:
+
+```yaml
+- id: synology-dsm
+  description: Synology DSM
+  secret: synology-dsm_client_secret
+  public: false
+  authorization_policy: two_factor
+  redirect_uris:
+    - https://dsm.example.com
+  scopes:
+    - openid
+    - profile
+    - groups
+    - email
+  userinfo_signing_algorithm: none
+```
+
+## See Also
+
+* [Synology DSM SSO Client Documentation](https://kb.synology.com/en-af/DSM/help/DSM/AdminCenter/file_directory_service_sso?version=7)
+
+[Authelia]: https://www.authelia.com
+[Synology DSM]: https://www.synology.com/en-global/dsm
+[OpenID Connect]: ../../openid-connect/introduction.md

From a471c31d746e9e54644f0a9aa7276b3d1115ccce Mon Sep 17 00:00:00 2001
From: Philipp <45766222+philwilei@users.noreply.github.com>
Date: Tue, 18 Oct 2022 12:27:38 +0200
Subject: [PATCH 146/263] docs: update seafile docs (#4151)

This fixes an issue with the Seafile OIDC integration docs.
---
 .../openid-connect/seafile/index.md           | 20 ++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/docs/content/en/integration/openid-connect/seafile/index.md b/docs/content/en/integration/openid-connect/seafile/index.md
index f7a690a2f..eb722175e 100644
--- a/docs/content/en/integration/openid-connect/seafile/index.md
+++ b/docs/content/en/integration/openid-connect/seafile/index.md
@@ -16,9 +16,9 @@ community: true
 ## Tested Versions
 
 * [Authelia]
-  * [v4.35.5](https://github.com/authelia/authelia/releases/tag/v4.35.5)
+  * [v4.36.9](https://github.com/authelia/authelia/releases/tag/v4.36.9)
 * [Seafile] Server
-  * 9.0.4
+  * [9.0.9](https://manual.seafile.com/changelog/server-changelog/#909-2022-09-22)
 
 ## Before You Begin
 
@@ -39,7 +39,10 @@ This example makes the following assumptions:
 
 To configure [Seafile] to utilize Authelia as an [OpenID Connect] Provider:
 
-1. Edit your [Seafile] `seahub_settings.py` configuration file and add configure the following:
+1. [Seafile] may require some dependencies such as `requests_oauthlib` to be manually installed. 
+   See the [Seafile] documentation in the [see also](#see-also) section for more information.
+
+2. Edit your [Seafile] `seahub_settings.py` configuration file and add configure the following:
 
 ```python
 ENABLE_OAUTH = True
@@ -52,15 +55,14 @@ OAUTH_AUTHORIZATION_URL = 'https://auth.example.com/api/oidc/authorization'
 OAUTH_TOKEN_URL = 'https://auth.example.com/api/oidc/token'
 OAUTH_USER_INFO_URL = 'https://auth.example.com/api/oidc/userinfo'
 OAUTH_SCOPE = [
-  "openid",
-  "profile",
-  "email",
-  "groups",
+    "openid",
+    "profile",
+    "email",
 ]
 OAUTH_ATTRIBUTE_MAP = {
-    "id": (True, "preferred_username"),
+    "email": (True, "email"),
     "name": (False, "name"),
-    "email": (False, "email"),
+    "id": (False, "not used"),
 }
 ```
 

From d0c1b321253590fe6419446485084ceeb08db6de Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 18 Oct 2022 21:29:48 +1100
Subject: [PATCH 147/263] docs: fix proxmox and misc links (#4145)

* docs: fix proxmox and misc links

* docs: adjust
---
 .../blog/say-hello-to-the-new-website/index.md  |   2 +-
 .../en/contributing/prologue/introduction.md    |   2 +-
 .../integration/openid-connect/proxmox/index.md |   8 ++++++--
 .../openid-connect/proxmox/proxmox.gif          | Bin 98105 -> 0 bytes
 .../openid-connect/proxmox/proxmox.png          | Bin 0 -> 11818 bytes
 5 files changed, 8 insertions(+), 4 deletions(-)
 delete mode 100644 docs/content/en/integration/openid-connect/proxmox/proxmox.gif
 create mode 100644 docs/content/en/integration/openid-connect/proxmox/proxmox.png

diff --git a/docs/content/en/blog/say-hello-to-the-new-website/index.md b/docs/content/en/blog/say-hello-to-the-new-website/index.md
index 0ba089942..22799a8f1 100644
--- a/docs/content/en/blog/say-hello-to-the-new-website/index.md
+++ b/docs/content/en/blog/say-hello-to-the-new-website/index.md
@@ -47,4 +47,4 @@ future.
 
 [Hugo]: https://gohugo.io/
 [Doks]: https://getdoks.org/
-[Documentation Contributing]: ../../contributing/prologue/documentation.md
+[Documentation Contributing]: ../../contributing/prologue/documentation-contributions.md
diff --git a/docs/content/en/contributing/prologue/introduction.md b/docs/content/en/contributing/prologue/introduction.md
index 7de7c4aee..b6ca82b8c 100644
--- a/docs/content/en/contributing/prologue/introduction.md
+++ b/docs/content/en/contributing/prologue/introduction.md
@@ -18,7 +18,7 @@ Contributions to __Authelia__ have four main forms:
 
 * Utilizing GitHub [Issues] or [Discussions] to make commentary about bugs, ideas, etc.
 * [Development](../development/introduction.md)
-* [Documentation](../documentation/#introduction)
+* [Documentation](documentation-contributions.md)
 * [Financial](financial.md)
 
 We encourage our community to be part of __Authelia__ by contributing in these ways. We encourage anyone who wishes to
diff --git a/docs/content/en/integration/openid-connect/proxmox/index.md b/docs/content/en/integration/openid-connect/proxmox/index.md
index eee1d305a..964eb8496 100644
--- a/docs/content/en/integration/openid-connect/proxmox/index.md
+++ b/docs/content/en/integration/openid-connect/proxmox/index.md
@@ -28,12 +28,16 @@ You are required to utilize a unique client id and a unique and random client se
 parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
 choose to utilize a different client id, it's completely up to you.
 
+*__Important Note:__ [Proxmox] requires you create the Realm prior to adding the provider. This is not covered in this
+guide.*
+
 This example makes the following assumptions:
 
 * __Application Root URL:__ `https://proxmox.example.com`
 * __Authelia Root URL:__ `https://auth.example.com`
 * __Client ID:__ `proxmox`
 * __Client Secret:__ `proxmox_client_secret`
+* __Realm__ `authelia`
 
 ## Configuration
 
@@ -47,14 +51,14 @@ To configure [Proxmox] to utilize Authelia as an [OpenID Connect] Provider:
 4. Add an OpenID Connect Server
 5. Set the following values:
    1. Issuer URL: `https://auth.example.com`
-   2. Realm: anything you wish
+   2. Realm: `authelia`
    3. Client ID: `proxmox`
    4. Client Key: `proxmox_client_secret`
    5. Username Claim `preferred_username`
    6. Scopes: `openid profile email`
    7. Enable *Autocreate Users* if you want users to automatically be created in [Proxmox].
 
-{{< figure src="proxmox.gif" alt="Proxmox" width="736" style="padding-right: 10px" >}}
+{{< figure src="proxmox.png" alt="Proxmox" width="736" style="padding-right: 10px" >}}
 
 ### Authelia
 
diff --git a/docs/content/en/integration/openid-connect/proxmox/proxmox.gif b/docs/content/en/integration/openid-connect/proxmox/proxmox.gif
deleted file mode 100644
index d6f82a2db4609dc21f41c6d624a9e62a7c177328..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 98105
zcmW)mQ*>nA7KK~sq?3-(amQB2b}F`Q+jhmaZQJVDwkuY}X5Iep{LY$l?U(&@&e&tD
zvqi-L>>T=qKe3@7A)lU}9-*OOpkaQ%z(B*n!670dA^lefh{#B2XlR(feqsK?`d7cO
zFmZ8lfBz;R`2ElDe-jdtkPuUllao`BQ&5moQBl#;GceHqv;TsLiHVJko&8_^A8sCQ
zK0bbazJJCiEG#T4DkdiSpZyC-Nl95*IXT(?OkPe_QBhG%^*>bA{z+9!OG{T*Pfu4@
zNAI6>O-xM8Oij)HkExlNrKP2vt*zbvv9+^va&mHYb#rt5XaA*_mlwM41g7tVudkn<
zuP>_K#J~L4;rdS!1E+vMAa(F`Xh=xtfBaJjWB5#DWF%MgEPu>wY|MYe#QswZTl@k?
z{DM&YyheP#UgAJvVxnZyLTbu?q@?~+3LtG+I(=CwV<{se!zyc3GiNm?CpS0e|K#Qv
z6|5E(7Fraom6Vj0mi*(NN{q|4tjpH@%BBO$HXX}1Dk>^Gt2b+F{!!~x2db^B@va9o
zG&ICEE&!WAEiJ9BE&tiSh-}-*=vYbU-0AG>Ozqmu>sjmR`TMu$Kl>Mny~o9U8=3w4
z1p@~I0|OO<heN|7Bg6kOJTm&PD;hhgAKR`RKW>=VtDiicnwpxPo|*Yq|7Ut;wtDuW
zY3{6RZohN>bbfw*dST^xv1?%IU}<@EWqIXsx#wxQcVOjgd1ZNdWp!m`xpVdEadqHn
zwSRo=V10f4X?=8g1Ju8HJ-&JVusJcm1s>bJ-Q3;*ZEu6NK@Z!rW1!oA-8N_k1lnHM
zIltdo*xWx`Jh;C&*t+|-!Qu7c;UVbg`snER_+K3z-yDGsk5B&Vj*o7Sx0g;HHc#(w
zPxtoEZid0*U@&<4e183WbMNB$`r`cj^7`uX>gej>;_Bw|Uw3tRaQ(b|vvzZHvwOdP
ze*gCP`0r)^XaAmO2n6!!{~~<;2KDI^<P*(*tN*@<PcV>A^f0*W`T<>mFsM{oBei+`
zAxOj$nPPSMgAtfa78@gV1;a4}LgBdL^@XDe6pH0qqxD7ODGY{Vnc@w_lNs!eryHXU
zCDS?lfv|WIjis{%VhL2*V~u6=C2|E4SrROi0s+bm7Mo*D70Wex{o#0$&6TSSX7lCR
z<IPp;Ep~fjS&}W)n;mX}I(VrqHQPOYU*YhjT5EUuLs6-9CR*$EhGU5(v!$NTw*v6z
z{pW|;8cZT`czmm++8a;iOBE}0Cfl3NmTL{iv!y$l&)50rarR5yRm!(}LhP$oaNMqJ
z3hb$Mr#jnik7f!ab7Z>O@6T2mEN!bY9vQde`$8ZP+86z6ncZPH+3v2c*T<{9@f_Kn
z?)TTH+q3QI9s}2?!LX1Kztg(mSXR&vF_8W3-4Q4d2|%#}L{l-_3Boif-3i{%9zqU)
zMOhIeZ%AxG3MHgd+vUP-KHiOB7^2vVWL`4ci()?<S@ZpbkRTBbSM917Kos7ZA1yYu
zJRL8^da|D&2cSGiR8lcNNK!K?J4n`YIXOtt3#KGX5>GZiOfxGkJ50Cw!g82la3hw<
zalQ~{5J#1cNstY9YHph0H}(A}7l>hToEJ(~ew=Ug{q(pX7C?1Un5Z&xTqHS$g`BnG
zbb6BQ70<3ED175iQj+tbeo`Kze|lO`I|QLRs|>5RIIC(sEI+I6!~mS-rSk%*{tPJG
zmc{T#lVjI=VX#}(l>r8}8W&_d4VqR|xa6BRwieEt*V2d2Te?^u&f1QPD=ykYlFu$W
zu7;>DJMXpzE>e5(SIp~rkLTzcU4yAe8YZisqUs=Iky4GzbZ52wJMk}913OQYHfCs=
zKW(x|^>MEUv31Yvhcdh?Pe<>^oG-^{TEGtNl*2T)6U@t2Ox5(RX_sLz%e%MJe6Cc|
zWg_vSwPh2b4fHcoIOBDKFtA64^opw1_lsZ09f_8-Txpx;5Jjw;Y>iT^U6!~D${&XI
z8oO8p4Gi(>2Xs_7YM0%Fm>$<<bs?RsC2V|2w;<pzo7NP6^6IDENVW@h-w@rl+b}pb
zyvBLqU+=^@U*lUE4|tj0u;Nnm6h==@lA_yB%RH-*>W`ajMo;Uer#!&bwp|kEW$Rm>
zXM%#~KYNnC(p?;V;={W??>@Six#_I9coR?*-R``vkhL|P9>k%idmQDnQQF^6vHbw;
zmehQ_fLktkjgKTb+OCoUyBQon_6SDVBY_t@f}(qwpRV^i{ot?s-U2l~A*<Db<Pp76
zgs|TIc4~@0+xVyBEXE4f^-P^e8`K%*el#xk_=ZLMjFjqq!@29u9=Hr*h}@~r5bMWY
zy9#EX&{r{9DSVcm@p&{HI)n(1^z4+)I6yr0V8ST=Ua>RyN?8%P>#z+_5JmAIY2|g-
zV=^Bo%lnq(@1o#@)=j9-2C7NrK}cX)UI^tw9(MC^kHka=datA1CJOK$M~0(kW<&VC
z8L%;|2+QAJM$w?{VHII^($m$O9oX*^&#nO2G-_>=xbra(4FF#Nff~SxTof)$5%JPK
z|HImSQupF9>4!K{=g1-&(;r2uYd6WQ6Ge1*kD`dykrBv0i^#bO00i~ON(n%cdy+IM
z`8v5&6=qT@#FMc=xrTtPvqB1VcYb5qgv25z6SAnZ5oiUwsDlksakJ4WmofRQtH=`W
zBXL<#V{<E0;tW<FD98vu?A))32?B?wps6E)KWPALWqzDGF?(#Jysf(uYL22>3tlH+
zDbVB#%UEc1xLi6)Qz<eWReglKEIAoYT0dv80BqZB5d*C*kEz6b`r2JFUDw>rjeE1x
zOnDAr6NupJT8V#lLZK^8L0s)ohlp04%;$G)#YgD5ExCKw9?x<?KldKKCX|fSPP2NI
z*||WBIXzygeI-wF1{Hkgr1g0tma4E&8UB6IK6?Y18C2vVk9ZQd$%xg+dD!!`VNu-A
zW-F2N3Sk3xb+O)9GUSr0V;T?j)4eFNY-jT{t5rrh*C=v<*b_3GXBCbI#fLEC8lb|F
z>TMD|OU<+8a)^N(PlGdUtitR{Yjs?{Ly=yIjL{PE^J1QXH?78Sy5?r{VpWgyfojJo
zQWxhyS(gB?DfG2B;p)EHdD9A02xX;_fRzXYq!sDwM}9y!sX-f^bGISHO%7tMe-im^
z@;JWz@$%RcF<a(#>mEzPVxOalO=}+LuC;}Y9!gG9t&o-W=V$q2es#gh7wa>zE|u0+
zWo-rv#Rz?IBG<^Jy&Sb!&OdOEOD#wUbanA!RKmF^e$L(?;lFW)iC)XOYeAzMe-(6M
zY2kSGyhj+mFA$TVwhU(i>kXkcMo_A(*q<ls$3IOR(0M+O>(NE{dC#wE#9K=$L_27s
zf+Zst%prw6wADud?!8(Yq;3tv0yXsXe3AlizS((gAVh13x94fnw&^z!8)kkziwDna
zsz`w=+s?t5i<YO)77J?E@ljFR5F18Hl;VwH2muF+NcTuQJx#R=5(P1V!_675_vsVs
z*qDr<od0r=G3{%*wmw30ZHP43;B{ZZI3s@L#eSPA3R}W|GCm*=PXFsvTYkm2RoX;O
zGYl-JKChu$gSK-lf#2y$9jGm#qiGAG^fR#z!CCxF-gU~<x9(c-HVj0aNM{dRBe_^j
zF`sQL0y4-J2YPL~uASoM&`(CU*k?=d0<6CAm34zp?`zn6=nOsI_6QK$Mpz7roPM^J
zOhB@slC$B9E)C4r7Cz1o%VA9mo6|SQyj@!_y&Xk2Jo`6Q>I)aUE@UL1W-&2{D1OqK
zO5S>H2-AC5Y<ot06?pC(*D4M~6+Wy)ZK=CKcoC3z-*TLvEJtX9Uh0_|-KSYT&p_>1
zZkuvh$qKjlPyxlv@jiAXpl`NziB+9x^8})HU!kN3uUhkvHVqR?v`;-Tu**E_M!nsn
zPIn##d7mX@Sc`Y7w~ZAfA|%tFa2ro4Ww3nNu+ThDSG0Yc?}69l&){k1V`JNa_wGbC
z)qDVG#I%iS?@s;ne)#)q_Phv3s~{qMQ63+&_u7M#Jj9G0bvgL&NqPPhB@m310|U{u
z58=XnUG0j;UyRTDGcY?*T}^0J7IlsX0Y?7**qxoYEFN59*vb(;C^7N=LU)#ed{Km4
zL~P%Q?xP4GYgLhKBEc>s_iuCYNRP8b8zJdB#7bKBkEnMizziT_4`5n!HzFe)FLuEY
zB`ba;DPABEdc^S<Bw_gFXy1&_a^!U%?8v3&8Svd4``__D<hlFBX&l<KPSsFM)gWOA
zOWM?{rpfE&m$L#Jx0RCJ+c3-noA(pB?+3KEMT_?XgPWnL9q7@vMKzeP*!vrsJrri}
z>2lBod9Wl|Fx(dlO*M=7X4itc5LiM><6~I&5exSayWJ8utUp}m#%?}l&OVSKB$XS#
z761$73JDoBF#gzW+{9nol?0pJJ+(CepFP}8Fre5iyfihO-6$Y|oV3+0AkLMP_Lw9;
z*Dcr71FF=+GY)G))mkqhum_rM9S{UN5I73umlvxE&k7uXahqh90lPR#j>tEY0#)uK
z3mT=j`_09Vk)q6eG)sY9q`?od-s>gaa8Dtwrf!h$KnzqaH795Ali^8-;l5euu~|%M
zq94rX7~fQrB3FHP)nLcaP`6OSbtt3GT;!65P}qTJr=(~k0pkubQYx{CDmRa`V`9uO
zIP@|XtREf)C2^P~ab=?66hFwyTjOa~<LShi5RTnPmk@C&Jrr+<OCW3!>}3(Eaaf^;
z5mly+Tn|9>LxXF(D2pKF7bb>wRbVwguxr`tgHeko)zha*T3FncC&Wt=XuWxiWS(r{
zVHT}>912tBw*#Z2&=|x<7K7rBbb}f4ebhVRSFoddvj0l-yGg7qyQQdLFmhV*fW04P
zZw&TlpJ2>Xc(Z`~R7=8962wpf*<FNqw*ZExRHEmwDD`;C)imv!_*|^?e2(-)lmte1
zk~DVGPYe+Zp)f6KaU5ZKEM|eBg;>u3ZBV?{<bf71jLhsnq8z1DZ<+ZZNn+%K;|!XC
zy1N%*ieqtqQX^L6nX#QYYjPeS+K7@?!6kT`%~z{HU}IH20D|T1h80{1N_io&dwz=b
zN)EaZ&qi5_LE<3V<3QdHMFxiDM8d?`{Robw(5*R2tu2egc8kwV@hGDVgDOu;;E2zD
z&Q%voN8!vv)5v2HBrPeEr8Lb|>`RY5NoO{Xpkw!FXtPNrhDXGR>QmEH8&uH{QJQTG
zmUdU0;P8|G!KurkBo^YS*XYRiD`+Y#iZ867Ps9-9Otm-~L?4{>As%gq>T*Bo=M5D%
zW*!m&LO57Wxe7~uH&6Z+77TtaLU8okan}#~Vf3TT4xY&fJ}g_OJ@wOR7^SEOf`ti;
zM?9G+X`NY^Gi;vE8U+S+X#i&_F#R`XdY+0(0xKn{7i1CfSl^`VZ-QDcvOt)ykh8VU
za}ohiPVGlQ5t<XA)pI2jI9H~@O66yi7{y0bxT|M7>0ThrnPek`YrmQ$U!K}p9^IhA
zygr(9lNM|!Rs^JoMNyB@^r(cSR)C(0nz4%yLiu~Ja}L_<VkmrGe`E!7RJFsFXgY+Y
zpD=`L<k~xyM3<GMa+LU{SNmy{g4e1qUaF`5kfx;OrJ3t_uaQg-3B*#BdG#U}hI6zA
z2BxLMiL~cuVtYaTkhcs?gwX`DNQghN)^a|14~^8W!61zPC{%tfN5-irg4M|pu#|Wy
z)*dUe!_onn7k7_UD!%AU!iGTqXlN-<Jv%Axg-{jUU{z7EgwRz~fuJg(pzVJuq>NkC
zqy8WxTUNhlrSV#GwjR#)vZyvGu2#bFzw&5O%V^TD#8wQD{n{)mUO|eFoex81-gIY0
zx<&x;C@V`~hFBD$xYQz9)^(m{B<1qto!0hKI{%I+FOg{ZvERb_Qj6-EiHnnkKW=-{
zMkK?TygpcH>%nPVR<8(KX&jz?6KgU=)gW?K%!1QkirM~YIBV*qKC>drwJZn0yrI&w
z@n$TKOgy*6Bsb|thG%%dQF@7TM+aPcQ}=7fUz|>F{kYKd(nn6xH&9-0xxYZN<)mhQ
zl0})rVY5?lYespk`7p4mNz(_Td?UUk6fz$5JHrXAZ(xv8m%>U1Jj<Cmu1kky<7jq@
zI%p-)jMjUKIuvW;v#jEQ>j^I@%7puy;~D$4vnYSuFYKg>hAZ1tqo=$Bd9}Q9cC1Q~
znzXgJBg(b2i8@z>y5nH1ql3DWh`WzOtIy!O`=DmcgGcjZ2MN7d82tv~jAqwzZpHvf
zol;v8@k0JzMHN1nYCdjS3=E5)<`xUMNMz<(4yih>a^No<gyRYuDr19?WZT-1j0H~n
zJIhA4iWE{V%NIDKWa>(ASSqn)`v(rT%vc*VxDv`L8`Y{EUaK8DF6UQXs1r>u8e4~x
zh6!wW-y?Q2{?8_voA4a9UIM8mGDzo0<i<#JCR%l9squO$4UFwK;_%O9jTeJ8ss6}a
zPqLq#e|#6}cX8?J<b>_`0UIeo%VbgR2*-bz!DfPH(6<*+dcb^ASTOR7zmcXDS)_H2
zWPI4!?3=TA&PIz0TP#h+-*nHIt;fL!%poYYq4%>MnfA6;P+^5iw@a##_v%nFT&mSb
z!(98{S4%nNkYc2taYXAsBSZ4K8FHE1Vu83F$ET_LW4&G)CfKecVU;5>xHDgPX1=|n
z#7WiQgqv6^OG*xC@-%v^J4__QN(Vb-EJ=2gG_XZGwX7?99Z0sq3HlK6sB{?*G5~7l
z%EsY4Dt_G0O2f2DvdpPIj~znLqR4oVYsiWw-g=-;fMU(wLgZe2UEYP%IV0?v_Ffgw
zs_maDO{h@<*DV@A+}Yg0^>s^PMn9v?VM0ec)u`9&N8c94!0lMLX(?{;N5<1s8!mBW
zy}!IV-nmC0;1Ve9Wf$*dH*e%>v1xS_kH~t&Ur!_q<g<c<^61(VBUW`0e_d-I<aUi(
z{l^QS$5&LrJV{aF4ojM!Z&zyH<`gMfn7vmuiw5j6LKeM>g@B7cL_)^UTo2!DXI|E{
zJ1Z2{7B);tsx1HBwyq<(w>DU}TdB2<Vzc(quFs!DEt?`g3hTv|=S6cQ$P+J1pKW}+
z^*X+nxMyvyb#1ytb<{#6OA_Cx<^d~$2W28knW)sOT|Wt;tz9OsYP;T6q1VUvwQJkF
z##ey`!crtYhbv;I8N!7V`CWRFohagP5*N|~>h?<<d7#`Kkk~8%Qui?OnpKVGj!Prr
za@P*t#3ug74#7u<wr1xr^%fF*#fM`5;kzBBMP|9hVw%2nRV-*JRqWTjSSC;52@i-$
zdOmA%C2P`g4NclWbz5ztdt|~Gw|k!(ZCB=FUrwjA_{4n&p1MGJTbr5r6P+9z{Hnw7
zmhRnw=;HwPy}SV%XeS~A+E}ett7-(OMSv&GF{KP80~#3Gcl!{O?>_R{I-*;Z>|jT>
ztT+e)%G1&%x<UeeSY4Qebsrm$aM3n#Yw9p40{2Cgj|7Si%e1Rx(~EQCBXgnVf1|r4
z+ib6gTDMNPyLX@N?;TZtoYrQ$`)wsq&^fA>;VT7|QE^H{BUplF&)OTDKBwZ&Bp7f<
z8p+^@i6T_&FzKRZo3`PCBj2}thWix;4~IL!c$$1=)u)vo=Rnl6UEYg*1d|5dvL>CC
z7CNfDM8A;ixjhTU0pwgq1)h~|#g0`C*bkbe^`y;@LTqf5!8ouJliG7P?6+wNnE6YJ
z#w#a>BM|;|yz&K_?lne?;?Y*kN%ldph<={aimvhzalgV%cd=tb0~UN`(Il(O5PXgZ
z3U=0w5G0vZ^_YzXVvLe=OXGOWy?x7@BZ;*=>ho2Ay!}G|?mFNpV#6kAb_zXJ<;LLp
zPL4j0Q}_Pt=2k7|Uc*;Npa;jQffes^@^exbb<cgX{=M0@y-Cl5)%FA1{QZ{yT{`Wf
z;^jka+=ClEwM);V*Y;z_mq)PlBMk3D=EY-u++*k^RdCN!<o1&lqbO;)Gs*eMCzj`E
z--ocA=WvJT%<bpw-^31R&uXv+{Je*PFVCepFXcTil{t+0F^RjM!Jqi%@Y9N`d|z90
zUfX+K&2L`1u08lQ0WaSgJ9XcNeBVZL-d>TP$)>jkYTjmkzt8c#FZkk2=qgO<J}&mW
zZ$P%+w;=BU_U|CRkA2;bL*I{h!jI#g5AgQK1?0mb@8gOOa;FP<@P!BxLY{gcZ-___
z-w;UDW<UbKALw*OD>FMnp~$2%g=(|AB9T}uHv22Hd!n&~BGDx3bNk|nl*-jct8)jE
zseg>83f1Qir8Cj#!TaL+f-<=RK?tN83&-+>;z@MIYYQierSe5GMH-8z%9ZL(HV12q
zXR5XOgVCg#OW@UF9?yK^^`&#oR{MjgBF*Is?N0Z9ljQZ~OWnWzP>5t&D_2@g+=%oh
z8!Oj_BXOj%#agR3#uI5Qwuc+5x27|SsIpI3Yfd1aGUXbR&9!^Wl{(|;V(s+@i1kLB
z^X1{@`lBtVHwckjXXD9!e>92SbZg_;@p!gKwnS(1#TmTXWP7x=`RaPLGZ;gzyY=RN
zcd}Sxy1n)8`E(r@L+8E5tNZ+Xe|faM4e|Z-70r(S3mo$m|2I@6JAv;wPFDgj#EEu-
zu+)tVY%iGYc0vdT^R+@qLTL8FD3Z+A!f1+0_97UXPS+xshKcq7Y|BQvenjg9`5|1_
zyK7N`Kr{z2q6p?2F_Hu&2XV3tr<>6)_DV1kRPf+B37Uol2T8h)yBkS{el$lZ#&PD`
ziDy6uiZpA5W`i{QUZUf_$w%X@4EODVqb%<$iQE|FJK91s8#K$EoG_{~#7Q22<9sJC
zMx5lt!H=BoG$TmA=%gsab$_QQCxq^-q#&79tsp5K#H6UK>3pxOW|-uxqG8!|uL32{
z1G7x8esHg<7l`hnW)Q*hpk{Qou$XI<b=RbBR*>YPVNucapkdX}B|mA}6ji5b+mG(5
z<uK0jsO2=ToV?Dz_>Q6Fx|igt<8jvXsN;33ZMzz9$Ahfn`xV1YF9449Ne`HJkdnLc
zUBZpu?{~7BK{$2ulR+d?wS#_$B@O^ZSP)Q{;I!6Yny7Ced4y{Hazct8K)mE;l5W}j
zY?A4?gvA>TRX!OXXF3bWQ0LDs;)yk+Zr_(j3R6GKDoFOQD6eRSyqsowR@0&jE0{!`
zB`?3STP?@CJRke#4S85Mue-cjx9+j3oUMYfo>>|e8*ogP=T6qvqm{`TwcFs>-s}cY
zRlTl-PLicFdbIc2yJRw5tj%rbXSEI{%@s53XM}!vJIzV5X$uc4N546YDxL@*F9pk3
zW2Vkuzud&D7Q8!~8$70))f?)1H+5RuW<Az8F7rICra?F9Zg^L}-p*IFe0YExmVI7N
z6=KdW*4_}>9pb~t)s6gvRjsWS2Yj=<PPARHjqcSewlCMobtk=5L8?^=GPMA&s<Q2p
zT=KtD?$I6_hI(J|p7>z^c1~M?(z9daI6Y9c-tK46pGbQlEeoG&t+2tO-yeqs;3Ndy
zYs<7ORrK4CBzA!$H2T+i>>aUTdq8Tm#m^bT{U^vW0YW4O$Wd;>B)gFT=xA7AoxmSh
zC=9-*mfwloLVF-0*FeREe5(~x-c4s@v%c5OEAG%{%w|{*-k<qM2~Pm_A^B*>LgMD+
z(#A0sc|WKHUFa$?exzdLkg0_27ucut9sNHM!6Zh%`NX*MXRqQc7PLrd!!n?j<P$RX
zjmUYPM|n5pSzidSUw%HP$I#9Nv4MwA8OXT-YsKd6hQ_~jpII<5tOHNh4=P~e|MnWA
zB=(b-{E2dxGWsH(h>w#t-FnDr20#raLc?DrDCsnX02I@wj1Klxj$p7c7=za~Of24#
zxwM-ZtxoO^NS%o%jD{4mZwpO%&ap^c+K|~gLvf!+en^`JD<=6cZ}WW)7uxWX#XWW0
zfBK;8^2xW3PXMCh1g4d*V>+R?beM|ryvWA}D;1hcNVS+jXSm)qWDpA<{C)&Tu5HA#
zzMSpxTb4Icv@>VXB_&Vry9{v$OXUV~#c%;UlnTj|%OtZ_84bh4x<}E<YuwAEiagqq
z%Bzh*fs}$JrXnL*j7bYO=D*fWd!JSh(+||C6*pg0T8EUY_Z?0NG&KNPwMwxxMWq~Y
zsVx;_#cB6v1w`kjOVw=%@e7$M>iS<f8iHdWCA;QlTC|?(6DBGRwdI!Z<QXC-%2TC{
znY)G^59)k3wPr<wlT4}_inF`%1$f^Gu+2Tij5w0RfOlj_J&LQ7-&I@tNp0+(7u2UY
zXYqf(R?bS8a4{j=`)XzFFl1ZyRwKxirU+RrS4(Q+$~2p)ODEgtf8D}fN_KCQ1bY;m
ztgnhV{;ml#qB7y?I3%QxJVz(c@Hg8;$zEvvN@nK|@1=)DxZFU5T5j7m1X^XpsAwJ}
z1=^S4#Ii8fBQ6zOshO_~0U`rEvMyfVQgrg#4FVCmwq+HMxhcBoL%1dm!yc0jG<>dl
z8>GQ5$Zv)O(CQ;XGO+>EuzIWCs@WwV*$4@X##_k-j`gt(w01uv*05BTy{=ye;0bZW
zT;-O>>R3obWj!MrQPd|bO&l{eC-8`WqmHSOYQD3>Xi@h#<;o`Mrc=VMDoY?v1JQ|X
zw!O@R$u(vpnx!+NIF2mR6Z&+D?hrq>^}c3L)+At<dJt=$P+!(f?HfClNqbu;L9fmZ
z0-5RD&s6CPRNP43^3A<HW#nF!-T(6Jvwcmo(1X@o>2C&?hpk#@=*<4AHnekj9oMhk
za_al;T$W_ndN#_bl+jJ*($e*AZMQzZ(l7jwomOFZwlz1lC-OKdMzND@vC!St&6>kh
zI=ha=x$%1F+VhUrYadv@Q5MDu@mQqQ;hIlhaJe^0x7Rl3fn%MA6uS-5`q&Ray(N5w
zsC5(LoO;-%4>a-SRht@~hlFH;GP{|Fv_BkDhdV8>AC20iOVfLXu-B&|+y;8ZuJSNk
ziYTFN;P|R!(#W+>Buzc~%(ldh=naQF5o#JV+rpLSkgVzt8b(f}?<fP8Z45Hq<|lnz
z8cTRIWseGF@dUV9rvv)Sl}lMIIyh+@=ELyF9UXdJ&rq3`PstwJ3B_4sf1=iaElj=k
z@E}hbb>0cQ#tcAr&kL;S{$U>)_CU>{4Uj;GA9(9+8JW)Hg=NJjBE;)V8{)AdT5kH7
z*QJ@MI7;#rIrR{{UXcQM#34^X>aHXAxsLMn5}53M7-xgK$%1$ti$YAsOnvVAiM+w4
zy07cYzwWCb-qm)xZ+qmv&ou|$S0xatLsQ?^O^A<1p6>f?3hdjtukYKD?!$ATFQg^k
z_tQ`Q&$xd%;`kt3e+votp|tqFTk%u;;r|xNpKr$xTgeaC`S;r%-;WLclE3_jZ~RC<
z1z`R85omhTkp$4B1kkm5-w6azy#!MA1h6s%uqy@F=lL-wdUI<9@WBGV-+FiK1n_YC
z5<UqMa|@D42`<X<dYK85dkIoR3Q}eYQdJ64cM8%>2-0o{(t!o(-vk+c3jM(qVx$pb
z0t<R82(oAiu@3M<$hd{rBZW9Jg*YpPxH^TnC;HieC9Gf}zBi#0Paz&$VL=*UA#Pz|
zDPfU9!N@PdqF%ycxO@Uy!V;CjlAXd*69b(4{bFEY*|&j|3}I<p5d|6%MQ#z{ePKB*
z5fv*D15^>END=i+5sgX_YAGSr2@&m$LEAtP%{LLfp8$PkVdZ@hLvDZ(E`u&Ez{Cn*
z>IGmP7&OWRSX2&u)dZML0IWBL^l1Q=ZveZWqW1m0KoG!@Thu91#1>7|#Y)t5pTz20
zzj3OlN9C|tt*F<;u!oeW4_MShYuNRtm_M%AkMLpoL^h!Ch}o5Bu+@nAH?e?7v9QdM
zxj$m`18k7Caj~e4k;n4jNGGw_pW@Oag7Gxs3Ebj|QsPNk;>lLxDPH2Kk>U|x!R4Lr
z=?ld{10iOqZ0X<1*94j3eoEv;4yDpa6mUxvN=X!HNfcX2lz2&$8jYpx_oa7^MlXnG
z@Au`je?ye$>W=_qM2fh<jOWov<~LFV{@@MQl5DmbzepXU9T1Do9FJBCs@&)+3=@o*
z;HFD#w+I#KVV3Nj5H$aZ+2kZSASE?ugwVRs2lSfo9TTro%A*7anVk0h6&{?xm73}l
zX{1T**OHpWm7d#(8k*?yl#*W5l8!NwURIK(pBSf93hFr-U*jH}1WRpZ_DxG=FjGr|
ze#$_0yrSj{MOG907+xjFwZ2;i^l6S18{5gqgT^`%Wlou?C~3ZTph4w2$rP-Oo_X~h
zS<#;;(RaN`#-Igl?gK&>l4o#bo+76QXr?s3LBDp&zHx`VElj_IWnUwu#|rya90Y$E
zHh+SGuBpV!vigRhD0_mNgBvdR>z4c)TqnyQ_pUWlr6lK-Dud@(O%9y-q%CV^HErcC
z`z$4oPAc}&C^+IJ@ApNH+9_xqtqS&FW<yE_Y$doBId!l<?kL9n1#gz1OM3i`!0l;P
zvUH}$t8a`l7zbV+aZ(Ot5`a30fu=1_yQyGjC4XHwhY%zW^hzrS_w6MLjwec82J}Jp
zCMKDa<dkFQ-0Y@U&gH1%XJqB(C<^7NCMR*5=8>xAshZ}fo04e`6ojRfbRtC=M5X}n
ziuF!XnO1^_iBg>;b39e^r{5NSM=2d93X&8l2{;Q5YRs@tF8rhome-ykGgjtU9Os0Z
z6Yw4qWLel&Qqr1K){Yc?6P|)3PKgcnxe=6*9Ry1c_AyN={k~sh?UJTSY_Hi@q>c<$
zc2>4Do|Exb=Ej>--yG7YN)}pFw#QrMWfpUNQohVoJn@=pwN!PD>Nw;MiD6chDw<a*
zTKFgfnv5^;Osd9(sifrh5ogH+kgl+JD|#NN!qct<L@g?wFQL3IArY&FSE)h78b?GY
z)fCVbM;euArBqnqS2UkgRr#6L29{u@>vUig{JI3O4`c#wX6yWwM>nJ_-bX_$`YeLf
z^b=RYn$&XPHCQr79na?-tE3pc(+ZU}imf$DjMwxg1!EVNh~bwKl-0O`@XFy=#+;U_
zMO5Xh)J-?lS(X1}7b)jNCEJM*v?6J=c&`&?j445_D`aZmJF8J<$|SNV%UP>4O9ycj
zEg7S$)pRXwY^XDkt~WFdHY%@cqGz`IX^v)T?FEeI^JpkFYTAIt$A7MNRRt@H$Q@KJ
zO`U6zcg<TWuWaDXbSZBP77Y#sB{ylWf6db#>(btUq8u+;?>tx;zEgvgRW0jB$=MVs
z#^GrqEUM3YD{yMBb~x+sz-y)tu4N?6AUkg^Ck?JxC$D;I!PIST!0TR1lhGFmZohA?
zNL9w)tEyM6)d5ukislY@R^qZ0CZOaESvGgF*xXsPm5VfI&^1-%mOH%hJ|-BfC%5!A
zwr*~=x<4ad;pzU!)^j5ncA)7`-~SH3rH60<f}c_^lHMNc|3itZKEA%8#zM-~RO`>9
zJwC4V-BGSGX^ZfFdtqMJ>#q(JugLc)T4(?P%!fWKz5&rz;Z0T_W7N3#paiH&C}v@W
zURsp~tW32p`{jE-S@#Cs!xBDgvR#xOHS#VIz9AzZpZG%C<4z9(X_Q6cU842ba|9dE
zV;FA1?J{;7az__1ZOz{*i?M$g`XufdJR5MDATdlC3d`)ztQwwx4ZXe^iLr_bkYNZm
z8;W!rNiE_3`?VsYqvb|Lnlu@*&u%1AwvRw)tRZk9rDLpu5F>qIq?WxX6;O$s-M;g;
zbNmhAa|MdxA(C=(lCF)hKK`LKWm#~jv5}0)7KyQIh4DCCbRCnPoJreREUPKyzTQWS
z)kBdWnThR(3E0ip7~izvEwj$?5c%S;LxXg?0Kw8GUS})T+9k>TyQyclDG15bVaqh`
z4R^MIZlI!5*Rw?DwbjA}NE2qdxza^oVFoTWZMGJk=0Jpm@ftgC!TW>sytd4ubp+wM
z^?VS_vz2i)05wnz2b;C59u+2mCMZEeB#GISCmLN~zvFv%)mEJD`&E{#LxjvN;|LQ3
z5Ek|#*sS2YsW*msk&I~R=T9|}QMnf8qv`CyI&@~~>=i0Cp=9Y)>v*pc)bC|AE*SAC
z-BD;3RcR`n>D^`<{Pml5mMtd7=XPfgpYbJS5IR1(3briuWloDeEa~W^Ue;9S74#!n
z&0o^x0xjjD+l%ou|6rlgqcdWg;Fu9pTCVfY1v%z5e*CrwM#!+q-pW0D*XKDSIBzgG
zV^E1cxS?G*v|O1o9GxdA-C>v?3PRX}hun~1x3@w1A_xVz8bBB418_A|^K1mY;2MeF
z^Z1?h&)_2%>y#67`T+X9&oRpw*19U^S8434Vb)iG{ncvXQt>W3_BNASco)U$<aMHQ
zMUIhOLbuySdyOJe`HR)u;%8pQY?{Tn?@;8Y)NDI8F?knrL&e(j(2ir4mm?P^0D}DJ
ztOedHO~;aV_bBRmyF-}sGanFV@)hTj9Sqym6`ef@*OoH?yH5pA@g~Y-%DS(k_KA~|
zzn}5fm%OTkYm#2uDh>0)J~;@hjUS3#NU&DE0s{19jnh|#R<h6p?6Z@RizQw=)@Vz=
zX1Wd=>q$cEb#({o%Z#D!8xr#9nQVuo(MAa5Cj;$o3sOXARyKR~6j`(!VstieAHXW|
zyYbkay}~*)_~o281Ktv$l5oeK?1ck|?LxSR_V@w^`eN$<(@~O(F`KvIYQ!e@!tOk}
z23>-U?)C2Lw)u9No&2`lmq%Q`X!r#{JzY%BWpblT${l;oeRHNGNBM24OH@2>^k(%R
zhZlyLDQjv^Q#@B2qCa<K9=1e~TkLlF!$FcJur#7<G&%Vx%<`Gswv+TFg5L*euFusz
zrL)2>*9D(@ReEQp;RktMXC+?;ZP$mH_I$G6&Kfn3vyJ!c<<^+CWpl*Qi`e8*u(U~=
z<?C2XWj>cOLMTRjoJp2XeH~O(mY5LM_y=>*Xp0sX$LU5Vhy(b;Ty?q;;m9E_g_$7*
zzkSM0JH!EG_;`hN>L}~VLhkOd{ealwnjtFX6+&D}X@1FLy07AF(amANmXk8vF^%m3
zY?*i+I*dqe?#8Zo*s{&(C~eGlBLFy@`nWr!KuZqW93qEGkr&3+yu7~HRBhiS)Hr#V
zS|{6{*~-3FBR;0~xVQH_#w6R2C}fnF<lP;@8!R{cg|*3M@@RLo#)Ys8l3NzrrlN5X
ze`k5FY?lM}a7OA7x6$3~#X3o;zP8z3X$GF<0P5p<UK*eurx0&*Se;M(zDHkrr9(e@
zR(h`LPGr&}RA)<W<cv2z{({6u>xV>~9;)06g}c4*(gaI7QGflTCiyb?5f?;W)#gMB
zB&(CCwHm8=lWg~zU_%g32_D~jTV6(x3i)ndQa-zUHfQ_puJm~P*Yoz$DMvpT<nFDa
z`n=i$ajEp)wc8K;66*5>8imH}il7e&`-{=)_=<2K6op)&((IZD5ct6A0B(&lpb{n$
zd6*kQULJ`fqg_h?Qe**Ae!n_<sL!D1>wjrlB}uK8pYrF{-vV>ksmS>gBEB%DUsEoW
zDxgj|som!l%D{+-bDlcssnkGgP8pnBQwcXJzQPli%i%Bstz+6z%m1CwZO}Vw+Geu0
z+W}s$MIDw%4C_gu$dJAJb+@CjzzB3zTAJrQ&~Q4N;|2Jc>3AkzG=a|gh52-$T(!aG
z{DlR)Qg1q6ZT-r6vC-~&dvVV75CrNA%%Qd6LciG`OJP#Qe`dQoo-4z66st2H1Fwnj
z=8Q0r&-T%!JmVrNa#I8xvJv40mnuHh0GA8MTkjb1PkI(PgP$5Y<apjoW<3pdRFl<D
zGF6d%75=!y8e@O{t_G~(fl=2B5E)Vn!s1;a)aUe1O_SZRTOv>*Nmf(U3)XjAkwPpl
z{T;=!=0+UNaoS28!}Ib)94i3JK@ul|?M@Oe4q)D}TU1xobd;A!gY}cpNGnXB&_JJa
z(H{FXE4$WP0-2>)-6T?zCXN~<71jOn_du*0ZEzt))up%y;5L;eM_lH&s4TB>o|xzX
zWGprHP1knA^y`;;k_oP+l^`<o^%qJBjs(2qdk3`zorIGUje&xgng{bD@L6BVvZ~r&
zs4DBmIH{|e);y@I+fLi5Yq~6k3hmUR)6)|hHtNR`N0m>g8)|-V(Fkr^lZ$Jv(q>?2
zS)2dJFAm@tux@ZgfTLB1ts)|D#dWT)&JB!y{?)Wl{GC>0jmoWt>v8RVqs&G=mC7>0
z<(SeW+6LR8h42Qhwh!raaH~mSmP?*(&1I~-Pu2hRvTw)Z?av5d1UKU-X@(c$7-dB#
zWAtAc21sv13r7iB65-3J$|O7SuRrD-4Y-yQSms}k+9$uIqD=Gs62GXu(AUb2Fpn2j
z?6@cwzVAd8-KSXAcGNalX5d*n$uFk0pj^=oX@4kQ^*O()4+=U@TS6H<Z_+R`O|R{<
zpnhiq`NQ$D?*!rau<wRZXV;H2KufPru;+x}PEM?JHdsc~)<4a~@R3=!XF^7tOkcVW
zCg)2Qt5#bpS`Im#F?;D|!H7JRs;B0Qbexx6uOD1jy>NWo*Mm6IhI`o|-~ZMsVrS4C
zR{aS8U9(U@+$EG%dvwnlF1ouKwoSj$Jso8D^1hr@^zgo(clbKoEc+%;m(B?BNzUbC
zy+FFHZ`jDH9-g3a=0+vFzPv?#{-e<Rm9f?z!HeJ<F-7kWg&D8w@%U4uCfqjpDS0In
z#E;;I&W$7!Uv%Lp2zGx|eil;DCbixdO^Oc8IT;(qPC^97(tf;~+7RA1LQA?(fq64I
zb!M&~0b3?CqH(b<GjdbB4`hQrBqG2k$xv?G#W3nGaW0hLd|Mb8X6%4JE~SKOSo5Vr
zEcJC!HeSTIpUDSKjie=U&|<{7Vakv-VChbuh&jKg$56<SNNGx;_FxdEz4<};(tU<X
zq4CFf95{=!pO{CYFT?rM7anPMS4bvAIVK-ppIFRIN@dF=%Gr)2^02Pg^NDgq9RUR*
z1x2M4`KgKAzjIhlp9=Q=(6K?z=T8#dLe?X{`GhfJL)w%V8FK-pv_kcbi?h@Sbyk9?
zh67V9&}pO{!6;W-VHU{uqxeS_*_eThqSgpdpKFhD+I_Ae`=OJZcU)E4(uBd4DR6n;
zW=OctsUde;Ys3$MY2r0Dfy>B%M3X=xwiYQN>)8vIT(@W<!lAJM|D8fih-xk_*(B$U
zW>VZax#3tILI0J4LJBW`Dk#%3E+}47woknHQ}=8>iFb)I>sVLLzbmN#9x8=|@`apq
zrP5}{B1i7f9%K`0ym}xd8&02G5NMz{DpEyOYz{ZvVy;AT5><}tWTBzHsmcc8O|7*@
zwcO9*T;)?&@Ge+NP&pN!yJZwA^Q#Y5)GaBcUwB?(0K3RJeX$D5IZ6A7YIRhhxjwmz
z#>7==dBgyvMn0a3sd-e@X+wy@R~tqFn{lO2A+7|O6johvRc)B}K_YXK#>TN?ee<Td
zrMqavL~}HDqz+BM^T5(v+H(y!fhN7zd6HxI68AU1sj|VCy31yr@BE{=W9yyHt)F@;
z=6g!02#pOtq0smq-Ez%2Uc?X0SFKtxGzw)ROUJKHE9^SII##_g{JzqFKBKn&rNpBT
zK&=EpF}3#I($GsxpK<Fl*mseAE|gv3+NfzH=Pxrr^>#i<Ix?FgNGVl>;JkV+wPUpo
z()s*}Y&!#C&9@G*cK?a?hTfTFzVsnQrsd54{A>Q4q{6jGHUy3(#VOIeg5yV6mqq>d
zB?VxtK<Qe+ICGEIv29%EgE2L$ZEtnsx`7{o(ePq+k~S?&#^TGdDy4f<2vJm`no4<c
zf8`O+ZQHcZ2h-PK8k}8L^5h2KP|1Rok(KqhFg)QlT8)=!;UU&cayN4^Q`Lzy)0A<-
zcj+`&jAkZ!)!B%x^O6`1bD4(r#cCgxO2a5_*^+i96B9H~DE0k-m*yoA?WW2=TChH9
z$I8%FWUis3C45|ZP0u}xyuUZtT(M(qsoSM80Y1a{bzr7IS=2QT@~&uZ*s*cQ%ho>M
zrDxp}yzX+%s?tSm6Cba+`OwYQeOqN)RKLzLb-Q+(dMp~~<GMv$_1KMCeHFyixibWI
zwXFX!?o-x=-}JMlS0vmn#IbV^AHqID4P(DF@D)V%`#$#e5gZxlv`6U6F=0q|oAzk4
z|HssQTwCTg>$dZV7vf%Hh2WU!%RB_&<D5&VzAIwtI+5|^TqvNsFH`I~Rq5eeYN)=i
za_l<OfpD($(>>HBbb(FyxYp*YADSAv&TV|THumTq+vdA2TzWeEgFYPcJ<%?GAY7oY
z^iRG2u9pV$aqptmJPk5+Uq}0L?-SEMk1BTGB=>M1R#ZPiVsE<&I89fNR53h~qVSK4
z`FKuu+TCMavkQtuSI=ZIJQF5)@0)vgE=DEKq`q|B|El5{_2XmQiHLk^<Kw+apg-Ka
z-8$-?F1Z%Kc#o0ZHe6KYeQ2n8XRZF&n;t&8&p`JviP}~@*yeqiulYcA+1}gkIeK<S
zhiFggs^07JecaYS?wWe`%7&s-j1ZMJbjOfDRhYR|1bS5zpbwVZue=0DcfW^=uob@P
zWvBx)!v;Dkk-w59{B$PZ7RZH(CioE@|BZ8_<Z~|6)T*%FFotmisXYNq`6BdGE?`yf
z$6+qQMQ(MbUcWbXW@WCBKk$b@+Rr5dlx8G^8v;~TNFJ(27$W0FiTGp_CQ9HyidWez
zO7j@Tn)t7^rC+>xn9+n-Yhq}08zn{GZb3@^6C>J-qbmOLm{g;<2I6@5qj<@A_!oq~
z=Z3JTHVTb%kq+a8Ili&$5yokctmKN)SMKOy%12CmffE=axlken81#z;kJ;<vyU3tq
z%aK3iQA86_h7bKF+sG=*MPiI64oy|wh}RuZMdw-dB#^`jPm=luldzaiDv#pu*C3P>
znn3}Xek4s_00zS&7bSQ%mcfvT(~uHSz$~*TlDXTxss5c+49a4VL;9P76@l8H2^y6E
zk|#;pb{L<m0@cFgkR1j0)&LKFbvk`1TzmrN3kdM@7IEzH-tiSN%Lg(4_kDh~f`7X}
zA?yiDOUH{3usR_7hZfkw6M93TF11GJiS7SEfc-mw0WcwPTHWTsUvYXejEN<QNiF0r
zE|hp66gXVZY8#;9RHD-v7H~0YOH~v8E+=jFvt7;zV=aU(4_VHKM7}%uO<+%)1|~YU
zFq*+Qn*BfmP^5IDC%KE0>>rJ!6CheYFjEVXmQfOZAyEa1dVPWstTz;VQ*eqimfwX{
zK>5i=Q54005H)k4wRWI%Sfq2RtGtDi+-oG2EaGE4z%~V>2`2TaEs_r~Hh>MT6O;CS
zE)?}4726`vLP@&^75SJQnm8Ql_>h^AL3DN3aFPf27s2~VH2eA%Muviuxq4E_5{a2%
z*cvDWPLxpLv*BkjSby8{l>7o`xr0RuaZOyvq_Z=(zsdfa203g&Ii}+d{al>}N25o{
zndy+bn2-xc7PpsSs#Fu?5)?{_lUdpryDN~{P#wyFj4azjrVEc$3HP)IRE$-G|7PLB
zKa&CAOT<HsFwG|&w~p2+$o*K4)?49yc1ikY@WBkG-0Y>XZpAJ#6hRJXuEiPQ0>wx#
zKV)f+gRh6B^Gg_#j^uQV)a#GvX34$MO}V4ZYFeY~ge4<)gM7xKPimp5qm0fMjxXiN
z-6cv0Wfq;<Wt7c<LLVb>Dy8vskg|4diuQZe)KoG;izv@vL$5ES2J!QjHk5`J@orOv
z))J~bhp>?z6m~je8dnsmRK`RY<W5h=4}U2))CSQ>%fLzIf}bekS&<VS{@qW^NXXXo
zH7`ZFiKi}xN^Rc@Z<kC?F14gHi6}nK3&4!<P-7$movxe=7E-#e9S7bB6+Ru2otu?>
ziOJm6hy}#;hHjnyR1!2RkN$g_GeuR^t&y9)o||qWXV+iUt&hVPL!Ug{(RxJlMJlbd
z#B1P?a~G}yX{<=$G{U4jvy<xYNR*FYsbR9%wwFX4QKHt(SCeomn@lQRB4B`>L`%A5
zdoWy^3r>Dzc}Xo*;0RSoEJQj9DB6A+*ktk3sMVt9P)0cqs{6&VM?<O#pQg`Yttwfw
zdZ>`1R@8<UJ1?MMam1)#YT2OLG=<Ybcrgt<m{JYT!dqb=a;nT5DCf|P6JT=IlMhCR
zq9{F`>KdwaYOE+ejq2quF>0mhY9}olEB*dFP8PoH@Bp5=0ZUWB%<=AyHG?<4mBxLn
zppaVo4Z&=Y&@7o$<<QbJ!<UcH0mF4f|7IiP1b;V~n{K%~{USl#q#`nkKU;hu>0WBp
za#FU%uom4&&9-80Qdqga@r|yvYPR}Z@u_(8(42u*s4RHm6!#*|{%l>twAV*szxq@L
zrfkFH;y~eIeOGGE0z!KnOqXhZ-gLh#$SRz~C}|C-5OJa-<qg?Wq1(Q*K1$Y#N3bbe
zJec;OyZopUY@^<;t)6)+)!BhF*|J%!x10?K%YrRBlcBvbA=(_Ok^_XFZCM+HRzKL(
zM8#D%8JAXfhnR#@yc?f-!<t<JY(;Cq2NoCdPlf5<Yc4RVWl^j;`>NtJXn{0z#d9^0
z*){tTH41JNdrR=W_*jC8;M*6YAic{^<dFw}nxh-|3x^sg-C7%W+a`BY>1vSYX?Q>`
z*=)1T^-$6JjMeC1;OIxq%NphOP0ia@5v1Ps75`@`J40#e_C@}wAZ~3o<8de8Tjkuv
zWj#GYj~&7zq`Da29Llg3m9NgooS~`fcTFw9bKN;CA9=pDeS9&4S<@9sRX8fLUI(uo
z%5R2JHER3nGx;e7L`9Jw+mfhoHLglm8HEVQ^LFrXwOC*2=d0_o>FkI3{}BGVF&4jW
zl)tXdq`ud`o+_sy=)dqD`-3@d`*v9U6R~DA{HsWQ9hNAgeRM5Z%@yQJ?HPjZ>{#IW
z-_v)ZI^>R8Oj}D5a(k5NI>K#6x)?N~-x);nsM%l6@q2>K6kzW+Y)b|h1mUf16R*ij
z!gsqZ+*azR+w1W87%8E1h`%~Mq*qd_I=oz5gJ5s|95HgFFe#kZ*WKT6zt^+e+H*}?
z2V*kPc0e2%6Rr_VE50)IPjVJAuM@LKUa<^YkJdVV!TDaPVZ%1eL_;pc&IgZ5Uc({U
zD9nd>dti21=E#lQXn1OiEXx4$xMlx(S3t>R%iuWlRJaT1=c51f^X!l(!ilAy32E9A
zowE>U%UbaAnwy6CHNWnb^Nv8aQ4X<*C(p4?-w9yK1V3CYa2pUuX7lHkS!&sFtGlra
z|NC7#J$Zu!268Q5%neRYL!6)!PQq2!7TsTAI~mCuC2FSv{(Ff87Wruw?F>B;&Bj~8
zduDTH{@)aKg7^L0w3;D*7;~a|AdW3v4A_5YRcuEnQ|Jw#9n~V7uY05Q5GgiKse7xN
z{<J`x8C)xxf*Z{q9ko-M%}e6sQ8RQdn-s{K4Y$bGx-*;^AM`XGBxPBmQk{PPW`Z`p
zw}h^xFa++5of_^n-%rXoe{nT{-cYV&kwI<7e|)(8a_^AS?5z7pTJ%s`)y!;<@y@KV
z6nkf5g@)jHC-W`oPW(8-XZnR#<H-o<Vc6m|?HXg&Qfu$Zd_w#l`dI2PWQQZ;g^2Er
z$nI~N?hTFOBb2}!K<#@p1i-sXLzD4?nEI=>2Hmduk81?*CHM%X+p~Tjn6Z+AOakd0
z!*tohOWeL1yH#4ZGF=yBm>e2XwAcr3g*~=}AGJm^VMg?)N3fyt5#^Haj7E9Rl3zgB
z<H_A!@1H8(*_qJW0)?Kf#hw!t+v0UOlIal=I?@y96OxvPQsx1v(?hAIZD~2r+g9!s
z&TW5^+^t%lKlQd*j&P(ew`D~{rZ-?`jALXq0CHZRb1DG2+Z=hnJgWCOO3pc`;60Xb
zIiUWu=ZXFgOF*>0x}>`bqHmg_pAw{JkfTpfrcb)3e>#y=x~5&aDRp{;ZMp=RI;gKY
ztLKQQXBw%OlB)CAtcOOe+xo4yx~}g!Z@fCD#k!s4I^77nJ1rxxA3L(Yk*{AGuuB@M
zM-Z_Wd$LbEwg1qvTUxU-*0V!Uw2Ml$e>=G2(6s|vwpY})KTx-CM!JVPySIB(jQgLJ
z|GRaay92GeaN4`O=exdd=Ut1d%*p#D;X7Uk{8|wFR2cleC%nQF1ibqh!1Gt;MZCmM
zJjGYM#a}$eXS~L5JjZvu$A3J?hrGy-Jjs`Qi#2?oJ^Uw`Jj=Jd%fCF#$GptXJk8g<
z&EGuE=e*AEJkM`D%JZ4Z_Y}e}Jkb}u(I3Rm?^)2h(a;~g(?5N}C%v96eTp?b)L%W;
zQ@hlM8P&6q)n`4}hdrxrJ(#JOAnK}D1NqmBJ=?eaos<2SsaW`G2S|Vd35h}@%Hi6(
zJ>U0zlEb~1$$cSW#o#-H22zFERu{VOz27&!<5xJ~cbVW*gh){S)F9)2HH602|2yM9
zzUP1bX-7VnP5wkwe(7HVQala$B2>h(Pv?U^?8p8@i~g38zC@V*?Q3P&uKruJ{`$PW
z><7Q_7c%YVnC(Xd?jt`Yxad1t;_X5ihe%@dy!IvbDDV$I_GiE77C(+1KSU(|_X|qu
zU*vvq$uGiUl*S-#R?_~=CQL^A^=rTU&ws6Q|BZP+;ZuIQ&?jXAL?=YU`W5V_4N)h9
z2N9)P*iWFgg|h}OOt>(eBuNiBcJ%lWWJr-CNtQHu66HaADOt93`4VPKnKNnDw0RR}
zPMte>_VoD^Xi%X;i54|_6lqeWOPMxx`V?wZsZ*&|wR#n6R;^pPcJ=xd|LoKYW64sO
zuo7+Bv|-t{b^Dg3TDfRZB0|K{E?$KNyH&K9${<354~O|>=rFKhgQ+(1ReTt3WWtgu
zSGIf^b7sw(Id}H_8FXmTqe+)GeHwLY)vH;zept5bT)D1k*ZwMdZOXj5@9N%LkTGJ0
zfD2k`%u!=v;Shgg^edR-VB1RRPPcv?dv@*Hxp(*e9ejB4<H?sde;)m6*kp0%PX8W#
z`|2lm*X>=mdA{V1iT8WF_&$V|`>(iJ3`$5E_;#94!3G_C5W)y0oRGo_ExZuJ3^m-4
z!_wB9;4Jw%91%467$m7a`tGAIKj?;YOgh2>Y$&l#Qn?Yw8x2D!|DhXCBylnzg&dN|
zB8@x}$t0CrlF25WeDbspLlhCpDxWeDuN6&7am)OeL+d#LAschJ9L<c;9%vY|%S$4E
ztm#IQQi0~GQ6!2<pHPI0lRSGwxicg`m$Q=4LJd6>(L@zpl+i{V6-`PkADxsYN$txL
zQ{?sv)4+~`b8J8~<<#iS5lfxvqLIWziosRuYUaQ;y~{|{j%cM6*IaeomDgT<{T0|?
z%Zt=fVTCPrOD#*{a@jVaGi*OimHW%1>g0*e)ecXUX_i_$%C;yQo%2>V>AEdX(2;I6
zmfd#UeHY$%<(-$_cZsF4UR;q~R#}e<vkTyURmH@k;Gpey|6MX6>bJ1LK7FVWSxMYB
zC~%1qm)e-@vADs6^Zgj)kVPJu<dRK3nX`LwLs`*%Q4|=tfC0|*TaEhL*vp8ft&yYp
zTuiJ}BPj-oW1%hqWn5I3(a>X-oqihXsHL8o>Z<8gd1b4cbXirHA)Zm<kW%f4$D0f5
zM4~h`0`x_?C_;NB9+wkn7KhY6PUxXQN@o}x+2#uzPyH@Xa2v_>NE;pJjP7s10bhHt
zjS1r0@E;Seyk}S)e~5C-qw4%z&Lf}2bFxY2Gf2>*W3cmK>@HgC*kzxc_S$W~9e38S
zo-6kvxfY38k9Lz=FOV3!`5=J+Mmy#dd0c+bJY`1S|98FpWpmB^BtgDx#r+G~u^yEl
zS|h`ihnV^=`+1wq*ZUTqS)6SgKWV}z5`RtWf%<p;u|a)XNB{8?{3Nj)0Ud7@0?}TA
z?gu~D!LD}^l;8v@SV0S35Q8My9q%%Tq2GzkYZkdn*@lv)=wYOBfGZW>PFOvcPy~Df
z)W?C4=Rf&@?`+P&+edT;w2Yx|AsFKi-ef4k>V#rNlB41M&=fqRz)*+#s8Ip$SHm5O
zVnrn6*%ASS!-PPvgJBfo7|B>hGoF!A8=MUqAM`<xII(8~v5PM<sK1`24_Y^i))apT
zpcK}xkK5~r5SgRH`6P@Y3=$+43&}_TIYo(g|4dB3dbmDH-i%p^1XUly_eVB<5|p77
z<tRy6%I&DpJ*GsL8-*t`SH2RAva{p;PV}%vDy)ls9OU5+5<}pu=$1ij4k061zhcso
zk-=m|;AGUoqG%FZTa@IBu$7ko2#Ar;{F*0K*-dYL6P)1`=QxRi%2|?gHLScIEMdvK
z4xaOuh@(*>Eh*2S38W@Pv>y;3$w~V)ZIfgQrs?Ln6nv6xo(=N|BZvdgF=3N)1<j*8
zxrt7TUKFDl)#ygcXij)?v_$Ge=SK&+vs*rFn)Ligw^$mw!1yA7DJrQ-D}gkBes73p
zLL#6hD!P~!R4FrkC{Tr&(=&yMbrNNU|04kjQl~x@s!^5dROjW<k5bh#A{{9_#k8)I
z?(m1;awRJ!xxI5~bEbqmT2r|Qz*gv#8_Bd{k6Z`QrF0dk9yzF6;Tlk5_LL(I#p+-Q
zTUf&$7O@wyYGO&FRdRlmm?rHHN&zX<k>pTDH&x~**lNGRTq{t3#o3_js+7nE^s^q>
z4>UsP*PRtpsHJ7>Y-w9t+ujzppIK~fH{;lGev~l<o99<g^s|FT$Cv!fEK`d!%o^4z
zuc3`bHW@}#qy)Dk&{XKRR^eKCCRH5N6>dd&TVC^?7rp6KZ%uZ)-pKe?oFA2Ka~bJS
zy1mwiZ%p4FBa0B{b{41ft)^W2|Jlr@%$J^+HL!peJl}-v$hr$7uX`z6VGCav!-Q>b
zhHnF3a9;Jey4<IPBdVA^{_<2Ow&aSmSseeZ^`;PJV15NUS)vlJDIrGjBz>vO8$%ep
zuFd4yI9y~S9~sF>Cgp~ed=(FW_@fzd#M07qygtg$Zi!Tk+`t4b%vRY(CN5yy%IDnb
z5J=2*`y~+pD`mU!ZF>W8CQ;t8HZpIyA=`^9oWV-BEH8r1K~@--!HnQ09~#k#R`jAv
z#$-lc>B-)_>YCf9+*m;`z#_!-WgQW)PO(YTpeE$=(uU?3QpD5q0qk&=H^cHdg&%9G
zG%W|XX&I&3If6bWt1BJL|408C*ufU|u#x0wVjm^alAiSDOyZ6StHh2h6p0C?_>pwX
zIZ)cbHb~ylxMk<$+QrS{wyAxSa334p=~nl;*<B%HxBDl_?&h~cmRfk<8{hfX_r8Vn
zZhqfH-m0WG$n5=ZgC88>30Jsv{Jrp(1l*JZ|5(8tUU7?G9OD`9O2ai?5{Q>l;`yR@
z$4Optlb;;rGU0g2ZT0a{hP+;BV)@KzUUQq1eC0QH`O9H`bD#el=s_2HlX7nJor|*P
zLs$CJncj4#qo?RKKYA#W{&cHf9qU=wI%uL!^QnWf>RT84*vVdYvqPopGynQ0!+v(R
zza8#zmwQUm&hoXh|FP|J*Zbc2-gm9nJ>_>tW8VE<c*7qa@g@g6$_0N$!Y3Z`k(d1B
z*}eFaH{OgU(){K*-+9k}9`vCX{pd+wdefgC^{H3=>RI1<*S{Y2v6ubqX<vKW-yZk5
z*ZuB!-+SNx9{9l*{_u%keB&P<`N>!Q@|oX!=RY6%(U<=8sh@hwn;i3Htp4`7-+k|Y
zAN=7L|M<yYe)FFn{pnZ#`q|%p_rD+h@t6Pn>0f{Qm;U-C&psI+PkI0U9{>Z8!}5>h
z_HT^(PXH580T++~4~qah&H%*-0UMA4E6@Tj5S$)R<03GOCJ+NZ5ClU|1T9DdGmZn_
z$pc4F1y_&-|634cN)Y2tu#QsD1#8d-Zx9E41qLrp1~G^Ra}WrFPzZ<6Np{fUdhmjN
zkO-HM37gOfC&UOV4hbzt37^mkuMi8fFgv2q;ij;Hs!$8VPz=YA3{&PqypY}Ci=Ebx
zoiqjvpX3e8P!8vi4(re=xNzarkPY`RfLub>W({JVtykjE4hzu`4-pZ00uL2V50j<U
zRLUgyr=`kA)p#i`w(Up=F%dVB6FbopL1GaTt`Yg=5h+Vff(I9D$k#%m#hgSFKM@vV
zQ5NYi6cJ7j_izpS5I=qdikK@VT5)S$aTbS>7>khzYw_T25f}FmB`T?AZVD!Vkx7Kn
z7_|a*|2`sd2=R1A;Y@zSPyVD@xRIAG2NR>>8gU{UjiPUmA{~9=9IFu?<FO-<(csXq
zB&3WL?WDeHg>OV>e$eE7*3lo|k=ha`xgvxb<*_PMY`~Txd-?}pYUN+NMasbHYgREZ
zQV=6gF(?KFyMSUoMvf*1#fB8pB;k=B|IHpx(GmgaBk!kyAkv!3EJiMYfY|1MK<z>j
z@+6~zAw`D}k%(-F41IKLiaZHtHj*DUvL%=@+gghzO6w(kBABG@CQ8etdQvNiF(vs;
z8JBSlPeK(UOuq^YCix>Dq^X_^$%u}UCpqISw~{G-aw?`$Ee}H^%Orh<ND#xZC2zth
z|5*_#XF@71awjayCJaq37ZVn{a^JoZEIloMOu`gH%Umqd7iQ#d3a-U~@s@BbL*kM#
zk%BIz0*h7(sIZGbXhj+&j41=NE)J3=@)8|Wvk`=%rhY;(N0T=Z(J}RH6knzk2h%Lo
z#W3u0EvacD+$M<##NPaiL$1no_#-R*v2+|qbsp!mGGscF=Q=TB8%1S0v$H_9Gu=v)
z*?Orw)hu;T$Zc5Xa6kcOTFftylQmaU&b-WfCL$GmgmVyR#$IYYTL{e9^FR7#exheQ
z1@fgZhc=566q3tZ78F3^$vdl)KMg0aMn^*%RL{_YAHx%IDwID5qC2}2JQI|0{|2--
zTNDU?Gv9)<YlibADwEre(;|BTn5YOf0c>4<CNxQE6)G}&6cm5#B2>;Mfi6PIbg@J7
z(-F9_5`rgtNC!#(LP^i3NhcHD(6h$G0nh@diP|Bs4kn_)200mQs2b;1W=fN?rOcG)
zp5j!5%!f<#>?X_9fif+5j`X?sr%wCuLBl6U@GQvYK_jpS#cXCjb*O*x!(hznzJLQ0
zFip0q^wqw`PLBgo6LpaW3R52gPi4|YOSJ}J6yG2-GO-7agsU9It0DXJLt`~d&19#%
zYbS-YDv9!!nh0+I(Z7PpOC=;s$!e0SgBS4ZS1VOGg0&`Xs@=TQt`e1P|4_=oWGsk6
zC{1xDki6tpL{gA;lND@}Z63oJfs|U2NiA=vEk&%k<g8sOjUR3lc`E5z0Yxf%go)S^
zEdj*Gzz4=$%Ncud$7oDp{#A!Gty*EzR2vrYQ1#wabyWlABnB1QV0FQ!$cD6uuWa>B
zc2h#GN++92#ZZb_<|tz|gb}Xk#k|C1i3(-UGFlBY*J7n{fUHax)|x6xK8KP=6{Z!x
z^)dRweacd~007TKg}?se#lUJ~aJH#p)?n9chI%w(?-jqS%+ge>n6$R29LcVL)Wvo-
zr4AO8#PeXL%hDW{Z7mRD;cX?2b1y}#Yb~-hYmGV8^+sQ{K}0sf|6X#L8j@ST=8%Z<
zK^oz2S*&rUHD`WIG^a{hca*z!hONRCTrgF6xP-Fm%$Mr(iW*}#RqWgfV#_2{a#Kod
zdsRTomRT6`X-kC{pi4Ti*0m}Vnh@+GZTEEj$|#fP&0K*&#+77kOtpT4A&0eXlb7<|
zw%y`(Bzjkxx|WiXs7!-Kn+%OEKo%iM$}k62pLPuraS215$a_uJm+Vq|fh}_LR$6ei
zX=r6wF}GXdp={NZno29Wglld|*Ans37llX~1xqcN_8?CaB?y*w6-IZ9v%nS@Y<Kr0
z{MWT^Nla|1P0UkyGkAH=(0PeXVkfp$<!NrcR(f0IK9Dm?|IKnK+r)sy*Fr>gFTsJR
zI>%Fm<3G@sEGq=B{)UDD#)i>0R@ZHP|Mxc%_*kD8D$hpSmN;>emXRO|WUKUq2qYYE
z;iqm2fCXkB9;3?susMcSOj;9#tTZAimvZwpyG|H?%tVdTxR30rXvE=kDAtTActVFO
zeK1&q_c-yGHw}FYgr|o~lO=tU^|_{&OT`wEw8W6l)QmkyNGYnUDhG~%IAt>=g%Jv0
zJ#~I7Ifz~O*oN4C8O(^O7KxFVoesHRg-Cn(OltY}*37D|fGLlSmu3|M)nxe_IZ3cG
zGcB!6c??I}pcatOxFP9Ar%(qu3*(J7^RfUfV$P~L|3d{=SGkt?7@PgikJn8`fd|*p
zR3sGW7Q*XpyhO~#6N>;>&hCsk)2538=Wen$hbKg2Wd({6Bx7$FtkM@k08NrFG@mUQ
zz(Sd3DL1W(xVo5Wio%A0t5-Ix6<do*8eoSTCKZ<7dAUY8!30KnmG+Byp?(`0ODpk_
z$;6m58k}WTrE~MOysRXz7pUx5xQIBLYdZ3_S>3uBglLo{$k@|z_98`%k*DV!F4Bu|
zt)yR=q!vNAKs2G53y1l(L7Ygtp8BFyx|#|4DcM)K=4<3E*AiRUY7uI7O-vyQZZ}UT
z#Kg>vX}Vw?SvdpAqgBgm64<MWIegbNoGp@>{~wqxD)>$q5~8VDqv`3OZ5pu;52w@Z
zgTc~C<02cQt)lqBDsAP2%FTtE63uKmjeq!)`T0R!nZN{BpFjCL3)-&^8&{_^t{Qlr
z^LlN&8kh4-mC2g4pY<8tI<9j`d<S=wdsl+nT1LvcacnXi%y^ldIi-@jnYmhB(QKN3
zs4^eyniJc)`EIe%t+6Ne3rQ-IaI|oh>a$;4LICltTM;x%`;t$4t96@CR}5d-8YD&`
zgi=>sJtiq}a-K_;mi@^UWU9K~noyZbf&3}B-?iFoTZaIad#<#0`Fck^5=VtwrNY*K
zl#{=sn~{9mT~+(KKRoWT``9`dcVO7c|L!J+@VP+YRX+qesVxM5$h3)5e9TtdKwUhm
ziH%WVipTpVav<0&Vd&2u=D-hpy|Xp6I;CmOXP`SNZb+C(`Qy#{ho=I(Ookjs)l425
zrjiKcZPLcS#8|?fe9G{-SFyac<C?j7Y{;>icYhWuRU9<GY{nyc#3mYU?xtL=9K`#)
z>_psyN!)fs)<Ar^q@JhOc0;|JoI)0%6;`Z_OY9Ldb<tm3$JY>af!uy`89}@X!aXUa
z!MA;zX1gpse15ut)cB{HRHGv+a~1ulD{UeRn}1N&dtaS-2AR{xET(1sHb40fA7jl=
zz0|_n)=nK|SzTTsu_Dboul3l^|D)aM0Dag5eb6I0J#9tX7G*~&s<P+q+cg8T$%eGN
z%_YKpMT10Lyg{n7y|}jB+WIoE;N2y-f!sz{+fQZO^Ih8e-SDVg*sQ&F2%TLR*53~v
z;S*jf06y3Ro^}Y{SR7s9C!XRf9xfOj*c^U#AYNDu-r_$V<U>9uF#gvxUY4-E<M&tO
zSDxitUJ*GMUzX0~W9O>aon6S;<#S%=cb>gqK5Lq8=C$T=d7kKt-slsB<R2~Qt!C(t
z-sztn>W?Jp8ExsSrs<;|>$6_#-OcBJUgoQQYOa3k$DZuVo;;?0(ZD|J#op}O-tFI>
zHqc(t)Lv@X9`5fR@AF=_|GJ)ofS&H5#_siA@CTpp+d}RW?e76U@C%>u8{hGx;_wkI
z@t@}YD&O)iAM-O`^EaRKJKys^AM`_C^hclcOW*WQAN5n;`6B<&Cf{jPANFHk_Gh2=
zYv1;7ANO-#_jjN7d*AneANYg6Jy^fVT%TnY|M8Pw`IkQ^h+oN!A7zlA`KO=ys~;wu
zKgpo~WTfBvyWji2e;)b1@4r6gor?RxAN|vR`mrC$wBKaTU;X1>{t2J`kIel`2L9(?
z|M$P`0pfzdffFX!JBTnL!hQ@JI(!H*qQr?5D_XpWF{8$f96Nga2r{I|kt9oQREYAR
z$(1Zyx_k*Urc8z^|7Y5~i8H6pojiN`{0TIu(4j<&8a;|MsnVrPn>u|8HLBF9RI6IO
ziZ!d&tz5f${pyh*!IUV$nmvoQDp`eT+q#8W^R3*ubnDu^i#M;{y?p!n{R=p-;K76o
z8$OIU@lCM<*Tz*0Ir34*k0o24T=}x*&73=X{tP;_=+UH0n?8*?wd&QD85g9SnYC=o
zuxH!882h&F-MoAI{tZ01@ZrRZ8$XU*xNC#8lRG!t{JH7e(yLp)jy=2f?cBS2{|-L9
zc#g}Xk3Y}TJbJ{`*SmiYKfe6=^y}Ndk3T=@^6K^bpV;4jcC{y9fd(FkV1f!R$Y6sG
zJ_s6rjzQ>O|9}*BMc{=RZpdMW9)1X7h$4<Co`e&Uh@OQT&7;jMok+3>A~JT8iZ9w^
zh+;=L=E!4@KK=+~kU|bgWRWJBNS2Y>sdy0p2ep{Wi!e?}<1jbws3c8TX33>(QGWTQ
zm3j>$3Uw|v1ZF5{iULYHKD7xHnK!k#WtVo|iD#aAo`+<Tdm6{2MF&MmWhGJ;I?I)R
zLR9CXj$SsSl!r><=3Uw#GR#B(Akqm<kxD9Qr88BAsZOFYGzuawJvIy?r#=d6tg_BZ
z>wc~UTB~ZfPLxiIh}Osom{TU&=#a(ciY#B8M%1dScr7bYt2Z)KYEU#jR4q=~_9LfD
zn2h33|2l~#OK!R5o{O$meU_E(YP&{D=q0OId1Jjd;u3EvijH(Fg8jA&uvgGBx-DI)
zI2+N6S{B^XwF_sO6T>e#9B{=JUyO0aE3M0}#-P0mk*_e;Xm80-4*M!c_7Ex~r_;hU
z%FE&X>v7FX4Ga;^bX^K@&Z#^sl)TvXe3Qg3QEYS4N-xcHtsJw}^kpE2y9&zpu8GUl
zD1X#!m1IsyGe!0o&E3CZavP>TRPz(<t6z_M-Pv!;+>f|yGkP|fVMg7S&JMwdrkmpa
ztmWJf*^M_iG)?<<O(&;}YT6Iw?GWWTU&8FRWMd?<z9EMb(aR#!OKqm@d~JE*UVmP9
z|KpXnN-|AE>s_UjcuTIjB&4r=d+moq433MQWArxMAq(G2%3==AE!~Cx?)&6|cguJ6
z)?bhPUr&df{ajPiuDjNSt}acy&SNx-%MkJ6w@G8q{@uTrrZem%>U#=5w+Po=fBVSI
zKQi+HZGHQrAE$!lzwT8ffdj)-*A{j_u>DOE5P6YG<YmBC9L!k(gc04q5hEH&=~M@E
z+vd_&8HEkdBOM&!-w5{*6}l)=f^*;jH<+>w=4)uMn<1spRH(=uu73q<7O*_1HyY|M
zE*Y%a{qUEj1Wr(Qk|H1#k@&&~9!w%Q(;*IdI3op$ag1avBUQG?Ju`ykd#!s>|DsMd
zKCAgKb%IJ@`tnDT_nk+6sai$2u-Fe3#;{YKB4i=0!w5J2aesoG;KB^aKMJamD*odc
z{^ke7Su9d*hXmrw?DxY$BCU~^f@C1~cgjC%k|OlO#Smdwx{p{;l`l*fBuP1=xHR&V
zGP~m=LmA1TRZfzfETrRfHcQ!oVwlG?WilfPO9NKKm!6zpFEw{C<1y?~qEcivFKMGm
zigTRgEGJCRm_~D6g^j|y7Bqb5wS3WQhQ`atGYMu&_ib)T{R-nNSBSrc0PdgC2_eD!
z$Pj4_@sq>^s5+C<KG;ogc7D_2H(P1V80t(KjBKbtF+ode<uhR(Rp=wF|Af+%Qpci>
z{HQH!dD4YCG?ku0CI4i$tu4BgpfnAs5EoVx`;ioa1f<SDVY);DPIQnJB&H>qT2nke
zbgERXYB|wq)d79ae4Tq^uLd_Vl)8}>8<8eO&h)#z{SJzj(<4~xnH~Ar6jiF)DG+Dc
zQ|HJiGdhiB<?5PLrDoMApPCdb`>|JM4)w2tawcFMYSE`o4wVW8#auI|%S8;aWt?pp
z<O)|A6xtQ3fm|kDvvpKq1~X^AAZ=eUx;_|&lc%Lstp4(6Qpp09BB@>6Xm?Ak$I|sN
zs2wRw6Fb=CDtEcn!zy#z!bVHD@kU(z>Q|-o#wu#Wq}#pW$OgGG|L+#ehE;lET>I(K
z753Gyft_r18j;?Fc2u?Pwe53#QdnS->ae>6?nl?l-kDa5yFR5WHS2f_$V!nT^GI#@
zDtJq9opzOorLbyQO4^({^|BY~1vYI<-~n=zV4pQ`Zj4r3f)ULZ^HuS0?+fD?%NSYC
zov~NgXf^DLV|2aZs&+FX+U{CdxADp>P5~L-bk0V8hxIRP+nY_S-4i*E_=H5BjOC6>
zdCE4P$%22|TLsTmXp`MX&L9S0(waCUM-4HCI|5eDs`;mM4zOKsxTXf?@56Vc>vnx8
zBcd6~wrSq!h-FF<FTScBc+T^S^P1X53k!z(?6RdVjcFg%|2Wg@{N9YROT`}N@~zwu
zN0GaWr8h&lqLH?#Zm+}SEAu(8*p;%9P2;~O_q36<#@ekpowJd;c+LS`WXhx~Sk)HV
z&Zo4nMS?tKRcEAY`VDezAxv6n4_MM*0-nTXz3ccM@6)`vk%kE^T$mpEk0s7spigS+
zVk0`s<;B{gfsOBc>)Sz_-Zxa(`0108>}xI~wW+_W5iXzgvJd8E=3Z9ON*^cIm}P8$
zmwlZ@2z%XuJ-5HLCG0apb=dz+@1Wf)^7^V-fEaNr!=!x?jt;NS%%-&|zfIvvYumye
zS9!u5;XH63+S;n+xV$ft!J|(E#e@T}#3lams7rn7|0TK=8>zk%fPYsTW2J6bgE!r9
zoH`>Imq>r<ylmL+d^_^fY{h}*;WB&2e?-?K(TR?AmVDXH%O-jW_0d~0+qc+8KYC@w
zEfK(lxaJoLv&~6<ZKbo<XmP>0Yc~wJW)QCM7{;Ya3V&1iRz}w$TWp09ED@cK*V$Z@
zYTjQD``8<&-?ATy)@v7vk?ojFUhQ`0HiGwxa64W!Px;#U36ghXo2d<#d|s2I{E@q~
z`TT3`@@v15y`R3oqs=Y2MQ{A}tyk?;p0=yF40DUL&%yaDWwtHvX99YA&pco8hMSC7
zOMri}f;R2`rTtoSMS9%Vap`tj&UaHrcXr$b|8>~sfDZ_P5n^>G5`jR$MmpA2)>Uc*
z2Wm)j5sO!PB84^jRc99lf9I8a=H+nwH&;`3V9o(w>GgLkm@+QdfDovC3}b_*(nT#c
zc<hCDx|Le51|XawG3i$kVa5u`rE-?gg9NyJt3_1K2X5;%gWqIyV<U9?6NK4Pcmvo{
z7AJ+p6onAhU!<pn#8!c8$cAm07_{exH^EL}(hVHAJaP6$y)af~wO}(yeW_=Fesz2(
z_z{VeO;6%YInzE`xI8bYSA?=WiHI$Wh;Z`Yh;bN(!UsQ$_Fy8DiSbv4`{!DiBrZK@
zLO9|=_>@wsNJsKDJX}X3nnNjwD2bl{|4f6ZKb>GNNOpqx_kN`Kf*y21K=(wscTAZz
zE~N-bU${92G%d>bSGtIZs6;kKlsVFP5P%eln8=OY=#6s$hu`QD>_ksqSBc8#PLOy$
z6`^p&q;Q!9Ig-_ju+~qmkc*!-5tj%=oaK7O(FmFZXu6Y+WV1mn(~oYLgZTph1!-Pa
zI6!~cDv+l?{P<V-<9L}PZd%w`oyB_5h>wi;OJRgd$~TXt)H1pVg&LMvX~vK`$XO`)
zMfX@QHkCdU`GcXyN>hT5n{|?}LN;kAYcJ`O2Puw4X_QCl6yb=JdGtMaC~Dy|jWp6@
zBUC3um`UH{Q-@eV`!kQ$L2(Hc|27MO9bUL&{IZTq2@+rB6Jj|PYFQCb6A`_VmhIMZ
zXDK}ZBA17AICKe?<LH*W!k2UTYiLQBg=v^aGJzC$m?FVOjRlqEcwM2^If0ol;-@nz
z=!D%AeXclRY*&v7a)XO0nxjdYrD>W!p_Hd7D2+Kc1~-{Jb}Txk5Anct5!Z>57-h+r
zKFipZ)$x@EqH(GzoWn_+#c7-$k($SOmws{*U?o2Dq<c^jJ0KB|o4H6m$y6q3ow!Jk
z$%jw}l1R!ap5sZL<!PA7Ii6RiOj9Y0Z?%e)DJXQ3A%AIGY$+eVSs?#tp8Lt4{pp|B
zho0i8o?z*io|BD|nU_UT|90{5FYrkp4*H)FDxnifp;Q&1$~mCEg*=rqIMX?pA+ezF
z@u3w;q9tmgCyJtGaiPbVp{heHv_q6W5u)!gqA6;lH;SV<s-rxyqQ=>xS}~*UQKLIb
zq(y3^M~b8o(WAxrqgj!l_%WnODy36OrB&LWOG=zgYB5o2rCsW!Ukav#iKWA-r4_@a
zVTz_{s-|lidt)k`Wg0MN%BFKlr*&$lFy^MJ38w%fr+4b7e+sC9Dn@yFntR$Vuz{$F
zs;G;~sEz8Vj|!=gDyfr7sg-J}mx`&Gs;QgGsh#Snp9-p>DypMOs-<eGr;4hns;aBX
zs;%m(uL`TNDyy?f|EslXtG9})xvHzX%B#KVtG^1Y!78kmN~or3sOd7S$*Qc&%B;=m
ztj`Lq(JHOeO0Csut=EdJ*{ZGE%B|h%t=|f+;VQ1<O0JVytfhIZ=+dWx%C7C|uJ76|
z=SrICdM@h<ulI_t`Kqs7BCn%KujXQ}`zo*lORxpIA^j?v|5`2qYp@OLun!Bd^MSC7
zsj%e2un~)~8LP1y>l_n%m=&8W7t66DOR^<vvZvv(h6%FBBC;pzvM&p>F*_J3TbL`G
zD=jOtIjgff%d=lWvxI50wSu!fOSDC6v`1SMKZ}+@ODjW*v`-7QQ7g42p|nfMw6o&0
zQ>(RG%e7tG{|{A*lvgV&S?jfBYqn<_vtWCaVjC-Di?(kIw{h#RYHO5i3oC9bw|T3#
zdn>4PTa<SDD0s`agG;!D`=x#>j)3bZf@`>q>$s1Lqlo*Bin}O`3%QqzxtYtKlIx9>
z`zMyGxuGk%qg$Gs+l`*PC!kBZtIN8r>y4(%ji{?9s_VM7YrD7Grisa%|0%n9Lc6#N
zyumBHnFhO<*t>Z0yThxz%gel3RlIR{ymykk%}c%2YrSLiylxo1b~3%!>%HF#zBQA*
zZMeN%(!Jq}zUiyJ$uhodSiW3xzUwQ$^Gm;X(!OiBrv}7?s}jG%(ZBTzzyU14D006Q
zxTnox|D7g5a69QfF~gw$JHQbv!4u3N1ss7tN+v47koH)DDHv)#1fd~_fZ_qc6l}sL
zjKcL{!4TM@)TW&UXOJS{jH>t%cW0O2QNk&#!#m8w-Lb+Cn4y=lkwa{gACZ|sSuDZ#
zz&*^wP3*)y^1}|8p;AJ`M2vst=XzGzVSy;3IsC+548~!s8c~dW8LE+0ypiaY5A0Y#
zz=J!=<UrGtGO&4<Z<QIv6T+Y2#bV6IeeB1YLB_S$qC$+uMXV#0wr*PlD$%#V0*PS@
zDPGY;ULdSdR}`9hyvKj6$(zi{ei6vBH^^x`jfTt-TAY;<^k4SXdE4TCqQrw8bxk)+
z{~DRx$+c|Dx11KA9DC|nYAxweXM96>41zqhL8jMUEJcLg=V~b?eeOcbxD3tFEX`7(
z%dn@OMC?3-+*uu=#KCrz1SC4b#mvj6YR8pc;ULSS@yyfA&h6~ZLQ&1Hcg;gQdPLk2
z>=T&9l^IV)bmI(FgSeaPJQV`{&IN7I2kjE^oOkn_#so9Oa8_yj%*EN#&+`X}7es$k
zB$c~C&<O3(9}UtOq0m^z(4Cdd_RJArNX&>w(c)~;6~~=%=EzId(IIWqHyzR=O?B!i
z)46n=<d)9(WD!@mY%EpL2)Kk)*pX3X8#Rs7PYu=XtkY8$$|gO^F-)DCGd2+x|BpU6
zdBP@0CkQ$1I2}$M)n|>?ojlc2SJj1#)yWrf&!?3db&TpIfTRe2sy57Joz{Kr*MF@O
zYaMlFtdnl7f*jE-nIVZ2`9VF$UR%ADHF1JU$i;jO*q4pjnLQGM{c#!U%WfUloO3`W
zqm9EA$K2pVOyq?chK;p}QyI<F2fEa!Vb+>$+qX@>ob7KxY}i)Km{g3NO7+4Ve4VRQ
zF#7A$of(n|tShyR+s_T%*Q?w6*4E}`)o-0g@|llLb;I=8Hk>q<L0uZo9o^+^-oiWG
z`u3w-r@=P4GBL^$L8>3*ecttL->aM6`F6mh%oFmRAM}0S0WRQ=o8S1B|G%7-$MKDL
z1_Iy%?%)rew*?Mt?^_c74W$hZ;Tf*sTr1(6M&a50AQ-;kBTnK++u@n^;YK3jCC=h4
zp0>KXyZxEsMY7^9ZsRw;u_umcGfpHmj^jTL<OQqam&W79;^RS%<Vo(XLvCqBE+j{;
z<WVl=cFN>k=Hx*F<x{TZTMnjGZev#tBw5boV@~Es>g6*A=076lWzObpZlh-|V`=Uq
zYwqTCZs!sT=P@SdJwoSq?&p6#o_P*qd(I<$4(NxD=%*>@_eJPAV(5tu>5(p`Fy1k|
z+vp_n=#sAKo8FC!{#=)i>6y;yqfY7%=;_P_>LViRrOxWDj&-NL|6HjqBCGD|wQlS9
z2J6Zt>mfqxx9;n|E@Qc#T)Pe;y$<Zhj_l4$>6I?y#O@)+p6t;s?c*fugXQec4(-#f
z?c1I`)t*(?-XYn}?c+}FOXKZU1@0Uo?&Z$z?QSvWURCM7A?xn$^=|Lv0`F8M?;1ky
z_wMii{wVoARr`J+{SNR4kMR7u>~QIy1WzFbpYRbc@jxQ*59RO>0`U{C@f#l^6|YVg
zAL1F$@gq<2590CW1o93d@+HsmEpH$vUrs6CAS>_kHE;7Oyzn&7G(S2h?er<LkTp85
z&O(3lMQ`-s0rTWU*uBlbflKs95A{)h9Z5e<>IuwDf7m+m|MYjU^-}NkUtb(lFHY(S
z+*qI79f81S{~=uu_HFO>yCL?IRMKYOGKDzWzo(Z4&-QQ6_kEADIluQ9Gxu~~*@@<o
z*TnCE@Ar$(_?!{<YDD&gf0Boce}LCe-K-#r-}sx)`ELmLnjfcw&-B2AYJhl?3<CO{
zullR+$)7)=L0tBQjFKL~4Mvlf21hk&wKhGU`-|QCuQ<mWsvD`#`o(Yjbn*CRq@L37
z`@d38%&#(E*2q0WZK!P8j7)B&J&_^=K+fhx+TYyAFaG1-@vbkS*ZhZX*(@Fr(9b4Z
zFF3=lNcyCAPb|ipbG?F`Nz>%d{{YcX;6Q=}4IV_8|4`vVh7BD)gcwocM2ZzHUc{JD
z<3^4hJ$?ikQshXIB~6}0nNsD-j~86NoG`)OOqw-mvc#EF=T4qIeLl1qbml}vMT@4I
zHB4K&p)<7&ODf4IqKdPOCLL<fYC%M)4t5=ARZ>=gsi+pzhDaO1Mq|+)9hi1)L9;*Y
ziX?ki?_R!r{r&|USny!Ng$*A@oLKQ<#*H06h8$V)WXhE-U&fqS^Jb1PVG0e(S@dYq
zAwk=m*lFr&)~!2Pv?une*0W{R9;|B{m)2old)uB%7py?32h-gy%`$It=FOcyhaO$}
zbn4ZuU&o$Z`*!Z#y?+NE-nr+Or<aRIpWdYT|ML##No^f}b^C}jR~cm*wst?&2!|oJ
zD!+yHvC0?y&O2_Ffrc}PLG^&5??DMCq_9E@FT^lI4L9VlLk~X$F+>qZEQ!3B*o%-v
z6|F<jqG42%kF`#s`G}XIvf66F*A9})w)SFU1xC1RL&%=tj_U*|C6#p0!xUG9GD<0@
zq_RpYuf#G-Ew|*dOE14OQKlBZBoneRCHk$bsDzXx$)tkorx}k5JWxl35+w4gqmWvP
z!Tu0Bva2NrP4mMi%S1F$MHgkXQAZzzG*U??rL@v8&#W|4<uHAys6rb8a=(Y5N(j$9
zPkjp<RCR=txHNP7O2Igrgz`{LZ^boN|6O<GwO3z%1vXe=MZA>LVUJzNScg{QbE&47
zg37F^CW7@VuTZU)pd4p4sK>W<TQx2QX^l%nTaiUKU3J%Gw_SJNg*RS#r7YIGdDB(4
zAvR--Z^wxK`&8Ul_XGGVx40E<xq|I9NHtmc6BRgf&%L)|i!a7FV~scFxMPpyt=Ha<
zbIq5bci`i<wS()EN<g*<7WGeUkwcguZ^d=ctXBVH(A1Ylq<CbZhbFpcqmM>9X{DD=
zEM(A_hP32{UQBta87)eytNhZT8qS3ULQ*OFa*kM^mYph4>z8MNR%f!Wp6Tp~p{BcT
zyYI$3Z@u^C8(F8H?z>B=6<WsT|6bO-N=dIPN@riSxf;^8sdkQ-IIE$(apuYUX)<f0
zt_C{jz(*&&bkk2qJ$2PrAMEeYSf6t6ggm7<)QjvByHuCsYSlew(K4=^rf5cM_qkz5
zK6&MrXTEvopQqdP*P(Y(c0Cgp``M?WnpU!#XfvKl(WxiDeDlvoKYjJrpHO<#*ssv~
zgB-8=^T~V`c+2tO=f8jd{|8_I1vo&ExNm<1gpT~Wg|hl}Z!!gXmfW&*Km=CMf)~VK
z1~s@rs2Pxg9Mp^g55f%k$p>_m;o0T5^g$4|(1kCAVGLzB!!3D`g*0@G2#d76RItfS
zSlJBMawoVO;?RgkL}C(^|F}dZO2&pw6par3S41dQ(TZ2ZVivWy#e+PNi<6OJ|ETyy
zGM3SdXGCKfo##b0DkhBl8)F;gI7d3x(T;b77aQ>ym^Z>Nj(Y@TAO$%{LKYHAdNib6
z`pCXNCeo3Qgk&ToImyf*l9HPe83!AANltdslb-}-C_7?FQI2Gh>)T{0Rk=!5w$hb>
zB;_kNa!U23QkJ*GWiEBOOBcqHmlL67`fT}2Viwbw$3*7pe3{H-1@nBvWM(v_IZbL-
zvtrA%X1OxCL1<>vo8JUyIK`PLY<km~&+O(n)wxb~w$q&yDrYv&X})y6)1LRlXFm10
znRr@rp5?3OJ_R~Z|AH3Opg!qmHUCMzfF9JL4~1w%CF+obQgflyYv@EZx>1gH^qm!*
z=0%~GQID3?q$fq`FF`6zkv@;4DTQfFWjfPHt~8o0b>2&9x>KI^)Td>%DKl}}Je~g3
zs7FO=QePO<WDb>iMOA84r8-rrrjMz}bn5b;T2-!g)vI3}-Bpj7Rpo6JtY<}QTGi??
zu^N-C$usL(<vLfo)>T+-E#_O17gxLX)vtdAEICay550=Au&m>2U=_Pq#x@p2cqQgx
zSC?4FR@SnY#q4$<`%B5Hj<T5rZD>V1+RJQ~mz_=BXGyzS*0$EQeKGAWQHwg&zSg$4
z#cgg2IM~^8|FXBHtF3N@J6z%x*C4Ug<!?(DT;n#^xz8Ofa&!5{6sAlP4?`?-p}Sq~
zcDJw6#pN3t=s=4w=@UPc21$^DEA4vMz3+u@Rl$2p@t%b>!&3{4J}8wW^%rG@3kkU-
z)!z6P*uV#t>3n5bU(1m<bNaPNaTZ9tjtDqX1V(U%HN4@6D)^NQ=G=T1R2v9WM8XCO
zFm@}2VGg(0#V=;3hg}Kc`;K^R`Y`dzAeUnHvKYoc26B**DdSesSj3hSj*1_0;)dy1
zO>X*8wARZNB@c0kHuKt0X7R&X`B=zb26LEKNn}<U*})MjN{)-vB%YZ!U~TSU<`$%4
z)dc6d|MT<Lah|d#{(AW_ein0}1wCj-l6jS8mQRB!*AOPZOnCYG+03p5wlvS#(QKJC
zrUgbko~a1Xga&n}Mcqb2s}jW3Wlg~39FdkmMaruV*UgNSX^FXtRaC|^&fZL6Lw$PG
zzXo=&n^@{nf><K3Ua|>41w>rey4jqQRV8?R=Z59E($yxBuZ6vBZg;zd#5Qagk-e-%
zGo;b>ao9otK&NoU%1Gp*ws0Vg?a+DK-uK4$Bf%X?V@G7%jCQhqS|yKY{g+`2=?Z@X
z9&b%kI$-VYkhb$Zaf(-bjlA9FI{OWgf15kt2e$`|pgik?D+E9Ivo*bE_3&9q{4g%J
z|9H%0KJ&os8<eN6-)}m;kVfy=as&61zf69x06n|mD@RDSdQEetH{IzmwD~6yoiZd(
zq~{HnwZjJ@GrByCYydd=(NVtjk8=p-Pe*&&)o!t<d(z0}wr{z4UUpOAg4bXB+Pocv
zKdw{S+Pofn_0~Rk!WX`LZSUmUc^-E)8%J(gKaPWXUS~_s%o}xj+24i!^K75p@Sg{L
z=qH7E--?^@i?6ywq;iX-v_8(nJKNa)bHc1;FWr?F`;DBU@J)|p_q<-Z=!HLg;ztkT
z86T(OO@4aSt1L;&@ge45e`MUxJM#8>zSgCMpA~t&_}>SA_(??iODcbM%qPkB|Fqey
z-c96p3k(jlqU3$?*Wdp4Z{P6&*G}^T3jLhXvn!!L{3E~uG{Ea1KT4{v@v5=W2tX?t
zzyp-P38X;INWe*=E(T<l(s;lsiNFd3!4MR|#kfF8Qm!BZzAhWV6=cB{^pFyaq!ZkX
z_M5*Cbio_M!5lOR7=$Dl3>+KO!5|dEA+!h{d?X+28z3aYC1k=TEC?fXBqZb;C3M0n
zw89*O!bFn7y`jP@^ujL$!7MbSE!3MX1j92#!}}A%LL$SwF~c;3!#EVaH6)}q#G5yi
z!#vbOwWGs9vctQ<!#xzlL5#UR6r?}2n?NMQMP$ToGsHkb#JW+$Mx?|_{{*#11f)o$
zn@P09PV~ee!^Az(M5y7!Pc+3-%&<_zqfum<Qbfg9gvIVs#XDlfrE$er#Kl}3u35CB
zT2z`_)Wu*FM%LoRI`YM&0mfle#$~juVx*&EM4Dt|#%ZKRzjDSog2tnf#%kooZbYkV
zl%s4knr-yPax_P&0>?HI$D$#}b9Bdd<f(L2qje;jc7(@!#7C2o$26kHp|Qt&1jvAd
zsC`7EeiWL26v%{BNPQy6Gcw4LLCA%a$ca>^hBTvx{FsQO$c^MkYO=^O!bp$N$c`k*
zk|d^&B%_e*n2|KemUKy1Ldh>uNseL3m$b>7^rV>NqM6*7n#9SU{{+fH)4%=GIG)TH
zpA5>RR7yP3$t^O<qeRN3l**|*qo&lNr^J}3q{^-2N-VO<EW*l*(aNqQ%d$kGuf!r&
zG%rvX1;t4}Pza7GD+z5Fg?Gr1u{6uP)XQEP%IRSzR#Z6uLYeTHrJxIm-T4o~d=R|c
z%f@uf3PQ^(0?dGmjh({?l2a2N;~mBX70!Ij&jd~OiA*b6r0j#3`l*Pkb2g8_Op<65
z5b?~=l+D?sp3$tLK9ZJe@f@maJjbK83S&8sc+KFW&Eho9T(V6l%D~x}m8wb2vV*p6
z*)qA@Ox<7`->6P3>mlmY&XMDtR?{+t+0KCB8nkf}>WIzb|5VTQB%S1JqA=P`IorM%
zdCpSVyGsz15_32>>$7KLxaJg0yOcCH(~r-|4^Cr*{Dd{RFbe{Wj`U>D2$fK~aZe_a
zqU)nR|Fg`YO9;xlwGUl61l2La)Q?Qd8k=d7z8g+dNeiJ1Ihv_Gvam4HfY1rG(Hk|I
z3SA-{dQp{$5b|O*CySe}Q@P07wfG}ZfuNP5i#6C2y2LEGgFDfLdC(fg(JRGLjnPph
z(xDQHoa>Rh#gmU#Ar~lZPJ~#|){HkMeKuyBx9G&YtgAISy&31Q(k#W(JdKwvO(Gqd
zPZ?Rh4eikD@&zdqizfxX2Mj!jnYVcByNAdJb|Vf%|JAZY4HV<)Ks&utJ>}F+Jr+Ji
zqCNuB^Al7w{WwXTy+JWAtvd)dP0}=7h<GSC=A2X%6;P$CygFso=h#$F_0?b96;M4Q
zQ8fy3D^(OT)e==zw?w*DrI}a#O${A6B4t%vt<{!;zbXaRZROS(5>_K3)}8y)4TK2Q
zWK@XzmZaMcXk|2Bqt=?)mUP9|RMFOMwby&qpl`*YaFshRol#_U*5RQ+83l!8-Bm|D
zRaueKlj()9V+H`R)Va{rdF9n!#n+3)*euak8sb+mm64z^SDlH{T8lhP?U^LayK22V
z$)nVfJy(i-)8??)jHTI{J*2+$OLgj4g}~6w{|V9^g3-=7+0NlQHO;iiLk?Y)hedeT
zn_<&ko!Cs3*_pN3s<m1U+1MH4SNYJ*2K-rdg%gL#k4_U9%9B+IQqnYGxELMMLWw=D
z$xi|4k4hyAOHdnc5DR_~7n7wy8l~E+1>C@ukgS!Vt(A{kken|qSGsEw*-+d7{8Qse
zQm~0WMKjRT#IM^h(*mW{U5#1h_*=mh-O=?9!i^!r9aG7PR#SRETg^_!>D#iv)Z#Ij
z*xioMCEeWBUFtAh7((4dLsyoN+F-%m-8J6hEsfrNp|D(t;RTlBMc(L@UdvEk7h+zX
zO+jCQ-s$Du?q!VXZK3P6Puty<?e*UC|3zQH0ACOiU)@0$^G)CQm0!D9UrlP?c!A&f
z)!+SHiTdTH`-PYM<=+7&;E?cN4Fcc*7T^MA;07*2oPD3aOkj6eU<bC~3vP%5&Y%gV
z;0ngz4+dd@&|nPW;CAug5Jq7O9^nfrVRkv;6oz2}USSJr;dOc87{=lGo#6_qVRgCT
z90ua^-C+dkVSM@FAV%Wo9by71;`cq`B!*($UE%?1Vq|&ZD8^#Zonis1;$ykuECyq%
z-Qoc1;$ivXFh=8y9b*70V_`YtG=^h)UE}|0W8!_|IL2dNo#QF0<6pVsJO*Sv-D5H8
zW9|LpKt^O79b`Bv<X$=CM22Ju|6OE1YGht{<VeQk<D6ths^s#$<V*(T(A;EH>SSH{
z<WNRs#~kHaDrJ&6<y3~{vRq|hYULh_<y*#OjhJQhsbyQv<zEJ7h}dOxLOv3H<zPnU
zmmFq#>Sawi=46KEl3ZqhYUWIN=4i%dikxPKs^%5D=4=LMf!t<{>Sjv$=5R)5d>rSI
zD(6W#=X8eWb6jVaYUcra=Xl2FYMkes!YRZF&e6H&d=}_s+-IT^sh;INirCJ!3<dAp
z2_WeR?!1tI9_WhJ#e#mSi$Z9hZ9c&?IGtG3`rHtTw&;?6MU2*}i!!(&y|%A?i!d#T
z*dX7Ca8nE+X_LljPekdm|5~UN!m*e6SA*@ApvK>u&gr9O#GQt#g_4%u$(m6hip`6(
zo-}Htw(31p>b+Vh_*jm2gU;EJ>L>-0^Q2vf2AjEf5z`#&>(my+T<GvAIJSOW%5{_8
z$sQ>SpFLCSlt7W3&4{YL>cEb}tcIP7D%R_XYOqF81-*p2osooY6C-Wv7k#}#nZE0S
z5fux}Fa6Kl%uOn5(aIJMK~dcG=<5j92*4KX)doYt&aPs{h{Lwr#P&^baZx7oF9B^Z
zBqi(AYfX{GJc#j{XFXaG1?u7EZ4_0q^gHcMQf=0T?kaTc$yzAch8&m%SV_YXAq_fF
zP_$1`jm`U-$-UN>|HZvDU0FM$u-~RIYc-|Q28rj6?)fId>GmusLN$K*6zfhlkN(n$
zeOV8k>fmNo_GZ74eLsX1>Z@DPr;U?;#*3DcZ~CTiEQH_*XGba0K;c;3#q+ObkvC^0
zyX<b#G@%&?0@@CT(-jYK79VlHQ%seRa15{T8XrOXPAv^*z>Og423=MUeN-2R*|go&
zNZph0@oeK+Q2}Gp|3sA(VuhJzZog(t8n^K)r$8L1Egc^(9uMn=$<Jl2R1zO@qeY7?
z>s+uwb5CiwMKx0==MSl-n$nhWD(?s@$MQTkKrKHV)9Z4L=yB{e&9EzRm-RbUD3#k=
zaV96RXdU!3|8HqbN+&$m^GdfrJ_jx?Zy+yk2nR2hc7xS2ztm3;aefFNnNjduD{rw=
znCv}?fTDCum-X+%^ySiY)CBY|msg*Qb28uD0w0$uLk?Pb^GU;1pMi7J4E2x(qgbEy
zXAiwvCmlcE^jvoc0e7}XU-d#K^3=mTq{Y3~1kq&o7vTO}%W!sRSNFn`c7VQh=d|{Q
zFjA&~+oKI@OOW&R9(5Q;o0IiD*{i<UbC#?LTSx!9yC!NgN%wUCb3ly0XLz)0_aA(B
z-pq)EPh7>-b|L@uZWnii{uGWU^u|#kLSOYBP4moH_=ZP$rhE7#jCg(l>DHBTm}kEj
zKk&<xKfg`+od4J33qN_NgzbgM?-+q_Ti5xb7i6CAd9keL3rl*VclvEx`6*obsA>AA
zxB5|wdM=#$N2&U&_j*Fh`ZC;lN9p>nH~TOPdp8{WMk)KVcY7d9`#W5FMrr%ExBC{0
zdqAA~MXCF{_j?4(`$XJ(Md|y$H+=XCd`TSqL@E5kcYN+j{7qbZL}~oTxBTXcd{UhJ
zGO7H__k7{X{8rq2GU@!!H+|a*eOny;FDd=gcm35${a;*tFKPYPw|&rxePo<{BD($F
zU&!2##@%0`+V}n9S1jPyM&Z{V;y3>0|1P9|C*@y$=cj&ohJJUFel21C>gWEnLjG~g
zek|Gk?*Au$uloKB|9KuB|MF*lbi9843x5Gz|MsW<qdNb3jDHB6|N7^DfaoW1Ai;tL
z4<byca3RBn4j)2{C~+diiWV<o%&2iA$BY*~f~+vX9?6m>OLk1DawW@_E?>foDYN3q
znj~l9%&BuH&z2~A0u3s3DAA%uk0MQ~bScxOPM<=JDs?K=s#dRJ&8l@P*REc_f(<Kn
zELo@_L)xrab}iesM$`UuD|fENxODI0&8v4W-@bnT0uC&AFyX?64<k;jcroL~MbCnS
zYu7R5$~z@bwyYUw=FOfzgAOfvH0jc&Poqw)dNu3Tu3s;OEE4lg*tQ+hzODOU=iR=4
z1OE>$d^qvq#*ZUUu6#N3zp_W>ZZ4f`^y#E~ThFe2JNNG1zk?4iemwc|!k<?+uYP9w
z^@p*$k1u~d{rdLr<Ik^uKYzgJ+xHisK>!LU7kmXGn4p3SGT5Ml4?-BBgns=e*@XHL
zcp-JQY1pBMAA%U7h$E6%qKVB_XyJ+EWw@eK2f7%ej5E?$qm4J>n4^vdrI^-^*|qp1
zXB-Myq>)D=nWU0SGTCHhJ^JY6a6wAx6OmP7nWdIna@nPqUvdehT42IPC7E?yd8V3c
zve~AaZ^9X;abk`s=V)fysSu2L^4X`Ke*zk)po8{A=bnTXhG$U2fFg;b!^C(fqW_ap
zTB)U%Vw$OvhDxewUW)Q$PbY|wT52b0Qj|(6dWr(+dYyV2tE{uqTC1(McE>5KxQ+$t
zPNS9@?5P?#swX0=zKSZZ%QD-nv(G{s?O?hpD{Zg7;xtUK+a61-B*r4E-mcb?Tduk1
zqMNR|6;ZqHwJIi+3b(>~3$A<Px|^@Q`|{hbzkIg)uU6RN<mkMm)|-$$-6kur!w*9o
zvBVSq7%;_A5j>N@2Y;JUu?jOhkT$Azl8QD6rNd~+Cl{m*%Z$z=@+>8roEp9t<D9e3
zJM-N0au)lHRK_wjdT_`WeT>k;;r1i%u}%+5khYSLe00;Nmg<f`Q<rRTwf~#l9JJVD
zlU=siXFDg`&}gT$HcV3=>?%e{^A@r;N8de*)Oa7=b<G3u-EnDQvt791ha;Z2;yMAn
zcua1?1T42v&n<Y};mS*-ydqnDbvgr$%5*=`Ai^@|pAY`E<EyjYy6dmM-Z<=SL++BO
zldJv^-2;X^OX)4k?R%P3gZ}&8a)X{bWrWY(yz|dPAHB4)OOGbJZ_RwF%2Y!dy7CI`
z-m=}tqJB`x2%Rs`sJu%eO>4|oAHV$b(_ep^)Z6b+?JC_~>MY%q1a74I9zw!b5WbOW
z6{Z6m_ekbI!L5&X2}GW0;FrG(Vlaam+@Oi@$H4*ZuOpH(8oewMLI0Fl%^r;MA3-MQ
zKnH@3a^l+<0UKk%4@Qe00N9#7qLhz)^pG|}1fs}-I7E06@rcziq7r?WL?truBt>ju
z6rcFRDpJvkS_EPix0uB-T@j04oZ=V3D8?~{v5aOsBO2M*Mm2g7j&X!zT-^9ZIo6Sm
zbL8S3@wi7n+VO~F1mqtHdB;Ewagc#Lqayie$VV>HiIKEpBO&QXOJb6cI5dw3H(ALW
zZX_NgJXp*sk~xr3kRT}|RSX-FK0W!)c-N_+C#|)^G^(+Qy4)o%d+Ezx0yCJx940Y~
zY0P6HGnvX<CNrDq%x6L~n$nymHLGdOYhp8-+T3O`Yw4X%djB$n91-9sSy&O_B?O%U
zDc|wbXStTO5}v%%Tk5>IuUm36pZeS<Kl|y=e*!e10v#wp3u@4VA~c~2U1%_`Xiw>Y
zbCcrSh||hhLW-oLbH%%5Kf;$$SE*B#A$w&!4=BUXfbyZ2iX=l@>e83OG^R40DNSo?
z)0^Tnr#daDN|h5)98Q#27UkAOPH7O|A<w9%W1!|_Nz!$uP@|toX-^4-%bj91t6JSE
zSG(%fuYxtKVjZhK9a>f5{PcrC_1I7^N|D?BEoI&_DWrPXi@-G_9wZ4JL7wW)|CPjm
zprPtn|3ucqA~vy#T`Xf8>)6LaHnP_%>~7M^!L?$ft^eD~NG!LNN_Pf}o~j&S`wHUM
zt$CJ~iy<s!<)lNF(k319c!z9fTie^>wjH^3$8Kr6+u!OIxWXN7aEa?%+Zs2y%2h6M
zo6B6@7MHowb?$VjJKgJA7rWMtu6Db--Q#lCyW$-$dCMDK^P=~>=lyPa+1uXt!Z*J1
zT`zRqyWaWEx4!w^?|u8rU;F-7zy1v{fwh~+)>c++n04NQEwZt;zSAPI9mWEcc3VAF
z*dcahX9ZP@;6eFvxgs7hiA!wa6QelADqb;*TkPT&!#Kt=o-vJUY~vf_ILA8PF^_xf
z;~xV#$U+`6k#9W454Xm$8*H#CHJiW@u@=c{V*hE8t8C>fV>!!O-ZGcF?By?mIm}`n
zGnvb5<}<UH$x;@Kk~OI2iDcBt9QII@*Zd`2qB+lc-ZP*3?B_oNI?#e1G@%P^Xf#vT
zhjunin=|-kIFr_BC;d>J7rmuG!q{b+-ZZB>?dea0Ivk-MHK|K&>Qe&{)v8vts8{W3
zZ@fCzvWB&+Yh7z@*gDs`-Zigzo$6ly+Sj-S_OOLb>|z@`*~(sau$k@bXSbTx(4IE6
zt8MLTUt8MEKJjENEt*DS@X=kWw708tRhuYx+t^+=yW8#Vcf&j0@}4)n>uv9Q<2&E_
z-Z#Jd?eBjZ+rVHfH)z0pL2+}5+yq}zZ2yM~@P|V@;u4=Y#Vc;{i(@?F8s9j_JAU!$
zN^#+yF?jwEz9of={74N4uE$$G?PU-f=D?PDG-7UZm%sexHOIL$o=tO|^StLmpE=Nj
zUi70Ieds$+y3&yz>z~)!xQb4>V@Pg4lWPg(RR0mCb9-tEgFWnGA3NF0ZuYaIJ?&~=
zJKNjt_P4`5?sA_y-Ro}myW>6Ydfz+W`|kI@13vJAA3Wg;Z}`I_KJkiQJmVYh__DiN
z>So>gVys?2tY=B<l+V#6(T!VB*ZlFKA3f<yZ~D`tKJ}_!J?mTV`q#rg_OhQn?MYv1
z$#Zn`im^QXFpnk8>z+nkpD?IvkN=Bd_`>+gUq17B(R}AWANkUsKJ}xYeCuPs`r6Mv
z_q(tC<6j^8+uwfpy>EWIpBlKp5B^nnKR@4BY5nY9(Q74xd&%NI|N7rQ|NHO%{{!Gx
z-JgfepIf+}{J@`-$X@}LNE{7d0775{O5g-iU<F#>1y<kyG9Y0bVEiPYlPur{hRDj%
z8U~u+38G*Ms^AK;U<(Qq?unp(C|I{W)CV?62*#j?blyo2mkavf4+3Ej3gHkEApmM%
z4)#R{R*wxb2@WFRgpi;(6yX$7VHH~86=Go)8k7{OpA$aeW6U58dJ_{e907h|j);-h
z^_CX0VH>*P8^U26wjuF#q5l`2VWEWK)TtC1Dv2H5;ete=917wf5@I15;vx2*r>Wl`
z-h~oM4<9CpA2MQrq~Ygj8X{t1CTij)a$+YUlp?O-B+i8+Mh_$+i6n|*f7l-#UZN+u
z;w!>pEXv|6>eA9_+inF>DzXJBLXRn`oEhq(iPWFxX<J><;xQs)GAiRTx*^zs;=l!?
zSn%TW_@a@ZVl>{zDzc(6GGjM-<2Qn1I0m3Ic3LQ6qcrBB9@<ki7Rfc9BYjljHgcml
z(qlc^<2~YIPLX3dLgPDj#WXS)JN}3}`eS^o;-)!cJ}TrwGGs$KBscA2E8=27eg!}_
zk3bG2FjAz393(=5-Ty;^WJrqSNRp%yMP#&@<3?(QMa~XJ?g&AuB#U&U(0yb{+T=~*
zWKPy&`8{LE#Uxg+B<#4Pj=<zkhQ~~folYv{QZi*zZsPx(WJ(&PRRrbh3}ucK<y3md
zxyd8-IptS^Wmt;k6wbmeM5R<}rBqa<>s%#{WMx`vN9S3h%XsBj+T~s1WnM;LS)S!Y
z!sS$~W$U!%jlAVwPDd5ZrS|FNVlrl9I_6mMWnbo2?iprN1SabYri~P4Wikgbf`dm&
zA7DM^Xp&}Wnr2HyreyXbXClRAu1;pw$Y!!;a(E_aM&@baW^U@{Zk|Lk#DXRyf*-uW
z7!W6M`avRSLjNozgMj%`YO1Dea;9rK4s6m0bk1gRRHAL(CU0_QcY5bo@|JIw0&oWB
zahfM`CZ}?KW-zgWbM~Zl8m4qE4t355d|sz;aAjBWWzBqNfBNTtjwEmWCM2NeDJZ8c
zAn1TnLV;ETbLx_+xTi#_<9!N+d@2ro%7}eZ=x@}fcJe1##X~lfLu5IqWQiz%qG*ct
z-)Gtad8X%b>X&%BD1xqMFG1*SzNbcR=t@{<;$Uc`=;)5x2V&~yeiBnT2!bFSgD*XT
zA}En5C}}VqgCJl*5;TDlD1jI}!ioOVlybsJL_(5^>6miDlJ-(I90D9v>6MBBAaH48
zO+z1u0sj<OsTS11E~sdp>gi&+!!(TNi#BM9R)e4ZX(>!Yi4M_?dZmP}rjYVPk0Q>G
zx`>84s%>;AU52Kr5Yr=A=^gmeoGKBOnkkdAX&nGU9jxgTzyd&-f)dohNti*MUa73s
zsVVGIBt$`-o@yK9DijEUV^L|RCh45Is$T8su_7y1g=mXHf}x(n5edU75U4E#DlaMO
zb5iP5Lh9jMr3yKXrcP>*R;qklYNnRuhXRups4EmaD=&fS5s7Mup(+-vDwxu#lll`X
zB*CkiM69BMhyv^}$igGA0hacG61hXHs%pEI#3ocJAY>IMY=JBc5vS5?Z_eqjChNv>
z?Eg)j!+@Rwj6SKfCMUx_=(X-6T8`_ZremXyp-YmJIhjbduIy@Lr-!1eFUf)uG-(oS
zLNC4R5XEaR@v0cSsYx7zx*mc*wJN`sM68Z#O~68~YOD|)f|VYsO(eq<_$*dULf5Wh
z(ni72l0-ICDV}z0+Nv!>^(k;VYlxa`ZANReitNd@XKFI4%hqg6Y^&k8<hP32UOm~&
zitFB%$1w6B&gN_{-9ZyHC={3h&_+S1I&LrRtkFuwIpk`!>QmFgY7#_k;^r#aVusj~
ztx4!B7I-b#V#e3vt4%oU>#ptW(r!Tc=Cro!F6eIDBCRZ-?Z@J-wW6#os;uG8ME~Cw
z4n|JRoW<E^U4%G%g6JI23yG#_iPk}6PovOGDEQ6wf{bR+tnr%0&0^~Htpd0LljgPo
zNvLV)9#PN=(a`SFoT374aO%PGljrs;=wb%0I;~{zs_dr4+3wWW)-P=U0_%z{9Mo<D
zJMca!Xx4r#D(tRJ2rLEXuG_|f@ZK%9hObH@FWU&@!pPDL6>dij5JH5)vG~o#P>@vp
zRo5g?3pa$eoUno1u=svQeikYE{*nQcg#LQol%i@IJOahq1N;WiCdjE79D=RdgZws8
ztBOHvB`p6o>?4$Iu)={NAaPpk0>NT|5r45scySOXuoKtoNeD6fVliCA1OL~aF4AHx
zZE(UJ95B*`snULFO-zCo+XF15sh$3;ACm$a^D!JV@fK{s9Yg}6hOwHqDHLb1BrAd<
z%rQxDY9XhE@7e^E2Jn_9?iu^3BS*0SgXtrKDIjF5Dzh;r2QtC-@dMLxe`>-lhim}J
zf+u)F-EMK2N^muhtR`@9gy!uBZ)6CgjX-LP_Z9?Fam3O{)h8fA-IOp4AB13GSP9!u
z4(o7tl&iV=@TX4h(@uf0!Y-Xgfh6;65|=X_mujxAuM}4U9566#P$?&4Mn3Ov6l19w
zsOgnft-W^Yx&pFE?5o*A?z|=eDz~vayKhaPDkZ0d#Qtv+No+y)YX9hhY9Ay)7}P=0
z-ZMhifkFec!lJSYt!o<u^u)sMKQr_eaA_LLD(Tw9<u=hdFmy{(bRakMF7&FW^7AJ*
zG}1EiI`e8Bn=$C(s+H<<EkpHgGN>N&a^1>k=rU^}6mx_Y?>E1MGM|k=D%It1gz$`Y
zNzG6TO<F=|vqIRgWgxRxPgOYY=Q#5cP(y4<47DFCwI=T?BeU_n)>rCIG&~CtuSWDs
zFReLma(w}H6Rhv&w!xc9@=0Xr7;~<g9&`}z>*ppm>K3(RBydU#k;U3HDbQ&d&uPKh
z^wmao*?u%;2asm>X0Fb%Pmk?Mc(fS=^StU85XaVPOR)WEZvPVu^kaJh9lLg!>Xq20
zMf(PjZG(1hH>}S>t|<(6RBJbG9%nB1<}Ua0v)-;JqjTE^=T_tBF?+LIBLrBRjX*j|
zwU97J5YOFY7z!tZQem?}v~@ahGh@UxdxI}spR1+<Qv#PUUfYC1XE$!Yvm2j+==QZr
zYe8@)0q>^8)c&tQ+l0C%cxOvAyCO7*Tej+g_C-Uj9g}!k6m~6cuGB*A{$c^yrZ{Y`
zxQ%-@jN>m!0QGB+xIQ~<9uxPP!U1!`u_7q2Im5F|=Xh;Lt~uK@j~n+=Pr*fR_m!LG
z8zh2yj&fCBaCj$fES&c)4ewd{q=2`CdzXzsI>LX8l>Z}agnhfyK{Segm(PBi6mO^u
zxb6*+qzs42)yf>z%RuOyjgA8uI>xLwnl}f57x?1lbgtG!7$^bR?)B$B_$f@eO(6Lj
zBdnD|E2x|Elf$@=&nf3dx2M{8L_>FVqj=?FMvr3#udXrWJ~fmx_DkP3ma_UAYx+Q&
zMB_>@ViWa9+XHZ0vBm1@A&YJm>w0u6fsk{yD_1us>npJ9b){Fgh+}!Tn<g3f0kxu=
zjQ%ls-?VU|w+Bxiqo;(LlZ`-*%6)UrT2I90pw^X~5Pw%Q13^Ui+zkr@%L2Xiyw6b8
zhz|Em(4&|X)c}h#D>}RH2l<M#fs^WH`?bYGbpM8nI)tNJaeuaCC^WQQ>5s#Ox<Xgd
zs=7_U@5tMP6hCy0ONOiia1)gA5lOnnr~IiuJC3*f8>4E2PdjY0!4M01kn7UGDr~2k
zEUw<RWjpO-qg#xBZhif{#!rH)dwbTC<`{%~dB5@>{J|tdd2gcoE^RMYcQwRogu9Q8
zKti*BJ3O3?k28<LzVi;{;JI3xuv(kWz>kjAyggJgjn}l3I|;m-KShA6{c1Tn$p90~
zLpu-Nc!~EjT<H8R-MkRVJV|&sT(o$r-nx<teOe&-Y2P^HYrL`dd{4*LHcbAAi@ww<
z@ay|C>6-kwZ~C<#k<s@ODlqg+dphMyx&M{Bu}yEjI}_uk`!ls`ee>rf*NZ#4g)!KR
zJ%%H4x_j{As|4GN%?PKkH3zBR<F{$q{hPB>-lO&S=lQ)0zW7M5-z)t3tAF}Gy!P9N
zqZjxuiEWeeKR`SZh^2`vdk5_uQ&I<ELxfYJG>j6_VZ%B}j#bpC(M*$R8!MVh0!X3~
zkoFW|JoqSy7BMej##DK5<i?b{8j8H*up`cs_Bb^mc`{|BpBi`71Uc~`#gIyjK4hrz
zX49Bg!zhiEgws)kTTyxanM_L)GYH$X#3~bE(xFe^qAXZ)Elj0yO^MaJmv3Lce*p&;
zJeY7{!-o+kR=k*TW5<snN0vO9a{uLuWBk~1r}11eS)3+?mX+*WJdL*ejQJ}nRqI)=
zhsD-5J6-K|8vEtey_<J$-@kze7e1VLapT94Cs)3ld2{E_p+}cKoqBca%P(ZtK4HSq
z>)*kL7eAhSdGqJ3dq+=v7$W!SdZ&~0KDwk%yxWK49STt=|Nq^S1isz+JI=n{v_WJT
z-}1|?!S+(=Z5Bih>g~YXF5K@v3?+$AoAsir5X2ElEYZXhQA|<A6<KW2#pXb=Z8q6p
zYwf<k1Zhdf9d+y@r@J&FsHBqsnW?Xf4DxELsAzIZqa5>+3ywahtkTLpGNNg!imF0L
zC!UN1sYoU_+62h44ua)OF#ns{NKG==TxqT*0lBiyDj$(EO0OoFQ?PQNm}!fV?7XtA
zIGfxo(UR^g6p%div`o@TDXrAfOEJw<(@i<;)YDHvJ?V`^VyVV7hdlFSv|~O~wKP;?
zN#u>c{BsR9*=Uooq8EAX)z@Ev4OZCew%bm<VUbN%*=2h@Hbr|b3DCV+x@k*V`kIq(
zK?DojZIu50b8SH0x-BllekK%=+imk}uR{wrgjct7=Z$y52$_v9-+lS**WZ5u4jAAV
zbEUDy8~<`=qFq>R*kOniO$gCNDb^^hEc;?9u9L(Fv#eJ&x?`p##X1MkF4H`-r=!a9
z2_#us@=D`_rkOY%CI7@|Q=>N}+R`DE0~O0mGJonbte?)=WY3M#iV_YbO!dkwkXRxm
zWuk)?tLjj>?%M0G!46yOvB@smY)Snfl{8pETRYX!K&JT=S!uQP)`E3)NZ`Hs?%VIb
zr7KoDX8|wV@WV+Y{KWY#S<u~U6-=m-a+gab@`C46_Y(?>qkOn?EeEb!2>XkiT>I>{
z@!fvt<<Q#zsohsy#A&bH_S<pKJw$?MjO}2A{UT*zyoTJ!8ncSuh#-vlG8u|&j#4w{
zl3czF>Z?mWIm|Dq|4Ae*ylR<cBeT}1<}EvRldGO>BLDiMVBR>VrH%HgiRVv(@}MG<
zJZkEV&bL4OCI9azTRYnU5tu*)E|7r@bl?NMmIz2_LNoJI)!IyxDp$=95{aM{YgTbL
zyxB%?x-;PkQJBK$2#!07Q{f9?_%|1lXhN&w5aVJuFViUpT9A|0wp`b_co7G5j1V2Z
z+%*eyagIQ!OI>T~<s1L-CLOcr1nihKyBKbfi(T~M7pud&-uX^-fw|a8l5&=&M2$-^
zL&%ua7bd<GWqhXqll)Q!KAO2vBXxj7#I#pE?yd1BgCbg)h6fZr+M{F4YX}_=l0J>V
z3{F0Kq>)5+w2-u66MLM(sjPQNO>#_*U`o=^0N94N{EulKsm7Wzxe-%v@++l;;4N{P
zOI_}gm;b%=Wu-I`%u}#YgBWa!s^BI!N(8fRcEeS!NLWHJPLrC|R2B=nGec``lbh(#
zCWx?AoO!s1Ir-TL=$JSh&j|;eM|98*>D4;l$a9Ln(Z&^Bu`Dfilb`+c=Rf(i4*-sl
zjAi^w&9=ZYKbgsrO>q)gun;kew8W8nab73Iw8$n6@Mr6LqemSwNRu@*QeIM-Ev-^A
zhzJ5C2!+LucA^o8>Fg<$Y@f^0s60%96sDr|N|D$AN>nk0kZr`M#1wIopbX@tL!F-W
zK2p+OPL--vwdz%|npLvJq7)L0YG+Wvu(-A5GdR@*sbcX#XFfA;(gf&R;Tl)vVDp=D
zwg2l~Jp>XJC1{Anx#EYEBhPn^Yjeg~XK>Itu5}GoHwgkF>ugBHD9X!0`k-vG_K8=`
zZkDs1CC)$z`a8ft@+2f{3Z!}_q=_~Zs9~x`o%A9-mRig#U$u%BY%7<DHYAPx^Q18Y
z+0*V-WEw1?Xly5fN7-60sbD%PBc1dkn^GlA7m4X=d5g29Nh}I%RHW7HClra&tRu~p
zlNg})qo*SEClmQtA7Qx=pK6u9^|kMP@ta@$!m5K61gkNLo6OGi7r=U{)mlgBR?jY&
z!C$0nT^k(XFGAQnmV0b*Afy~^0cXQOB+g;o+1SH|j<LESafug;A$(~_H#-!uV*iDe
zSqaaW#x;(iKtVgk*VyPUH+x@<vVpVgwj>g*TAn27@`$iLq9dHh5%Uyc61_~LV_2v|
zkw5b^M19PVrpPkRa;r$8aAFszD3TJk8(foGvLj}g(wnQSma!fs%34q|t0r*~@e;RV
zoczoo2r^rm4t2U*QbP60krpxBc@upWs+g}_<{Y6pq!eY?Pm)4pFH1U5f9&WK6tQV7
zTO+&XZ68!pX%<F1dcOO0^{ZhWYgx~FQ|?HHFfle~;=W24U8Uf74ZK#iwpGS9HukXr
z_TZBso7pg=aC!ck9QpLMI4Ay1J(p-$Y9ltX>7wEe8`MN`pN_CAeqFt0XaDVC6}#E(
zcK5rHB}N?^v@aqhr5z`FKRH8}Dg@aPPM$pEzD!!*`aY!2^sH}^dU8i?K=ep&DqM&1
zD7lIVvskjBWga>FB*y)BD0jwFHD8iPs6~~c6<$&368WcrqIg$AzVUJl)zmS+crBH%
zBa=&&);;(6&w(Cvp@$ULx{i?sO9hw%i!i|ohWFE<z9MDoHR@HD;j_n+x#aXvIUs(q
zht;|55Wg;VRis?FMGQo~GUFWwiS}e!oSSK5PKnB5x7G2UcfE%(#|ERfq*66=uVe!i
zrnvcF;_>G@|Kz=LQ#n$+oL;e&!xWJSHKKtWc}fvJtdEAgZy}HQ82>4Lm|iKX(GgRP
z!asiKt#|$FVIO;5+S(RHFInvg4D4Vdxakeq`|p8oovBkj_{EPg*2P24t}h}vXcygv
z3M)hdMfROP#7{a+oX%-mpFrk@dq3oJtqZUF?#4I&`Sotuz893oL2tb5;U9nb&!7JF
zx4+qFUv%#V827;}FkhCA>7dE!(60auFgJz|Hx6(CQ3Uyt5Bm&@`TB;0o`V8mgf?WS
z{1|WpIdH-9Vg1;zHH7Z{?ym$*@B~pX1yyhb&8PqT55THHgZj%B4sZ9IsrLx519cGU
z5-<mM@CW&h_)z5Sj$_(@@H;f{2$gUNr%B#Ia1?;Y=SYwRssFGFt?&x5Fbk(D|2k-y
zPJydv&=$BVm?VgT_OF?45C@Zx3E7adde8^kFb+RU2v4Mjk^`UQ5IWW{5BabU0p|lj
zP_*1{x3sVj4e<~WF%cE9Qoun5B`9qmu?)Yk1_2O+1aJW1&<{1ypWZMNH&G59@Bvc+
z#yHG!sP7Z!5EWH%6$Qo#Lof<^ZVDH17HP2-ZSfXokqc8}40w?YM#ZcCPw6c25{YdO
zS@9TAs1uD58Fere!z28BC>jHV6qzwTma!VKF&oPR$965Wb_^6?5f{aA9Lcd9&G8(C
zE&zLB*osjb-SLH#@fzRp{G2g7Bu5${Cx_-yvi7kb{r^!sTrmXEaUcn@APw>$5psdl
zksYH+9{=$nmn9w@5+d=g9w~A~Ch{UR@*e|I5EJqvK{6yoawJKTFcy*_J#iyda#$pC
zB^l5nT{3YpGA3z~6+7}9!?7fFawmDRCw<ZuPZAo`a3*WAD9fWIjne#JGAYZ0D4Fsp
z+fe<wao+y!C#~`-u`(;Q68=tdC<O{C!7@dVGA#9ODarCWoboKyk^up6DydQgw=yo}
zaxUqzF0CpkhjK0T(mcj;FQ3jV{ZbFpGB63VECbOa?J_YHb1@mSF+HU#^Rh4{GjLc4
zFefvvEb}svV=y(dGn-8+r}7DN(lJT1G)?m~QUB8hiLo6$vo(#QFI{uSGBY-VgEMLK
zHW!Q^4ihI+vp0S7H-VEeArli*5;rvyHjUG>W-~eYkvW|c-ar#o-m?9IvpTKwI<XTZ
zhm#vv^Eq!5Ilc3)mh(AnGd#_co7yroUokt`vpwDOJr!{~yYoCf6Flkjt;W+i%kw_@
zvx{!BD&aFg1$00OH1_0kKKrvU?K467DL<KWKN&PaPv}3Xvp_BMLNPQ$@9RJt5<(?(
z9~bmPtI0u=(?dn{L=T5T;Zj3cv_)O?MH`4iI}}CtGDK<Ai%8TsP4q^2v=w&~Kw&gU
zg>*=X^int!*n0FVZ8S-pEk|#2N0~HAng1m^<v~~85*&*(OSN=Mxim3kv^b?yBbPKx
zC)7!46H3W6O@Bp2N3%=a^iAQkOTQFM)zlxyv`%lwOwSZe@w88$<wq+tP6c&P3H3$i
zlurFr8}BqxQ&dk~lTR5nQrCk`3$;=$^-=}&P$5-PfpAed)o&d2Q8)EdNfj*t6-zNS
zRaJFWQ&Uq%wNx3<Q(-k=LbWwtbyjiJIVhD?d9_!4RW4msH**z4E3;OI^+b%dGjH`+
znKczp^;e-aTBVgFU3FQT_4j1;TJ<SeFVkAJ^;;!NJ=fD)!L?k?HA)+zTF><uvvpn9
zlv^j0T;26pcU4~J^<MEcJkwR!r2io@^VJXA^<P;8UgOnX1(s8}QCt!8U>UYy6LnvC
zk2rnLVdF4hDYiriRx%CtV*9jSH<n{THe_8AV$)D!KUQQn%VJU1JTkU0Pj+RQG(DyB
zN}~{FZT4n$6d}|VXE{)1c@_y<HZWiIXHS$$tuz`$6H$qFX_<B<Np>|mbZDE_ntXO@
zcZUwcRBEl3KV>#zypcDxc5B6UY>V${p;l?hw%MvSZFwkY{W5IXRzFX*X5+SQ?G_o$
z7A0r&Zt-qy`F0Mm7G2@?Z(Xx%k2Yxsmv9w#apfv+^%iXz*R%XKa>F%nnKW@JS7YZE
zax=GcJ(t-W_i-`za{*^^J^$Bj-*$9KS1l8EX0McUS2uQLce6s*D`&UHOt*7UcP~}<
zcA?T^eK&Z8H^M@<Urn}mhc{nxH*<GaLj0pY^l@a7H+f?cc&Yb#u@|6f*I%<2ua=i`
zn>YJ>h#H$?7(nO~R3}_O!91!69NqVQSp%=8w|h0xdg=Fm@t2E=mwWT~t-d#M!?%Z`
z@f6EfeQ_vU%!98C7=igtcjmW${n2P;gl1tEf-U%hvq)#%7i#wwgE_HSEf;^ASAeI5
zX0Yfx)a^VR>pZ*-cOKY-wb5`V_;p_xhHdzUIn3?&m49)Vn*Nt@oA-)NxcbB{I#M`+
zU2HsBI8ST1hgZ>lo&PwBrPx=t_juKBioxiI7k77SXc|uk0;l7M%VUMjV~K62iLqD{
zC3u1n7md^Sjjwlqtr(8INQ)I0bxAm!z%M|+!`c!;i(*4U6svtZA$oy>jERFce}j;r
zsIkmfL55+F&9{)p?~lRnH8Plv!&6ulc40O7lR?=YH8^7DIFwb$jtLiaaRH0ct%Oln
z`;s`rQf!H!mvPt)k%J?NUSmGS?{QiKTYOm()DCup7_bHl6kOTv+}M<laE-tA@0dB7
zrI|UZm^%@4nr{b{{}y$NS+ab&kFgKiZb(?)Df`SV{E7{i7uj=&aEZ?O?68loGzXR~
z?17gVn>$d3+5dQ4@7WKZ=$`>PgaTTi2f7ss`k)ayp%r?e8QP#5+7%r7p(T2vRe_={
znxHQ_qcwV?BbuW<8lpeCqeFV6F`A@J`lM01qEmXMS-PcF+NDbxrVn~K<hYdaIh#Q^
zgy|P`ZTXA6_?6Yg`4l9aS8Sc2rS8^Q1PvyTQ4Gb7T0+vvjO8gq5(JDftDkTB0HK&Z
zV_K%Yx~soBti>9v$GWV^TBOZ7t=0Oh*BY(a`mNo%t>0R%={m0K+OF@~q-lDTOV*~d
zns&6AZ&CNBTa5dFdY0wmspXD|%sBgGtg55YUMd;fz*w=fE$tYDvAvG`{#sc#7pwcQ
zkvn^|<Nr#uH<Pb9xPnRhnsQpFvzMEvg<GV>LsK|Itmv|FTbyS(K9X3R?&bS{V~HDk
zvDu}!m3g%__gO)k4^11noqL;_+c>KEnxC6*0{d=Jw~HO;ab~-ToHB)5xRCd_La<G+
z)OojqV;&}%ap0+l&&{!aqg&4VxT~9YKYO|5FuLn|zqd%g0r#j$nY#J=U#{D3@tD2w
zadk|QfR!VKJB)J_JDotR!!mpP;zNijc{bWRk)ztGA*-n~dBD%onQ4}8@6*3UJjHXT
zqW4;d16;sWoLLIIZg&?N#V?O_mav=Shz}$|zOu*DNw>dloh|%yj2Z3(EAGlUzU$7%
z`~L;MWBlE=`aDrQ%B{R`s=PK)JGCeF%J*f)<939t2waA_yKOupk2rKh`?kedjE5Vu
zgX6r%sTY9T#E@FJt-2dDn|$L9%Dw#9rrbQU{LcyfUj{vg0lcqaywHIK%-J@4YZJk3
ze6y<!jD1{~U(Cgvug=jMssWj@kDR!(uhW;PLY$mm{G8EgEYQRA&{h4_k%h(E*2Q1E
zgJC^b96fCzJ<=fu8lOXq$-Idm&_7z)8{*u!(L4NZVccGau&}SO5&6_J@YYq5)x9%>
zs6E^B#nr8m*124@wS7EtoosiV*S**tysvVs+7$O=os``+>iO7<yorR;?S{G&#{XsQ
z;9b*`7@ziih@?GVQa#)`%i5ol+X+75O$6bo$lJet;GcWk$F|(fU5}l^%{}M0<72@s
zzQT#<THwPJ=h?7zh~G(myq_H66~1xrTjha};a5K9E36e-JkcNC<yTwc#g^hLp21JV
z0;i+P<<2*NzTvf~?VudzW&WR9_i)=->2(n1mwxKM1KVfa=5L<rRYd2vmgjpO>a`c_
zwSGifK0yt7?9qNbWPR(lTy%v#?Lma=t=8)+KHc9@?BV{4n%?Qx5p3~(1EpSAMiD>e
z{Rjs??^QDJYkJWUUp(Y~YU$qG?cN>#zVTzo;D<vS%0LwS#SYw{HaEYq%Ku>WNq_Y1
z0E{J}3@RUmC!dN+z{6i;7W@JG5?~0%BMV+YIuM}*0LvF%e>_w`^;KjRPQVVBL-t|c
z^50SM+urS0f0`e^X(PWj1OF4BU-?l;pTnWVId>LvAo+y_32dLka^UmjE(eA{3e<o7
zhXDP*KwaD*2lyPI4t*H>LHMaZ)D5{jvH&0g*y~5IUn+l+3MyR4upz@#+7#AE;IN`a
zH~wZ34CPOX#g8Br`tuR8q{)vQJ)TsUg}}g-Fk{M`NwcQSn>cgo+{v@2&!0ep3LQ$c
zs8NTjQpp@Ruv4n1v!V{0s;z3etL~U;J<7GK*RNp1iXBU~ti=mx)BjGGptbE*vvA|e
zolCcFMYnkE>fOsXEYrS#0}CEZxUk{Fh4taZYL%+gr=8x)oRtF+;(|zqSWK70O+js)
z8)|bCx*+Lvm+L+axvV3|bgmU%DB-n)iiJ{K@`SCDAPtH*F={kedFV*E!*p1dX*;#^
z=g^}|pH4mX>X=%cLX}F@Dr2|R!;2qJzI;WsY8Oj3&%V9;pz7DZpHE+O{rmXy>)&ra
zpZdm*MFp9BD^a%GWtnYOT0fxKQ4tq83}adjsPVUxDoTOWS{bj!R?uu++2bKWA-vEN
zZxR7_lW<%e=bVTfS}5a;G}dUNV60>aQ+A?k*PVCY5qRT}ME@3f8G32O_m`1OHYt~q
zOFAj#lTl7-<&{`wdD(y9063L^qeLcTNd`KXU`3pHMo@zlb&^A51f8a3Mb~{a%!m%5
zC>w2DA(D|ou&KF|p1!GQ6N^W=n3|sw&gtl*kVZ;aoh$L^<B!|~Ii{qXcB&<kYeDJh
zsHBQY>ZvqUiR!AXwyLFnZZTF>fRKr)>Pck+ibxq!lo3dUy7KBPup8;95T$GGnnfVS
z7R#U{ZbanJnRzbArbD^*BWI^cg>)x}sURVO3P>~>CldagV8s>Mwlu*NSxCDqgITD+
zL1)Akga{2Glo*IfKCq=wApS^;*$W)_%g`0g#+i_|=>L|mZlQ7VyWm2jSsWuvf707<
zy$REBAekT!v7Dk4mMBHDzE}~F9XTW{s3hXPAVt0e1;Q@}F9^D37CP=)aR?Wu=<3l(
zCrv7{CRutZkec4A^wd;G2dcpFRjsv*rfz+-)Lw@z_Sk)K=_Qz;*a|jC*%Frn5^iLs
zgR#lI9rxSD!rf37z2$88-9Goz>n%RuT@kenrTJOW14lR^&I|X=B-0Ijn_CGvs6aph
zm3%mXKMA1KPt2gBl_3FdIzRyC7l00DK`(%=g68QiDFp|we@K$i1$DAH=D(rL44wqJ
zh{5NfUr^{UXvq*f4Gj6YI=`Tst8K^M9&13lng4$deMuN`-@1vyw>|;&BNE(6?5rQ>
zF6kH$n~wQ4!2ehF%QydgL+6w2|Nj7lPAeMLw5IgvX;8z;rUJ;o1_I@3U2~uW5fi})
zI%;he%%BE0$Ply5>Pxj+Alr(A86Oxd9ab=52~T(h6%s^mk!#$)dgp_U2~G-dGuX5=
zgC=V+?q@(?357s{xXBUlA*CA*gIWhHLXn711zBAJaxgFkbnJRVj1$UofDnvzQ8qkW
z;stc*1AjPZO~mVmqMT?0&>?|iVeE&WN&u`>gvvD7^AK#tn4&X&1S1@%qXR;)#?9rf
zjA100=wLSz&h>6Ygv^~C6otRhxe<;F@&CmaImpRQdNL-I3yIUXgQ=)t@RO*VAOw|^
z%2tl0g03XeDPu{?T6W5VA4HqlXp$|(0g8maT-?KMxVPQ}lZFP9!Veb~#}4|?kDp=0
z5PV>)ZCT_JBQv76T(=NErQtJp0+C44g~ab!QiuJB-N06cn}TU?m>9_&g9>TGD2CCA
zzcHuhWFs)`WdV=FsboC8xVw+2E=t<iTtT_0L`F(Wk=^7bKfx)veyoL}jMOKI9MH~L
z+VZ0yMOr9d!xZfxFo7ZrsY;W!%B-#Qr8t2lO!MQ>ncDQG^}!_w(Uww+^pbH-fn7Zf
zf(y(Hm6(20)er=wOzR!4nHck74*#Y~RjQV2A=Z=>hPHVdFTN3tk`reXuP70BT9RdF
zSX*;A);Rt_v63RW=ZJpOurlh)jLzh!76a-bn7I`slRWAWTm+l0X3|9j`|3Cu@*89_
z)*l!xR9zvfkhS9UvY5@%NJ(lBlaexl3an{nM=Pb4s)w|w?Vw9j>mJdv_O-Cpi%xes
zAlE*GgfGNxL#UwJ82T2ezg1>QiWpTvfkq05NUm~W*4wN`YO|4DNFl=t#p3m|oukN^
zM4Lu{f9?q+1bb^5r^~yJzR;}Zy&hkWTE*%*WU!F)-R>lT*T2fKz9KQvLhNc0J5qL@
z8*5`j(6yuicsI5PPOy2Pd;gb`UaFL)RIr3^WZK0{7^gD5@N;ad;SPIvP>VU6E_+&$
zwrN9|HCzNb={415tr&*5>5UKImIgQ2_{P&T>Tsd@OXDsx3yyo7rx*<2hLHEW`E`h&
zW+=GQRpyk8lI~DP;{)22F1m5Wa$^@}R?WTO%V7R82Reo*xH1T4_5vL_b6dC|_~4A1
z%ae-+YG3s+1a*uRh^}h3InYISA_GQmls`=9Lfd7l*m3YlQOaRMJNhsc&dZ~1nc+zX
zrqPzp^rK<b7Fp$zr<mSIZw+Dxxm`7rrEYOUVayU4)A+`)j)RUvBHW53hsoEvtsI01
zIY$xM%*B%{b)~D(yZ`#EWh3Zw7Aq34h&q*vprgT3wUGhw9`(o+<MK<!OoMKF``g1Q
z^IV-g?P`xz&BoKKk$2aUBbER-b|!Y7IVQUrQs%#v+;VzHr*2LA``<n3R-z5KXhw$`
z;0PB>q$QnjPFA|%RD!s~Ej?RYjQHSfi(Y2rxz4%GI>sNjNUy-R?As1A*Np9(b0H=0
zk3eI*!d{42t?LjvKO}e`>0fz$(~*W+)Y=`ywj~4o5_N(^+yU;n%&QBYp;r#En_Rkf
zIgaQ3>iK#vkSBkOob7$<eBxjadnS*_+0KTd;HFfJ*w<c`g*Tn;4SYD<zjE-o+nttb
z@3gFFRohVa(*LQx@h(<U9`X_v{xiTDc}Vu<^TsI=<@;5vwo3k7visA>F-P)Pm1<Uq
zaCw+WWHLb<P|$f&@y<YBh<vq-0HU9F#SAhR($RQ&sec4ry=X{c!J0UzQ(Xu19{qJ0
z`Da662H*I-yYeSZ<isf&?V+vv@~0mXx09IqUt2Bq=`Q{4d!K>)@E~pbj_GW<sqtl)
zZ;*v}_*A@2U+Z5SQx9yXWsWY6kXJ~Kh1{uM!yL;$Ctc&k0sC}V6@^DjG7C{hUqhvU
z)rB%Vmw8>sF(pMj_Mkcd#e4VFfNN$E^u=R@R8SbmWiu3SS!Q)nq+bG9e6Dvr-S>Sk
zNK4J9TK@zGebM)VF*tqJhl4qYC34q;AO?g&=t+5}6??~bPjP(>(MvT%cns2nkq3X$
z5P8NlV^PvnhgT7#!EuuZdiiH~{O41RS0sq$a{s4+AL3qp#tK$<AY24`O?Du&fC#{1
zFZ*VCch-SFmw=aqhEBI{kz{oTHhXv|fFTePfk<x!wR_rgh*NiGwRe04SXRiFbS-Fy
zLzsy;)pC{ce4k}-JgA9mw}YW5in64ArpOben2N0UD4fO=p7v=WgmJpHFJ-_BS1}7%
z=r^~Ri@W%QL+}Z{=md%<YQZ=wKsGYP_!^nv2D5+_;ZihTSTTP=8iBA}*!U8}RV4oB
z1^<|rUxSxU2`~&-5p2H!G#OJq34o5eH~@~wa|hC03t?G|Gz8=rE~GbRo_Aj!APL&g
zj`;+R(t-oV_j&~}3#zj+>EM2PNQmNSj|<rn)U%Itq5vHc8Ir(7jL35@K!>B?E=pvA
z_7r?r2N81^GG-(p`Bsok#uW0{iZB^VW!Q-|_=%vXb}>1Gq_~PXxgS5+lLZ8nLWwjL
zcX58#TNznZ?4%G$X;nUVVpSC_e1kD4Mpd8yawnlPRW((e6IIZpdbmXzTe+3;5{cRb
z62PWLaa2atqg|kLMtFuU=r&Zt@NVelLh!f|WCbG~6g+C?8D;R6cr=%4Nr~>HZ~qhs
zC|2f1OX86B;Fp3Kn91i5)P`;skPr|!N$B<h#3GWxMv_f-mj>}WT=$2GNnc|)l&T3p
zGf0D;Ws_;QnlZSOvI!|aS(~bbo4P3}MG0!F_>a$65y07Nu@{_nVw^W&5C13$6d6FR
zSrXd7EV}YKRd;59rz_I=5kt^#_jR4mLWh6?cyq{w(PViakqX%f6WSmN;Q1Nei4^H+
zYlvW;OVJ7OxsWrlox8c8Ve_1TQj@S5oBXMKv^k(wa-00glLoq=;nAD3sGxJ_pEpsR
zJ8=PK*=#svp$xjAts<do0-z8kpd2c81v;Wdf}r~ep(eVbh2fy&Cz~Ex6aN&d6Y(iW
z<f&3M%Az`|S@hXpW@m$0p@chXXeBzNGlHVKsiH=@q;pY(${CB}mo`E=gfU7JGs>h`
znx$hglR*ihA$o&a`fo)VruTuQx~ZgOnx;qLqG2+nLRh6UaiwZHr*xVV9y&?^dV~8=
zr;awJd}<zMikoQqr-T|);x~S~w3=`#6Z2W9j{2w|ai^Y`r|s}|kSbw*da2V9sI@t$
zn)<0__oPRNsBQ{`iwdf!nyMhdr3K`rA!@0rnp&9}s}zKaEb6JWnyPG?sH(|{x%#WX
zS`w1#syB(N!RkM=daRdbt1D`(%Ic`QTB<#Gs?S=jbvmp+3Z&9%t^b~stlVlBoGP2n
z`mJ;tt>X%D)Jm@Ex}@0pn!fO*u)3}v<*o7x7vZ{^=UT5>x~F<Ksz#Zw0GF=%I<O4t
ztF4-?d3u8YOR%FtuMF!K%xa<w`>?lqsPF2V6RT+hM6n!8rmWhk?h3El+OfzAD)&mV
zJ#n%_nXxFlp#0jeBKDvxYiZk&6g6wJH=DCMyR$rtAwB!EI198wJG4Ywv_^ZhNIO72
zo3u*Hv`!nePaCyOE45HdwM%QYSBte;o3&fpwO;$RU|Y3eJGN8HwPbs?Xq&cbTeM3t
zsUkbFEgLot8@EKEvO+ntbep7X3b)_4wtoA!fE&1iTeW37xc`QGxQLs$g{!!XOSpvF
zxQ`3DlDoK+JGqJ5w!~VjdD}^IySYGNw>e>U%y~+wz@9ydV0i1fviXXl>aQ59y09C&
zkA|mjo4T@FB%OP^p&PMY(OJs{haJS8$_2a{X1lr@lTI3o(SU@!dc4m2yrf0DwQIc4
z%OAO0y_kDiWPzU8XnEW_yr)Z2FGaoBn~AI&q^>Ko<-5M@`%%(6z3nSD*Big0#JgP~
zyua&#*qB^2!4FY^zoQFM<V(LWXs!cHzzCecT;sOWd%y}T9`pOaG^o8}0l><&CZ)@q
zjbg$4yA;BkguP&&?O96>EWvkozN1R2C2Ybh+`<jY!2j^;!mSd)E)2Ri@x97rlKUGO
zIGkMJi!sTyV(Gx1u!l-3EW=@Ez(<V4Ox(nP@xIKUxlT+fG~B{AY!kjayji@%Tin4h
zLBtN>yOg%XQw(q~+q&udqGi0sY|JE3EX8dcDOJqESB%9O3=zYy!#OOvKMch0X`LiY
z#&JApN<7Ghe8~Fo#y5$`jxxt4T*vjvaXs9<7!y=0u?X4JL7>o3RpBh*sU7)(pB-d9
zog90hoH#t?#)8bqA6Ce${K~NW!kG)lvFs#{EWwZ*6LSc@3Bken>j+N42svCpjk*#}
zF~mWP!9Fa)q&&jWWH6=cyV{Y=*vXv2Tf|4Y%Kx=2VXnN*-u%sjp~#C2&PH;}51h*|
zA;Q0`#}}-}#Qeud(Fp;p%)~N>kLS$E0?pREB=)I8U`)>^s?Fs5TFINj<HxrHozMym
zVzWHX3tc1Ttib5J6282U>^z^yOvxsZ$JpE^#e9(XOlsALGefM;zzYEES)P6z&=1{{
zD4fP>+|n{V(?cQ7B1+TNYqIvs#uI%Kdi=laJQeP25_5<%I?I&!{L#7+P$6B?Abp)2
zt;`G&4a8|70*%u*)y-JF)m%LjHht4wO&<}Rz&&je?A*n}i;+W3CLt})mH@#1u@Twi
z)WHiU(Mi%H9L<UI(QbX!+!xlFSkN%7*Z+PE*oOVQU#+KyT_0nOz-3($>a1MkDA(P~
z6nU)C&>7MXk=Jk-)tdY;cilmpT@gx+P4hX~s=U}e7=ADtvoWpOunpLWt=O^69*s@F
zkImLTY!BlZ5yOx+8vLEl_`Ru#CQ1#TacvOt<k_2@&!Vl*q}?pbdBH|f*tMNXf(_Hn
zd)?eE)3Y6~-Ax_0O~1Jf6Bc|z>zThZ!4JnR+M}&2MI6APz0z_W-SVl~*&N=~_tM&p
z(E9z~O#I#c4d8S!-tk-BCo#!sy~BNsY8{>4;pfTEtYjH7-^aq)kTc)PS=TI0;C83g
z9v<SXEa28H;{2o2J6*;Ip4k_D*8g7Z#qK>amW<Su)1GvV)F%Deuo%*MJtQS=;&HdP
zKMv$XuBs$H<V0@Z?YrXM(&9nQOE8Y(@4eLY{VXg)&7_9Ud3?_tH_tbM<V8+4ARgvq
zj>Ja}<|3}-?91el>f}FN6TAG3B_+%jec?6kc^2)D7mnxl%-LHGjTpV>jM2{>Ugixq
z=7yf==M2NNtmuNF=IhJmAK}YxPP{9T-Wr|95w6^n3BUxj%gR+1qmAi4Tse)9)*Wrt
zXzu7rlijZU+N>Vy2hQk?F6(*$>E$cw`s?OgoSYw2epSsNrQF<z_Yt9$+P0o)h@R}s
zuDfT>ugz{3xQ@NLPTIWQ>;KQu<D;_b(T*z1-tFK{x6dB#1&-nrjL6mQ5R~rb(V^|0
z!tLaKOF|Cs@m}veIqvpu7Smq6>0aa44!-Sf>5)S3`F=t3PVfbv@I#323Lh5x4!!*z
z<NuD|hT-n=-tY?c?HIrD!OHL)&lL}k*eM<&8C>ZN&KKo)DhU7aO``EE|MH;f@i0FW
zA@95qPkk#t^FwmRX#DEit@A*CsWKn*K2h_>d-Kzm^F*J`tu2e{yYx_Bs6!w1Ibrn9
zKJo^t^i;1OJRgfr-=<m*QkFaRW*fO?U-o5B_G*8*Ti;1j-}W_O^|y=k%NO==PaiJN
zifh03eBbwePqcT>LH}<b_%R{(vP<{MXZM8P9{e2+K0n~pC$Ok0`HS!EwC>QAKNE%@
zyNG{xil6xaZ$Oa0<l*X%|M@a_^2fTdpzlC~pZXxN`LNshA5QwLKOOx2>Vz%(sr0e>
zO8K+To0p#{VBPzzZ|)X0;#fbRxG(%0X0iVYqpr}gys!KQ-_XG?{pUga42SN=pP<Qa
z{fANequ>3XWUvDp{oe0`zhC|5FLT%r-f;~3b0_}mAI{AGx{7N0!D{~VFD0uF5d8!W
zBv{bkL4*kvE@ary;X{ZKB~GMR(c(pn88vR?*wN$1g%?DQoG`)ONt7v3f@Im!<x7|`
zWzMAOQRU5(HFfUf+0*~0#g#vW4kcRD=uxCel`ds!6K6VYQKJr{IxE%HPC=V)<=XY)
zRj*;ijwQ>mRjRUS)vjgR*6rK3DLaX}YPA<tsokLNy$RRvU%-I{%Opt>XWzkz6)#SD
zSSw@5kug4&T-owv%$YSuJj{1$Rl8RyZzio4Y-!Y~X`WWy+VyMLu{X*ERo5=wynIK?
z=H1(O+rlFq@BUrf_|W0Rk1t1_llgP#(WS@joELQHtjecvho}lIckq_IhbLd&{CSA9
zZR5_ZTRVFA@qGs`ncTU2{M_y5=g;|me*gm%(6{QWyAG@O27Hb+1sg1iK?euS$C_u9
zvG76+Gpuk!4D<hq@WY+dTaP{W5(M!?6q%yWr2SHKv9cCl#Lq+-Yqar3nDi;|vjelE
z5y#CS1ae4;gd~zXauk7MNhX_g@<}EY$>vBZ84~d}5=;EAN-n#UXvG-46mzLC$7JqD
zGt*SFK@WHAQ8YBy49rM5iKMem*_44}3NxVe^GQCH!IQ`<v23rzK@&X^%rX^q^rJ=}
zZ7ohoE43819eKpg$1N}YYZX;Iwee0-Gt<)yPBc_iRZjX8v{Voa%~H!wVYL-LMu)p~
z*M=hHRWeF{6?WLNbbQLd9)l&wjWU{bwhTKEnZ>0=+#q%!QYBJh2!~WCgR68(7(^p&
zPC#U!ZHfQQ_N7^x1+U#{6O!ax)J}ahB79(J1CD#I%}>@@5%qWA=W^ARU|xMi7%*iQ
zcKG3$_;K@1PAwY32Prbv7>OQoKw=n{+~C&Vbs_Sn1c&_bAt|c}YQ`UWF&YNuflgNU
zJD#%W803oV;W;g4YL%#y9I{GC<aFv?vR{Yj`9(>7Ax012fDx1WYSauq3~Nyp=31?W
zzZQG!^p4eZ)3E!w_#k@_(P4<BKN5N1@ixLZ<&}}T0Of(8p*f?OW4?RXl37Y82e<98
zD3u(39?KrYH6q$*gpgJ`>W3tLdQZ&BmX7K}1@?UO#I&}W^g+EwovXB0cb)4taY7dD
zu-E@a$n8Zynww;tX;L|<y<PrW=HYqo$!&Yi$eSX@9TyAob2FM;A<Ij%7ou`VDTECy
zpy>Sd;;4@1(9^*;pDfeMKi^B$*FUOt_v05f)3Xt*9f^bvw^r_vuLX6d-|3BS0`XhS
zE)qC|6%Hgru+}V!R*~kV1$vTu;L&mrH_}|MSJ~Sh_oDDU`Mm~o<WorqO}Lcwsqch1
zYTpWb0zVhV&{6cGSlVoN5PjspfCA}+9kSqtMqscYsbH2B%0Rh+?5-c-Sj0T~LBxzv
zZWxI8Ve}HEz$Z%K1tIW(;tB#SgS2alLx^4g2|~mccz^~wWJn-r5CRaqV1LUB#6kaj
zD3Cm4ApsM(f)%v!M4F|72_@K;^OC585XkY5!iyOghnRyBa3Ecl!eU1p7%v7IL>rRW
zQaU)f#CaiZ5xsk&4}rKyO;)0ag!s=Cd1!~;%_0z0G$a9i7{&WY!fi+VWZ$Tmg+P!J
zA=9&<5Zm@FV`9scz4T?$S`mmkCJ~uNdB)P3radv3;Sh(=0tjWenGuo@hTkOTm*~^N
zaykf|>4eER+4;^Y(eO<+#2-S2Q9%Mqp$Af67RKU55RO%$h#tF-5}Q{BjKx8p){=zB
z=zvfu<WdT?tdaty;12>2@&f+2fa4tSf-hoJk{bo783m%pjM{($82zV0(y{+h4&VR>
zA>inJ9sp8<jDQ0I$-zbmAQH3$?xH1t<WDOxM3}1dr&a`H%syI>7jTpYMJ0eR2USUq
zAao#ZG$zqd*|)|mQJ)^;XWs(a&mAz8fEVMZ&V0~2u5t{YB0~aN)!Glby5W{SKxM|r
z`UHZwje&XH$3lo%xeJ2Tp>ic<I`r9Af1a^%2-V?Q7wa)nmUSo9^yWc0$h|(8f)uWT
zXJ*1F&cc>fwH-;JJ6Efpb-tD(u9a<VV?{&kz^P$3G{_YaE0B5cHhDbws?Hq8I4|O{
ze~inRb3|r`A^g*UOoeVsy;Qg%m^2j*AOI?#n#7u7%K<c9p4v<ri17a|gr-QegGnKP
zQ>gBAAi)zacmJu4jbaeL55QTt{DCtB3go*dE#AybA}OqD<Z#hkV&o+I)wQw$TVXY8
zbeH8|%Q{CJ7el2RMdk~DzBRD;><8{#HaK*t)r|~(B8rDeVuR4(w`$|-K;)q_{r=!%
zAx5PGMTSI<q0+H6Mps04qCtgxRt$$Q1v!3UP1`c&w6tndl&$QL*3$OM#)<8gdnPn5
zhq*?^lHJ*`Lr+Z#62o{UGC*Ut;NCLf!V|8iVy!y_Biqs&X)4*w;49wc4Y(iNZ6yKB
z*o}-DBnSRTu04w<;0q8$(CCt{fCmW3{}u!h!{b4w3o_sU5BmSllkNu&{E<vNB{(C<
z3-Kc%++gWaSh=sR9*tXxVK?@VhcITdn`1oV37T~d25IQ4C5yyg#|_RW?qziq9Ww{Y
zy1|WZFf$Q>?3r-(7ghEwEC2!8CQk^;V*bmNX+>^yLpnHJPIq+J-EJ#^8Q${_kUW!B
zyBy?O-}~;}vNiqNDJB!TbKdn`U98+IT2;}WhU%#;4PG{ycX`<rX1MbFVnZ%k(toD(
z#)YQ>O$JaKCIv6gLOtMktQn6CSCpzTf`p5gSlV6<BR(UDu840qn$tZ9v$m>om>)#v
zNwjW@9k*uab}EwzIc(2oT-hOlc-jXkHUXh-<EvwfqB{TKEGZ~N4~Z2-$xJ4PhmcHf
zu%TowBdS^n(SGGDYx(V^dH38kX?MK$$KJHtEg2E<cfdbZ!_o$8(NCNMg11<h2k-S&
z6<&}KK%jD-9&mP1-3c>Bz9ZZ9hsSeTX;BML&ISqKrtex}MiX#&q!xP#Se|g5@Eodh
zG<wZlG2x#%5ZgS>!mQg!c$E(%tuFn7wAb9+p2z%=yFVlb^?7=$8~&d0l6{DwKa^7`
zf)u9McGwB%ZE%+(>}SurSIjNC@~<}T@=iaO>z;SHw_pCI-FsasRuSHgn86KwRvMV)
ze;AXcX7K@iOT3%&wSR*>hERY@3#`-&J%Lbx&O85zbTFd?XuyNG7y=|fYNMhpGBk|x
zJjeq*`cl2#BfXK)BNcc77Hq)}JOdM)FOJKiH%b7E@`p>1l)9mb=UTh93o_iRxmf!d
znmY*OtF?sSsuOFg|NFl#8lpx(t9&~;rb?(LbV6MtHeS0h{TeG^f-wHOLMJquOVT7S
zL<D2=iBpLZW59>78@q7pn{k`JrZ_+Jqr-AqKRk4|_rtsR+e1K1jJ-Rv`$-5C^Dr^|
zKb&bOvf2Yqaw7vIJhh>=#>12UVTeRK2+X6G0n<E$u)rB4y&J?R#3L|_+LkPEpb31q
z&lAC>I*0(uE*G3CTBL!UTfIL+gb5HS%tHS!=93eb>zNJQw|(oSB7CqQ+_f~+nUl&w
zgn+~)Ohjg}qFInDS~|dB<2`BgxrC@bBb>2Uvc`WxL}~nvGCT+<%C{XOiZ$eeY|4Z-
z#0NMmJC~WmKztvyW4pHd!+UfXJ?uyKI~ahxyMZi7OsPNn*{wS3t>3D;h2THufkuQ=
zMn$8<fxD_uVTcmcG#q5bQd>o&3bYW2x5p@hlR-8g07=%{$c+p&f(Rg!d_3`TD)>qT
zj#9DLbG({ps8lEs{Yl1S14?W}z>8c6iL^RqLI`MxEM!bE1e6GG$U25hh-2yjGL%Fi
zY$J~O#hS>zO<+S~*n|!uJ8tU-@-zQPpE$pEP$9HDpMPx2*yuw)WIwp9OF=})+CVeJ
zikovJNVQqWLyAO0dcp+MNrs>S0ze3g^GGDfNz_{&*Fy-#`?LdVI9IG061=o!cr<}1
zy$1}VoH#l7TC`V-Nd%KgkO;bGY)DCTn^gcxf15quBepp@N}i%b;L3@l(?TkIO0h#V
zg4hA&3(kv!1~WXtzWmMT6FWnKoD&p^t}_OxVFN{Ygg)4p&=Nm`&^EhF%Y0<J@j)%R
z?9Q=yOY%$&xm2(o0zAO$1d!RJYuh@{;m7l=&*m_j`bo&~R7}9+LY#BDMdAV46TVWM
z$l5Ci!c4q6DH%23OncZP865uzOCY%jG$TEV17f4lg0LA;B#20gF%I>}S42V88_AsV
zG|@zt1UQJO;z~6M#)-Hm785%Mn?8md!dBBlbCgQn`#FZ(5=W>YW@O0T{JEmLrvW9>
z7qcRwDLSp{(H~vTp!}lpQp2T@$FB^7Y{CNSjKl4;NBeB2?;H{Fq|Y$56!Sb&`V+{W
zSWot3Pcr;F7cCMWtPL2o5>QA(05MZF?bDb*Nd2^!{xniTm8_U~g8qcA0<FZMoWvL_
zFKsY9E;$P<a{%XAv|bXl^$IEXvQ)}MO_5kQkR$?@d#MnGz!)S^0^6bXN`aY-P@Z}{
zH^8W*G)$R5!l{JP3A6vXnNzt9drmg9E;nknMYXyCJ)Hj8P05nAY~;QF&?ot9u;JV=
zUHeJdRIVH}RG>80XFH>4Z3zu}2J6%UF3rxel*7*QQ>QoyA2gIQRoBr;Q+SPx^jx(!
zz1L5gqHEhvhLBSq)TQ`j32FHdKAl&CoejLaKZ?k|5$i9VfhC_2Ea!kocFmX{iyMQI
z#02%xLLHOB;k+Z#1~+oAKjXY3$clzywDU5wkd*}28_tkYfu58l4j3s|Dp82dgOXs$
z1i%HT7|{*YHS*%5YWyj1cvX+I$qPWkDT*pmwJ=Ay)AX3khE*;%m<kWWCmAg$9h!x9
zm?EaMtbtty=raEx+f=Spgo;l9Ld){nbZ8ecLY$wu8w^@oBFGLgy1o%3qxY000u<J+
zg$gmcuZMM8iQQJTb=$!uPM$zAajk<kAj^a}%Y)SjJ7mksT^M=I+`*_<jA&1_#aEP&
zQ+`#5eGQ|(D_w_Zn{S;F)#Y5+{nLciOQDm>T+_F!{kLLlFsRGe!L-QoayBzjpl)D+
zQFMSAowRZ}UQQypSy-u2#7!eCfKlWY&ZB|)x<MKU7tm`jj8dEeg2gP%u2I}xMuJs5
z+C}Y+id}SoN1;@isDv%NR+-bckFn8#@WN%q-A+=2Vcb}m8zv1@N9U==eJg{t45**W
zx3$bCVx0d|#UjQmxV-<Js7F0uAxcgOtzhfoQJLUQ;1btIfCYL?2oR3ljJRCPMd4xD
zTo#54&%Fr1Q#O3fSJGWI<`Y@eqzKj}*w=kwAV%1UxwnF~u^mLmo>b0-sU&;oAw5Ni
zR0t+3abnJ(Vk1V~TGccNwx>bZVsw<^Giu<LYlW@ghpJGBNWHvoO=ITq+Js<Zm${F(
zeYFX3V~KcMNpMeji&S0!PT)!~KKA3rokMxl&V``dAbtoHF5*O9lyi#VMkWeKu80{1
zE_^**ea&KtINgKb<k=e72w~(%eql1ZiP<4UQH~#}ZDjbZ%Tq~}Rf%N_X_a&xWrbMe
zRJQ+R8F67<ew<032+;MUOUC3Iwg^wwV&=3TwxNo-XiiYpy0sJJ@W|y}uH4u$Wizus
zYIdI^uI7hW<+nSPKKT=JHiJO%W|CxAx**ecMdw@LWq00+Uk2u3zU0w8=1u-ZPtN32
z0N7UY*Y$+3XVwRR?dQLfRPxy7c<xg`9R-E8J8%x-h^9Adm`-xOXen7}svJ{yZD)<X
z6nOsV#+c`bsOMq6XH9kpe75A=8)#wHuw%AjP-^L~lBFkxEs@UYTOMK}{^2OQM4d**
z*R;zCk!7Rqkf4s^CSK=`My;fll#qUEp&;pqa8r|pQ<VN;e2!R5m{?)zVIIojJP!XX
zBCOT1jt_;FYPf9Zhn~BMe&M%P>$T?Sram{h9+arQ>ky&phsfls#%i-H=90d)e-&(-
zM#tz8*;)!XmX^?3jSBflYrP)G!ott|Z0om+YZPwf$wpyZmh8^vj=T<Snc!=Pu<F0Q
z;Y?OtfR5(>m<y#u!zY41u&!-c+F|nmZPMODw$^Re(d^g-?%n2Xy52{(8*VWfZRBnV
z(^h1FO>NMf?Ui1L=|*OulkF%@2vDx=d@yJ|<`3Uq?)2;J@FtyZmg@5sZ$JHPpH^=N
zQEvC{h~{=~=w?rz0ld}?EC?QGm%;Aq+iw2G<4TU~_Kt5gCGYa~9O35N1vme2yJK$$
zcjR@O?+DLLHvNevuJ3~er44s(2!`$Jb|%^e@U4SSga(fUukdy&WtBK(ZBB8rY4FOG
zaTSL*2(R%Qfo~k=VG3W}=l*LOu5Rsy;Os{1(M2_p?XaJ@JiW!~9Y^77Zt-jm)V!l{
zgSGM}53?K3au?BYE?49p_wm#Y@{~4R2%e%^I_r7h@38jj#)d*^o(>rQ@+d>_0+%gN
zu|GZE^RwV{KmT(;5A-}2^gbtaLqBvxPjp2u^hIxUM`!d$k96;lbV}cII=9O$zw{6B
za!udq3rCJ0KWXVMb2E2{W`^@-61#zZ<~;sq0`GK#WpU4#a^1S~*Q)<?T+j7M*Y#cJ
z^+Er2VE1)lA9iAg^kDCGWIuLeKXh0}%S><f0pWCLzq?PL>QKMetfmMdcbPmMhP{Yl
z>$(JK`SxR8bxu+{HZPAkpZ0fpLn)_q%w~6apLYRyc6!GTX`lBn=ZtGtZNbiGMK<UG
zheG>Sb;l9rf`9dUuTNQ@^=7D{bzgXipLn*gcZxTUe3$oq=XcQ^bz6^!z3_B?^_iPa
z=#Rg6w2N|wzwC%dd6$2AGNJ2RFz%Lz`Lf7(cHel8kM7kbotn3K@Ue5CA9|u!4T~@O
zf_da>2YQ{~c``rwTlsmUA045edaJ+s#W;Gb{|%g<_NM0yywLwTsE_)w-}=|8db3Y^
zwU?mcrunj8`^D&bX#e`vl6ts*7_`58z2AF$RA=z?XugjPxo>v5S1r2_e1B<pho7gz
zM|{VJd98o^%@}-GFZ|MKe92Fk*~R?K?|gcXe9yNG%I|c`hbPVt{jS;k(?@;Qr*qJ6
zea0AlO)vd-T7B4ml)QKAWiNK#?|t9j{ofCM;UE4+w@czb_TvZs<X?W~Z~kO&ejfLG
zb_V?0uMFA0blPVp+pqpa$^ExOe&9!b=O2IaFMsnt|35eW=SP3`Z-4iH|MHLirT%;B
z=YGhze%H_ba@v0T2Z(+G2NEo3@F2p33KueL=<p%Lh!Xz`+N)?W9Y${2HV*4J>tiZW
zoi0u+Y4Rk>lqy%UZ0XWq$d@u_(yVFoCeEBUW9sbb^C!@tJ$VW(YV;`5q)G`Ajd-z>
z$dDg9a@?4aB)_Fvw{q?3^()x04KI)_J7EIWv|`t?ZR_@}!?al8(yeRvp~bs;_ww!Q
z_b*_-X|GoG2oluDynz=pcG<Ks<j9hlrkZT|vddPjFmvv#_c30JP^C_#YW3<|&#G6m
zZY|WTS-GiQ)2>Zhwqo15E$80t`#135!hh}~Nw~1#kcoQ_Z+;ZC^XSqCLZ5EEYxV2e
zeXpuK@#!eirca}uz5P7;^f_Ud#m!tj{P-!|SCs#6zvuh=`uFqizjE+#$w{?bef}9(
zkY)!e*jIK7I;c>B4@&r!D&9#1o_OPRQ(k@(diY^y?43m)h$TixqKPSXm?DcUx(HZt
z#sw%~cq_g*U4u93C{vC*>er)>L81iYK^SHj4S5{uBP5eeA|)bPC^|W%U{X?fpN&^)
zxh0nj0hkeThY{E%a72=+WrSy{XQrA{vPn@zqaB$fM&`A7C!PX9X=R>$8pWrdCl(ke
zp@o8&kBl?Yn5ChOz1b*>k3#C1q?3Z!T}eikrlFF>S^BAtdjbk7shN&iYHN(5x+<%!
zEtzPTVvgBrV3pG9Uz)eFW~;9IRjTQxblU&fE3xs3id(VC5_GDvkg3`%w9$fvD6Fv#
z_^h;CRhaFBymH%CuHPQWiiJ*z7FDpq4l6FZt{sbPyQMN4uU^>FdoRB8Rcozs_U8MO
zxBr$|uE2K%T<~tco;#<y{v!PFTkpySF`@HP9G1fuYkV)Y7b&`E#v8YUsmR+MT=Gx^
zqa2;WaiW`U!-%dtvse<#Nb{K%<BU|uJNwM)zWgHA^Uo2TT(qMqBaPJ2O9vKiXf87x
z^Po;!y`G3VU#+6nTi-;q*I}O-qsNNM3id&DTHUnRcR_t8+Ln>rc55x$BPYxoDp@t%
zeVb(Sx_*P$wcstqT{z+{1}*gA>Dd4Agbz7LF2zU`l`+deWdw4R=1i6GIq07UqV$cn
z(jdiA+LVCEKuD-ilrO6{G)oDUBjmbRl9VvaN~*IikP1Uw#&$z?xS^0eWk{l3Cs_<3
zx#Vu715+8(Llj6EixHo=Sa#!`_ukx#&k*2&kAEQH=bNfN`&2H@Q7>nsElK2AjDATV
z&m%EtIyo#akPoszlZ`Ya2Lhyy0i~co1wK!5|MStd8WIhHIp76H8HPWy2Rwh!<Rc5|
zL<SoI!p$Y51RUH-DzrfmH~0f{D#4%z`{9ogTqc4&L4xoS(!b+P#~aQ=f*YWMh%z`3
zK{-$%M2M(8RkSZM-a8Vf!q@*q^_A~%Qxp`uuE-KAYO#yyc^{2Lg0}qa&mf2};IjNT
z5Ia2ZB?>Iy0R_?tHBw}bIUwPVh~$G44y1w?452`jIFk#|P$9#h;|KkL$AbuRDd_-Y
zAX~T+7`85slG)xuaHx<SPRAaR`&}AyP_8*5@gb71!xFuClq{+0iBpT2D!ErhF2-^<
z>8oXt_=d|}_UBb)0~0i86cVt7BY?W>2ObdFzc$u{36@L<8WCta%ZbuQdgP;?ENB!;
z;)IYa8R1(ViMq^5@`aG(3?>z#NgYNrI&MHDMV`l$Bi1IJyv*fCtcOn*GQ@`FlG-b!
zc+a-Yl9mHq%`FdV(1ZUnlr<gurO;+o5-!jan&a%pGIQcgIL>pL@hqc`u33-=XtOBX
zyoong0#3JxbA{zh$w|>kx|*yrm+frMA)i?gJ5*DS6?Kh08!C`=NJXD@go;rUGPi%;
z4T{a6+A)Rtvw}uds?JI1Ko@G&twsinG?J)9v~kmeV6Q-kv;;o~0*xWsPi0WSs3b(k
zJL=F635$?KQqyS3IeK)bJ-yLV5z@R6WH1Yr^P@J(pn?(%p|5h3!eV`}$c5O0ry($b
z4+wVBA;O7>AsA~vI+xhUP7`|xm_Qb?P)f_GjD95uUS(E_5YDzPwyq1_TpJPy8eH}T
zJY3;q1!BBFB4PiAsf{G&&iGlKR`Rk|SZzN}+Bv`W_P2Wp>OpFnwz1B_4XF)ck%qz6
z(ZQrL>4+;5-+ErT3f8+;0B=Dg!Mj;tZ@O@0FP!4q)`k#~6$(l014&7d`q~e=vv^=Q
z@EYC6DUYtH1*KPrWCf)ewjhe-0An4C%po{eWfdN5ZKHczB;<BkS$F}4X#imntI)D4
z_^oSSAceecxWlL->S*$cWA!q`l>t=}SDi-HAYTWo_tYwpliU|yLX>emqo0OtYKcnv
zbqJrsp>_KK#90K;c+Y#_<LW1c6326|@PvsnrI6(h^~eom@dsHn2!R(Mf&dr50gBHV
z$pkER0yF=t>QFfVXWkOPA3k6TBx#U<_@4H&g1$hBD_G|{=Q)NsxPU+G4C(Odd5;8m
zEd(+s+k+@tt%aRo4pdNROfV!JnC5^DQVr*L5X6rLxvZZ2+-T&!;M20^fPr64=mbFc
zq_z(9pnnZ$wqTc<o4n~eyIemrM$fxrRUnrohr}&+nTS4MrY92^W{?685p^B6J#y;a
zA&@!S_LG7!7a~uH2zVfM)tt9Wo5ScHk%*u}<GKAkDDN&Mu$+z|K@6={T@za2%j)$6
z8h%lX8d?gOZh$~wXmQ4>IsqO9A*vPaaN+u+6TJqt!n2U<SwDQx9iO<R(yg3f7<I=f
zTz3C-XG+<H{a9^CRx-4P4D_oSd6z#QI?~;em7oa|tP$a9T3d}sD-&e5i%dlT34+7S
zuJEr~W^S1~x{#ZK)<Yt#^=TKWXb2Bs<jDN=LLTXHwVE)7CoQ$T|4f|`^)c-PS$nMu
znUI(&ItMN_VQ~Mx=!{>SpW47QjR`{7(z^ZFlIMV_C(gnO>N6E^U-$$plnxVG$k-+A
z$K+jV`0MI?CfbElJLiZ>1kPT#cbq4}8CX57Kd)TxOsn%sjP=@k65F(IEbnn&AZ@&!
zB4t-dz4@JGc<b|>2z+Da?#OOwCSNH)is?W`o`ZAlk@$oqe%rl}@LrSH)DD1v<01bK
z`qh?yjc^WuJ_|p0IiB<UTG#WWxXfG8m3%>$LiiZ?2vpLcjL<D0a1@=<;hY0bU|=vA
zL_O745se!BR6}GG0R0vx#n(^aP+w&ol`+Ik@zp|@pm0UmgZPs|?9oW+*(1?_so8+#
zywpLoon{39S}>laEncp{1SEx8mepY3EyPL9g4>atA}IvkMOUUpU7f8NqQP80oJA7e
z8s-hvIc;9m@Zdm<ADP+1v6)`x8H5(H-cK~2US(fWS>I5xpuLSCXpvyp&EblD-QW2D
zbbXRv6$s?O9=NI1^Cd*|$)VU0*Yz2Z*YTmf?O{=T9{|eGzP+CsmQ)@9V6XobNT$IY
z2I=72{T2&(6b2m{$^Bs7mE1^m;V3$v0!Uz<$ebi}0?lEBoXDcVMa}m_kpfcS#WWx=
z+6DyT($NhgGOm(W$xp~QPegbiByN~4Q5^uGqKR436MO+jai2mA0lB%z+4bE)q?DHV
z1C8;S4h6vLSPuRH;TQ@b9y}ozisL-?k>DNNJ4RiuCEh!l+Bz;v6B<z&j^7qOoGZ2z
zIq6g&up-4-qf5;d8v4{gVv}9$qD{D=A(A2o!c~3n)HMDUyp^FF0uf#16;J)0P6eL`
zS`XGKO(UThKO*8!5kes%k|GXY9(LVVybYXG;>gKg)zuzZ9K<R>Ql|e^4F>&V8rt4L
zOn~4m<Tu&_%PF2c9)#yvA*9fvoYbNLE(8olO;h!p&&gskvWqa5C2JI8Egd6Twxv#Z
z7086lJ4K$9onSOxqh0D`UP6<ZxuBMPV~bcMEVkl7;Mx!trYo9}JQ`A>31Qn!BOf_H
z2q0!b;^SfFU`+Ny6f#3VTB1aF9yVFtKo};)X&yroge1sgok?P9{!T<D1ZeU_vzgew
zZP#yc*_b5+_F2wF!CQ7Q*Kz&Vyp<boqS;*Kk1m}NI}x7<ZRCL2<i53JPOgzdZpBv~
z1T^^MzO~&8_(Cpqre{)|QZgPB90YjU-%~DTRi+UEcwucO+<X6i3N1Q9ErLQB_Sh<z
z3P2?wkhx{SoTYzqhFZoFTL!3sz64w{BU$>@eX`R7QR82FmxM}a5o{;I<>hWFL<*kS
zbb@2+^<!m@rYqXn3zVpdmMA77L>Zjs;5DX*p6H1RS}$Z1Wv*w7#?a>}W@c`tc6tdS
z+*Y9-rHx+RQX-dP{*KB;7L3-NJJRS*0coaDWL?Z=_t}(nosj|Afyx9>8l1s|cBv6q
zXm(vFBQ6VleNN;^&fo1}833kqhE}(IDfK}UnSRhlYC|V@8T5eCO**G!QQKEgVx5lM
z=v^H0AzF$psQ}nuLlPl#HK8`RSd^w`UlG9SQKb|nDvbZ;sJuW!C(x%YE@;l_XIP4*
z`5b7r04S<T#(=6)fvzg7nnZ$%3DH0qWt9>%La4ZXsf6xjnF_>4p<rJc((Q#56E%bk
zhNzQDWyH~dvp(yy>ZT|j#N7#@pg}9P(f}_kE0GQ<wHhU(>L?Tn;WG57La5yR1rV2o
z=IM!Ok-nWiwk80DT(+uMlV;)Rp(~%MYqEZZfBA%O4qmaU)gm}g^q?fKPN=WmWnR)x
zwc!<V>S1vTB(TOQuX=+;wOZ%>6gU{Hnju08K_>!<By&n*gnejfn&*370*6Iu3{6_S
zI%^fUClL;6ZH`~ENe?+LWTjpzh{9~lVj-x|qCWpR1OoEssm5xvsH)N~Myq}eRfx>1
zHZ9e*+A`8=&*aoXq(MdHDoEDp#Ny?`PNxbc#2KM%x1epma;v+ttwY!Wi&~~;3SlQQ
z#GKWr+agF2-lI$HD7l)eiq4Qnt!)If>t!OOkun;RPHWBD=!(9;;7Tc7P$?Y3CWork
zJAo90Dny1ZY;g7i{kQ>{MJ#cO?L5tuB1VKtvQrF2A0DO=pGK#jmh4GJSbnw|03z;y
z5!UK4A=m*VV3w=R4g~w%f<f9}&km*({_d?LtyQ9JE|n^Ox`Xppt*$Vw_4dWn)<mS5
z8zOXN!Ax!Tj_<NCT?P`(oMx=Ve&E=u4a5Kb>iZtVhDKTOS(DmQBuU{d2dE-NfG_A)
zV%b*fJ9Z^ec`LV)quhpo10Y2GB?ONSZ$hkL%PFf29po2ItGvD<wbsXLO7P!FE?iKq
z?G^0^t5sg@mJ4;R2`?;3hOHZ>E{C?MaoQe@0UAyw1PYI=PlW>P#jXyUE_DX#X5g+)
zflv;`LkiuR0MrL~(j3j|Ed*;rXQCs?B`<qEF-*{<xLjuk@*IDTrKpncr(mxb+r{?I
zL}huexrK4Ih;JEN@2p-6(TKvpKIb$|9gIDq^m*>YW#cyPa6-J3Bu2{pj+Eh|o+}m?
zxPj0i)8h<s!@WjfY67MiE^ywGCcghFAtW(@dU|0eU-7-dr$WroK_mb+mB0lkrUjd(
zK3;-6KGI|=u?xK>DXSp}zl8|zF+vRI`-;`?oGnbUup0d47+N7O$FQ4L6qf~8{i>56
z+7!9f+Zh=k{rIp%#uM#Ur&bV2K<-fvonj7F4q@e$%EeGXf}cP*Txyaj6OI7#W}@<<
z9s!VZCAQ1a`eJ{+aj}rGKEK5o%Y=BT@%Ofbav%oYXfg8m<&C&;KPzn<_Y2rCLD`)V
z!g(!9R!vCqvDPtfF)!jr>68bhNH|`y1#cSKxuD8@W1W?h0FNdC5X|^lfdL~j1tVGv
z!SWxPvfsXI_{FEP;_UyGi>v?Da>~B5;<k>S!R<f3=1{WdExUza*2FtG7EiSi)QKQJ
z#T)PCmI}x3=QbZt`7AQeaK(=9<<8Ug#nUtY@S7T<$X+uLGo@OQa8M9Q2Us$7WZES<
zKvJ;)AEjovGTz??uel=O494=?Suv*mZ(wIC8xzYt`(is(Z$n!OKUelz{PRl$v>G>P
zNu1JXj0R{cm{Sb&lrS`Aqv}Hs6WAnAmSPT`!rL=h^!0^mchzwV1F=e0)rM-08e1D^
zHM5CG*b_o>Cf8#siY}fqDe{<*418~Q*;(hgsQXb4QH>u8P%tK&&@IaC+a<u|L@MHa
z@?vKv1P87Pq!4|jm?HnpmE37*Gz7v~An>0d(Hvl~dh%`oS{z>&>9IYodfNeeYpK5i
zMLJ;FEMRPGgVvW>1x2H^Z95O!F;{NuCFmN^EjEvuiIVk<HO0=MWZfc9fvpiqmTl(`
z*PU+bd>i$Omt<l1ueP<X)^5eV3e%wNr0ut*j$CS90D*%-;eBuj1j0rL_-RTdVV`&L
z5>*ydkc_ri+=l03&+U*um62aU!EmwF?kCbxc4`;OWq<isXtqnFu^K=2LDXV+t#N64
zwvM2-nEU5yJ6%bjIP?^e^F8Ph!rPsDRE6gy)=7@eZRnj(j+%9)aF<9_GleNToM^Ib
zDqvcaIzY+ZPNV;48V#&gOB-U8>h+)$F5Z4Oc`vWtc6tg7!>GkGI!n2wce?O^X1GSW
zsgGV_dYU=H>yesRkYc)~@9qD&x)h!#vqA4m*m<9)jlu3IQt~<U_&J5w>E~Yfv5QqS
zdAN%6-myExFeE$l?B0hj*q!I*8EBiy@*Bwl>WVLgnZRwQqmJ82g08u&Vs<(Qc+@!q
zt|xUmrH9rhCN?~Svi;G!LVrtSOSYHCd7p$i!fyqcyF~YzoBw`xA!eLu<3+_c37ju{
zS<X2Z%>zUaNrI<DNPh~OR03&V$fvsbnh*Q|lGjO87RwLV#p6fHo2iXc{K@yP%TGi=
zBQzrJJVyV~bz9`JnW9VFO+{4695|qH)G~#`Co#`+B>;rR$Pbmz7dS-FmtO|7&_`;{
zw*;PEJOQzU*GGK36g*TdoyLQT!moW&G<=yieM_jh*%CWksr-v%yxRjK$LsyZ5Pe$$
ze&6uq-WNQQK-Jz`cGkds;{ONZo5X<$wB!rDDNVd^xz)_^&CCaVj;%b@qYs)l{`itj
zlVM<7hQ8kjep#x1+ps<|F1ikRahLnO=pRVi*FI1@en~{W<WGJ|(0$s7eIuA#NI?8f
zwHxslKk_F(n;Qu2<Gzyh{qsW%;k&)-hfVdby_RozFB<&8LqC<=KKQ?-?n}gI_r5^?
zzUBYdJkAda``<lkUOau3So6b`<;%zPkN;MYe(3|muwJtWrW)1BUc!X^7&dhH5Mo4$
z6Dd}-coAbpjT<?3^!O2^MuQ<qmNa=1WlEJRS+;aJ(q&AUGilbesS@T*ojZB<^!bxz
z&W#G~buxHVpg?U)(=~NU6lhebQ>j+9dKGKb3tPEPm@p4&*sNp8mNk2}W>~RT5w&&u
z7A_)^k|agc)(O!phjb(IZJ4*AHbmMW<`hiW;jqDI8ADvy7;<FElPOoWd|9g6r%aO;
zJh~QhXwf%?jy8Q7HOW@1Qnz-^v-E4(vs=f;NYp6Oq?|W{ru`duaN&}>cGc{Acyj;c
z%QYT{YSnGOxNW6V4@q}=Tf__xM^wBWFhjo&(=G1T{o%03%v-K!{~msP`SUO53%hw~
zXU_=T)AwK2w*LeiaH9YTJg_kX5nPbLRZ{T?H{EvQ?WyM&yb!|-%_@#7=latS#1L)r
z@WZI0%dR@Pu9Jip{bs=np@wELkG$~gq0z>NY}8If2uth{$RLFr@+y7qbBZ$;4ML8{
zCM{CX$tXu#P0A`)g3`(?CBssp2qjdH!U})XlFTv(<Zvqz&0JGRHQAyL#pqU)Xhyvl
zN=3zpc2w^?L~=vQARF)UGZkjWB=S%;6<w6k|Lh~m9sHzGa>+y+4N;W`FWvvtDlR$A
zlFCm-1&S3-Ir37%FvYZV)K*>13eB(Fe3jPVX07VP=~A4lE{Uw`=aWSy+LJp%0Yxgk
zK>cJ@L}qJ!7TRcUat@p%^*e}3Y5((7+iol3*4qrh4VPRQO&v<1KMR_Wn^m1H7v6X)
ziuG1`?Io+;sd9~L*EuD^OU68FwDU$j-=R^YMG%hi-FqE=*wsfNMKV7n`D+;B)*Q_E
z;c+>R&*P6>4Vk-y)Fp^rcQF>3<x%O)x8;~!g4skkb(IsO@d`8VJG*e?Q@U2Vd<?7_
zZ^?3HnU!7|Lu#$v@8YDHj*R4~6|LH8*|5&K%ur8FSClUeWlCkP&EEg?W#`UbyCa%`
z>KVnJ{f!9Eq7Obd;Ky)WxKBRu)HB8^rDmJ(!cW`hNQy0v+VIhieLPdhSCgFb$|rXa
zbIT*wob%2v&)oCSMIW7X&`UoZ_0&~|ym97CU;XvhVV|A$+GDp}_RVqMo%i1H&Ir|Y
z!6e(=){Sp6?c<JLzGUUea%&)*OVT+#8fOe=;J|1s@AqE?!zFtw2WOuA@~3jT;%gZ<
zpK9MfcOU-T<9}cN`scU*e*5XqpMBc$*ByWV6W{;|SU>~r?{hvf87Rc2s%-TSg7Hb7
zW+KQox9LkexR4&Nx+FL8<i#m73S8e3vn++sB^`SK;R$;szVZK65QZ@<3Hs8vp9jhi
zhdI>Y4$T)llnsw~H{{_EM>9bR60v0$lnV5GvB9}HCP%=63&Dy7v|_zwgaN~1Jhb#e
zBz`f6G+dkz!B|E!o)L|%@?pwU=EXF=(I!SDBOJA*#G2*h7Eatrq~7(w3X#c;bQC1p
zj5IODjWLjeROBKV*~r<fk&VT3<Rp6{$2n5+Q+5Oj6ZOc$L}C(@_mY?)pJu~Ph7y&j
zROKpX2DSzU@sg~R<wYzR%UO0&lRn|(ufBN7TmCYWq&y@ppk_;89ut|#{3RrTs4^od
z6PgjJr7xq2pj_&*EyV2P4yjp9Z#Jorq%7r8*7r?wo)iC_bY$kFU}?;BQgWKzd?$Ra
z*%Rz6Wt%#b=REmIAbtol9OL}VKKofvgB}!K>vW(y5emn6611VTsV7gqcPB|~r<V|o
z=th4NPH{E^ks9UbNJ&~!hPg6T3l*tJ$@fr}YG|SnUFl0{N|{kkOrXJHXia(AQ=c{s
zrNWDbN@x1hwYk)&1Bz)wi<(rYQbmmFE9X<GT2-skGpIi#YE!Q&Go*I)JxfI>SHW7=
zRsyt!rX*_`4+y}vz7?)<mFxac=hV606|Z^K>t0#YwyZ`{l4c#^R|T6Ku^x1-g;gv`
zqN=`~{*teemF#3GYdgDEHh`Gb>}E@)R|OX3mF@qu&|+~&SknIHum(-+X;}+Aw5FAu
zkG<vATKlBF8kM%Sr3lFsD%#cRHe99!Zfa6n(BBRhxy}1%NRRu)+$Oh#b`=_QPm-z6
zo(!<7qOSRbyIsr_x1Y`R?r9raOz}GRcjM*AbKl8c>hkulfR(L!Th?9rP6oXEJnwzY
zT3)s8mxu0!?#7ZT;N-%0fuU_9e_Ll?1~(?Z^91mNt?J*{PB_5RrEo^9Tj2C=xPu?I
zNN;_MVGw7@!6(L7gwtta75mh}19dSD3H;*Siuk1lMlOOutKh)e*lH;TvQ=2z;u#Ow
zq%jWLd}XQQ;X2uyP}VJvu`6FDBe`2b#&Z8=ihRx^Z+WCjo+>}3T-!23(`#V9lZMfi
zU>|E&%`ww*oO{w`FMpZN2SprOK`PZNuky^S4RkUGP1+i_xyLCjF`o0xpgA{sT6X>>
zqam%|*ACUsl#XDU)m-RfavIDX{+gSGx@h}UI%AJU^-Lr^X-%)%oO|YTreDoIPb>D;
zki{{Osr=?2!&+Xd26lT|UCmk#JDOttvnq2fSWxq{*=D73*c4r2WZO&F*G@^XjeTrw
zAM>V?f-M7=eV!CzGTLQLck@EIZuWTFNr!Gue3i23Z^J9w_nslQp$Tt&&(fnfg{_QV
zSRN$!AO{JTLKe?c27;9#5I^Ze88H947l((dYBZ1nP_$8kJRv~^M4E*O>|mBGyx=4!
zmyyS3^6Z&N;@}DQK^Ay{?p>Q@<R!Pr$QjNPL^!}79N<m~+|Uq}V<zW+NkPTm(`#Rs
z``={Bcho<^?|%E6>ZuI(FljwLn9n>Aff_;%n6RF7<lqtwnR!c=Vv#`Pz={p&1P^rX
zEm2p5oep^b%6~Epf0UsiCh$i~2r`<&Q=}7rw@NzjMuP;L#PM=hyi9U!kAqhs?06Y_
z-5cq0#w32@7D;@>qv92abH^V*Q2XOC1A3$TgNpDe)pe;|YI|p0T2se8qK{})tnVI_
z%6{S7k#O$4kli6?Z=oGps1pAvWWnulFH8>PP%cmTVDNh9yHETMc!re02Q9fk35rO5
ziVOqoRtbbZMi_aMxc@xqr~J)T0{-TIU;2)8cS+DMur7^0D*TS~&W`l@0sbtb|6VWl
znvVX4CeduKU49MtUPbpN@HR*UA2Lt_H;@B6&;vgZ1Vc~+N00<d&;(Bq1yfK3SC9o;
z&;>)VWGqm(wvOw}YjCt-=1Rm4<S+j2uO*%@`r>ZximqJbZ6dJmA@=TVCQl~Dulyuq
z{n`%!AdmG(<F;r52Z<0Oh5!jBY5!~j0D&S3DdGS}!wq1MKBn#IpiTybqypQ}0Wt6e
z=a3HT&<^hq5A#qD_b~qk;gGyuYuv_cBfKF0BEs@QuLo%Y2rJ_4tSA+zFJ7)M`x?Rl
zwy!6;k0zW@G&B)1#&Gqha3^kU?s~2t+#m-4K>r%B_57g#eZmgVa3ac3G|q4V*~9Zj
zjMTJhtNgH4-jEj^Lk{;)7>AJ<i_sX5Q4jm@7Yj?)maFSN0tXRMA_Bqt5>Y%BP%+9N
z3&IW}F5yASLmRm<V7L&4hNTc6Q48sW8X?Y#qQMc2FZmoH?wkZmCe8!??h0Zg0#HsG
zyg&s?U<gPt6{O%FeV`SiF9ZM*Z!l3jsxdIY&jYB>Jx;G53vz_^zzPyz0<544m@fH1
zjssL+2t3jrOfml<t-vFJg$iB(1Yp1+8Nv=qZWzko1*pg*Umy!GDi5+iBd;JQB_bWH
zz*G={3-B)lAQ2;m0VEYNJ$|w&!Q=`Y59}Di{dVvuIWI8?@+u(${(|y%PA(*A!2dkr
z7FS{xcraP|W8$8V5IzJPxACHCgfQMx9KC}mw=unLL>nOv9>c{5cS|b`(me*!WOCpn
zeXv-3;3O+<7Jd>D6jS5Oj^?@%Bo_`?Sdk*cVKS9+1h!H~te{VjQap^H1OQTC2J!_`
zZySv+aAZ*%AW|YT0yRlMFtd^{tWpKE5at$BPiP<^aZ)l(g%;CL6@l>qb@BF=5pB@K
z>ToX@krDqoqf<JklREKG8I`lFgimTD0WB>;`P42Qr9%gXU@t|JA&@`~&Qc2E0Q`Jl
z`J4dZo^KxiBLC2_B1{oI+cQtHus0E-F%h#zu*40vBIqu_`zrD0E+7Y90O-763;iJh
zRKW54!4ijt10d8l2_W?ng9*#<=Lp~^FZ2Se2th#<2N<+NFJJ&bbVNHyLlsm-F*7k#
zlml!a1T=IkzW_o@AVVF1ib7HnG!zzxfkt~YPYe@6x8lPX(f|{HNGowdY2YHt07Dlv
z0hq89VR0`ovlR$b0u+=gopdW+AW9!JLS<kAD0DsGk4Z0+LamfSN#fS*0r`@0?A9|2
z5N`hz(nAPl&JCmh;iw1)LBSFb?oW%LPIZLr$}>DU6Fp-NZx#_+xJ3$fv`4LoC(#c>
zO8@~jG(C#+MiW3_&ae|wQ$j}|=(eLxo76-bGz=vo6<F~MHWlbX0HcP$AG9G&na~Aj
zRZU^iOTqL!QdCE-G(=PNA}aMv)6^29&{S(cMWvJ{Ym`$p03Oq!NRjjcxCr&CaX9Bg
z4cGAZu(L9J5j&r=I@48M*OgtT^E%1(s<bm{cCZ$Qh6l;hA>OVPL1FETjvO7r6m1gv
z7*YD{lOm$>B6-jXh9Dw{01+SYAcN%YC;|!f?n+zH@dU;QJQXGhph6u(BS(l+tC9an
z4-gT4^-jFvF@TN$Fjhtxf)ghqO@EXCfJRp*z*N$KQ_rPRrSvb56=peL0#tyCLN+jV
zR{JWVWFfQ*UyoraB1nC9=yJ6o;y_C!FHbx%OcS7KzmH@4fe60#6)llXnGjoBboH>3
zBPMnxc2ElDlTW2F8dWt>@sEnA&pnT?Yhltn4fZ^JU^{{ma08=mYef=IQAU7nJEk=O
zq)=*y6=#oDORcsNjW1S(u3H^KD)SXYUzTnt6iaz>0vrNYGxjkqG#%+6=s5RW(t%ii
zwgfC!Wh(+#pSELJ;AhiB?NYCCB~Kb}^ddQyNxxM-!W9A+3|<+<T$K}D+tvShpBH+g
zHwE7{d8tZXKLY&vvLe3oJhhMjyRi@tj^X;XdxP*15l(w$q&rK|c1Mv<F+qFkRYW8)
z39)ooVIXlI*K2VMR~M21MmKZA)M5*R2_e9KUH5Tg_Hz+eMmqFrgElZcmMdTOLPJh-
zA9x=sF=@}wf%Uf^gtj7NQFRNDc(L|p9Ty@%81+1uN=>C~y_Nma<7+#j*>-SINfB&`
zU@%4V;35JE5D^F0_c7ZqJjD|+zBenIZ&{+{FA4Z#XMtmR@_|2COLYK)HP~wbm~@Af
z38C17*Uxha*nYv5331f{;PDk-GD}JLYF!r*4^VeGbYLYyS6LVq*H8b8J2r*~81<wP
zf&(~9<ySe37dfr1dKG1Pm$7-JmysLUk)4-%4>_p<P9C_<u?8nkH-dY?RttCVL-6%)
zeRz&JIr{X~Z@18ox#M16(iF!vE9jSxlQ0B!H+>^?Xe1aSvcOgW8UEHUVw;o_r!a+Q
znG((KmMs`ydqo>&cz@4xiggwdFEs5UIQ(*1OBI-atFZ>AxMC;bhaH0nOISQ!R%@H|
zce)w-YFTPum_8$7XhR~}3{K{d0AbG35unKX9uYCQlVA!LJn8e3wa`4*%=*~u2&dQp
zsWwYL_A;M#nXCCBGSzEGxnq^tfot(Xf4PAjKq4F<19o?BsTlupAVMQgIQd>zI>K0h
z4_ci&Hl*!gbsvIF3-J>HS)3X0x)`Y1kXMq;B$0n{ksn#8hnlE|F_L@Qr)aPSFHCA$
zxj9zZUnL?75b>LHSsIyuqI*;R^wkgtTJ1;}qN%coqXd?VIU*9$tj`*A`$DC&xu(hZ
zLzqCJAAp!20<F`UA}+M}e5I{}R7Gy|B2@Ti$MQ1s1e;}8n<sIL`v?ibd5SNAocDO8
zBU+&a+pgD|ohf4dMgX3Rb0yvZPvR439y5K9FMW}iKO+MCqFS}78tq(pIJg9`ReO(l
zQf(Ommrs_k{koZpRYjQ8vbR{H?}V8ryMG^|xPiH%Px}9js}NV?TCr1jtuMP{BNmsp
z_*;OkfnivXlcR}oF&C|j4Ut+vewr79x~S7zz1Mqsxr4l)>Uuq*5udt+Kskrczzy<S
zzYmqQBl@bppp*fYrd1hF_dCDIHvvbpyM^StWjeaCn7VNrO39SM8I+?XqJ=G@WUEjG
zJhs9q{6hHz!X4tS|Cl0XAx4=JU@7#&DSYy5*&>2_T3ehY3)q+?V#6b138I@$Ad+Pr
zdjTsUvZc_6=X&pGT)QWGRRu#acNJwl;tTn9B>C1NOmQNR5(f#}i2v5W@teQ715m*(
zCAEc1Mx1kXjweY`g=d_`C-0_({I_j<8r#};CF1|Nof#fim6n$~f}1<=JiNt2d?Nmr
z#x0!BHyFDWwZ<WI5{DO|nS+qUd$iuWO3d32(VM+9UDG!`1Kpd_jf#>j*#?t_pSPE8
zE#aT3GC#XKzf;}6Nw*7v@FNE|F&358-9Tfh+IF*~tYMa+?;56umIj8M*ol22Ds{ng
z9A*K%*ooav%-qC3_{KFm2P7a#>zl=GpxK9=^qzboLh>O>ciV}*01sP^-#XDdh*N`(
z?7|MnyK%@bSjQE*O2_>M-nvb5fYCM14eGeFsp9Q=C6g;+we6e;2Xz`5*w$H{4w^FN
zkiZw<rNQy~AzUwzB|?S8ecZ+J&`o$)t1<sh*?PDybF9gjPwu?V=iN?Tv2{`ULN|Wc
zBi<0}ecU@9w{_q_SG-DTuA3cw!G$BzB^|au{VFUS4lx}%&p{QkgXx)w)1RKbkDBOB
z>Yrxq89f61)Y!j|7^=(HBC7h;``aAjPCefjBe-)edtl^=q}QcgttmbuUJ*dgeX>*Y
zBB0&v;oc%%GfmO_(e(}l0=uqzdtRp9ttUI(4bk+j_1$$O-qHQ_76QgYxC)mR;v@Vc
zZjG1tln6bUVBHeSy_(9szBxKUe65ca0(-j8+-tSmqX~Z^ZW^-Vyc+R-jZZweZD0~n
zzK`u(p;?}}-`egwV)BPYvMI3#a^C-IUm%NmzVVCKvy(3u2cnrIaO#P~=-UwKk#Xsp
z-uqPn>chXNrT+RyD%3@tsig)`-+^L*xa)J+0ZCuLVO`c0H9SS%+&(hmNV`k`LRG4M
z1PdB8=)>PZ2rmv26v3e&hY1b|YSUJcU?+cBDt405$s)&sG!hgX;t!+4bi*VzbQmI{
z%ZvrJ4Lq2RKnQ|}{Mo5!ujNCN6@3f<b3ly0k+{=f&z~!WJ}f~~WEqk~4?amr(~eJv
zvqtjtchjJhtzSb@t;hsxzlj+yo|P&xN5uqCquTA4D(v08d)?$nmvLSWH#~DVHQ0$T
zUc(h<<uI#la7HOePFAj%4sbt~D}8kT<O@2q=+UH0n?9X)?+gMNQ3}oC6{kPB{gwiC
z>ISSsNo0q`4$&ZE!az||`Kt?)B0-c66(C>eprBU0Ii<Yq=Nj|j<ZV?3(!G#2!T}PM
zAAF$@F2UThPP=~(pXMsPq3zkX*D0_5Vf-)p&kW#w_QgkFfd(FkV1f!R$Y6sGJ_uoi
zrd>c`g%eODV1@%q$YF;beh6ZSB0{KPiTIp|Vu~uR$YP5ws)z_8@x0h#JTcOUV~#rR
z$YYN_{s?4{Lhe}8h(;cXWRglQ$z+pGJ_#jh`IHEtfBnsZ<$fEQ_7PJR`DNB-kDa7g
zZHyf>jAYB5QBfAwk$G1jXC74l#+U_V;lq}Ng}L5QNPHG$pmwFUS3(QDbWltu`6J10
z$I)a@0_GXSfm*&zMNmlv@phR(?>G=0K@lKIsZ3AVm0P3drI%AutG3q<Y;ri7=c%6R
zRFMkct@T_*mtHrXp5wtPR%{y)2OT2P?b?r~4lSV;5{x>EsIz!^#T%vub=B)=^GS$^
zom|-&nU@G%R&GUgY8Dv}Ds7tsvSt!nlbRpV+oz!VHrNV%8Rb@HO_JW}PpDRr)oQNb
z(ZOt4>S0ILtr1sbT*KEMwOo1z!C<j*wbsULb=Psa5~xv0t14oTg3PC=;$64$LK^?N
zp2hnnC{Sqv=C|K1SN<3Opnx|IO?1&lAC2^a7Ft-MhDkpSb<|Sp+;r7L3VGv?S^p?X
zeqQrDOEp*1==0cSpN)3fE*3d;+it%NcieK%O*NI>Sjk_Od4(h_X;P?pP`KKPSqYpZ
zy(!k5f3}G@c7W0(=XQrX)eGPj88xn)Eo;;b-4cFVsK%m_I+I8jgd_9j#di7?qBJ*K
z)mjA5mqTn0kZx=4ZN+Sn$r%q0vI+t_uwA8Lap3Brz-uLZ=`_7=ZLp9}d~IwA8>EIm
z5r4<$4Y4n}p-!4fw5zo==k&6uypu*Kgy{_7gXH!g@o}v22QIE2JK)=8y`Jg$w=Mmk
zamzW=`yRKP#$n0-b4JVAUMRGk+NBIOvpL8{Oa-y!#f&|UQr5M!m6Hj)D^m%eo&~iR
zg7Ix80|a;%b7a%2bX015)43Jmq6Zw>#RfCtOP#~Q;}Am)C5YOqNo+XCK)$q3G&}2B
z&-w$jp!F?@RIH*EugIjORj6uH#G)6!2*$v0(L`#~(bjr&#vVx`MxD4s8{No8Zj|vv
zU7MpF?}*12u`P^z?4uw52uPw;tx6Zko8I`=MbOMI2U0*pdu;MI1imk2LkJisjM9lh
z;>m++Vw_lp0FFdPt}U384kJ^MnNHA8a@f&9{R)zbcm>iuON`1`WTcYYRYXzCa)2Ac
zCW#X45Gca`q=AfP0UHO54|=hig#$Q}$yoAEm)t4OFfv0ECmcr-7ePd&IB5^y$P$?Z
zP^MDKSq4-FbBD-Vi8#4QPIFolo4$%o^uR}x5W3+asw}`*LJ$^|&_JC+m`%hsf&_Zr
zGh-XliZ6jF%*L6|p0l}TDzb1p<Bd=>wRBJ{ePD-c21OF^<J0><dd*?jVF$qbTOd*@
zr^iKxq)5mlBz@4bQD9P&vNUBnGlR_gU5<dW3{gjKBdMPTLRa;Z6<uE1PvXfeUfzf&
z4K2nS556u|1yiapwIVNyafCv2;7=MRFtHcXsbC>R<^?8JLnGd>na`9$G;4Q)yEych
z+E^$5;<(qG^udl`DnR8d?0~$Ig!F^U!dDoNx|b$C5sFdFP*E?7+01%Qix(PWA~g%z
z&?d>VdE8MNO)DcHt&v6Upv7s=R>#uHcD8BTqiAo7+uZ8bi-Y6_-VC`n%eqHSIVi4i
zH#bSc)#Pu+9YV_%_bde(MO+RUWkzU<82B}pm1YVUEPJ|Jim8GxzR@0SsF^4X;^nQ{
zV=G^z)!vG3i=sHuReV{;t6gHyp(ey00piO6aAqvNG}!2R0c@`PRs<yk-Y9<)ELULR
zlP0qOPJ1^H67=i}zS@I8ASyAjN)?QR6_M7KQo-I1CwQVDEXjolQwHsMH#CrC&@k}-
z)ZA09q)yEhaAA5}Ur^YC$HhegE49Jg<L+j<MW$Cg7#ZFN)p#WuR`FVGB4QL87-9|f
zuVX>1)nRs`0t6n$v5K>mDi;hB2SX}=@fFvH-7_8bZ7+Ulf?@=pb8`d`tPlrmXMI$R
z28^wlW5GD(s7UsSm6hT?q73OsOBz9(#Sj-Kjp<CAhP1SO(QD7qHA#r#94v~_YjM<w
zMz!b`j+|pERNd)V%bG{F)wHc|jq6;$r?<a7BqBc>n%0V1g;MIzdlq=0poA?dB<1d{
z6Kz3m>a2~<e%>H5iJF%JThWM69albFZIxmhQq(4mxQVS4ZzJg3+cIz}v`u0EM^0Pb
zr0HvFYf|mIKwCjJS>v)5jY_-NWXm(f_h<8A?0n`0-MTK&zN5Wm*t~1lc44=H(y_)Z
z-{zqA77fOwZJ>Ai>n`}AcY#WN7|w|H;Xttu*s?^~MsK^}G_QFeEA3gE>s->Do;8f_
zog!1maYaJ^(P~=+j#ig3wmxsV(^X`VolAY{RL8A8?AB{v3s=)ixU;TVUiGkZ2<%2H
zxY(IQcDqR2XvTr?**)jL(JUI~F?aOL-;VdZ3kv5s*Sp_&+jFO%_7g&9BhgL$qf~qP
z6Dul)Ktyp1QnP3odxQLnm=2D}<Ad_$K2bGX!Lu2uC>oVt#?wzvq`UwBef6ww{fKy-
zbuFp>wvJKvvq$dw+`lL7L^HeY$Bz5bti5P$|GnFIA9egpw(fQ}zVn~&AiiH3`qVdC
z-~|u#6BQouKR-2%j?SWLDBbgGbmJSNarm#L@zp3=hKvaBwO03{+pk_f8wu}y)a$?2
z)$hOm|KD;Y5_^@mb&;lQ@FR7|2Y{^yI&$NC3m9_2M;gONG{pyjLxX&Chb7F{d>80}
zA1Hm(_kkk_BG=b+r?q`3n0-8=crDU-+9z$~ms%+Df}1yf_`rTLh;4L4e_}&^nrDLn
z_k;RJge($uB#4AbD0Z+{NWhhYv!_{UQd|u8b*-R;)fabh^MF_XI2sDrCTdZE{l$ex
zl7;ngA1}9o99V#3$cBFxf=$zgacCeW=yRvlMuqolFc>7@mm=<WgYPDJLC1JQ_;V@p
zgnl@BF@k=ANP{!jh(!pAC~|~yNQspwT1@DKvIm8k#UE7HfR^}oUZ^iYL4}~WE#pNX
zDz%A6G7lYRiXW1JXSjSaw}!81i?{ZMaCnQm7=U!xX{VKRg%?WQ2Wvc1ekpi^=a7t^
zH-p@ON|)z|hq#P`2Wx<Md65W-{Kt#i$c=4-iJ6#(-FP&jD2`D^j^%hW=ZKEE6^kzC
zM07`sLbHzZ2wJ&Vi}YBDz9?&h_jz&D3vv{6+^0s3KzE@3R|(zLhs$V#K8SRDh<VdE
zh=$mV`G<|Dr;YfCkr^o>-{^$lsF6^jjvskhAt{nc(k~^MYwf6fvlx%7h>|afH1>Fp
zFiC>?7;9%Ve?8cbiWra-*&>Tjj1uVz?MHv_=tRj#diW=hI9QF2h$73V3ek9frdN^K
zIEgfgm05WjkA`(k*pV}-l^sHoVd+I<NtO~~mS<T-pJ;~e$dd7>mT?)AoYi-734u2G
zixY{AOIdV2!iR;(gGO0;i)e#WnR!x4lmN+yDiW2KcZUjDl|FZoc1f8q$&p&;l9l-$
zC#jh$hl-u~B%BGFnpK91B#UopcbPewtEnI|36`w?$$EH6TU(QpdpUkS*^oiGm<x#`
z^JjSy37mwun~&Hc&WM|lSz40`o6E_IT-lYGI0_!goCuPZ)A=;jX`NDno!QBDt57#9
z$!INkb=*mw4C0!qS)L6io3llmwrO~J2qZx1B7`S-(Eyo&_?J8woV*Dm<HeZG7>LA)
zoKB~l>1m)yc$tUvng^;x63C!*BbpByA=@dTAZdl9p@AIOffdT3p>dw**`Wrwo~5-l
zkGYqK)RzP4BBC&nm%t*Or;rZWl#2P3{<)tN*PjDQpjR29Jz9NJ@|@5qoj$5>{qlIF
zhoniWq)R#<OzNah3Z+IGrBf=URBEM1+N4$gdZk;+rC8dfUkavSnx$MyqzodaXNsn2
zs-|8#rfce^ZwjYzDyOCQooJ|`?y#U`+Myo`qI!B;BTAw($fE8Uktu47x+$Pc*$atS
zsJdBy`{{l(s(m&ppw^g>gsG#lR-k^$sb@Ey0yuzA*rx_Mr=@DDY<jAx+NN5ns;%m(
zsHz{GdLXY#tF>yYx4Nphs;f*|r>L2lqbjSN$)~|ebAXyh?dhJy@RUnwT8PSwR2i6J
za}KN)gFz@qnRk$u%9M#obd;)}%L;^tm4}(yX`4!{=Sp)x3aVa-nZSy!?+UN+dW9LP
zp?NB=(>bj7ifP7*M`tvs$T(`tdYpj&8GcBKhXGoc_g9$DD2<Ye4^ZipCJLG4DqH5N
zuNSLZ2}*$Oim@H*u^)?f^jfd>3bK@$uO*vX{CY<NOR%#wtq$9V&{|sVPz})lvlL5P
z7K^ew+ehlEA)y)yL&~#5OSDC+b0XW49BZ`mc(O}-St@HsEE|wGOSM&tBRcD}SsOPR
ztBG3cwO<RinkBN#khEbdmrZN7VFa~vB(=+GwQmczlE|ZJOSe+voIe|?LR+_c%eQ@t
zG)P;veoK>RE4WFtwq?||@ENy@i?di;xQ}ZjTq~-OOSzS6xg~g-;R%<QtC57uxo&f~
zY7>?2X`9~4xThPLj{CW*t00p9tGBERyRj>~y=bQ+OR}>ohn|bOM-#fDOS;IY3V4dT
z!<)KuySvAGa$PxquZz6R>%4nAwt@S+uc*7zD=587yxFV0XrsE;>%B#?uFxQ)xBI>2
zYrgUdxSM;vxl5OIxxP?>z1u6l^Xnts`@YEQvl$W&c}u?c>%afYq0y_p0IY=7OTe!e
zzx1oX3v7hOd%)i7y8ZjW6P%H|%BmKO!5OT<8=R}WilLbckJ3xQ9%#TL+#w0fz$whY
z_G`kI`>A-#t_rHOElk6d*ufl(!#RAzI?Thc3Z}j4s~cLw|5w68>>wzt!bvQ@ENsMu
z%MU?1zBAm!Q%r&sTDdC!S-Z9?#Z=sIMa;zrg2YNJ#>30RUtG5@tiSxb#b(UL)Mv$%
z%a*3;mYRF5Lfpo==f!snA7MPkeH^!CtjAxQzl5a5YaGaj{C5#bz@;h2S!}ZdjL55(
z$C3QOeC)@UOtFAW$wnK&hP=t2Om&RxzgTRPyr9LN49d4P$*CM!mW;`-JfND)$|&2(
zs65NJY-?`}xmXMeLF{O_e0Hl0%)RK!ux!jlD9gi)v9)Z=%IwVS=%D9|#lHN@&n$Jq
zY|Y81i&@*u*-WI&?9JhPcDnqySR9>n{Hx+zbJ%Rn?z^<ztj-*Y#_~YO;@gqT8_)Ti
z%NP2<qTI^h8N!hNtk0Up&d==5oD9zcZJ^++&<&l-(QLlc?8_4D(3(}y&V0~Co6r@_
zoeX`i^&CYZU0EDWljK~u<~-39P13V;(aN0BM7z-|&72+`uOIijwmEJxEs`cJxc*FX
za~#kDt<$*G(!>1HLmSgWy_z%)uYKhPA9mB*_tYAv)ac05ek;-FoX%C9TSX1bN6oWI
z&DEO8)bHxlVI$IMT}a?I));x!A1KysgVI`U$8BxV?JI&L4c0pw*LEG3WgQxBPzHld
z*kxb`CRc3qgE0mo2{Yz__D0o;W^rv?*oBSQu&K!8_0$KF7^ZPpf(_bFozo7I4!;yx
zrkx-|7TTcy{b8lZ7otEvZucICZADof)LZS>^@!JbUD10@%YB{OVR^S{9K#!{n(#vz
z$*tH>W*VC`3JBsCX!67m2-$LH6Ks9QMxoqEW@P%JasbGCegR5b>0n;R7c^DbiXB!A
zvW28{Xz_7C>8;+U@h557NS@-_Q4`0Fe9pIx+rfQVUX9DXU9!Lp;8_XSpn-tjHie}D
zQVJ5?-<5C9SKW<lYLRWkrG!7P^du_<fth_5lY|88EgFt7LVIA|d(mt=HUuP|An5>a
z0yhNj4Il60;z0#Gpphn~mmv3jCyxDk^YGIR3dD3>%?BRfyS>eNP2eAE;7AUW!wu3=
zeB3Gju1YB$6=?#|r4iv8F(&|6;jMfNZDa>it;ZT}L6+0u9A15CM^g4+2Uva=Cax56
z&TKQD5qOf{93l;P{^BhTIe<PIswBlez8*jxBFg64EJ5QI<eila&}sO{LJj48B;dE)
z<WBzNl`fJA&KC=w5i7Oj@G|P7(dCOV;l>x{A#P?dvIl0K-9%*>g5u!|n0EI~=f&pd
z`64ANUJ;kD>qZh8jlPvO9u;~%8gH&3h8`=34k9dJQ!Qs^LO3Y=%tRn8=_1VOest-x
zoar9B>D#W6gFNM5iJqVi6#s)Jh(OrX(b$6_pGqOvS%BI~v1O9r3#Mcdjo=rDUFxj=
zx9R}5Mjw_Ku4u++ZWW6yZ7MZ5?$_?SF%V8o@9dHo^v*wKaZys>1|YZZRe)0*-{$|G
z>l(ijAiwW`(TZ_S@Vx$RhP~y!&K1tJ?-~)~c){+le)8A#NG6XLjlJ<0(G0;(^M>uB
zI8pTCnooj$8%hsLHxKg7@b3QRDL0Sv1ThP$V`gH(6j!hD2f61F0`2*MZejm#gYxg-
z8|kMU?&5AF-OkG2-mz=X_VhT<<=(EDiSBLkO5svTZV=l8f@F$K8UAC~es4L+6-4q9
z;epRcPT(aZPkjMzZGix8;)>xzjPU0|CVa2(#YOK-z)0R87U^UZf^8HR5!;6U&nIP&
zP<T=WagIrw!d#R=NzT4{WETg2HQw-IU^~7UZZZV4Ul^sW@vtx3Y5v~69xewY^L<kM
zE;ahTBJ+qZ9l`(9v_I^g;`)Jr2KCMRhJXCVelp9`_okmR8E^fZbmfN)`$AUz6`}0Q
z!4%vd+gWh=5u$9OCQ|rzegI*w-#~%|38qSAP~k#?0_}A|7}3`-irOru!<f;bLxvqa
zegqj(<VcbwO`b%VQsqjPEnU8Z8B^v=nj<gV#Cdb$PL4Hw{sbCS=uo0XjiTh4^ypHi
zO`Sd^*%Rtis#UFC#hO*?R<2!1=1ZFKV#QfyBkoK&1j)xhIffBz8>nFaC?91C4s&Zz
zZMuSX@(xUwL(;+=atFE@GWRdw98$bKE~*U?B5fe;@v0Ok5X5xDCRc_WTJ&hrHS03$
zRG2a1Kzs+ry}Oqn655>_)|H~BU=|;{X-k=RTX5gr1{;?~-m;Y{lJkflx;;2H=-9Ik
z4x!$!EfeV1yL*&0#QH+saEI8j@|NHiBet*GeT`jVp0)h~yN_>pU@9bt$J?hZJH)7)
z<vb)3^60*g%Bb(K1N#~Rzkb5&2`@VgVz3?a7NT&r3q8!r9&J*QgtLP>DKWc`SV7RF
zjUbYUtg$pgD>)l)#4$%5cQh!coWiP+M<ItKa!4ShDl$nWi$Ze$NhhC#GD<0@<O)c!
zq#?_!QEY3nB(**Y55d6PP^gl{@M>|w#a4@sF#QlyOg*?Hq!KyFDEsKLOD2<K7{2aQ
zu}(n;)$z3X>f$H|)ovrxAZ-@y2Z`Z!J1)-kD%Gn&?TYJ*PC_3;h@=kJb8I?=(7aB-
z^Autbq%coq5I;m@yUx?p#(Pw{-9A*1O@j&)Z$nla?FZOpK<c%l0rv~mAoLXLNe@k#
z{V$Md2O2ff4;|F%G7?Q>2E|ZE8rMaKV2rV%i)ak;Q+MBmH{O+e#OcT`<;6E&CGEXe
zUw?1x_g{erCb(dOLjsGZE2GIWA}#|4=}V7NbI-3PSEY9Uu5Ep5Qz1y<to2~7?wlo~
zg*uZ&GZXFmOk|f|F3AVnuE;`)A$aHkK7tf=cFjv23b1E7lPzOXgI?tpW~<5#DYv7W
zWj0V$qlPe0Yh6{V46U{PEzMbVO`27mTdj^US><CDY9qdbmRa49#keDj!!8?Jw6XOx
zo(P3~dRM=@9kE1*I|=k7rlUGnlyucymtC-whCFh~jiPsg3HY5nbIoPKd~?r<g7|aM
zM<=~>m8_hRA}v9AIP{Jr?g(j{8LByC!*|G{W8>aT%y!d-x|6d&QC8W{hFbnTc|m2a
z*^4aPutO5p7{%~fyVawuOrPyBy6EX+TZC`rYdYNjqp7J+^;D<}RF%Wt!OI$Y=<$47
z#kieq5EQ8UAsaya`hVJZ3WSS=;KdgigPVRBA_uhHuOLPEPPXK>H@XodTTTPfR=icB
zMWo1eCqhc%7RQXnIqrkwLtzRBRk_RAONB3tT<2go!-brXhBw4v4wtkK)LEoqXR+Zz
zV8@WQ@M0h`lb;%r2)pw&Bo%sKkjyZZEZu<&fjV5to%lq!3Z-l_zW5%XusFuh80sSc
zfYcFlw~zw4Cwuktn63c0JModRB&$f%NBkl<hgm^W{E^!F?zSoS>Ektgnhb)F_K{gh
zg@W31M+W_;yZ$g_fOeCg9W=Q~3SKgS3+mnfqsp*JQle*D5(G>q0)ZH{Jo0K~dY`ub
zromyT5)msSN%=(bBE>DPgpRXgFohW!7Rqp#$9$48k!iXhF4LLMgr-Y+=tI@5u3cWT
z9;JZRpCoqEcMfU{^azJR`xvc?u}p=}qIoJrs;qIg?9=yHM!$8|(<f&12pZWIDV_al
zQk8@w9V>`FLfZ3GtJvicTDj0x;s=oG`;RB%<30eWaiNA;B>Wup$bc5qqmw-1#_Be!
zQffvIdkBO8_tz0BE(D+j8l_23ng^9xaFFR><tXFnO6y&4W6$%-21|AlT_Q|`zWn7i
z4Z2jOmZX?2Y-&`yqD-m6teI8CYF26gI8AD<u5~II;zDFLn|^kriD@W|{nl7curY>r
zma1y-X0gR;7Ehk@ESy&LnkkW_k)I4n=Xe0>#2g^0dxbsOVXInHSf+wq7$N6F{Tb0g
z(#L&R`;SHiIv;dWkencu<w62`#g0fcK@QxgVR97`30C1jdeN1%7V^r0d={udH5pO!
zI1*kWHK|J7YjC0Y)FTPkxJ-iTaS3)+<u=#32IJ}v6$f0AgjHylVhBcjHzpyjwWY=S
zSZC!FRgwj+cwUU>Ld5voz2eg&ezjuHT*HL2s>!f&R3~_4#i^#^Q6#lvNF%8h!1UG8
zZkP>;fM;1f1~-vtrD`l`3o<?b)3Ow`Rg<KnIFhZ=ZZx*mi?3~or6k7Y>8NI5+;5r7
zUKWpzxIk)gj8{Tc-tvM(pJ`GnGUGuRS82sP26B*#WXQ0LMY>;2OE$rKx38Uw2gEub
zUM``&wT6~BZ~bOd#YjAv;?hyb6Y^5s+Y!G~Oo$L(0v90Z;Y*=`JpA>`Vp|cCCZ<-x
z{G@FAV2NO?arUmOh1Rns{K$;XMs4-wAKEIM-3w!qV-Y^EO~C<6U7_+FZ>;T4N1P;8
z>~@zYE=!6Z`{OW|nqV&ui>Xzu;o_b|i|tI)D%#1Xyn>{}6UywD#~Vx{BX`xm2KJB=
zwv&Y&nYtmdZhU-@YeZ%LN={AmYd&mN<=Mq1yl_3puA#YJagb<}>1D`zgYC>QGsLfn
zmZx9-GgwKp`7k;#r<xQvx4US2nYWJ5T_0@^c27txd4^CS!L-r<#}Y98w#OXViiCYq
z5!2>@TA}#^WrCmV!s*yfg&dfUhjVzP+Ne#I{Sr$NKgqu*>8)=^P3m#CoJy!xipzye
zV`R;`ogzZ7&1(&ww(7bgd^#q}Q7&|u7v1PIiEcF=cI=4xpq=QEqPEi+As_OFZA~m%
zYjAEL9}uW9C6i2DuI(KWF$Tix<aRjbdQ0PVMBGOwW4Q^l&tj=1o~g+CqX~OoQiUfE
z1e`0T;xkmU*Aw6W{6;ifNqP~I3X-0d-Sfb6U2ykh!LgmGnWtGPPb%`~K-`eWEc~;-
ztQ#*pXJ53%v%o<wMzIWc9mEjI0Cvxhx3!<w6T@XsomgdrH6+(`Zi|HP?1Ea<EAKVj
zmG3T?$9(zErFlMcZgbY#oYp2OQ9f@OZpzTpj!fqq(Vstl@|&30#a23r!0(ZpDa!pw
z^b|p)VYBzssfqePO#Rhlw5huvI%7AqN_hvti>9|jnYME~Fe^VAk~@!~yLZz+y=%A4
zY8C!?KanaYMd1|!bf%M=n2Ou1Sy`yEAib=asK|q#$rCtOS*X_oEZI|tmVyS}XeBqm
zyj&B(8vLIB)QdreszEzYL1t+|6_FsE8p2Jv8&=Aibnq!_13?`jzT$g`5yBD`6Tbz-
zLau1O^~=JhioVjaK0FD-Sqnm*(>_nbwF!wo9pb{5xWX=kL%8FIX-YpJdPCl-h^QzF
zsra)fOeKA*r?)FRh<Up>w5L3T2>>EIhCsxn@<Uf!MD>b9sJIM!o3Tb@DX?RTN{ol*
z*ux1!5=;b%vRINwWHod_vEu_KLu5r9*}^t##b^3Lz_LE+fTuCszLLnk1oX6dz>~SU
z!^v^Jp9scSG{!I^vhy>tIz+N#Jc{y4ooI|k&Dc3-bS{NcE>pBdck#fINV!zB!eZRU
zaeRsYR}@EbOrBZf5bF~lTtp=7>p5rfG+<<zTM(vU^oess$9>eRVH-sBOTT91N1u?4
zIZzpQv^nUh#(~r-Y&@>zV90;zv=9;zR17s$gvE%|NSH83ecZ^*QOEhPKG488gnYm=
zM9DH~5fr&cd_+2r{K%L@rlbqVjFd@axkZyCLqNRAsB%c-n#i7X7j0~aitHtD49DaX
z%B56^j)Y03gs$WoiJZK?L&7oZTSGJC#TcX~&)~_eN;P79N~k2u6rxG5vdOXpMQLQq
zq*6<tR5IZr%D1$Ux%|e9Ov=Zh%e`a>r{v2S3dvugKENmzpesx=#6Grjn8nP+xoE5Z
z#vG$otBJAv%gPi+I%LMQw9L(PE{bTex#UbxK|}L1O5aj39tusq^vl#tN2%N;o3oA)
znWt)*wIE6valuX8gv@#rOr^{r$$UxH6izn8%+*mp${fz*R8Hgo&E;I0(IicaRK-<v
zPNrPV>fD^b6wI3|mWt_0SUZVb<i0$j#|iU3;tb2lL{98v&nQX8e?&jDT+jBT&-y%y
z=CseH2ugD)O_f`@{QSu41kjh!PS*NGTYL%etfAdZk!9S?-%L;S9MB1MnX|N}`J~Vc
z)lieb&kg+vyEMM()JzX8KLI7te<{$9C`oDPPTp(@1?9>#c{Q8+$`^`I2|dyO9Ca59
zT{;Za(I4H=4h7Pe0MY(L%A_39STxZjeU}t9PuR4N%5a6+ObHnExr4wHg+YWegdvv<
zP9_D@eJM`)^wBUi)8!P>Gu17MoI=w?J~i#aC56)|andK9HH|@}8coUZJf6{H$;ceh
zp_|h|O%5Kl!!jk*M19LNRaC=)PV<va5e?Kv1u{9M)Fi1>JIzzT;7*mWQhCHuaR9@G
zM4?GFmrF&}5E;`8MbuPvRgGNCPLtK;h}BxP)mx=iT-8-P+SOU@)n5hHU=>zgCDvgz
z)?+PJWL4H>W!7dri=i`8yhPGhl{rhLRvpPyO--cz*wmHy)IPPKcm!AfEHYJZY}IQ`
zRYPT+az)p6Ez4YW)_8?id1VoLomYFs*L>C2edSkXWz$HN)N^%LVY1eNMUHIMR`-A>
zJ!LI%ofA&w(!vzjPnpk&HCRGLO=Vn0GPT%?_1KU7%exF%b_Lm}D%g^J420EIjHpVM
z_|}J&*pHA5OMIb<I*N`(Suj;sfy~*S_1O~@*^$NBpH-fdC0eXdS#53EvK-o@J<*JX
z&u-XQR&83Rwc4x2!k`^l-^AMBGTN?vilj~0s#P_z1zP~!S&}{5wPjmt)Y_yp+qQ+7
zua#Tm0?w9rh^1A_xUJjj^vALTNRI8>!6n>?eA{U)T$8OFu}$3n8FNj%^|H6*+s0+h
z_XOPdq*}_=+|7l<!$n-qjV8JUU6^28;hfyj{mZ{~2Y{@}(?#9ag<TsBQK609XA<4o
zO^MQFP1nU;s7zbl?cLxN-WZx)xE)@CUEIe#UY5|^)CAt;{YceiUBQLk>a|{j^4!zB
zULCsK?UlkCCDG^g-hKRC@g3juMPDN+-p@^66zbmg1&q7(Q1gXfV}#nvo!ZQ;-~Hv^
z(aGL7?cd~i-}Y_Z(4^l0?%Y-F(E~={26o_^U0?QnV9goe^ete{WZ(%Nzw*ss4ffy<
z#@h(iUJ$0><dt6yzTnO5U=l7m4rbvOhT$doUjUBbxiw+`@b%ynw#*f-VPLadd6-`P
z?cpINV$zsl>MY`esbKWg;mYLUBn~s_o!$k0Vkoxa{ykzOzT$sb;`43dkgeh^ZZQ`Y
z<1#j5yKPhd)Z#Oimo6UPFXqcIX5;4i;UK2sImY8Wc0&=SVLfKP8^+-YhU2}IV?W-j
zIn>zvJyb(x<VGgVG(OT1c4R?uWA7bgx-8^Lma00Q;zicvPj=)i_EJz*l1kp*OP1VB
zCS`k);!ft-Rfgp<7G<@K<*qR0>qX_gRpnZiMFsvATIS_oCSX49V__DOTejX@X4+jg
z=3ye^W`<@Mo@HhhW@N5jWhP5%j%G4?=56+76ei~XHU4HBv1aJSX5ZE3alWB$R_Au!
z-)T<gST5(~J!htjXLo)fPR86j#^-(>=4ch#dnV<1KHhp>N`dxg<zeT9W@vK`XK`+5
zEd=CIeqe(ZN`#JR(pl(?=IGdkXN=Zlf*xLr?n#jD=<M|6<231$W@*!XXo_xWs1Rx4
zCFz@7>6nI`jmGJn?%R*PX+xgr;H_zy{Ar#R8J$keesu+<X6mMP>ZgY4dX4I-_EoA*
z)}_AJtG4Q`=IW~M>aPatuommA9&4;FYpo{hTK(6flvW8gYNrV5-W}?gEb6x|7^Du(
zv)1dq=4-D;YpL#Qzz*!e7VNb4>%%7O!Zz&x#AfWpUhKw(?88Ru$bRg~#@BzPLbtYS
zrig3Yo$HUR>&+IJ`(2o>qFyw8RMA##n&?Kv0qB5U?WgGM+WqW}4DHy)7rf?7h{WyQ
z_KE#8*Vo=!-(HH@_GsnR(Ay?%cOmW4uEQ+>=8t65<)-c;h2*xDWa<_Q<A&YZ)=1^n
zZb8xQ&7AJ=?rrM^SmQPCpy2M;^=`uj@AZz7Rt^V6Uf1|$s`8d^)oyLxdg<ui?;e?G
zm`33DW=Q-F@Fme_MfPOWPVfis2=vZu&4%!%9B=?1Y2?mO1g~&mOX*h@PT=lv2xpPC
zcGF@WaSNvx18-Xv=SL1tacuo?439|v{f=>#mhcldp&M_B_C{TVy)m79P@;x$9#4)|
zX7Eq|an|f_BM<K!*Krzua33FCgcb5`B`Vfo%wF1$hz(m%ppJ0J$|;#cqbPDGFOBiG
zOdCh@hURVlyzYQLb10^A(6#a_pN!nyqTCc0ys47!T<MCP^EQW!=62;JPwLbrbk&CP
zNJjBR2Z=i8+&j0vbv((Cu!kZ46`GxjOn<gZml7$D!9j;~A4_D@7GmXO^HO)`M#t_)
zXZ60ka8aji4NtHzv~)dJ^r-^$9i{c6jP<HgbJx~L5fAp&c6B*F_DG*~QcrGM2Z=Gv
zb)?XA(eQNnJI^{H@I793FPw4zqBBA%s*5o{##Qh3Xij!zKlg=@^v$Joo11o&t9JPd
zbK@D2T&pD*VYN+<K_dK?NxXJW4fJgf;dM8t1y6EQ4Uf9`qU~4$f#!76F?WL(W@G;}
z;im9)Z+Fdo_d69yP|uTj_j7^2u@;dlRgw@dE6Fm4i-=03vPhX->vf7Hc;<C>if;<~
zPI#8fIL<mdDB&KEC!LAM`C4xBiwD?d$oOvGc*^bgc8Yfw5&1NPSnrbz31LEADNk;-
zdiu%wqw&6(CzL>riJLF_r5N^bYqo{hBRV}d<vIGZKk0NIZn^J=rf=M*$MQK5dS1*D
zvaleNS3ou7O7+0F?0^XWaBER+<w^nh^noXPX)=4e2c1)An9L+K-k@3T`FSS^dKe;l
z%Kv1#ufpsudc03uy*Es-?|bf(_K}~bD;3PZKc2vG%xo+Cab+3Euld}ae9;FAM7Dg)
zUolZ)i~5?Y=OKj2>yyG%{uk*z^W=*s$_<A?gy(0YRT?F2Yktqb{&4*|haLJk1OAq#
zd-axk)Gu7s&-0JhbypGmUEBJ*_>Q@%eaU!{uhfURvPXdEClJvvf&H2xif3>k!-ftY
zLX0SJB1MSyE@I4BaihbF96y2#DRLyqk|s~0OsR4u%a$%*!i*_%Ce4}?^=XusZl|`M
z&4vM;B{UULjUpxg<>>U$UYQ(2(3}~PLybp)IS?VuVke7Jd&7Jnaid1+GJ~md3~O4(
zjg+bVvToHOrK&(TPQ^+^v@l&#L}23%DJW115~qX>B9bE5Cga8qRi$z)c{1h7mM>$@
zta&r%&YnMm4lO$Ks>mTTb|R`es84P@cN!fndp7Obwr}IUpnLa(2|0h`4laB+@yWkq
zi^QsYx!#7#N7^GeQIhF{(if&8xLS3m=GM~*oF!?Xw(#Q_#sk`2Ij)7*zZW-ooUTjy
z@$ci$uYW)P{+ILp_L@&Y4fTmq$Z=!`S|7D_pg^5~wUA-uJvh}6i%3|8S$9=smx8lw
z=v_ZtIoMDCAW0d-*APfhcu-q(UB%Fc{$W-WjW^<$qmDcB*rSg>0tpdhBB3VAcC57q
z8-hVH*`$+CzQh}E^DPObl~?jerF|bs!rXEWJxAnw5K)(6LJW1c-F8)7SLR!*JXqa>
z?9I~CnC~rfW|Q;Dv?Z2*0vf2GgW43JfCCnoT9p+w1>QzyorfKYR{78(rGdy;X@y8I
zG>cOpX1HOAbq$f?r=3n}m5A^WT2g7P!Wyfrv(j3tt@;r~Bu1$n2~?6wE_$o5!x9^l
zl)Gu^XR*sNOH#5VW#=VU4QYdwoJ)=QkejTUwJJo}k!M~%?c6Der2{P%-D1$_$s}+y
zDch|7yz|mqZ%l>?NMNGDPQ(?1r8=~tL2fZrMGlT`=qRKOMVP5UNX$j;q<m?}u!u3*
z8<C9}bKJ4VAA=n7WVxQUD=5AG3T(V0v)nS1$M*KD%QMp|vq-~8J1v^lLYJ*W+g6LP
zd0WyKbkG7BE#lGW-MOx}Kfc@N$~045wbeV~>l&ho9yoPGb_qQZ!426pFs20qEU92;
zUE7Zj6}#ty*$?e-HeXL;tg6c-U){Ige*+#kj(jg=GRi4OEx6)~a|W|-HZvZ1e~^O|
zUCx~<=k-JCPFLO1W`er2jOu}|Xt(y^><j2-YEC1+EwwJW?6cE;Qr25@{dz<vrYn*E
zIC*F4DDb2<#CC<fyKM*AavyY;SZX})A=1O^J$K85*Pgxh+jBoV_8S#>IO4i@U%vSZ
zIZpZc>uaX|M>tE19ed9D?40NAo{o9%scriv{+}al5%1yL(40g*mBfyH3S1z~aFP+7
z<V#=NIpEJywK)oXB~rnw-a^X2DO9a(K@9PM@*LJYtwb++jhLPWt;a!;eUE`MoFNTs
z_@g0}>>|8cjjzT>K^p>*YUy)d5Q}I#B0eg9=HVIr+Gao2QL9VCfQ@)YWgYy9$6Hb~
zoX*e%#XThuC1Ero8OsQ$+u?44W0Vx!9s;%(#?6HW@nG>pXuJ`YFpkY@p+oNf=8(ME
zgL)r}p&1Kl$U`EsC4`(v_;}dEo~Ue%iJYXZhDaq!V$vc=Od@l}wVp2a%!z2aU)Z{}
z9A0z;l-6mRJwB<kXqoJbdvc5<Gil3P)&`AfEJ`g0vjb%XGGfVl$YJ0(q7SO=cnr%U
zVwg9~K2}ALfE1+17KzJiVl$iUv!?HKXe3Aa@Q2zQXOk?+CvqlolN^Z_drk=&C8Y#8
zz2w+D(P__n)(4FeRE;>%M9pJ5=#A(Z8};Z2LS^D{d2@7T+`1;svl(-ct-vQmD{4`f
z;jnUs17|qvdC`yN24?C6Df>psNiQLfr1?}SOIzwJeeSbsy=;pcD%eK<is3{;&J3it
z44TY-+)+ZzBwl#NHodg@ahXCzPv|oCDwjevs#0YVH#O-^@j)_@9-S&zC1cKWcGY|)
z-AFoI*@;qy^`&WDYfE7o(|$6{DFo4BTdY7I2q|VKc=cRCk-4D|B9DX$ZDtlyq1VEs
z>!BH<%ZxZyRklJlvXYg|W1)Ffj&^jin#Igl6SrB(jg=$SGS_EyRoc_y(ybDd=}AuH
zl-FM9A<$?GY|qu#Is#UyCfv|#yRsL>Hq*Bz5@E(Fi`wHNH@R`r)n$kB$gD<Exzc4x
zXFWSztA+NuE7_`cyDPYTsCHl6^(1xB%G9Q2#w&FyNm<WTO;LLPH@@<P>Qgn^T%kNy
ztK*$-X{!rY{>m%605<J_3tYSKig&-rZ3TP{?BEAyGNXmNZ+`U)AP5)OzyHN>tpv>B
zZhkn#R|D?@54B6yiWoa^N->LDJVWDBi^3I-WKLatT@5SP#s>7Tj&rQzA43VjYV`4G
zVGQIWBYAHV&0#CQ>D(DxH_4jCF_ER5BOdp-%2wWTe=c0&2(EU+-Ze6p%WP(0)px>8
z#;S$SJY|t$+08zRvx~JX=R4oVfnP?{TkX7AGUGYWf^HI^ktSm(i+RxYq_UqCeH%Kr
zxY3TDbb7xG=G;kIvJ$2=r#sCfRy4SqYsReBwCZW7GWyj2Pl7ayGp*`Z!$ipZbTwoP
z4eMLuS~G=i<dZu}>s+%h)xho%t5f{zVIy13dp<FWTb$-(Lp$1)+4V+y?Q3Z-8qSx*
zw(E)=;$w3=+=jMvlKKqpuG(7M>Rz{yLT%MiTRXGt#-*_5eIIXs``q>(Hi?(b>_lrf
z-TNLmx2b(-U+bITSF5+egM;r6C%oaWmNhRU9#w%$Jma@EIK1(TXn<>+dkhcxY#z>G
zi<5lP6mK?*A)}_3!#w6LmpRR6Uh|vdJm)&!InR4;^Pl@X=t3Vl(2GuVqaQu#N?$tD
zo9^_dLp|zJpE}j6ZuP5UJ?mP3IdePyage7xdm|73duU9KVU&|y&?^VKbhqyIx5GW|
za-TchOH+5d<NfY>-#g#??)Sd~KJZKL`VQj_-6*GBhGS2BXUq;^v@>4LdR{g(_E~Yr
zM?UkKCnv8x?rZRFeuj$=y=5H#V9b+V%3k)j<yoHk*Tep^o&P%9V_&t=+nzC|cQER6
zZ{xN1-uJ>Ee)(ok``{CwP`FQitao2v<TD?`lP~cuXAS-6V?X=Yt+wZ{t$o=o|NHTD
z{(!G9e*W@9)~-K4``aHx;~(GsiVMH|yAIYno4@|oojwFFo#6cIUjPbVpuiu(4Pf8U
z-vLqt`IR34Dqv}?9`*g313q8{TA+@=Uo?3C-vzcz0&<{b-JhIM;0Hn$@Qok|qF@Tz
zMgeZ13U-VKsvrXb*a^DeRGA<R)?g0mVCiw+@!{YOjs^^-pbYZY4+0@c-QW=_;SypA
z3(6Z4GK&zRAQ8@&5ketFCE*on;TB$54<6rzaiOqCAqi5Ud|6=_juZd+AEuol8oHqy
zI^p5f-W&4B7=B<G##bBC;Vot19{S-Qf<_#+86d)n9daNZdY2v&Vmhhc94_J`LLx^9
z;vh!ipBUl=B4T$bVkMSQA9CU+g5vlcng%{$C_c$0T3{w>*Cv{x4S8ZK!eT6nn%DWD
zES8hDh2RpZ;&rj2EiTY2`eHD~;v~}lm@xhbDpuewPFF7)qgXW}Gd5#1W*#vXqcr9S
zGCrU(N*6R*WA^kL>zNxjcH=lo95o^yIo=00DxfwhmpGzh<N)J4%A*#Vqa)5^W~k!<
zW|t}jm^(I}Ki=cte4_-Om^}vML9$;x8YDt`6)xuD5$@yD)C50i(l@<?Hhh9YpalGU
ziO2vXLvEkHP2fj@WJ#WyLXxC4=HmcHBuR86NMw%2Fwy%^1kRY(Qgn%;VB{8oOiG$$
z%S51w6{Ju8WKj+pN)n|puA~6A<Vd{aN6ZhI@FYiw2Ss=TdX2;=_)K=Vm%SvVQF@FT
zuHle<C0Lr}mLX+X+Tv0MU{h-UOPDwZTtX%PSOh`Tk3>{uO%Tu%eT-V3CA|bCn1!QA
zq)=fR=3ydcVk+ihGG=2s=3_!;WJ=~_Qf6gZ=4E1LW@_eUa%N|G=4XOtXo}`&l4fa|
z=4qm4YO3aHvSw?#=4-;{V_FgT99#?jWe_^#Iqslaf{9$Zhi`5KRsfLvq{Cgxq)iNG
z{&<XE-e$AJBSpk!bV}!RQfGBq=XGLdc53H#a%XpX=XZi<c#7wEp5|E*9-C2ObBYFA
z>K|{$B|i=Xa8|^$FoGyGf?@egI;h8brN}U($rO#7dSOIL?c~Ya<my<~d6^DVEth^0
z4S=c`uTaa{tU^~l8gr`uC$R+PSX$p2xxrbPScr<~h>~cDn&^q5Xo{-nin3^ny6B6-
zXpG9}jM8Y0+USkqXpZXWj`C=a`sj}WX^;x(kP>N;8tIWDX_6|bj1r!cbzdoF=x4BJ
z{kf-%$ft>1=|oJ6c-TkMTnqdV#Z<D3BSfX5#3Vwv!_H7gv|uIE@R5*M3!9EoaSCT~
z_JTwBLc5F>|ELm|c8PK35{5?Utvu&MfasDUYN9IYqB3fuI_jfBYNSf)q*7|7TI!`@
zYNl!`kTxlLR^y;bX>RIf4p!-J>P$yIB}Yt)ofgk|j7b&k#jCCg{}`4mS&q=830}fy
z@r+5e$O)~sL%00@jDw68V`)$ok=DHlDyY)RKni8+EhMu_E4!uTw06dn%3rA>Mwp;#
zmP*8_T9I_@<+v75xz5QbU`|zVshdtj7L^y#_>4_<%a`I0w^#xnk&Dy3>2NHowZclF
z`fI?ZU9}1<XNhXGwx71f=c#h5x9(2YV3D4@$GY+*x4cEY$}4#}gnv$rSN!QrnyY(M
zM|YG`wt!0jb>+#fl794S!4lvzwyev_>|_z_%uWWjx}U;gDZ}!tL~1F-Hr0Z@$AXTM
zuo7pwqO9%gq;MK-t2V9tjLy?SZOFz)%-U>_!K~F@?bb?F&2p_x;B3N%7ASRV&n~Rb
zeyf9Y2ZHYZWt^%>mq_i}GL1)MY)afh7rE_r!0nv$5uUV5cEFt6T5Q#7?brT@SaRt4
z8Sdh8o7Xa~u^cSIo*!?PZF5v^auBPYP;A?-Da^&K6-9&QqU}hChhXHbnn*2TsI3P5
zC(P09=;B7<KJJceXyQul?BXtxId1M!SLDj>QI4&MT<*?VuER>D$S#-aB8IzJEYX&0
za@J&<29Rm=&+$6Mx{j;L9w*EGF7HlG)_QOF;@a+t?@5GhLI$s?7O&Y7FXlpRaazjI
z?kinTZ1Tn`n-FNNK7{u2rQlLa>MC#j4z8gAFmZHm`Q``W@>!T2FakTU8IkV;i^Ta(
zZu)NjEBg*FOqNJEXh#dlZz-{A$U3jRzN!E6YD%#RFVySG+ON}AZwQMH)fPtsOYm@{
zpGZmrw9;@5^Y9Esa1U<;1&bf$HY^4kueOW|b@Xbv+|}RCD(E^fdiiQauCPArEqOID
z!i+HJtT4&yPXY7m4g+zZg5zM0@flm$52JBJ2=Vt3u@SSc24l|uEU~$yX<5l?dAu&Q
z%&K-=1pKVbo;r$tN>QxZu?~&N7GH25ZP8UtZGMRH8jD8lmKy^{vLs_NJbGdLWpYKd
zvG%?3`ik<|y00NuEYg^jd;KY>jIcD+tGil@*Wj_2gafsta?!%6^fsA0Ju-e=awl{D
z2EYRIFc;w_+a@tP#3yH;&dLTnB`A|EMUsfxOE@!*{4z3MhA?CEHgBUbA2T=igEC_u
zGoRfxgEK9G?>Vb8FM2bSp0hYdUqt52Jk#?Lvz0lobD^YjKJznbsWCFcGxN!FJrlH-
zBo{vSv((_Q4kL6zJ9N#ovmD;;>;`o5vExBE^h2|RHfwZ8v(!Hmb43&1MI%>6d$cGn
zv?ZJLNwf5-MRa<qvq%pgNgvlrxAaS;v`XLfPJi@E!!$U{wD8fiKif1<D;q&FbWt1i
zQg>Tzx-(Gwu2M(ZP?wfeGc_aa^HpoLHi7go2et1}byZvSR)b&}v*B2iby{Els8dTc
zTI=9f=U!OLo?EMRfFiXS*L7YqB3u77R3D36haO;S7G2jhN9*-r`>;=c>N>-<?Flx`
z5_VcU>$CR4StIskccNl1_B%&)WS`z+N0w)kwP9m+X&0YnkE&O9_7;M6Xp6R1Q}P1;
zpJ~%J4RtjzH+Jl`b_u@rRV#4yU0!Vq_b;OML{s!?)8lThRc~K)Y>y;!4|jB<bm2W|
zscp7jONnw1tagVLbT2h&OLuq!&TV&cZo?jTcei)*v~z19UW@m8%MN*GvU$HAdUut2
z^E7zF_kPced}A_wr=ERt6@KsZWGAlTewg4X_<}QdgFATMJ$QsmID<|9c!gW|g=4tR
zbt<X#H8%q|=?S<E5_n7NH-BaLiKBRmt2olFc#FF@i&OZELpZ3(c#PXPjo)~U=Xlg@
zxZ!p9Hh*|vhj>(tIEiO<iftNye<H_Gw+|M100#Ny4LOlNxks1yd|{lDUm=rw>UCrH
zluUWUg}F;rxkvx@bK6*!YdI4pIc?G+C+BmNYu=c*Rhervdna|8FWH)Z;<LH=oBza9
zdpL4mA)WU$pa1KTi<qAy`XVxUD0F#h<2Io~p`ojkoon=&x3^Ban3^~G4sv;<8~5YN
z`7~NONMZUz-*8G>cBk+8r$6GOi~6W9ZmCD!siS(TC-j*II;Xe)SewJTA2Rv^7B{UM
zuB|g3u78xSCp4bBcZzv>u)83zV>Ms@I6zZ66Ds>fF?&B>xqJ<~w7;RObNID~bhhi_
zwpUcQ^YgdISG0>e3X;2zo4acNwYrNNzGES~ud}<4nJUCPA<lbs*So!Ex4t(n!rK$S
z_q(Fo1Z-R!^9DQ=4!o21GqNY1!Y@3-pYxel-m{a$EUX1ZB!&;b79rS2VXlQ80O~-L
z!GY#M8{y^4M-IGC`~_0`EH=5t$2qzyp~j;V$DgymqYZIgZ(&G*9YA`?|3L3Z1z|uv
zVVFFNM8qikQ!s4=gjlHG*!;~`V8z!WKV$rMZ(E=VJvbBpy{Y)cP)UjpV5O%FfzSvH
z9}8DUG)x7}=0j+G%}c!3A0gPoIb-`gM27g;dxqg}bJ`C?rT7%X1jhav)!bLm3PFTG
zEl=z0J>zt}-ydMki`vcyeoPNO5ZX6K+VeOeJ~k`<FnP*su6;zj$iw*6K-JW@2og?Z
zz0nI!xN|-e0=@x?{pjx|q!IGRDso9!j!tHg^xnpSdS&Vpv*LRSs7Ss}#Y-xb!D3YZ
zK*>DAJV6D?NpX6RR-8-bzllS956-N-C>g@|2ZHkl%I5ce0RFz95Bj~AeWk}4LeMin
zNYd7iU_pZi5hfIcXc)p&3=>9_IFVvSiv}fiy10@5V@Ho4L4LG1GGs}UCsC$Uxsqi|
zmoH()lsS`TO`A7yh9tQ&T~BR4e-0BmD^*dAJ5QDwQZP`CbO*KNaMN)J5{bidNTNu`
zDMBkgF!~r$#*WggVFwaKQYK**DF+ed80!X!RFVX-%B3qe)j=s!a|SM1RB&O#hY=@M
zyqIxg$B!XLmOPnqWtfCTlI&!ZsIQ?wefH#OnRIE>r%|W2e1UcA2@`n6zN?ycZQHkN
z${sDU6C&TUdKOGKOOo%SC+$H@m=QN~+@xnemp+|(b?eu$=iH||bhFQ$M;(n0GM$e=
z!q0{^MAd4<EL|tgN{=3JKl%05`glsP6a0SvYukE@sT|HL2oxXKDyXgj2|f10wE9Ws
zz5N=LD?5}ho6y1wG0afI4LR)4Lk?HzE3=U{E2=Z0KnqQ_4_R!{#TRFC%{A`EgVDwt
zJEXBji<0w=!GyFaPN0*5{L!F?aI54v9AVm#$tR(VQpzct<PNl<z$<FEkmCALilxF@
z(xR#m8tzLw#%#~P97ODgE{E7$lR*Hz5->vi_=B%JG!2SME2hL`vXwTeEY#3L5lvLl
zMW0iJP>yyg(ZtVERMAOBG0jxd7-f7-$4fU2RaB5Z{iwG<6Vm6@lfqH1%pZq=uulko
z!izI^%512?TO%57(p+sF=%<WO9F-zajZIeB|7Dq7X*=1v!!pY)L85cbS;C}Bu5G#X
z;Zcd~@b5pc04;OA{^m^3FFV7najb%LP}e|R53R7-d-2Uz-+lQN%w9+}<Lty}DisZ>
zei2R>$4))fQQ?ObEw!UzeB-D%W=!glM^`bzmOp_`E$X*}kPNvuj`1??p^A@0q(_KU
z5t7(_k%idin{m$2$}6Qcidv84`;)$GIjYLHqka1_i<+@2@XlkKayid*160t?brsY>
z>P-L5+3T;t4qI&Oy1pn<Q6{Cd;Gf5C+wH~}hRxx(>7Gzxj(Rf^>Z4G-h`3H<O(;2f
zJ2o&QG4pPDv)K|ioX~V;P8mtK`fj%7|GF{HT=SK74ytER#JgM~H?rEy^iJx!D`@s2
ziuxiX)LbM^sCsj2+pW>Hy6XJWIKz$KfhQBMFA-!!Z$r!8T>0ghZ=UWDNewt{wJkl^
z`RlR2DDJzn@7^))FDg#-23cnLBjSELo_xZY^4LD}F%tTH`OB@Ja>MEW7~%1~@85rj
z_0c(keJ*q*v4>c?#Vw&lg-;WyRemDE53y_vK3{^$d*osVhU`gBx~mhs)&e{c{*GjJ
zs0&{dmAwD0kcBOD;f7RrEa^?JU<Tvg3vp<(?aeKRJ#-29EFwNgl@ESE!vxZNK|A&l
z#8nSj;`<on#Dq{REyM}j$4K(G|K(JUSvU0I7s2?Xd<gJ!TJj=X*i^mpTy26Ak;Ht2
zmk<kDgn>^J4(tMTF8^4|Al7<UN9=*R`54MkVKn3+5t+!Eu;N>0o8iD}xFSVP5??!{
z5hXF{z)N<daTf{FQI4iQM{1)Li|~<fP{u^}O|DE$+?o>gH$~jNGJg9zV<vH#OVg0C
zj0FtI6Tp;^rbJ^vjm+9z;^-A|O$2uR=n~QTq(`bDq>cYk6IAvyoH8LOQ8CozH^CXs
z?s-#_ffN|^s&`9quG2%7<PJM02}Btdks=qHA0oKe5%ir+n5(2^;bPg(fI?-KHF6HW
z)Co_8E;J@%gci>}$F_?!|4kxwB*+?f)F1pL^B|-XB^rk@#{uc>jkw$66X3+I*+mmD
z{c&GGl#(duF_fk?wQ0i08No+FGLi|s=}&9pPTc^thw`jQCFmKERXG!BD<KZOQt3>8
zO2m~^6;V{zm$HZ`$(BU*>Q_-BK+k2#mml%yL`3Q)38i#495qNDR!WgI5{P7jjF2=(
z>X)_NDLPE(fv(m_&8rb*N;w7VVG)~H3=JxJBtjbvd+JlgPF68Ol_X`mXVhZ}>56^g
z>^+k@5usF6IfE1EK<|fIR3@<>i<2cdw7SKvVwSdveO7FuML>zlkehCdYg3RAh*b1s
z7Ni>j``mi1jSx?7|9F&#JSg^qxMV?BxdY*F&E$l%ib5=ai$`$>IbGnGNe3_8E0hdd
zTlKD&y^2ZitIRn)6h&6D?X@pUEPL7eW=^xmI$5k}H5{3d1Znu}2rEx(T3BN7wTA0#
zkyM+qEdDdX_p0xHG5kWY_Hwrr=}$fnxHOFTwOdZ><29jTm++nUj@*($LyY?r>kf}w
zQ*p}$yA`N6y7;9bF03&#9AqI686@w;W_%$_Um`D=Q=RHBlW+E9iu|U)1x^d(tUNKS
z1_`P?exE-Z*-0rnWNTEEZEO*8P?}vB%5CN^FMC1O4#&hEfBWc7d^JYlbhb}K;q#Gz
z<3KYms*r9r|Ma1UY~)!XnWsud^rJtL-#J4Xp*#c{(oUu_2=SuI`3oY2^C3jkV%eW4
zqu5JVW~5Wsl4MmqbEPRA>&(Jg&TMY8qGg?HUF#Cp7j<ls9ldK|6GYOJ9(J;%9FZWU
zFCukrM5n#D>{VowVjTNqXz=OEQ~SiuE!#GU4D4BfaGPUR+@h_ggzjUn+gJg7=vX7F
z?j`q{-SxJ2{|fDqvjID@_m*|B<?ZhqC3`uRSmH=XxiV;n1j_~XE<uqfRl|`l;;p9m
z(O4lkg`cuz$`0k41s-yRITW|yfOo9}E@XO(oaHSK+f4PnQ*@>?<u1P|z-w;v4H4Xv
zneKFG{{iW_OTFWP4q0H)Exu<N-npWGR#wh+9(4|FShrBeFwCW%b*+1?*ZT%G%>%e~
zA>-WYVy_O*9Z8f-``pWgLGVQ0?!U5|o$k1Ccgasat-0HG<#qS_-=)-bna|vYdk6d^
z$$t1kq1}M!!)i|Au2fHZ&+v-3d}R1RYrR)qy?wv@=Rt2F!T<W}G!H#y6MuRfG5#dO
z=#6_PZ*&)OUiG!d$=wm&os-{+_O;Eo?SUWs31J;zq;E7gXx@9__b>I!{}Ah?6M0$A
zUir?qe#SJ<`|3~D^Vj$O_jB_5;xqdArU!pbn}7ZbLH{|yv55OwxPA4{U#ED_yHUy-
z|8nBfpa1>8$>_<C7v?M2{4bo+uK=lo{aQ}`5ODseF5VarvAVATDX;=<rLh8V0Q=1X
zbLjv%ur?Hs<s$F{o$morZUnz-0!eTM&kq14rTol~1r^ByWpI})?eI{r235}lH!lZ?
z>YRYkQ3fRlLxc#0&<K%GV3P0%myijY@Cl(%35#$Fsc;CT&<d|G3bk+xxeyDxFbl!Z
z3%^hd$FK~|@C?yV4685<)36QQ&<Wv?4CRmw*KiKk@D1@W5B1Ov;cyS>Fb?_95C2dQ
z191@T5CdNj264sMbkK!pun{XG1VzpVA@TBXFZXf_7f!I{43Uut@e>QN6GhPz|L?F5
zLGct#F%(Bp6;ZJjU6B-1aTQ;Y6=9JUXVDgM@fLM47I|?OeK8k#u@`?)7)22gA4?Gn
zj}j}fSsrm2BSR8HP8pr??|4xAq;VRtF&k~l>yVKVwK02|@f#Hb8U^ke#WCxu(Pzx@
z9NDoQDTy1q(Hq@SbHZ^R1A`p>Z5{1#64NpN_VFJ9lD*)O@RBhg!I5F`(I9o=1_4hW
z6_VZh(H|djA}Mkk2TucIup;RZAsJF5Wg;Q%%^^K9*CJ9LNAe_5vZyYSzC<!5+leDL
z$t9~KCKazGWzx_}(k5?mCwVerR+0dF@@wibC}WN$aZo3TGRSTV6EkrW|C915p>lHu
z5+gG*Dj#Mjtx|@JvLTT&D+RJ2P0}mHax9<jCxMbI^#v=@^2mnj^15;@DQhX2^8VEE
zE#dMm@e(qok}3-_FDnTq-^nkvvMnvoE(O!8a?&slb1@lnCiapg6|*tn1~3UzGL^0}
zkJ2*fj^yT&E<q<OH8V6t(>5OSEJt%u)bcJtvfd)|G{xx>b<Z<F(=}<cHucghH_$c{
zB{ku4H6gM!bu*JVvoocE!+<k5k+U&N(=?M4N_cZEeRJK8vpEwfF{hI{v6C#96Zxt#
zJDKD;(K0%Z?K-{li-t2c2M7Ymvpm_8D7Uja+Y?5>Q#(7-@76Ou|EbUZWb;1pvp-Yv
zJ>k<oU((6yb1}tp*!WXG`$sNgbN4<oK@~JY6%s)EQbJi|KF9Jvg$+V2)OoD4LqRk|
zDYQaER6{USEH!l3IJ88i5-eAgMPYOqM^wLJG&@ezD^pb0UbIHv=0kb(N3nB8XA?+G
z<3_VGM@e!=i4<&LGd7J=NtZNA`A<l#M@px|NUah{WerNL^k&Y}Nvn=ayL3!T5H|yq
zOjQF*qf$#_O-#|$mh{s>CGt(_G(64pOzV_1)D$Y&l+xTZPxGZo!PF@MwNP>NPD#{I
zi<B~HR5JS%(*9IYmnHME&x|5fQZZHMsPs}LbWfl1Q6G&{|1&jI1hpx9a8yzCCO1`7
z1=LfM5>ye5Ra2EwzI0H*V@_u^S0@xv6IE9ylR&ppISZ8TWYt#>#Yc@bSpjlY!%kTl
z!&TjLSk10jomEPZwOX-N9GNv+D~nMZl`&!U(5RJLSI<Sqm0Zzvy|y)73j<n%GF)-;
zT-lXHtn*Xs^<MEcU-flg`L$pD^<M!tU<Gzy3ASJj_Fxe<VHI{^8Ma{^_F*A5VkLHB
zDYjxQ_F^$MV>NbTIW}Jtksyb3UQxnbdlFvVOkPFSLrN8*POxKL_GMu<W@UC}X|`r<
z_GWQ5XLWXGdA4VL_Gf|iVn3EIdo^X7Oh!z0SA*3)|54UxH6$ksCTgV?9HzD#s`hHJ
zHfyzZYps@Rz4mLtHf+UqY`d0h&Gu~3Hf_~*ZOfKz-S%zaHg4s1Zrhe_?e=c*mTL2M
zZ~3-w{q}DGw{8O$aE&h>o7Ou?mM4=I$`03QF$8MGVQ?jPaw)fRE%$OUS8y|Tb2+zj
zJvVYcH*`gJbV*lpOZRk1w{Sr=WF6Nd5_cyTm&qEpb?wGQQTKLnH+M}}cTJ9Wcb7YR
z*LQ_?c!?KyjkkD_H+hwJd6`#rS9f-)^L15KTEz}}Y4<uHmwC1Kc(=EEz4v>;_jkj0
ze95<b&G&qD*LjJSb+1=@yp?^klzO+$dfPVv|7{n2@i%|<cYpbpd;1r3#rJ;&cz_AG
zfc-Z`hIW0cw0>JcdSx<pmyCWH_&KuIfGzlfF*t)Y*c&#ugFTpoKRAGcmw?rGfO2z!
z@#}rzmrvza>m(S3ZG%B=RqsN$hHdzUaX5!{c!znohuKzrArpohScPAhSX&q!i&%(J
zqk<3Eheg<lp}2{oc#5gGimmvHrC4lBm^qa=Bplc!A(+ULxQk6ghHaJiusDs?c#YY3
zgtNGf;W&<;_=&xDi@BJLJK~G~^N6KxjPckqnAnZwSda;skm<OP2RV@y*^n2RksJAu
z9odTQ_=Nu$B=i_1!+6O2xRNKMR!tR+{~<Y)MVXFAxs*-$luvn*@syJ-;*w7?lZ9-P
zS@|~O)HqT3mT@_kb(xfRxtA?il~;L|CBl_Q5|)EZmWBCyYPssR_B)*UnV~tFrFojE
z*)ytH6Rr80wK<!&nR<Nro57isBRQPOd3Yni44@zh)OnqofSuj>o#8p2<$0dxxt*1u
zp7A-K^?9G|S)I)w65jYqj?r+DIW&pcBaJ!33Obp`@qVwin;|-)C0e4fnVTs(&L+B?
zHF~21nxj2>bcF$(_nDtbx};6|q*1z`^Vtl9A%KCoXc?L!4q77<8p9SkrVqoDS(b($
zx>$miXY=f%g?gxox~O?sZbcdk|G*#&n7XN*`l**Xs-+sLsk*AI+N!7es<nEnw>qo2
znyQsL3CtjCGf;tV+A?RlB5QiT&Kjo$BakblI05XZeU>kc`mXUhuk|`?BcYwY`m4SA
zuLV1>1-q~do3IJHsgnSpuePk2;f~$<Akvy5*ZRKNI<j%Xj6b<9dz!9)b~x;Mug6)m
zNxQVkIjIf%uv2@rS-Z7eJF3OHvCBG$F<YjI__CvskE0H^YnvwE8lpTKXhYkyiMzOs
z`<v7GwUv9hnVY#2o2p~Gu@ksBA-lFGdm<~_zIeO0KhmM4RuhB!XXEU+$-BJG`<DH=
zxz&5U*_*l5Ig4K!rn$Qx|E~KXv%9^vd%j=dw|OSKeRjOhJHQ2ez~T6wpZmbs8^IHN
z!4>?yrTd)BI=}t0zLhpG3sb`NdnHzuF3m`MecHcucDM<Av`2fyOWed!yu?r3Z_|6h
zUHrvi9I73>YG=E;t^2kyTsn1IQ*%7SQNoi)n3=2g!$BNpMLfli8p)M>$(OgqV?4$c
z{K*UZo@G0My~D;Mo5Bt9zQ5APTXdN#nzN^t$cx-&kDSTTyra{6&2QJqrTop|ytQY1
z$U~v@f*G^5JRrGTU3=Wiu}?p3S&BWQ%ykyLlbp>FJ<%0CY(FPU9R1PH+`!{J&ZB(N
zVLJ(`9Ks`fJN%s3|8RUX_guaDywfqTGxsx+$(&%dArQLYg#IFQ2z_7Ae9>vW)@}Wv
ziz5(peb;%t*L_{r$L(tU+R}-=*b{rs$9$jx9Lux((?v7XYira=y(j@)$j5xH3l_W*
z=yqbAUkx3AZ#~?_ecU~V)q(xz(A_uUK)A-)&5Qlr;T_q(ThnQ~)AM{;ciiTrecH#*
z)aBIQ!5tS4HZHckTVBlDA>yH2#$&PTV!xf-AwJ@h9Ndq47Ib~Qyw>8`UD%bN(&4-g
z3V{s@yA48qt3e*#om$@4#>$!9t?&IGp`Et&o!=b^%xkT)3)U<OK7j%)U+usj&O<k(
zz#pa!UoU_L|1x&g51ryAe#M*q>Ejl4%HV4yfx4F7bIan|b)D%n?&7i5-BF&Y@u43~
z!Q(TbAGq2WtRd`~TICCd<y$_cUw$8B9<yei<_FW}LHXJXwkb*sz&gRWxW(jr9_YDa
z=vyIQk3Q*p0qPz9@s}5au<OK!De{p(>mRTFRtDpz7VJ^}5c)wG@L{meKJC}u<6YeC
z+qTBzo}uU79_ya6?jG;+zCi;WgyTBS2sRZAJ{fu6#q{;(gI+ceU-6M1V+S4bm4Eqj
z_dXB=_eZ<()tq$Q0`s|^cGR8o57_hJUG4jz9}YpVOaH*tKJ1rT^%0ofTi^AaJv3u~
zvSy$5|Lafh#oUlny<bmgTapps5C|Z0<mhCtpuvL(?b-1cD4{_q{!}@fXb%GoiWoC$
zOgOBUws0T2g&fI^WJ!}CQK}TVl4Z)4Fk`-)DYGU`mpE_Q+?kW7&z~oO3LQ$cXHcU>
zktSVwlxb6^P@_tnO0}xht4{6s7*=Mh&Xs|348uzHYZfF*wap5INL#<RaO2AD7tdEG
zM0VT+nw3^$k|tpS3kEZ|u;Igq2_r__rk|oP=aeN@OgU4(#e<Dmn~b@$XUc{D#w^%r
zRI1Z_JEC-#aIWjuuw%=fO}n=3+qiS<-p#wW@87_K3m;Crxbfq0FDPF=VS+~F(4$MA
z|4zNS_3PMqKhMs+yZ7(lZyO9xzP$PK=+moT&%V9;-1;V_8>xDh{nG>s!o)RpqsCMM
z1(+Xc{S~BDfKvEpAVU;ElnO$UAfW;cSrk~%1s9Q)#e89v;Da0UDJY^rs`d5NS7oKB
z;)*7+=%P0-#@M2aFw$t_j5j`|V~#tX$fJ)y_NdYjT!hm}4sGoeR)0U%xYSufuGN-p
z?hJDmTY9DD<6obF_Su(S4z>wDVuUd!8({_(i7dusQU@588OFyZ#>nzW8)0acCYXGF
zCfaDFp_UqxB(?V5p@=4`=%S1^${cgsH7e<(lvc`Jq?Tr?siNa;>glJThAQf)|D;AI
zUx*=fbRT{sf`gQWBPP^UfH@$6OF>8oG^IU9(h4g^3pF&6g9i!W4~8uykif1LWvEa@
zB@i%S2*>gjtAhNw+T^y}cB`$o;D#&ixa5{=?ztafGLWl8wj_xgQj~!RUrVaBmriWa
zmsh-QX!+4vV|4<ryeqxS?}I1_e6UW#AW}xWl0?%Dlr2f=7H#d!A_-fi*>P`7O(fCh
zo_mfQ7(KrT*3Tw~0m2VI&%lz+%8^_qCS7&1!%rW2n(TAQf&JMMfr8ez8bYNet@P4N
zFa79pm^Ll-)KnK2b=6pB9alkGckT7pV23U0sr0G3>VV=@{Oh&$3_)vv|AFMHt3kaA
zs9>-SMr4o=1c0dD3wmGZY#hgi@DXVaC=eps8I_3c<B&%#`Q()2_-*BwXMQ8a+PERs
zkhOksmJfG*u1&ip9of)FhJ+5U+exxM(CDw*T6V5TJnTabAmTKu?metN5`dvg;e)N5
zt7I{4_E^brM;ynbjS?dNY&~W!10vWn?8w>AW`Y&+vdwDt1Ix|yfPek^f>A#juc8#~
z_(<&-D)#;O=O6ad&0Vek{{WPf{{l$BM0Kiw2uz>?7nnb?mF;Y3Qyb$D^0o@{?jQ$(
z+ue@UoDO<WSqPhjKN5rx2jt*ygFDvZ7PO%Wk}X?85|ZX-NW&P`|L}%D!l4Xx$U__s
z<AVPJB1v);yUrcYbe{9qN4nCVBb8x@UXdN@f|#IGxh;fTK~hkR*NC8KMR;mC9u|#<
z1hiBvU$c3K#-7Kaj|quO?2BVyeu0mh^#L@-$VZt5bBMPL1|QGx5-h$aNA?MAXn~TS
z#0q6U20HSQkmL^koHM{kTJn;=sU#*h37rFS@{^zpr6@b;z<-&IRr-;j3!7&_UmfI!
zZ+oJD7V-kO+47duLf8)outHq%Qg8-w!w4P10S>HEKJ)9LGMC9r%Qf?v(2Qoc>J^eQ
zngkJA)R#b-D8!I_C?rh82{t1pMU!YnOLQ=u70sv(No3O{|6LhLIHAZ+<)JY)&ASpg
zzlRqkssxUOydE1?Rv4HSloW^2S@;~|J@p0DXNOz~{1kb#Mvn5L7=`2{HJQ<lLXx8%
z4e4t<DbkXf^rQ+br70oUs)`*GmKN-RwMetOSZ+{Q4k1>vP*Mhe94-SXWY*piaLkD$
zQ<_M1Qc{=7)TTN$ZBISP5$dUpun=UOpktEpNHR{SdQ7Qd6dpFgD7&lva6{&lLVv88
z6IWyt7rc9lJE;m)mPl!)u1Uul1JQ|Fy``#dT*>qR3bcnJCQgMJ<Q~D$2ZkC(vE^Ir
zA01j)!-gga?@Q!;lG#g=qV%(%RoX^D8rsrgjkKn{|EOnE%i7kuwo)oRB`Z)FleJwd
z9j&Yt23u)|o91m57xIU2hfCc2U?`Y@LkJRlT2zh@3amMdZd9c^-RfHRy41z)QdQTK
zZ@Q$L@>FM6t2u=Id@&^B9p1Xy`OcMq*PFd%FFCtQ*O^GEuLatg^YWDrxB%9lC?Tw6
z`&15`mE*t%b}XFw@g^^wX^vz%4EF|XvWOl{v-aU^XSw#;4tuygqs7RFN4zxDk~os9
zJ+X>c%wps0qm;6x?S5<<s~@zIgsg037iY<!VFiu?CCHXXj0VgFA&i2*Z0;+cn_cZX
z`N>d@vXrsg6}I5z%0`G{SXGilE6Q@qWpfxA|8<34b%rDq>&0dWRRSP>J?zb0ktH=v
z!q$~Y2@x9`&|ml3*Z%sqpVFfqh5HnS#?}cIuSj&F0lClyCzgD#h_IKeLD@lj#=<C>
z=w>zC*%o{H)5Zz0h(S$iPMNsW08BBeSIue`$2P_hbm=i?mD^f>j>kBaRp3-`0gW7Y
zLGeY%3VN;NB~SU-$FA!RlfCR_JDb_irV313Dc1IS(aiHa=kSc@x`+u;&8bVXnG@zZ
zIKO#y+D6G%&*-s@&FgS&<gZ-*8|dm;`b&^?F!}hP;LMN@v4&xEW$zsZOe>pco8~mq
zTFvl=!$s5+ak#|8bLxqIP1P39xW+O1|6*jWl%=VZ^(u*1K^&9ZroQzt!j_9yUxw({
z&r$(L2ynt;w=~)~$9a=;?o6Kh+$mN~xG!cg1a=ZVzBHL<y0SUNF#4c~Ao=#V<y+RY
z96cuK#Yxel^t>zgna^XH3%x<61cHCY4E#9XVH$(bz?knaFKcu|&F&{9WLA+1$N0wg
z-dc!Tl<$BiPQ?Q+HN6x5@QBynt7Cj~hBa4iD9>>P(WVi+`B);&lNN;hQS+THsK-NX
zxsr$e^Jka-^r+u?>VIBmbE@;bAIa5ow|=Dg8p+yV4hOi)wq5{{^<QPsW$#kQO{lX(
zw`U|oz`ULcckff|fF?WLf%b@g{}*P$5WXX2B27NX)baX+oPNnL&B##Ty`qLsy!tQd
z_rI_I{b?LE{JWO^`P={gp~}arL0(%L$Liz=LLwH_LMfM1$(05EPy*z%1Pee(MfNNZ
zp;qZ234ntZHrIHomw_6%fgGrTzV{VZ7kgTk620<VdLS0@6kh%`2vX-ywMSm+CQ~4>
zZrT(($Ac0FVqQgbWmwW@uQ7Il)eQnRec*=~ilAWhzz=RxXmmsh-RCm+a0qBp2nW_P
zM2HyVS11^kcMFGqUbso^=YC%Ze}gxMnNojdn1*V|9`WIEALj}(rb<N>7Lf-E76fm&
zmN!SH5D-9IFJK`sCrni}{{h71Hy5ZMOs0ArxQL9{h>mD_<)U;kSY~MT5_0ogzQ8-)
zRc1S8MJ*U^l~86#w{(^0M7&pC;ACyYLswzOEY0UJ^7ez#mli{Kg@r~?iy;OEwLNhW
zNB}1o1qK)AV}%1ZXjzDdc$bKswua1DKw*f6&8Tr@7>$bpjnsIJ*ccu9=Y}zM8W`9V
z{&y|3W^3DYhz?Oz5t9*gz+BDqZsr(rkEn?8D39}4k3DCPK(P!rC|E(aM70tzYf*IR
z7GC3~k58v6o)Z=l$PK&a5}&YMB1kX+iHfNx1pw&?x$+566nxI}A<6R;%d=;B7Iv@!
zggY`=wpd7fPzZQ}{~2r02ilX8opFrtW*X<mNL`qXI+-=kXpK9$YSZ|W?BSC_S(HW@
zf85xO-&i&_hfU;&WAAt^goB4sxs>>Ll~|dTkf@bYk##6>RwLn*a8p%NH&-Y@bhKhS
zUa(D6cN8y3kO7!hX}M;pNGomek*RY}d*+R@VUm|K616Ckf+>?Uc{s_4enfecim50)
znV5@tVnO+s<l&f-S(!Syjpz74XJeJ7bb+&w1-Uf@xmJ}UB8a4k5E^!mTgjEG$(pX&
zny(3)vKcv6(q}`VF}B&6K!Kaeh+es=Jd!|{I(RYu<!604i%JoggISEr$()!`m<YFN
zi1}icS)G;A|Ck(Rovap_+L;}c*`46|g^MR!oLLgSV2)KaIs!>~rzs+)*`5VKdaF5~
zv00z?d7t>nRCl$T(Ib7!`JaT@1b26n8}^;yd7#sQod{ZL+_|9AVW18gp@G+NnYmKr
z36EdtSMa%^v62T4K$WB^pZPhWBwC^-dTeV!2Ug~FEZU+xsG<O763PjnG)iI6sc9L;
zg%B#CJn9<?+M_Ghpg<~k**T;}I)CH2nHZ{t=gFZ?`lKR~nkPD?vq_~^dZpg7Us$rG
zT-v2uYI`j)qcqB#WD1}+dYCwwlSjIy$MK_V+F?TaroFMFa$2X5iJ42ucuV>~P}-+{
znwh<c|D}RDsDw(Ng=!TsCUlA_o&H&)j(TrrN}vTwr*`_LZd$3P6{nag9!0vTp2})3
zvwxemr%d^$ruwHtcBu5Is;t_ouIep<_NcOIqXIe_XnJsJ`l-4a8<)DPCZ(yqici5h
zte@6~75avJ*%#q>s>~XdQu?Z^3a!x!t<-9$(F$GH`cz^%tK14vm}RSyTA<WPtmN9O
z<eE{ydahfeuI%bzNt&aiTB^-Duc!H})q1blim&=wrBk}CW%{q(3b2IcK0XqiI!dYS
z8lL8wu%MK#?251q8?g)Yu5ehM%Sx{pTU7SCuN>R4`O2>zdzDb&uK`=KGYJKKVX(a^
z|ArDPrwiM%m*lYO3b8O-vx-Nt7JIQ7yR)|iLm~UKKpV6mOQmK&vI1+ef{6tpb9aoI
zrZj7_i}|up>qs(tu1`C)SgSP@3taKKQat;$&9$-6CA4H)wr2a6A3L;Y+f0vOv;upy
zNP9g|kOYyywD3Be@sYKb%0E@Bw@uTx#Co-UJGe}Pvt8@8V4JwNCAMjMwvFq!kQ=$s
zRJ0=tw{cseN(&e{gm4EdxP(iMQv1272DriMxuSczo&o@d+ag9odaXNTW)r)vE4!~-
zyRd7!vzxoPOS`<gyS@9nzI(fCE4jp5yoPGL%q9$!`xha@yw3Z)&>OwdJH6Cf|Gmv?
zz1W+**PFfCYX-s~J@MJJPHVcTn}(rVzV}1ArQ50K+rD74x;7EK@~gY^Tfh8qzxJEI
z`kTMV+rR#MaR0l3k+8hnOFadAzzCec3cSG53k7CSw>1&IL^i(c>%QQ5z835?>g%iI
zo53FJ9>#jCA6K3MT*3fs!YG`=CmgvF+_@e6!S9E`FkCeoysIxf!#G?X?@Gcc+`~Tn
z!$3T?9NWSxo2xl2nKFFDg<Hd)dc#Wm#NL^d6CA`;e7tH~#aE2QT8vagJe^Jq#e0{;
zU`#4Z+{6_;#%RnaDuuX*yTxw&#&8_RSJ}c|{KaWJabkSOpHjx2YR7u~|Hr<u#%wId
zgj~pme8?Io!F4>Yfc%qr+{l)~$D8WMkX*^OA;=}t#)!Ph!^_E@{K;7y%0HpVi)_g{
z`N*c+D3Xk+l$^@0oL7sd$)G&TR!qx}d&{(3#o=4Wt^CR?hRVK-D63qly&TN0EXe;N
z%elPF%-qb*%p<#8%Eru$z&y?EG0b*a%+_4Vs*A~}BE%~^yy5)JR*cK!EXwDc&iKih
z%ec*ISk3O79@t!`+8ob-Orau7mFm3D{M^sx?8)EE%V%uQG0eB~Owhn_&~IAL2z|%M
ztk3-%(Goq;5*^Ue+|c+3&ln9J3eBbrz0qL&&=5`0Bwf;?Y|iLh|IQ};&nnH*Dbcl)
zI?y0Zcp5#^m(tNk`q4J6#AIX9AgZ`P9n?ZS)I?p>Mt#&sozzOb)J)yfPW{wQ?b9)>
ze>)9-HC@%#fzvrH(^%crJ?+y!4b@^j)?{7QW_{LZoz`l-)@<F@ZY|XFu}Bx))roi2
zbp4=OJ)}B)*B|`VK8?GJDky?I*o0l!hJDzGo!E-K*o@uSj{Vq>9odpS*_2(`mVMcn
zo!Oeb*__?kp8eUN9onKj+N53DrhVF|o!Y9s+N|B$u07c~I>iFb*L7{s@<-d~k=J_7
z)wm7PA^gyQ9oU<8Hm_aW#(mt#o!rX3+|1qF&i&lb9o^DB|J~GG-PV2GmMz?``#$p!
zalIXQcKzK%dfV>1*W!)7c$&{l8r<65-tPV0@EzasJ>T?Q-}Zgq_?_SSz2E%Z-~RpI
z03P51KHvmi;0Au+2%g{yzTgbr;12%a5FX(Y-ru&%-QIoPVQkyvjp5y)+dyjG94@-Q
zEz;0nzY~7qD4yafzTzz2;x7K;FdpMFKI1fA<2HWdIG*G3?Yqrj;Vc{C4Hw=(KBpee
zqaZ%ygBz-T4b~;TzfS(-P#)#LE9JLK<@9UiSU%-hzU5rr<zD{fU>@dLKIURh=Dc9$
zXny5op5|4KziZCsZ{Fr=e&%x?=XHMPa&G5v-V1oH|L1xB=Y78CelF;P&gX?r=F;Hf
z7mnn3tl^8!=+{x?M$X%izRgPx)(?c{n!f3r-sztH>7X9!qCV=RUh1ZP>ZqRTs=n&1
z-s-OY>aZT`vOepyUhB4g>$slly1whYp6Ks0)s$Z8o+jkNe#w#^p+{cqQ#<17U0aFH
z>(CzU(mw6fUhUR??bx2}+P>}F-tFH0?cg5n;@;z<4D5`o?5sxY=#G?+-oDAc?lqg<
zmo61@{p|H#Hso$+_-^kRDna+o@B8lW|K9KU&I|+(@CQHe0k7~2ukZ}N@ClFb4j=Ik
z5AhU_@D_jZ6Tk5spYaCo@fr{EAusYIU+@w?|MDhZ@+jZ&E3fh@pYkn#@*OYpGyn22
zfAcbL^EJQoIj{3R|M4)-^EfZ`KVS4hfAmJ5^hm$-O5gNEVbSIe@2#fpQV+`;j=t|+
z^%A=gP><;*{q<lU_Qc!uz@GJ54?t9Z_WE`8sB89WpRm|M_ChT7bYJ&&->Pz7_QC%4
z9+viRf9%M<_k0h@_<ZSkpZ9m4_%5yZjK5Te|M-AE_yOeiY9ILv>h_X9vmyfdoZtDL
z|M{RF`l3Jjq+j}`fBLAO`l`SBtl#>s|N5{W`?5d#v|szSfBU$f`?|mTyx;r2|NF7;
zALpL=Ek^lgZ}|v{`NU7Iw*~yp|NPJ&|NYWG{nTIm)_?ujpZ(gu{oLRE-v9mJKl;MI
z{G?|5T95n(s{G_XtlixF;s5^dAOG?{|MXw~_J9BQpa1&5|NIXS=>!fWSkT}>gb5WE
zwAaw#Lx>IgO{7@S;zf)ZHE!hC(c?#uAw`ZPS<>W5lqprNWZBZ?OPDb=UZ7cX!i0!9
zW$xtJ)8|j1L4^)2nKL3$q)C-7Wg1dqQ>am;PNiDa>Q$^+wGPd<&*;~$3m3{8`)=&n
zc4*z9W!u*6+qCiE&ZS$|tX;f!@#fvz*Du+>dIJxR3z+a>#EBIzW^B0eW5|&u7nWSv
z@@34FAA<#}Z|i5!p+%1-T{@*r|C^kjnr7YF_3NLiVb7*5dUb8wxpnX6-P^a+uBwF(
zCtlq6apcLBFK6D|`E%&erBA0`-THOx*|l%y-rf6m@ZrUeCtu$DdGx}6uV>%h{d<w9
zYpRD|-~RoS^zrZCf1Ce*00R_o!2kI1D!B9#RB%BC8+7nN2qTnmLJBLi@InkT)Nn)X
z2=wqn5JMzMzMJ$D@kA7DlPyISRc!G^7-N)i#*F~*j6)oA)Nw~1d-U-~AcGWgNFs~G
z(ZCyNRB}lsMI#ZX6`PcDN|Q{a^2(U}!*WY5yYy138;ulmOft(f^Gr0;RC7%>+Z^vp
zIOCMlqbIGL^G+D;#B)!J|Fq=uPe23x5=k2obn{R|6IFCkMjLhXQAmLd^FTo>wKT>$
zqr7xe{Pg71OFusqbyQOMoAj$woih~G<5H#6RsC3P^*~uywe{6obB(puU3u-**I#iJ
zcG#nU4Hnj8iPaTZW076<S!kPec3NtSrB&H#vCUT6Xtm|mTX2)@*4lB!E%)4T$yIe*
zbiYlPU3J}sciwi*rT1QZ^KExueXT9^Ux4e&6xDzW&dpPUmkc#wh8uSHVTdD^cw&kx
zw)kR<8y=Y8j5{U@VUG!1IAoGbHu+?fQ&xFpmRolDWf(X17iO9{0=ee(M#gz(o_qHB
zXP|=?dT64HW>Myu|BYVxW~E!xxoN1QmU?QctG4=Ttg~hq>7%snm}#%CdOB>f%QpLL
zw9{65ZMNGUiR-T2P8e*tKOVboyz|z3Z@&BX`)|Nygd3v3Kc&0ym+nS<amE{W{Bg)5
zmmKoJ6`%ad!!IAna?LyU{BzJl7kzZnKdqee(p$_tb&ODF{dL%5mwk5HYq!0r(_OzE
zz}02feRtr47k+r+i#I;-+>b}G_t<||{(0!5mwtNctFJhD>jPvScIUJA{(JDl7k_;6
z|HHog_qKn%d-U6P|9$x5mw$eh&Zl2D^;u{Ce*XLS|9=1maCY_+pwl#Ey!{nWfeU0{
z10DFls}T@_|DVZU>Jm6X3}#S+8{}XI3noDiPNjmSyI=@SctRAWP=zZT5C~a_lo67y
zgfFCF4Q+Ts9Of`7F4Q4UVmP`P_E3mJBw`VbSVJBjktIJAT@aP{L?}j4ic>^i5~)ZM
zCWg+5SL9+Bz4%2ihR%v%wAlfRw?#6hQH^V4V;i+LMmJW(jKo7@9PM~VJmyi49fPAC
zvk1C6?op6~BxE5CiKjls@sFPi<RKmTNJvIfk}V|BBBf}_&NXt9o8)9CJ^4u|RdSAd
z#H8jl2})F^QkAP@WlIw2#!_DHl&z#?Ep2(rRKBu}v7Fp2arsMN22+@E)Fm5vDLG#b
zQ<=+T|7J6XSj;sZGjhpvW;LyOO>9mOnrf6L<fxfVaE4Qy<1F7c)7Z_&eUqH)WM@0w
zxjS=`5uJ`x=R56rPkiQ+a-!teA?Mk+dg@c410`rd(H74z{*!S5HE2T}`cQ}h4WVFE
z=;9a}QH*9(qZ`H8M88;3#9fr5BPD4`O?oMhdJ&|B6X{7^`cjz2lu0S=;z|S8Qkmvd
zr#t28erU=?n*t7}Jtb;Uje1np{Pc=J{o7EH`c$Y!RjNo)DixXPH>XZjt6Sx2SKr3Z
zeirhoeaos>&3aa}YPG6U94p_-npU{RRjx5z>m^4iytmF(uY2XIL+cvFw(c#jeI;yR
z{|!sdzd|vvdK>Iv9s5|w1~aiwTx{MN8(GX|R<oU)tP(4Wx65u;w4)_$9y@!)&(<xp
zrDbhvUCYJO8ZotUTkUIYdt2P*Ft$aUt=npwTi^y)xE$Oq5qsOV-ws!~%VqBWiaW&P
zvMssIrEYbtE57FnF}iD;?sdKUUGNq!yFJ{l+PWKF^rlz6sT;2j%bT|Iu2;VErLW`K
zo5S~_Exz^TZ-4zOxBKESzh~R;e+_(K1V<38NfYZ`gIC}LM_9rW{#k%;IAF6un8F+8
zaEDK3VH;w&Y#R1(iA{Xshk>|;A|@M&QT$>U#~7sxX7C_c95xrrSjRi&ahFs~|HB)5
zEyq13a*>Vvq94C7$XXlnk)8ZxDDx-DEL?KdnjB>;XIaa-neqy&jI}FoS<GW5GibW3
z!Y^Mf%w=YCo87FGGp8`kR$KF%?R;lEyClvioO9LcoM%7>TF@QY^9lP*wLcG9(Tfgr
zp-p(`sU@1xlcsc;9UVeQOHI<1=5(i@d}$A6I%=Etbg4}(V^DWc)KDY!sa^eQ4yT%f
zt8QAWVSQ^{|5w%<q_xs)ooiqRJH5NsV6Tn#Yhfo_+07+(28~@bWG`FV)4px9G5Bnv
zMVs2&=JsZ-Jwa>_P21fjcexAuZ3u>2XyZ0_yWO2ubU#qtL1Xv3?R{^l|Hj*a^9EYI
z@%?Xr^Hkpr<oD0~9dLvv+@u3%V8MNMaD_));t*x{0v+Bnh)-PO8_#FO6?k!;Wt`(9
zC;2!%UO<rVOynhJdCQx5asj3sXDfGk&24^5m<LeiHKX~>eg1P$<{W@Kr&-T|esrWi
zQt1C9I?Rlobf`z&v^0*JA)EfPr%PSyTTkQC{daYjWu5C|C;Jq=-aoLnOzdT6d)uE$
z^{Nvx?JQfn+wFe$7oMGeb6;BB@&0$f6Bq7;^QVJ>=l8%TUhxgo`~CQ?GQ=-l@{{jh
z<LUSKltrHMo9BG{EI&WYqfGOiCw=L&_j&n+{$!&!ed}F+Jk-Ze|Mezg{p)Rid)vhx
zezPxG?Q#Em;FnJK@8dnmd>?$|C;xK8cVF>Cc6{YWU;2n+e*2v7G3ZZU``gc3_0f0z
zuVtV6<0t>wyk9=>XH5L%XMg(@ET8m0*zmhszx(Zff1{nBeDS|n{qg^Q0OT3{8z26&
z82<}E1Wdq{89?zVz=}CQ1&lxm<fFlZK<=5p+p)k2+&~UYu?o~c3&KF#0l^L|K@%hu
z1`Hnuq!<!BK^J_%KuJOHS;2{EK^VM29E1}Y{2m&V7#qw%APhn&*+K8=!HD@mAxuIg
zM6wS=LPiq7+Ht}qoI)xj5F*STBZL?!tU@mALi@Nv>&e20|Jgz>EJHKw4KS=8F?1L*
zJVQ5p!`Dbd>RH2vX+t=?Lp(IICVV71WEeZlLqH6~sgT3z>BG7CLqSYLMH~u3lpaGg
z7(`q|Nt{HPXvFAw#Da-LO58+FL<viT9!v}vP3%NcEJZrmLq`flfEh(oY(-b3h);YT
zRs0uLd_`L%#aL9HSuB-WyhUG}#9Ta{T_lxW{6%9F#9%}qD5RZYJVs}{!(=?8Wt^R6
zd`4?D!)T<VY4n|Hyhd-N!fYI#VH}li{6=$3!f?c^ZET)$JV$rD!E}_ruoA|0d`EjU
z!FW8pb-ciP>_>lGk9?%ReO#Y<{6~Wfz<|uafz+RZ|2#;Cw7-NL!G#RLhpb483?=xR
z$dA%U8EVLj{7C7G$SCAUAo56%Jjvh_NoFL;CNfEsd`a6=Nor(CEpkbiyvfp&Np74+
zWyDFJ{K=TmNp|E(X#`56JW5YQ#lj;>ZA40^e9Dgy$_r#lakNROyh^T<N`j<Hb;L@q
z^h&K{NUoH>uPn=_49gH4OMNs;wlqq#Bq5pvB&%#ox@5Vx>`1i~$hzE1l)TH5%u9vj
zOToNIzidgsl*qwMOouGYnmo*rR7}Y9N5+&($6U$Cyv%o;%qOhOnZ!)b{6@|6oN*MD
zx%^Diq_)t^q_}*-(`?OOOifc-P0=h(*Q`xk|AS3gl1<gLP2Ma;-0UUYjLqI0&Q1JH
zWD3sQBu?dAMB|($<OI&;jLtx8PH%e7<CIS9ghr*bI_q@K?EKC%q|S8e&gukD^Xx+L
zq$lzm&+}~0DNIj*T2J+KPx=%>_*^LYjL-VqPaM2Yi^@;@<WB*0LH`UX0R7JaP0$W3
zP?kDS165E6l|Tl)DF<!P2)$4QoKT^vPzuFR55+$XZ7L4k&<`!q_6t$08c`87Q5GFP
z6eTMaP0<#e(dm0pw~A31rBNMCJ{uJ*9KF#U4btE1QO5dF9~Dw0eLW(zEF&$_Bz@AH
z+|CB$Om2iyE8V;$1+6A!(kt!K#miFF|JqV5^-?kgJTRp#F%8o)T~oU|Q{PHcG-Xpc
zEju?wE;xPDInC3pt5fN^Q#;jDK!rL!<t{(%(?C5`pc_>4DpW#6R7bTrMTIX$UDQXd
zRJ)W?xtml;wNy^!xJcD6O$F6X9aV|@R00dtQzcbZML1K<FjRHbRgG1AYt<2Z)moKR
zTy-~EZ82Nr)m;5ma@$oL>(yZeR%1m?Otmp$6*Ag9R%azCVP#e-Wyfc&R$z-(CR^5Q
zwN`G0HEgvqZ3WkE9amHPRxk_Kb0t@G<ur3uGjw&=b&Xd>YgamZ*Lsy#d=)f$^)q|r
z*L?j~Jlj`9>(_w=Sc7#lfsHhR|5ez7ZCEl(SWR2lh;>+s)iQ`3HHpR8irrW!yI5As
z*pKB{ku@@ptu>G}*^y0I9xGX2JK2_1S(uG6mOVC?rP-Lh*%O;tXsg+s#aW;2FrCdd
zo)y}kE!qhST5%iNq%~TmMKGjYH>HKzrkz^<dRlsm+N-5nt)(xk?KiCT+N}*+_3B!K
z``WS<TeJl)vVAzSW!toUTkBd|jBDGug<HF2F1Zaky4Bme?OWl>Tb0|}!1Y_g#Vx>{
zIl)ET!d+a~I$WMh+{a~H$t5kvEjq}x+{w*c&8l3dyWGyzT+oFq&c!;<CEd_HUBepP
zuq)lwMP1kBE7esy)|K7Y|E*oQie0*!-Q2ZZ-bE|i?Yn8^$KD-YuKHcb)7`!!Uge!C
z<IOzeJ>KPw-lu9_(R*I!m0s*ED(YQ5>#g4G{obA0UfSzk?gd}-rK@BWq|r2-W<6i`
z1t0P4J@Osj_pRTNieKZKU-`9P{>>=-eLnro-~Juohx%Xa3t#{yU<EEH0}j97CCCMi
zV0~&}^+VtTmS7CFCkn=x_2rcI&0r9Yoel0k3l6^!K4EbhVFN7T3PxcU#wHbhKo;iU
z4}M`A)|?n-!5Jpu8}4Cc%HbN^;T85_A_gWP_CX<*;UZpQTRP$+Oky2oVku@NC)PqJ
z4&o`!VpOW)F}z|V|JGtK=B)H3B`<#BFg{~R;$k)|V=G2uH+Cd7u0uBN;y12iLW*NQ
zoZ~gNV?Nd+JU+w+X2?DsWIOs}NYrCFCS*lsBSX$aM9$+yj$|@wWKn$NLzHAp_99AN
zMN2;9O#Wml+GJYnWJd;NQ-&f@=0#Gj<Wp{CBT8jrTxCvnWm*;@SSCkV9_3ozWgNO?
z(#&O5=4D}~Azx<SK&HrHPUaLUW)BADSXO3eHX&x-ln$om8jfacc9?0tlxpVYYtCkH
z{-80|qi(j8Zw_a4E|qOIXJ^Lcbbe<ATIWhB=XpM7c)n*rk!L}n=Y6(keE#P>(dR(n
z=YjTTfIjFr{}E_FA?SrRXoP-fE>Y+|Vd#l=Xo$Y(DUoPCq3DgaXpH`7CDG_T;pma}
zXplbXm>K6hB56D^X_S8H6cOo`Zs%WyX`5CanZ6U2)@hf%X`dF5oSu`N7V4h<X`}Wj
zmByo?mXo4BYNr;Mq`sr2j+3T-YO7|Cpk`{CX5XvsYW9k1KicYM_G+>govfy6v9{*2
zUTe=eYdD$ex2|foo@>)^>o0-pyOwLZ-s{k?YfwpRZ{};kUL3#f61@KF!A@+zDQqq|
zY{S-T#g6Q#VC*e%?8b&{$<Ayz18YSBY<AXc&~6*b#uCe}Y|IXA)b@$d#vISC=hS}f
zvRQ2^|0!+KK5f{(ZCB!KSZeKl#%<rW8rhx_+Gg$FE^es_ZYde=*|u%tZf=l3?j})g
z;bv~<uI`P1ZYGiL<fd-x?rw{~ZiV6Pg7$9m-Wl*#677y|?k?}{K5rUH@9bW0_O5RC
zo)P#C@A=MemZ@(Uxo`BAZ~ZQA{*Dp<es2H|aNi#AJQ44PMsNow83lil0=Mr2fAH6i
zaMfY(ineeLzZeW>kqPhb3h!{x{_qqDaRMK463=WCUmgwb=oOD~56sA8-pCs7NEy%Z
zglX{;LGcCGaUcg69v2ZGmv9vi^1UAN5GnEuM{*}OohFPFDW7r<xx^!X^0m$#D&KN0
z|DO;m$8s>w=P2)TGB0y8KXWusb2VRcHg9t`e{(pG^EU4fIj?g&zjHj#b3Na4^3ZZV
z|8qbObU`0<LN9bfKXgP-bVVN%I$v~0e{@KXbV;A|?eKF-zjRE`bWPuMPVaP2|8!6f
zbvb&IYw3`Q2z69XbyZ(=RwolnZ*^FYby=TvTCa6mzja&(^;0JkLdkVs|8-ywc3gjT
zVJ~)LKXznKc4c37W^eXc+4byT2vUc3XRmf^zjkbQ6k^YIZtr$)|8{T>cX1#0A))qY
zmv-<d6mnm8c5iog|Bh{ccX^+8darkTzju7cb#pJ0eb0A)|961D_IM9?f-iW37C(4|
YPk4oA^nNe*hF^Gyk9dh+^nd^WJ0p#H?f?J)

diff --git a/docs/content/en/integration/openid-connect/proxmox/proxmox.png b/docs/content/en/integration/openid-connect/proxmox/proxmox.png
new file mode 100644
index 0000000000000000000000000000000000000000..72c552a54a07f1dedb24f1d504e3c54730b69f03
GIT binary patch
literal 11818
zcmch7c|4TuzyHYdsGf&PDnhhN*0GbV6xkwV-!f!N6Jr|;dJ@^o&R~*kSte=hMhhm}
zjD!(o$}odzh%q#VaqiLc{hr@>{l35RJLmjy{+QSOy6(A_&vo6`=l$8<iI&%l1pW~H
z0|WvI7+<|?1p@7g1%Y@@?%@O8_%1`7fCmrE%IFfP4lh0rG=B5GXnqj{s!#uO^XBhB
zd+*(=4lodC-#hM)2M4Y61cBr_jW1uc33sIzE!CZ|%by~c4>-U6%;Odxtcw?zk$4oO
zdtf>6z`-ZJ7d?NE8xh&{R*vyN|Hbi~!%ZVf{DvCmj#$mjKQ?~dyo~Zq{-`FB^2Yw<
zi;i~<h~l+LC>ry8;kyf_I&>>~xYW_VgGQ>eW{$!9*6S^z*^{I@t_bGnV9|vzwN4Hb
zt*+3yxk6c^Pa<<&BYYXt$qILhV>qlqbTqSiu-2(bji9ssnUdSNIcrPMWq-Hr{MoIL
zw80|8q#d}l=R{nnWiP~d?dF=-iqDGQ%I%dqD|c6dR)SYTSHf2!R-#s-rO@pweUz|H
z_7@5vhNH|Kb3n_Zm(j~EYG0f1pNwysilAYyabI7W)9^$~ErlHv+nIW3xvv=N4-(`K
z8H$MGxy<e3n6DVS(^p1_?*Mm<kJnq!N#MDs)=Wg7`z*=c%lnW!!7HVkzXsoWzP<Im
zXfS4r>UNv+F@~*&-2U-(d&0yEBW)}C(dh4C`Saa&uB3wYn5Y>ywe78Ws=B&ccnD*X
zxcw@-&(GQnG18=BWcqjKqsH-zdfNn4fcexC=SPKyq%oLzom6u6$0fcW_hL9rgQU%m
z7EL%S?S+`l{-OYqmDxfPaVGG(pA7Su>2?I0NpID9&ROc*Y+$dQM$9~>E{Zv25(2WQ
zZb`35bvlyosNCK5JepeQ9nbbSQ-$uy@=$eo59*tHKQdS1l4O*66Xfq-Z64WAhZx6S
z@t<h+p=U_jMxqee8=uaZ2i#G39(B!R#XBhgyDw)&6F9>X@Us|V1v+$#vQ%w>ZD++O
zkhaZkAU)1kqkH&S>i6yoJdqrU9tzWW@ul-nX6v+r(tbJRGW*`R)DkS8<${)-5(YyU
zW#&_#>GD~k%7Wz`sUYt6xW6*l>CK@t2P-5aZ!(hIcipf>dfXA)ICA#|Ps)DZV>bv0
zPf*S9WU;L?tdZY&P}}~4<wQ!jK$WNB2&H)@G=04=he)_pfeFLp;<FD^>7~t74Jb*6
zIBiQW%$jy3!JII#4_X!u7({sOX2T#uYjNWdOWXiBp7IRNTf3MU!O7LerOb5fi<XeJ
zgjyRs^mkQ52*k;hyQ7Tr)CB*uHVJlcx6_J&BhJb>3E`Z^=m%YXmqnXEPS~u46OXM&
z1<H+%DnvJ)J6fY*VN+aT3MbT0g%L2#S=4muvqQx3+lo%8GX;bRR)!<{hgL1Z<auOj
z34?q6tWCG`g}2I}cXF56xFzk*>^{vpuqblUU(^${^)>X%esjG|nDel~Sb)p2JQFOO
zvEftOt|yJZK9N2W79}flWYEwyK(3dO<>62U_drq?CSY=|lNGowY)ksc;q(>4R1&3n
zN!Jf`im0F@3EXNG%q?FKGZqiMI_;GG)3AHxKE|TmboriZlGCC!4Xvg#*T9o#RimQY
zI2)eJGl2Ti$9QE^AeE*tsCs%T<k~B2p9JzoK_^-TkD{N{6O-of2Y(LH<tmcN;EK%G
z&95m|+PZh;^z7MP?5kuasPEH@RXQW1<<VtZm$Q3tjp9V-f{%z&6N+YE<oWK?=u%w_
z%zonIP&iRDk=pcZcoU)ODTxW0W+m#SC*u<UMKrJav?cgZ;z`-=PRYWEA2|aTZ_|?2
zuLnrlM$O?mG#AyfJ3{FtOIWbPWRP}UQCW1Lq=Vf3gL*Ju!m>C;XST8K=M{V}b{gE+
zuR9_^NPI=3av`C7=sQPQQArA;ZVxU`@cCX55p^J}8<5!)GIGQ`OLCze$`OB#1AjP|
zWp?p)f8e0CQY<{Rz+~$-=M{QfA%>60C=PP6b7r=u-!68fnJ$Q}Bg?Sx{Z_tH6S^zK
zrP?utrmb^Pz)C||eNdh@l~p=wWD>OS%|5bn^4ZUCRWA>dTpengC5FxjWzQyr*-W7%
z7hDbc%Jqi}(o8wxXRHqZ`yoJ>EbW{@QyXVel7BZLYdveSb^1<qQKpqP$~q=~xTSHL
z&~?73;)I@9KhbbLqT~Iq6$|Lwf83FtF5#kV$r+RQYf$FuXq{Ox=e<G9yi8S%TK9-|
zB`fo9FjUUwxS)VP-`WAU(bx+kz*3KKFben^JGcJ72x)tk|M(8f_Wd_tcD|11H^92Z
zlKFV|0M8dnim|{0B*XhZYYrii>QF9{`}8dQ$#)<^dFJgdV0Pa(pttATK|CN31$b-7
z!<}5wO)*yS4-tLfZ`NNtao1mifSv=w{Kr#v@f`qx+_7dJAOaq*R#8zw#lWvmI^7Oy
zIju}3gzs?_9^=|HDJdx`=H1f{=hoo)_RtuF9c9%a?3=yrZV;$_Ki}P0o&o2Mh!7ZS
zWj5d_Z@7Z6YOJPO<8pJ*Y@h8}VuBKrQ!)L|&bxWXD+rDbNjxKyy0tfh5a+CyV$P?{
z0tWvzTf7T2)f@<MYC5Eju`e$5Y@XIAjgBytn&muINq<OhTLnirh0`Z6jEUusIFM^+
zG$JzCp;^Agt>({sm5wr4r1nxEUc<1`ExIkYb1{{volES!b#4q2gSlY4QKS0VLW$GP
z(Jm&UDjMysYq?2~D$sYgAF^lG%$!Y=P<l8Ub%Qkl5a^x8LmnH4fJ^ZNx6&j>S;Ax5
zLIvlNp-ehVHj@gj?-(;GzjhF#>tB}6v&wo27fj1{7FOb`H}?`dksWYS1*#H!w3|$j
zC938QCaqVtI7QZUo1idpYcy46{xnB5f%@SC%E1Re?D~N6ka3REx-QJ_*{Z4uS)p2W
zPUtF&QnB!25e7DulEOGoiI`Fcf%wVpd@pXj_p8@7%DrgqLQk8wf2v~J6`I>HE!Hui
zy(7uH3k84KA8C<)$~vHQTz7pz3?ip;c5RTEvi^AjB3BNn$vxLSZC^sDLl{DAPNwx!
zt8Wm%sLAFgUA9U=btAD39{*ho1d0zlz<bW7>E$<>?iFzaf5C*Qzmeba@MaIQd8saB
z%utfo$D`x0GV2Y>JbuGT?*1d{U<mqHS>u?56ZkPr5chKA&MJH)N6*f;1}6Zv!obAV
zzj&j{nV~~4Bge@3=e!{On0>cEsb)4P`@y)`pz?IEwe!|V$F?<Q!;dNLI)awJhY7C;
z31m1Tm9Co94Q^Qs2~nwQS{qMFbWVTeVYs~6qJ7Osh-Q#tL;u{<!TeP5!MUK}vTt$n
zB3FEH3s3N;o+{536L87Pi8yR@YW+_r$drb8xUDH%3g#p=sqNlAny1w!s*j9y7LNE~
zWL?snqQ6+JMnFEUPo$h6GVHf*lRvv!`_!;0I?Z>2bcD>!7pwEe4r*<P2h&yY(vBh7
zI_M$or0lh6unVdewr8C=<za@K5Pe#`4+PrMd@rUicEL38W74Np<4>SJaHrF0{sW$r
z>7UqbtOZ?^rt45_gqSYG;jaih8M?0{df&>0Y8#MY{@7Bo$y81B66CWTtjoUcPc%){
zW?jN29egYmR|O?{r$#CzIZb75_)a~X_7kq{=y~ZgdPBZwvK{(O*GfB#r3|k*OvKk~
z5FR0TL9Z3hf@5Fk#yi^^e0!rOQRoDU4T;@Ret99h9O$*y>m8uT-Ag?JazEw{x_PKa
zg$qb8#6<K(e&;_9=wsA>#FC4`N4TIzsmAW$3&@s_iyk0%um6o^1dKs3k2`V(1Uh%0
zCvNJ8{)01bn16sQck}M)_;&9P)4ynkK~MGpIQWkDaL#W;8Ib-l{^P6hyU)w+t+NBg
zYKiF23GBDAKj@4GfkG5xhr}c*Uz~1sz3HaCI%IJFcf~OI+yB78EA%94JRIE3%LKp=
znVFf%aEzI5PR8@#y2pvMR5A5NxCzTIb!24~Oj#<4-^aVh)ZLpmuO))HKv|jXr(%-t
z@f1oyv@IJPCKGsmI{*>WpVgebP^AFt4`};dp|&Q%2y-)72Vw*-#zz$A5bvI3_a(l&
zlIq*wvyUJkU^)*o-Z^nq6}v&XCi+X%#CQv$2Qh>j>fJ<avq>cF%^&YX^zDDk6wx28
zeb{-aeiIp7Y|!cJ))q=Hj$RbP?adw)Ub7(bGB=nsC!t#`?{Ot~edolnWLTAWV4LT3
zA-rP(`?dM#N6>kk#?nk-Cd00V=2PX;<$PrFN}9BHs|)<PRa+wB6vkO>a=Nv?BYr)n
zmky^lr#%E)Z$#C?d+=<R_-mA<ND_OB;_t?upmYnnb%EZV9B<<pNu8TH8O(dZcb@OY
z7oT<rwnY_MJel|!z&Uo0Cx|@6)X#2t>CiBrRE~c&P(b6bA|+t+!)0y$&MiS+PQtaC
zH{|JmrXj%s?gN^AE?~Xc&BHX!vo-|yP?x>01TJpv>&6vWt<Rv4bn4-jFaCQ6#i-S_
zvzp>UfL!HXb5n3?5gn<=e9RI84r$i~vDY;}o$Rmub}59^briSKoOk-N-LamVbG)O5
zGGZ@t9AGXudx94k>#}uHf)_Vv&-cPpHw#^OKZujWv>m9dTN~EuAqS^0ucmm5_mkrX
ztQTa0+WN{iKRfn=kC_J)OFt@!WX<NPqdV3n;Qj0_^%#YY)nT{{-+`Prc)p=#38-b0
z7pq*pdz2D-pQmuQ%YGX%bmeXQ<(ejsrz7g7^s?x3m1_ZaKc{$svY|m!8JmMfc(?ju
zNT1WE8BLS`oK1<yneY$92oy<W;0mlF3;SDIF}4AV<IuiB1%vgU<a8)@ITd<48n_$K
z$yJI%G+hi(+=Jsto<prCM$7XmzjVC?uOF_X27dY)GI~?oalZ|+#;3+PY@jPb=By*|
znWN=tK0(LQGQs@rauwZCIc(sMTiWSC6PCR8Zvph78BnAjQxDf7WGE~r{}B2qyz=i#
z!O-^Q9?D}QiBC}sB<b_#7MM5VzU1atta=RK;h4Ik`7Gy}zJ@c5U`KE>V)kSkJCt^q
zTDVJyNWvJe>b8^4*5=a>R+^kio%KP!!H`VaG6~dUU;7!OpyAr17|SAQ7>z8(>?)-V
zXc`CLz3~BB1><%`>xaQda1?Rr&|ZvI!G!i1mD~-Z5fb$T0kv-BB!iw*C5(>`b+9N%
z<Wlr{8<HEABhfKiwDk^_GWR}2s>fcUgN>ixVeuVlWqnyhUkHX!TOb(+Y9q|vzHn=m
zs8sS+vdh@kKZVrA1*=F@U_bqsZMFRJ@^SLkO5PauYxvQ3Ad2{r#PY6kLW>+#d9<jZ
zaH&QkCT$j+Kdz1^tCr>YLk2>=VXX=);snaF8E8UsHdO}j0MLMJa6QphJ<f9aB!-(c
zVC1m5U#j^9PaG56!+Y3WmWxQ92J4G$OU1c;04VQu2bHL6Ti!Ij+wm6rs6_01Y|H-?
z{!%3>_sAK8K$ibi|8odA?B;M%#hd55$$aZ2AN)VvObr!h^o#w?Y3{~cvvD<U2S_FF
z9($9)wJDGG>`1HoRqL-a_W*-)T<~qi*N6v**CD@|?&953s(&($3*GEk+Mb->02lS%
z<vm>VUgIGO$|f2MeEsz46J>REwXV*!BSM08Jf|OW-BE!yf$^Wz;7<VhdZf@WIk@uo
zP}m9Tm?Iuq|BRt}W9lPILsRq9j)UqI^=b<6TJipO`OR*Dpr4xqN#;?2Z`!u^CP^Jm
zi~_sTs@2TCb_2o!0xzPfU>xzh^GnCxrrZRjr}y$dxf6UQ?x9d@8v7cb3!^){7Ak%3
zqMl;xi_?m+Y$H@)U!mUa^7oNSH<cjPfJRHD>v4Wk=uISDG$MB5kUuz)=R4$?htjz-
ze4}z?z<s6Wk;Yr(tK7={b%by<b-SrOYo)Ze!*;@Ub<Us89`2>O?KK4V8sqm8f)1{P
z6Teu{pT06Il;I30wDO7XPEd)(r{^$I6Tzjr5y-Rfl(aJEb1S0D)%JseIB5zi$n9Hb
zRnJhNf?wpoR{VFnS!vjsE~EIaUem00$kqlkAo8{{9FO%E8Kj5Ot&Ijhyk#r5NKj=5
zg&}8`CSg4c5k{cvJF2};S`<geZBgd4{9twkDmsEO4oMH-f+-_sun~x#9D%b8`PleS
z9X=mV6u+e2Kn>C(eFe|YXe!k*PX-3eS)eY9K+k7~KsIg#dkEDpA}8ml6jV_fSWv@P
zBo+3BHg`_`?+u-=HlK0+l+6~0b!7c{<vT5pI8qpB-o2t#5B1eM%B<>6p{ikYDA5J#
z_}V-gywkdY&|ZP9tG2+qlvkr524e^6(H_q)xQ)G!>}P5uP||1uTjC3+Mv94d-Ei&Y
zlmQeNEyT`QQ#LA&Sg2}S$67iBxC~5zC`h-Td|_rrA5`Uso6u|YXTNRDXYN73_I`2S
zI68wI0zm%H!LoW5-=P1<LR$?F?oEk+yEHDVr@Af_7kmg4kvgtUZFcNX@h+5l$}tFv
z-b*NAGrugI$UC{zZI6o9N^;bhZeGiSxrjTRBIMJ~;|Ng4$Urlr>(#`E2nGv1Y6|Ot
zQ{HD<=(fP86QvrhTJ~oieLa>cKW*-M-aGrCK|tC;1pB#5ph(Zq<;s^6E2-4AtG+co
zU22cnqYJ}Vh_U3akN7Mr?|f=+cFUPyh$Cp%{e%z#H+<7HEIfVi!rW6stVixy%U*XT
zSVexHY(iCzHjKDNkZ0|a>r@{QA4kapUU)%+ZMqfmJ+;$TVNj5oe`*QKUJP9tj$G;p
zo0_<FkoR0LZ|)tFCLFTe7C&Q83VdqeMz2=gJ#w^Q4+Hx4Eb$6f@CMPjg*1fJ84eTB
z*azVCCE}|U)64KHXUi@RXx577Kx$k2wF>N){3};PT`Hl4xaN)}2}UbdxSoN?vppMY
zLIz_)5*Xsc4L`Hw5`T@c1){2VO<PTABGaXKFYdi3pC!qdD(0;I{PeW>RO>gVEferD
z(^nL*UoxrMAZFwA+dTK+hS59PxVSWMoo3eME1cR<^#<S39kqcR)!!2Q3s#s2KSPzC
zZOKcP&tPA!p=x5JMmugf8@yV;Y-NdLFq|R>Xs_0!f)FNa`Rg9hNz0#`pq(fD_hcWl
zp0aj9w4O^9Dki}y(;?GOQK!Zjg{^mN)(Zj!K0I&257sN@^BltV*8U_qE}tc+w?8Bw
z5^iymzFz5S!dJ$8xzb#<{q%P4s&SkauC?m4Sj})MMXg`Gp~t^?$9+dSW!?Ev;{Q5O
zF^A`nnzAkagr<U4XTFszwY9DlR`QHlYP_Ii*|G?K)=o6z+{SP<T$V{|BUSya;Junv
zBTW`uY1eb(MfBHG$tf$f5UXPJA%?D*oeOmw=ChSYg*XI{>ZE6_NAR2Zfo|#m;w&5T
zYMh3M>f7(1(Xl_s_4W^*klo9F{5$W81oxS;EAapqnb+RbQ*~m#IDQ02n@0?Ap+5Y{
ze;vxX6a6JG8<%rB)<xRIZqJ|t;te<N0IK2V1{a{$eLHE0f7M(qUnLp>13+z7t#t<q
z8a9BW#T0+b3(!6RqRe;Rx>Nryb)DV#Zf7GdGAsUZ`V!Z@|DPEq4=djA(9lLr9i5Kq
zYCCkXk?zCU75kB~yKKPU$2)yJ`DhRAb8Cn{EGQ_*?dU#S9+5WNpWCF_odn;XmaIA3
zQTO?2-iG*J1~d9!A|0s)k{d%a{)BA6nDA#ug9OhQO1(oMv2`qyz^3^<ZTEO;8kU|l
zJUgvM>_`jgIN#~@PM9GfE^OKt*}6YOPokhI=+ZnxUOFu84WI=*=R0pC$5(s44=wS>
zT78bZ_vH;}>{HmVgVjMK%@x<`YO3i)YS~BO<-4n4Jrg$}YT8!>QB35K?bzz?dS<We
zofFvUPptcrS|#h88?@^PTp%0p*?U^d=G7x>>1xM1a#e>zZo0Gv`@&}Xvgw0Ttj`Pa
zHfAfS^T-h^m+*GlVnyh6$5Z&jF~!0zrB{j>Kv=Q<iuy7UV&+T)FTDvd-fA7vb%c1x
zPV3k&GiFfv4-w|KX${0G5!#zC)BqIh@nME#TDNm~3uLjM))gp7g~;Gr*4i;LF2w8D
zglQeiKD);n_;9S1>)nAawkwP_-n#pXT@rt9wI)&H$a>CtepQihYCl|R(ZEWlNe763
zCL!M?6A|e}zyW96NcMT};owt~`7|RFFiKLgQfiN>@4LcfjKgY=B_fE|BzZ-kirFEV
z?D$tL2kIB&JXV!|5H1=?>3y4VSHXv%OG}&QMCGOn!5>EYF0mORwVCTQ3|WF9?ox^F
z*)u3axE_Eg39KcM^X4|hVGvo~b5UDY%d|^Fsi}o_9<mhmlBi6!mhjk0j-_7hsS&9j
zclFk~(s0zA$kOj$PSw}FTw1SVS6R4PYT`>;H?k^grEJnd1~b>maB{&E(jyRB?|cb{
zYwnxK#KEHlX|5I{WBvaAa_IyVTO_}ONA{?klp<h$T*xQW{M}6Yw6x#_!{UKDseu`E
zM`*w*ICi;bbg-O36|*vW47C&_UxNAG#yT)WF&py!BSY;NY+#4ur*O%%`E#v37)w&P
zgqg1d`V*BgCj#VaOzSlj%Xw1fL^E#x=F}2+l_S{aR?y^M*cT}NJ$)=>q*Wn~@witL
zoUtTD5M=iR&2v)8Cj$!;5e(h71wn!k@m#I&yq3b0oo{g+)6a{%jO+8{Q<QpUX69HH
zlrsU*yN)c4BY%25@AEllR`*)7yf<&lt$0!W?9m+Pr6wa2i0awK#LsBkT=`bR)G=tf
z%ieRQbXNNaWiFYTvzhNmTi?=ts%o)#LAYEg_9R7gHl=_^HvgT^#!H^y?Yj0e9+8E-
zp`{_mLT2-=@Yg3Fv8Bf#Ey3FnX(>3b7U-0BwQGTCz@2o2-wcZZ2j58#za7wFrD;mX
z^_}Lk966XeS@i01ZDDUcmV8;d&eIu*jwfGh|DkIj;7)J);w;Q6w{d~ZM#EDb5xJ^<
zm1v5BAh9}IS#vDRS$J6)Lz!p8FZ&m}tZAKvi0IE^962xGnKts*`}Ce)Ab9f5xm{(?
z$bFnR#a|I}EV~XdIw~I&{d~6TYFc-MZ0;hdIrJH(_&vL3RL8>k9kaP-h$+8PQ(0>#
zgMI+q?7<r<#wPC9qQSniza0^Bsdketha_r``N(yS3Sls*8;#M)ZZZh|C!WFN?q`C5
zW^*Fs0)xF5XGlS?X&=B08YXL0=;fx>J`-9WS+Gl*AHTBbv{6&We9-5D!UZGt9iw)M
z@L8TynECvO@gT?q55_xza|RuYFRa~&l!nf-7=<sy01a(VFj;pUkgH#khrj7!W#Mel
zUlMAy4?v#U=1yz4c)K=W2q~1zlnuYdVGZ16=gvmg;#1K%b%<lUnMd`%c|xv~-Y~HO
z^t)GPy+7p4#nGZYr^;00CdpGaP3?`#-hKY#B6Zn7m5gexp67Z0M(h0NTUGKZx@Y-H
znkTNb=U=Ig{-EkOqiLFWCdXWyjF^dTsndBbq30&RT;9weDq`}8uS`%<2iZM90yE@%
zk5cTV7JXv!VRPhNe7%Q!Z+%{jibdfCDsrN^FadI#4)?bMv@>e|Ec=q)eq5oDxvw*J
z-J|13W-I@byQI$w6!Q<y*{->p{S6+qh+8V<!LBCc&$r+t4ATS_UNZyS?`M2JL<0Yc
zkDP~qsGcDAFDbqt+)3>0efW$1kjvL(-@%XW=l_~E*EIXH@xT<2pyGx-Y!GjAjD`aF
z9#8x6<?5r&D2RG2XW>b?0U|_^h!_NtRo{8}zjD5{r|bq|qMM08u1ev*W6XvgJQ&LO
z?S)Jk?T-@8Y6Whx9~7H?Z>Qv7fAl|TR$6Yzn8s0RekJwJ^TVI)5*OV`|4IA`kN}(g
zornK8*E0aD_W%7drN>~uj*2}9WcoWdb#?HchSY*s=W=1`!{BJOT@ys!4I4G3#J|K-
z4yi182YL&>-XEFaaW`re@dPN7Hz3nvHpxh$Yb3qhOGC6;bK@)a4E<%oRbup7y)7NK
z`4gw73rtm-uG@Nyk&TX;ZTAv!LBWgxpGMh_=D#b<ydZEtX6tn{5Kk9W&E|`#-}zoh
z2)(zdE`gA&RFYIWY325ES;XVAA7cIHW%kST5I>Yb0K)uh9s6NqCEZ(Ed<3K=7+Rkm
zcbIyd=Nd2HfiW`~!W@!+w$nhLBbKfU<V@mAC@0n>m9V3Bw`>gW-rmd)D_PUL?b#+0
zg!k*xTmzHpv^hV?$R<)WyM2wv&$_1jqQDc&wrRr<)9{+IXTD^gdD^#eVpoK0WZ?`(
z7551JtVE3ecujs``bo9eh0>QZSczO%mZjb-5OOqm#859?UyyOm)mCRg^;Y3e7R<9r
zoAV+hXD<UmnwFzq*Z>7Ldr+>_gSS%myy+q>(AHV~DOiuyYq98?&R!wbiTaCYn)&X3
zJUn4YuVv|s4RfX?&TKmaQI<r%gj6@CVrISqHKn~a4nc+ifnK{;gIu+F{gK`3vDe~S
zYCNB{z9-)Z)k9un_HKD}*v2md*8w=%qg2^%x_IxCV-UBJ!nyWyhx*}GMkQ++wqCP0
zR!HH1poR^{c~3S#HbnP-Yc)?EGy@>33%ppWCPb@8uYC_qwbnrk;`(Nu*Xf>2vm2m3
zd6jV0_0&P?_X1KECU{i>)@hH<-rs9&p%X$-xO=|3Hu;mtYb(jo(W&ege*Z2>V6n7u
z{kRnI6nHVp*O4jy(clCY9JlomNH6xjI0{xepmqY0ns67$?kRk;H-<;~>*B~xX4z%q
zookw-6{={6R?fLpRW$^Hg1$}@reRh};48gS>K59|UAE`fzkTH!>K#P9^ccw6XxzZ`
zDM|pzBW1*j+2W~pXURu=^IL6oa5lDLET}d&WhAY{?_kgwaj3SHKff=7f=8In=$;W0
zHqU`*JufB_AcvE;Uap9raa`6mvi0Ryk!(9{SwrpY#Wp03h=ww!BA1Gq8Z|3<Y%T>w
z%1C$T^=pX|8RBJuE&Kpr#HoIiBD@O9x$Z*u5axX^_IlY@$I}1S8@d)nw|?qZRivB{
z^}O2Uy}e<k2zx(**T)fjJ=tHUX}yT#1*GrbX~WIVt|xb^#saaE6E5yBuIuG=p!^w?
z(W2uw*2D|iR1*3nc*#I{Kvf8KEfqNIqIW@9F+b25GQ2m2{2}5=pCZfL&5$19f7bJy
zr%xPdW-n6U805>Vfvb|GRtu%A>j%wq?tWq8$z=POeM~{6gtYEJ7j_Mh^h7+=Wl#yF
zsCx?wr)=<S;WC!?Enh%w8$70!z>B|SXFkg)V85T~e&+p=nui;u{LtY1ac3KdHU?)3
zt)GtI0&*74QnWrium0}#s4S24K88FL@uV^3lFBJHF)I~`OFf1m%yh%cGZD`YE0^is
zX|PG};=rTCkpfTd$~ICpl>+hS#4uM=h?I3!)+?NkxW8V)gm{_GK#?(^dP4liUw?Z~
zInd+%p7-$AAz)P%&$;+NKx=?69q}vU0|FWC`9B(<NN$220Cb>Ivil!B{=>^v{VP7k
z+*}!e!2dh7k-rxzQCEjfad|L9DWgDfclFl$2V6SU$A4M!<%V-R1!x9<+NH5vJCO%i
zjek^r@<%|$MMVMEEG(857DlV7f*NYSdV4AHhLd|zYv+@lu~G2HXNL@rEc_}r_XD9y
zyzyB@k5gr2Ag=}_yLaZy6nQ;7*?Ev9Gws9AZ2SS_@xmYxFcCIRJ<(v}k0#TeEwc9c
zKZ$3SuEVtU?bN6>mGgPBq-mGp`=EOpd`Et2BzV+K)_h74pwm>nz6R+bTbm_u+*%K}
zbUn}m$}zh!Sea<s0VRzUq`|kwn^g8K0-NI2z0WGgy2KkJJO@q+gF{+m{X)cAWHH{E
z2|VIEwX2=V_XB=wm76{EGuCCT6Ia}<bNip#LXWnHCo{)1!X<yz!SV+{8|l)w=i*ZG
zJP$Qp{|GLq!IsPCULj%SGVPMO3A@(+`g^lS^-q+ZA$!ht_F(E?K7G?#StaDc94?qj
z?hP3%X{CNc$1eRtG}YJ_6935;_>Z->e_6)|Y(AInz<U1QF!!MU)EW4%{u_w;MK8NV
z8yW*mwZL|BxjlPo_5WX#vVTFCh&cLsvIz<;Myxs5JjPqhx9_miwzb&RoNqFO+nhC2
zbSq0N7!~Xq935P2LbX^>iB(b`MnbVI^pwSHd@|ws{N~P>&WsjT+wMDeIGi`A0M3_O
zj)KWB`~&L){Cts~u|zpQ|B3&TLCnFY<E{TOVpvRmz|BcZPs^f=A=TR%Ec)6f)Y4%`
zdLPkwe|*OL#dQ;ERWRo?T$ul>#4nadxgg&Qlwz#Vo*llN`6+&Py<;OF-Sy8fq(aoU
zKauIttEI?~A3xHU@9mZtZ_M3LxUn;1Wle%agwG2ThP}w^XstY+sMQZfP37pb-KON1
z#c)dgU~jMS(pn96D^!rn(HpYVVa;StQcH@h%ff9)(Fs=mF-pM(dDT3JwwK!!4nfBH
zW5OdDZqYw!Z|cFp2Y7$JljQuU`@kOX)@^`)dm!9M-{BB4P}`ed@-}Ac9aMRV#BnCQ
zDS3zf62D-L+8Cjjx@`>G0t@uJ4_>U@I(DBYD=>1SOfNu!MI<H#`j7JcNL8O2kNOUg
zoOI<!{p^xz48hPkv#Gi$&T2(dAQRSJeuB?3q<YL^mVj7<g|Vd<$FDr#UJI4W5o_Zr
z^Y#luqe}KLOaB<0JIHHlb<F}NuAJnR>1|S9uiC;BwNO>jDEt?*7K-p^bSp#$I&tt}
z*amv38g5jNAXxV2dC_J^wvq12<Jx*_2cuEbEgQ~{1if}SJ-}h<Zb|rq`xSg1Vz=l}
z5`s}tx&U58C!FaH+5C_m{Ys}NIwH9eTi=O0SLgj?p@3B1oI}o`1ezt)kGoEwC`pK#
zGO^b_o2y3@3z~o0TGHPx+ur`e{0^wJCE2Qtw1!w~Ky_5;5Cpw=?K0U_HQ0Iy94_>z
z9?^@B+?>2~0el{=ZZ_P^$j^A(ABY4a)tOD-tlMZUorC$)8GUMqw5mc}3mOtAmzo}#
zLZ0S`r#rUtWF;mWUhBbwzr8#}TETc&`yAo>(eK7tQ7ez(twcY7)S!93``KxlB22bM
zD6Lb63=P5scSxDc>=f(%AEVO|p}n_R^x{6XP=`f@mYPuF4f$F~cXSTbm#)z0V5%Og
zbmu6BHu$7JhjgIPqdve4*b>9;^{^D+77pIuuiLCc8OLIG$ul2wSI~lT8BgZY`4yY8
zSx@V$kIMFfkKM3yz-gn{)!*SB9k0@E6j)eA`p47{I=<wQ-D>OfnYo-&yCLAddFntv
zl(jPX2Eh@$x~U!;QA&-W=CZ54$4H8>=_k4Ls1n^_Wn)68V_TXFblme01f`+29yUO)
z*IgBOf+<&z-B?gZs*P@`zDU~?d;R1m>fU2NzPqIDqaven-N47r;TiZ_AuJ_(+X3%G
znt~2yreuAvatL@%g9BiFBg~C>BS$5jZ3@nzosT?*Yfm$CP0Q|?-SU$A1fn#><P1$-
z%-%X&pT?4NlTmBj=K(51Y$ZHduSMiz&;2bT1AQy&>EniP876%FTeA6>aS~;a(d<@x
z=hKJ-_y{qboc0MM@331rc36Dd?(Q#y(7FlQUwU8kHRcx*WS=omw<&|m0(fu}Bz0hi
zXIo$h==xjGwc|TPF_l!s*sWI$JW-56^(AHPIo|nAcka=b_^vj^sH(+me<dW9@9t12
zk}RqiW@XN}74ZE4D8^1Vcl8g$mo)(#<H9T5Zu>{Jw_42lYjZRAD_RQwfUkEd0#8oE
zO4Xe!We0XBk41RS`FydCZ^OjGIoJ92xy?E4Y&>eD{}=JMguDYYfb#r16*x@bs|>o`
z>U%7(%!#-(qm?Kp-k)Pm&;Zw%EvAPQcl8s&+8NZ$^$T$3s9n=FOM&*iI|O4b-ClAp
zZHJ#crw3U<k~VMA_(pdK#c^pCTuyTnlr*&&gFI0<d*W^S8sLzCjIUg~TzAR+uYUs-
CK!^JP

literal 0
HcmV?d00001


From 5fd24c4302a6e2a8c1ab3a9b6c625fde7e9c11f4 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Oct 2022 14:43:26 +0000
Subject: [PATCH 148/263] build(deps): update material-ui monorepo to v5.10.10
 (#4197)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  4 ++--
 web/pnpm-lock.yaml | 40 ++++++++++++++++++++--------------------
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/web/package.json b/web/package.json
index 14d2fbb59..5f4e5eb93 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,8 +26,8 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.9",
-    "@mui/material": "5.10.9",
-    "@mui/styles": "5.10.9",
+    "@mui/material": "5.10.10",
+    "@mui/styles": "5.10.10",
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index d9f6fcb1e..44587c5fa 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,8 +11,8 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.9
-  '@mui/material': 5.10.9
-  '@mui/styles': 5.10.9
+  '@mui/material': 5.10.10
+  '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
@@ -73,9 +73,9 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_6usjrp3ypnzobhq35dcwvjrt3m
-  '@mui/material': 5.10.9_ikcgkdnp4bn3rgptamntbhbo7e
-  '@mui/styles': 5.10.9_iapumuv4e6jcjznwuxpf4tt22e
+  '@mui/icons-material': 5.10.9_z3olqqf34i6isisqzfodoltscq
+  '@mui/material': 5.10.10_ikcgkdnp4bn3rgptamntbhbo7e
+  '@mui/styles': 5.10.10_iapumuv4e6jcjznwuxpf4tt22e
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
@@ -2831,8 +2831,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.101_rj7ozvcq3uehdlnj3cbwzbi5ce:
-    resolution: {integrity: sha512-a54BcXvArGOKUZ2zyS/7B9GNhAGgfomEQSkfEZ88Nc9jKvXA+Mppenfz5o4JCAnD8c4VlePmz9rKOYvvum1bZw==}
+  /@mui/base/5.0.0-alpha.102_rj7ozvcq3uehdlnj3cbwzbi5ce:
+    resolution: {integrity: sha512-5e/qAIP+DlkrZxIt/cwnDw/A3ii22WkoEoWKHyu4+oeGs3/1Flh7qLaN4h5EAIBB9TvTEZEUzvmsTInmIj6ghg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2855,11 +2855,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.9:
-    resolution: {integrity: sha512-rqoFu4qww6KJBbXYhyRd9YXjwBHa3ylnBPSWbGf1bdfG0AYMKmVzg8zxkWvxAWOp97kvx3M2kNPb0xMIDZiogQ==}
+  /@mui/core-downloads-tracker/5.10.10:
+    resolution: {integrity: sha512-aDuE2PNEh+hAndxEWlZgq7uiFPZKJtnkPDX7v6kSCrMXA32ZaQ6rZi5olmC7DUHt/BaOSxb7N/im/ss0XBkDhA==}
     dev: false
 
-  /@mui/icons-material/5.10.9_6usjrp3ypnzobhq35dcwvjrt3m:
+  /@mui/icons-material/5.10.9_z3olqqf34i6isisqzfodoltscq:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2871,13 +2871,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.9_ikcgkdnp4bn3rgptamntbhbo7e
+      '@mui/material': 5.10.10_ikcgkdnp4bn3rgptamntbhbo7e
       '@types/react': 18.0.21
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.9_ikcgkdnp4bn3rgptamntbhbo7e:
-    resolution: {integrity: sha512-sdOzlgpCmyw48je+E7o9UGGJpgBaF+60FlTRpVpcd/z+LUhnuzzuis891yPI5dPPXLBDL/bO4SsGg51lgNeLBw==}
+  /@mui/material/5.10.10_ikcgkdnp4bn3rgptamntbhbo7e:
+    resolution: {integrity: sha512-ioLvqY7VvcePz9dnEIRhpiVvtJmAFmvG6rtLXXzVdMmAVbSaelr5Io07mPz/mCyqE+Uv8/4EuJV276DWO7etzA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2896,9 +2896,9 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
       '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/base': 5.0.0-alpha.101_rj7ozvcq3uehdlnj3cbwzbi5ce
-      '@mui/core-downloads-tracker': 5.10.9
-      '@mui/system': 5.10.9_h33l6npc22g7vcra72cibfsrvm
+      '@mui/base': 5.0.0-alpha.102_rj7ozvcq3uehdlnj3cbwzbi5ce
+      '@mui/core-downloads-tracker': 5.10.10
+      '@mui/system': 5.10.10_h33l6npc22g7vcra72cibfsrvm
       '@mui/types': 7.2.0_@types+react@18.0.21
       '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.21
@@ -2951,8 +2951,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.9_iapumuv4e6jcjznwuxpf4tt22e:
-    resolution: {integrity: sha512-dK6tsHkEp88MkwEDCxbqscj4Fa2aYBkfwy1MXMCexzx9TqxuahC0KSxBHfMMWZ0zV7xW5Suzwu8vveCp4uFN5A==}
+  /@mui/styles/5.10.10_iapumuv4e6jcjznwuxpf4tt22e:
+    resolution: {integrity: sha512-utr87q/euocRdc2ekFX7DL1gqTVfogSVeu74Nspr8rtK/afC9QwF3ScP/XThVXWPcQKjBWHMKWtAO9BSVE4KDg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || 18
@@ -2982,8 +2982,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.9_h33l6npc22g7vcra72cibfsrvm:
-    resolution: {integrity: sha512-B6fFC0sK06hNmqY7fAUfwShQv594+u/DT1YEFHPtK4laouTu7V4vSGQWi1WJT9Bjs9Db5D1bRDJ+Yy+tc3QOYA==}
+  /@mui/system/5.10.10_h33l6npc22g7vcra72cibfsrvm:
+    resolution: {integrity: sha512-TXwtKN0adKpBrZmO+eilQWoPf2veh050HLYrN78Kps9OhlvO70v/2Kya0+mORFhu9yhpAwjHXO8JII/R4a5ZLA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0

From bcd5ce491c02d6a05da9a65589f096b8a8651b07 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 19 Oct 2022 06:16:13 +1100
Subject: [PATCH 149/263] build(deps): update jest monorepo to v29.2.1 (#4200)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 495 +++++++++++++++++++++++----------------------
 2 files changed, 250 insertions(+), 249 deletions(-)

diff --git a/web/package.json b/web/package.json
index 5f4e5eb93..7c7c40863 100644
--- a/web/package.json
+++ b/web/package.json
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.2.0",
-    "jest-environment-jsdom": "29.2.0",
+    "jest": "29.2.1",
+    "jest-environment-jsdom": "29.2.1",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 44587c5fa..bfbb8bc38 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -43,8 +43,8 @@ specifiers:
   i18next: 21.10.0
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
-  jest: 29.2.0
-  jest-environment-jsdom: 29.2.0
+  jest: 29.2.1
+  jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.11
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0_eslint@8.25.0
-  eslint-config-react-app: 7.0.1_4ubwuetphstteqvh3rzlgov3gq
+  eslint-config-react-app: 7.0.1_qmd4m3kwjsj7vjajupe47kzjqa
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
   eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.2.0_@types+node@18.11.0
-  jest-environment-jsdom: 29.2.0
+  jest: 29.2.1_@types+node@18.11.0
+  jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.2.0
+  jest-watch-typeahead: 2.2.0_jest@29.2.1
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -2510,20 +2510,20 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /@jest/console/29.2.0:
-    resolution: {integrity: sha512-Xz1Wu+ZZxcB3RS8U3HdkFxlRJ7kLXI/by9X7d2/gvseIWPwYu/c1EsYy77cB5iyyHGOy3whS2HycjcuzIF4Jow==}
+  /@jest/console/29.2.1:
+    resolution: {integrity: sha512-MF8Adcw+WPLZGBiNxn76DOuczG3BhODTcMlDCA4+cFi41OkaY/lyI0XUUhi73F88Y+7IHoGmD80pN5CtxQUdSw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       chalk: 4.1.2
-      jest-message-util: 29.2.0
-      jest-util: 29.2.0
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.2.0:
-    resolution: {integrity: sha512-+gyJ3bX+kGEW/eqt/0kI7fLjqiFr3AN8O+rlEl1fYRf7D8h4Sj4tBGo9YOSirvWgvemoH2EPRya35bgvcPFzHQ==}
+  /@jest/core/29.2.1:
+    resolution: {integrity: sha512-kuLKYqnqgerXkBUwlHVxeSuhSnd+JMnMCLfU98bpacBSfWEJPegytDh3P2m15/JHzet32hGGld4KR4OzMb6/Tg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2531,11 +2531,11 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/console': 29.2.0
-      '@jest/reporters': 29.2.0
-      '@jest/test-result': 29.2.0
-      '@jest/transform': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/console': 29.2.1
+      '@jest/reporters': 29.2.1
+      '@jest/test-result': 29.2.1
+      '@jest/transform': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
@@ -2543,20 +2543,20 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.0_@types+node@18.11.0
-      jest-haste-map: 29.2.0
-      jest-message-util: 29.2.0
+      jest-config: 29.2.1_@types+node@18.11.0
+      jest-haste-map: 29.2.1
+      jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.0
-      jest-resolve-dependencies: 29.2.0
-      jest-runner: 29.2.0
-      jest-runtime: 29.2.0
-      jest-snapshot: 29.2.0
-      jest-util: 29.2.0
-      jest-validate: 29.2.0
-      jest-watcher: 29.2.0
+      jest-resolve: 29.2.1
+      jest-resolve-dependencies: 29.2.1
+      jest-runner: 29.2.1
+      jest-runtime: 29.2.1
+      jest-snapshot: 29.2.1
+      jest-util: 29.2.1
+      jest-validate: 29.2.1
+      jest-watcher: 29.2.1
       micromatch: 4.0.5
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
       slash: 3.0.0
       strip-ansi: 6.0.1
     transitivePeerDependencies:
@@ -2564,14 +2564,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.2.0:
-    resolution: {integrity: sha512-foaVv1QVPB31Mno3LlL58PxEQQOLZd9zQfCpyQQCQIpUAtdFP1INBjkphxrCfKT13VxpA0z5jFGIkmZk0DAg2Q==}
+  /@jest/environment/29.2.1:
+    resolution: {integrity: sha512-EutqA7T/X6zFjw6mAWRHND+ZkTPklmIEWCNbmwX6uCmOrFrWaLbDZjA+gePHJx6fFMMRvNfjXcvzXEtz54KPlg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/fake-timers': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
-      jest-mock: 29.2.0
+      jest-mock: 29.2.1
     dev: true
 
   /@jest/expect-utils/29.1.2:
@@ -2581,49 +2581,49 @@ packages:
       jest-get-type: 29.2.0
     dev: true
 
-  /@jest/expect-utils/29.2.0:
-    resolution: {integrity: sha512-nz2IDF7nb1qmj9hx8Ja3MFab2q9Ml8QbOaaeJNyX5JQJHU8QUvEDiMctmhGEkk3Kzr8w8vAqz4hPk/ogJSrUhg==}
+  /@jest/expect-utils/29.2.1:
+    resolution: {integrity: sha512-yr4aHNg5Z1CjKby5ozm7sKjgBlCOorlAoFcvrOQ/4rbZRfgZQdnmh7cth192PYIgiPZo2bBXvqdOApnAMWFJZg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-get-type: 29.2.0
     dev: true
 
-  /@jest/expect/29.2.0:
-    resolution: {integrity: sha512-+3lxcYL9e0xPJGOR33utxxejn+Mulz40kY0oy0FVsmIESW87NZDJ7B1ovaIqeX0xIgPX4laS5SGlqD2uSoBMcw==}
+  /@jest/expect/29.2.1:
+    resolution: {integrity: sha512-o14R2t2tHHHudwji43UKkzmmH49xfF5T++FQBK2tl88qwuBWQOcx7fNUYl+mA/9TPNAN0FkQ3usnpyS8FUwsvQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.2.0
-      jest-snapshot: 29.2.0
+      expect: 29.2.1
+      jest-snapshot: 29.2.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.2.0:
-    resolution: {integrity: sha512-mX0V0uQsgeSLTt0yTqanAhhpeUKMGd2uq+PSLAfO40h72bvfNNQ7pIEl9vIwNMFxRih1ENveEjSBsLjxGGDPSw==}
+  /@jest/fake-timers/29.2.1:
+    resolution: {integrity: sha512-KWil+8fef7Uj/P/PTZlPKk1Pw117wAmr71VWFV8ZDtRtkwmTG8oY4IRf0Ss44J2y5CYRy8d/zLOhxyoGRENjvA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.11.0
-      jest-message-util: 29.2.0
-      jest-mock: 29.2.0
-      jest-util: 29.2.0
+      jest-message-util: 29.2.1
+      jest-mock: 29.2.1
+      jest-util: 29.2.1
     dev: true
 
-  /@jest/globals/29.2.0:
-    resolution: {integrity: sha512-JQxtEVNWiai1p3PIzAJZSyEqQdAJGvNKvinZDPfu0mhiYEVx6E+PiBuDWj1sVUW8hzu+R3DVqaWC9K2xcLRIAA==}
+  /@jest/globals/29.2.1:
+    resolution: {integrity: sha512-Z4EejYPP1OPVq2abk1+9urAwJqkgw5jB2UJGlPjb5ZwzPQF8WLMcigKEfFzZb2OHhEVPP0RZD0/DbVTY1R6iQA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.0
-      '@jest/expect': 29.2.0
-      '@jest/types': 29.2.0
-      jest-mock: 29.2.0
+      '@jest/environment': 29.2.1
+      '@jest/expect': 29.2.1
+      '@jest/types': 29.2.1
+      jest-mock: 29.2.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.2.0:
-    resolution: {integrity: sha512-BXoAJatxTZ18U0cwD7C8qBo8V6vef8AXYRBZdhqE5DF9CmpqmhMfw9c7OUvYqMTnBBK9A0NgXGO4Lc9EJzdHvw==}
+  /@jest/reporters/29.2.1:
+    resolution: {integrity: sha512-sCsfUKM/yIF4nNed3e/rIgVIS58EiASGMDEPWqItfLZ9UO1ALW2ASDNJzdWkxEt0T8o2Ztj619G0KKrvK+McAw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2632,10 +2632,10 @@ packages:
         optional: true
     dependencies:
       '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.2.0
-      '@jest/test-result': 29.2.0
-      '@jest/transform': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/console': 29.2.1
+      '@jest/test-result': 29.2.1
+      '@jest/transform': 29.2.1
+      '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.11.0
       chalk: 4.1.2
@@ -2648,9 +2648,9 @@ packages:
       istanbul-lib-report: 3.0.0
       istanbul-lib-source-maps: 4.0.1
       istanbul-reports: 3.1.5
-      jest-message-util: 29.2.0
-      jest-util: 29.2.0
-      jest-worker: 29.2.0
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
+      jest-worker: 29.2.1
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
@@ -2685,23 +2685,23 @@ packages:
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-result/29.2.0:
-    resolution: {integrity: sha512-l76EPJ6QqtzsCLS4aimJqWO53pxZ82o3aE+Brcmo1HJ/phb9+MR7gPhyDdN6VSGaLJCRVJBZgWEhAEz+qON0Fw==}
+  /@jest/test-result/29.2.1:
+    resolution: {integrity: sha512-lS4+H+VkhbX6z64tZP7PAUwPqhwj3kbuEHcaLuaBuB+riyaX7oa1txe0tXgrFj5hRWvZKvqO7LZDlNWeJ7VTPA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/console': 29.2.1
+      '@jest/types': 29.2.1
       '@types/istanbul-lib-coverage': 2.0.4
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.2.0:
-    resolution: {integrity: sha512-NCnjZcGnVdva6IDqF7TCuFsXs2F1tohiNF9sasSJNzD7VfN5ic9XgcS/oPDalGiPLxCmGKj4kewqqrKAqBACcQ==}
+  /@jest/test-sequencer/29.2.1:
+    resolution: {integrity: sha512-O/pnk0/xGj3lxPVNwB6HREJ7AYvUdyP2xo/s14/9Dtf091HoOeyIhWLKQE/4HzB8lNQBMo6J5mg0bHz/uCWK7w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.2.0
+      '@jest/test-result': 29.2.1
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.0
+      jest-haste-map: 29.2.1
       slash: 3.0.0
     dev: true
 
@@ -2728,21 +2728,21 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.2.0:
-    resolution: {integrity: sha512-NXMujGHy+B4DAj4dGnVPD0SIXlR2Z/N8Gp9h3mF66kcIRult1WWqY3/CEIrJcKviNWaFPYhZjCG2L3fteWzcUw==}
+  /@jest/transform/29.2.1:
+    resolution: {integrity: sha512-xup+iEuaIRSQabQaeqxaQyN0vg1Dctrp9oTObQsNf3sZEowTIa5cANYuoyi8Tqhg4GCqEVLTf18KW7ii0UeFVA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 1.8.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.0
+      jest-haste-map: 29.2.1
       jest-regex-util: 29.2.0
-      jest-util: 29.2.0
+      jest-util: 29.2.1
       micromatch: 4.0.5
       pirates: 4.0.5
       slash: 3.0.0
@@ -2774,8 +2774,8 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@jest/types/29.2.0:
-    resolution: {integrity: sha512-mfgpQz4Z2xGo37m6KD8xEpKelaVzvYVRijmLPePn9pxgaPEtX+SqIyPNzzoeCPXKYbB4L/wYSgXDL8o3Gop78Q==}
+  /@jest/types/29.2.1:
+    resolution: {integrity: sha512-O/QNDQODLnINEPAI0cl9U6zUIDXEWXt6IC1o2N2QENuos7hlGUIthlKyV4p6ki3TvXFX071blj8HUhgLGquPjw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -4127,8 +4127,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.2.0_@babel+core@7.19.0:
-    resolution: {integrity: sha512-c8FkrW1chgcbyBqOo7jFGpQYfVnb43JqjQGV+C2r94k2rZJOukYOZ6+csAqKE4ms+PHc+yevnONxs27jQIxylw==}
+  /babel-jest/29.2.1_@babel+core@7.19.0:
+    resolution: {integrity: sha512-gQJwArok0mqoREiCYhXKWOgUhElJj9DpnssW6GL8dG7ARYqHEhrM9fmPHTjdqEGRVXZAd6+imo3/Vwa8TjLcsw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -4137,7 +4137,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/transform': 29.2.0
+      '@jest/transform': 29.2.1
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.2.0_@babel+core@7.19.0
@@ -5293,7 +5293,7 @@ packages:
       eslint: 8.25.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_4ubwuetphstteqvh3rzlgov3gq:
+  /eslint-config-react-app/7.0.1_qmd4m3kwjsj7vjajupe47kzjqa:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5313,7 +5313,7 @@ packages:
       eslint: 8.25.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
       eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
-      eslint-plugin-jest: 25.7.0_jclyiyhknb4v7brhmoaml5jk5q
+      eslint-plugin-jest: 25.7.0_ktuq5bhtjfperqqn2aknj5bg6m
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
       eslint-plugin-react: 7.31.10_eslint@8.25.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
@@ -5437,7 +5437,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_jclyiyhknb4v7brhmoaml5jk5q:
+  /eslint-plugin-jest/25.7.0_ktuq5bhtjfperqqn2aknj5bg6m:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5453,7 +5453,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.2.0_@types+node@18.11.0
+      jest: 29.2.1_@types+node@18.11.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5741,15 +5741,15 @@ packages:
       jest-util: 29.1.2
     dev: true
 
-  /expect/29.2.0:
-    resolution: {integrity: sha512-03ClF3GWwUqd9Grgkr9ZSdaCJGMRA69PQ8jT7o+Bx100VlGiAFf9/8oIm9Qve7ZVJhuJxFftqFhviZJRxxNfvg==}
+  /expect/29.2.1:
+    resolution: {integrity: sha512-BJtA754Fba0YWRWHgjKUMTA3ltWarKgITXHQnbZ2mTxTXC4yMQlR0FI7HkB3fJYkhWBf4qjNiqvg3LDtXCcVRQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/expect-utils': 29.2.0
+      '@jest/expect-utils': 29.2.1
       jest-get-type: 29.2.0
-      jest-matcher-utils: 29.2.0
-      jest-message-util: 29.2.0
-      jest-util: 29.2.0
+      jest-matcher-utils: 29.2.1
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
     dev: true
 
   /extend-shallow/2.0.1:
@@ -6657,35 +6657,35 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.2.0:
-    resolution: {integrity: sha512-bpJRMe+VtvYlF3q8JNx+/cAo4FYvNCiR5s7Z0Scf8aC+KJ2ineSjZKtw1cIZbythlplkiro0My8nc65pfCqJ3A==}
+  /jest-circus/29.2.1:
+    resolution: {integrity: sha512-W+ZQQ5ln4Db2UZNM4NJIeasnhCdDhSuYW4eLgNAUi0XiSSpF634Kc5wiPvGiHvTgXMFVn1ZgWIijqhi9+kLNLg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.0
-      '@jest/expect': 29.2.0
-      '@jest/test-result': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/environment': 29.2.1
+      '@jest/expect': 29.2.1
+      '@jest/test-result': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
       is-generator-fn: 2.1.0
-      jest-each: 29.2.0
-      jest-matcher-utils: 29.2.0
-      jest-message-util: 29.2.0
-      jest-runtime: 29.2.0
-      jest-snapshot: 29.2.0
-      jest-util: 29.2.0
+      jest-each: 29.2.1
+      jest-matcher-utils: 29.2.1
+      jest-message-util: 29.2.1
+      jest-runtime: 29.2.1
+      jest-snapshot: 29.2.1
+      jest-util: 29.2.1
       p-limit: 3.1.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
       slash: 3.0.0
       stack-utils: 2.0.5
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.0_@types+node@18.11.0:
-    resolution: {integrity: sha512-/581TzbXeO+5kbtSlhXEthGiVJCC8AP0jgT0iZINAAMW+tTFj2uWU7z+HNUH5yIYdHV7AvRr0fWLrmHJGIruHg==}
+  /jest-cli/29.2.1_@types+node@18.11.0:
+    resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6694,16 +6694,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.2.0
-      '@jest/test-result': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/core': 29.2.1
+      '@jest/test-result': 29.2.1
+      '@jest/types': 29.2.1
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.0_@types+node@18.11.0
-      jest-util: 29.2.0
-      jest-validate: 29.2.0
+      jest-config: 29.2.1_@types+node@18.11.0
+      jest-util: 29.2.1
+      jest-validate: 29.2.1
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6712,8 +6712,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.0_@types+node@18.11.0:
-    resolution: {integrity: sha512-IkdCsrHIoxDPZAyFcdtQrCQ3uftLqns6Joj0tlbxiAQW4k/zTXmIygqWBmPNxO9FbFkDrhtYZiLHXjaJh9rS+Q==}
+  /jest-config/29.2.1_@types+node@18.11.0:
+    resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6725,40 +6725,40 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/test-sequencer': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/test-sequencer': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
-      babel-jest: 29.2.0_@babel+core@7.19.0
+      babel-jest: 29.2.1_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.2.0
-      jest-environment-node: 29.2.0
+      jest-circus: 29.2.1
+      jest-environment-node: 29.2.1
       jest-get-type: 29.2.0
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.0
-      jest-runner: 29.2.0
-      jest-util: 29.2.0
-      jest-validate: 29.2.0
+      jest-resolve: 29.2.1
+      jest-runner: 29.2.1
+      jest-util: 29.2.1
+      jest-validate: 29.2.1
       micromatch: 4.0.5
       parse-json: 5.2.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
       slash: 3.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-diff/29.2.0:
-    resolution: {integrity: sha512-GsH07qQL+/D/GxlnU+sSg9GL3fBOcuTlmtr3qr2pnkiODCwubNN2/7slW4m3CvxDsEus/VEOfQKRFLyXsUlnZw==}
+  /jest-diff/29.2.1:
+    resolution: {integrity: sha512-gfh/SMNlQmP3MOUgdzxPOd4XETDJifADpT937fN1iUGz+9DgOu2eUPHH25JDkLVcLwwqxv3GzVyK4VBUr9fjfA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       diff-sequences: 29.2.0
       jest-get-type: 29.2.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
     dev: true
 
   /jest-docblock/29.2.0:
@@ -6768,19 +6768,19 @@ packages:
       detect-newline: 3.1.0
     dev: true
 
-  /jest-each/29.2.0:
-    resolution: {integrity: sha512-h4LeC3L/R7jIMfTdYowevPIssvcPYQ7Qzs+pCSYsJgPztIizXwKmnfhZXBA4WVqdmvMcpmseYEXb67JT7IJ2eg==}
+  /jest-each/29.2.1:
+    resolution: {integrity: sha512-sGP86H/CpWHMyK3qGIGFCgP6mt+o5tu9qG4+tobl0LNdgny0aitLXs9/EBacLy3Bwqy+v4uXClqJgASJWcruYw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       chalk: 4.1.2
       jest-get-type: 29.2.0
-      jest-util: 29.2.0
-      pretty-format: 29.2.0
+      jest-util: 29.2.1
+      pretty-format: 29.2.1
     dev: true
 
-  /jest-environment-jsdom/29.2.0:
-    resolution: {integrity: sha512-DgHbBxC4RmHpDLFLMt00NjXXimGvtNALRyxQYOo3e6vwq1qsIDqXsEZiuEpjTg0BueENE1mx8BKFKHXArEdRQQ==}
+  /jest-environment-jsdom/29.2.1:
+    resolution: {integrity: sha512-MipBdmrjgzEdQMkK7b7wBShOfv1VqO6FVwa9S43bZwKYLC4dlWnPiCgNpZX3ypNEpJO8EMpMhg4HrUkWUZXGiw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       canvas: ^2.5.0
@@ -6788,13 +6788,13 @@ packages:
       canvas:
         optional: true
     dependencies:
-      '@jest/environment': 29.2.0
-      '@jest/fake-timers': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/environment': 29.2.1
+      '@jest/fake-timers': 29.2.1
+      '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
       '@types/node': 18.11.0
-      jest-mock: 29.2.0
-      jest-util: 29.2.0
+      jest-mock: 29.2.1
+      jest-util: 29.2.1
       jsdom: 20.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -6802,16 +6802,16 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.2.0:
-    resolution: {integrity: sha512-b4qQGVStPMvtZG97Ac0rvnmSIjCZturFU7MQRMp4JDFl7zoaDLTtXmFjFP1tNmi9te6kR8d+Htbv3nYeoaIz6g==}
+  /jest-environment-node/29.2.1:
+    resolution: {integrity: sha512-PulFKwEMz6nTAdLUwglFKei3b/LixwlRiqTN6nvPE1JtrLtlnpd6LXnFI1NFHYJGlTmIWilMP2n9jEtPPKX50g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.0
-      '@jest/fake-timers': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/environment': 29.2.1
+      '@jest/fake-timers': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
-      jest-mock: 29.2.0
-      jest-util: 29.2.0
+      jest-mock: 29.2.1
+      jest-util: 29.2.1
     dev: true
 
   /jest-get-type/29.0.0:
@@ -6847,31 +6847,31 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.2.0:
-    resolution: {integrity: sha512-qu9lGFi7qJ8v37egS1phZZUJYiMyWnKwu83NlNT1qs50TbedIX2hFl+9ztsJ7U/ENaHwk1/Bs8fqOIQsScIRwg==}
+  /jest-haste-map/29.2.1:
+    resolution: {integrity: sha512-wF460rAFmYc6ARcCFNw4MbGYQjYkvjovb9GBT+W10Um8q5nHq98jD6fHZMDMO3tA56S8XnmNkM8GcA8diSZfnA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
       '@types/node': 18.11.0
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
       jest-regex-util: 29.2.0
-      jest-util: 29.2.0
-      jest-worker: 29.2.0
+      jest-util: 29.2.1
+      jest-worker: 29.2.1
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.2
     dev: true
 
-  /jest-leak-detector/29.2.0:
-    resolution: {integrity: sha512-FXT9sCFdct42+oOqGIr/9kmUw3RbhvpkwidCBT5ySHHoWNGd3c9n7HXpFKjEz9UnUITRCGdn0q2s6Sxrq36kwg==}
+  /jest-leak-detector/29.2.1:
+    resolution: {integrity: sha512-1YvSqYoiurxKOJtySc+CGVmw/e1v4yNY27BjWTVzp0aTduQeA7pdieLiW05wTYG/twlKOp2xS/pWuikQEmklug==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-get-type: 29.2.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
     dev: true
 
   /jest-matcher-utils/29.1.2:
@@ -6879,19 +6879,19 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
-      jest-diff: 29.2.0
+      jest-diff: 29.2.1
       jest-get-type: 29.2.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
     dev: true
 
-  /jest-matcher-utils/29.2.0:
-    resolution: {integrity: sha512-FcEfKZ4vm28yCdBsvC69EkrEhcfex+IYlRctNJXsRG9+WC3WxgBNORnECIgqUtj7o/h1d8o7xB/dFUiLi4bqtw==}
+  /jest-matcher-utils/29.2.1:
+    resolution: {integrity: sha512-hUTBh7H/Mnb6GTpihbLh8uF5rjAMdekfW/oZNXUMAXi7bbmym2HiRpzgqf/zzkjgejMrVAkPdVSQj+32enlUww==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
-      jest-diff: 29.2.0
+      jest-diff: 29.2.1
       jest-get-type: 29.2.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
     dev: true
 
   /jest-message-util/29.1.2:
@@ -6899,41 +6899,41 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/stack-utils': 2.0.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
       micromatch: 4.0.5
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
       slash: 3.0.0
       stack-utils: 2.0.5
     dev: true
 
-  /jest-message-util/29.2.0:
-    resolution: {integrity: sha512-arBfk5yMFMTnMB22GyG601xGSGthA02vWSewPaxoFo0F9wBqDOyxccPbCcYu8uibw3kduSHXdCOd1PsLSgdomg==}
+  /jest-message-util/29.2.1:
+    resolution: {integrity: sha512-Dx5nEjw9V8C1/Yj10S/8ivA8F439VS8vTq1L7hEgwHFn9ovSKNpYW/kwNh7UglaEgXO42XxzKJB+2x0nSglFVw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/stack-utils': 2.0.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
       micromatch: 4.0.5
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
       slash: 3.0.0
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.2.0:
-    resolution: {integrity: sha512-aiWGR0P8ivssIO17xkehLGFtCcef2ZwQFNPwEer1jQLHxPctDlIg3Hs6QMq1KpPz5dkCcgM7mwGif4a9IPznlg==}
+  /jest-mock/29.2.1:
+    resolution: {integrity: sha512-NDphaY/GqyQpTfnTZiTqqpMaw4Z0I7XnB7yBgrT6IwYrLGxpOhrejYr4ANY4YvO2sEGdd8Tx/6D0+WLQy7/qDA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
-      jest-util: 29.2.0
+      jest-util: 29.2.1
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.2.0:
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.2.1:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6942,7 +6942,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.2.0
+      jest-resolve: 29.2.1
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6960,84 +6960,84 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.2.0:
-    resolution: {integrity: sha512-Cd0Z39sDntEnfR9PoUdFHUAGDvtKI0/7Wt73l3lt03A3yQ+A6Qi3XmBuqGjdFl2QbXaPa937oLhilG612P8HGQ==}
+  /jest-resolve-dependencies/29.2.1:
+    resolution: {integrity: sha512-o3mUGX2j08usj1jIAIE8KmUVpqVAn54k80kI27ldbZf2oJn6eghhB6DvJxjrcH40va9CQgWTfU5f2Ag/MoUqgQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.2.0
-      jest-snapshot: 29.2.0
+      jest-snapshot: 29.2.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.2.0:
-    resolution: {integrity: sha512-f5c0ljNg2guDBCC7wi92vAhNuA0BtAG5vkY7Fob0c7sUMU1g87mTXqRmjrVFe2XvdwP5m5T/e5KJsCKu9hRvBA==}
+  /jest-resolve/29.2.1:
+    resolution: {integrity: sha512-1dJTW76Z9622Viq4yRcwBuEXuzGtE9B2kdl05RC8Om/lAzac9uEgC+M8Q5osVidbuBPmxm8wSrcItYhca2ZAtQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.0
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.2.0
-      jest-util: 29.2.0
-      jest-validate: 29.2.0
+      jest-haste-map: 29.2.1
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.2.1
+      jest-util: 29.2.1
+      jest-validate: 29.2.1
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.2.0:
-    resolution: {integrity: sha512-VPBrCwl9fM2mc5yk6yZhNrgXzRJMD5jfLmntkMLlrVq4hQPWbRK998iJlR+DOGCO04TC9PPYLntOJ001Vnf28g==}
+  /jest-runner/29.2.1:
+    resolution: {integrity: sha512-PojFI+uVhQ4u4YZKCN/a3yU0/l/pJJXhq1sW3JpCp8CyvGBYGddRFPKZ1WihApusxqWRTHjBJmGyPWv6Av2lWA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.2.0
-      '@jest/environment': 29.2.0
-      '@jest/test-result': 29.2.0
-      '@jest/transform': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/console': 29.2.1
+      '@jest/environment': 29.2.1
+      '@jest/test-result': 29.2.1
+      '@jest/transform': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
       jest-docblock: 29.2.0
-      jest-environment-node: 29.2.0
-      jest-haste-map: 29.2.0
-      jest-leak-detector: 29.2.0
-      jest-message-util: 29.2.0
-      jest-resolve: 29.2.0
-      jest-runtime: 29.2.0
-      jest-util: 29.2.0
-      jest-watcher: 29.2.0
-      jest-worker: 29.2.0
+      jest-environment-node: 29.2.1
+      jest-haste-map: 29.2.1
+      jest-leak-detector: 29.2.1
+      jest-message-util: 29.2.1
+      jest-resolve: 29.2.1
+      jest-runtime: 29.2.1
+      jest-util: 29.2.1
+      jest-watcher: 29.2.1
+      jest-worker: 29.2.1
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.2.0:
-    resolution: {integrity: sha512-+GDmzCrswQF+mvI0upTYMe/OPYnlRRNLLDHM9AFLp2y7zxWoDoYgb8DL3WwJ8d9m743AzrnvBV9JQHi/0ed7dg==}
+  /jest-runtime/29.2.1:
+    resolution: {integrity: sha512-PSQ880OoIW9y8E6/jjhGn3eQNgNc6ndMzCZaKqy357bv7FqCfSyYepu3yDC6Sp1Vkt+GhP2M/PVgldS2uZSFZg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.0
-      '@jest/fake-timers': 29.2.0
-      '@jest/globals': 29.2.0
+      '@jest/environment': 29.2.1
+      '@jest/fake-timers': 29.2.1
+      '@jest/globals': 29.2.1
       '@jest/source-map': 29.2.0
-      '@jest/test-result': 29.2.0
-      '@jest/transform': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/test-result': 29.2.1
+      '@jest/transform': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.0
-      jest-message-util: 29.2.0
-      jest-mock: 29.2.0
+      jest-haste-map: 29.2.1
+      jest-message-util: 29.2.1
+      jest-mock: 29.2.1
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.0
-      jest-snapshot: 29.2.0
-      jest-util: 29.2.0
+      jest-resolve: 29.2.1
+      jest-snapshot: 29.2.1
+      jest-util: 29.2.1
       slash: 3.0.0
       strip-bom: 4.0.0
     transitivePeerDependencies:
@@ -7052,8 +7052,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.2.0:
-    resolution: {integrity: sha512-YCKrOR0PLRXROmww73fHO9oeY4tL+LPQXWR3yml1+hKbQDR8j1VUrVzB65hKSJJgxBOr1vWx+hmz2by8JjAU5w==}
+  /jest-snapshot/29.2.1:
+    resolution: {integrity: sha512-KZdLD7iEz5M4ZYd+ezZ/kk73z+DtNbk/yJ4Qx7408Vb0CCuclJIZPa/HmIwSsCfIlOBNcYTKufr7x/Yv47oYlg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -7062,23 +7062,23 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
       '@babel/traverse': 7.19.0
       '@babel/types': 7.19.0
-      '@jest/expect-utils': 29.2.0
-      '@jest/transform': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/expect-utils': 29.2.1
+      '@jest/transform': 29.2.1
+      '@jest/types': 29.2.1
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
       chalk: 4.1.2
-      expect: 29.2.0
+      expect: 29.2.1
       graceful-fs: 4.2.10
-      jest-diff: 29.2.0
+      jest-diff: 29.2.1
       jest-get-type: 29.2.0
-      jest-haste-map: 29.2.0
-      jest-matcher-utils: 29.2.0
-      jest-message-util: 29.2.0
-      jest-util: 29.2.0
+      jest-haste-map: 29.2.1
+      jest-matcher-utils: 29.2.1
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
       natural-compare: 1.4.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -7104,7 +7104,7 @@ packages:
     resolution: {integrity: sha512-vPCk9F353i0Ymx3WQq3+a4lZ07NXu9Ca8wya6o4Fe4/aO1e1awMMprZ3woPFpKwghEOW+UXgd15vVotuNN9ONQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -7112,11 +7112,11 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-util/29.2.0:
-    resolution: {integrity: sha512-8M1dx12ujkBbnhwytrezWY0Ut79hbflwodE+qZKjxSRz5qt4xDp6dQQJaOCFvCmE0QJqp9KyEK33lpPNjnhevw==}
+  /jest-util/29.2.1:
+    resolution: {integrity: sha512-P5VWDj25r7kj7kl4pN2rG/RN2c1TLfYYYZYULnS/35nFDjBai+hBeo3MDrYZS7p6IoY3YHZnt2vq4L6mKnLk0g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -7124,19 +7124,19 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.2.0:
-    resolution: {integrity: sha512-4Vl51bPNeFeDok9aJiOnrC6tqJbOp4iMCYlewoC2ZzYJZ5+6pfr3KObAdx5wP8auHcg2MRaguiqj5OdScZa72g==}
+  /jest-validate/29.2.1:
+    resolution: {integrity: sha512-DZVX5msG6J6DL5vUUw+++6LEkXUsPwB5R7fsfM7BXdz2Ipr0Ib046ak+8egrwAR++pvSM/5laxLK977ieIGxkQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.0
+      '@jest/types': 29.2.1
       camelcase: 6.3.0
       chalk: 4.1.2
       jest-get-type: 29.2.0
       leven: 3.1.0
-      pretty-format: 29.2.0
+      pretty-format: 29.2.1
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.2.0:
+  /jest-watch-typeahead/2.2.0_jest@29.2.1:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -7144,7 +7144,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.0_@types+node@18.11.0
+      jest: 29.2.1_@types+node@18.11.0
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7166,17 +7166,17 @@ packages:
       string-length: 4.0.2
     dev: true
 
-  /jest-watcher/29.2.0:
-    resolution: {integrity: sha512-bRh0JdUeN+cl9XfK7tMnXLm4Mv70hG2SZlqbkFe5CTs7oeCkbwlGBk/mEfEJ63mrxZ8LPbnfaMpfSmkhEQBEGA==}
+  /jest-watcher/29.2.1:
+    resolution: {integrity: sha512-7jFaHUaRq50l4w/f6RuY713bvI5XskMmjWCE54NGYcY74fLkShS8LucXJke1QfGnwDSCoIqGnGGGKPwdaBYz2Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/test-result': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.0
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.2.0
+      jest-util: 29.2.1
       string-length: 4.0.2
     dev: true
 
@@ -7189,18 +7189,18 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.2.0:
-    resolution: {integrity: sha512-mluOlMbRX1H59vGVzPcVg2ALfCausbBpxC8a2KWOzInhYHZibbHH8CB0C1JkmkpfurrkOYgF7FPmypuom1OM9A==}
+  /jest-worker/29.2.1:
+    resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 18.11.0
-      jest-util: 29.2.0
+      jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.0_@types+node@18.11.0:
-    resolution: {integrity: sha512-6krPemKUXCEu5Fh3j6ZVoLMjpTQVm0OCU+7f3K/9gllX8wNIE6NSCQ6s0q2RDoiKLRaQlVRHyscjSPRPqCI0Fg==}
+  /jest/29.2.1_@types+node@18.11.0:
+    resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7209,10 +7209,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.2.0
-      '@jest/types': 29.2.0
+      '@jest/core': 29.2.1
+      '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.0_@types+node@18.11.0
+      jest-cli: 29.2.1_@types+node@18.11.0
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -8114,8 +8114,8 @@ packages:
       react-is: 18.2.0
     dev: true
 
-  /pretty-format/29.2.0:
-    resolution: {integrity: sha512-QCSUFdwOi924g24czhOH5eTkXxUCqlLGZBRCySlwDYHIXRJkdGyjJc9nZaqhlFBZws8dq5Dvk0lCilsmlfsPxw==}
+  /pretty-format/29.2.1:
+    resolution: {integrity: sha512-Y41Sa4aLCtKAXvwuIpTvcFBkyeYp2gdFWzXGA+ZNES3VwURIB165XO/z7CjETwzCCS53MjW/rLMyyqEnTtaOfA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/schemas': 29.0.0
@@ -9397,6 +9397,7 @@ packages:
 
   /w3c-hr-time/1.0.2:
     resolution: {integrity: sha512-z8P5DvDNjKDoFIHK7q8r8lackT6l+jo/Ye3HOle7l9nICP9lf1Ci25fy9vHd0JOWewkIFzXIEig3TdKT7JQ5fQ==}
+    deprecated: Use your platform's native performance.now() and performance.timeOrigin.
     dependencies:
       browser-process-hrtime: 1.0.0
     dev: true

From 47d18b462a6fc798d270ae32e8b2bc39b2486635 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 19 Oct 2022 08:32:32 +1100
Subject: [PATCH 150/263] build(deps): update envoyproxy/envoy docker tag to
 v1.23.2 (#4201)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/envoy/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/envoy/docker-compose.yml b/internal/suites/example/compose/envoy/docker-compose.yml
index 16e0d7d5e..c7a13763b 100644
--- a/internal/suites/example/compose/envoy/docker-compose.yml
+++ b/internal/suites/example/compose/envoy/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   envoy:
-    image: envoyproxy/envoy:v1.23.1
+    image: envoyproxy/envoy:v1.23.2
     volumes:
       - ./example/compose/envoy/envoy.yaml:/etc/envoy/envoy.yaml
       - ./example/compose/nginx/portal/ssl:/etc/ssl

From 0f0dec9474b7c03a3d4cbff7829b395daac7ba93 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 19 Oct 2022 09:00:15 +1100
Subject: [PATCH 151/263] build(deps): update dependency @types/node to
 v18.11.1 (#4202)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index 7c7c40863..4a085ad82 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.2",
-    "@types/node": "18.11.0",
+    "@types/node": "18.11.1",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index bfbb8bc38..22ca7b85b 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
-  '@types/node': 18.11.0
+  '@types/node': 18.11.1
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.2
-  '@types/node': 18.11.0
+  '@types/node': 18.11.1
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.2.1_@types+node@18.11.0
+  jest: 29.2.1_@types+node@18.11.1
   jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.1
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2515,7 +2515,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2536,14 +2536,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.1_@types+node@18.11.0
+      jest-config: 29.2.1_@types+node@18.11.1
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2570,7 +2570,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       jest-mock: 29.2.1
     dev: true
 
@@ -2604,7 +2604,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       jest-message-util: 29.2.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
@@ -2637,7 +2637,7 @@ packages:
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2757,7 +2757,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2769,7 +2769,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2781,7 +2781,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3483,7 +3483,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3512,7 +3512,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3533,8 +3533,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.0:
-    resolution: {integrity: sha512-IOXCvVRToe7e0ny7HpT/X9Rb2RYtElG1a+VshjwT00HxrM2dWBApHQoqsI6WiY7Q03vdf2bCrIGzVrkF/5t10w==}
+  /@types/node/18.11.1:
+    resolution: {integrity: sha512-bB9ptqoW+pKBjs0kJX/zUSUWCOWAyYXQsOgY6+HIEbnjYike3CAeDhxlQ4kDjCm/S9SRV66F49HY7gwJz0oWMg==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5453,7 +5453,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.2.1_@types+node@18.11.0
+      jest: 29.2.1_@types+node@18.11.1
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6665,7 +6665,7 @@ packages:
       '@jest/expect': 29.2.1
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6684,7 +6684,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.1_@types+node@18.11.0:
+  /jest-cli/29.2.1_@types+node@18.11.1:
     resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6701,7 +6701,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.1_@types+node@18.11.0
+      jest-config: 29.2.1_@types+node@18.11.1
       jest-util: 29.2.1
       jest-validate: 29.2.1
       prompts: 2.4.2
@@ -6712,7 +6712,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.1_@types+node@18.11.0:
+  /jest-config/29.2.1_@types+node@18.11.1:
     resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6727,7 +6727,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       babel-jest: 29.2.1_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6792,7 +6792,7 @@ packages:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6809,7 +6809,7 @@ packages:
       '@jest/environment': 29.2.1
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
     dev: true
@@ -6830,7 +6830,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6853,7 +6853,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6929,7 +6929,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       jest-util: 29.2.1
     dev: true
 
@@ -6994,7 +6994,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -7025,7 +7025,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7048,7 +7048,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       graceful-fs: 4.2.10
     dev: true
 
@@ -7093,7 +7093,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7105,7 +7105,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7117,7 +7117,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7144,7 +7144,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.1_@types+node@18.11.0
+      jest: 29.2.1_@types+node@18.11.1
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7158,7 +7158,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7172,7 +7172,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7184,7 +7184,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7193,13 +7193,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.0
+      '@types/node': 18.11.1
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.1_@types+node@18.11.0:
+  /jest/29.2.1_@types+node@18.11.1:
     resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7212,7 +7212,7 @@ packages:
       '@jest/core': 29.2.1
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.1_@types+node@18.11.0
+      jest-cli: 29.2.1_@types+node@18.11.1
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 5e43e0fcfb02c0b7d4a293307949d3d66e93f48e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 19 Oct 2022 11:47:16 +1100
Subject: [PATCH 152/263] build(deps): update dependency @types/node to
 v18.11.2 (#4204)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index 4a085ad82..6118954c1 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.1.2",
-    "@types/node": "18.11.1",
+    "@types/node": "18.11.2",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 22ca7b85b..15fb340c1 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.1.2
-  '@types/node': 18.11.1
+  '@types/node': 18.11.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.1.2
-  '@types/node': 18.11.1
+  '@types/node': 18.11.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.2.1_@types+node@18.11.1
+  jest: 29.2.1_@types+node@18.11.2
   jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.1
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       jest-message-util: 29.1.2
       jest-util: 29.1.2
@@ -2515,7 +2515,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2536,14 +2536,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.1_@types+node@18.11.1
+      jest-config: 29.2.1_@types+node@18.11.2
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2570,7 +2570,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       jest-mock: 29.2.1
     dev: true
 
@@ -2604,7 +2604,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       jest-message-util: 29.2.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
@@ -2637,7 +2637,7 @@ packages:
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2757,7 +2757,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2769,7 +2769,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2781,7 +2781,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3483,7 +3483,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3512,7 +3512,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3533,8 +3533,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.1:
-    resolution: {integrity: sha512-bB9ptqoW+pKBjs0kJX/zUSUWCOWAyYXQsOgY6+HIEbnjYike3CAeDhxlQ4kDjCm/S9SRV66F49HY7gwJz0oWMg==}
+  /@types/node/18.11.2:
+    resolution: {integrity: sha512-BWN3M23gLO2jVG8g/XHIRFWiiV4/GckeFIqbU/C4V3xpoBBWSMk4OZomouN0wCkfQFPqgZikyLr7DOYDysIkkw==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5453,7 +5453,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.2.1_@types+node@18.11.1
+      jest: 29.2.1_@types+node@18.11.2
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6665,7 +6665,7 @@ packages:
       '@jest/expect': 29.2.1
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6684,7 +6684,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.1_@types+node@18.11.1:
+  /jest-cli/29.2.1_@types+node@18.11.2:
     resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6701,7 +6701,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.1_@types+node@18.11.1
+      jest-config: 29.2.1_@types+node@18.11.2
       jest-util: 29.2.1
       jest-validate: 29.2.1
       prompts: 2.4.2
@@ -6712,7 +6712,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.1_@types+node@18.11.1:
+  /jest-config/29.2.1_@types+node@18.11.2:
     resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6727,7 +6727,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       babel-jest: 29.2.1_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6792,7 +6792,7 @@ packages:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       jest-mock: 29.2.1
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6809,7 +6809,7 @@ packages:
       '@jest/environment': 29.2.1
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       jest-mock: 29.2.1
       jest-util: 29.2.1
     dev: true
@@ -6830,7 +6830,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6853,7 +6853,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6929,7 +6929,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       jest-util: 29.2.1
     dev: true
 
@@ -6994,7 +6994,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -7025,7 +7025,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7048,7 +7048,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       graceful-fs: 4.2.10
     dev: true
 
@@ -7093,7 +7093,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7105,7 +7105,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7117,7 +7117,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7144,7 +7144,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.1_@types+node@18.11.1
+      jest: 29.2.1_@types+node@18.11.2
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7158,7 +7158,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7172,7 +7172,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7184,7 +7184,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7193,13 +7193,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.1
+      '@types/node': 18.11.2
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.1_@types+node@18.11.1:
+  /jest/29.2.1_@types+node@18.11.2:
     resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7212,7 +7212,7 @@ packages:
       '@jest/core': 29.2.1
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.1_@types+node@18.11.1
+      jest-cli: 29.2.1_@types+node@18.11.2
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 46ae5b2bf37d3854b6e230e8687672aa77c781d7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 19 Oct 2022 12:43:09 +1100
Subject: [PATCH 153/263] build(deps): update dependency @types/jest to v29.2.0
 (#4198)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 75 ++++++----------------------------------------
 2 files changed, 10 insertions(+), 67 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6118954c1..fa09f1ce0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.1.2",
+    "@types/jest": "29.2.0",
     "@types/node": "18.11.2",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 15fb340c1..e8370eee9 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.1.2
+  '@types/jest': 29.2.0
   '@types/node': 18.11.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -97,7 +97,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.1.2
+  '@types/jest': 29.2.0
   '@types/node': 18.11.2
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
@@ -2505,8 +2505,8 @@ packages:
       '@jest/types': 29.1.2
       '@types/node': 18.11.2
       chalk: 4.1.2
-      jest-message-util: 29.1.2
-      jest-util: 29.1.2
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
       slash: 3.0.0
     dev: true
 
@@ -2574,13 +2574,6 @@ packages:
       jest-mock: 29.2.1
     dev: true
 
-  /@jest/expect-utils/29.1.2:
-    resolution: {integrity: sha512-4a48bhKfGj/KAH39u0ppzNTABXQ8QPccWAFUFobWBaEMSMp+sB31Z2fK/l47c4a/Mu1po2ffmfAIPxXbVTXdtg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      jest-get-type: 29.2.0
-    dev: true
-
   /@jest/expect-utils/29.2.1:
     resolution: {integrity: sha512-yr4aHNg5Z1CjKby5ozm7sKjgBlCOorlAoFcvrOQ/4rbZRfgZQdnmh7cth192PYIgiPZo2bBXvqdOApnAMWFJZg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -3502,11 +3495,11 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.1.2:
-    resolution: {integrity: sha512-y+nlX0h87U0R+wsGn6EBuoRWYyv3KFtwRNP3QWp9+k2tJ2/bqcGS3UxD7jgT+tiwJWWq3UsyV4Y+T6rsMT4XMg==}
+  /@types/jest/29.2.0:
+    resolution: {integrity: sha512-KO7bPV21d65PKwv3LLsD8Jn3E05pjNjRZvkm+YTacWhVmykAb07wW6IkZUmQAltwQafNcDUEUrMO2h3jeBSisg==}
     dependencies:
-      expect: 29.1.2
-      pretty-format: 29.1.2
+      expect: 29.2.1
+      pretty-format: 29.2.1
     dev: true
 
   /@types/jsdom/20.0.0:
@@ -3596,7 +3589,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.1.2
+      '@types/jest': 29.2.0
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -5730,17 +5723,6 @@ packages:
       - supports-color
     dev: true
 
-  /expect/29.1.2:
-    resolution: {integrity: sha512-AuAGn1uxva5YBbBlXb+2JPxJRuemZsmlGcapPXWNSBNsQtAULfjioREGBWuI0EOvYUKjDnrCy8PW5Zlr1md5mw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/expect-utils': 29.1.2
-      jest-get-type: 29.0.0
-      jest-matcher-utils: 29.1.2
-      jest-message-util: 29.1.2
-      jest-util: 29.1.2
-    dev: true
-
   /expect/29.2.1:
     resolution: {integrity: sha512-BJtA754Fba0YWRWHgjKUMTA3ltWarKgITXHQnbZ2mTxTXC4yMQlR0FI7HkB3fJYkhWBf4qjNiqvg3LDtXCcVRQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6814,11 +6796,6 @@ packages:
       jest-util: 29.2.1
     dev: true
 
-  /jest-get-type/29.0.0:
-    resolution: {integrity: sha512-83X19z/HuLKYXYHskZlBAShO7UfLFXu/vWajw9ZNJASN32li8yHMaVGAQqxFW1RCFOkB7cubaL6FaJVQqqJLSw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dev: true
-
   /jest-get-type/29.2.0:
     resolution: {integrity: sha512-uXNJlg8hKFEnDgFsrCjznB+sTxdkuqiCL6zMgA75qEbAJjJYTs9XPrvDctrEig2GDow22T/LvHgO57iJhXB/UA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6874,16 +6851,6 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-matcher-utils/29.1.2:
-    resolution: {integrity: sha512-MV5XrD3qYSW2zZSHRRceFzqJ39B2z11Qv0KPyZYxnzDHFeYZGJlgGi0SW+IXSJfOewgJp/Km/7lpcFT+cgZypw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.2.1
-      jest-get-type: 29.2.0
-      pretty-format: 29.2.1
-    dev: true
-
   /jest-matcher-utils/29.2.1:
     resolution: {integrity: sha512-hUTBh7H/Mnb6GTpihbLh8uF5rjAMdekfW/oZNXUMAXi7bbmym2HiRpzgqf/zzkjgejMrVAkPdVSQj+32enlUww==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6894,21 +6861,6 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-message-util/29.1.2:
-    resolution: {integrity: sha512-9oJ2Os+Qh6IlxLpmvshVbGUiSkZVc2FK+uGOm6tghafnB2RyjKAxMZhtxThRMxfX1J1SOMhTn9oK3/MutRWQJQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@babel/code-frame': 7.18.6
-      '@jest/types': 29.2.1
-      '@types/stack-utils': 2.0.1
-      chalk: 4.1.2
-      graceful-fs: 4.2.10
-      micromatch: 4.0.5
-      pretty-format: 29.2.1
-      slash: 3.0.0
-      stack-utils: 2.0.5
-    dev: true
-
   /jest-message-util/29.2.1:
     resolution: {integrity: sha512-Dx5nEjw9V8C1/Yj10S/8ivA8F439VS8vTq1L7hEgwHFn9ovSKNpYW/kwNh7UglaEgXO42XxzKJB+2x0nSglFVw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -8105,15 +8057,6 @@ packages:
       react-is: 17.0.2
     dev: true
 
-  /pretty-format/29.1.2:
-    resolution: {integrity: sha512-CGJ6VVGXVRP2o2Dorl4mAwwvDWT25luIsYhkyVQW32E4nL+TgW939J7LlKT/npq5Cpq6j3s+sy+13yk7xYpBmg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/schemas': 29.0.0
-      ansi-styles: 5.2.0
-      react-is: 18.2.0
-    dev: true
-
   /pretty-format/29.2.1:
     resolution: {integrity: sha512-Y41Sa4aLCtKAXvwuIpTvcFBkyeYp2gdFWzXGA+ZNES3VwURIB165XO/z7CjETwzCCS53MjW/rLMyyqEnTtaOfA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}

From 52102eea8c7379e0d34d9025ea72bebdcf639673 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Wed, 19 Oct 2022 14:09:22 +1100
Subject: [PATCH 154/263] feat(authorization): query parameter filtering
 (#3990)

This allows for advanced filtering of the query parameters in ACL's.

Closes #2708
---
 cmd/authelia-gen/cmd_code.go                  |  18 ++-
 .../configuration/security/access-control.md  |  66 ++++++++
 .../openid-connect/synology-dsm/index.md      |   2 +-
 .../en/reference/guides/rule-operators.md     | 134 ++++++++++++++++
 .../authorization/access_control_query.go     | 119 +++++++++++++++
 internal/authorization/access_control_rule.go |  76 +++++++---
 internal/authorization/authorizer.go          |  13 +-
 internal/authorization/authorizer_test.go     | 123 +++++++++++++++
 internal/authorization/const.go               |   9 ++
 internal/authorization/types.go               |  10 +-
 internal/commands/crypto_hash.go              |   2 +-
 .../configuration/schema/access_control.go    |  22 ++-
 internal/configuration/schema/keys.go         |   4 +
 .../configuration/validator/access_control.go |  60 ++++++++
 .../validator/access_control_test.go          | 143 ++++++++++++++++++
 internal/configuration/validator/const.go     |  27 +++-
 16 files changed, 784 insertions(+), 44 deletions(-)
 create mode 100644 docs/content/en/reference/guides/rule-operators.md
 create mode 100644 internal/authorization/access_control_query.go

diff --git a/cmd/authelia-gen/cmd_code.go b/cmd/authelia-gen/cmd_code.go
index 54db167e0..2d3e931ad 100644
--- a/cmd/authelia-gen/cmd_code.go
+++ b/cmd/authelia-gen/cmd_code.go
@@ -201,9 +201,18 @@ func containsType(needle reflect.Type, haystack []reflect.Type) (contains bool)
 	return false
 }
 
+//nolint:gocyclo
 func readTags(prefix string, t reflect.Type) (tags []string) {
 	tags = make([]string, 0)
 
+	if t.Kind() != reflect.Struct {
+		if t.Kind() == reflect.Slice {
+			tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, "", true), t.Elem())...)
+		}
+
+		return
+	}
+
 	for i := 0; i < t.NumField(); i++ {
 		field := t.Field(i)
 
@@ -223,13 +232,16 @@ func readTags(prefix string, t reflect.Type) (tags []string) {
 				continue
 			}
 		case reflect.Slice:
-			if field.Type.Elem().Kind() == reflect.Struct {
+			switch field.Type.Elem().Kind() {
+			case reflect.Struct:
 				if !containsType(field.Type.Elem(), decodedTypes) {
 					tags = append(tags, getKeyNameFromTagAndPrefix(prefix, tag, false))
 					tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, true), field.Type.Elem())...)
 
 					continue
 				}
+			case reflect.Slice:
+				tags = append(tags, readTags(getKeyNameFromTagAndPrefix(prefix, tag, true), field.Type.Elem())...)
 			}
 		case reflect.Ptr:
 			switch field.Type.Elem().Kind() {
@@ -268,6 +280,10 @@ func getKeyNameFromTagAndPrefix(prefix, name string, slice bool) string {
 	}
 
 	if slice {
+		if name == "" {
+			return fmt.Sprintf("%s[]", prefix)
+		}
+
 		return fmt.Sprintf("%s.%s[]", prefix, nameParts[0])
 	}
 
diff --git a/docs/content/en/configuration/security/access-control.md b/docs/content/en/configuration/security/access-control.md
index 2ac337eed..4be5546a2 100644
--- a/docs/content/en/configuration/security/access-control.md
+++ b/docs/content/en/configuration/security/access-control.md
@@ -42,6 +42,17 @@ access_control:
     - HEAD
     resources:
     - '^/api.*'
+    query:
+    - - operator: 'present'
+        key: 'secure'
+      - operator: 'absent'
+        key: 'insecure'
+    - - operator: 'pattern'
+        key: 'token'
+        value: '^(abc123|zyx789)$'
+      - operator: 'not pattern'
+        key: 'random'
+        value: '^(1|2)$'
 ```
 
 ## Options
@@ -416,6 +427,61 @@ access_control:
     - '^/api([/?].*)?$'
 ```
 
+#### query
+
+{{< confkey type="list(list(object))" required="no" >}}
+
+The query criteria is an advanced criteria which can allow configuration of rules that match specific query argument
+keys against various rules. It's recommended to use [resources](#resources) rules instead for basic needs.
+
+The format of this rule is unique in as much as it is a list of lists. The logic behind this format is to allow for both
+`OR` and `AND` logic. The first level of the list defines the `OR` logic, and the second level defines the `AND` logic.
+Additionally each level of these lists does not have to be explicitly defined.
+
+##### key
+
+{{< confkey type="string" required="yes" >}}
+
+The query argument key to check.
+
+##### value
+
+{{< confkey type="string" required="situational" >}}
+
+The value to match against. This is required unless the operator is `absent` or `present`. It's recommended this value
+is always quoted as per the examples.
+
+##### operator
+
+{{< confkey type="string" required="situational" >}}
+
+The rule operator for this rule. Valid operators can be found in the
+[Rule Operators](../../reference/guides/rule-operators.md#operators) reference guide.
+
+If [key](#key) and [value](#value) are specified this defaults to `equal`, otherwise if [key](#key) is specified it
+defaults to `present`.
+
+
+##### Examples
+
+```yaml
+access_control:
+  rules:
+    - domain: app.example.com
+      policy: bypass
+      query:
+      - - operator: 'present'
+          key: 'secure'
+        - operator: 'absent'
+          key: 'insecure'
+      - - operator: 'pattern'
+          key: 'token'
+          value: '^(abc123|zyx789)$'
+        - operator: 'not pattern'
+          key: 'random'
+          value: '^(1|2)$'
+```
+
 ## Policies
 
 The policy of the first matching rule in the configured list decides the policy applied to the request, if no rule
diff --git a/docs/content/en/integration/openid-connect/synology-dsm/index.md b/docs/content/en/integration/openid-connect/synology-dsm/index.md
index bf6d430a7..fdbde09f6 100644
--- a/docs/content/en/integration/openid-connect/synology-dsm/index.md
+++ b/docs/content/en/integration/openid-connect/synology-dsm/index.md
@@ -2,7 +2,7 @@
 title: "Synology DSM"
 description: "Integrating Synology DSM with the Authelia OpenID Connect Provider."
 lead: ""
-date: 2022-06-15T17:51:47+10:00
+date: 2022-10-18T21:22:13+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/guides/rule-operators.md b/docs/content/en/reference/guides/rule-operators.md
new file mode 100644
index 000000000..4c0a68086
--- /dev/null
+++ b/docs/content/en/reference/guides/rule-operators.md
@@ -0,0 +1,134 @@
+---
+title: "Access Control Rule Guide"
+description: "A reference guide on access control rule operators"
+lead: "This section contains a reference guide on access control rule operators."
+date: 2022-09-09T15:44:23+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "guides"
+weight: 220
+toc: true
+---
+
+## Operators
+
+Rule operators are effectively words which alter the behaviour of particular access control rules. The following table
+is a guide on their use.
+
+|   Operator    |                             Effect                             |
+|:-------------:|:--------------------------------------------------------------:|
+|    `equal`    |   Matches when the item value is equal to the provided value   |
+|  `not equal`  | Matches when the item value is not equal to the provided value |
+|   `present`   |        Matches when the item is present with any value         |
+|   `absent`    |          Matches when the item is not present at all           |
+|   `pattern`   |        Matches when the item matches the regex pattern         |
+| `not pattern` |     Matches when the item doesn't match the regex pattern      |
+
+
+## Multi-level Logical Criteria
+
+Criteria which is described as multi-level logical criteria indicates that it is a list of lists. The first level i.e.
+the list least indented to the right will be referred to the `OR-list`, and the list most indented to the right will be
+referred to the `AND-list`.
+
+The OR-list matches if any of the criteria from it's AND-list's matches; in other words, a *__logical OR__*. The
+AND-list matches if all of it's criteria matches the given request; in other words, a *__logical AND__*.
+
+In addition to these rules, if the AND-list only needs one item, it can be represented without the second level.
+
+### Examples
+
+#### List of Lists
+
+The following examples show various abstract examples to express a rule that matches either c, or a AND b;
+i.e `(a AND b) OR (c)`. In relation to access control rules all of these should be treated the same. This format should
+not be used for the configuration item type `list(list(object))`, see [List of List Objects](#list-of-list-objects)
+instead.
+
+##### Fully Expressed
+
+```yaml
+rule:
+  - - 'a'
+    - 'b'
+  - - 'c'
+```
+
+##### Omitted Level
+
+```yaml
+rule:
+  - - 'a'
+    - 'b'
+  - 'c'
+```
+
+##### Compact
+
+```yaml
+rule:
+  - ['a', 'b']
+  - ['c']
+```
+
+##### Compact with Omitted Level
+
+```yaml
+rule:
+  - ['a', 'b']
+  - 'c'
+```
+
+##### Super Compact
+
+```yaml
+rule: [['a', 'b'], ['c']]
+```
+
+#### List of List Objects
+
+The following examples show various abstract examples that mirror the above rules however the AND-list is a list of
+objects where the key is named `value`. This format should only be used for the configuration item type
+`list(list(object))`, see [List of Lists](#list-of-lists) if you're not looking for a `list(list(object))`
+
+##### Fully Expressed
+
+```yaml
+rule:
+  - - value: 'a'
+    - value: 'b'
+  - - value: 'c'
+```
+
+##### Omitted Level
+
+```yaml
+rule:
+  - - 'a'
+    - 'b'
+  - value: 'c'
+```
+
+##### Compact
+
+```yaml
+rule:
+  - ['a', 'b']
+  - ['c']
+```
+
+##### Compact with Omitted Level
+
+```yaml
+rule:
+  - ['a', 'b']
+  - 'c'
+```
+
+##### Super Compact
+
+```yaml
+rule: [['a', 'b'], ['c']]
+```
diff --git a/internal/authorization/access_control_query.go b/internal/authorization/access_control_query.go
new file mode 100644
index 000000000..e83b08736
--- /dev/null
+++ b/internal/authorization/access_control_query.go
@@ -0,0 +1,119 @@
+package authorization
+
+import (
+	"fmt"
+	"regexp"
+
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
+)
+
+// NewAccessControlQuery creates a new AccessControlQuery rule type.
+func NewAccessControlQuery(config [][]schema.ACLQueryRule) (rules []AccessControlQuery) {
+	if len(config) == 0 {
+		return nil
+	}
+
+	for i := 0; i < len(config); i++ {
+		var rule []ObjectMatcher
+
+		for j := 0; j < len(config[i]); j++ {
+			subRule, err := NewAccessControlQueryObjectMatcher(config[i][j])
+			if err != nil {
+				continue
+			}
+
+			rule = append(rule, subRule)
+		}
+
+		rules = append(rules, AccessControlQuery{Rules: rule})
+	}
+
+	return rules
+}
+
+// AccessControlQuery represents an ACL query args rule.
+type AccessControlQuery struct {
+	Rules []ObjectMatcher
+}
+
+// IsMatch returns true if this rule matches the object.
+func (acq AccessControlQuery) IsMatch(object Object) (isMatch bool) {
+	for _, rule := range acq.Rules {
+		if !rule.IsMatch(object) {
+			return false
+		}
+	}
+
+	return true
+}
+
+// NewAccessControlQueryObjectMatcher creates a new ObjectMatcher rule type from a schema.ACLQueryRule.
+func NewAccessControlQueryObjectMatcher(rule schema.ACLQueryRule) (matcher ObjectMatcher, err error) {
+	switch rule.Operator {
+	case operatorPresent, operatorAbsent:
+		return &AccessControlQueryMatcherPresent{key: rule.Key, present: rule.Operator == operatorPresent}, nil
+	case operatorEqual, operatorNotEqual:
+		if value, ok := rule.Value.(string); ok {
+			return &AccessControlQueryMatcherEqual{key: rule.Key, value: value, equal: rule.Operator == operatorEqual}, nil
+		} else {
+			return nil, fmt.Errorf("rule value is not a string and is instead %T", rule.Value)
+		}
+	case operatorPattern, operatorNotPattern:
+		if pattern, ok := rule.Value.(*regexp.Regexp); ok {
+			return &AccessControlQueryMatcherPattern{key: rule.Key, pattern: pattern, match: rule.Operator == operatorPattern}, nil
+		} else {
+			return nil, fmt.Errorf("rule value is not a *regexp.Regexp and is instead %T", rule.Value)
+		}
+	default:
+		return nil, fmt.Errorf("invalid operator: %s", rule.Operator)
+	}
+}
+
+// AccessControlQueryMatcherEqual is a rule type that checks the equality of a query parameter.
+type AccessControlQueryMatcherEqual struct {
+	key, value string
+	equal      bool
+}
+
+// IsMatch returns true if this rule matches the object.
+func (acl AccessControlQueryMatcherEqual) IsMatch(object Object) (isMatch bool) {
+	switch {
+	case acl.equal:
+		return object.URL.Query().Get(acl.key) == acl.value
+	default:
+		return object.URL.Query().Get(acl.key) != acl.value
+	}
+}
+
+// AccessControlQueryMatcherPresent is a rule type that checks the presence of a query parameter.
+type AccessControlQueryMatcherPresent struct {
+	key     string
+	present bool
+}
+
+// IsMatch returns true if this rule matches the object.
+func (acl AccessControlQueryMatcherPresent) IsMatch(object Object) (isMatch bool) {
+	switch {
+	case acl.present:
+		return object.URL.Query().Has(acl.key)
+	default:
+		return !object.URL.Query().Has(acl.key)
+	}
+}
+
+// AccessControlQueryMatcherPattern is a rule type that checks a query parameter against regex.
+type AccessControlQueryMatcherPattern struct {
+	key     string
+	pattern *regexp.Regexp
+	match   bool
+}
+
+// IsMatch returns true if this rule matches the object.
+func (acl AccessControlQueryMatcherPattern) IsMatch(object Object) (isMatch bool) {
+	switch {
+	case acl.match:
+		return acl.pattern.MatchString(object.URL.Query().Get(acl.key))
+	default:
+		return !acl.pattern.MatchString(object.URL.Query().Get(acl.key))
+	}
+}
diff --git a/internal/authorization/access_control_rule.go b/internal/authorization/access_control_rule.go
index f95189025..9d86b80cf 100644
--- a/internal/authorization/access_control_rule.go
+++ b/internal/authorization/access_control_rule.go
@@ -22,6 +22,7 @@ func NewAccessControlRules(config schema.AccessControlConfiguration) (rules []*A
 func NewAccessControlRule(pos int, rule schema.ACLRule, networksMap map[string][]*net.IPNet, networksCacheMap map[string]*net.IPNet) *AccessControlRule {
 	r := &AccessControlRule{
 		Position: pos,
+		Query:    NewAccessControlQuery(rule.Query),
 		Methods:  schemaMethodsToACL(rule.Methods),
 		Networks: schemaNetworksToACL(rule.Networks, networksMap, networksCacheMap),
 		Subjects: schemaSubjectsToACL(rule.Subjects),
@@ -46,6 +47,7 @@ type AccessControlRule struct {
 	Position  int
 	Domains   []AccessControlDomain
 	Resources []AccessControlResource
+	Query     []AccessControlQuery
 	Methods   []string
 	Networks  []*net.IPNet
 	Subjects  []AccessControlSubjects
@@ -54,37 +56,42 @@ type AccessControlRule struct {
 
 // IsMatch returns true if all elements of an AccessControlRule match the object and subject.
 func (acr *AccessControlRule) IsMatch(subject Subject, object Object) (match bool) {
-	if !isMatchForDomains(subject, object, acr) {
+	if !acr.MatchesDomains(subject, object) {
 		return false
 	}
 
-	if !isMatchForResources(subject, object, acr) {
+	if !acr.MatchesResources(subject, object) {
 		return false
 	}
 
-	if !isMatchForMethods(object, acr) {
+	if !acr.MatchesQuery(object) {
 		return false
 	}
 
-	if !isMatchForNetworks(subject, acr) {
+	if !acr.MatchesMethods(object) {
 		return false
 	}
 
-	if !isMatchForSubjects(subject, acr) {
+	if !acr.MatchesNetworks(subject) {
+		return false
+	}
+
+	if !acr.MatchesSubjects(subject) {
 		return false
 	}
 
 	return true
 }
 
-func isMatchForDomains(subject Subject, object Object, acl *AccessControlRule) (match bool) {
+// MatchesDomains returns true if the rule matches the domains.
+func (acr *AccessControlRule) MatchesDomains(subject Subject, object Object) (matches bool) {
 	// If there are no domains in this rule then the domain condition is a match.
-	if len(acl.Domains) == 0 {
+	if len(acr.Domains) == 0 {
 		return true
 	}
 
 	// Iterate over the domains until we find a match (return true) or until we exit the loop (return false).
-	for _, domain := range acl.Domains {
+	for _, domain := range acr.Domains {
 		if domain.IsMatch(subject, object) {
 			return true
 		}
@@ -93,14 +100,15 @@ func isMatchForDomains(subject Subject, object Object, acl *AccessControlRule) (
 	return false
 }
 
-func isMatchForResources(subject Subject, object Object, acl *AccessControlRule) (match bool) {
+// MatchesResources returns true if the rule matches the resources.
+func (acr *AccessControlRule) MatchesResources(subject Subject, object Object) (matches bool) {
 	// If there are no resources in this rule then the resource condition is a match.
-	if len(acl.Resources) == 0 {
+	if len(acr.Resources) == 0 {
 		return true
 	}
 
 	// Iterate over the resources until we find a match (return true) or until we exit the loop (return false).
-	for _, resource := range acl.Resources {
+	for _, resource := range acr.Resources {
 		if resource.IsMatch(subject, object) {
 			return true
 		}
@@ -109,23 +117,42 @@ func isMatchForResources(subject Subject, object Object, acl *AccessControlRule)
 	return false
 }
 
-func isMatchForMethods(object Object, acl *AccessControlRule) (match bool) {
-	// If there are no methods in this rule then the method condition is a match.
-	if len(acl.Methods) == 0 {
+// MatchesQuery returns true if the rule matches the query arguments.
+func (acr *AccessControlRule) MatchesQuery(object Object) (match bool) {
+	// If there are no query rules in this rule then the query condition is a match.
+	if len(acr.Query) == 0 {
 		return true
 	}
 
-	return utils.IsStringInSlice(object.Method, acl.Methods)
+	// Iterate over the queries until we find a match (return true) or until we exit the loop (return false).
+	for _, query := range acr.Query {
+		if query.IsMatch(object) {
+			return true
+		}
+	}
+
+	return false
 }
 
-func isMatchForNetworks(subject Subject, acl *AccessControlRule) (match bool) {
+// MatchesMethods returns true if the rule matches the method.
+func (acr *AccessControlRule) MatchesMethods(object Object) (match bool) {
+	// If there are no methods in this rule then the method condition is a match.
+	if len(acr.Methods) == 0 {
+		return true
+	}
+
+	return utils.IsStringInSlice(object.Method, acr.Methods)
+}
+
+// MatchesNetworks returns true if the rule matches the networks.
+func (acr *AccessControlRule) MatchesNetworks(subject Subject) (match bool) {
 	// If there are no networks in this rule then the network condition is a match.
-	if len(acl.Networks) == 0 {
+	if len(acr.Networks) == 0 {
 		return true
 	}
 
 	// Iterate over the networks until we find a match (return true) or until we exit the loop (return false).
-	for _, network := range acl.Networks {
+	for _, network := range acr.Networks {
 		if network.Contains(subject.IP) {
 			return true
 		}
@@ -134,25 +161,26 @@ func isMatchForNetworks(subject Subject, acl *AccessControlRule) (match bool) {
 	return false
 }
 
-// Same as isExactMatchForSubjects except it theoretically matches if subject is anonymous since they'd need to authenticate.
-func isMatchForSubjects(subject Subject, acl *AccessControlRule) (match bool) {
+// MatchesSubjects returns true if the rule matches the subjects.
+func (acr *AccessControlRule) MatchesSubjects(subject Subject) (match bool) {
 	if subject.IsAnonymous() {
 		return true
 	}
 
-	return isExactMatchForSubjects(subject, acl)
+	return acr.MatchesSubjectExact(subject)
 }
 
-func isExactMatchForSubjects(subject Subject, acl *AccessControlRule) (match bool) {
+// MatchesSubjectExact returns true if the rule matches the subjects exactly.
+func (acr *AccessControlRule) MatchesSubjectExact(subject Subject) (match bool) {
 	// If there are no subjects in this rule then the subject condition is a match.
-	if len(acl.Subjects) == 0 {
+	if len(acr.Subjects) == 0 {
 		return true
 	} else if subject.IsAnonymous() {
 		return false
 	}
 
 	// Iterate over the subjects until we find a match (return true) or until we exit the loop (return false).
-	for _, subjectRule := range acl.Subjects {
+	for _, subjectRule := range acr.Subjects {
 		if subjectRule.IsMatch(subject) {
 			return true
 		}
diff --git a/internal/authorization/authorizer.go b/internal/authorization/authorizer.go
index 6ce4dbbbc..a3546083f 100644
--- a/internal/authorization/authorizer.go
+++ b/internal/authorization/authorizer.go
@@ -88,12 +88,13 @@ func (p Authorizer) GetRuleMatchResults(subject Subject, object Object) (results
 			Rule:    rule,
 			Skipped: skipped,
 
-			MatchDomain:        isMatchForDomains(subject, object, rule),
-			MatchResources:     isMatchForResources(subject, object, rule),
-			MatchMethods:       isMatchForMethods(object, rule),
-			MatchNetworks:      isMatchForNetworks(subject, rule),
-			MatchSubjects:      isMatchForSubjects(subject, rule),
-			MatchSubjectsExact: isExactMatchForSubjects(subject, rule),
+			MatchDomain:        rule.MatchesDomains(subject, object),
+			MatchResources:     rule.MatchesResources(subject, object),
+			MatchQuery:         rule.MatchesQuery(object),
+			MatchMethods:       rule.MatchesMethods(object),
+			MatchNetworks:      rule.MatchesNetworks(subject),
+			MatchSubjects:      rule.MatchesSubjects(subject),
+			MatchSubjectsExact: rule.MatchesSubjectExact(subject),
 		}
 
 		skipped = skipped || results[i].IsMatch()
diff --git a/internal/authorization/authorizer_test.go b/internal/authorization/authorizer_test.go
index c1047a637..495a40f9a 100644
--- a/internal/authorization/authorizer_test.go
+++ b/internal/authorization/authorizer_test.go
@@ -208,6 +208,129 @@ func (s *AuthorizerSuite) TestShouldCheckFactorsPolicy() {
 	tester.CheckAuthorizations(s.T(), UserWithGroups, "https://example.com/", "GET", Denied)
 }
 
+func (s *AuthorizerSuite) TestShouldCheckQueryPolicy() {
+	tester := NewAuthorizerBuilder().
+		WithDefaultPolicy(deny).
+		WithRule(schema.ACLRule{
+			Domains: []string{"one.example.com"},
+			Query: [][]schema.ACLQueryRule{
+				{
+					{
+						Operator: operatorEqual,
+						Key:      "test",
+						Value:    "two",
+					},
+					{
+						Operator: operatorAbsent,
+						Key:      "admin",
+					},
+				},
+				{
+					{
+						Operator: operatorPresent,
+						Key:      "public",
+					},
+				},
+			},
+			Policy: oneFactor,
+		}).
+		WithRule(schema.ACLRule{
+			Domains: []string{"two.example.com"},
+			Query: [][]schema.ACLQueryRule{
+				{
+					{
+						Operator: operatorEqual,
+						Key:      "test",
+						Value:    "one",
+					},
+				},
+				{
+					{
+						Operator: operatorEqual,
+						Key:      "test",
+						Value:    "two",
+					},
+				},
+			},
+			Policy: twoFactor,
+		}).
+		WithRule(schema.ACLRule{
+			Domains: []string{"three.example.com"},
+			Query: [][]schema.ACLQueryRule{
+				{
+					{
+						Operator: operatorNotEqual,
+						Key:      "test",
+						Value:    "one",
+					},
+					{
+						Operator: operatorNotEqual,
+						Key:      "test",
+						Value:    "two",
+					},
+				},
+			},
+			Policy: twoFactor,
+		}).
+		WithRule(schema.ACLRule{
+			Domains: []string{"four.example.com"},
+			Query: [][]schema.ACLQueryRule{
+				{
+					{
+						Operator: operatorPattern,
+						Key:      "test",
+						Value:    regexp.MustCompile(`^(one|two|three)$`),
+					},
+				},
+			},
+			Policy: twoFactor,
+		}).
+		WithRule(schema.ACLRule{
+			Domains: []string{"five.example.com"},
+			Query: [][]schema.ACLQueryRule{
+				{
+					{
+						Operator: operatorNotPattern,
+						Key:      "test",
+						Value:    regexp.MustCompile(`^(one|two|three)$`),
+					},
+				},
+			},
+			Policy: twoFactor,
+		}).
+		Build()
+
+	testCases := []struct {
+		name, requestURL string
+		expected         Level
+	}{
+		{"ShouldDenyAbsentRule", "https://one.example.com/?admin=true", Denied},
+		{"ShouldAllow1FAPresentRule", "https://one.example.com/?public=true", OneFactor},
+		{"ShouldAllow1FAEqualRule", "https://one.example.com/?test=two", OneFactor},
+		{"ShouldDenyAbsentRuleWithMatchingPresentRule", "https://one.example.com/?test=two&admin=true", Denied},
+		{"ShouldAllow2FARuleWithOneMatchingEqual", "https://two.example.com/?test=one&admin=true", TwoFactor},
+		{"ShouldAllow2FARuleWithAnotherMatchingEqual", "https://two.example.com/?test=two&admin=true", TwoFactor},
+		{"ShouldDenyRuleWithNotMatchingEqual", "https://two.example.com/?test=three&admin=true", Denied},
+		{"ShouldDenyRuleWithNotMatchingNotEqualAND1", "https://three.example.com/?test=one", Denied},
+		{"ShouldDenyRuleWithNotMatchingNotEqualAND2", "https://three.example.com/?test=two", Denied},
+		{"ShouldAllowRuleWithMatchingNotEqualAND", "https://three.example.com/?test=three", TwoFactor},
+		{"ShouldAllowRuleWithMatchingPatternOne", "https://four.example.com/?test=one", TwoFactor},
+		{"ShouldAllowRuleWithMatchingPatternTwo", "https://four.example.com/?test=two", TwoFactor},
+		{"ShouldAllowRuleWithMatchingPatternThree", "https://four.example.com/?test=three", TwoFactor},
+		{"ShouldDenyRuleWithNotMatchingPattern", "https://four.example.com/?test=five", Denied},
+		{"ShouldAllowRuleWithMatchingNotPattern", "https://five.example.com/?test=five", TwoFactor},
+		{"ShouldDenyRuleWithNotMatchingNotPatternOne", "https://five.example.com/?test=one", Denied},
+		{"ShouldDenyRuleWithNotMatchingNotPatternTwo", "https://five.example.com/?test=two", Denied},
+		{"ShouldDenyRuleWithNotMatchingNotPatternThree", "https://five.example.com/?test=three", Denied},
+	}
+
+	for _, tc := range testCases {
+		s.T().Run(tc.name, func(t *testing.T) {
+			tester.CheckAuthorizations(t, UserWithGroups, tc.requestURL, "GET", tc.expected)
+		})
+	}
+}
+
 func (s *AuthorizerSuite) TestShouldCheckRulePrecedence() {
 	tester := NewAuthorizerBuilder().
 		WithDefaultPolicy(deny).
diff --git a/internal/authorization/const.go b/internal/authorization/const.go
index dcf991563..afda76888 100644
--- a/internal/authorization/const.go
+++ b/internal/authorization/const.go
@@ -26,6 +26,15 @@ const (
 	deny      = "deny"
 )
 
+const (
+	operatorPresent    = "present"
+	operatorAbsent     = "absent"
+	operatorEqual      = "equal"
+	operatorNotEqual   = "not equal"
+	operatorPattern    = "pattern"
+	operatorNotPattern = "not pattern"
+)
+
 const (
 	subexpNameUser  = "User"
 	subexpNameGroup = "Group"
diff --git a/internal/authorization/types.go b/internal/authorization/types.go
index d02a1081a..4e26a2db3 100644
--- a/internal/authorization/types.go
+++ b/internal/authorization/types.go
@@ -24,6 +24,11 @@ type SubjectObjectMatcher interface {
 	IsMatch(subject Subject, object Object) (match bool)
 }
 
+// ObjectMatcher is a matcher that takes an object.
+type ObjectMatcher interface {
+	IsMatch(object Object) (match bool)
+}
+
 // Subject represents the identity of a user for the purposes of ACL matching.
 type Subject struct {
 	Username string
@@ -43,7 +48,7 @@ func (s Subject) IsAnonymous() bool {
 
 // Object represents a protected object for the purposes of ACL matching.
 type Object struct {
-	URL url.URL
+	URL *url.URL
 
 	Domain string
 	Path   string
@@ -63,7 +68,7 @@ func NewObjectRaw(targetURL *url.URL, method []byte) (object Object) {
 // NewObject creates a new Object type from a URL and a method header.
 func NewObject(targetURL *url.URL, method string) (object Object) {
 	return Object{
-		URL:    *targetURL,
+		URL:    targetURL,
 		Domain: targetURL.Hostname(),
 		Path:   utils.URLPathFullClean(targetURL),
 		Method: method,
@@ -78,6 +83,7 @@ type RuleMatchResult struct {
 
 	MatchDomain        bool
 	MatchResources     bool
+	MatchQuery         bool
 	MatchMethods       bool
 	MatchNetworks      bool
 	MatchSubjects      bool
diff --git a/internal/commands/crypto_hash.go b/internal/commands/crypto_hash.go
index 72eb8f7d9..5d80a4aac 100644
--- a/internal/commands/crypto_hash.go
+++ b/internal/commands/crypto_hash.go
@@ -480,7 +480,7 @@ func cmdCryptoHashGetPassword(cmd *cobra.Command, args []string, useArgs, useRan
 func hashReadPasswordWithPrompt(prompt string) (data []byte, err error) {
 	fmt.Print(prompt)
 
-	if data, err = term.ReadPassword(int(syscall.Stdin)); err != nil { //nolint:unconvert // Conversion required.
+	if data, err = term.ReadPassword(int(syscall.Stdin)); err != nil { //nolint:unconvert,nolintlint
 		if err.Error() == "inappropriate ioctl for device" {
 			return nil, fmt.Errorf("the terminal doesn't appear to be interactive either use the '--password' flag or use an interactive terminal: %w", err)
 		}
diff --git a/internal/configuration/schema/access_control.go b/internal/configuration/schema/access_control.go
index 7b12fe129..79e1c93fa 100644
--- a/internal/configuration/schema/access_control.go
+++ b/internal/configuration/schema/access_control.go
@@ -19,13 +19,21 @@ type ACLNetwork struct {
 
 // ACLRule represents one ACL rule entry.
 type ACLRule struct {
-	Domains      []string        `koanf:"domain"`
-	DomainsRegex []regexp.Regexp `koanf:"domain_regex"`
-	Policy       string          `koanf:"policy"`
-	Subjects     [][]string      `koanf:"subject"`
-	Networks     []string        `koanf:"networks"`
-	Resources    []regexp.Regexp `koanf:"resources"`
-	Methods      []string        `koanf:"methods"`
+	Domains      []string         `koanf:"domain"`
+	DomainsRegex []regexp.Regexp  `koanf:"domain_regex"`
+	Policy       string           `koanf:"policy"`
+	Subjects     [][]string       `koanf:"subject"`
+	Networks     []string         `koanf:"networks"`
+	Resources    []regexp.Regexp  `koanf:"resources"`
+	Methods      []string         `koanf:"methods"`
+	Query        [][]ACLQueryRule `koanf:"query"`
+}
+
+// ACLQueryRule represents the ACL query criteria.
+type ACLQueryRule struct {
+	Operator string `koanf:"operator"`
+	Key      string `koanf:"key"`
+	Value    any    `koanf:"value"`
 }
 
 // DefaultACLNetwork represents the default configuration related to access control network group configuration.
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index ddb262c40..ffcf2840f 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -148,6 +148,10 @@ var Keys = []string{
 	"access_control.rules[].networks",
 	"access_control.rules[].resources",
 	"access_control.rules[].methods",
+	"access_control.rules[].query[][].operator",
+	"access_control.rules[].query[][].key",
+	"access_control.rules[].query[][].value",
+	"access_control.rules[].query",
 	"ntp.address",
 	"ntp.version",
 	"ntp.max_desync",
diff --git a/internal/configuration/validator/access_control.go b/internal/configuration/validator/access_control.go
index 3bd475cb2..9509c4cab 100644
--- a/internal/configuration/validator/access_control.go
+++ b/internal/configuration/validator/access_control.go
@@ -3,6 +3,7 @@ package validator
 import (
 	"fmt"
 	"net"
+	"regexp"
 	"strings"
 
 	"github.com/authelia/authelia/v4/internal/authorization"
@@ -103,6 +104,8 @@ func ValidateRules(config *schema.Configuration, validator *schema.StructValidat
 
 		validateMethods(rulePosition, rule, validator)
 
+		validateQuery(i, rule, config, validator)
+
 		if rule.Policy == policyBypass {
 			validateBypass(rulePosition, rule, validator)
 		}
@@ -149,3 +152,60 @@ func validateMethods(rulePosition int, rule schema.ACLRule, validator *schema.St
 		}
 	}
 }
+
+//nolint:gocyclo
+func validateQuery(i int, rule schema.ACLRule, config *schema.Configuration, validator *schema.StructValidator) {
+	for j := 0; j < len(config.AccessControl.Rules[i].Query); j++ {
+		for k := 0; k < len(config.AccessControl.Rules[i].Query[j]); k++ {
+			if config.AccessControl.Rules[i].Query[j][k].Operator == "" {
+				if config.AccessControl.Rules[i].Query[j][k].Key != "" {
+					switch config.AccessControl.Rules[i].Query[j][k].Value {
+					case "", nil:
+						config.AccessControl.Rules[i].Query[j][k].Operator = operatorPresent
+					default:
+						config.AccessControl.Rules[i].Query[j][k].Operator = operatorEqual
+					}
+				}
+			} else if !utils.IsStringInSliceFold(config.AccessControl.Rules[i].Query[j][k].Operator, validACLRuleOperators) {
+				validator.Push(fmt.Errorf(errFmtAccessControlRuleQueryInvalid, ruleDescriptor(i+1, rule), config.AccessControl.Rules[i].Query[j][k].Operator, strings.Join(validACLRuleOperators, "', '")))
+			}
+
+			if config.AccessControl.Rules[i].Query[j][k].Key == "" {
+				validator.Push(fmt.Errorf(errFmtAccessControlRuleQueryInvalidNoValue, ruleDescriptor(i+1, rule), "key"))
+			}
+
+			op := config.AccessControl.Rules[i].Query[j][k].Operator
+
+			if op == "" {
+				continue
+			}
+
+			switch v := config.AccessControl.Rules[i].Query[j][k].Value.(type) {
+			case nil:
+				if op != operatorAbsent && op != operatorPresent {
+					validator.Push(fmt.Errorf(errFmtAccessControlRuleQueryInvalidNoValueOperator, ruleDescriptor(i+1, rule), "value", op))
+				}
+			case string:
+				switch op {
+				case operatorPresent, operatorAbsent:
+					if v != "" {
+						validator.Push(fmt.Errorf(errFmtAccessControlRuleQueryInvalidValue, ruleDescriptor(i+1, rule), "value", op))
+					}
+				case operatorPattern, operatorNotPattern:
+					var (
+						pattern *regexp.Regexp
+						err     error
+					)
+
+					if pattern, err = regexp.Compile(v); err != nil {
+						validator.Push(fmt.Errorf(errFmtAccessControlRuleQueryInvalidValueParse, ruleDescriptor(i+1, rule), "value", err))
+					} else {
+						config.AccessControl.Rules[i].Query[j][k].Value = pattern
+					}
+				}
+			default:
+				validator.Push(fmt.Errorf(errFmtAccessControlRuleQueryInvalidValueType, ruleDescriptor(i+1, rule), v))
+			}
+		}
+	}
+}
diff --git a/internal/configuration/validator/access_control_test.go b/internal/configuration/validator/access_control_test.go
index 42ac82258..7bf24d52f 100644
--- a/internal/configuration/validator/access_control_test.go
+++ b/internal/configuration/validator/access_control_test.go
@@ -201,6 +201,149 @@ func (suite *AccessControl) TestShouldRaiseErrorInvalidSubject() {
 	suite.Assert().EqualError(suite.validator.Errors()[1], fmt.Sprintf(errAccessControlRuleBypassPolicyInvalidWithSubjects, ruleDescriptor(1, suite.config.AccessControl.Rules[0])))
 }
 
+func (suite *AccessControl) TestShouldSetQueryDefaults() {
+	domains := []string{"public.example.com"}
+	suite.config.AccessControl.Rules = []schema.ACLRule{
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "", Key: "example"},
+				},
+				{
+					{Operator: "", Key: "example", Value: "test"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "pattern", Key: "a", Value: "^(x|y|z)$"},
+				},
+			},
+		},
+	}
+
+	ValidateRules(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal("present", suite.config.AccessControl.Rules[0].Query[0][0].Operator)
+	suite.Assert().Equal("equal", suite.config.AccessControl.Rules[0].Query[1][0].Operator)
+
+	suite.Require().Len(suite.config.AccessControl.Rules, 2)
+	suite.Require().Len(suite.config.AccessControl.Rules[1].Query, 1)
+	suite.Require().Len(suite.config.AccessControl.Rules[1].Query[0], 1)
+
+	t := &regexp.Regexp{}
+
+	suite.Assert().IsType(t, suite.config.AccessControl.Rules[1].Query[0][0].Value)
+}
+
+func (suite *AccessControl) TestShouldErrorOnInvalidRulesQuery() {
+	domains := []string{"public.example.com"}
+	suite.config.AccessControl.Rules = []schema.ACLRule{
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "equal", Key: "example"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "present"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "present", Key: "a"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "absent", Key: "a"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "not", Key: "a", Value: "a"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "pattern", Key: "a", Value: "(bad pattern"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "present", Key: "a", Value: "not good"},
+				},
+			},
+		},
+		{
+			Domains: domains,
+			Policy:  "bypass",
+			Query: [][]schema.ACLQueryRule{
+				{
+					{Operator: "present", Key: "a", Value: 5},
+				},
+			},
+		},
+	}
+
+	ValidateRules(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 7)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "access control: rule #1 (domain 'public.example.com'): 'query' option 'value' is invalid: must have a value when the operator is 'equal'")
+	suite.Assert().EqualError(suite.validator.Errors()[1], "access control: rule #2 (domain 'public.example.com'): 'query' option 'key' is invalid: must have a value")
+	suite.Assert().EqualError(suite.validator.Errors()[2], "access control: rule #5 (domain 'public.example.com'): 'query' option 'key' is invalid: must have a value")
+	suite.Assert().EqualError(suite.validator.Errors()[3], "access control: rule #6 (domain 'public.example.com'): 'query' option 'operator' with value 'not' is invalid: must be one of 'present', 'absent', 'equal', 'not equal', 'pattern', 'not pattern'")
+	suite.Assert().EqualError(suite.validator.Errors()[4], "access control: rule #7 (domain 'public.example.com'): 'query' option 'value' is invalid: error parsing regexp: missing closing ): `(bad pattern`")
+	suite.Assert().EqualError(suite.validator.Errors()[5], "access control: rule #8 (domain 'public.example.com'): 'query' option 'value' is invalid: must not have a value when the operator is 'present'")
+	suite.Assert().EqualError(suite.validator.Errors()[6], "access control: rule #9 (domain 'public.example.com'): 'query' option 'value' is invalid: expected type was string but got int")
+}
+
 func TestAccessControl(t *testing.T) {
 	suite.Run(t, new(AccessControl))
 }
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index 448e02c23..adc19f36f 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -211,6 +211,18 @@ const (
 		"invalid: must start with 'user:' or 'group:'"
 	errFmtAccessControlRuleMethodInvalid = "access control: rule %s: 'methods' option '%s' is " +
 		"invalid: must be one of '%s'"
+	errFmtAccessControlRuleQueryInvalid = "access control: rule %s: 'query' option 'operator' with value '%s' is " +
+		"invalid: must be one of '%s'"
+	errFmtAccessControlRuleQueryInvalidNoValue = "access control: rule %s: 'query' option '%s' is " +
+		"invalid: must have a value"
+	errFmtAccessControlRuleQueryInvalidNoValueOperator = "access control: rule %s: 'query' option '%s' is " +
+		"invalid: must have a value when the operator is '%s'"
+	errFmtAccessControlRuleQueryInvalidValue = "access control: rule %s: 'query' option '%s' is " +
+		"invalid: must not have a value when the operator is '%s'"
+	errFmtAccessControlRuleQueryInvalidValueParse = "access control: rule %s: 'query' option '%s' is " +
+		"invalid: %w"
+	errFmtAccessControlRuleQueryInvalidValueType = "access control: rule %s: 'query' option 'value' is " +
+		"invalid: expected type was string but got %T"
 )
 
 // Theme Error constants.
@@ -317,9 +329,20 @@ var validRFC7231HTTPMethodVerbs = []string{"GET", "HEAD", "POST", "PUT", "PATCH"
 
 var validRFC4918HTTPMethodVerbs = []string{"COPY", "LOCK", "MKCOL", "MOVE", "PROPFIND", "PROPPATCH", "UNLOCK"}
 
-var validACLHTTPMethodVerbs = append(validRFC7231HTTPMethodVerbs, validRFC4918HTTPMethodVerbs...)
+const (
+	operatorPresent    = "present"
+	operatorAbsent     = "absent"
+	operatorEqual      = "equal"
+	operatorNotEqual   = "not equal"
+	operatorPattern    = "pattern"
+	operatorNotPattern = "not pattern"
+)
 
-var validACLRulePolicies = []string{policyBypass, policyOneFactor, policyTwoFactor, policyDeny}
+var (
+	validACLHTTPMethodVerbs = append(validRFC7231HTTPMethodVerbs, validRFC4918HTTPMethodVerbs...)
+	validACLRulePolicies    = []string{policyBypass, policyOneFactor, policyTwoFactor, policyDeny}
+	validACLRuleOperators   = []string{operatorPresent, operatorAbsent, operatorEqual, operatorNotEqual, operatorPattern, operatorNotPattern}
+)
 
 var validDefault2FAMethods = []string{"totp", "webauthn", "mobile_push"}
 

From 24e41aed845d5f06a26444bb154e22e1b41bba8d Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Wed, 19 Oct 2022 18:17:55 +1100
Subject: [PATCH 155/263] feat(commands): add webauthn device commands (#3671)

---
 .../cli/authelia/authelia_storage_user.md     |   1 +
 .../authelia_storage_user_webauthn.md         |  65 +++++++
 .../authelia_storage_user_webauthn_delete.md  |  78 ++++++++
 .../authelia_storage_user_webauthn_list.md    |  72 +++++++
 internal/commands/const.go                    |  37 ++++
 internal/commands/storage.go                  |  53 +++++
 internal/commands/storage_run.go              | 181 ++++++++++++++++++
 internal/mocks/storage.go                     |  28 +++
 internal/storage/provider.go                  |   2 +
 internal/storage/sql_provider.go              |  36 ++++
 .../storage/sql_provider_backend_postgres.go  |   3 +
 internal/storage/sql_provider_queries.go      |  26 ++-
 12 files changed, 575 insertions(+), 7 deletions(-)
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_delete.md
 create mode 100644 docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_list.md

diff --git a/docs/content/en/reference/cli/authelia/authelia_storage_user.md b/docs/content/en/reference/cli/authelia/authelia_storage_user.md
index 14561dddb..90fc3c917 100644
--- a/docs/content/en/reference/cli/authelia/authelia_storage_user.md
+++ b/docs/content/en/reference/cli/authelia/authelia_storage_user.md
@@ -62,4 +62,5 @@ authelia storage user --help
 * [authelia storage](authelia_storage.md)	 - Manage the Authelia storage
 * [authelia storage user identifiers](authelia_storage_user_identifiers.md)	 - Manage user opaque identifiers
 * [authelia storage user totp](authelia_storage_user_totp.md)	 - Manage TOTP configurations
+* [authelia storage user webauthn](authelia_storage_user_webauthn.md)	 - Manage Webauthn devices
 
diff --git a/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn.md b/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn.md
new file mode 100644
index 000000000..65ee8c777
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn.md
@@ -0,0 +1,65 @@
+---
+title: "authelia storage user webauthn"
+description: "Reference for the authelia storage user webauthn command."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia storage user webauthn
+
+Manage Webauthn devices
+
+### Synopsis
+
+Manage Webauthn devices.
+
+This subcommand allows interacting with Webauthn devices.
+
+### Examples
+
+```
+authelia storage user webauthn --help
+```
+
+### Options
+
+```
+  -h, --help   help for webauthn
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings                         configuration files to load (default [configuration.yml])
+      --encryption-key string                  the storage encryption key to use
+      --mysql.database string                  the MySQL database name (default "authelia")
+      --mysql.host string                      the MySQL hostname
+      --mysql.password string                  the MySQL password
+      --mysql.port int                         the MySQL port (default 3306)
+      --mysql.username string                  the MySQL username (default "authelia")
+      --postgres.database string               the PostgreSQL database name (default "authelia")
+      --postgres.host string                   the PostgreSQL hostname
+      --postgres.password string               the PostgreSQL password
+      --postgres.port int                      the PostgreSQL port (default 5432)
+      --postgres.schema string                 the PostgreSQL schema name (default "public")
+      --postgres.ssl.certificate string        the PostgreSQL ssl certificate file location
+      --postgres.ssl.key string                the PostgreSQL ssl key file location
+      --postgres.ssl.mode string               the PostgreSQL ssl mode (default "disable")
+      --postgres.ssl.root_certificate string   the PostgreSQL ssl root certificate file location
+      --postgres.username string               the PostgreSQL username (default "authelia")
+      --sqlite.path string                     the SQLite database path
+```
+
+### SEE ALSO
+
+* [authelia storage user](authelia_storage_user.md)	 - Manages user settings
+* [authelia storage user webauthn delete](authelia_storage_user_webauthn_delete.md)	 - Delete a WebAuthn device
+* [authelia storage user webauthn list](authelia_storage_user_webauthn_list.md)	 - List WebAuthn devices
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_delete.md b/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_delete.md
new file mode 100644
index 000000000..cf2545624
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_delete.md
@@ -0,0 +1,78 @@
+---
+title: "authelia storage user webauthn delete"
+description: "Reference for the authelia storage user webauthn delete command."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia storage user webauthn delete
+
+Delete a WebAuthn device
+
+### Synopsis
+
+Delete a WebAuthn device.
+
+This subcommand allows deleting a WebAuthn device directly from the database.
+
+```
+authelia storage user webauthn delete [username] [flags]
+```
+
+### Examples
+
+```
+authelia storage user webauthn delete john --all
+authelia storage user webauthn delete john --all --config config.yml
+authelia storage user webauthn delete john --all --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+authelia storage user webauthn delete john --description Primary
+authelia storage user webauthn delete john --description Primary --config config.yml
+authelia storage user webauthn delete john --description Primary --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+authelia storage user webauthn delete --kid abc123
+authelia storage user webauthn delete --kid abc123 --config config.yml
+authelia storage user webauthn delete --kid abc123 --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+```
+
+### Options
+
+```
+      --all                  delete all of the users webauthn devices
+      --description string   delete a users webauthn device by description
+  -h, --help                 help for delete
+      --kid string           delete a users webauthn device by key id
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings                         configuration files to load (default [configuration.yml])
+      --encryption-key string                  the storage encryption key to use
+      --mysql.database string                  the MySQL database name (default "authelia")
+      --mysql.host string                      the MySQL hostname
+      --mysql.password string                  the MySQL password
+      --mysql.port int                         the MySQL port (default 3306)
+      --mysql.username string                  the MySQL username (default "authelia")
+      --postgres.database string               the PostgreSQL database name (default "authelia")
+      --postgres.host string                   the PostgreSQL hostname
+      --postgres.password string               the PostgreSQL password
+      --postgres.port int                      the PostgreSQL port (default 5432)
+      --postgres.schema string                 the PostgreSQL schema name (default "public")
+      --postgres.ssl.certificate string        the PostgreSQL ssl certificate file location
+      --postgres.ssl.key string                the PostgreSQL ssl key file location
+      --postgres.ssl.mode string               the PostgreSQL ssl mode (default "disable")
+      --postgres.ssl.root_certificate string   the PostgreSQL ssl root certificate file location
+      --postgres.username string               the PostgreSQL username (default "authelia")
+      --sqlite.path string                     the SQLite database path
+```
+
+### SEE ALSO
+
+* [authelia storage user webauthn](authelia_storage_user_webauthn.md)	 - Manage Webauthn devices
+
diff --git a/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_list.md b/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_list.md
new file mode 100644
index 000000000..185e8af15
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia/authelia_storage_user_webauthn_list.md
@@ -0,0 +1,72 @@
+---
+title: "authelia storage user webauthn list"
+description: "Reference for the authelia storage user webauthn list command."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia"
+weight: 330
+toc: true
+---
+
+## authelia storage user webauthn list
+
+List WebAuthn devices
+
+### Synopsis
+
+List WebAuthn devices.
+
+This subcommand allows listing WebAuthn devices.
+
+```
+authelia storage user webauthn list [username] [flags]
+```
+
+### Examples
+
+```
+authelia storage user webauthn list
+authelia storage user webauthn list john
+authelia storage user webauthn list --config config.yml
+authelia storage user webauthn list john --config config.yml
+authelia storage user webauthn list --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+authelia storage user webauthn list john --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+```
+
+### Options
+
+```
+  -h, --help   help for list
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings                         configuration files to load (default [configuration.yml])
+      --encryption-key string                  the storage encryption key to use
+      --mysql.database string                  the MySQL database name (default "authelia")
+      --mysql.host string                      the MySQL hostname
+      --mysql.password string                  the MySQL password
+      --mysql.port int                         the MySQL port (default 3306)
+      --mysql.username string                  the MySQL username (default "authelia")
+      --postgres.database string               the PostgreSQL database name (default "authelia")
+      --postgres.host string                   the PostgreSQL hostname
+      --postgres.password string               the PostgreSQL password
+      --postgres.port int                      the PostgreSQL port (default 5432)
+      --postgres.schema string                 the PostgreSQL schema name (default "public")
+      --postgres.ssl.certificate string        the PostgreSQL ssl certificate file location
+      --postgres.ssl.key string                the PostgreSQL ssl key file location
+      --postgres.ssl.mode string               the PostgreSQL ssl mode (default "disable")
+      --postgres.ssl.root_certificate string   the PostgreSQL ssl root certificate file location
+      --postgres.username string               the PostgreSQL username (default "authelia")
+      --sqlite.path string                     the SQLite database path
+```
+
+### SEE ALSO
+
+* [authelia storage user webauthn](authelia_storage_user_webauthn.md)	 - Manage Webauthn devices
+
diff --git a/internal/commands/const.go b/internal/commands/const.go
index b4fb7986b..13bb8aa24 100644
--- a/internal/commands/const.go
+++ b/internal/commands/const.go
@@ -176,6 +176,43 @@ This subcommand allows manually adding an opaque identifier for a user to the da
 authelia storage user identifiers add john --identifier f0919359-9d15-4e15-bcba-83b41620a073 --config config.yml
 authelia storage user identifiers add john --identifier f0919359-9d15-4e15-bcba-83b41620a073 --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw`
 
+	cmdAutheliaStorageUserWebAuthnShort = "Manage Webauthn devices"
+
+	cmdAutheliaStorageUserWebAuthnLong = `Manage Webauthn devices.
+
+This subcommand allows interacting with Webauthn devices.`
+
+	cmdAutheliaStorageUserWebAuthnExample = `authelia storage user webauthn --help`
+
+	cmdAutheliaStorageUserWebAuthnListShort = "List WebAuthn devices"
+
+	cmdAutheliaStorageUserWebAuthnListLong = `List WebAuthn devices.
+
+This subcommand allows listing WebAuthn devices.`
+
+	cmdAutheliaStorageUserWebAuthnListExample = `authelia storage user webauthn list
+authelia storage user webauthn list john
+authelia storage user webauthn list --config config.yml
+authelia storage user webauthn list john --config config.yml
+authelia storage user webauthn list --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+authelia storage user webauthn list john --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw`
+
+	cmdAutheliaStorageUserWebAuthnDeleteShort = "Delete a WebAuthn device"
+
+	cmdAutheliaStorageUserWebAuthnDeleteLong = `Delete a WebAuthn device.
+
+This subcommand allows deleting a WebAuthn device directly from the database.`
+
+	cmdAutheliaStorageUserWebAuthnDeleteExample = `authelia storage user webauthn delete john --all
+authelia storage user webauthn delete john --all --config config.yml
+authelia storage user webauthn delete john --all --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+authelia storage user webauthn delete john --description Primary
+authelia storage user webauthn delete john --description Primary --config config.yml
+authelia storage user webauthn delete john --description Primary --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw
+authelia storage user webauthn delete --kid abc123
+authelia storage user webauthn delete --kid abc123 --config config.yml
+authelia storage user webauthn delete --kid abc123 --encryption-key b3453fde-ecc2-4a1f-9422-2707ddbed495 --postgres.host postgres --postgres.password autheliapw`
+
 	cmdAutheliaStorageUserTOTPShort = "Manage TOTP configurations"
 
 	cmdAutheliaStorageUserTOTPLong = `Manage TOTP configurations.
diff --git a/internal/commands/storage.go b/internal/commands/storage.go
index adfd1c28c..92190149a 100644
--- a/internal/commands/storage.go
+++ b/internal/commands/storage.go
@@ -117,6 +117,7 @@ func newStorageUserCmd() (cmd *cobra.Command) {
 	cmd.AddCommand(
 		newStorageUserIdentifiersCmd(),
 		newStorageUserTOTPCmd(),
+		newStorageUserWebAuthnCmd(),
 	)
 
 	return cmd
@@ -211,6 +212,58 @@ func newStorageUserIdentifiersAddCmd() (cmd *cobra.Command) {
 	return cmd
 }
 
+func newStorageUserWebAuthnCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     "webauthn",
+		Short:   cmdAutheliaStorageUserWebAuthnShort,
+		Long:    cmdAutheliaStorageUserWebAuthnLong,
+		Example: cmdAutheliaStorageUserWebAuthnExample,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.AddCommand(
+		newStorageUserWebAuthnListCmd(),
+		newStorageUserWebAuthnDeleteCmd(),
+	)
+
+	return cmd
+}
+
+func newStorageUserWebAuthnListCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     "list [username]",
+		Short:   cmdAutheliaStorageUserWebAuthnListShort,
+		Long:    cmdAutheliaStorageUserWebAuthnListLong,
+		Example: cmdAutheliaStorageUserWebAuthnListExample,
+		RunE:    storageWebAuthnListRunE,
+		Args:    cobra.MaximumNArgs(1),
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func newStorageUserWebAuthnDeleteCmd() (cmd *cobra.Command) {
+	cmd = &cobra.Command{
+		Use:     "delete [username]",
+		Short:   cmdAutheliaStorageUserWebAuthnDeleteShort,
+		Long:    cmdAutheliaStorageUserWebAuthnDeleteLong,
+		Example: cmdAutheliaStorageUserWebAuthnDeleteExample,
+		RunE:    storageWebAuthnDeleteRunE,
+		Args:    cobra.MaximumNArgs(1),
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.Flags().Bool("all", false, "delete all of the users webauthn devices")
+	cmd.Flags().String("description", "", "delete a users webauthn device by description")
+	cmd.Flags().String("kid", "", "delete a users webauthn device by key id")
+
+	return cmd
+}
+
 func newStorageUserTOTPCmd() (cmd *cobra.Command) {
 	cmd = &cobra.Command{
 		Use:     "totp",
diff --git a/internal/commands/storage_run.go b/internal/commands/storage_run.go
index 50b40a876..4b11c5e72 100644
--- a/internal/commands/storage_run.go
+++ b/internal/commands/storage_run.go
@@ -205,6 +205,187 @@ func storageSchemaEncryptionChangeKeyRunE(cmd *cobra.Command, args []string) (er
 	return nil
 }
 
+func storageWebAuthnListRunE(cmd *cobra.Command, args []string) (err error) {
+	if len(args) == 0 || args[0] == "" {
+		return storageWebAuthnListAllRunE(cmd, args)
+	}
+
+	var (
+		provider storage.Provider
+		ctx      = context.Background()
+	)
+
+	provider = getStorageProvider()
+
+	defer func() {
+		_ = provider.Close()
+	}()
+
+	var devices []model.WebauthnDevice
+
+	user := args[0]
+
+	devices, err = provider.LoadWebauthnDevicesByUsername(ctx, user)
+
+	switch {
+	case len(devices) == 0 || (err != nil && errors.Is(err, storage.ErrNoWebauthnDevice)):
+		return fmt.Errorf("user '%s' has no webauthn devices", user)
+	case err != nil:
+		return fmt.Errorf("can't list devices for user '%s': %w", user, err)
+	default:
+		fmt.Printf("Webauthn Devices for user '%s':\n\n", user)
+		fmt.Printf("ID\tKID\tDescription\n")
+
+		for _, device := range devices {
+			fmt.Printf("%d\t%s\t%s", device.ID, device.KID, device.Description)
+		}
+	}
+
+	return nil
+}
+
+func storageWebAuthnListAllRunE(_ *cobra.Command, _ []string) (err error) {
+	var (
+		provider storage.Provider
+		ctx      = context.Background()
+	)
+
+	provider = getStorageProvider()
+
+	defer func() {
+		_ = provider.Close()
+	}()
+
+	var devices []model.WebauthnDevice
+
+	limit := 10
+
+	output := strings.Builder{}
+
+	for page := 0; true; page++ {
+		if devices, err = provider.LoadWebauthnDevices(ctx, limit, page); err != nil {
+			return fmt.Errorf("failed to list devices: %w", err)
+		}
+
+		if page == 0 && len(devices) == 0 {
+			return errors.New("no webauthn devices in database")
+		}
+
+		for _, device := range devices {
+			output.WriteString(fmt.Sprintf("%d\t%s\t%s\t%s\n", device.ID, device.KID, device.Description, device.Username))
+		}
+
+		if len(devices) < limit {
+			break
+		}
+	}
+
+	fmt.Printf("Webauthn Devices:\n\nID\tKID\tDescription\tUsername\n")
+	fmt.Println(output.String())
+
+	return nil
+}
+
+func storageWebAuthnDeleteRunE(cmd *cobra.Command, args []string) (err error) {
+	var (
+		provider storage.Provider
+		ctx      = context.Background()
+	)
+
+	provider = getStorageProvider()
+
+	defer func() {
+		_ = provider.Close()
+	}()
+
+	var (
+		all, byKID             bool
+		description, kid, user string
+	)
+
+	if all, byKID, description, kid, user, err = storageWebAuthnDeleteGetAndValidateConfig(cmd, args); err != nil {
+		return err
+	}
+
+	if byKID {
+		if err = provider.DeleteWebauthnDevice(ctx, kid); err != nil {
+			return fmt.Errorf("failed to delete WebAuthn device with kid '%s': %w", kid, err)
+		}
+
+		fmt.Printf("Deleted WebAuthn device with kid '%s'", kid)
+	} else {
+		err = provider.DeleteWebauthnDeviceByUsername(ctx, user, description)
+
+		if all {
+			if err != nil {
+				return fmt.Errorf("failed to delete all WebAuthn devices with username '%s': %w", user, err)
+			}
+
+			fmt.Printf("Deleted all WebAuthn devices for user '%s'", user)
+		} else {
+			if err != nil {
+				return fmt.Errorf("failed to delete WebAuthn device with username '%s' and description '%s': %w", user, description, err)
+			}
+
+			fmt.Printf("Deleted WebAuthn device with username '%s' and description '%s'", user, description)
+		}
+	}
+
+	return nil
+}
+
+func storageWebAuthnDeleteGetAndValidateConfig(cmd *cobra.Command, args []string) (all, byKID bool, description, kid, user string, err error) {
+	if len(args) != 0 {
+		user = args[0]
+	}
+
+	flags := 0
+
+	if cmd.Flags().Changed("all") {
+		if all, err = cmd.Flags().GetBool("all"); err != nil {
+			return
+		}
+
+		flags++
+	}
+
+	if cmd.Flags().Changed("description") {
+		if description, err = cmd.Flags().GetString("description"); err != nil {
+			return
+		}
+
+		flags++
+	}
+
+	if byKID = cmd.Flags().Changed("kid"); byKID {
+		if kid, err = cmd.Flags().GetString("kid"); err != nil {
+			return
+		}
+
+		flags++
+	}
+
+	if flags > 1 {
+		err = fmt.Errorf("must only supply one of the flags --all, --description, and --kid but %d were specified", flags)
+
+		return
+	}
+
+	if flags == 0 {
+		err = fmt.Errorf("must supply one of the flags --all, --description, or --kid")
+
+		return
+	}
+
+	if !byKID && len(user) == 0 {
+		err = fmt.Errorf("must supply the username or the --kid flag")
+
+		return
+	}
+
+	return
+}
+
 func storageTOTPGenerateRunE(cmd *cobra.Command, args []string) (err error) {
 	var (
 		provider         storage.Provider
diff --git a/internal/mocks/storage.go b/internal/mocks/storage.go
index 2f6160d76..980469a35 100644
--- a/internal/mocks/storage.go
+++ b/internal/mocks/storage.go
@@ -166,6 +166,34 @@ func (mr *MockStorageMockRecorder) DeleteTOTPConfiguration(arg0, arg1 interface{
 	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "DeleteTOTPConfiguration", reflect.TypeOf((*MockStorage)(nil).DeleteTOTPConfiguration), arg0, arg1)
 }
 
+// DeleteWebauthnDevice mocks base method.
+func (m *MockStorage) DeleteWebauthnDevice(arg0 context.Context, arg1 string) error {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "DeleteWebauthnDevice", arg0, arg1)
+	ret0, _ := ret[0].(error)
+	return ret0
+}
+
+// DeleteWebauthnDevice indicates an expected call of DeleteWebauthnDevice.
+func (mr *MockStorageMockRecorder) DeleteWebauthnDevice(arg0, arg1 interface{}) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "DeleteWebauthnDevice", reflect.TypeOf((*MockStorage)(nil).DeleteWebauthnDevice), arg0, arg1)
+}
+
+// DeleteWebauthnDeviceByUsername mocks base method.
+func (m *MockStorage) DeleteWebauthnDeviceByUsername(arg0 context.Context, arg1, arg2 string) error {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "DeleteWebauthnDeviceByUsername", arg0, arg1, arg2)
+	ret0, _ := ret[0].(error)
+	return ret0
+}
+
+// DeleteWebauthnDeviceByUsername indicates an expected call of DeleteWebauthnDeviceByUsername.
+func (mr *MockStorageMockRecorder) DeleteWebauthnDeviceByUsername(arg0, arg1, arg2 interface{}) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "DeleteWebauthnDeviceByUsername", reflect.TypeOf((*MockStorage)(nil).DeleteWebauthnDeviceByUsername), arg0, arg1, arg2)
+}
+
 // FindIdentityVerification mocks base method.
 func (m *MockStorage) FindIdentityVerification(arg0 context.Context, arg1 string) (bool, error) {
 	m.ctrl.T.Helper()
diff --git a/internal/storage/provider.go b/internal/storage/provider.go
index 7696966a5..fdf415a89 100644
--- a/internal/storage/provider.go
+++ b/internal/storage/provider.go
@@ -39,6 +39,8 @@ type Provider interface {
 
 	SaveWebauthnDevice(ctx context.Context, device model.WebauthnDevice) (err error)
 	UpdateWebauthnDeviceSignIn(ctx context.Context, id int, rpid string, lastUsedAt *time.Time, signCount uint32, cloneWarning bool) (err error)
+	DeleteWebauthnDevice(ctx context.Context, kid string) (err error)
+	DeleteWebauthnDeviceByUsername(ctx context.Context, username, description string) (err error)
 	LoadWebauthnDevices(ctx context.Context, limit, page int) (devices []model.WebauthnDevice, err error)
 	LoadWebauthnDevicesByUsername(ctx context.Context, username string) (devices []model.WebauthnDevice, err error)
 
diff --git a/internal/storage/sql_provider.go b/internal/storage/sql_provider.go
index bb5ac9895..6991e7021 100644
--- a/internal/storage/sql_provider.go
+++ b/internal/storage/sql_provider.go
@@ -56,6 +56,10 @@ func NewSQLProvider(config *schema.Configuration, name, driverName, dataSourceNa
 		sqlUpdateWebauthnDeviceRecordSignIn:           fmt.Sprintf(queryFmtUpdateWebauthnDeviceRecordSignIn, tableWebauthnDevices),
 		sqlUpdateWebauthnDeviceRecordSignInByUsername: fmt.Sprintf(queryFmtUpdateWebauthnDeviceRecordSignInByUsername, tableWebauthnDevices),
 
+		sqlDeleteWebauthnDevice:                         fmt.Sprintf(queryFmtDeleteWebauthnDevice, tableWebauthnDevices),
+		sqlDeleteWebauthnDeviceByUsername:               fmt.Sprintf(queryFmtDeleteWebauthnDeviceByUsername, tableWebauthnDevices),
+		sqlDeleteWebauthnDeviceByUsernameAndDescription: fmt.Sprintf(queryFmtDeleteWebauthnDeviceByUsernameAndDescription, tableWebauthnDevices),
+
 		sqlUpsertDuoDevice: fmt.Sprintf(queryFmtUpsertDuoDevice, tableDuoDevices),
 		sqlDeleteDuoDevice: fmt.Sprintf(queryFmtDeleteDuoDevice, tableDuoDevices),
 		sqlSelectDuoDevice: fmt.Sprintf(queryFmtSelectDuoDevice, tableDuoDevices),
@@ -169,6 +173,10 @@ type SQLProvider struct {
 	sqlUpdateWebauthnDeviceRecordSignIn           string
 	sqlUpdateWebauthnDeviceRecordSignInByUsername string
 
+	sqlDeleteWebauthnDevice                         string
+	sqlDeleteWebauthnDeviceByUsername               string
+	sqlDeleteWebauthnDeviceByUsernameAndDescription string
+
 	// Table: duo_devices.
 	sqlUpsertDuoDevice string
 	sqlDeleteDuoDevice string
@@ -841,6 +849,34 @@ func (p *SQLProvider) UpdateWebauthnDeviceSignIn(ctx context.Context, id int, rp
 	return nil
 }
 
+// DeleteWebauthnDevice deletes a registered Webauthn device.
+func (p *SQLProvider) DeleteWebauthnDevice(ctx context.Context, kid string) (err error) {
+	if _, err = p.db.ExecContext(ctx, p.sqlDeleteWebauthnDevice, kid); err != nil {
+		return fmt.Errorf("error deleting webauthn device with kid '%s': %w", kid, err)
+	}
+
+	return nil
+}
+
+// DeleteWebauthnDeviceByUsername deletes registered Webauthn devices by username or username and description.
+func (p *SQLProvider) DeleteWebauthnDeviceByUsername(ctx context.Context, username, description string) (err error) {
+	if len(username) == 0 {
+		return fmt.Errorf("error deleting webauthn device with username '%s' and description '%s': username must not be empty", username, description)
+	}
+
+	if len(description) == 0 {
+		if _, err = p.db.ExecContext(ctx, p.sqlDeleteWebauthnDeviceByUsername, username); err != nil {
+			return fmt.Errorf("error deleting webauthn devices for username '%s': %w", username, err)
+		}
+	} else {
+		if _, err = p.db.ExecContext(ctx, p.sqlDeleteWebauthnDeviceByUsernameAndDescription, username, description); err != nil {
+			return fmt.Errorf("error deleting webauthn device with username '%s' and description '%s': %w", username, description, err)
+		}
+	}
+
+	return nil
+}
+
 // LoadWebauthnDevices loads Webauthn device registrations.
 func (p *SQLProvider) LoadWebauthnDevices(ctx context.Context, limit, page int) (devices []model.WebauthnDevice, err error) {
 	devices = make([]model.WebauthnDevice, 0, limit)
diff --git a/internal/storage/sql_provider_backend_postgres.go b/internal/storage/sql_provider_backend_postgres.go
index 3b98e64e4..06fc40c78 100644
--- a/internal/storage/sql_provider_backend_postgres.go
+++ b/internal/storage/sql_provider_backend_postgres.go
@@ -61,6 +61,9 @@ func NewPostgreSQLProvider(config *schema.Configuration) (provider *PostgreSQLPr
 	provider.sqlUpdateWebauthnDevicePublicKeyByUsername = provider.db.Rebind(provider.sqlUpdateWebauthnDevicePublicKeyByUsername)
 	provider.sqlUpdateWebauthnDeviceRecordSignIn = provider.db.Rebind(provider.sqlUpdateWebauthnDeviceRecordSignIn)
 	provider.sqlUpdateWebauthnDeviceRecordSignInByUsername = provider.db.Rebind(provider.sqlUpdateWebauthnDeviceRecordSignInByUsername)
+	provider.sqlDeleteWebauthnDevice = provider.db.Rebind(provider.sqlDeleteWebauthnDevice)
+	provider.sqlDeleteWebauthnDeviceByUsername = provider.db.Rebind(provider.sqlDeleteWebauthnDeviceByUsername)
+	provider.sqlDeleteWebauthnDeviceByUsernameAndDescription = provider.db.Rebind(provider.sqlDeleteWebauthnDeviceByUsernameAndDescription)
 
 	provider.sqlSelectDuoDevice = provider.db.Rebind(provider.sqlSelectDuoDevice)
 	provider.sqlDeleteDuoDevice = provider.db.Rebind(provider.sqlDeleteDuoDevice)
diff --git a/internal/storage/sql_provider_queries.go b/internal/storage/sql_provider_queries.go
index 7dc44e156..eedfca30a 100644
--- a/internal/storage/sql_provider_queries.go
+++ b/internal/storage/sql_provider_queries.go
@@ -122,13 +122,13 @@ const (
 
 const (
 	queryFmtSelectWebauthnDevices = `
-		SELECT id, created_at, last_used_at, rpid, username, description, kid, public_key, attestation_type, transport, aaguid, sign_count, clone_warning 
+		SELECT id, created_at, last_used_at, rpid, username, description, kid, public_key, attestation_type, transport, aaguid, sign_count, clone_warning
 		FROM %s
 		LIMIT ?
 		OFFSET ?;`
 
 	queryFmtSelectWebauthnDevicesByUsername = `
-		SELECT id, created_at, last_used_at, rpid, username, description, kid, public_key, attestation_type, transport, aaguid, sign_count, clone_warning 
+		SELECT id, created_at, last_used_at, rpid, username, description, kid, public_key, attestation_type, transport, aaguid, sign_count, clone_warning
 		FROM %s
 		WHERE username = ?;`
 
@@ -144,14 +144,14 @@ const (
 
 	queryFmtUpdateWebauthnDeviceRecordSignIn = `
 		UPDATE %s
-		SET 
+		SET
 			rpid = ?, last_used_at = ?, sign_count = ?,
 			clone_warning = CASE clone_warning WHEN TRUE THEN TRUE ELSE ? END
 		WHERE id = ?;`
 
 	queryFmtUpdateWebauthnDeviceRecordSignInByUsername = `
 		UPDATE %s
-		SET 
+		SET
 			rpid = ?, last_used_at = ?, sign_count = ?,
 			clone_warning = CASE clone_warning WHEN TRUE THEN TRUE ELSE ? END
 		WHERE username = ? AND kid = ?;`
@@ -165,6 +165,18 @@ const (
 		VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)
 			ON CONFLICT (username, description)
 			DO UPDATE SET created_at = $1, last_used_at = $2, rpid = $3, kid = $6, public_key = $7, attestation_type = $8, transport = $9, aaguid = $10, sign_count = $11, clone_warning = $12;`
+
+	queryFmtDeleteWebauthnDevice = `
+		DELETE FROM %s
+		WHERE kid = ?;`
+
+	queryFmtDeleteWebauthnDeviceByUsername = `
+		DELETE FROM %s
+		WHERE username = ?;`
+
+	queryFmtDeleteWebauthnDeviceByUsernameAndDescription = `
+		DELETE FROM %s
+		WHERE username = ? AND description = ?;`
 )
 
 const (
@@ -232,7 +244,7 @@ const (
 		SELECT id, challenge_id, client_id, subject, authorized, granted, requested_at, responded_at, expires_at,
 		form_data, requested_scopes, granted_scopes, requested_audience, granted_audience
 		FROM %s
-		WHERE client_id = ? AND subject = ? AND 
+		WHERE client_id = ? AND subject = ? AND
 			  authorized = TRUE AND granted = TRUE AND expires_at IS NOT NULL AND expires_at >= CURRENT_TIMESTAMP;`
 
 	queryFmtInsertOAuth2ConsentSession = `
@@ -263,8 +275,8 @@ const (
 		WHERE signature = ? AND revoked = FALSE;`
 
 	queryFmtInsertOAuth2Session = `
-		INSERT INTO %s (challenge_id, request_id, client_id, signature, subject, requested_at, 
-		requested_scopes, granted_scopes, requested_audience, granted_audience, 
+		INSERT INTO %s (challenge_id, request_id, client_id, signature, subject, requested_at,
+		requested_scopes, granted_scopes, requested_audience, granted_audience,
 		active, revoked, form_data, session_data)
 		VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?);`
 

From 218f4673c69cd302c1de68541775eb69f6daa708 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 20 Oct 2022 09:07:17 +1100
Subject: [PATCH 156/263] build(deps): update module golang.org/x/term to
 v0.1.0 (#4209)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index c361d8488..47bcca9de 100644
--- a/go.mod
+++ b/go.mod
@@ -38,7 +38,7 @@ require (
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.40.0
 	golang.org/x/sync v0.1.0
-	golang.org/x/term v0.0.0-20221017184919-83659145692c
+	golang.org/x/term v0.1.0
 	golang.org/x/text v0.4.0
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
diff --git a/go.sum b/go.sum
index 209d3ec91..e22c068d4 100644
--- a/go.sum
+++ b/go.sum
@@ -1726,8 +1726,8 @@ golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.0.0-20221017184919-83659145692c h1:dveknrit5futqEmXAvd2I1BbZIDhxRijsyWHM86NlcA=
-golang.org/x/term v0.0.0-20221017184919-83659145692c/go.mod h1:VTIZ7TEbF0BS9Sv9lPTvGbtW8i4z6GGbJBCM37uMCzY=
+golang.org/x/term v0.1.0 h1:g6Z6vPFA9dYBAF7DWcH6sCcOntplXsDKcliusYijMlw=
+golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=

From 395d81e72a5c678d361ba7817b62f057c0d5c213 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 20 Oct 2022 10:28:27 +1100
Subject: [PATCH 157/263] build(deps): update envoyproxy/envoy docker tag to
 v1.24.0 (#4208)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/envoy/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/envoy/docker-compose.yml b/internal/suites/example/compose/envoy/docker-compose.yml
index c7a13763b..61d80a37c 100644
--- a/internal/suites/example/compose/envoy/docker-compose.yml
+++ b/internal/suites/example/compose/envoy/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   envoy:
-    image: envoyproxy/envoy:v1.23.2
+    image: envoyproxy/envoy:v1.24.0
     volumes:
       - ./example/compose/envoy/envoy.yaml:/etc/envoy/envoy.yaml
       - ./example/compose/nginx/portal/ssl:/etc/ssl

From b1a6dae99ac5b34f065391e266ac1cd87bac5b14 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 20 Oct 2022 11:37:51 +1100
Subject: [PATCH 158/263] build(deps): update dependency esbuild to v0.15.12
 (#4210)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 148 ++++++++++++++++++++++-----------------------
 2 files changed, 75 insertions(+), 75 deletions(-)

diff --git a/web/package.json b/web/package.json
index fa09f1ce0..4ba60b885 100644
--- a/web/package.json
+++ b/web/package.json
@@ -156,7 +156,7 @@
     "@typescript-eslint/eslint-plugin": "5.40.1",
     "@typescript-eslint/parser": "5.40.1",
     "@vitejs/plugin-react": "2.1.0",
-    "esbuild": "0.15.11",
+    "esbuild": "0.15.12",
     "esbuild-jest": "0.5.0",
     "eslint": "8.25.0",
     "eslint-config-prettier": "8.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index e8370eee9..1fe59d238 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -27,7 +27,7 @@ specifiers:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  esbuild: 0.15.11
+  esbuild: 0.15.12
   esbuild-jest: 0.5.0
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0
@@ -106,8 +106,8 @@ devDependencies:
   '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
   '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
   '@vitejs/plugin-react': 2.1.0_vite@3.1.8
-  esbuild: 0.15.11
-  esbuild-jest: 0.5.0_esbuild@0.15.11
+  esbuild: 0.15.12
+  esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0_eslint@8.25.0
   eslint-config-react-app: 7.0.1_qmd4m3kwjsj7vjajupe47kzjqa
@@ -2386,8 +2386,8 @@ packages:
     resolution: {integrity: sha512-AHPmaAx+RYfZz0eYu6Gviiagpmiyw98ySSlQvCUhVGDRtDFe4DBS0x1bSjdF3gqUDYOczB+yYvBTtEylYSdRhg==}
     dev: false
 
-  /@esbuild/android-arm/0.15.11:
-    resolution: {integrity: sha512-PzMcQLazLBkwDEkrNPi9AbjFt6+3I7HKbiYF2XtWQ7wItrHvEOeO3T8Am434zAozWtVP7lrTue1bEfc2nYWeCA==}
+  /@esbuild/android-arm/0.15.12:
+    resolution: {integrity: sha512-IC7TqIqiyE0MmvAhWkl/8AEzpOtbhRNDo7aph47We1NbE5w2bt/Q+giAhe0YYeVpYnIhGMcuZY92qDK6dQauvA==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [android]
@@ -2395,8 +2395,8 @@ packages:
     dev: true
     optional: true
 
-  /@esbuild/linux-loong64/0.15.11:
-    resolution: {integrity: sha512-geWp637tUhNmhL3Xgy4Bj703yXB9dqiLJe05lCUfjSFDrQf9C/8pArusyPUbUbPwlC/EAUjBw32sxuIl/11dZw==}
+  /@esbuild/linux-loong64/0.15.12:
+    resolution: {integrity: sha512-tZEowDjvU7O7I04GYvWQOS4yyP9E/7YlsB0jjw1Ycukgr2ycEzKyIk5tms5WnLBymaewc6VmRKnn5IJWgK4eFw==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
@@ -5023,8 +5023,8 @@ packages:
       is-symbol: 1.0.4
     dev: true
 
-  /esbuild-android-64/0.15.11:
-    resolution: {integrity: sha512-rrwoXEiuI1kaw4k475NJpexs8GfJqQUKcD08VR8sKHmuW9RUuTR2VxcupVvHdiGh9ihxL9m3lpqB1kju92Ialw==}
+  /esbuild-android-64/0.15.12:
+    resolution: {integrity: sha512-MJKXwvPY9g0rGps0+U65HlTsM1wUs9lbjt5CU19RESqycGFDRijMDQsh68MtbzkqWSRdEtiKS1mtPzKneaAI0Q==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
@@ -5032,8 +5032,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-android-arm64/0.15.11:
-    resolution: {integrity: sha512-/hDubOg7BHOhUUsT8KUIU7GfZm5bihqssvqK5PfO4apag7YuObZRZSzViyEKcFn2tPeHx7RKbSBXvAopSHDZJQ==}
+  /esbuild-android-arm64/0.15.12:
+    resolution: {integrity: sha512-Hc9SEcZbIMhhLcvhr1DH+lrrec9SFTiRzfJ7EGSBZiiw994gfkVV6vG0sLWqQQ6DD7V4+OggB+Hn0IRUdDUqvA==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
@@ -5041,8 +5041,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-64/0.15.11:
-    resolution: {integrity: sha512-1DqHD0ms3AhiwkKnjRUzmiW7JnaJJr5FKrPiR7xuyMwnjDqvNWDdMq4rKSD9OC0piFNK6n0LghsglNMe2MwJtA==}
+  /esbuild-darwin-64/0.15.12:
+    resolution: {integrity: sha512-qkmqrTVYPFiePt5qFjP8w/S+GIUMbt6k8qmiPraECUWfPptaPJUGkCKrWEfYFRWB7bY23FV95rhvPyh/KARP8Q==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
@@ -5050,8 +5050,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-arm64/0.15.11:
-    resolution: {integrity: sha512-OMzhxSbS0lwwrW40HHjRCeVIJTURdXFA8c3GU30MlHKuPCcvWNUIKVucVBtNpJySXmbkQMDJdJNrXzNDyvoqvQ==}
+  /esbuild-darwin-arm64/0.15.12:
+    resolution: {integrity: sha512-z4zPX02tQ41kcXMyN3c/GfZpIjKoI/BzHrdKUwhC/Ki5BAhWv59A9M8H+iqaRbwpzYrYidTybBwiZAIWCLJAkw==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
@@ -5059,8 +5059,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-64/0.15.11:
-    resolution: {integrity: sha512-8dKP26r0/Qyez8nTCwpq60QbuYKOeBygdgOAWGCRalunyeqWRoSZj9TQjPDnTTI9joxd3QYw3UhVZTKxO9QdRg==}
+  /esbuild-freebsd-64/0.15.12:
+    resolution: {integrity: sha512-XFL7gKMCKXLDiAiBjhLG0XECliXaRLTZh6hsyzqUqPUf/PY4C6EJDTKIeqqPKXaVJ8+fzNek88285krSz1QECw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
@@ -5068,8 +5068,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-arm64/0.15.11:
-    resolution: {integrity: sha512-aSGiODiukLGGnSg/O9+cGO2QxEacrdCtCawehkWYTt5VX1ni2b9KoxpHCT9h9Y6wGqNHmXFnB47RRJ8BIqZgmQ==}
+  /esbuild-freebsd-arm64/0.15.12:
+    resolution: {integrity: sha512-jwEIu5UCUk6TjiG1X+KQnCGISI+ILnXzIzt9yDVrhjug2fkYzlLbl0K43q96Q3KB66v6N1UFF0r5Ks4Xo7i72g==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
@@ -5077,7 +5077,7 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-jest/0.5.0_esbuild@0.15.11:
+  /esbuild-jest/0.5.0_esbuild@0.15.12:
     resolution: {integrity: sha512-AMZZCdEpXfNVOIDvURlqYyHwC8qC1/BFjgsrOiSL1eyiIArVtHL8YAC83Shhn16cYYoAWEW17yZn0W/RJKJKHQ==}
     peerDependencies:
       esbuild: '>=0.8.50'
@@ -5085,13 +5085,13 @@ packages:
       '@babel/core': 7.18.6
       '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.6
       babel-jest: 26.6.3_@babel+core@7.18.6
-      esbuild: 0.15.11
+      esbuild: 0.15.12
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /esbuild-linux-32/0.15.11:
-    resolution: {integrity: sha512-lsrAfdyJBGx+6aHIQmgqUonEzKYeBnyfJPkT6N2dOf1RoXYYV1BkWB6G02tjsrz1d5wZzaTc3cF+TKmuTo/ZwA==}
+  /esbuild-linux-32/0.15.12:
+    resolution: {integrity: sha512-uSQuSEyF1kVzGzuIr4XM+v7TPKxHjBnLcwv2yPyCz8riV8VUCnO/C4BF3w5dHiVpCd5Z1cebBtZJNlC4anWpwA==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
@@ -5099,8 +5099,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-64/0.15.11:
-    resolution: {integrity: sha512-Y2Rh+PcyVhQqXKBTacPCltINN3uIw2xC+dsvLANJ1SpK5NJUtxv8+rqWpjmBgaNWKQT1/uGpMmA9olALy9PLVA==}
+  /esbuild-linux-64/0.15.12:
+    resolution: {integrity: sha512-QcgCKb7zfJxqT9o5z9ZUeGH1k8N6iX1Y7VNsEi5F9+HzN1OIx7ESxtQXDN9jbeUSPiRH1n9cw6gFT3H4qbdvcA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
@@ -5108,8 +5108,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm/0.15.11:
-    resolution: {integrity: sha512-TJllTVk5aSyqPFvvcHTvf6Wu1ZKhWpJ/qNmZO8LL/XeB+LXCclm7HQHNEIz6MT7IX8PmlC1BZYrOiw2sXSB95A==}
+  /esbuild-linux-arm/0.15.12:
+    resolution: {integrity: sha512-Wf7T0aNylGcLu7hBnzMvsTfEXdEdJY/hY3u36Vla21aY66xR0MS5I1Hw8nVquXjTN0A6fk/vnr32tkC/C2lb0A==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
@@ -5117,8 +5117,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm64/0.15.11:
-    resolution: {integrity: sha512-uhcXiTwTmD4OpxJu3xC5TzAAw6Wzf9O1XGWL448EE9bqGjgV1j+oK3lIHAfsHnuIn8K4nDW8yjX0Sv5S++oRuw==}
+  /esbuild-linux-arm64/0.15.12:
+    resolution: {integrity: sha512-HtNq5xm8fUpZKwWKS2/YGwSfTF+339L4aIA8yphNKYJckd5hVdhfdl6GM2P3HwLSCORS++++7++//ApEwXEuAQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
@@ -5126,8 +5126,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-mips64le/0.15.11:
-    resolution: {integrity: sha512-WD61y/R1M4BLe4gxXRypoQ0Ci+Vjf714QYzcPNkiYv5I8K8WDz2ZR8Bm6cqKxd6rD+e/rZgPDbhQ9PCf7TMHmA==}
+  /esbuild-linux-mips64le/0.15.12:
+    resolution: {integrity: sha512-Qol3+AvivngUZkTVFgLpb0H6DT+N5/zM3V1YgTkryPYFeUvuT5JFNDR3ZiS6LxhyF8EE+fiNtzwlPqMDqVcc6A==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
@@ -5135,8 +5135,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-ppc64le/0.15.11:
-    resolution: {integrity: sha512-JVleZS9oPVLTlBhPTWgOwxFWU/wMUdlBwTbGA4GF8c38sLbS13cupj+C8bLq929jU7EMWry4SaL+tKGIaTlqKg==}
+  /esbuild-linux-ppc64le/0.15.12:
+    resolution: {integrity: sha512-4D8qUCo+CFKaR0cGXtGyVsOI7w7k93Qxb3KFXWr75An0DHamYzq8lt7TNZKoOq/Gh8c40/aKaxvcZnTgQ0TJNg==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
@@ -5144,8 +5144,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-riscv64/0.15.11:
-    resolution: {integrity: sha512-9aLIalZ2HFHIOZpmVU11sEAS9F8TnHw49daEjcgMpBXHFF57VuT9f9/9LKJhw781Gda0P9jDkuCWJ0tFbErvJw==}
+  /esbuild-linux-riscv64/0.15.12:
+    resolution: {integrity: sha512-G9w6NcuuCI6TUUxe6ka0enjZHDnSVK8bO+1qDhMOCtl7Tr78CcZilJj8SGLN00zO5iIlwNRZKHjdMpfFgNn1VA==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
@@ -5153,8 +5153,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-s390x/0.15.11:
-    resolution: {integrity: sha512-sZHtiXXOKsLI3XGBGoYO4qKBzJlb8xNsWmvFiwFMHFzA4AXgDP1KDp7Dawe9C2pavTRBDvl+Ok4n/DHQ59oaTg==}
+  /esbuild-linux-s390x/0.15.12:
+    resolution: {integrity: sha512-Lt6BDnuXbXeqSlVuuUM5z18GkJAZf3ERskGZbAWjrQoi9xbEIsj/hEzVnSAFLtkfLuy2DE4RwTcX02tZFunXww==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
@@ -5162,8 +5162,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-netbsd-64/0.15.11:
-    resolution: {integrity: sha512-hUC9yN06K9sg7ju4Vgu9ChAPdsEgtcrcLfyNT5IKwKyfpLvKUwCMZSdF+gRD3WpyZelgTQfJ+pDx5XFbXTlB0A==}
+  /esbuild-netbsd-64/0.15.12:
+    resolution: {integrity: sha512-jlUxCiHO1dsqoURZDQts+HK100o0hXfi4t54MNRMCAqKGAV33JCVvMplLAa2FwviSojT/5ZG5HUfG3gstwAG8w==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
@@ -5171,8 +5171,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-openbsd-64/0.15.11:
-    resolution: {integrity: sha512-0bBo9SQR4t66Wd91LGMAqmWorzO0TTzVjYiifwoFtel8luFeXuPThQnEm5ztN4g0fnvcp7AnUPPzS/Depf17wQ==}
+  /esbuild-openbsd-64/0.15.12:
+    resolution: {integrity: sha512-1o1uAfRTMIWNOmpf8v7iudND0L6zRBYSH45sofCZywrcf7NcZA+c7aFsS1YryU+yN7aRppTqdUK1PgbZVaB1Dw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
@@ -5180,8 +5180,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-sunos-64/0.15.11:
-    resolution: {integrity: sha512-EuBdTGlsMTjEl1sQnBX2jfygy7iR6CKfvOzi+gEOfhDqbHXsmY1dcpbVtcwHAg9/2yUZSfMJHMAgf1z8M4yyyw==}
+  /esbuild-sunos-64/0.15.12:
+    resolution: {integrity: sha512-nkl251DpoWoBO9Eq9aFdoIt2yYmp4I3kvQjba3jFKlMXuqQ9A4q+JaqdkCouG3DHgAGnzshzaGu6xofGcXyPXg==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
@@ -5189,8 +5189,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-32/0.15.11:
-    resolution: {integrity: sha512-O0/Wo1Wk6dc0rZSxkvGpmTNIycEznHmkObTFz2VHBhjPsO4ZpCgfGxNkCpz4AdAIeMczpTXt/8d5vdJNKEGC+Q==}
+  /esbuild-windows-32/0.15.12:
+    resolution: {integrity: sha512-WlGeBZHgPC00O08luIp5B2SP4cNCp/PcS+3Pcg31kdcJPopHxLkdCXtadLU9J82LCfw4TVls21A6lilQ9mzHrw==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
@@ -5198,8 +5198,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-64/0.15.11:
-    resolution: {integrity: sha512-x977Q4HhNjnHx00b4XLAnTtj5vfbdEvkxaQwC1Zh5AN8g5EX+izgZ6e5QgqJgpzyRNJqh4hkgIJF1pyy1be0mQ==}
+  /esbuild-windows-64/0.15.12:
+    resolution: {integrity: sha512-VActO3WnWZSN//xjSfbiGOSyC+wkZtI8I4KlgrTo5oHJM6z3MZZBCuFaZHd8hzf/W9KPhF0lY8OqlmWC9HO5AA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
@@ -5207,8 +5207,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-arm64/0.15.11:
-    resolution: {integrity: sha512-VwUHFACuBahrvntdcMKZteUZ9HaYrBRODoKe4tIWxguQRvvYoYb7iu5LrcRS/FQx8KPZNaa72zuqwVtHeXsITw==}
+  /esbuild-windows-arm64/0.15.12:
+    resolution: {integrity: sha512-Of3MIacva1OK/m4zCNIvBfz8VVROBmQT+gRX6pFTLPngFYcj6TFH/12VveAqq1k9VB2l28EoVMNMUCcmsfwyuA==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
@@ -5216,34 +5216,34 @@ packages:
     dev: true
     optional: true
 
-  /esbuild/0.15.11:
-    resolution: {integrity: sha512-OgHGuhlfZ//mToxjte1D5iiiQgWfJ2GByVMwEC/IuoXsBGkuyK1+KrjYu0laSpnN/L1UmLUCv0s25vObdc1bVg==}
+  /esbuild/0.15.12:
+    resolution: {integrity: sha512-PcT+/wyDqJQsRVhaE9uX/Oq4XLrFh0ce/bs2TJh4CSaw9xuvI+xFrH2nAYOADbhQjUgAhNWC5LKoUsakm4dxng==}
     engines: {node: '>=12'}
     hasBin: true
     requiresBuild: true
     optionalDependencies:
-      '@esbuild/android-arm': 0.15.11
-      '@esbuild/linux-loong64': 0.15.11
-      esbuild-android-64: 0.15.11
-      esbuild-android-arm64: 0.15.11
-      esbuild-darwin-64: 0.15.11
-      esbuild-darwin-arm64: 0.15.11
-      esbuild-freebsd-64: 0.15.11
-      esbuild-freebsd-arm64: 0.15.11
-      esbuild-linux-32: 0.15.11
-      esbuild-linux-64: 0.15.11
-      esbuild-linux-arm: 0.15.11
-      esbuild-linux-arm64: 0.15.11
-      esbuild-linux-mips64le: 0.15.11
-      esbuild-linux-ppc64le: 0.15.11
-      esbuild-linux-riscv64: 0.15.11
-      esbuild-linux-s390x: 0.15.11
-      esbuild-netbsd-64: 0.15.11
-      esbuild-openbsd-64: 0.15.11
-      esbuild-sunos-64: 0.15.11
-      esbuild-windows-32: 0.15.11
-      esbuild-windows-64: 0.15.11
-      esbuild-windows-arm64: 0.15.11
+      '@esbuild/android-arm': 0.15.12
+      '@esbuild/linux-loong64': 0.15.12
+      esbuild-android-64: 0.15.12
+      esbuild-android-arm64: 0.15.12
+      esbuild-darwin-64: 0.15.12
+      esbuild-darwin-arm64: 0.15.12
+      esbuild-freebsd-64: 0.15.12
+      esbuild-freebsd-arm64: 0.15.12
+      esbuild-linux-32: 0.15.12
+      esbuild-linux-64: 0.15.12
+      esbuild-linux-arm: 0.15.12
+      esbuild-linux-arm64: 0.15.12
+      esbuild-linux-mips64le: 0.15.12
+      esbuild-linux-ppc64le: 0.15.12
+      esbuild-linux-riscv64: 0.15.12
+      esbuild-linux-s390x: 0.15.12
+      esbuild-netbsd-64: 0.15.12
+      esbuild-openbsd-64: 0.15.12
+      esbuild-sunos-64: 0.15.12
+      esbuild-windows-32: 0.15.12
+      esbuild-windows-64: 0.15.12
+      esbuild-windows-arm64: 0.15.12
     dev: true
 
   /escalade/3.1.1:
@@ -9325,7 +9325,7 @@ packages:
       terser:
         optional: true
     dependencies:
-      esbuild: 0.15.11
+      esbuild: 0.15.12
       postcss: 8.4.16
       resolve: 1.22.1
       rollup: 2.78.0

From 3aaca0604f2ed479d7f00fb5087ffed059f87a71 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Thu, 20 Oct 2022 13:16:36 +1100
Subject: [PATCH 159/263] feat(oidc): implicit consent (#4080)

This adds multiple consent modes to OpenID Connect clients. Specifically it allows configuration of a new consent mode called implicit which never asks for user consent.
---
 api/openapi.yml                               |  38 ++-
 config.template.yml                           |  10 +-
 .../identity-providers/open-id-connect.md     |  38 ++-
 .../en/configuration/storage/migrations.md    |   1 +
 .../en/roadmap/active/openid-connect.md       |  17 +-
 internal/configuration/config.template.yml    |  10 +-
 internal/configuration/decode_hooks.go        |   4 +
 internal/configuration/provider_test.go       |  17 ++
 .../schema/identity_providers.go              |   9 +-
 internal/configuration/schema/keys.go         |   1 +
 .../test_resources/config_oidc.yml            |   4 +
 internal/configuration/validator/const.go     |  28 +-
 .../validator/identity_providers.go           |  42 ++-
 .../validator/identity_providers_test.go      | 139 +++++----
 internal/handlers/const.go                    |  46 +++
 .../handler_checks_safe_redirection.go        |   3 +-
 internal/handlers/handler_firstfactor.go      |   4 +-
 .../handlers/handler_oauth_introspection.go   |   6 +-
 internal/handlers/handler_oauth_revocation.go |   4 +-
 .../handlers/handler_oidc_authorization.go    |  25 +-
 .../handler_oidc_authorization_consent.go     | 271 +++++++-----------
 ...ler_oidc_authorization_consent_explicit.go |  96 +++++++
 ...ler_oidc_authorization_consent_implicit.go | 136 +++++++++
 ...dc_authorization_consent_pre_configured.go | 220 ++++++++++++++
 internal/handlers/handler_oidc_consent.go     | 129 +++++----
 internal/handlers/handler_oidc_token.go       |  10 +-
 internal/handlers/handler_oidc_userinfo.go    |  32 ++-
 internal/handlers/handler_oidc_wellknown.go   |  22 +-
 internal/handlers/handler_sign_duo.go         |  10 +-
 internal/handlers/handler_sign_duo_test.go    |  44 +--
 internal/handlers/handler_sign_totp.go        |   4 +-
 internal/handlers/handler_sign_totp_test.go   |  12 +-
 internal/handlers/handler_sign_webauthn.go    |   4 +-
 internal/handlers/handler_user_info.go        |   2 +-
 internal/handlers/handler_verify.go           |   6 +-
 internal/handlers/handler_verify_test.go      |  12 +-
 internal/handlers/oidc.go                     |   5 +-
 internal/handlers/oidc_test.go                |  20 +-
 internal/handlers/response.go                 | 179 ++++++++----
 internal/handlers/types.go                    |  55 ++--
 internal/middlewares/authelia_context.go      |  23 ++
 internal/middlewares/authelia_context_test.go |  56 ++++
 internal/middlewares/types.go                 |   2 +-
 internal/mocks/storage.go                     |  50 ++--
 internal/model/identity_verification.go       |  19 +-
 internal/model/oidc.go                        |  94 ++++--
 internal/model/totp_configuration.go          |  29 +-
 internal/model/webauthn.go                    |  29 +-
 internal/oidc/client.go                       |  32 ++-
 internal/oidc/client_test.go                  |   2 +-
 internal/oidc/const.go                        | 112 ++++++--
 internal/oidc/discovery.go                    |  66 +++--
 internal/oidc/discovery_test.go               |  49 +++-
 internal/oidc/errors.go                       |  16 +-
 internal/oidc/keys.go                         |   2 +-
 internal/oidc/provider.go                     | 113 +++-----
 internal/oidc/provider_test.go                | 107 ++++---
 internal/oidc/store.go                        |  76 ++---
 internal/oidc/store_test.go                   |  12 +-
 internal/oidc/types.go                        |  87 +++++-
 internal/oidc/types_test.go                   |  22 +-
 internal/server/handlers.go                   |  46 +--
 internal/session/user_session.go              |   5 +
 internal/storage/const.go                     |  20 +-
 ...p.sql => V0004.OpenIDConnect.mysql.up.sql} |   0
 ...ql => V0004.OpenIDConnect.postgres.up.sql} |   0
 ....sql => V0004.OpenIDConnect.sqlite.up.sql} |   0
 ...006.ConsentPreConfiguration.mysql.down.sql | 175 +++++++++++
 ...V0006.ConsentPreConfiguration.mysql.up.sql | 198 +++++++++++++
 ....ConsentPreConfiguration.postgres.down.sql | 175 +++++++++++
 ...06.ConsentPreConfiguration.postgres.up.sql | 198 +++++++++++++
 ...06.ConsentPreConfiguration.sqlite.down.sql | 175 +++++++++++
 ...0006.ConsentPreConfiguration.sqlite.up.sql | 198 +++++++++++++
 internal/storage/migrations_test.go           |   9 +-
 internal/storage/provider.go                  |   9 +-
 internal/storage/sql_provider.go              |  90 ++++--
 .../storage/sql_provider_backend_postgres.go  |   4 +-
 internal/storage/sql_provider_queries.go      |  32 ++-
 internal/storage/sql_provider_schema_test.go  |  62 ++--
 internal/storage/sql_rows.go                  |  16 +-
 .../compose/oidc-client/docker-compose.yml    |   2 +-
 internal/suites/scenario_oidc_test.go         |  56 ++--
 web/src/constants/SearchParams.ts             |   1 +
 web/src/hooks/Consent.ts                      |   6 -
 web/src/hooks/ConsentID.ts                    |   8 -
 web/src/hooks/Workflow.ts                     |  14 +-
 web/src/models/Webauthn.ts                    |   2 +
 web/src/services/Consent.ts                   |  12 +-
 web/src/services/OneTimePassword.ts           |  19 +-
 web/src/services/PushNotification.ts          |  18 +-
 web/src/services/Webauthn.ts                  |  21 +-
 .../LoginPortal/ConsentView/ConsentView.tsx   |   9 +-
 .../FirstFactor/FirstFactorForm.tsx           |   2 +-
 web/src/views/LoginPortal/LoginPortal.tsx     |  43 ++-
 .../SecondFactor/OneTimePasswordMethod.tsx    |   5 +-
 .../SecondFactor/PushNotificationMethod.tsx   |   5 +-
 .../SecondFactor/WebauthnMethod.tsx           |  11 +-
 97 files changed, 3285 insertions(+), 1074 deletions(-)
 create mode 100644 internal/handlers/handler_oidc_authorization_consent_explicit.go
 create mode 100644 internal/handlers/handler_oidc_authorization_consent_implicit.go
 create mode 100644 internal/handlers/handler_oidc_authorization_consent_pre_configured.go
 rename internal/storage/migrations/{V0004.OpenIDConenct.mysql.up.sql => V0004.OpenIDConnect.mysql.up.sql} (100%)
 rename internal/storage/migrations/{V0004.OpenIDConenct.postgres.up.sql => V0004.OpenIDConnect.postgres.up.sql} (100%)
 rename internal/storage/migrations/{V0004.OpenIDConenct.sqlite.up.sql => V0004.OpenIDConnect.sqlite.up.sql} (100%)
 create mode 100644 internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.down.sql
 create mode 100644 internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql
 create mode 100644 internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.down.sql
 create mode 100644 internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql
 create mode 100644 internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.down.sql
 create mode 100644 internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql
 create mode 100644 web/src/constants/SearchParams.ts
 delete mode 100644 web/src/hooks/Consent.ts
 delete mode 100644 web/src/hooks/ConsentID.ts

diff --git a/api/openapi.yml b/api/openapi.yml
index 10ec36b9d..15443a24e 100644
--- a/api/openapi.yml
+++ b/api/openapi.yml
@@ -176,7 +176,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/handlers.firstFactorRequestBody'
+              $ref: '#/components/schemas/handlers.bodyFirstFactorRequest'
       responses:
         "200":
           description: Successful Operation
@@ -446,7 +446,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/handlers.signTOTPRequestBody'
+              $ref: '#/components/schemas/handlers.bodySignTOTPRequest'
       responses:
         "200":
           description: Successful Operation
@@ -579,7 +579,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/handlers.signDuoRequestBody'
+              $ref: '#/components/schemas/handlers.bodySignDuoRequest'
       responses:
         "200":
           description: Successful Operation
@@ -785,7 +785,7 @@ components:
                     items:
                       type: string
                       example: push
-    handlers.firstFactorRequestBody:
+    handlers.bodyFirstFactorRequest:
       required:
         - username
         - password
@@ -800,6 +800,12 @@ components:
         targetURL:
           type: string
           example: https://home.example.com
+        workflow:
+          type: string
+          example: openid_connect
+        workflowID:
+          type: string
+          example: 3ebcfbc5-b0fd-4ee0-9d3c-080ae1e7298c
         requestMethod:
           type: string
           example: GET
@@ -852,13 +858,21 @@ components:
         password:
           type: string
           example: password
-    handlers.signDuoRequestBody:
+    handlers.bodySignDuoRequest:
       type: object
       properties:
         targetURL:
           type: string
           example: https://secure.example.com
-    handlers.signTOTPRequestBody:
+        passcode:
+          type: string
+        workflow:
+          type: string
+          example: openid_connect
+        workflowID:
+          type: string
+          example: 3ebcfbc5-b0fd-4ee0-9d3c-080ae1e7298c
+    handlers.bodySignTOTPRequest:
       type: object
       properties:
         token:
@@ -867,6 +881,12 @@ components:
         targetURL:
           type: string
           example: https://secure.example.com
+        workflow:
+          type: string
+          example: openid_connect
+        workflowID:
+          type: string
+          example: 3ebcfbc5-b0fd-4ee0-9d3c-080ae1e7298c
     handlers.StateResponse:
       type: object
       properties:
@@ -1047,6 +1067,12 @@ components:
                     userHandle:
                       type: string
                       format: byte
+                    workflow:
+                      type: string
+                      example: openid_connect
+                    workflowID:
+                      type: string
+                      example: 3ebcfbc5-b0fd-4ee0-9d3c-080ae1e7298c
     webauthn.PublicKeyCredentialCreationOptions:
       type: object
       properties:
diff --git a/config.template.yml b/config.template.yml
index 26742f953..16ea13b17 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -972,10 +972,12 @@ notifier:
         ## The policy to require for this client; one_factor or two_factor.
         # authorization_policy: two_factor
 
-        ## By default users cannot remember pre-configured consents. Setting this value to a period of time using a
-        ## duration notation will enable users to remember consent for this client. The time configured is the amount
-        ## of time the pre-configured consent is valid for granting new authorizations to the user.
-        # pre_configured_consent_duration:
+        ## The consent mode controls how consent is obtained.
+        # consent_mode: auto
+
+        ## This value controls the duration a consent on this client remains remembered when the consent mode is
+        ## configured as 'auto' or 'pre-configured'.
+        # pre_configured_consent_duration: 1w
 
         ## Audience this client is allowed to request.
         # audience: []
diff --git a/docs/content/en/configuration/identity-providers/open-id-connect.md b/docs/content/en/configuration/identity-providers/open-id-connect.md
index a8d6997a4..57e31742d 100644
--- a/docs/content/en/configuration/identity-providers/open-id-connect.md
+++ b/docs/content/en/configuration/identity-providers/open-id-connect.md
@@ -122,7 +122,8 @@ identity_providers:
         sector_identifier: ''
         public: false
         authorization_policy: two_factor
-        pre_configured_consent_duration: ''
+        consent_mode: explicit
+        pre_configured_consent_duration: 1w
         audience: []
         scopes:
           - openid
@@ -183,9 +184,13 @@ certificate immediately following it if present.
 *__Important Note:__ This can also be defined using a [secret](../methods/secrets.md) which is __strongly recommended__
 especially for containerized deployments.*
 
-The private key in DER base64 ([RFC4648]) encoded PEM format used to sign/encrypt the [OpenID Connect] issued [JWT]'s.
-The key must be generated by the administrator and can be done by following the
-[Generating an RSA Keypair](../miscellaneous/guides.md#generating-an-rsa-keypair) guide.
+The private key used to sign/encrypt the [OpenID Connect] issued [JWT]'s. The key must be generated by the administrator
+and can be done by following the [Generating an RSA Keypair](../miscellaneous/guides.md#generating-an-rsa-keypair) guide.
+
+The private key *__MUST__*:
+* Be a PEM block encoded in the DER base64 format ([RFC4648]).
+* Be an RSA Key.
+* Have a key size of at least 2048 bits.
 
 If the [issuer_certificate_chain](#issuer_certificate_chain) is provided the private key must include matching public
 key data for the first certificate in the chain.
@@ -404,19 +409,38 @@ URI.
 
 The authorization policy for this client: either `one_factor` or `two_factor`.
 
+#### consent_mode
+
+{{< confkey type="string" default="auto" required="no" >}}
+
+Configures the consent mode. The following table describes the different modes:
+
+|     Value      |                                                                                   Description                                                                                    |
+|:--------------:|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------:|
+|      auto      |                  Automatically determined (default). Uses `explicit` unless [pre_configured_consent_duration] is specified in which case uses `pre-configured`.                  |
+|    explicit    |                                                    Requires the user provide unique explicit consent for every authorization.                                                    |
+|    implicit    | Automatically assumes consent for every authorization, never asking the user if they wish to give consent. *__Note:__* this option is not technically part of the specification. |
+| pre-configured |                                             Allows the end-user to remember their consent for the [pre_configured_consent_duration].                                             |
+
+[pre_configured_consent_duration]: #pre_configured_consent_duration
+
 #### pre_configured_consent_duration
 
-{{< confkey type="duration" required="no" >}}
+{{< confkey type="duration" default="1w" required="no" >}}
 
 *__Note:__ This setting uses the [duration notation format](../prologue/common.md#duration-notation-format). Please see
 the [common options](../prologue/common.md#duration-notation-format) documentation for information on this format.*
 
-Configuring this enables users of this client to remember their consent as a pre-configured consent. The period of time
-dictates how long a users choice to remember the pre-configured consent lasts.
+Specifying this in the configuration without a consent [consent_mode] enables the `pre-configured` mode. If this is
+specified as well as the [consent_mode] then it only has an effect if the [consent_mode] is `pre-configured` or `auto`.
+
+The period of time dictates how long a users choice to remember the pre-configured consent lasts.
 
 Pre-configured consents are only valid if the subject, client id are exactly the same and the requested scopes/audience
 match exactly with the granted scopes/audience.
 
+[consent_mode]: #consent_mode
+
 #### audience
 
 {{< confkey type="list(string)" required="no" >}}
diff --git a/docs/content/en/configuration/storage/migrations.md b/docs/content/en/configuration/storage/migrations.md
index b3cc68287..fbc84df83 100644
--- a/docs/content/en/configuration/storage/migrations.md
+++ b/docs/content/en/configuration/storage/migrations.md
@@ -34,3 +34,4 @@ this instance if you wanted to downgrade to pre1 you would need to use an Authel
 |       3        |      4.34.2      |     WebAuthn - fix V2 migration kid column length and provide migration path for anyone on V2      |
 |       4        |      4.35.0      |               Added OpenID Connect storage tables and opaque user identifier tables                |
 |       5        |      4.35.1      | Fixed the oauth2_consent_session table to accept NULL subjects for users who are not yet signed in |
+|       6        |      4.37.0      |          Adjusted the OpenID Connect tables to allow pre-configured consent improvements           |
diff --git a/docs/content/en/roadmap/active/openid-connect.md b/docs/content/en/roadmap/active/openid-connect.md
index 17a7e8f09..180a5a24a 100644
--- a/docs/content/en/roadmap/active/openid-connect.md
+++ b/docs/content/en/roadmap/active/openid-connect.md
@@ -93,16 +93,23 @@ Feature List:
 
 ### Beta 5
 
-{{< roadmap-status stage="in-progress" version="v4.37.0" >}}
+{{< roadmap-status stage="complete" version="v4.37.0" >}}
 
 Feature List:
 
 * [JWK's backed by X509 Certificate Chains](https://www.rfc-editor.org/rfc/rfc7517#section-4.7)
-* Per-Client [Consent](https://openid.net/specs/openid-connect-core-1_0.html#Consent) Mode
-  * Explicit
-  * Implicit
-  * Pre-Configured
 * Hashed Client Secrets
+* Per-Client [Consent](https://openid.net/specs/openid-connect-core-1_0.html#Consent) Mode:
+  * Explicit:
+    * The default
+    * Always asks for end-user consent
+  * Implicit:
+    * Not expressly standards compliant
+    * Never asks for end-user consent
+    * Not compatible with the consent prompt type
+  * Pre-Configured:
+    * Allows users to save consent sessions for a duration configured by the administrator
+    * Operates nearly identically to the explicit consent mode
 
 ### Beta 6
 
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 26742f953..16ea13b17 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -972,10 +972,12 @@ notifier:
         ## The policy to require for this client; one_factor or two_factor.
         # authorization_policy: two_factor
 
-        ## By default users cannot remember pre-configured consents. Setting this value to a period of time using a
-        ## duration notation will enable users to remember consent for this client. The time configured is the amount
-        ## of time the pre-configured consent is valid for granting new authorizations to the user.
-        # pre_configured_consent_duration:
+        ## The consent mode controls how consent is obtained.
+        # consent_mode: auto
+
+        ## This value controls the duration a consent on this client remains remembered when the consent mode is
+        ## configured as 'auto' or 'pre-configured'.
+        # pre_configured_consent_duration: 1w
 
         ## Audience this client is allowed to request.
         # audience: []
diff --git a/internal/configuration/decode_hooks.go b/internal/configuration/decode_hooks.go
index d3c5d5c44..3dca0409f 100644
--- a/internal/configuration/decode_hooks.go
+++ b/internal/configuration/decode_hooks.go
@@ -396,6 +396,10 @@ func StringToPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
 				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, fmt.Errorf("the data is for a %T not a *%s", r, expectedType))
 			}
 
+			if err = r.Validate(); err != nil {
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "*", expectedType, err)
+			}
+
 			return r, nil
 		case *ecdsa.PrivateKey:
 			if expectedType != expectedTypeECDSA {
diff --git a/internal/configuration/provider_test.go b/internal/configuration/provider_test.go
index 1f4b6db95..b5eb50ecc 100644
--- a/internal/configuration/provider_test.go
+++ b/internal/configuration/provider_test.go
@@ -219,6 +219,23 @@ func TestShouldLoadURLList(t *testing.T) {
 	assert.Equal(t, "https://example.com", config.IdentityProviders.OIDC.CORS.AllowedOrigins[1].String())
 }
 
+func TestShouldConfigureConsent(t *testing.T) {
+	testReset()
+
+	val := schema.NewStructValidator()
+	keys, config, err := Load(val, NewDefaultSources([]string{"./test_resources/config_oidc.yml"}, DefaultEnvPrefix, DefaultEnvDelimiter)...)
+
+	assert.NoError(t, err)
+
+	validator.ValidateKeys(keys, DefaultEnvPrefix, val)
+
+	assert.Len(t, val.Errors(), 0)
+	assert.Len(t, val.Warnings(), 0)
+
+	require.Len(t, config.IdentityProviders.OIDC.Clients, 1)
+	assert.Equal(t, config.IdentityProviders.OIDC.Clients[0].ConsentMode, "explicit")
+}
+
 func TestShouldValidateAndRaiseErrorsOnBadConfiguration(t *testing.T) {
 	testReset()
 
diff --git a/internal/configuration/schema/identity_providers.go b/internal/configuration/schema/identity_providers.go
index 6c5f461f2..916dbd6b7 100644
--- a/internal/configuration/schema/identity_providers.go
+++ b/internal/configuration/schema/identity_providers.go
@@ -61,7 +61,8 @@ type OpenIDConnectClientConfiguration struct {
 
 	Policy string `koanf:"authorization_policy"`
 
-	PreConfiguredConsentDuration *time.Duration `koanf:"pre_configured_consent_duration"`
+	ConsentMode                  string         `koanf:"consent_mode"`
+	ConsentPreConfiguredDuration *time.Duration `koanf:"pre_configured_consent_duration"`
 }
 
 // DefaultOpenIDConnectConfiguration contains defaults for OIDC.
@@ -73,6 +74,8 @@ var DefaultOpenIDConnectConfiguration = OpenIDConnectConfiguration{
 	EnforcePKCE:           "public_clients_only",
 }
 
+var defaultOIDCClientConsentPreConfiguredDuration = time.Hour * 24 * 7
+
 // DefaultOpenIDConnectClientConfiguration contains defaults for OIDC Clients.
 var DefaultOpenIDConnectClientConfiguration = OpenIDConnectClientConfiguration{
 	Policy:        "two_factor",
@@ -81,5 +84,7 @@ var DefaultOpenIDConnectClientConfiguration = OpenIDConnectClientConfiguration{
 	ResponseTypes: []string{"code"},
 	ResponseModes: []string{"form_post", "query", "fragment"},
 
-	UserinfoSigningAlgorithm: "none",
+	UserinfoSigningAlgorithm:     "none",
+	ConsentMode:                  "auto",
+	ConsentPreConfiguredDuration: &defaultOIDCClientConsentPreConfiguredDuration,
 }
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index ffcf2840f..618a74403 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -45,6 +45,7 @@ var Keys = []string{
 	"identity_providers.oidc.clients[].response_modes",
 	"identity_providers.oidc.clients[].userinfo_signing_algorithm",
 	"identity_providers.oidc.clients[].authorization_policy",
+	"identity_providers.oidc.clients[].consent_mode",
 	"identity_providers.oidc.clients[].pre_configured_consent_duration",
 	"authentication_backend.password_reset.disable",
 	"authentication_backend.password_reset.custom_url",
diff --git a/internal/configuration/test_resources/config_oidc.yml b/internal/configuration/test_resources/config_oidc.yml
index 974df781e..840894586 100644
--- a/internal/configuration/test_resources/config_oidc.yml
+++ b/internal/configuration/test_resources/config_oidc.yml
@@ -130,4 +130,8 @@ identity_providers:
       allowed_origins:
         - https://google.com
         - https://example.com
+    clients:
+      - id: abc
+        secret: 123
+        consent_mode: explicit
 ...
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index adc19f36f..30a7ab357 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -135,10 +135,11 @@ const (
 const (
 	errFmtOIDCNoClientsConfigured = "identity_providers: oidc: option 'clients' must have one or " +
 		"more clients configured"
-	errFmtOIDCNoPrivateKey            = "identity_providers: oidc: option 'issuer_private_key' is required"
-	errFmtOIDCCertificateMismatch     = "identity_providers: oidc: option 'issuer_private_key' does not appear to be the private key the certificate provided by option 'issuer_certificate_chain'"
-	errFmtOIDCCertificateChain        = "identity_providers: oidc: option 'issuer_certificate_chain' produced an error during validation of the chain: %w"
-	errFmtOIDCEnforcePKCEInvalidValue = "identity_providers: oidc: option 'enforce_pkce' must be 'never', " +
+	errFmtOIDCNoPrivateKey             = "identity_providers: oidc: option 'issuer_private_key' is required"
+	errFmtOIDCInvalidPrivateKeyBitSize = "identity_providers: oidc: option 'issuer_private_key' must be an RSA private key with %d bits or more but it only has %d bits"
+	errFmtOIDCCertificateMismatch      = "identity_providers: oidc: option 'issuer_private_key' does not appear to be the private key the certificate provided by option 'issuer_certificate_chain'"
+	errFmtOIDCCertificateChain         = "identity_providers: oidc: option 'issuer_certificate_chain' produced an error during validation of the chain: %w"
+	errFmtOIDCEnforcePKCEInvalidValue  = "identity_providers: oidc: option 'enforce_pkce' must be 'never', " +
 		"'public_clients_only' or 'always', but it is configured as '%s'"
 
 	errFmtOIDCCORSInvalidOrigin                    = "identity_providers: oidc: cors: option 'allowed_origins' contains an invalid value '%s' as it has a %s: origins must only be scheme, hostname, and an optional port"
@@ -165,6 +166,8 @@ const (
 		"invalid value: redirect uri '%s' must have the scheme 'http' or 'https' but it has no scheme"
 	errFmtOIDCClientInvalidPolicy = "identity_providers: oidc: client '%s': option 'policy' must be 'one_factor' " +
 		"or 'two_factor' but it is configured as '%s'"
+	errFmtOIDCClientInvalidConsentMode = "identity_providers: oidc: client '%s': consent: option 'mode' must be one of " +
+		"'%s' but it is configured as '%s'"
 	errFmtOIDCClientInvalidEntry = "identity_providers: oidc: client '%s': option '%s' must only have the values " +
 		"'%s' but one option is configured as '%s'"
 	errFmtOIDCClientInvalidUserinfoAlgorithm = "identity_providers: oidc: client '%s': option " +
@@ -346,15 +349,14 @@ var (
 
 var validDefault2FAMethods = []string{"totp", "webauthn", "mobile_push"}
 
-var validOIDCScopes = []string{oidc.ScopeOpenID, oidc.ScopeEmail, oidc.ScopeProfile, oidc.ScopeGroups, oidc.ScopeOfflineAccess}
-
-var validOIDCGrantTypes = []string{"implicit", "refresh_token", "authorization_code", "password", "client_credentials"}
-
-var validOIDCResponseModes = []string{"form_post", "query", "fragment"}
-
-var validOIDCUserinfoAlgorithms = []string{"none", "RS256"}
-
-var validOIDCCORSEndpoints = []string{oidc.AuthorizationEndpoint, oidc.TokenEndpoint, oidc.IntrospectionEndpoint, oidc.RevocationEndpoint, oidc.UserinfoEndpoint}
+var (
+	validOIDCScopes             = []string{oidc.ScopeOpenID, oidc.ScopeEmail, oidc.ScopeProfile, oidc.ScopeGroups, oidc.ScopeOfflineAccess}
+	validOIDCGrantTypes         = []string{oidc.GrantTypeImplicit, oidc.GrantTypeRefreshToken, oidc.GrantTypeAuthorizationCode, oidc.GrantTypePassword, oidc.GrantTypeClientCredentials}
+	validOIDCResponseModes      = []string{oidc.ResponseModeFormPost, oidc.ResponseModeQuery, oidc.ResponseModeFragment}
+	validOIDCUserinfoAlgorithms = []string{oidc.SigningAlgorithmNone, oidc.SigningAlgorithmRSAWithSHA256}
+	validOIDCCORSEndpoints      = []string{oidc.EndpointAuthorization, oidc.EndpointToken, oidc.EndpointIntrospection, oidc.EndpointRevocation, oidc.EndpointUserinfo}
+	validOIDCClientConsentModes = []string{"auto", oidc.ClientConsentModeImplicit.String(), oidc.ClientConsentModeExplicit.String(), oidc.ClientConsentModePreConfigured.String()}
+)
 
 var reKeyReplacer = regexp.MustCompile(`\[\d+]`)
 
diff --git a/internal/configuration/validator/identity_providers.go b/internal/configuration/validator/identity_providers.go
index ae0f4808c..bd1fcacaa 100644
--- a/internal/configuration/validator/identity_providers.go
+++ b/internal/configuration/validator/identity_providers.go
@@ -7,6 +7,7 @@ import (
 	"time"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
+	"github.com/authelia/authelia/v4/internal/oidc"
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
@@ -22,15 +23,22 @@ func validateOIDC(config *schema.OpenIDConnectConfiguration, validator *schema.S
 
 	setOIDCDefaults(config)
 
-	if config.IssuerPrivateKey == nil {
+	switch {
+	case config.IssuerPrivateKey == nil:
 		validator.Push(fmt.Errorf(errFmtOIDCNoPrivateKey))
-	} else if config.IssuerCertificateChain.HasCertificates() {
-		if !config.IssuerCertificateChain.EqualKey(config.IssuerPrivateKey) {
-			validator.Push(fmt.Errorf(errFmtOIDCCertificateMismatch))
+	default:
+		if config.IssuerCertificateChain.HasCertificates() {
+			if !config.IssuerCertificateChain.EqualKey(config.IssuerPrivateKey) {
+				validator.Push(fmt.Errorf(errFmtOIDCCertificateMismatch))
+			}
+
+			if err := config.IssuerCertificateChain.Validate(); err != nil {
+				validator.Push(fmt.Errorf(errFmtOIDCCertificateChain, err))
+			}
 		}
 
-		if err := config.IssuerCertificateChain.Validate(); err != nil {
-			validator.Push(fmt.Errorf(errFmtOIDCCertificateChain, err))
+		if config.IssuerPrivateKey.Size()*8 < 2048 {
+			validator.Push(fmt.Errorf(errFmtOIDCInvalidPrivateKeyBitSize, 2048, config.IssuerPrivateKey.Size()*8))
 		}
 	}
 
@@ -132,6 +140,7 @@ func validateOIDCOptionsCORSEndpoints(config *schema.OpenIDConnectConfiguration,
 	}
 }
 
+//nolint:gocyclo // TODO: Refactor.
 func validateOIDCClients(config *schema.OpenIDConnectConfiguration, validator *schema.StructValidator) {
 	invalidID, duplicateIDs := false, false
 
@@ -167,6 +176,23 @@ func validateOIDCClients(config *schema.OpenIDConnectConfiguration, validator *s
 			validator.Push(fmt.Errorf(errFmtOIDCClientInvalidPolicy, client.ID, client.Policy))
 		}
 
+		switch {
+		case utils.IsStringInSlice(client.ConsentMode, []string{"", "auto"}):
+			if client.ConsentPreConfiguredDuration != nil {
+				config.Clients[c].ConsentMode = oidc.ClientConsentModePreConfigured.String()
+			} else {
+				config.Clients[c].ConsentMode = oidc.ClientConsentModeExplicit.String()
+			}
+		case utils.IsStringInSlice(client.ConsentMode, validOIDCClientConsentModes):
+			break
+		default:
+			validator.Push(fmt.Errorf(errFmtOIDCClientInvalidConsentMode, client.ID, strings.Join(append(validOIDCClientConsentModes, "auto"), "', '"), client.ConsentMode))
+		}
+
+		if client.ConsentPreConfiguredDuration == nil {
+			config.Clients[c].ConsentPreConfiguredDuration = schema.DefaultOpenIDConnectClientConfiguration.ConsentPreConfiguredDuration
+		}
+
 		validateOIDCClientSectorIdentifier(client, validator)
 		validateOIDCClientScopes(c, config, validator)
 		validateOIDCClientGrantTypes(c, config, validator)
@@ -227,8 +253,8 @@ func validateOIDCClientScopes(c int, configuration *schema.OpenIDConnectConfigur
 		return
 	}
 
-	if !utils.IsStringInSlice("openid", configuration.Clients[c].Scopes) {
-		configuration.Clients[c].Scopes = append(configuration.Clients[c].Scopes, "openid")
+	if !utils.IsStringInSlice(oidc.ScopeOpenID, configuration.Clients[c].Scopes) {
+		configuration.Clients[c].Scopes = append(configuration.Clients[c].Scopes, oidc.ScopeOpenID)
 	}
 
 	for _, scope := range configuration.Clients[c].Scopes {
diff --git a/internal/configuration/validator/identity_providers_test.go b/internal/configuration/validator/identity_providers_test.go
index e8f7d0404..eb913a279 100644
--- a/internal/configuration/validator/identity_providers_test.go
+++ b/internal/configuration/validator/identity_providers_test.go
@@ -39,9 +39,9 @@ func TestShouldNotRaiseErrorWhenCORSEndpointsValid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			CORS: schema.OpenIDConnectCORSConfiguration{
-				Endpoints: []string{oidc.AuthorizationEndpoint, oidc.TokenEndpoint, oidc.IntrospectionEndpoint, oidc.RevocationEndpoint, oidc.UserinfoEndpoint},
+				Endpoints: []string{oidc.EndpointAuthorization, oidc.EndpointToken, oidc.EndpointIntrospection, oidc.EndpointRevocation, oidc.EndpointUserinfo},
 			},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
@@ -62,9 +62,9 @@ func TestShouldRaiseErrorWhenCORSEndpointsNotValid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			CORS: schema.OpenIDConnectCORSConfiguration{
-				Endpoints: []string{oidc.AuthorizationEndpoint, oidc.TokenEndpoint, oidc.IntrospectionEndpoint, oidc.RevocationEndpoint, oidc.UserinfoEndpoint, "invalid_endpoint"},
+				Endpoints: []string{oidc.EndpointAuthorization, oidc.EndpointToken, oidc.EndpointIntrospection, oidc.EndpointRevocation, oidc.EndpointUserinfo, "invalid_endpoint"},
 			},
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
@@ -87,7 +87,7 @@ func TestShouldRaiseErrorWhenOIDCPKCEEnforceValueInvalid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			EnforcePKCE:      testInvalid,
 		},
 	}
@@ -106,7 +106,7 @@ func TestShouldRaiseErrorWhenOIDCCORSOriginsHasInvalidValues(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			CORS: schema.OpenIDConnectCORSConfiguration{
 				AllowedOrigins:                       utils.URLsFromStringSlice([]string{"https://example.com/", "https://site.example.com/subpath", "https://site.example.com?example=true", "*"}),
 				AllowedOriginsFromClientRedirectURIs: true,
@@ -142,7 +142,7 @@ func TestShouldRaiseErrorWhenOIDCServerNoClients(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 		},
 	}
 
@@ -322,7 +322,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			config := &schema.IdentityProvidersConfiguration{
 				OIDC: &schema.OpenIDConnectConfiguration{
 					HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-					IssuerPrivateKey: &rsa.PrivateKey{},
+					IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 					Clients:          tc.Clients,
 				},
 			}
@@ -346,7 +346,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadScopes(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
@@ -372,7 +372,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadGrantTypes(t *testing.T)
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:         "good_id",
@@ -398,8 +398,8 @@ func TestShouldNotErrorOnCertificateValid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:             "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerCertificateChain: mustParseX509CertificateChain(testCert1),
-			IssuerPrivateKey:       mustParseRSAPrivateKey(testKey1),
+			IssuerCertificateChain: MustParseX509CertificateChain(testCert1),
+			IssuerPrivateKey:       MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
@@ -424,8 +424,8 @@ func TestShouldRaiseErrorOnCertificateNotValid(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:             "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerCertificateChain: mustParseX509CertificateChain(testCert1),
-			IssuerPrivateKey:       mustParseRSAPrivateKey(testKey2),
+			IssuerCertificateChain: MustParseX509CertificateChain(testCert1),
+			IssuerPrivateKey:       MustParseRSAPrivateKey(testKey2),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
@@ -447,12 +447,39 @@ func TestShouldRaiseErrorOnCertificateNotValid(t *testing.T) {
 	assert.EqualError(t, validator.Errors()[0], "identity_providers: oidc: option 'issuer_private_key' does not appear to be the private key the certificate provided by option 'issuer_certificate_chain'")
 }
 
+func TestShouldRaiseErrorOnKeySizeTooSmall(t *testing.T) {
+	validator := schema.NewStructValidator()
+	config := &schema.IdentityProvidersConfiguration{
+		OIDC: &schema.OpenIDConnectConfiguration{
+			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey3),
+			Clients: []schema.OpenIDConnectClientConfiguration{
+				{
+					ID:     "good_id",
+					Secret: "good_secret",
+					Policy: "two_factor",
+					RedirectURIs: []string{
+						"https://google.com/callback",
+					},
+				},
+			},
+		},
+	}
+
+	ValidateIdentityProviders(config, validator)
+
+	assert.Len(t, validator.Warnings(), 0)
+	require.Len(t, validator.Errors(), 1)
+
+	assert.EqualError(t, validator.Errors()[0], "identity_providers: oidc: option 'issuer_private_key' must be an RSA private key with 2048 bits or more but it only has 1024 bits")
+}
+
 func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadResponseModes(t *testing.T) {
 	validator := schema.NewStructValidator()
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:            "good_id",
@@ -478,7 +505,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadUserinfoAlg(t *testing.T
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:                       "good_id",
@@ -504,7 +531,7 @@ func TestValidateIdentityProvidersShouldRaiseWarningOnSecurityIssue(t *testing.T
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:              "abc",
-			IssuerPrivateKey:        &rsa.PrivateKey{},
+			IssuerPrivateKey:        MustParseRSAPrivateKey(testKey1),
 			MinimumParameterEntropy: 1,
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
@@ -532,7 +559,7 @@ func TestValidateIdentityProvidersShouldRaiseErrorsOnInvalidClientTypes(t *testi
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "hmac1",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-with-invalid-secret",
@@ -570,7 +597,7 @@ func TestValidateIdentityProvidersShouldNotRaiseErrorsOnValidPublicClients(t *te
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "hmac1",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "installed-app-client",
@@ -611,7 +638,7 @@ func TestValidateIdentityProvidersShouldSetDefaultValues(t *testing.T) {
 	config := &schema.IdentityProvidersConfiguration{
 		OIDC: &schema.OpenIDConnectConfiguration{
 			HMACSecret:       "rLABDrx87et5KvRHVUgTm3pezWWd8LMN",
-			IssuerPrivateKey: &rsa.PrivateKey{},
+			IssuerPrivateKey: MustParseRSAPrivateKey(testKey1),
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "a-client",
@@ -748,6 +775,34 @@ func TestValidateOIDCClientRedirectURIsSupportingPrivateUseURISchemes(t *testing
 	})
 }
 
+func MustParseRSAPrivateKey(data string) *rsa.PrivateKey {
+	block, _ := pem.Decode([]byte(data))
+	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
+		panic("not pem encoded")
+	}
+
+	if block.Type != "RSA PRIVATE KEY" {
+		panic("not private key")
+	}
+
+	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
+	if err != nil {
+		panic(err)
+	}
+
+	return key
+}
+
+func MustParseX509CertificateChain(data string) schema.X509CertificateChain {
+	chain, err := schema.NewX509CertificateChain(data)
+
+	if err != nil {
+		panic(err)
+	}
+
+	return *chain
+}
+
 var (
 	testCert1 = `
 -----BEGIN CERTIFICATE-----
@@ -825,33 +880,21 @@ HmmBQ2Mo26alQ5YkffBju0mZyhVzaQop1eZi8WuKFV1FThPlB7hc3E0SM5zv2Grd
 tQnOWwKBgQC40yZY0PcjuILhy+sIc0Wvh7LUA7taSdTye149kRvbvsCDN7Jh75lM
 USjhLXY0Nld2zBm9r8wMb81mXH29uvD+tDqqsICvyuKlA/tyzXR+QTr7dCVKVwu0
 1YjCJ36UpTsLre2f8nOSLtNmRfDPtbOE2mkOoO9dD9UU0XZwnvn9xw==
+-----END RSA PRIVATE KEY-----`
+
+	testKey3 = `-----BEGIN RSA PRIVATE KEY-----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 -----END RSA PRIVATE KEY-----`
 )
-
-func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
-	block, _ := pem.Decode([]byte(data))
-	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
-		panic("not pem encoded")
-	}
-
-	if block.Type != "RSA PRIVATE KEY" {
-		panic("not private key")
-	}
-
-	key, err := x509.ParsePKCS1PrivateKey(block.Bytes)
-	if err != nil {
-		panic(err)
-	}
-
-	return key
-}
-
-func mustParseX509CertificateChain(data string) schema.X509CertificateChain {
-	chain, err := schema.NewX509CertificateChain(data)
-
-	if err != nil {
-		panic(err)
-	}
-
-	return *chain
-}
diff --git a/internal/handlers/const.go b/internal/handlers/const.go
index f2514a080..ae9e4d603 100644
--- a/internal/handlers/const.go
+++ b/internal/handlers/const.go
@@ -28,6 +28,19 @@ var (
 	headerRemoteEmail     = []byte("Remote-Email")
 )
 
+const (
+	queryArgRD         = "rd"
+	queryArgID         = "id"
+	queryArgConsentID  = "consent_id"
+	queryArgWorkflow   = "workflow"
+	queryArgWorkflowID = "workflow_id"
+)
+
+var (
+	qryArgID        = []byte(queryArgID)
+	qryArgConsentID = []byte(queryArgConsentID)
+)
+
 const (
 	// Forbidden means the user is forbidden the access to a resource.
 	Forbidden authorizationMatching = iota
@@ -62,6 +75,39 @@ const (
 	logFmtTraceProfileDetails     = "Profile details for user '%s' => groups: %s, emails %s"
 )
 
+const (
+	logFmtAuthorizationPrefix = "Authorization Request with id '%s' on client with id '%s' "
+
+	logFmtErrConsentCantDetermineConsentMode = logFmtAuthorizationPrefix + "could not be processed: error occurred generating consent: client consent mode could not be reliably determined"
+
+	logFmtConsentPrefix = logFmtAuthorizationPrefix + "using consent mode '%s' "
+
+	logFmtErrConsentParseChallengeID = logFmtConsentPrefix + "could not be processed: error occurred parsing the consent id (challenge) '%s': %+v"
+	logFmtErrConsentPreConfLookup    = logFmtConsentPrefix + "had error looking up pre-configured consent sessions: %+v"
+	logFmtErrConsentPreConfRowsClose = logFmtConsentPrefix + "had error closing rows while looking up pre-configured consent sessions: %+v"
+	logFmtErrConsentZeroID           = logFmtConsentPrefix + "could not be processed: the consent id had a zero value"
+	logFmtErrConsentCantGetSubject   = logFmtConsentPrefix + "could not be processed: error occurred retrieving subject identifier for user '%s' and sector identifier '%s': %+v"
+	logFmtErrConsentGenerateError    = logFmtConsentPrefix + "could not be processed: error occurred %s consent: %+v"
+
+	logFmtDbgConsentGenerate                  = logFmtConsentPrefix + "proceeding to generate a new consent session"
+	logFmtDbgConsentAuthenticationSufficiency = logFmtConsentPrefix + "authentication level '%s' is %s for client level '%s'"
+	logFmtDbgConsentRedirect                  = logFmtConsentPrefix + "is being redirected to '%s'"
+	logFmtDbgConsentPreConfSuccessfulLookup   = logFmtConsentPrefix + "successfully looked up pre-configured consent with signature of client id '%s' and subject '%s' and scopes '%s' with id '%d'"
+	logFmtDbgConsentPreConfUnsuccessfulLookup = logFmtConsentPrefix + "unsuccessfully looked up pre-configured consent with signature of client id '%s' and subject '%s' and scopes '%s'"
+	logFmtDbgConsentPreConfTryingLookup       = logFmtConsentPrefix + "attempting to discover pre-configurations with signature of client id '%s' and subject '%s' and scopes '%s'"
+
+	logFmtErrConsentWithIDCouldNotBeProcessed = logFmtConsentPrefix + "could not be processed: error occurred performing consent for consent session with id '%s': "
+
+	logFmtErrConsentLookupLoadingSession        = logFmtErrConsentWithIDCouldNotBeProcessed + "error occurred while loading session: %+v"
+	logFmtErrConsentSessionSubjectNotAuthorized = logFmtErrConsentWithIDCouldNotBeProcessed + "user '%s' with subject '%s' is not authorized to consent for subject '%s'"
+	logFmtErrConsentCantGrant                   = logFmtErrConsentWithIDCouldNotBeProcessed + "the session does not appear to be valid for %s consent: either the subject is null, the consent has already been granted, or the consent session is a pre-configured session"
+	logFmtErrConsentCantGrantPreConf            = logFmtErrConsentWithIDCouldNotBeProcessed + "the session does not appear to be valid for pre-configured consent: either the subject is null, the consent has been granted and is either not pre-configured, or the pre-configuration is expired"
+	logFmtErrConsentCantGrantRejected           = logFmtErrConsentWithIDCouldNotBeProcessed + "the user explicitly rejected this consent session"
+	logFmtErrConsentSaveSessionResponse         = logFmtErrConsentWithIDCouldNotBeProcessed + "error occurred saving consent session response: %+v"
+	logFmtErrConsentSaveSession                 = logFmtErrConsentWithIDCouldNotBeProcessed + "error occurred saving consent session: %+v"
+	logFmtErrConsentGenerate                    = logFmtConsentPrefix + "could not be processed: error occurred generating consent: %+v"
+)
+
 const (
 	testInactivity     = time.Second * 10
 	testRedirectionURL = "http://redirection.local"
diff --git a/internal/handlers/handler_checks_safe_redirection.go b/internal/handlers/handler_checks_safe_redirection.go
index d53055965..96b66114e 100644
--- a/internal/handlers/handler_checks_safe_redirection.go
+++ b/internal/handlers/handler_checks_safe_redirection.go
@@ -3,7 +3,6 @@ package handlers
 import (
 	"fmt"
 
-	"github.com/authelia/authelia/v4/internal/authentication"
 	"github.com/authelia/authelia/v4/internal/middlewares"
 	"github.com/authelia/authelia/v4/internal/utils"
 )
@@ -12,7 +11,7 @@ import (
 func CheckSafeRedirectionPOST(ctx *middlewares.AutheliaCtx) {
 	userSession := ctx.GetSession()
 
-	if userSession.AuthenticationLevel == authentication.NotAuthenticated {
+	if userSession.IsAnonymous() {
 		ctx.ReplyUnauthorized()
 		return
 	}
diff --git a/internal/handlers/handler_firstfactor.go b/internal/handlers/handler_firstfactor.go
index 967a9953f..f52119576 100644
--- a/internal/handlers/handler_firstfactor.go
+++ b/internal/handlers/handler_firstfactor.go
@@ -23,7 +23,7 @@ func FirstFactorPOST(delayFunc middlewares.TimingAttackDelayFunc) middlewares.Re
 			defer delayFunc(ctx, requestTime, &successful)
 		}
 
-		bodyJSON := firstFactorRequestBody{}
+		bodyJSON := bodyFirstFactorRequest{}
 
 		if err := ctx.ParseBody(&bodyJSON); err != nil {
 			ctx.Logger.Errorf(logFmtErrParseRequestBody, regulation.AuthType1FA, err)
@@ -136,7 +136,7 @@ func FirstFactorPOST(delayFunc middlewares.TimingAttackDelayFunc) middlewares.Re
 		successful = true
 
 		if bodyJSON.Workflow == workflowOpenIDConnect {
-			handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL)
+			handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL, bodyJSON.WorkflowID)
 		} else {
 			Handle1FAResponse(ctx, bodyJSON.TargetURL, bodyJSON.RequestMethod, userSession.Username, userSession.Groups)
 		}
diff --git a/internal/handlers/handler_oauth_introspection.go b/internal/handlers/handler_oauth_introspection.go
index f53e5a195..a131f7398 100644
--- a/internal/handlers/handler_oauth_introspection.go
+++ b/internal/handlers/handler_oauth_introspection.go
@@ -20,12 +20,12 @@ func OAuthIntrospectionPOST(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter
 
 	oidcSession := oidc.NewSession()
 
-	if responder, err = ctx.Providers.OpenIDConnect.Fosite.NewIntrospectionRequest(ctx, req, oidcSession); err != nil {
+	if responder, err = ctx.Providers.OpenIDConnect.NewIntrospectionRequest(ctx, req, oidcSession); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
 		ctx.Logger.Errorf("Introspection Request failed with error: %s", rfc.WithExposeDebug(true).GetDescription())
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteIntrospectionError(rw, err)
+		ctx.Providers.OpenIDConnect.WriteIntrospectionError(rw, err)
 
 		return
 	}
@@ -34,5 +34,5 @@ func OAuthIntrospectionPOST(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter
 
 	ctx.Logger.Tracef("Introspection Request yeilded a %s (active: %t) requested at %s created with request id '%s' on client with id '%s'", responder.GetTokenUse(), responder.IsActive(), requester.GetRequestedAt().String(), requester.GetID(), requester.GetClient().GetID())
 
-	ctx.Providers.OpenIDConnect.Fosite.WriteIntrospectionResponse(rw, responder)
+	ctx.Providers.OpenIDConnect.WriteIntrospectionResponse(rw, responder)
 }
diff --git a/internal/handlers/handler_oauth_revocation.go b/internal/handlers/handler_oauth_revocation.go
index 95af94b9e..89d423311 100644
--- a/internal/handlers/handler_oauth_revocation.go
+++ b/internal/handlers/handler_oauth_revocation.go
@@ -14,11 +14,11 @@ import (
 func OAuthRevocationPOST(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter, req *http.Request) {
 	var err error
 
-	if err = ctx.Providers.OpenIDConnect.Fosite.NewRevocationRequest(ctx, req); err != nil {
+	if err = ctx.Providers.OpenIDConnect.NewRevocationRequest(ctx, req); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
 		ctx.Logger.Errorf("Revocation Request failed with error: %s", rfc.WithExposeDebug(true).GetDescription())
 	}
 
-	ctx.Providers.OpenIDConnect.Fosite.WriteRevocationResponse(rw, err)
+	ctx.Providers.OpenIDConnect.WriteRevocationResponse(rw, err)
 }
diff --git a/internal/handlers/handler_oidc_authorization.go b/internal/handlers/handler_oidc_authorization.go
index 8d16146a5..7c24c7c8f 100644
--- a/internal/handlers/handler_oidc_authorization.go
+++ b/internal/handlers/handler_oidc_authorization.go
@@ -3,6 +3,7 @@ package handlers
 import (
 	"errors"
 	"net/http"
+	"net/url"
 	"time"
 
 	"github.com/ory/fosite"
@@ -21,16 +22,16 @@ func OpenIDConnectAuthorizationGET(ctx *middlewares.AutheliaCtx, rw http.Respons
 		responder fosite.AuthorizeResponder
 		client    *oidc.Client
 		authTime  time.Time
-		issuer    string
+		issuer    *url.URL
 		err       error
 	)
 
-	if requester, err = ctx.Providers.OpenIDConnect.Fosite.NewAuthorizeRequest(ctx, r); err != nil {
+	if requester, err = ctx.Providers.OpenIDConnect.NewAuthorizeRequest(ctx, r); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
 		ctx.Logger.Errorf("Authorization Request failed with error: %s", rfc.WithExposeDebug(true).GetDescription())
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, err)
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, err)
 
 		return
 	}
@@ -39,22 +40,22 @@ func OpenIDConnectAuthorizationGET(ctx *middlewares.AutheliaCtx, rw http.Respons
 
 	ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' is being processed", requester.GetID(), clientID)
 
-	if client, err = ctx.Providers.OpenIDConnect.Store.GetFullClient(clientID); err != nil {
+	if client, err = ctx.Providers.OpenIDConnect.GetFullClient(clientID); err != nil {
 		if errors.Is(err, fosite.ErrNotFound) {
 			ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: client was not found", requester.GetID(), clientID)
 		} else {
 			ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: failed to find client: %+v", requester.GetID(), clientID, err)
 		}
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, err)
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, err)
 
 		return
 	}
 
-	if issuer, err = ctx.ExternalRootURL(); err != nil {
+	if issuer, err = ctx.IssuerURL(); err != nil {
 		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred determining issuer: %+v", requester.GetID(), clientID, err)
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not determine issuer."))
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrIssuerCouldNotDerive)
 
 		return
 	}
@@ -75,7 +76,7 @@ func OpenIDConnectAuthorizationGET(ctx *middlewares.AutheliaCtx, rw http.Respons
 	if authTime, err = userSession.AuthenticatedTime(client.Policy); err != nil {
 		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred checking authentication time: %+v", requester.GetID(), client.GetID(), err)
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not obtain the authentication time."))
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not obtain the authentication time."))
 
 		return
 	}
@@ -88,12 +89,12 @@ func OpenIDConnectAuthorizationGET(ctx *middlewares.AutheliaCtx, rw http.Respons
 	ctx.Logger.Tracef("Authorization Request with id '%s' on client with id '%s' creating session for Authorization Response for subject '%s' with username '%s' with claims: %+v",
 		requester.GetID(), oidcSession.ClientID, oidcSession.Subject, oidcSession.Username, oidcSession.Claims)
 
-	if responder, err = ctx.Providers.OpenIDConnect.Fosite.NewAuthorizeResponse(ctx, requester, oidcSession); err != nil {
+	if responder, err = ctx.Providers.OpenIDConnect.NewAuthorizeResponse(ctx, requester, oidcSession); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
 		ctx.Logger.Errorf("Authorization Response for Request with id '%s' on client with id '%s' could not be created: %s", requester.GetID(), clientID, rfc.WithExposeDebug(true).GetDescription())
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, err)
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, err)
 
 		return
 	}
@@ -101,10 +102,10 @@ func OpenIDConnectAuthorizationGET(ctx *middlewares.AutheliaCtx, rw http.Respons
 	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionGranted(ctx, consent.ID); err != nil {
 		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred saving consent session: %+v", requester.GetID(), client.GetID(), err)
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not save the session."))
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
 
 		return
 	}
 
-	ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeResponse(rw, requester, responder)
+	ctx.Providers.OpenIDConnect.WriteAuthorizeResponse(rw, requester, responder)
 }
diff --git a/internal/handlers/handler_oidc_authorization_consent.go b/internal/handlers/handler_oidc_authorization_consent.go
index 3fdfb25d1..04dfacbb1 100644
--- a/internal/handlers/handler_oidc_authorization_consent.go
+++ b/internal/handlers/handler_oidc_authorization_consent.go
@@ -1,6 +1,7 @@
 package handlers
 
 import (
+	"errors"
 	"fmt"
 	"net/http"
 	"net/url"
@@ -16,115 +17,68 @@ import (
 	"github.com/authelia/authelia/v4/internal/model"
 	"github.com/authelia/authelia/v4/internal/oidc"
 	"github.com/authelia/authelia/v4/internal/session"
-	"github.com/authelia/authelia/v4/internal/storage"
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
-func handleOIDCAuthorizationConsent(ctx *middlewares.AutheliaCtx, rootURI string, client *oidc.Client,
+func handleOIDCAuthorizationConsent(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
 	userSession session.UserSession,
 	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
 	var (
-		issuer  *url.URL
 		subject uuid.UUID
 		err     error
 	)
 
-	if issuer, err = url.ParseRequestURI(rootURI); err != nil {
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not safely determine the issuer."))
+	var handler handlerAuthorizationConsent
 
-		return nil, true
-	}
+	switch {
+	case userSession.IsAnonymous():
+		handler = handleOIDCAuthorizationConsentNotAuthenticated
+	case client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel):
+		if subject, err = ctx.Providers.OpenIDConnect.GetSubject(ctx, client.GetSectorIdentifier(), userSession.Username); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentCantGetSubject, requester.GetID(), client.GetID(), client.Consent, userSession.Username, client.GetSectorIdentifier(), err)
 
-	if !strings.HasSuffix(issuer.Path, "/") {
-		issuer.Path += "/"
-	}
-
-	// This prevents the consent request from being generated until the authentication level is sufficient.
-	if !client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) || userSession.Username == "" {
-		redirectURL := getOIDCAuthorizationRedirectURL(issuer, requester)
-
-		ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' is being redirected due to insufficient authentication", requester.GetID(), client.GetID())
-
-		http.Redirect(rw, r, redirectURL.String(), http.StatusFound)
-
-		return nil, true
-	}
-
-	if subject, err = ctx.Providers.OpenIDConnect.Store.GetSubject(ctx, client.GetSectorIdentifier(), userSession.Username); err != nil {
-		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred retrieving subject identifier for user '%s' and sector identifier '%s': %+v", requester.GetID(), client.GetID(), userSession.Username, client.GetSectorIdentifier(), err)
-
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not retrieve the subject."))
-
-		return nil, true
-	}
-
-	var consentIDBytes []byte
-
-	if consentIDBytes = ctx.QueryArgs().Peek("consent_id"); len(consentIDBytes) != 0 {
-		var consentID uuid.UUID
-
-		if consentID, err = uuid.Parse(string(consentIDBytes)); err != nil {
-			ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Consent Session ID was Malformed."))
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrSubjectCouldNotLookup)
 
 			return nil, true
 		}
 
-		ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' proceeding to lookup consent by challenge id '%s'", requester.GetID(), client.GetID(), consentID)
+		switch client.Consent.Mode {
+		case oidc.ClientConsentModeExplicit:
+			handler = handleOIDCAuthorizationConsentModeExplicit
+		case oidc.ClientConsentModeImplicit:
+			handler = handleOIDCAuthorizationConsentModeImplicit
+		case oidc.ClientConsentModePreConfigured:
+			handler = handleOIDCAuthorizationConsentModePreConfigured
+		default:
+			ctx.Logger.Errorf(logFmtErrConsentCantDetermineConsentMode, requester.GetID(), client.GetID())
 
-		return handleOIDCAuthorizationConsentWithChallengeID(ctx, issuer, client, userSession, subject, consentID, rw, r, requester)
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not determine the client consent mode."))
+
+			return nil, true
+		}
+	default:
+		if subject, err = ctx.Providers.OpenIDConnect.GetSubject(ctx, client.GetSectorIdentifier(), userSession.Username); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentCantGetSubject, requester.GetID(), client.GetID(), client.Consent, userSession.Username, client.GetSectorIdentifier(), err)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrSubjectCouldNotLookup)
+
+			return nil, true
+		}
+
+		handler = handleOIDCAuthorizationConsentGenerate
 	}
 
-	return handleOIDCAuthorizationConsentGenerate(ctx, issuer, client, userSession, subject, rw, r, requester)
+	return handler(ctx, issuer, client, userSession, subject, rw, r, requester)
 }
 
-func handleOIDCAuthorizationConsentWithChallengeID(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
-	userSession session.UserSession, subject, challengeID uuid.UUID,
+func handleOIDCAuthorizationConsentNotAuthenticated(_ *middlewares.AutheliaCtx, issuer *url.URL, _ *oidc.Client,
+	_ session.UserSession, _ uuid.UUID,
 	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
-	var (
-		err error
-	)
+	redirectionURL := handleOIDCAuthorizationConsentGetRedirectionURL(issuer, nil, requester)
 
-	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, challengeID); err != nil {
-		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred during consent session lookup: %+v", requester.GetID(), requester.GetClient().GetID(), err)
+	http.Redirect(rw, r, redirectionURL.String(), http.StatusFound)
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Failed to lookup consent session."))
-
-		return nil, true
-	}
-
-	if err = verifyOIDCUserAuthorizedForConsent(ctx, client, userSession, consent, subject); err != nil {
-		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not process consent session with challenge id '%s': could not authorize the user user '%s' for this consent session: %v", requester.GetID(), client.GetID(), consent.ChallengeID, userSession.Username, err)
-
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("The user is not authorized to perform consent."))
-
-		return nil, true
-	}
-
-	if consent.Responded() {
-		if consent.Granted {
-			ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: this consent session with challenge id '%s' was already granted", requester.GetID(), client.GetID(), consent.ChallengeID)
-
-			ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Authorization already granted."))
-
-			return nil, true
-		}
-
-		ctx.Logger.Debugf("Authorization Request with id '%s' loaded consent session with id '%d' and challenge id '%s' for client id '%s' and subject '%s' and scopes '%s'", requester.GetID(), consent.ID, consent.ChallengeID, client.GetID(), consent.Subject.UUID, strings.Join(requester.GetRequestedScopes(), " "))
-
-		if consent.IsDenied() {
-			ctx.Logger.Warnf("Authorization Request with id '%s' and challenge id '%s' for client id '%s' and subject '%s' and scopes '%s' was not denied by the user durng the consent session", requester.GetID(), consent.ChallengeID, client.GetID(), consent.Subject.UUID, strings.Join(requester.GetRequestedScopes(), " "))
-
-			ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrAccessDenied)
-
-			return nil, true
-		}
-
-		return consent, false
-	}
-
-	handleOIDCAuthorizationConsentRedirect(ctx, issuer, consent, client, userSession, rw, r, requester)
-
-	return consent, true
+	return nil, true
 }
 
 func handleOIDCAuthorizationConsentGenerate(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
@@ -134,36 +88,28 @@ func handleOIDCAuthorizationConsentGenerate(ctx *middlewares.AutheliaCtx, issuer
 		err error
 	)
 
-	scopes, audience := getOIDCExpectedScopesAndAudienceFromRequest(requester)
+	ctx.Logger.Debugf(logFmtDbgConsentGenerate, requester.GetID(), client.GetID(), client.Consent)
 
-	if consent, err = getOIDCPreConfiguredConsent(ctx, client.GetID(), subject, scopes, audience); err != nil {
-		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' had error looking up pre-configured consent sessions: %+v", requester.GetID(), requester.GetClient().GetID(), err)
+	if len(ctx.QueryArgs().PeekBytes(qryArgConsentID)) != 0 {
+		ctx.Logger.Errorf(logFmtErrConsentGenerateError, requester.GetID(), client.GetID(), client.Consent, "generating", errors.New("consent id value was present when it should be absent"))
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not lookup the consent session."))
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotGenerate)
 
 		return nil, true
 	}
 
-	if consent != nil {
-		ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' successfully looked up pre-configured consent with challenge id '%s'", requester.GetID(), client.GetID(), consent.ChallengeID)
-
-		return consent, false
-	}
-
-	ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' proceeding to generate a new consent due to unsuccessful lookup of pre-configured consent", requester.GetID(), client.GetID())
-
 	if consent, err = model.NewOAuth2ConsentSession(subject, requester); err != nil {
-		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred generating consent: %+v", requester.GetID(), requester.GetClient().GetID(), err)
+		ctx.Logger.Errorf(logFmtErrConsentGenerateError, requester.GetID(), client.GetID(), client.Consent, "generating", err)
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not generate the consent session."))
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotGenerate)
 
 		return nil, true
 	}
 
 	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSession(ctx, *consent); err != nil {
-		ctx.Logger.Errorf("Authorization Request with id '%s' on client with id '%s' could not be processed: error occurred saving consent session: %+v", requester.GetID(), client.GetID(), err)
+		ctx.Logger.Errorf(logFmtErrConsentGenerateError, requester.GetID(), client.GetID(), client.Consent, "saving", err)
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAuthorizeError(rw, requester, fosite.ErrServerError.WithHint("Could not save the consent session."))
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
 
 		return nil, true
 	}
@@ -179,72 +125,89 @@ func handleOIDCAuthorizationConsentRedirect(ctx *middlewares.AutheliaCtx, issuer
 
 	if client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) {
 		location, _ = url.ParseRequestURI(issuer.String())
-		location.Path = path.Join(location.Path, "/consent")
+		location.Path = path.Join(location.Path, oidc.EndpointPathConsent)
 
 		query := location.Query()
-		query.Set("consent_id", consent.ChallengeID.String())
+		query.Set(queryArgID, consent.ChallengeID.String())
 
 		location.RawQuery = query.Encode()
 
-		ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' authentication level '%s' is sufficient for client level '%s'", requester.GetID(), client.GetID(), authentication.LevelToString(userSession.AuthenticationLevel), authorization.LevelToString(client.Policy))
+		ctx.Logger.Debugf(logFmtDbgConsentAuthenticationSufficiency, requester.GetID(), client.GetID(), client.Consent, authentication.LevelToString(userSession.AuthenticationLevel), "sufficient", authorization.LevelToString(client.Policy))
 	} else {
-		location = getOIDCAuthorizationRedirectURL(issuer, requester)
+		location = handleOIDCAuthorizationConsentGetRedirectionURL(issuer, consent, requester)
 
-		ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' authentication level '%s' is insufficient for client level '%s'", requester.GetID(), client.GetID(), authentication.LevelToString(userSession.AuthenticationLevel), authorization.LevelToString(client.Policy))
+		ctx.Logger.Debugf(logFmtDbgConsentAuthenticationSufficiency, requester.GetID(), client.GetID(), client.Consent, authentication.LevelToString(userSession.AuthenticationLevel), "insufficient", authorization.LevelToString(client.Policy))
 	}
 
-	ctx.Logger.Debugf("Authorization Request with id '%s' on client with id '%s' is being redirected to '%s'", requester.GetID(), client.GetID(), location)
+	ctx.Logger.Debugf(logFmtDbgConsentRedirect, requester.GetID(), client.GetID(), client.Consent, location)
 
 	http.Redirect(rw, r, location.String(), http.StatusFound)
 }
 
-func verifyOIDCUserAuthorizedForConsent(ctx *middlewares.AutheliaCtx, client *oidc.Client, userSession session.UserSession, consent *model.OAuth2ConsentSession, subject uuid.UUID) (err error) {
-	var sid, csid uint32
+func handleOIDCAuthorizationConsentGetRedirectionURL(issuer *url.URL, consent *model.OAuth2ConsentSession, requester fosite.AuthorizeRequester) (redirectURL *url.URL) {
+	iss := issuer.String()
 
-	csid = consent.Subject.UUID.ID()
-
-	if !consent.Subject.Valid || csid == 0 {
-		return fmt.Errorf("the consent subject is null for consent session with id '%d'", consent.ID)
+	if !strings.HasSuffix(iss, "/") {
+		iss += "/"
 	}
 
+	redirectURL, _ = url.ParseRequestURI(iss)
+
+	query := redirectURL.Query()
+	query.Set(queryArgWorkflow, workflowOpenIDConnect)
+
+	switch {
+	case consent != nil:
+		query.Set(queryArgWorkflowID, consent.ChallengeID.String())
+	case requester != nil:
+		rd, _ := url.ParseRequestURI(iss)
+		rd.Path = path.Join(rd.Path, oidc.EndpointPathAuthorization)
+		rd.RawQuery = requester.GetRequestForm().Encode()
+
+		query.Set(queryArgRD, rd.String())
+	}
+
+	redirectURL.RawQuery = query.Encode()
+
+	return redirectURL
+}
+
+func verifyOIDCUserAuthorizedForConsent(ctx *middlewares.AutheliaCtx, client *oidc.Client, userSession session.UserSession, consent *model.OAuth2ConsentSession, subject uuid.UUID) (err error) {
+	var sid uint32
+
 	if client == nil {
-		if client, err = ctx.Providers.OpenIDConnect.Store.GetFullClient(consent.ClientID); err != nil {
+		if client, err = ctx.Providers.OpenIDConnect.GetFullClient(consent.ClientID); err != nil {
 			return fmt.Errorf("failed to retrieve client: %w", err)
 		}
 	}
 
 	if sid = subject.ID(); sid == 0 {
-		if subject, err = ctx.Providers.OpenIDConnect.Store.GetSubject(ctx, client.GetSectorIdentifier(), userSession.Username); err != nil {
+		if subject, err = ctx.Providers.OpenIDConnect.GetSubject(ctx, client.GetSectorIdentifier(), userSession.Username); err != nil {
 			return fmt.Errorf("failed to lookup subject: %w", err)
 		}
 
 		sid = subject.ID()
 	}
 
-	if csid != sid {
+	if !consent.Subject.Valid {
+		if sid == 0 {
+			return fmt.Errorf("the consent subject is null for consent session with id '%d' for anonymous user", consent.ID)
+		}
+
+		consent.Subject = uuid.NullUUID{UUID: subject, Valid: true}
+
+		if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionSubject(ctx, *consent); err != nil {
+			return fmt.Errorf("failed to update the consent subject: %w", err)
+		}
+	}
+
+	if consent.Subject.UUID.ID() != sid {
 		return fmt.Errorf("the consent subject identifier '%s' isn't owned by user '%s' who has a subject identifier of '%s' with sector identifier '%s'", consent.Subject.UUID, userSession.Username, subject, client.GetSectorIdentifier())
 	}
 
 	return nil
 }
 
-func getOIDCAuthorizationRedirectURL(issuer *url.URL, requester fosite.AuthorizeRequester) (redirectURL *url.URL) {
-	redirectURL, _ = url.ParseRequestURI(issuer.String())
-
-	authorizationURL, _ := url.ParseRequestURI(issuer.String())
-
-	authorizationURL.Path = path.Join(authorizationURL.Path, oidc.AuthorizationPath)
-	authorizationURL.RawQuery = requester.GetRequestForm().Encode()
-
-	query := redirectURL.Query()
-	query.Set("rd", authorizationURL.String())
-	query.Set("workflow", workflowOpenIDConnect)
-
-	redirectURL.RawQuery = query.Encode()
-
-	return redirectURL
-}
-
 func getOIDCExpectedScopesAndAudienceFromRequest(requester fosite.Requester) (scopes, audience []string) {
 	return getOIDCExpectedScopesAndAudience(requester.GetClient().GetID(), requester.GetRequestedScopes(), requester.GetRequestedAudience())
 }
@@ -256,45 +219,3 @@ func getOIDCExpectedScopesAndAudience(clientID string, scopes, audience []string
 
 	return scopes, audience
 }
-
-func getOIDCPreConfiguredConsent(ctx *middlewares.AutheliaCtx, clientID string, subject uuid.UUID, scopes, audience []string) (consent *model.OAuth2ConsentSession, err error) {
-	var (
-		rows *storage.ConsentSessionRows
-	)
-
-	ctx.Logger.Debugf("Consent Session is being checked for pre-configuration with signature of client id '%s' and subject '%s'", clientID, subject)
-
-	if rows, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionsPreConfigured(ctx, clientID, subject); err != nil {
-		ctx.Logger.Debugf("Consent Session checked for pre-configuration with signature of client id '%s' and subject '%s' failed with error during load: %+v", clientID, subject, err)
-
-		return nil, err
-	}
-
-	defer func() {
-		if err := rows.Close(); err != nil {
-			ctx.Logger.Errorf("Consent Session checked for pre-configuration with signature of client id '%s' and subject '%s' failed to close rows with error: %+v", clientID, subject, err)
-		}
-	}()
-
-	for rows.Next() {
-		if consent, err = rows.Get(); err != nil {
-			ctx.Logger.Debugf("Consent Session checked for pre-configuration with signature of client id '%s' and subject '%s' failed with error during iteration: %+v", clientID, subject, err)
-
-			return nil, err
-		}
-
-		if consent.HasExactGrants(scopes, audience) && consent.CanGrant() {
-			break
-		}
-	}
-
-	if consent != nil && consent.HasExactGrants(scopes, audience) && consent.CanGrant() {
-		ctx.Logger.Debugf("Consent Session checked for pre-configuration with signature of client id '%s' and subject '%s' found a result with challenge id '%s'", clientID, subject, consent.ChallengeID)
-
-		return consent, nil
-	}
-
-	ctx.Logger.Debugf("Consent Session checked for pre-configuration with signature of client id '%s' and subject '%s' did not find any results", clientID, subject)
-
-	return nil, nil
-}
diff --git a/internal/handlers/handler_oidc_authorization_consent_explicit.go b/internal/handlers/handler_oidc_authorization_consent_explicit.go
new file mode 100644
index 000000000..3d2009964
--- /dev/null
+++ b/internal/handlers/handler_oidc_authorization_consent_explicit.go
@@ -0,0 +1,96 @@
+package handlers
+
+import (
+	"net/http"
+	"net/url"
+
+	"github.com/google/uuid"
+	"github.com/ory/fosite"
+
+	"github.com/authelia/authelia/v4/internal/middlewares"
+	"github.com/authelia/authelia/v4/internal/model"
+	"github.com/authelia/authelia/v4/internal/oidc"
+	"github.com/authelia/authelia/v4/internal/session"
+)
+
+func handleOIDCAuthorizationConsentModeExplicit(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID,
+	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		consentID uuid.UUID
+		err       error
+	)
+
+	bytesConsentID := ctx.QueryArgs().PeekBytes(qryArgConsentID)
+
+	switch len(bytesConsentID) {
+	case 0:
+		return handleOIDCAuthorizationConsentGenerate(ctx, issuer, client, userSession, subject, rw, r, requester)
+	default:
+		if consentID, err = uuid.Parse(string(bytesConsentID)); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentParseChallengeID, requester.GetID(), client.GetID(), client.Consent, bytesConsentID, err)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentMalformedChallengeID)
+
+			return nil, true
+		}
+
+		return handleOIDCAuthorizationConsentModeExplicitWithID(ctx, issuer, client, userSession, subject, consentID, rw, r, requester)
+	}
+}
+
+func handleOIDCAuthorizationConsentModeExplicitWithID(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID, consentID uuid.UUID,
+	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		err error
+	)
+
+	if consentID.ID() == 0 {
+		ctx.Logger.Errorf(logFmtErrConsentZeroID, requester.GetID(), client.GetID(), client.Consent)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, consentID); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentLookupLoadingSession, requester.GetID(), client.GetID(), client.Consent, consentID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if subject.ID() != consent.Subject.UUID.ID() {
+		ctx.Logger.Errorf(logFmtErrConsentSessionSubjectNotAuthorized, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, userSession.Username, subject, consent.Subject.UUID)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if !consent.CanGrant() {
+		ctx.Logger.Errorf(logFmtErrConsentCantGrant, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, "explicit")
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotPerform)
+
+		return nil, true
+	}
+
+	if !consent.IsAuthorized() {
+		if consent.Responded() {
+			ctx.Logger.Errorf(logFmtErrConsentCantGrantRejected, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, fosite.ErrAccessDenied)
+
+			return nil, true
+		}
+
+		handleOIDCAuthorizationConsentRedirect(ctx, issuer, consent, client, userSession, rw, r, requester)
+
+		return nil, true
+	}
+
+	return consent, false
+}
diff --git a/internal/handlers/handler_oidc_authorization_consent_implicit.go b/internal/handlers/handler_oidc_authorization_consent_implicit.go
new file mode 100644
index 000000000..851da7a32
--- /dev/null
+++ b/internal/handlers/handler_oidc_authorization_consent_implicit.go
@@ -0,0 +1,136 @@
+package handlers
+
+import (
+	"net/http"
+	"net/url"
+
+	"github.com/google/uuid"
+	"github.com/ory/fosite"
+
+	"github.com/authelia/authelia/v4/internal/middlewares"
+	"github.com/authelia/authelia/v4/internal/model"
+	"github.com/authelia/authelia/v4/internal/oidc"
+	"github.com/authelia/authelia/v4/internal/session"
+)
+
+func handleOIDCAuthorizationConsentModeImplicit(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID,
+	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		consentID uuid.UUID
+		err       error
+	)
+
+	bytesConsentID := ctx.QueryArgs().PeekBytes(qryArgConsentID)
+
+	switch len(bytesConsentID) {
+	case 0:
+		return handleOIDCAuthorizationConsentModeImplicitWithoutID(ctx, issuer, client, userSession, subject, rw, r, requester)
+	default:
+		if consentID, err = uuid.Parse(string(bytesConsentID)); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentParseChallengeID, requester.GetID(), client.GetID(), client.Consent, bytesConsentID, err)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentMalformedChallengeID)
+
+			return nil, true
+		}
+
+		return handleOIDCAuthorizationConsentModeImplicitWithID(ctx, issuer, client, userSession, subject, consentID, rw, r, requester)
+	}
+}
+
+func handleOIDCAuthorizationConsentModeImplicitWithID(ctx *middlewares.AutheliaCtx, _ *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID, consentID uuid.UUID,
+	rw http.ResponseWriter, _ *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		err error
+	)
+
+	if consentID.ID() == 0 {
+		ctx.Logger.Errorf(logFmtErrConsentZeroID, requester.GetID(), client.GetID(), client.Consent)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, consentID); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentLookupLoadingSession, requester.GetID(), client.GetID(), client.Consent, consentID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if subject.ID() != consent.Subject.UUID.ID() {
+		ctx.Logger.Errorf(logFmtErrConsentSessionSubjectNotAuthorized, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, userSession.Username, subject, consent.Subject.UUID)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if !consent.CanGrant() {
+		ctx.Logger.Errorf(logFmtErrConsentCantGrant, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, "implicit")
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotPerform)
+
+		return nil, true
+	}
+
+	consent.Grant()
+
+	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionResponse(ctx, *consent, false); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSessionResponse, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	return consent, false
+}
+
+func handleOIDCAuthorizationConsentModeImplicitWithoutID(ctx *middlewares.AutheliaCtx, _ *url.URL, client *oidc.Client,
+	_ session.UserSession, subject uuid.UUID,
+	rw http.ResponseWriter, _ *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		err error
+	)
+
+	if consent, err = model.NewOAuth2ConsentSession(subject, requester); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentGenerate, requester.GetID(), client.GetID(), client.Consent, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotGenerate)
+
+		return nil, true
+	}
+
+	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSession(ctx, *consent); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSession, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, consent.ChallengeID); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSession, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	consent.Grant()
+
+	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionResponse(ctx, *consent, false); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSessionResponse, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	return consent, false
+}
diff --git a/internal/handlers/handler_oidc_authorization_consent_pre_configured.go b/internal/handlers/handler_oidc_authorization_consent_pre_configured.go
new file mode 100644
index 000000000..07e2d9150
--- /dev/null
+++ b/internal/handlers/handler_oidc_authorization_consent_pre_configured.go
@@ -0,0 +1,220 @@
+package handlers
+
+import (
+	"database/sql"
+	"fmt"
+	"net/http"
+	"net/url"
+	"strings"
+
+	"github.com/google/uuid"
+	"github.com/ory/fosite"
+
+	"github.com/authelia/authelia/v4/internal/middlewares"
+	"github.com/authelia/authelia/v4/internal/model"
+	"github.com/authelia/authelia/v4/internal/oidc"
+	"github.com/authelia/authelia/v4/internal/session"
+	"github.com/authelia/authelia/v4/internal/storage"
+)
+
+func handleOIDCAuthorizationConsentModePreConfigured(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID,
+	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		consentID uuid.UUID
+		err       error
+	)
+
+	bytesConsentID := ctx.QueryArgs().PeekBytes(qryArgConsentID)
+
+	switch len(bytesConsentID) {
+	case 0:
+		return handleOIDCAuthorizationConsentModePreConfiguredWithoutID(ctx, issuer, client, userSession, subject, rw, r, requester)
+	default:
+		if consentID, err = uuid.Parse(string(bytesConsentID)); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentParseChallengeID, requester.GetID(), client.GetID(), client.Consent, bytesConsentID, err)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentMalformedChallengeID)
+
+			return nil, true
+		}
+
+		return handleOIDCAuthorizationConsentModePreConfiguredWithID(ctx, issuer, client, userSession, subject, consentID, rw, r, requester)
+	}
+}
+
+func handleOIDCAuthorizationConsentModePreConfiguredWithID(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID, consentID uuid.UUID,
+	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		config *model.OAuth2ConsentPreConfig
+		err    error
+	)
+
+	if consentID.ID() == 0 {
+		ctx.Logger.Errorf(logFmtErrConsentZeroID, requester.GetID(), client.GetID(), client.Consent)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, consentID); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentLookupLoadingSession, requester.GetID(), client.GetID(), client.Consent, consentID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if subject.ID() != consent.Subject.UUID.ID() {
+		ctx.Logger.Errorf(logFmtErrConsentSessionSubjectNotAuthorized, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, userSession.Username, subject, consent.Subject.UUID)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if !consent.CanGrant() {
+		ctx.Logger.Errorf(logFmtErrConsentCantGrantPreConf, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotPerform)
+
+		return nil, true
+	}
+
+	if config, err = handleOIDCAuthorizationConsentModePreConfiguredGetPreConfig(ctx, client, subject, requester); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentPreConfLookup, requester.GetID(), client.GetID(), client.Consent, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if config != nil {
+		consent.Grant()
+
+		consent.PreConfiguration = sql.NullInt64{Int64: config.ID, Valid: true}
+
+		if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionResponse(ctx, *consent, false); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentSaveSessionResponse, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+			return nil, true
+		}
+
+		return consent, false
+	}
+
+	if !consent.IsAuthorized() {
+		if consent.Responded() {
+			ctx.Logger.Errorf(logFmtErrConsentCantGrantRejected, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID)
+
+			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, fosite.ErrAccessDenied)
+
+			return nil, true
+		}
+
+		handleOIDCAuthorizationConsentRedirect(ctx, issuer, consent, client, userSession, rw, r, requester)
+
+		return nil, true
+	}
+
+	return consent, false
+}
+
+func handleOIDCAuthorizationConsentModePreConfiguredWithoutID(ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID,
+	rw http.ResponseWriter, r *http.Request, requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool) {
+	var (
+		config *model.OAuth2ConsentPreConfig
+		err    error
+	)
+
+	if config, err = handleOIDCAuthorizationConsentModePreConfiguredGetPreConfig(ctx, client, subject, requester); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentPreConfLookup, requester.GetID(), client.GetID(), client.Consent, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotLookup)
+
+		return nil, true
+	}
+
+	if config == nil {
+		return handleOIDCAuthorizationConsentGenerate(ctx, issuer, client, userSession, subject, rw, r, requester)
+	}
+
+	if consent, err = model.NewOAuth2ConsentSession(subject, requester); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentGenerate, requester.GetID(), client.GetID(), client.Consent, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotGenerate)
+
+		return nil, true
+	}
+
+	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSession(ctx, *consent); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSession, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, consent.ChallengeID); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSession, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	consent.Grant()
+
+	consent.PreConfiguration = sql.NullInt64{Int64: config.ID, Valid: true}
+
+	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionResponse(ctx, *consent, false); err != nil {
+		ctx.Logger.Errorf(logFmtErrConsentSaveSessionResponse, requester.GetID(), client.GetID(), client.Consent, consent.ChallengeID, err)
+
+		ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentCouldNotSave)
+
+		return nil, true
+	}
+
+	return consent, false
+}
+
+func handleOIDCAuthorizationConsentModePreConfiguredGetPreConfig(ctx *middlewares.AutheliaCtx, client *oidc.Client, subject uuid.UUID, requester fosite.Requester) (config *model.OAuth2ConsentPreConfig, err error) {
+	var (
+		rows *storage.ConsentPreConfigRows
+	)
+
+	ctx.Logger.Debugf(logFmtDbgConsentPreConfTryingLookup, requester.GetID(), client.GetID(), client.Consent, client.GetID(), subject, strings.Join(requester.GetRequestedScopes(), " "))
+
+	if rows, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentPreConfigurations(ctx, client.GetID(), subject); err != nil {
+		return nil, fmt.Errorf("error loading rows: %w", err)
+	}
+
+	defer func() {
+		if err := rows.Close(); err != nil {
+			ctx.Logger.Errorf(logFmtErrConsentPreConfRowsClose, requester.GetID(), client.GetID(), client.Consent, err)
+		}
+	}()
+
+	scopes, audience := getOIDCExpectedScopesAndAudienceFromRequest(requester)
+
+	for rows.Next() {
+		if config, err = rows.Get(); err != nil {
+			return nil, fmt.Errorf("error iterating rows: %w", err)
+		}
+
+		if config.HasExactGrants(scopes, audience) && config.CanConsent() {
+			ctx.Logger.Debugf(logFmtDbgConsentPreConfSuccessfulLookup, requester.GetID(), client.GetID(), client.Consent, client.GetID(), subject, strings.Join(requester.GetRequestedScopes(), " "), config.ID)
+
+			return config, nil
+		}
+	}
+
+	ctx.Logger.Debugf(logFmtDbgConsentPreConfUnsuccessfulLookup, requester.GetID(), client.GetID(), client.Consent, client.GetID(), subject, strings.Join(requester.GetRequestedScopes(), " "))
+
+	return nil, nil
+}
diff --git a/internal/handlers/handler_oidc_consent.go b/internal/handlers/handler_oidc_consent.go
index 5b34ffea8..1418ea37c 100644
--- a/internal/handlers/handler_oidc_consent.go
+++ b/internal/handlers/handler_oidc_consent.go
@@ -1,11 +1,11 @@
 package handlers
 
 import (
+	"database/sql"
 	"encoding/json"
 	"fmt"
 	"net/url"
 	"path"
-	"strings"
 	"time"
 
 	"github.com/google/uuid"
@@ -14,7 +14,6 @@ import (
 	"github.com/authelia/authelia/v4/internal/model"
 	"github.com/authelia/authelia/v4/internal/oidc"
 	"github.com/authelia/authelia/v4/internal/session"
-	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 // OpenIDConnectConsentGET handles requests to provide consent for OpenID Connect.
@@ -24,22 +23,20 @@ func OpenIDConnectConsentGET(ctx *middlewares.AutheliaCtx) {
 		err       error
 	)
 
-	if consentID, err = uuid.Parse(string(ctx.RequestCtx.QueryArgs().Peek("consent_id"))); err != nil {
-		ctx.Logger.Errorf("Unable to convert '%s' into a UUID: %+v", ctx.RequestCtx.QueryArgs().Peek("consent_id"), err)
+	if consentID, err = uuid.Parse(string(ctx.RequestCtx.QueryArgs().PeekBytes(qryArgID))); err != nil {
+		ctx.Logger.Errorf("Unable to convert '%s' into a UUID: %+v", ctx.RequestCtx.QueryArgs().PeekBytes(qryArgID), err)
 		ctx.ReplyForbidden()
 
 		return
 	}
 
-	userSession, consent, client, handled := oidcConsentGetSessionsAndClient(ctx, consentID)
-	if handled {
-		return
-	}
-
-	if !client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) {
-		ctx.Logger.Errorf("Unable to perform consent without sufficient authentication for user '%s' and client id '%s'", userSession.Username, consent.ClientID)
-		ctx.ReplyForbidden()
+	var (
+		consent *model.OAuth2ConsentSession
+		client  *oidc.Client
+		handled bool
+	)
 
+	if _, consent, client, handled = oidcConsentGetSessionsAndClient(ctx, consentID); handled {
 		return
 	}
 
@@ -49,8 +46,6 @@ func OpenIDConnectConsentGET(ctx *middlewares.AutheliaCtx) {
 }
 
 // OpenIDConnectConsentPOST handles consent responses for OpenID Connect.
-//
-//nolint:gocyclo // TODO: Consider refactoring time permitting.
 func OpenIDConnectConsentPOST(ctx *middlewares.AutheliaCtx) {
 	var (
 		consentID uuid.UUID
@@ -66,21 +61,20 @@ func OpenIDConnectConsentPOST(ctx *middlewares.AutheliaCtx) {
 	}
 
 	if consentID, err = uuid.Parse(bodyJSON.ConsentID); err != nil {
-		ctx.Logger.Errorf("Unable to convert '%s' into a UUID: %+v", ctx.RequestCtx.QueryArgs().Peek("consent_id"), err)
+		ctx.Logger.Errorf("Unable to convert '%s' into a UUID: %+v", bodyJSON.ConsentID, err)
 		ctx.ReplyForbidden()
 
 		return
 	}
 
-	userSession, consent, client, handled := oidcConsentGetSessionsAndClient(ctx, consentID)
-	if handled {
-		return
-	}
-
-	if !client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) {
-		ctx.Logger.Debugf("Insufficient permissions to give consent during POST current level: %d, require 2FA: %d", userSession.AuthenticationLevel, client.Policy)
-		ctx.ReplyForbidden()
+	var (
+		userSession session.UserSession
+		consent     *model.OAuth2ConsentSession
+		client      *oidc.Client
+		handled     bool
+	)
 
+	if userSession, consent, client, handled = oidcConsentGetSessionsAndClient(ctx, consentID); handled {
 		return
 	}
 
@@ -93,32 +87,35 @@ func OpenIDConnectConsentPOST(ctx *middlewares.AutheliaCtx) {
 	}
 
 	if bodyJSON.Consent {
-		if bodyJSON.PreConfigure {
-			if client.PreConfiguredConsentDuration == nil {
-				ctx.Logger.Warnf("Consent session with id '%s' for user '%s': consent pre-configuration was requested and was ignored because it is not permitted on this client", consent.ChallengeID, userSession.Username)
-			} else {
-				expiresAt := time.Now().Add(*client.PreConfiguredConsentDuration)
-				consent.ExpiresAt = &expiresAt
+		consent.Grant()
 
-				ctx.Logger.Debugf("Consent session with id '%s' for user '%s': pre-configured and set to expire at %v", consent.ChallengeID, userSession.Username, consent.ExpiresAt)
+		if bodyJSON.PreConfigure {
+			if client.Consent.Mode == oidc.ClientConsentModePreConfigured {
+				config := model.OAuth2ConsentPreConfig{
+					ClientID:  consent.ClientID,
+					Subject:   consent.Subject.UUID,
+					CreatedAt: time.Now(),
+					ExpiresAt: sql.NullTime{Time: time.Now().Add(client.Consent.Duration), Valid: true},
+					Scopes:    consent.GrantedScopes,
+					Audience:  consent.GrantedAudience,
+				}
+
+				var id int64
+
+				if id, err = ctx.Providers.StorageProvider.SaveOAuth2ConsentPreConfiguration(ctx, config); err != nil {
+					ctx.Logger.Errorf("Failed to save the consent pre-configuration to the database: %+v", err)
+					ctx.SetJSONError(messageOperationFailed)
+
+					return
+				}
+
+				consent.PreConfiguration = sql.NullInt64{Int64: id, Valid: true}
+
+				ctx.Logger.Debugf("Consent session with id '%s' for user '%s': pre-configured and set to expire at %v", consent.ChallengeID, userSession.Username, config.ExpiresAt.Time)
+			} else {
+				ctx.Logger.Warnf("Consent session with id '%s' for user '%s': consent pre-configuration was requested and was ignored because it is not permitted on this client", consent.ChallengeID, userSession.Username)
 			}
 		}
-
-		consent.GrantedScopes = consent.RequestedScopes
-		consent.GrantedAudience = consent.RequestedAudience
-
-		if !utils.IsStringInSlice(consent.ClientID, consent.GrantedAudience) {
-			consent.GrantedAudience = append(consent.GrantedAudience, consent.ClientID)
-		}
-	}
-
-	var externalRootURL string
-
-	if externalRootURL, err = ctx.ExternalRootURL(); err != nil {
-		ctx.Logger.Errorf("Could not determine the external URL during consent session processing with id '%s' for user '%s': %v", consent.ChallengeID, userSession.Username, err)
-		ctx.SetJSONError(messageOperationFailed)
-
-		return
 	}
 
 	if err = ctx.Providers.StorageProvider.SaveOAuth2ConsentSessionResponse(ctx, *consent, bodyJSON.Consent); err != nil {
@@ -133,17 +130,13 @@ func OpenIDConnectConsentPOST(ctx *middlewares.AutheliaCtx) {
 		query       url.Values
 	)
 
-	if redirectURI, err = url.ParseRequestURI(externalRootURL); err != nil {
+	if redirectURI, err = ctx.IssuerURL(); err != nil {
 		ctx.Logger.Errorf("Failed to parse the consent redirect URL: %+v", err)
 		ctx.SetJSONError(messageOperationFailed)
 
 		return
 	}
 
-	if !strings.HasSuffix(redirectURI.Path, "/") {
-		redirectURI.Path += "/"
-	}
-
 	if query, err = url.ParseQuery(consent.Form); err != nil {
 		ctx.Logger.Errorf("Failed to parse the consent form values: %+v", err)
 		ctx.SetJSONError(messageOperationFailed)
@@ -151,9 +144,9 @@ func OpenIDConnectConsentPOST(ctx *middlewares.AutheliaCtx) {
 		return
 	}
 
-	query.Set("consent_id", consent.ChallengeID.String())
+	query.Set(queryArgConsentID, consent.ChallengeID.String())
 
-	redirectURI.Path = path.Join(redirectURI.Path, oidc.AuthorizationPath)
+	redirectURI.Path = path.Join(redirectURI.Path, oidc.EndpointPathAuthorization)
 	redirectURI.RawQuery = query.Encode()
 
 	response := oidc.ConsentPostResponseBody{RedirectURI: redirectURI.String()}
@@ -177,7 +170,7 @@ func oidcConsentGetSessionsAndClient(ctx *middlewares.AutheliaCtx, consentID uui
 		return userSession, nil, nil, true
 	}
 
-	if client, err = ctx.Providers.OpenIDConnect.Store.GetFullClient(consent.ClientID); err != nil {
+	if client, err = ctx.Providers.OpenIDConnect.GetFullClient(consent.ClientID); err != nil {
 		ctx.Logger.Errorf("Unable to find related client configuration with name '%s': %v", consent.ClientID, err)
 		ctx.ReplyForbidden()
 
@@ -192,5 +185,33 @@ func oidcConsentGetSessionsAndClient(ctx *middlewares.AutheliaCtx, consentID uui
 		return userSession, nil, nil, true
 	}
 
+	switch client.Consent.Mode {
+	case oidc.ClientConsentModeImplicit:
+		ctx.Logger.Errorf("Unable to perform OpenID Connect Consent for user '%s' and client id '%s': the client is using the implicit consent mode", userSession.Username, consent.ClientID)
+		ctx.ReplyForbidden()
+
+		return
+	default:
+		switch {
+		case consent.Responded():
+			ctx.Logger.Errorf("Unable to perform OpenID Connect Consent for user '%s' and client id '%s': the client is using the explicit consent mode and this consent session has already been responded to", userSession.Username, consent.ClientID)
+			ctx.ReplyForbidden()
+
+			return userSession, nil, nil, true
+		case !consent.CanGrant():
+			ctx.Logger.Errorf("Unable to perform OpenID Connect Consent for user '%s' and client id '%s': the specified consent session cannot be granted", userSession.Username, consent.ClientID)
+			ctx.ReplyForbidden()
+
+			return userSession, nil, nil, true
+		}
+	}
+
+	if !client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) {
+		ctx.Logger.Errorf("Unable to perform OpenID Connect Consent for user '%s' and client id '%s': the user is not sufficiently authenticated", userSession.Username, consent.ClientID)
+		ctx.ReplyForbidden()
+
+		return userSession, nil, nil, true
+	}
+
 	return userSession, consent, client, false
 }
diff --git a/internal/handlers/handler_oidc_token.go b/internal/handlers/handler_oidc_token.go
index d8efdae23..b7fe94efe 100644
--- a/internal/handlers/handler_oidc_token.go
+++ b/internal/handlers/handler_oidc_token.go
@@ -21,12 +21,12 @@ func OpenIDConnectTokenPOST(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter
 
 	oidcSession := oidc.NewSession()
 
-	if requester, err = ctx.Providers.OpenIDConnect.Fosite.NewAccessRequest(ctx, req, oidcSession); err != nil {
+	if requester, err = ctx.Providers.OpenIDConnect.NewAccessRequest(ctx, req, oidcSession); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
 		ctx.Logger.Errorf("Access Request failed with error: %s", rfc.WithExposeDebug(true).GetDescription())
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAccessError(rw, requester, err)
+		ctx.Providers.OpenIDConnect.WriteAccessError(rw, requester, err)
 
 		return
 	}
@@ -46,12 +46,12 @@ func OpenIDConnectTokenPOST(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter
 
 	ctx.Logger.Tracef("Access Request with id '%s' on client with id '%s' response is being generated for session with type '%T'", requester.GetID(), client.GetID(), requester.GetSession())
 
-	if responder, err = ctx.Providers.OpenIDConnect.Fosite.NewAccessResponse(ctx, requester); err != nil {
+	if responder, err = ctx.Providers.OpenIDConnect.NewAccessResponse(ctx, requester); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
 		ctx.Logger.Errorf("Access Response for Request with id '%s' failed to be created with error: %s", requester.GetID(), rfc.WithExposeDebug(true).GetDescription())
 
-		ctx.Providers.OpenIDConnect.Fosite.WriteAccessError(rw, requester, err)
+		ctx.Providers.OpenIDConnect.WriteAccessError(rw, requester, err)
 
 		return
 	}
@@ -60,5 +60,5 @@ func OpenIDConnectTokenPOST(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter
 
 	ctx.Logger.Tracef("Access Request with id '%s' on client with id '%s' produced the following claims: %+v", requester.GetID(), client.GetID(), responder.ToMap())
 
-	ctx.Providers.OpenIDConnect.Fosite.WriteAccessResponse(rw, requester, responder)
+	ctx.Providers.OpenIDConnect.WriteAccessResponse(rw, requester, responder)
 }
diff --git a/internal/handlers/handler_oidc_userinfo.go b/internal/handlers/handler_oidc_userinfo.go
index 99d3a6012..ddb61cb35 100644
--- a/internal/handlers/handler_oidc_userinfo.go
+++ b/internal/handlers/handler_oidc_userinfo.go
@@ -29,7 +29,7 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 
 	oidcSession := oidc.NewSession()
 
-	if tokenType, requester, err = ctx.Providers.OpenIDConnect.Fosite.IntrospectToken(
+	if tokenType, requester, err = ctx.Providers.OpenIDConnect.IntrospectToken(
 		req.Context(), fosite.AccessTokenFromRequest(req), fosite.AccessToken, oidcSession); err != nil {
 		rfc := fosite.ErrorToRFC6749Error(err)
 
@@ -50,27 +50,27 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 		ctx.Logger.Errorf("UserInfo Request with id '%s' on client with id '%s' failed with error: bearer authorization failed as the token is not an access_token", requester.GetID(), client.GetID())
 
 		errStr := "Only access tokens are allowed in the authorization header."
-		rw.Header().Set("WWW-Authenticate", fmt.Sprintf(`Bearer error="invalid_token",error_description="%s"`, errStr))
+		rw.Header().Set(fasthttp.HeaderWWWAuthenticate, fmt.Sprintf(`Bearer error="invalid_token",error_description="%s"`, errStr))
 		ctx.Providers.OpenIDConnect.WriteErrorCode(rw, req, http.StatusUnauthorized, errors.New(errStr))
 
 		return
 	}
 
-	if client, err = ctx.Providers.OpenIDConnect.Store.GetFullClient(clientID); err != nil {
+	if client, err = ctx.Providers.OpenIDConnect.GetFullClient(clientID); err != nil {
 		ctx.Providers.OpenIDConnect.WriteError(rw, req, errors.WithStack(fosite.ErrServerError.WithHint("Unable to assert type of client")))
 
 		return
 	}
 
 	claims := requester.GetSession().(*model.OpenIDSession).IDTokenClaims().ToMap()
-	delete(claims, "jti")
-	delete(claims, "sid")
-	delete(claims, "at_hash")
-	delete(claims, "c_hash")
-	delete(claims, "exp")
-	delete(claims, "nonce")
+	delete(claims, oidc.ClaimJWTID)
+	delete(claims, oidc.ClaimSessionID)
+	delete(claims, oidc.ClaimAccessTokenHash)
+	delete(claims, oidc.ClaimCodeHash)
+	delete(claims, oidc.ClaimExpirationTime)
+	delete(claims, oidc.ClaimNonce)
 
-	audience, ok := claims["aud"].([]string)
+	audience, ok := claims[oidc.ClaimAudience].([]string)
 
 	if !ok || len(audience) == 0 {
 		audience = []string{client.GetID()}
@@ -89,14 +89,14 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 		}
 	}
 
-	claims["aud"] = audience
+	claims[oidc.ClaimAudience] = audience
 
 	var token string
 
 	ctx.Logger.Tracef("UserInfo Response with id '%s' on client with id '%s' is being sent with the following claims: %+v", requester.GetID(), clientID, claims)
 
 	switch client.UserinfoSigningAlgorithm {
-	case "RS256":
+	case oidc.SigningAlgorithmRSAWithSHA256:
 		var jti uuid.UUID
 
 		if jti, err = uuid.NewRandom(); err != nil {
@@ -105,11 +105,13 @@ func OpenIDConnectUserinfo(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter,
 			return
 		}
 
-		claims["jti"] = jti.String()
-		claims["iat"] = time.Now().Unix()
+		claims[oidc.ClaimJWTID] = jti.String()
+		claims[oidc.ClaimIssuedAt] = time.Now().Unix()
 
 		headers := &jwt.Headers{
-			Extra: map[string]any{"kid": ctx.Providers.OpenIDConnect.KeyManager.GetActiveKeyID()},
+			Extra: map[string]any{
+				oidc.JWTHeaderKeyIdentifier: ctx.Providers.OpenIDConnect.KeyManager.GetActiveKeyID(),
+			},
 		}
 
 		if token, _, err = ctx.Providers.OpenIDConnect.KeyManager.Strategy().Generate(req.Context(), claims, headers); err != nil {
diff --git a/internal/handlers/handler_oidc_wellknown.go b/internal/handlers/handler_oidc_wellknown.go
index 89d346e02..1ac819817 100644
--- a/internal/handlers/handler_oidc_wellknown.go
+++ b/internal/handlers/handler_oidc_wellknown.go
@@ -1,6 +1,8 @@
 package handlers
 
 import (
+	"net/url"
+
 	"github.com/valyala/fasthttp"
 
 	"github.com/authelia/authelia/v4/internal/middlewares"
@@ -13,8 +15,12 @@ import (
 //
 // https://openid.net/specs/openid-connect-discovery-1_0.html
 func OpenIDConnectConfigurationWellKnownGET(ctx *middlewares.AutheliaCtx) {
-	issuer, err := ctx.ExternalRootURL()
-	if err != nil {
+	var (
+		issuer *url.URL
+		err    error
+	)
+
+	if issuer, err = ctx.IssuerURL(); err != nil {
 		ctx.Logger.Errorf("Error occurred determining OpenID Connect issuer details: %+v", err)
 
 		ctx.ReplyStatusCode(fasthttp.StatusBadRequest)
@@ -22,7 +28,7 @@ func OpenIDConnectConfigurationWellKnownGET(ctx *middlewares.AutheliaCtx) {
 		return
 	}
 
-	wellKnown := ctx.Providers.OpenIDConnect.GetOpenIDConnectWellKnownConfiguration(issuer)
+	wellKnown := ctx.Providers.OpenIDConnect.GetOpenIDConnectWellKnownConfiguration(issuer.String())
 
 	if err = ctx.ReplyJSON(wellKnown, fasthttp.StatusOK); err != nil {
 		ctx.Logger.Errorf("Error occurred in JSON encode: %+v", err)
@@ -41,8 +47,12 @@ func OpenIDConnectConfigurationWellKnownGET(ctx *middlewares.AutheliaCtx) {
 //
 // https://datatracker.ietf.org/doc/html/rfc8414
 func OAuthAuthorizationServerWellKnownGET(ctx *middlewares.AutheliaCtx) {
-	issuer, err := ctx.ExternalRootURL()
-	if err != nil {
+	var (
+		issuer *url.URL
+		err    error
+	)
+
+	if issuer, err = ctx.IssuerURL(); err != nil {
 		ctx.Logger.Errorf("Error occurred determining OpenID Connect issuer details: %+v", err)
 
 		ctx.ReplyStatusCode(fasthttp.StatusBadRequest)
@@ -50,7 +60,7 @@ func OAuthAuthorizationServerWellKnownGET(ctx *middlewares.AutheliaCtx) {
 		return
 	}
 
-	wellKnown := ctx.Providers.OpenIDConnect.GetOAuth2WellKnownConfiguration(issuer)
+	wellKnown := ctx.Providers.OpenIDConnect.GetOAuth2WellKnownConfiguration(issuer.String())
 
 	if err = ctx.ReplyJSON(wellKnown, fasthttp.StatusOK); err != nil {
 		ctx.Logger.Errorf("Error occurred in JSON encode: %+v", err)
diff --git a/internal/handlers/handler_sign_duo.go b/internal/handlers/handler_sign_duo.go
index 704ce4320..0ebe285b0 100644
--- a/internal/handlers/handler_sign_duo.go
+++ b/internal/handlers/handler_sign_duo.go
@@ -16,7 +16,7 @@ import (
 func DuoPOST(duoAPI duo.API) middlewares.RequestHandler {
 	return func(ctx *middlewares.AutheliaCtx) {
 		var (
-			bodyJSON       = &signDuoRequestBody{}
+			bodyJSON       = &bodySignDuoRequest{}
 			device, method string
 		)
 
@@ -90,7 +90,7 @@ func DuoPOST(duoAPI duo.API) middlewares.RequestHandler {
 }
 
 // HandleInitialDeviceSelection handler for retrieving all available devices.
-func HandleInitialDeviceSelection(ctx *middlewares.AutheliaCtx, userSession *session.UserSession, duoAPI duo.API, bodyJSON *signDuoRequestBody) (device string, method string, err error) {
+func HandleInitialDeviceSelection(ctx *middlewares.AutheliaCtx, userSession *session.UserSession, duoAPI duo.API, bodyJSON *bodySignDuoRequest) (device string, method string, err error) {
 	result, message, devices, enrollURL, err := DuoPreAuth(ctx, duoAPI)
 	if err != nil {
 		ctx.Logger.Errorf("Failed to perform Duo PreAuth for user '%s': %+v", userSession.Username, err)
@@ -135,7 +135,7 @@ func HandleInitialDeviceSelection(ctx *middlewares.AutheliaCtx, userSession *ses
 }
 
 // HandlePreferredDeviceCheck handler to check if the saved device and method is still valid.
-func HandlePreferredDeviceCheck(ctx *middlewares.AutheliaCtx, userSession *session.UserSession, duoAPI duo.API, device string, method string, bodyJSON *signDuoRequestBody) (string, string, error) {
+func HandlePreferredDeviceCheck(ctx *middlewares.AutheliaCtx, userSession *session.UserSession, duoAPI duo.API, device string, method string, bodyJSON *bodySignDuoRequest) (string, string, error) {
 	result, message, devices, enrollURL, err := DuoPreAuth(ctx, duoAPI)
 	if err != nil {
 		ctx.Logger.Errorf("Failed to perform Duo PreAuth for user '%s': %+v", userSession.Username, err)
@@ -243,7 +243,7 @@ func HandleAutoSelection(ctx *middlewares.AutheliaCtx, devices []DuoDevice, user
 }
 
 // HandleAllow handler for successful logins.
-func HandleAllow(ctx *middlewares.AutheliaCtx, bodyJSON *signDuoRequestBody) {
+func HandleAllow(ctx *middlewares.AutheliaCtx, bodyJSON *bodySignDuoRequest) {
 	userSession := ctx.GetSession()
 
 	err := ctx.Providers.SessionProvider.RegenerateSession(ctx.RequestCtx)
@@ -267,7 +267,7 @@ func HandleAllow(ctx *middlewares.AutheliaCtx, bodyJSON *signDuoRequestBody) {
 	}
 
 	if bodyJSON.Workflow == workflowOpenIDConnect {
-		handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL)
+		handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL, bodyJSON.WorkflowID)
 	} else {
 		Handle2FAResponse(ctx, bodyJSON.TargetURL)
 	}
diff --git a/internal/handlers/handler_sign_duo_test.go b/internal/handlers/handler_sign_duo_test.go
index 771fc49bf..c08c8f1ee 100644
--- a/internal/handlers/handler_sign_duo_test.go
+++ b/internal/handlers/handler_sign_duo_test.go
@@ -54,7 +54,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldEnroll() {
 
 	duoMock.EXPECT().PreAuthCall(s.mock.Ctx, gomock.Eq(values)).Return(&preAuthResponse, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -113,7 +113,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldAutoSelect() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Eq(values)).Return(&authResponse, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{TargetURL: "https://target.example.com"})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{TargetURL: "https://target.example.com"})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -142,7 +142,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldDenyAutoSelect() {
 	values.Set("factor", "push")
 	values.Set("device", "12345ABCDEFGHIJ67890")
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -162,7 +162,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldFailAutoSelect() {
 
 	duoMock.EXPECT().PreAuthCall(s.mock.Ctx, gomock.Any()).Return(nil, fmt.Errorf("Connnection error"))
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{TargetURL: "https://target.example.com"})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{TargetURL: "https://target.example.com"})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -191,7 +191,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldDeleteOldDeviceAndEnroll() {
 
 	s.mock.StorageMock.EXPECT().DeletePreferredDuoDevice(s.mock.Ctx, "john").Return(nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -225,7 +225,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldDeleteOldDeviceAndCallPreauthAPIWit
 
 	s.mock.StorageMock.EXPECT().DeletePreferredDuoDevice(s.mock.Ctx, "john").Return(nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -263,7 +263,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldUseOldDeviceAndSelect() {
 
 	duoMock.EXPECT().PreAuthCall(s.mock.Ctx, gomock.Eq(values)).Return(&preAuthResponse, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -319,7 +319,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldUseInvalidMethodAndAutoSelect() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Eq(values)).Return(&authResponse, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{TargetURL: "https://target.example.com"})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{TargetURL: "https://target.example.com"})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -342,7 +342,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldCallDuoPreauthAPIAndAllowAccess() {
 
 	duoMock.EXPECT().PreAuthCall(s.mock.Ctx, gomock.Eq(values)).Return(&preAuthResponse, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{TargetURL: "https://target.example.com"})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{TargetURL: "https://target.example.com"})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -372,7 +372,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldCallDuoPreauthAPIAndDenyAccess() {
 	values.Set("factor", "push")
 	values.Set("device", "12345ABCDEFGHIJ67890")
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -390,7 +390,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldCallDuoPreauthAPIAndFail() {
 
 	duoMock.EXPECT().PreAuthCall(s.mock.Ctx, gomock.Any()).Return(nil, fmt.Errorf("Connnection error"))
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -442,7 +442,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldCallDuoAPIAndDenyAccess() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Eq(values)).Return(&response, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -473,7 +473,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldCallDuoAPIAndFail() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(nil, fmt.Errorf("Connnection error"))
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -521,7 +521,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldRedirectUserToDefaultURL() {
 
 	s.mock.Ctx.Configuration.DefaultRedirectionURL = testRedirectionURL
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -568,7 +568,7 @@ func (s *SecondFactorDuoPostSuite) TestShouldNotReturnRedirectURL() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{})
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
@@ -613,15 +613,15 @@ func (s *SecondFactorDuoPostSuite) TestShouldRedirectUserToSafeTargetURL() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{
-		TargetURL: "https://mydomain.example.com",
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{
+		TargetURL: "https://example.com",
 	})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
 
 	DuoPOST(duoMock)(s.mock.Ctx)
 	s.mock.Assert200OK(s.T(), redirectResponse{
-		Redirect: "https://mydomain.example.com",
+		Redirect: "https://example.com",
 	})
 }
 
@@ -662,8 +662,8 @@ func (s *SecondFactorDuoPostSuite) TestShouldNotRedirectToUnsafeURL() {
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{
-		TargetURL: "http://mydomain.example.com",
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{
+		TargetURL: "http://example.com",
 	})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
@@ -709,8 +709,8 @@ func (s *SecondFactorDuoPostSuite) TestShouldRegenerateSessionForPreventingSessi
 
 	duoMock.EXPECT().AuthCall(s.mock.Ctx, gomock.Any()).Return(&response, nil)
 
-	bodyBytes, err := json.Marshal(signDuoRequestBody{
-		TargetURL: "http://mydomain.example.com",
+	bodyBytes, err := json.Marshal(bodySignDuoRequest{
+		TargetURL: "http://example.com",
 	})
 	s.Require().NoError(err)
 	s.mock.Ctx.Request.SetBody(bodyBytes)
diff --git a/internal/handlers/handler_sign_totp.go b/internal/handlers/handler_sign_totp.go
index 98e04561e..3d584fddd 100644
--- a/internal/handlers/handler_sign_totp.go
+++ b/internal/handlers/handler_sign_totp.go
@@ -7,7 +7,7 @@ import (
 
 // TimeBasedOneTimePasswordPOST validate the TOTP passcode provided by the user.
 func TimeBasedOneTimePasswordPOST(ctx *middlewares.AutheliaCtx) {
-	bodyJSON := signTOTPRequestBody{}
+	bodyJSON := bodySignTOTPRequest{}
 
 	if err := ctx.ParseBody(&bodyJSON); err != nil {
 		ctx.Logger.Errorf(logFmtErrParseRequestBody, regulation.AuthTypeTOTP, err)
@@ -79,7 +79,7 @@ func TimeBasedOneTimePasswordPOST(ctx *middlewares.AutheliaCtx) {
 	}
 
 	if bodyJSON.Workflow == workflowOpenIDConnect {
-		handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL)
+		handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL, bodyJSON.WorkflowID)
 	} else {
 		Handle2FAResponse(ctx, bodyJSON.TargetURL)
 	}
diff --git a/internal/handlers/handler_sign_totp_test.go b/internal/handlers/handler_sign_totp_test.go
index 13b84c351..6ade2e0dc 100644
--- a/internal/handlers/handler_sign_totp_test.go
+++ b/internal/handlers/handler_sign_totp_test.go
@@ -59,7 +59,7 @@ func (s *HandlerSignTOTPSuite) TestShouldRedirectUserToDefaultURL() {
 
 	s.mock.Ctx.Configuration.DefaultRedirectionURL = testRedirectionURL
 
-	bodyBytes, err := json.Marshal(signTOTPRequestBody{
+	bodyBytes, err := json.Marshal(bodySignTOTPRequest{
 		Token: "abc",
 	})
 	s.Require().NoError(err)
@@ -97,7 +97,7 @@ func (s *HandlerSignTOTPSuite) TestShouldFailWhenTOTPSignInInfoFailsToUpdate() {
 
 	s.mock.Ctx.Configuration.DefaultRedirectionURL = testRedirectionURL
 
-	bodyBytes, err := json.Marshal(signTOTPRequestBody{
+	bodyBytes, err := json.Marshal(bodySignTOTPRequest{
 		Token: "abc",
 	})
 	s.Require().NoError(err)
@@ -131,7 +131,7 @@ func (s *HandlerSignTOTPSuite) TestShouldNotReturnRedirectURL() {
 		EXPECT().
 		UpdateTOTPConfigurationSignIn(s.mock.Ctx, gomock.Any(), gomock.Any())
 
-	bodyBytes, err := json.Marshal(signTOTPRequestBody{
+	bodyBytes, err := json.Marshal(bodySignTOTPRequest{
 		Token: "abc",
 	})
 	s.Require().NoError(err)
@@ -165,7 +165,7 @@ func (s *HandlerSignTOTPSuite) TestShouldRedirectUserToSafeTargetURL() {
 		EXPECT().
 		UpdateTOTPConfigurationSignIn(s.mock.Ctx, gomock.Any(), gomock.Any())
 
-	bodyBytes, err := json.Marshal(signTOTPRequestBody{
+	bodyBytes, err := json.Marshal(bodySignTOTPRequest{
 		Token:     "abc",
 		TargetURL: "https://mydomain.example.com",
 	})
@@ -203,7 +203,7 @@ func (s *HandlerSignTOTPSuite) TestShouldNotRedirectToUnsafeURL() {
 		Validate(gomock.Eq("abc"), gomock.Eq(&model.TOTPConfiguration{Secret: []byte("secret")})).
 		Return(true, nil)
 
-	bodyBytes, err := json.Marshal(signTOTPRequestBody{
+	bodyBytes, err := json.Marshal(bodySignTOTPRequest{
 		Token:     "abc",
 		TargetURL: "http://mydomain.example.com",
 	})
@@ -241,7 +241,7 @@ func (s *HandlerSignTOTPSuite) TestShouldRegenerateSessionForPreventingSessionFi
 		EXPECT().
 		UpdateTOTPConfigurationSignIn(s.mock.Ctx, gomock.Any(), gomock.Any())
 
-	bodyBytes, err := json.Marshal(signTOTPRequestBody{
+	bodyBytes, err := json.Marshal(bodySignTOTPRequest{
 		Token: "abc",
 	})
 	s.Require().NoError(err)
diff --git a/internal/handlers/handler_sign_webauthn.go b/internal/handlers/handler_sign_webauthn.go
index 6dec89009..89a980626 100644
--- a/internal/handlers/handler_sign_webauthn.go
+++ b/internal/handlers/handler_sign_webauthn.go
@@ -84,7 +84,7 @@ func WebauthnAssertionPOST(ctx *middlewares.AutheliaCtx) {
 		err error
 		w   *webauthn.WebAuthn
 
-		bodyJSON signWebauthnRequestBody
+		bodyJSON bodySignWebauthnRequest
 	)
 
 	if err = ctx.ParseBody(&bodyJSON); err != nil {
@@ -198,7 +198,7 @@ func WebauthnAssertionPOST(ctx *middlewares.AutheliaCtx) {
 	}
 
 	if bodyJSON.Workflow == workflowOpenIDConnect {
-		handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL)
+		handleOIDCWorkflowResponse(ctx, bodyJSON.TargetURL, bodyJSON.WorkflowID)
 	} else {
 		Handle2FAResponse(ctx, bodyJSON.TargetURL)
 	}
diff --git a/internal/handlers/handler_user_info.go b/internal/handlers/handler_user_info.go
index 28489b6e7..6e4f5dc0d 100644
--- a/internal/handlers/handler_user_info.go
+++ b/internal/handlers/handler_user_info.go
@@ -74,7 +74,7 @@ func UserInfoGET(ctx *middlewares.AutheliaCtx) {
 
 // MethodPreferencePOST update the user preferences regarding 2FA method.
 func MethodPreferencePOST(ctx *middlewares.AutheliaCtx) {
-	bodyJSON := preferred2FAMethodBody{}
+	bodyJSON := bodyPreferred2FAMethod{}
 
 	err := ctx.ParseBody(&bodyJSON)
 	if err != nil {
diff --git a/internal/handlers/handler_verify.go b/internal/handlers/handler_verify.go
index 883852da7..258aec61d 100644
--- a/internal/handlers/handler_verify.go
+++ b/internal/handlers/handler_verify.go
@@ -143,7 +143,7 @@ func isSessionInactiveTooLong(ctx *middlewares.AutheliaCtx, userSession *session
 func verifySessionCookie(ctx *middlewares.AutheliaCtx, targetURL *url.URL, userSession *session.UserSession, refreshProfile bool,
 	refreshProfileInterval time.Duration) (username, name string, groups, emails []string, authLevel authentication.Level, err error) {
 	// No username in the session means the user is anonymous.
-	isUserAnonymous := userSession.Username == ""
+	isUserAnonymous := userSession.IsAnonymous()
 
 	if isUserAnonymous && userSession.AuthenticationLevel != authentication.NotAuthenticated {
 		return "", "", nil, nil, authentication.NotAuthenticated, fmt.Errorf("an anonymous user cannot be authenticated (this might be the sign of a security compromise)")
@@ -221,7 +221,7 @@ func handleUnauthorized(ctx *middlewares.AutheliaCtx, targetURL fmt.Stringer, is
 
 		qry := redirectionURL.Query()
 
-		qry.Set("rd", targetURL.String())
+		qry.Set(queryArgRD, targetURL.String())
 
 		if rm != "" {
 			qry.Set("rm", rm)
@@ -322,7 +322,7 @@ func verifySessionHasUpToDateProfile(ctx *middlewares.AutheliaCtx, targetURL *ur
 	// See https://www.authelia.com/o/threatmodel#potential-future-guarantees
 	ctx.Logger.Tracef("Checking if we need check the authentication backend for an updated profile for %s.", userSession.Username)
 
-	if !refreshProfile || userSession.Username == "" || targetURL == nil {
+	if !refreshProfile || userSession.IsAnonymous() || targetURL == nil {
 		return nil
 	}
 
diff --git a/internal/handlers/handler_verify_test.go b/internal/handlers/handler_verify_test.go
index 304339ed6..a0ef56858 100644
--- a/internal/handlers/handler_verify_test.go
+++ b/internal/handlers/handler_verify_test.go
@@ -851,7 +851,7 @@ func TestShouldRedirectWhenSessionInactiveForTooLongAndRDParamProvided(t *testin
 	err := mock.Ctx.SaveSession(userSession)
 	require.NoError(t, err)
 
-	mock.Ctx.QueryArgs().Add("rd", "https://login.example.com")
+	mock.Ctx.QueryArgs().Add(queryArgRD, "https://login.example.com")
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Method", "GET")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
@@ -870,7 +870,7 @@ func TestShouldRedirectWithCorrectStatusCodeBasedOnRequestMethod(t *testing.T) {
 	mock := mocks.NewMockAutheliaCtx(t)
 	defer mock.Close()
 
-	mock.Ctx.QueryArgs().Add("rd", "https://login.example.com")
+	mock.Ctx.QueryArgs().Add(queryArgRD, "https://login.example.com")
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Method", "GET")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
@@ -881,7 +881,7 @@ func TestShouldRedirectWithCorrectStatusCodeBasedOnRequestMethod(t *testing.T) {
 		string(mock.Ctx.Response.Body()))
 	assert.Equal(t, 302, mock.Ctx.Response.StatusCode())
 
-	mock.Ctx.QueryArgs().Add("rd", "https://login.example.com")
+	mock.Ctx.QueryArgs().Add(queryArgRD, "https://login.example.com")
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Method", "POST")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
@@ -1449,7 +1449,7 @@ func TestShouldNotRedirectRequestsForBypassACLWhenInactiveForTooLong(t *testing.
 	require.NoError(t, err)
 
 	// Should respond 200 OK.
-	mock.Ctx.QueryArgs().Add("rd", "https://login.example.com")
+	mock.Ctx.QueryArgs().Add(queryArgRD, "https://login.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Method", "GET")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://bypass.example.com")
@@ -1458,7 +1458,7 @@ func TestShouldNotRedirectRequestsForBypassACLWhenInactiveForTooLong(t *testing.
 	assert.Nil(t, mock.Ctx.Response.Header.Peek("Location"))
 
 	// Should respond 302 Found.
-	mock.Ctx.QueryArgs().Add("rd", "https://login.example.com")
+	mock.Ctx.QueryArgs().Add(queryArgRD, "https://login.example.com")
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Method", "GET")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
@@ -1467,7 +1467,7 @@ func TestShouldNotRedirectRequestsForBypassACLWhenInactiveForTooLong(t *testing.
 	assert.Equal(t, "https://login.example.com/?rd=https%3A%2F%2Ftwo-factor.example.com&rm=GET", string(mock.Ctx.Response.Header.Peek("Location")))
 
 	// Should respond 401 Unauthorized.
-	mock.Ctx.QueryArgs().Del("rd")
+	mock.Ctx.QueryArgs().Del(queryArgRD)
 	mock.Ctx.Request.Header.Set("X-Original-URL", "https://two-factor.example.com")
 	mock.Ctx.Request.Header.Set("X-Forwarded-Method", "GET")
 	mock.Ctx.Request.Header.Set("Accept", "text/html; charset=utf-8")
diff --git a/internal/handlers/oidc.go b/internal/handlers/oidc.go
index 2b2051f1b..9febd5fe5 100644
--- a/internal/handlers/oidc.go
+++ b/internal/handlers/oidc.go
@@ -21,13 +21,14 @@ func oidcGrantRequests(ar fosite.AuthorizeRequester, consent *model.OAuth2Consen
 			extraClaims[oidc.ClaimGroups] = userSession.Groups
 		case oidc.ScopeProfile:
 			extraClaims[oidc.ClaimPreferredUsername] = userSession.Username
-			extraClaims[oidc.ClaimDisplayName] = userSession.DisplayName
+			extraClaims[oidc.ClaimFullName] = userSession.DisplayName
 		case oidc.ScopeEmail:
 			if len(userSession.Emails) != 0 {
-				extraClaims[oidc.ClaimEmail] = userSession.Emails[0]
+				extraClaims[oidc.ClaimPreferredEmail] = userSession.Emails[0]
 				if len(userSession.Emails) > 1 {
 					extraClaims[oidc.ClaimEmailAlts] = userSession.Emails[1:]
 				}
+
 				// TODO (james-d-elliott): actually verify emails and record that information.
 				extraClaims[oidc.ClaimEmailVerified] = true
 			}
diff --git a/internal/handlers/oidc_test.go b/internal/handlers/oidc_test.go
index 95ff6e34c..648fdefa2 100644
--- a/internal/handlers/oidc_test.go
+++ b/internal/handlers/oidc_test.go
@@ -23,8 +23,8 @@ func TestShouldGrantAppropriateClaimsForScopeProfile(t *testing.T) {
 	require.Contains(t, extraClaims, oidc.ClaimPreferredUsername)
 	assert.Equal(t, "john", extraClaims[oidc.ClaimPreferredUsername])
 
-	require.Contains(t, extraClaims, oidc.ClaimDisplayName)
-	assert.Equal(t, "John Smith", extraClaims[oidc.ClaimDisplayName])
+	require.Contains(t, extraClaims, oidc.ClaimFullName)
+	assert.Equal(t, "John Smith", extraClaims[oidc.ClaimFullName])
 }
 
 func TestShouldGrantAppropriateClaimsForScopeGroups(t *testing.T) {
@@ -59,8 +59,8 @@ func TestShouldGrantAppropriateClaimsForScopeEmail(t *testing.T) {
 
 	assert.Len(t, extraClaims, 3)
 
-	require.Contains(t, extraClaims, oidc.ClaimEmail)
-	assert.Equal(t, "j.smith@authelia.com", extraClaims[oidc.ClaimEmail])
+	require.Contains(t, extraClaims, oidc.ClaimPreferredEmail)
+	assert.Equal(t, "j.smith@authelia.com", extraClaims[oidc.ClaimPreferredEmail])
 
 	require.Contains(t, extraClaims, oidc.ClaimEmailAlts)
 	assert.Len(t, extraClaims[oidc.ClaimEmailAlts], 1)
@@ -73,8 +73,8 @@ func TestShouldGrantAppropriateClaimsForScopeEmail(t *testing.T) {
 
 	assert.Len(t, extraClaims, 2)
 
-	require.Contains(t, extraClaims, oidc.ClaimEmail)
-	assert.Equal(t, "f.smith@authelia.com", extraClaims[oidc.ClaimEmail])
+	require.Contains(t, extraClaims, oidc.ClaimPreferredEmail)
+	assert.Equal(t, "f.smith@authelia.com", extraClaims[oidc.ClaimPreferredEmail])
 
 	require.Contains(t, extraClaims, oidc.ClaimEmailVerified)
 	assert.Equal(t, true, extraClaims[oidc.ClaimEmailVerified])
@@ -92,8 +92,8 @@ func TestShouldGrantAppropriateClaimsForScopeOpenIDAndProfile(t *testing.T) {
 	require.Contains(t, extraClaims, oidc.ClaimPreferredUsername)
 	assert.Equal(t, "john", extraClaims[oidc.ClaimPreferredUsername])
 
-	require.Contains(t, extraClaims, oidc.ClaimDisplayName)
-	assert.Equal(t, "John Smith", extraClaims[oidc.ClaimDisplayName])
+	require.Contains(t, extraClaims, oidc.ClaimFullName)
+	assert.Equal(t, "John Smith", extraClaims[oidc.ClaimFullName])
 
 	extraClaims = oidcGrantRequests(nil, consent, &oidcUserSessionFred)
 
@@ -102,8 +102,8 @@ func TestShouldGrantAppropriateClaimsForScopeOpenIDAndProfile(t *testing.T) {
 	require.Contains(t, extraClaims, oidc.ClaimPreferredUsername)
 	assert.Equal(t, "fred", extraClaims[oidc.ClaimPreferredUsername])
 
-	require.Contains(t, extraClaims, oidc.ClaimDisplayName)
-	assert.Equal(t, extraClaims[oidc.ClaimDisplayName], "Fred Smith")
+	require.Contains(t, extraClaims, oidc.ClaimFullName)
+	assert.Equal(t, extraClaims[oidc.ClaimFullName], "Fred Smith")
 }
 
 var (
diff --git a/internal/handlers/response.go b/internal/handlers/response.go
index 83f5de59d..33599ea8e 100644
--- a/internal/handlers/response.go
+++ b/internal/handlers/response.go
@@ -3,66 +3,19 @@ package handlers
 import (
 	"fmt"
 	"net/url"
+	"path"
 	"time"
 
+	"github.com/google/uuid"
 	"github.com/valyala/fasthttp"
 
 	"github.com/authelia/authelia/v4/internal/authorization"
 	"github.com/authelia/authelia/v4/internal/middlewares"
+	"github.com/authelia/authelia/v4/internal/model"
 	"github.com/authelia/authelia/v4/internal/oidc"
 	"github.com/authelia/authelia/v4/internal/utils"
 )
 
-// handleOIDCWorkflowResponse handle the redirection upon authentication in the OIDC workflow.
-func handleOIDCWorkflowResponse(ctx *middlewares.AutheliaCtx, targetURI string) {
-	if len(targetURI) == 0 {
-		ctx.Error(fmt.Errorf("unable to parse target URL %s: empty value", targetURI), messageAuthenticationFailed)
-
-		return
-	}
-
-	var (
-		targetURL *url.URL
-		err       error
-	)
-
-	if targetURL, err = url.ParseRequestURI(targetURI); err != nil {
-		ctx.Error(fmt.Errorf("unable to parse target URL %s: %w", targetURI, err), messageAuthenticationFailed)
-
-		return
-	}
-
-	var (
-		id     string
-		client *oidc.Client
-	)
-
-	if id = targetURL.Query().Get("client_id"); len(id) == 0 {
-		ctx.Error(fmt.Errorf("unable to get client id from from URL '%s'", targetURL), messageAuthenticationFailed)
-
-		return
-	}
-
-	if client, err = ctx.Providers.OpenIDConnect.Store.GetFullClient(id); err != nil {
-		ctx.Error(fmt.Errorf("unable to get client for client with id '%s' from URL '%s': %w", id, targetURL, err), messageAuthenticationFailed)
-
-		return
-	}
-
-	userSession := ctx.GetSession()
-
-	if !client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) {
-		ctx.Logger.Warnf("OpenID Connect client '%s' requires 2FA, cannot be redirected yet", client.ID)
-		ctx.ReplyOK()
-
-		return
-	}
-
-	if err = ctx.SetJSONBody(redirectResponse{Redirect: targetURL.String()}); err != nil {
-		ctx.Logger.Errorf("Unable to set default redirection URL in body: %s", err)
-	}
-}
-
 // Handle1FAResponse handle the redirection upon 1FA authentication.
 func Handle1FAResponse(ctx *middlewares.AutheliaCtx, targetURI, requestMethod string, username string, groups []string) {
 	var err error
@@ -166,6 +119,130 @@ func Handle2FAResponse(ctx *middlewares.AutheliaCtx, targetURI string) {
 	ctx.ReplyOK()
 }
 
+// handleOIDCWorkflowResponse handle the redirection upon authentication in the OIDC workflow.
+func handleOIDCWorkflowResponse(ctx *middlewares.AutheliaCtx, targetURI, workflowID string) {
+	switch {
+	case len(workflowID) != 0:
+		handleOIDCWorkflowResponseWithID(ctx, workflowID)
+	case len(targetURI) != 0:
+		handleOIDCWorkflowResponseWithTargetURL(ctx, targetURI)
+	default:
+		ctx.Error(fmt.Errorf("invalid post data: must contain either a target url or a workflow id"), messageAuthenticationFailed)
+	}
+}
+
+func handleOIDCWorkflowResponseWithTargetURL(ctx *middlewares.AutheliaCtx, targetURI string) {
+	var (
+		issuerURL *url.URL
+		targetURL *url.URL
+		err       error
+	)
+
+	if targetURL, err = url.ParseRequestURI(targetURI); err != nil {
+		ctx.Error(fmt.Errorf("unable to parse target URL '%s': %w", targetURI, err), messageAuthenticationFailed)
+
+		return
+	}
+
+	if issuerURL, err = ctx.IssuerURL(); err != nil {
+		ctx.Error(fmt.Errorf("unable to get issuer for redirection: %w", err), messageAuthenticationFailed)
+
+		return
+	}
+
+	if targetURL.Host != issuerURL.Host {
+		ctx.Error(fmt.Errorf("unable to redirect to '%s': target host '%s' does not match expected issuer host '%s'", targetURL, targetURL.Host, issuerURL.Host), messageAuthenticationFailed)
+
+		return
+	}
+
+	userSession := ctx.GetSession()
+
+	if userSession.IsAnonymous() {
+		ctx.Error(fmt.Errorf("unable to redirect to '%s': user is anonymous", targetURL), messageAuthenticationFailed)
+
+		return
+	}
+
+	if err = ctx.SetJSONBody(redirectResponse{Redirect: targetURL.String()}); err != nil {
+		ctx.Logger.Errorf("Unable to set default redirection URL in body: %s", err)
+	}
+}
+
+func handleOIDCWorkflowResponseWithID(ctx *middlewares.AutheliaCtx, id string) {
+	var (
+		workflowID uuid.UUID
+		client     *oidc.Client
+		consent    *model.OAuth2ConsentSession
+		err        error
+	)
+
+	if workflowID, err = uuid.Parse(id); err != nil {
+		ctx.Error(fmt.Errorf("unable to parse consent session challenge id '%s': %w", id, err), messageAuthenticationFailed)
+
+		return
+	}
+
+	if consent, err = ctx.Providers.StorageProvider.LoadOAuth2ConsentSessionByChallengeID(ctx, workflowID); err != nil {
+		ctx.Error(fmt.Errorf("unable to load consent session by challenge id '%s': %w", id, err), messageAuthenticationFailed)
+
+		return
+	}
+
+	if consent.Responded() {
+		ctx.Error(fmt.Errorf("consent has already been responded to '%s': %w", id, err), messageAuthenticationFailed)
+
+		return
+	}
+
+	if client, err = ctx.Providers.OpenIDConnect.GetFullClient(consent.ClientID); err != nil {
+		ctx.Error(fmt.Errorf("unable to get client for client with id '%s' with consent challenge id '%s': %w", id, consent.ChallengeID, err), messageAuthenticationFailed)
+
+		return
+	}
+
+	userSession := ctx.GetSession()
+
+	if userSession.IsAnonymous() {
+		ctx.Error(fmt.Errorf("unable to redirect for authorization/consent for client with id '%s' with consent challenge id '%s': user is anonymous", client.ID, consent.ChallengeID), messageAuthenticationFailed)
+
+		return
+	}
+
+	if !client.IsAuthenticationLevelSufficient(userSession.AuthenticationLevel) {
+		ctx.Logger.Warnf("OpenID Connect client '%s' requires 2FA, cannot be redirected yet", client.ID)
+		ctx.ReplyOK()
+
+		return
+	}
+
+	var (
+		targetURL *url.URL
+		form      url.Values
+	)
+
+	if targetURL, err = ctx.IssuerURL(); err != nil {
+		ctx.Error(fmt.Errorf("unable to get issuer for redirection: %w", err), messageAuthenticationFailed)
+
+		return
+	}
+
+	if form, err = consent.GetForm(); err != nil {
+		ctx.Error(fmt.Errorf("unable to get authorization form values from consent session with challenge id '%s': %w", consent.ChallengeID, err), messageAuthenticationFailed)
+
+		return
+	}
+
+	form.Set(queryArgConsentID, workflowID.String())
+
+	targetURL.Path = path.Join(targetURL.Path, oidc.EndpointPathAuthorization)
+	targetURL.RawQuery = form.Encode()
+
+	if err = ctx.SetJSONBody(redirectResponse{Redirect: targetURL.String()}); err != nil {
+		ctx.Logger.Errorf("Unable to set default redirection URL in body: %s", err)
+	}
+}
+
 func markAuthenticationAttempt(ctx *middlewares.AutheliaCtx, successful bool, bannedUntil *time.Time, username string, authType string, errAuth error) (err error) {
 	// We only Mark if there was no underlying error.
 	ctx.Logger.Debugf("Mark %s authentication attempt made by user '%s'", authType, username)
@@ -178,7 +255,7 @@ func markAuthenticationAttempt(ctx *middlewares.AutheliaCtx, successful bool, ba
 	if referer != nil {
 		refererURL, err := url.ParseRequestURI(string(referer))
 		if err == nil {
-			requestURI = refererURL.Query().Get("rd")
+			requestURI = refererURL.Query().Get(queryArgRD)
 			requestMethod = refererURL.Query().Get("rm")
 		}
 	}
diff --git a/internal/handlers/types.go b/internal/handlers/types.go
index b2be6e512..517d297a6 100644
--- a/internal/handlers/types.go
+++ b/internal/handlers/types.go
@@ -1,7 +1,17 @@
 package handlers
 
 import (
+	"net/http"
+	"net/url"
+
+	"github.com/google/uuid"
+	"github.com/ory/fosite"
+
 	"github.com/authelia/authelia/v4/internal/authentication"
+	"github.com/authelia/authelia/v4/internal/middlewares"
+	"github.com/authelia/authelia/v4/internal/model"
+	"github.com/authelia/authelia/v4/internal/oidc"
+	"github.com/authelia/authelia/v4/internal/session"
 )
 
 // MethodList is the list of available methods.
@@ -14,36 +24,41 @@ type configurationBody struct {
 	AvailableMethods MethodList `json:"available_methods"`
 }
 
-// signTOTPRequestBody model of the request body received by TOTP authentication endpoint.
-type signTOTPRequestBody struct {
-	Token     string `json:"token" valid:"required"`
-	TargetURL string `json:"targetURL"`
-	Workflow  string `json:"workflow"`
+// bodySignTOTPRequest is the  model of the request body of TOTP 2FA authentication endpoint.
+type bodySignTOTPRequest struct {
+	Token      string `json:"token" valid:"required"`
+	TargetURL  string `json:"targetURL"`
+	Workflow   string `json:"workflow"`
+	WorkflowID string `json:"workflowID"`
 }
 
-// signWebauthnRequestBody model of the request body of Webauthn authentication endpoint.
-type signWebauthnRequestBody struct {
-	TargetURL string `json:"targetURL"`
-	Workflow  string `json:"workflow"`
+// bodySignWebauthnRequest is the  model of the request body of WebAuthn 2FA authentication endpoint.
+type bodySignWebauthnRequest struct {
+	TargetURL  string `json:"targetURL"`
+	Workflow   string `json:"workflow"`
+	WorkflowID string `json:"workflowID"`
 }
 
-type signDuoRequestBody struct {
-	TargetURL string `json:"targetURL"`
-	Passcode  string `json:"passcode"`
-	Workflow  string `json:"workflow"`
+// bodySignDuoRequest is the  model of the request body of Duo 2FA authentication endpoint.
+type bodySignDuoRequest struct {
+	TargetURL  string `json:"targetURL"`
+	Passcode   string `json:"passcode"`
+	Workflow   string `json:"workflow"`
+	WorkflowID string `json:"workflowID"`
 }
 
-// preferred2FAMethodBody the selected 2FA method.
-type preferred2FAMethodBody struct {
+// bodyPreferred2FAMethod the selected 2FA method.
+type bodyPreferred2FAMethod struct {
 	Method string `json:"method" valid:"required"`
 }
 
-// firstFactorRequestBody represents the JSON body received by the endpoint.
-type firstFactorRequestBody struct {
+// bodyFirstFactorRequest represents the JSON body received by the endpoint.
+type bodyFirstFactorRequest struct {
 	Username       string `json:"username" valid:"required"`
 	Password       string `json:"password" valid:"required"`
 	TargetURL      string `json:"targetURL"`
 	Workflow       string `json:"workflow"`
+	WorkflowID     string `json:"workflowID"`
 	RequestMethod  string `json:"requestMethod"`
 	KeepMeLoggedIn *bool  `json:"keepMeLoggedIn"`
 	// KeepMeLoggedIn: Cannot require this field because of https://github.com/asaskevich/govalidator/pull/329
@@ -128,3 +143,9 @@ type PasswordPolicyBody struct {
 	RequireNumber    bool   `json:"require_number"`
 	RequireSpecial   bool   `json:"require_special"`
 }
+
+type handlerAuthorizationConsent func(
+	ctx *middlewares.AutheliaCtx, issuer *url.URL, client *oidc.Client,
+	userSession session.UserSession, subject uuid.UUID,
+	rw http.ResponseWriter, r *http.Request,
+	requester fosite.AuthorizeRequester) (consent *model.OAuth2ConsentSession, handled bool)
diff --git a/internal/middlewares/authelia_context.go b/internal/middlewares/authelia_context.go
index af5bcbd66..862f16d4d 100644
--- a/internal/middlewares/authelia_context.go
+++ b/internal/middlewares/authelia_context.go
@@ -218,6 +218,29 @@ func (ctx *AutheliaCtx) ExternalRootURL() (string, error) {
 	return externalRootURL, nil
 }
 
+// IssuerURL returns the expected Issuer.
+func (ctx *AutheliaCtx) IssuerURL() (issuerURL *url.URL, err error) {
+	issuerURL = &url.URL{
+		Scheme: "https",
+	}
+
+	if scheme := ctx.XForwardedProto(); scheme != nil {
+		issuerURL.Scheme = string(scheme)
+	}
+
+	if host := ctx.XForwardedHost(); len(host) != 0 {
+		issuerURL.Host = string(host)
+	} else {
+		return nil, errMissingXForwardedHost
+	}
+
+	if base := ctx.BasePath(); base != "" {
+		issuerURL.Path = path.Join(issuerURL.Path, base)
+	}
+
+	return issuerURL, nil
+}
+
 // XOriginalURL return the content of the X-Original-URL header.
 func (ctx *AutheliaCtx) XOriginalURL() []byte {
 	return ctx.RequestCtx.Request.Header.PeekBytes(headerXOriginalURL)
diff --git a/internal/middlewares/authelia_context_test.go b/internal/middlewares/authelia_context_test.go
index b15b5eb77..ab8882f03 100644
--- a/internal/middlewares/authelia_context_test.go
+++ b/internal/middlewares/authelia_context_test.go
@@ -6,6 +6,7 @@ import (
 
 	"github.com/golang/mock/gomock"
 	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
 	"github.com/valyala/fasthttp"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
@@ -15,6 +16,61 @@ import (
 	"github.com/authelia/authelia/v4/internal/session"
 )
 
+func TestIssuerURL(t *testing.T) {
+	testCases := []struct {
+		name              string
+		proto, host, base string
+		expected          string
+		err               string
+	}{
+		{
+			name:  "Standard",
+			proto: "https", host: "auth.example.com", base: "",
+			expected: "https://auth.example.com",
+		},
+		{
+			name:  "Base",
+			proto: "https", host: "example.com", base: "auth",
+			expected: "https://example.com/auth",
+		},
+		{
+			name:  "NoHost",
+			proto: "https", host: "", base: "",
+			err: "Missing header X-Forwarded-Host",
+		},
+	}
+
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			mock := mocks.NewMockAutheliaCtx(t)
+			defer mock.Close()
+
+			mock.Ctx.Request.Header.Set("X-Forwarded-Proto", tc.proto)
+			mock.Ctx.Request.Header.Set("X-Forwarded-Host", tc.host)
+
+			if tc.base != "" {
+				mock.Ctx.SetUserValue("base_url", tc.base)
+			}
+
+			actual, err := mock.Ctx.IssuerURL()
+
+			switch tc.err {
+			case "":
+				assert.NoError(t, err)
+				require.NotNil(t, actual)
+
+				assert.Equal(t, tc.expected, actual.String())
+				assert.Equal(t, tc.proto, actual.Scheme)
+				assert.Equal(t, tc.host, actual.Host)
+				assert.Equal(t, tc.base, actual.Path)
+			default:
+				assert.EqualError(t, err, tc.err)
+				assert.Nil(t, actual)
+			}
+		})
+	}
+}
+
 func TestShouldCallNextWithAutheliaCtx(t *testing.T) {
 	ctrl := gomock.NewController(t)
 	ctx := &fasthttp.RequestCtx{}
diff --git a/internal/middlewares/types.go b/internal/middlewares/types.go
index 58991a049..f26e57fc7 100644
--- a/internal/middlewares/types.go
+++ b/internal/middlewares/types.go
@@ -35,7 +35,7 @@ type Providers struct {
 	Authorizer      *authorization.Authorizer
 	SessionProvider *session.Provider
 	Regulator       *regulation.Regulator
-	OpenIDConnect   oidc.OpenIDConnectProvider
+	OpenIDConnect   *oidc.OpenIDConnectProvider
 	Metrics         metrics.Provider
 	NTP             *ntp.Provider
 	UserProvider    authentication.UserProvider
diff --git a/internal/mocks/storage.go b/internal/mocks/storage.go
index 980469a35..2a20f8acc 100644
--- a/internal/mocks/storage.go
+++ b/internal/mocks/storage.go
@@ -6,6 +6,7 @@ package mocks
 
 import (
 	context "context"
+	sql "database/sql"
 	reflect "reflect"
 	time "time"
 
@@ -239,6 +240,21 @@ func (mr *MockStorageMockRecorder) LoadOAuth2BlacklistedJTI(arg0, arg1 interface
 	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "LoadOAuth2BlacklistedJTI", reflect.TypeOf((*MockStorage)(nil).LoadOAuth2BlacklistedJTI), arg0, arg1)
 }
 
+// LoadOAuth2ConsentPreConfigurations mocks base method.
+func (m *MockStorage) LoadOAuth2ConsentPreConfigurations(arg0 context.Context, arg1 string, arg2 uuid.UUID) (*storage.ConsentPreConfigRows, error) {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "LoadOAuth2ConsentPreConfigurations", arg0, arg1, arg2)
+	ret0, _ := ret[0].(*storage.ConsentPreConfigRows)
+	ret1, _ := ret[1].(error)
+	return ret0, ret1
+}
+
+// LoadOAuth2ConsentPreConfigurations indicates an expected call of LoadOAuth2ConsentPreConfigurations.
+func (mr *MockStorageMockRecorder) LoadOAuth2ConsentPreConfigurations(arg0, arg1, arg2 interface{}) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "LoadOAuth2ConsentPreConfigurations", reflect.TypeOf((*MockStorage)(nil).LoadOAuth2ConsentPreConfigurations), arg0, arg1, arg2)
+}
+
 // LoadOAuth2ConsentSessionByChallengeID mocks base method.
 func (m *MockStorage) LoadOAuth2ConsentSessionByChallengeID(arg0 context.Context, arg1 uuid.UUID) (*model.OAuth2ConsentSession, error) {
 	m.ctrl.T.Helper()
@@ -254,21 +270,6 @@ func (mr *MockStorageMockRecorder) LoadOAuth2ConsentSessionByChallengeID(arg0, a
 	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "LoadOAuth2ConsentSessionByChallengeID", reflect.TypeOf((*MockStorage)(nil).LoadOAuth2ConsentSessionByChallengeID), arg0, arg1)
 }
 
-// LoadOAuth2ConsentSessionsPreConfigured mocks base method.
-func (m *MockStorage) LoadOAuth2ConsentSessionsPreConfigured(arg0 context.Context, arg1 string, arg2 uuid.UUID) (*storage.ConsentSessionRows, error) {
-	m.ctrl.T.Helper()
-	ret := m.ctrl.Call(m, "LoadOAuth2ConsentSessionsPreConfigured", arg0, arg1, arg2)
-	ret0, _ := ret[0].(*storage.ConsentSessionRows)
-	ret1, _ := ret[1].(error)
-	return ret0, ret1
-}
-
-// LoadOAuth2ConsentSessionsPreConfigured indicates an expected call of LoadOAuth2ConsentSessionsPreConfigured.
-func (mr *MockStorageMockRecorder) LoadOAuth2ConsentSessionsPreConfigured(arg0, arg1, arg2 interface{}) *gomock.Call {
-	mr.mock.ctrl.T.Helper()
-	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "LoadOAuth2ConsentSessionsPreConfigured", reflect.TypeOf((*MockStorage)(nil).LoadOAuth2ConsentSessionsPreConfigured), arg0, arg1, arg2)
-}
-
 // LoadOAuth2Session mocks base method.
 func (m *MockStorage) LoadOAuth2Session(arg0 context.Context, arg1 storage.OAuth2SessionType, arg2 string) (*model.OAuth2Session, error) {
 	m.ctrl.T.Helper()
@@ -504,6 +505,21 @@ func (mr *MockStorageMockRecorder) SaveOAuth2BlacklistedJTI(arg0, arg1 interface
 	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "SaveOAuth2BlacklistedJTI", reflect.TypeOf((*MockStorage)(nil).SaveOAuth2BlacklistedJTI), arg0, arg1)
 }
 
+// SaveOAuth2ConsentPreConfiguration mocks base method.
+func (m *MockStorage) SaveOAuth2ConsentPreConfiguration(arg0 context.Context, arg1 model.OAuth2ConsentPreConfig) (int64, error) {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "SaveOAuth2ConsentPreConfiguration", arg0, arg1)
+	ret0, _ := ret[0].(int64)
+	ret1, _ := ret[1].(error)
+	return ret0, ret1
+}
+
+// SaveOAuth2ConsentPreConfiguration indicates an expected call of SaveOAuth2ConsentPreConfiguration.
+func (mr *MockStorageMockRecorder) SaveOAuth2ConsentPreConfiguration(arg0, arg1 interface{}) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "SaveOAuth2ConsentPreConfiguration", reflect.TypeOf((*MockStorage)(nil).SaveOAuth2ConsentPreConfiguration), arg0, arg1)
+}
+
 // SaveOAuth2ConsentSession mocks base method.
 func (m *MockStorage) SaveOAuth2ConsentSession(arg0 context.Context, arg1 model.OAuth2ConsentSession) error {
 	m.ctrl.T.Helper()
@@ -791,7 +807,7 @@ func (mr *MockStorageMockRecorder) StartupCheck() *gomock.Call {
 }
 
 // UpdateTOTPConfigurationSignIn mocks base method.
-func (m *MockStorage) UpdateTOTPConfigurationSignIn(arg0 context.Context, arg1 int, arg2 *time.Time) error {
+func (m *MockStorage) UpdateTOTPConfigurationSignIn(arg0 context.Context, arg1 int, arg2 sql.NullTime) error {
 	m.ctrl.T.Helper()
 	ret := m.ctrl.Call(m, "UpdateTOTPConfigurationSignIn", arg0, arg1, arg2)
 	ret0, _ := ret[0].(error)
@@ -805,7 +821,7 @@ func (mr *MockStorageMockRecorder) UpdateTOTPConfigurationSignIn(arg0, arg1, arg
 }
 
 // UpdateWebauthnDeviceSignIn mocks base method.
-func (m *MockStorage) UpdateWebauthnDeviceSignIn(arg0 context.Context, arg1 int, arg2 string, arg3 *time.Time, arg4 uint32, arg5 bool) error {
+func (m *MockStorage) UpdateWebauthnDeviceSignIn(arg0 context.Context, arg1 int, arg2 string, arg3 sql.NullTime, arg4 uint32, arg5 bool) error {
 	m.ctrl.T.Helper()
 	ret := m.ctrl.Call(m, "UpdateWebauthnDeviceSignIn", arg0, arg1, arg2, arg3, arg4, arg5)
 	ret0, _ := ret[0].(error)
diff --git a/internal/model/identity_verification.go b/internal/model/identity_verification.go
index f0f58bc45..f6d4491ad 100644
--- a/internal/model/identity_verification.go
+++ b/internal/model/identity_verification.go
@@ -1,6 +1,7 @@
 package model
 
 import (
+	"database/sql"
 	"net"
 	"time"
 
@@ -22,15 +23,15 @@ func NewIdentityVerification(jti uuid.UUID, username, action string, ip net.IP)
 
 // IdentityVerification represents an identity verification row in the database.
 type IdentityVerification struct {
-	ID         int        `db:"id"`
-	JTI        uuid.UUID  `db:"jti"`
-	IssuedAt   time.Time  `db:"iat"`
-	IssuedIP   IP         `db:"issued_ip"`
-	ExpiresAt  time.Time  `db:"exp"`
-	Action     string     `db:"action"`
-	Username   string     `db:"username"`
-	Consumed   *time.Time `db:"consumed"`
-	ConsumedIP NullIP     `db:"consumed_ip"`
+	ID         int          `db:"id"`
+	JTI        uuid.UUID    `db:"jti"`
+	IssuedAt   time.Time    `db:"iat"`
+	IssuedIP   IP           `db:"issued_ip"`
+	ExpiresAt  time.Time    `db:"exp"`
+	Action     string       `db:"action"`
+	Username   string       `db:"username"`
+	Consumed   sql.NullTime `db:"consumed"`
+	ConsumedIP NullIP       `db:"consumed_ip"`
 }
 
 // ToIdentityVerificationClaim converts the IdentityVerification into a IdentityVerificationClaim.
diff --git a/internal/model/oidc.go b/internal/model/oidc.go
index 99c778ac2..1d742543d 100644
--- a/internal/model/oidc.go
+++ b/internal/model/oidc.go
@@ -3,6 +3,7 @@ package model
 import (
 	"context"
 	"crypto/sha256"
+	"database/sql"
 	"encoding/json"
 	"fmt"
 	"net/url"
@@ -84,6 +85,42 @@ func NewOAuth2BlacklistedJTI(jti string, exp time.Time) (jtiBlacklist OAuth2Blac
 	}
 }
 
+// OAuth2ConsentPreConfig stores information about an OAuth2.0 Pre-Configured Consent.
+type OAuth2ConsentPreConfig struct {
+	ID       int64     `db:"id"`
+	ClientID string    `db:"client_id"`
+	Subject  uuid.UUID `db:"subject"`
+
+	CreatedAt time.Time    `db:"created_at"`
+	ExpiresAt sql.NullTime `db:"expires_at"`
+
+	Revoked bool `db:"revoked"`
+
+	Scopes   StringSlicePipeDelimited `db:"scopes"`
+	Audience StringSlicePipeDelimited `db:"audience"`
+}
+
+// HasExactGrants returns true if the granted audience and scopes of this consent pre-configuration matches exactly with
+// another audience and set of scopes.
+func (s *OAuth2ConsentPreConfig) HasExactGrants(scopes, audience []string) (has bool) {
+	return s.HasExactGrantedScopes(scopes) && s.HasExactGrantedAudience(audience)
+}
+
+// HasExactGrantedAudience returns true if the granted audience of this consent matches exactly with another audience.
+func (s *OAuth2ConsentPreConfig) HasExactGrantedAudience(audience []string) (has bool) {
+	return !utils.IsStringSlicesDifferent(s.Audience, audience)
+}
+
+// HasExactGrantedScopes returns true if the granted scopes of this consent matches exactly with another set of scopes.
+func (s *OAuth2ConsentPreConfig) HasExactGrantedScopes(scopes []string) (has bool) {
+	return !utils.IsStringSlicesDifferent(s.Scopes, scopes)
+}
+
+// CanConsent returns true if this pre-configuration can still provide consent.
+func (s *OAuth2ConsentPreConfig) CanConsent() bool {
+	return !s.Revoked && (!s.ExpiresAt.Valid || s.ExpiresAt.Time.After(time.Now()))
+}
+
 // OAuth2ConsentSession stores information about an OAuth2.0 Consent.
 type OAuth2ConsentSession struct {
 	ID          int           `db:"id"`
@@ -94,9 +131,8 @@ type OAuth2ConsentSession struct {
 	Authorized bool `db:"authorized"`
 	Granted    bool `db:"granted"`
 
-	RequestedAt time.Time  `db:"requested_at"`
-	RespondedAt *time.Time `db:"responded_at"`
-	ExpiresAt   *time.Time `db:"expires_at"`
+	RequestedAt time.Time    `db:"requested_at"`
+	RespondedAt sql.NullTime `db:"responded_at"`
 
 	Form string `db:"form_data"`
 
@@ -104,55 +140,63 @@ type OAuth2ConsentSession struct {
 	GrantedScopes     StringSlicePipeDelimited `db:"granted_scopes"`
 	RequestedAudience StringSlicePipeDelimited `db:"requested_audience"`
 	GrantedAudience   StringSlicePipeDelimited `db:"granted_audience"`
+
+	PreConfiguration sql.NullInt64
+}
+
+// Grant grants the requested scopes and audience.
+func (s *OAuth2ConsentSession) Grant() {
+	s.GrantedScopes = s.RequestedScopes
+	s.GrantedAudience = s.RequestedAudience
+
+	if !utils.IsStringInSlice(s.ClientID, s.GrantedAudience) {
+		s.GrantedAudience = append(s.GrantedAudience, s.ClientID)
+	}
 }
 
 // HasExactGrants returns true if the granted audience and scopes of this consent matches exactly with another
 // audience and set of scopes.
-func (s OAuth2ConsentSession) HasExactGrants(scopes, audience []string) (has bool) {
+func (s *OAuth2ConsentSession) HasExactGrants(scopes, audience []string) (has bool) {
 	return s.HasExactGrantedScopes(scopes) && s.HasExactGrantedAudience(audience)
 }
 
 // HasExactGrantedAudience returns true if the granted audience of this consent matches exactly with another audience.
-func (s OAuth2ConsentSession) HasExactGrantedAudience(audience []string) (has bool) {
+func (s *OAuth2ConsentSession) HasExactGrantedAudience(audience []string) (has bool) {
 	return !utils.IsStringSlicesDifferent(s.GrantedAudience, audience)
 }
 
 // HasExactGrantedScopes returns true if the granted scopes of this consent matches exactly with another set of scopes.
-func (s OAuth2ConsentSession) HasExactGrantedScopes(scopes []string) (has bool) {
+func (s *OAuth2ConsentSession) HasExactGrantedScopes(scopes []string) (has bool) {
 	return !utils.IsStringSlicesDifferent(s.GrantedScopes, scopes)
 }
 
+// Responded returns true if the user has responded to the consent session.
+func (s *OAuth2ConsentSession) Responded() bool {
+	return s.RespondedAt.Valid
+}
+
 // IsAuthorized returns true if the user has responded to the consent session and it was authorized.
-func (s OAuth2ConsentSession) IsAuthorized() bool {
+func (s *OAuth2ConsentSession) IsAuthorized() bool {
 	return s.Responded() && s.Authorized
 }
 
-// CanGrant returns true if the user has responded to the consent session, it was authorized, and it either hast not
-// previously been granted or the ability to grant has not expired.
-func (s OAuth2ConsentSession) CanGrant() bool {
-	if !s.Responded() {
-		return false
-	}
+// IsDenied returns true if the user has responded to the consent session and it was not authorized.
+func (s *OAuth2ConsentSession) IsDenied() bool {
+	return s.Responded() && !s.Authorized
+}
 
-	if s.Granted && (s.ExpiresAt == nil || s.ExpiresAt.Before(time.Now())) {
+// CanGrant returns true if the session can still grant a token. This is NOT indicative of if there is a user response
+// to this consent request or if the user rejected the consent request.
+func (s *OAuth2ConsentSession) CanGrant() bool {
+	if !s.Subject.Valid || s.Granted {
 		return false
 	}
 
 	return true
 }
 
-// IsDenied returns true if the user has responded to the consent session and it was not authorized.
-func (s OAuth2ConsentSession) IsDenied() bool {
-	return s.Responded() && !s.Authorized
-}
-
-// Responded returns true if the user has responded to the consent session.
-func (s OAuth2ConsentSession) Responded() bool {
-	return s.RespondedAt != nil
-}
-
 // GetForm returns the form.
-func (s OAuth2ConsentSession) GetForm() (form url.Values, err error) {
+func (s *OAuth2ConsentSession) GetForm() (form url.Values, err error) {
 	return url.ParseQuery(s.Form)
 }
 
diff --git a/internal/model/totp_configuration.go b/internal/model/totp_configuration.go
index 74777e4a2..f8f23d41b 100644
--- a/internal/model/totp_configuration.go
+++ b/internal/model/totp_configuration.go
@@ -1,6 +1,7 @@
 package model
 
 import (
+	"database/sql"
 	"image"
 	"net/url"
 	"strconv"
@@ -11,15 +12,23 @@ import (
 
 // TOTPConfiguration represents a users TOTP configuration row in the database.
 type TOTPConfiguration struct {
-	ID         int        `db:"id" json:"-"`
-	CreatedAt  time.Time  `db:"created_at" json:"-"`
-	LastUsedAt *time.Time `db:"last_used_at" json:"-"`
-	Username   string     `db:"username" json:"-"`
-	Issuer     string     `db:"issuer" json:"-"`
-	Algorithm  string     `db:"algorithm" json:"-"`
-	Digits     uint       `db:"digits" json:"digits"`
-	Period     uint       `db:"period" json:"period"`
-	Secret     []byte     `db:"secret" json:"-"`
+	ID         int          `db:"id" json:"-"`
+	CreatedAt  time.Time    `db:"created_at" json:"-"`
+	LastUsedAt sql.NullTime `db:"last_used_at" json:"-"`
+	Username   string       `db:"username" json:"-"`
+	Issuer     string       `db:"issuer" json:"-"`
+	Algorithm  string       `db:"algorithm" json:"-"`
+	Digits     uint         `db:"digits" json:"digits"`
+	Period     uint         `db:"period" json:"period"`
+	Secret     []byte       `db:"secret" json:"-"`
+}
+
+func (c *TOTPConfiguration) LastUsed() *time.Time {
+	if c.LastUsedAt.Valid {
+		return &c.LastUsedAt.Time
+	}
+
+	return nil
 }
 
 // URI shows the configuration in the URI representation.
@@ -43,7 +52,7 @@ func (c *TOTPConfiguration) URI() (uri string) {
 
 // UpdateSignInInfo adjusts the values of the TOTPConfiguration after a sign in.
 func (c *TOTPConfiguration) UpdateSignInInfo(now time.Time) {
-	c.LastUsedAt = &now
+	c.LastUsedAt = sql.NullTime{Time: now, Valid: true}
 }
 
 // Key returns the *otp.Key using TOTPConfiguration.URI with otp.NewKeyFromURL.
diff --git a/internal/model/webauthn.go b/internal/model/webauthn.go
index a6fcc4084..bd9400f89 100644
--- a/internal/model/webauthn.go
+++ b/internal/model/webauthn.go
@@ -1,6 +1,7 @@
 package model
 
 import (
+	"database/sql"
 	"encoding/hex"
 	"strings"
 	"time"
@@ -133,24 +134,24 @@ func NewWebauthnDeviceFromCredential(rpid, username, description string, credent
 
 // WebauthnDevice represents a Webauthn Device in the database storage.
 type WebauthnDevice struct {
-	ID              int        `db:"id"`
-	CreatedAt       time.Time  `db:"created_at"`
-	LastUsedAt      *time.Time `db:"last_used_at"`
-	RPID            string     `db:"rpid"`
-	Username        string     `db:"username"`
-	Description     string     `db:"description"`
-	KID             Base64     `db:"kid"`
-	PublicKey       []byte     `db:"public_key"`
-	AttestationType string     `db:"attestation_type"`
-	Transport       string     `db:"transport"`
-	AAGUID          uuid.UUID  `db:"aaguid"`
-	SignCount       uint32     `db:"sign_count"`
-	CloneWarning    bool       `db:"clone_warning"`
+	ID              int          `db:"id"`
+	CreatedAt       time.Time    `db:"created_at"`
+	LastUsedAt      sql.NullTime `db:"last_used_at"`
+	RPID            string       `db:"rpid"`
+	Username        string       `db:"username"`
+	Description     string       `db:"description"`
+	KID             Base64       `db:"kid"`
+	PublicKey       []byte       `db:"public_key"`
+	AttestationType string       `db:"attestation_type"`
+	Transport       string       `db:"transport"`
+	AAGUID          uuid.UUID    `db:"aaguid"`
+	SignCount       uint32       `db:"sign_count"`
+	CloneWarning    bool         `db:"clone_warning"`
 }
 
 // UpdateSignInInfo adjusts the values of the WebauthnDevice after a sign in.
 func (w *WebauthnDevice) UpdateSignInInfo(config *webauthn.Config, now time.Time, signCount uint32) {
-	w.LastUsedAt = &now
+	w.LastUsedAt = sql.NullTime{Time: now, Valid: true}
 
 	w.SignCount = signCount
 
diff --git a/internal/oidc/client.go b/internal/oidc/client.go
index c5b7cb975..7bdbc8a36 100644
--- a/internal/oidc/client.go
+++ b/internal/oidc/client.go
@@ -29,7 +29,7 @@ func NewClient(config schema.OpenIDConnectClientConfiguration) (client *Client)
 
 		Policy: authorization.StringToLevel(config.Policy),
 
-		PreConfiguredConsentDuration: config.PreConfiguredConsentDuration,
+		Consent: NewClientConsent(config.ConsentMode, config.ConsentPreConfiguredDuration),
 	}
 
 	for _, mode := range config.ResponseModes {
@@ -40,26 +40,30 @@ func NewClient(config schema.OpenIDConnectClientConfiguration) (client *Client)
 }
 
 // IsAuthenticationLevelSufficient returns if the provided authentication.Level is sufficient for the client of the AutheliaClient.
-func (c Client) IsAuthenticationLevelSufficient(level authentication.Level) bool {
+func (c *Client) IsAuthenticationLevelSufficient(level authentication.Level) bool {
+	if level == authentication.NotAuthenticated {
+		return false
+	}
+
 	return authorization.IsAuthLevelSufficient(level, c.Policy)
 }
 
 // GetID returns the ID.
-func (c Client) GetID() string {
+func (c *Client) GetID() string {
 	return c.ID
 }
 
 // GetSectorIdentifier returns the SectorIdentifier for this client.
-func (c Client) GetSectorIdentifier() string {
+func (c *Client) GetSectorIdentifier() string {
 	return c.SectorIdentifier
 }
 
 // GetConsentResponseBody returns the proper consent response body for this session.OIDCWorkflowSession.
-func (c Client) GetConsentResponseBody(consent *model.OAuth2ConsentSession) ConsentGetResponseBody {
+func (c *Client) GetConsentResponseBody(consent *model.OAuth2ConsentSession) ConsentGetResponseBody {
 	body := ConsentGetResponseBody{
 		ClientID:          c.ID,
 		ClientDescription: c.Description,
-		PreConfiguration:  c.PreConfiguredConsentDuration != nil,
+		PreConfiguration:  c.Consent.Mode == ClientConsentModePreConfigured,
 	}
 
 	if consent != nil {
@@ -71,17 +75,17 @@ func (c Client) GetConsentResponseBody(consent *model.OAuth2ConsentSession) Cons
 }
 
 // GetHashedSecret returns the Secret.
-func (c Client) GetHashedSecret() []byte {
+func (c *Client) GetHashedSecret() []byte {
 	return c.Secret
 }
 
 // GetRedirectURIs returns the RedirectURIs.
-func (c Client) GetRedirectURIs() []string {
+func (c *Client) GetRedirectURIs() []string {
 	return c.RedirectURIs
 }
 
 // GetGrantTypes returns the GrantTypes.
-func (c Client) GetGrantTypes() fosite.Arguments {
+func (c *Client) GetGrantTypes() fosite.Arguments {
 	if len(c.GrantTypes) == 0 {
 		return fosite.Arguments{"authorization_code"}
 	}
@@ -90,7 +94,7 @@ func (c Client) GetGrantTypes() fosite.Arguments {
 }
 
 // GetResponseTypes returns the ResponseTypes.
-func (c Client) GetResponseTypes() fosite.Arguments {
+func (c *Client) GetResponseTypes() fosite.Arguments {
 	if len(c.ResponseTypes) == 0 {
 		return fosite.Arguments{"code"}
 	}
@@ -99,23 +103,23 @@ func (c Client) GetResponseTypes() fosite.Arguments {
 }
 
 // GetScopes returns the Scopes.
-func (c Client) GetScopes() fosite.Arguments {
+func (c *Client) GetScopes() fosite.Arguments {
 	return c.Scopes
 }
 
 // IsPublic returns the value of the Public property.
-func (c Client) IsPublic() bool {
+func (c *Client) IsPublic() bool {
 	return c.Public
 }
 
 // GetAudience returns the Audience.
-func (c Client) GetAudience() fosite.Arguments {
+func (c *Client) GetAudience() fosite.Arguments {
 	return c.Audience
 }
 
 // GetResponseModes returns the valid response modes for this client.
 //
 // Implements the fosite.ResponseModeClient.
-func (c Client) GetResponseModes() []fosite.ResponseModeType {
+func (c *Client) GetResponseModes() []fosite.ResponseModeType {
 	return c.ResponseModes
 }
diff --git a/internal/oidc/client_test.go b/internal/oidc/client_test.go
index aaacd5cdf..8483efa5c 100644
--- a/internal/oidc/client_test.go
+++ b/internal/oidc/client_test.go
@@ -48,7 +48,7 @@ func TestIsAuthenticationLevelSufficient(t *testing.T) {
 	c := Client{}
 
 	c.Policy = authorization.Bypass
-	assert.True(t, c.IsAuthenticationLevelSufficient(authentication.NotAuthenticated))
+	assert.False(t, c.IsAuthenticationLevelSufficient(authentication.NotAuthenticated))
 	assert.True(t, c.IsAuthenticationLevelSufficient(authentication.OneFactor))
 	assert.True(t, c.IsAuthenticationLevelSufficient(authentication.TwoFactor))
 
diff --git a/internal/oidc/const.go b/internal/oidc/const.go
index 72d395dd1..c61396d4a 100644
--- a/internal/oidc/const.go
+++ b/internal/oidc/const.go
@@ -9,38 +9,101 @@ const (
 	ScopeGroups        = "groups"
 )
 
-// Claim strings.
+// Registered Claim strings. See https://www.iana.org/assignments/jwt/jwt.xhtml.
 const (
-	ClaimGroups            = "groups"
-	ClaimDisplayName       = "name"
-	ClaimPreferredUsername = "preferred_username"
-	ClaimEmail             = "email"
-	ClaimEmailVerified     = "email_verified"
-	ClaimEmailAlts         = "alt_emails"
+	ClaimJWTID                               = "jti"
+	ClaimSessionID                           = "sid"
+	ClaimAccessTokenHash                     = "at_hash"
+	ClaimCodeHash                            = "c_hash"
+	ClaimIssuedAt                            = "iat"
+	ClaimNotBefore                           = "nbf"
+	ClaimRequestedAt                         = "rat"
+	ClaimExpirationTime                      = "exp"
+	ClaimAuthenticationTime                  = "auth_time"
+	ClaimIssuer                              = "iss"
+	ClaimSubject                             = "sub"
+	ClaimNonce                               = "nonce"
+	ClaimAudience                            = "aud"
+	ClaimGroups                              = "groups"
+	ClaimFullName                            = "name"
+	ClaimPreferredUsername                   = "preferred_username"
+	ClaimPreferredEmail                      = "email"
+	ClaimEmailVerified                       = "email_verified"
+	ClaimAuthorizedParty                     = "azp"
+	ClaimAuthenticationContextClassReference = "acr"
+	ClaimAuthenticationMethodsReference      = "amr"
+	ClaimClientIdentifier                    = "client_id"
+)
+
+const (
+	// ClaimEmailAlts is an unregistered/custom claim.
+	// It represents the emails which are not considered primary.
+	ClaimEmailAlts = "alt_emails"
+)
+
+// Response Mode strings.
+const (
+	ResponseModeQuery    = "query"
+	ResponseModeFormPost = "form_post"
+	ResponseModeFragment = "fragment"
+)
+
+// Grant Type strings.
+const (
+	GrantTypeImplicit          = implicit
+	GrantTypeRefreshToken      = "refresh_token"
+	GrantTypeAuthorizationCode = "authorization_code"
+	GrantTypePassword          = "password"
+	GrantTypeClientCredentials = "client_credentials"
+)
+
+// Signing Algorithm strings.
+const (
+	SigningAlgorithmNone          = none
+	SigningAlgorithmRSAWithSHA256 = "RS256"
+)
+
+// Subject Type strings.
+const (
+	SubjectTypePublic   = "public"
+	SubjectTypePairwise = "pairwise"
+)
+
+// Proof Key Code Exchange Challenge Method strings.
+const (
+	PKCEChallengeMethodPlain  = "plain"
+	PKCEChallengeMethodSHA256 = "S256"
 )
 
 // Endpoints.
 const (
-	AuthorizationEndpoint = "authorization"
-	TokenEndpoint         = "token"
-	UserinfoEndpoint      = "userinfo"
-	IntrospectionEndpoint = "introspection"
-	RevocationEndpoint    = "revocation"
+	EndpointAuthorization = "authorization"
+	EndpointToken         = "token"
+	EndpointUserinfo      = "userinfo"
+	EndpointIntrospection = "introspection"
+	EndpointRevocation    = "revocation"
+)
+
+// JWT Headers.
+const (
+	// JWTHeaderKeyIdentifier is the JWT Header referencing the JWS Key Identifier used to sign a token.
+	JWTHeaderKeyIdentifier = "kid"
 )
 
 // Paths.
 const (
-	WellKnownOpenIDConfigurationPath      = "/.well-known/openid-configuration"
-	WellKnownOAuthAuthorizationServerPath = "/.well-known/oauth-authorization-server"
-	JWKsPath                              = "/jwks.json"
+	EndpointPathConsent                           = "/consent"
+	EndpointPathWellKnownOpenIDConfiguration      = "/.well-known/openid-configuration"
+	EndpointPathWellKnownOAuthAuthorizationServer = "/.well-known/oauth-authorization-server"
+	EndpointPathJWKs                              = "/jwks.json"
 
-	RootPath = "/api/oidc"
+	EndpointPathRoot = "/api/oidc"
 
-	AuthorizationPath = RootPath + "/" + AuthorizationEndpoint
-	TokenPath         = RootPath + "/" + TokenEndpoint
-	UserinfoPath      = RootPath + "/" + UserinfoEndpoint
-	IntrospectionPath = RootPath + "/" + IntrospectionEndpoint
-	RevocationPath    = RootPath + "/" + RevocationEndpoint
+	EndpointPathAuthorization = EndpointPathRoot + "/" + EndpointAuthorization
+	EndpointPathToken         = EndpointPathRoot + "/" + EndpointToken
+	EndpointPathUserinfo      = EndpointPathRoot + "/" + EndpointUserinfo
+	EndpointPathIntrospection = EndpointPathRoot + "/" + EndpointIntrospection
+	EndpointPathRevocation    = EndpointPathRoot + "/" + EndpointRevocation
 )
 
 // Authentication Method Reference Values https://datatracker.ietf.org/doc/html/rfc8176
@@ -136,3 +199,10 @@ const (
 	// RFC8176: https://datatracker.ietf.org/doc/html/rfc8176
 	AMRShortMessageService = "sms"
 )
+
+const (
+	implicit      = "implicit"
+	explicit      = "explicit"
+	preconfigured = "pre-configured"
+	none          = "none"
+)
diff --git a/internal/oidc/discovery.go b/internal/oidc/discovery.go
index 145c0da8b..5f311c030 100644
--- a/internal/oidc/discovery.go
+++ b/internal/oidc/discovery.go
@@ -1,11 +1,11 @@
 package oidc
 
 // NewOpenIDConnectWellKnownConfiguration generates a new OpenIDConnectWellKnownConfiguration.
-func NewOpenIDConnectWellKnownConfiguration(enablePKCEPlainChallenge, pairwise bool) (config OpenIDConnectWellKnownConfiguration) {
+func NewOpenIDConnectWellKnownConfiguration(enablePKCEPlainChallenge bool, clients map[string]*Client) (config OpenIDConnectWellKnownConfiguration) {
 	config = OpenIDConnectWellKnownConfiguration{
 		CommonDiscoveryOptions: CommonDiscoveryOptions{
 			SubjectTypesSupported: []string{
-				"public",
+				SubjectTypePublic,
 			},
 			ResponseTypesSupported: []string{
 				"code",
@@ -18,9 +18,9 @@ func NewOpenIDConnectWellKnownConfiguration(enablePKCEPlainChallenge, pairwise b
 				"none",
 			},
 			ResponseModesSupported: []string{
-				"form_post",
-				"query",
-				"fragment",
+				ResponseModeFormPost,
+				ResponseModeQuery,
+				ResponseModeFragment,
 			},
 			ScopesSupported: []string{
 				ScopeOfflineAccess,
@@ -30,52 +30,64 @@ func NewOpenIDConnectWellKnownConfiguration(enablePKCEPlainChallenge, pairwise b
 				ScopeEmail,
 			},
 			ClaimsSupported: []string{
-				"amr",
-				"aud",
-				"azp",
-				"client_id",
-				"exp",
-				"iat",
-				"iss",
-				"jti",
-				"rat",
-				"sub",
-				"auth_time",
-				"nonce",
-				ClaimEmail,
+				ClaimAuthenticationMethodsReference,
+				ClaimAudience,
+				ClaimAuthorizedParty,
+				ClaimClientIdentifier,
+				ClaimExpirationTime,
+				ClaimIssuedAt,
+				ClaimIssuer,
+				ClaimJWTID,
+				ClaimRequestedAt,
+				ClaimSubject,
+				ClaimAuthenticationTime,
+				ClaimNonce,
+				ClaimPreferredEmail,
 				ClaimEmailVerified,
 				ClaimEmailAlts,
 				ClaimGroups,
 				ClaimPreferredUsername,
-				ClaimDisplayName,
+				ClaimFullName,
 			},
 		},
 		OAuth2DiscoveryOptions: OAuth2DiscoveryOptions{
 			CodeChallengeMethodsSupported: []string{
-				"S256",
+				PKCEChallengeMethodSHA256,
 			},
 		},
 		OpenIDConnectDiscoveryOptions: OpenIDConnectDiscoveryOptions{
 			IDTokenSigningAlgValuesSupported: []string{
-				"RS256",
+				SigningAlgorithmRSAWithSHA256,
 			},
 			UserinfoSigningAlgValuesSupported: []string{
-				"none",
-				"RS256",
+				SigningAlgorithmNone,
+				SigningAlgorithmRSAWithSHA256,
 			},
 			RequestObjectSigningAlgValuesSupported: []string{
-				"none",
-				"RS256",
+				SigningAlgorithmNone,
+				SigningAlgorithmRSAWithSHA256,
 			},
 		},
 	}
 
+	var pairwise, public bool
+
+	for _, client := range clients {
+		if pairwise && public {
+			break
+		}
+
+		if client.SectorIdentifier != "" {
+			pairwise = true
+		}
+	}
+
 	if pairwise {
-		config.SubjectTypesSupported = append(config.SubjectTypesSupported, "pairwise")
+		config.SubjectTypesSupported = append(config.SubjectTypesSupported, SubjectTypePairwise)
 	}
 
 	if enablePKCEPlainChallenge {
-		config.CodeChallengeMethodsSupported = append(config.CodeChallengeMethodsSupported, "plain")
+		config.CodeChallengeMethodsSupported = append(config.CodeChallengeMethodsSupported, PKCEChallengeMethodPlain)
 	}
 
 	return config
diff --git a/internal/oidc/discovery_test.go b/internal/oidc/discovery_test.go
index 256f5f70b..7f99df15c 100644
--- a/internal/oidc/discovery_test.go
+++ b/internal/oidc/discovery_test.go
@@ -8,43 +8,62 @@ import (
 
 func TestNewOpenIDConnectWellKnownConfiguration(t *testing.T) {
 	testCases := []struct {
-		desc                                                             string
-		pkcePlainChallenge, pairwise                                     bool
+		desc               string
+		pkcePlainChallenge bool
+		clients            map[string]*Client
+
 		expectCodeChallengeMethodsSupported, expectSubjectTypesSupported []string
 	}{
 		{
 			desc:                                "ShouldHaveChallengeMethodsS256ANDSubjectTypesSupportedPublic",
 			pkcePlainChallenge:                  false,
-			pairwise:                            false,
-			expectCodeChallengeMethodsSupported: []string{"S256"},
-			expectSubjectTypesSupported:         []string{"public"},
+			clients:                             map[string]*Client{"a": {}},
+			expectCodeChallengeMethodsSupported: []string{PKCEChallengeMethodSHA256},
+			expectSubjectTypesSupported:         []string{SubjectTypePublic},
 		},
 		{
 			desc:                                "ShouldHaveChallengeMethodsS256PlainANDSubjectTypesSupportedPublic",
 			pkcePlainChallenge:                  true,
-			pairwise:                            false,
-			expectCodeChallengeMethodsSupported: []string{"S256", "plain"},
-			expectSubjectTypesSupported:         []string{"public"},
+			clients:                             map[string]*Client{"a": {}},
+			expectCodeChallengeMethodsSupported: []string{PKCEChallengeMethodSHA256, PKCEChallengeMethodPlain},
+			expectSubjectTypesSupported:         []string{SubjectTypePublic},
 		},
 		{
 			desc:                                "ShouldHaveChallengeMethodsS256ANDSubjectTypesSupportedPublicPairwise",
 			pkcePlainChallenge:                  false,
-			pairwise:                            true,
-			expectCodeChallengeMethodsSupported: []string{"S256"},
-			expectSubjectTypesSupported:         []string{"public", "pairwise"},
+			clients:                             map[string]*Client{"a": {SectorIdentifier: "yes"}},
+			expectCodeChallengeMethodsSupported: []string{PKCEChallengeMethodSHA256},
+			expectSubjectTypesSupported:         []string{SubjectTypePublic, SubjectTypePairwise},
 		},
 		{
 			desc:                                "ShouldHaveChallengeMethodsS256PlainANDSubjectTypesSupportedPublicPairwise",
 			pkcePlainChallenge:                  true,
-			pairwise:                            true,
-			expectCodeChallengeMethodsSupported: []string{"S256", "plain"},
-			expectSubjectTypesSupported:         []string{"public", "pairwise"},
+			clients:                             map[string]*Client{"a": {SectorIdentifier: "yes"}},
+			expectCodeChallengeMethodsSupported: []string{PKCEChallengeMethodSHA256, PKCEChallengeMethodPlain},
+			expectSubjectTypesSupported:         []string{SubjectTypePublic, SubjectTypePairwise},
+		},
+		{
+			desc:                                "ShouldHaveTokenAuthMethodsNone",
+			pkcePlainChallenge:                  true,
+			clients:                             map[string]*Client{"a": {SectorIdentifier: "yes"}},
+			expectCodeChallengeMethodsSupported: []string{PKCEChallengeMethodSHA256, PKCEChallengeMethodPlain},
+			expectSubjectTypesSupported:         []string{SubjectTypePublic, SubjectTypePairwise},
+		},
+		{
+			desc:               "ShouldHaveTokenAuthMethodsNone",
+			pkcePlainChallenge: true,
+			clients: map[string]*Client{
+				"a": {SectorIdentifier: "yes"},
+				"b": {SectorIdentifier: "yes"},
+			},
+			expectCodeChallengeMethodsSupported: []string{PKCEChallengeMethodSHA256, PKCEChallengeMethodPlain},
+			expectSubjectTypesSupported:         []string{SubjectTypePublic, SubjectTypePairwise},
 		},
 	}
 
 	for _, tc := range testCases {
 		t.Run(tc.desc, func(t *testing.T) {
-			actual := NewOpenIDConnectWellKnownConfiguration(tc.pkcePlainChallenge, tc.pairwise)
+			actual := NewOpenIDConnectWellKnownConfiguration(tc.pkcePlainChallenge, tc.clients)
 			for _, codeChallengeMethod := range tc.expectCodeChallengeMethodsSupported {
 				assert.Contains(t, actual.CodeChallengeMethodsSupported, codeChallengeMethod)
 			}
diff --git a/internal/oidc/errors.go b/internal/oidc/errors.go
index 239b3e549..465689257 100644
--- a/internal/oidc/errors.go
+++ b/internal/oidc/errors.go
@@ -1,5 +1,19 @@
 package oidc
 
-import "errors"
+import (
+	"errors"
+
+	"github.com/ory/fosite"
+)
 
 var errPasswordsDoNotMatch = errors.New("the passwords don't match")
+
+var (
+	ErrIssuerCouldNotDerive        = fosite.ErrServerError.WithHint("Could not safely derive the issuer.")
+	ErrSubjectCouldNotLookup       = fosite.ErrServerError.WithHint("Could not lookup user subject.")
+	ErrConsentCouldNotPerform      = fosite.ErrServerError.WithHint("Could not perform consent.")
+	ErrConsentCouldNotGenerate     = fosite.ErrServerError.WithHint("Could not generate the consent session.")
+	ErrConsentCouldNotSave         = fosite.ErrServerError.WithHint("Could not save the consent session.")
+	ErrConsentCouldNotLookup       = fosite.ErrServerError.WithHint("Failed to lookup the consent session.")
+	ErrConsentMalformedChallengeID = fosite.ErrServerError.WithHint("Malformed consent session challenge ID.")
+)
diff --git a/internal/oidc/keys.go b/internal/oidc/keys.go
index acbfc17d4..7f5e3d86a 100644
--- a/internal/oidc/keys.go
+++ b/internal/oidc/keys.go
@@ -125,7 +125,7 @@ func NewJWK(chain schema.X509CertificateChain, key *rsa.PrivateKey) (j *JWK, err
 	}
 
 	jwk := &jose.JSONWebKey{
-		Algorithm: "RS256",
+		Algorithm: SigningAlgorithmRSAWithSHA256,
 		Use:       "sig",
 		Key:       &key.PublicKey,
 	}
diff --git a/internal/oidc/provider.go b/internal/oidc/provider.go
index 5ca1993f4..8843a6807 100644
--- a/internal/oidc/provider.go
+++ b/internal/oidc/provider.go
@@ -1,10 +1,13 @@
 package oidc
 
 import (
+	"crypto/sha512"
 	"fmt"
-	"net/http"
 
 	"github.com/ory/fosite/compose"
+	"github.com/ory/fosite/handler/oauth2"
+	"github.com/ory/fosite/handler/openid"
+	"github.com/ory/fosite/token/hmac"
 	"github.com/ory/herodot"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
@@ -13,14 +16,14 @@ import (
 )
 
 // NewOpenIDConnectProvider new-ups a OpenIDConnectProvider.
-func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, storageProvider storage.Provider) (provider OpenIDConnectProvider, err error) {
+func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, store storage.Provider) (provider *OpenIDConnectProvider, err error) {
 	if config == nil {
-		return provider, nil
+		return nil, nil
 	}
 
-	provider = OpenIDConnectProvider{
-		Fosite: nil,
-		Store:  NewOpenIDConnectStore(config, storageProvider),
+	provider = &OpenIDConnectProvider{
+		JSONWriter: herodot.NewJSONWriter(nil),
+		Store:      NewOpenIDConnectStore(config, store),
 	}
 
 	cconfig := &compose.Config{
@@ -35,32 +38,34 @@ func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, storage
 		EnablePKCEPlainChallengeMethod: config.EnablePKCEPlainChallenge,
 	}
 
-	keyManager, err := NewKeyManagerWithConfiguration(config)
-	if err != nil {
-		return provider, err
+	if provider.KeyManager, err = NewKeyManagerWithConfiguration(config); err != nil {
+		return nil, err
 	}
 
-	provider.KeyManager = keyManager
-
-	key, err := provider.KeyManager.GetActivePrivateKey()
-	if err != nil {
-		return provider, err
-	}
+	jwtStrategy := provider.KeyManager.Strategy()
 
 	strategy := &compose.CommonStrategy{
-		CoreStrategy: compose.NewOAuth2HMACStrategy(
-			cconfig,
-			[]byte(utils.HashSHA256FromString(config.HMACSecret)),
-			nil,
-		),
-		OpenIDConnectTokenStrategy: compose.NewOpenIDConnectStrategy(
-			cconfig,
-			key,
-		),
-		JWTStrategy: provider.KeyManager.Strategy(),
+		CoreStrategy: &oauth2.HMACSHAStrategy{
+			Enigma: &hmac.HMACStrategy{
+				GlobalSecret:         []byte(utils.HashSHA256FromString(config.HMACSecret)),
+				RotatedGlobalSecrets: nil,
+				TokenEntropy:         cconfig.GetTokenEntropy(),
+				Hash:                 sha512.New512_256,
+			},
+			AccessTokenLifespan:   cconfig.GetAccessTokenLifespan(),
+			AuthorizeCodeLifespan: cconfig.GetAuthorizeCodeLifespan(),
+			RefreshTokenLifespan:  cconfig.GetRefreshTokenLifespan(),
+		},
+		OpenIDConnectTokenStrategy: &openid.DefaultStrategy{
+			JWTStrategy:         jwtStrategy,
+			Expiry:              cconfig.GetIDTokenLifespan(),
+			Issuer:              cconfig.IDTokenIssuer,
+			MinParameterEntropy: cconfig.GetMinParameterEntropy(),
+		},
+		JWTStrategy: jwtStrategy,
 	}
 
-	provider.Fosite = compose.Compose(
+	provider.OAuth2Provider = compose.Compose(
 		cconfig,
 		provider.Store,
 		strategy,
@@ -89,60 +94,32 @@ func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, storage
 		compose.OAuth2PKCEFactory,
 	)
 
-	provider.discovery = NewOpenIDConnectWellKnownConfiguration(config.EnablePKCEPlainChallenge, provider.Pairwise())
-
-	provider.herodot = herodot.NewJSONWriter(nil)
+	provider.discovery = NewOpenIDConnectWellKnownConfiguration(config.EnablePKCEPlainChallenge, provider.Store.clients)
 
 	return provider, nil
 }
 
-// Pairwise returns true if this provider is configured with clients that require pairwise.
-func (p OpenIDConnectProvider) Pairwise() bool {
-	for _, c := range p.Store.clients {
-		if c.SectorIdentifier != "" {
-			return true
-		}
-	}
-
-	return false
-}
-
-// Write writes data with herodot.JSONWriter.
-func (p OpenIDConnectProvider) Write(w http.ResponseWriter, r *http.Request, e any, opts ...herodot.EncoderOptions) {
-	p.herodot.Write(w, r, e, opts...)
-}
-
-// WriteError writes an error with herodot.JSONWriter.
-func (p OpenIDConnectProvider) WriteError(w http.ResponseWriter, r *http.Request, err error, opts ...herodot.Option) {
-	p.herodot.WriteError(w, r, err, opts...)
-}
-
-// WriteErrorCode writes an error with an error code with herodot.JSONWriter.
-func (p OpenIDConnectProvider) WriteErrorCode(w http.ResponseWriter, r *http.Request, code int, err error, opts ...herodot.Option) {
-	p.herodot.WriteErrorCode(w, r, code, err, opts...)
-}
-
 // GetOAuth2WellKnownConfiguration returns the discovery document for the OAuth Configuration.
-func (p OpenIDConnectProvider) GetOAuth2WellKnownConfiguration(issuer string) OAuth2WellKnownConfiguration {
+func (p *OpenIDConnectProvider) GetOAuth2WellKnownConfiguration(issuer string) OAuth2WellKnownConfiguration {
 	options := OAuth2WellKnownConfiguration{
 		CommonDiscoveryOptions: p.discovery.CommonDiscoveryOptions,
 		OAuth2DiscoveryOptions: p.discovery.OAuth2DiscoveryOptions,
 	}
 
 	options.Issuer = issuer
-	options.JWKSURI = fmt.Sprintf("%s%s", issuer, JWKsPath)
+	options.JWKSURI = fmt.Sprintf("%s%s", issuer, EndpointPathJWKs)
 
-	options.IntrospectionEndpoint = fmt.Sprintf("%s%s", issuer, IntrospectionPath)
-	options.TokenEndpoint = fmt.Sprintf("%s%s", issuer, TokenPath)
+	options.IntrospectionEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathIntrospection)
+	options.TokenEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathToken)
 
-	options.AuthorizationEndpoint = fmt.Sprintf("%s%s", issuer, AuthorizationPath)
-	options.RevocationEndpoint = fmt.Sprintf("%s%s", issuer, RevocationPath)
+	options.AuthorizationEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathAuthorization)
+	options.RevocationEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathRevocation)
 
 	return options
 }
 
 // GetOpenIDConnectWellKnownConfiguration returns the discovery document for the OpenID Configuration.
-func (p OpenIDConnectProvider) GetOpenIDConnectWellKnownConfiguration(issuer string) OpenIDConnectWellKnownConfiguration {
+func (p *OpenIDConnectProvider) GetOpenIDConnectWellKnownConfiguration(issuer string) OpenIDConnectWellKnownConfiguration {
 	options := OpenIDConnectWellKnownConfiguration{
 		CommonDiscoveryOptions:                          p.discovery.CommonDiscoveryOptions,
 		OAuth2DiscoveryOptions:                          p.discovery.OAuth2DiscoveryOptions,
@@ -152,14 +129,14 @@ func (p OpenIDConnectProvider) GetOpenIDConnectWellKnownConfiguration(issuer str
 	}
 
 	options.Issuer = issuer
-	options.JWKSURI = fmt.Sprintf("%s%s", issuer, JWKsPath)
+	options.JWKSURI = fmt.Sprintf("%s%s", issuer, EndpointPathJWKs)
 
-	options.IntrospectionEndpoint = fmt.Sprintf("%s%s", issuer, IntrospectionPath)
-	options.TokenEndpoint = fmt.Sprintf("%s%s", issuer, TokenPath)
+	options.IntrospectionEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathIntrospection)
+	options.TokenEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathToken)
 
-	options.AuthorizationEndpoint = fmt.Sprintf("%s%s", issuer, AuthorizationPath)
-	options.RevocationEndpoint = fmt.Sprintf("%s%s", issuer, RevocationPath)
-	options.UserinfoEndpoint = fmt.Sprintf("%s%s", issuer, UserinfoPath)
+	options.AuthorizationEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathAuthorization)
+	options.RevocationEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathRevocation)
+	options.UserinfoEndpoint = fmt.Sprintf("%s%s", issuer, EndpointPathUserinfo)
 
 	return options
 }
diff --git a/internal/oidc/provider_test.go b/internal/oidc/provider_test.go
index b55c6f92a..6d0c3ecef 100644
--- a/internal/oidc/provider_test.go
+++ b/internal/oidc/provider_test.go
@@ -19,8 +19,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_NotConfigured(t *testing
 	provider, err := NewOpenIDConnectProvider(nil, nil)
 
 	assert.NoError(t, err)
-	assert.Nil(t, provider.Fosite)
-	assert.Nil(t, provider.Store)
+	assert.Nil(t, provider)
 }
 
 func TestNewOpenIDConnectProvider_ShouldEnableOptionalDiscoveryValues(t *testing.T) {
@@ -44,17 +43,15 @@ func TestNewOpenIDConnectProvider_ShouldEnableOptionalDiscoveryValues(t *testing
 
 	assert.NoError(t, err)
 
-	assert.True(t, provider.Pairwise())
-
 	disco := provider.GetOpenIDConnectWellKnownConfiguration("https://example.com")
 
 	assert.Len(t, disco.SubjectTypesSupported, 2)
-	assert.Contains(t, disco.SubjectTypesSupported, "public")
-	assert.Contains(t, disco.SubjectTypesSupported, "pairwise")
+	assert.Contains(t, disco.SubjectTypesSupported, SubjectTypePublic)
+	assert.Contains(t, disco.SubjectTypesSupported, SubjectTypePairwise)
 
 	assert.Len(t, disco.CodeChallengeMethodsSupported, 2)
-	assert.Contains(t, disco.CodeChallengeMethodsSupported, "S256")
-	assert.Contains(t, disco.CodeChallengeMethodsSupported, "S256")
+	assert.Contains(t, disco.CodeChallengeMethodsSupported, PKCEChallengeMethodSHA256)
+	assert.Contains(t, disco.CodeChallengeMethodsSupported, PKCEChallengeMethodSHA256)
 }
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GoodConfiguration(t *testing.T) {
@@ -80,10 +77,10 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GoodConfiguration(t *tes
 					"https://google.com",
 				},
 				Scopes: []string{
-					"groups",
+					ScopeGroups,
 				},
 				GrantTypes: []string{
-					"refresh_token",
+					GrantTypeRefreshToken,
 				},
 				ResponseTypes: []string{
 					"token",
@@ -116,8 +113,6 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 
 	assert.NoError(t, err)
 
-	assert.False(t, provider.Pairwise())
-
 	disco := provider.GetOpenIDConnectWellKnownConfiguration("https://example.com")
 
 	assert.Equal(t, "https://example.com", disco.Issuer)
@@ -130,7 +125,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 	assert.Equal(t, "", disco.RegistrationEndpoint)
 
 	assert.Len(t, disco.CodeChallengeMethodsSupported, 1)
-	assert.Contains(t, disco.CodeChallengeMethodsSupported, "S256")
+	assert.Contains(t, disco.CodeChallengeMethodsSupported, PKCEChallengeMethodSHA256)
 
 	assert.Len(t, disco.ScopesSupported, 5)
 	assert.Contains(t, disco.ScopesSupported, ScopeOpenID)
@@ -140,12 +135,12 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 	assert.Contains(t, disco.ScopesSupported, ScopeEmail)
 
 	assert.Len(t, disco.ResponseModesSupported, 3)
-	assert.Contains(t, disco.ResponseModesSupported, "form_post")
-	assert.Contains(t, disco.ResponseModesSupported, "query")
-	assert.Contains(t, disco.ResponseModesSupported, "fragment")
+	assert.Contains(t, disco.ResponseModesSupported, ResponseModeFormPost)
+	assert.Contains(t, disco.ResponseModesSupported, ResponseModeQuery)
+	assert.Contains(t, disco.ResponseModesSupported, ResponseModeFragment)
 
 	assert.Len(t, disco.SubjectTypesSupported, 1)
-	assert.Contains(t, disco.SubjectTypesSupported, "public")
+	assert.Contains(t, disco.SubjectTypesSupported, SubjectTypePublic)
 
 	assert.Len(t, disco.ResponseTypesSupported, 8)
 	assert.Contains(t, disco.ResponseTypesSupported, "code")
@@ -158,35 +153,35 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 	assert.Contains(t, disco.ResponseTypesSupported, "none")
 
 	assert.Len(t, disco.IDTokenSigningAlgValuesSupported, 1)
-	assert.Contains(t, disco.IDTokenSigningAlgValuesSupported, "RS256")
+	assert.Contains(t, disco.IDTokenSigningAlgValuesSupported, SigningAlgorithmRSAWithSHA256)
 
 	assert.Len(t, disco.UserinfoSigningAlgValuesSupported, 2)
-	assert.Contains(t, disco.UserinfoSigningAlgValuesSupported, "RS256")
-	assert.Contains(t, disco.UserinfoSigningAlgValuesSupported, "none")
+	assert.Contains(t, disco.UserinfoSigningAlgValuesSupported, SigningAlgorithmRSAWithSHA256)
+	assert.Contains(t, disco.UserinfoSigningAlgValuesSupported, SigningAlgorithmNone)
 
 	assert.Len(t, disco.RequestObjectSigningAlgValuesSupported, 2)
-	assert.Contains(t, disco.RequestObjectSigningAlgValuesSupported, "RS256")
-	assert.Contains(t, disco.RequestObjectSigningAlgValuesSupported, "none")
+	assert.Contains(t, disco.RequestObjectSigningAlgValuesSupported, SigningAlgorithmRSAWithSHA256)
+	assert.Contains(t, disco.RequestObjectSigningAlgValuesSupported, SigningAlgorithmNone)
 
 	assert.Len(t, disco.ClaimsSupported, 18)
-	assert.Contains(t, disco.ClaimsSupported, "amr")
-	assert.Contains(t, disco.ClaimsSupported, "aud")
-	assert.Contains(t, disco.ClaimsSupported, "azp")
-	assert.Contains(t, disco.ClaimsSupported, "client_id")
-	assert.Contains(t, disco.ClaimsSupported, "exp")
-	assert.Contains(t, disco.ClaimsSupported, "iat")
-	assert.Contains(t, disco.ClaimsSupported, "iss")
-	assert.Contains(t, disco.ClaimsSupported, "jti")
-	assert.Contains(t, disco.ClaimsSupported, "rat")
-	assert.Contains(t, disco.ClaimsSupported, "sub")
-	assert.Contains(t, disco.ClaimsSupported, "auth_time")
-	assert.Contains(t, disco.ClaimsSupported, "nonce")
-	assert.Contains(t, disco.ClaimsSupported, ClaimEmail)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAuthenticationMethodsReference)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAudience)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAuthorizedParty)
+	assert.Contains(t, disco.ClaimsSupported, ClaimClientIdentifier)
+	assert.Contains(t, disco.ClaimsSupported, ClaimExpirationTime)
+	assert.Contains(t, disco.ClaimsSupported, ClaimIssuedAt)
+	assert.Contains(t, disco.ClaimsSupported, ClaimIssuer)
+	assert.Contains(t, disco.ClaimsSupported, ClaimJWTID)
+	assert.Contains(t, disco.ClaimsSupported, ClaimRequestedAt)
+	assert.Contains(t, disco.ClaimsSupported, ClaimSubject)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAuthenticationTime)
+	assert.Contains(t, disco.ClaimsSupported, ClaimNonce)
+	assert.Contains(t, disco.ClaimsSupported, ClaimPreferredEmail)
 	assert.Contains(t, disco.ClaimsSupported, ClaimEmailVerified)
 	assert.Contains(t, disco.ClaimsSupported, ClaimEmailAlts)
 	assert.Contains(t, disco.ClaimsSupported, ClaimGroups)
 	assert.Contains(t, disco.ClaimsSupported, ClaimPreferredUsername)
-	assert.Contains(t, disco.ClaimsSupported, ClaimDisplayName)
+	assert.Contains(t, disco.ClaimsSupported, ClaimFullName)
 }
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOAuth2WellKnownConfiguration(t *testing.T) {
@@ -229,12 +224,12 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOAuth2WellKnownConfig
 	assert.Contains(t, disco.ScopesSupported, ScopeEmail)
 
 	assert.Len(t, disco.ResponseModesSupported, 3)
-	assert.Contains(t, disco.ResponseModesSupported, "form_post")
-	assert.Contains(t, disco.ResponseModesSupported, "query")
-	assert.Contains(t, disco.ResponseModesSupported, "fragment")
+	assert.Contains(t, disco.ResponseModesSupported, ResponseModeFormPost)
+	assert.Contains(t, disco.ResponseModesSupported, ResponseModeQuery)
+	assert.Contains(t, disco.ResponseModesSupported, ResponseModeFragment)
 
 	assert.Len(t, disco.SubjectTypesSupported, 1)
-	assert.Contains(t, disco.SubjectTypesSupported, "public")
+	assert.Contains(t, disco.SubjectTypesSupported, SubjectTypePublic)
 
 	assert.Len(t, disco.ResponseTypesSupported, 8)
 	assert.Contains(t, disco.ResponseTypesSupported, "code")
@@ -247,24 +242,24 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOAuth2WellKnownConfig
 	assert.Contains(t, disco.ResponseTypesSupported, "none")
 
 	assert.Len(t, disco.ClaimsSupported, 18)
-	assert.Contains(t, disco.ClaimsSupported, "amr")
-	assert.Contains(t, disco.ClaimsSupported, "aud")
-	assert.Contains(t, disco.ClaimsSupported, "azp")
-	assert.Contains(t, disco.ClaimsSupported, "client_id")
-	assert.Contains(t, disco.ClaimsSupported, "exp")
-	assert.Contains(t, disco.ClaimsSupported, "iat")
-	assert.Contains(t, disco.ClaimsSupported, "iss")
-	assert.Contains(t, disco.ClaimsSupported, "jti")
-	assert.Contains(t, disco.ClaimsSupported, "rat")
-	assert.Contains(t, disco.ClaimsSupported, "sub")
-	assert.Contains(t, disco.ClaimsSupported, "auth_time")
-	assert.Contains(t, disco.ClaimsSupported, "nonce")
-	assert.Contains(t, disco.ClaimsSupported, ClaimEmail)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAuthenticationMethodsReference)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAudience)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAuthorizedParty)
+	assert.Contains(t, disco.ClaimsSupported, ClaimClientIdentifier)
+	assert.Contains(t, disco.ClaimsSupported, ClaimExpirationTime)
+	assert.Contains(t, disco.ClaimsSupported, ClaimIssuedAt)
+	assert.Contains(t, disco.ClaimsSupported, ClaimIssuer)
+	assert.Contains(t, disco.ClaimsSupported, ClaimJWTID)
+	assert.Contains(t, disco.ClaimsSupported, ClaimRequestedAt)
+	assert.Contains(t, disco.ClaimsSupported, ClaimSubject)
+	assert.Contains(t, disco.ClaimsSupported, ClaimAuthenticationTime)
+	assert.Contains(t, disco.ClaimsSupported, ClaimNonce)
+	assert.Contains(t, disco.ClaimsSupported, ClaimPreferredEmail)
 	assert.Contains(t, disco.ClaimsSupported, ClaimEmailVerified)
 	assert.Contains(t, disco.ClaimsSupported, ClaimEmailAlts)
 	assert.Contains(t, disco.ClaimsSupported, ClaimGroups)
 	assert.Contains(t, disco.ClaimsSupported, ClaimPreferredUsername)
-	assert.Contains(t, disco.ClaimsSupported, ClaimDisplayName)
+	assert.Contains(t, disco.ClaimsSupported, ClaimFullName)
 }
 
 func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnownConfigurationWithPlainPKCE(t *testing.T) {
@@ -290,8 +285,8 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 	disco := provider.GetOpenIDConnectWellKnownConfiguration("https://example.com")
 
 	require.Len(t, disco.CodeChallengeMethodsSupported, 2)
-	assert.Equal(t, "S256", disco.CodeChallengeMethodsSupported[0])
-	assert.Equal(t, "plain", disco.CodeChallengeMethodsSupported[1])
+	assert.Equal(t, PKCEChallengeMethodSHA256, disco.CodeChallengeMethodsSupported[0])
+	assert.Equal(t, PKCEChallengeMethodPlain, disco.CodeChallengeMethodsSupported[1])
 }
 
 func mustParseRSAPrivateKey(data string) *rsa.PrivateKey {
diff --git a/internal/oidc/store.go b/internal/oidc/store.go
index af3fff7d0..1974e057f 100644
--- a/internal/oidc/store.go
+++ b/internal/oidc/store.go
@@ -18,11 +18,11 @@ import (
 	"github.com/authelia/authelia/v4/internal/storage"
 )
 
-// NewOpenIDConnectStore returns a OpenIDConnectStore when provided with a schema.OpenIDConnectConfiguration and storage.Provider.
-func NewOpenIDConnectStore(config *schema.OpenIDConnectConfiguration, provider storage.Provider) (store *OpenIDConnectStore) {
+// NewOpenIDConnectStore returns a Store when provided with a schema.OpenIDConnectConfiguration and storage.Provider.
+func NewOpenIDConnectStore(config *schema.OpenIDConnectConfiguration, provider storage.Provider) (store *Store) {
 	logger := logging.Logger()
 
-	store = &OpenIDConnectStore{
+	store = &Store{
 		provider: provider,
 		clients:  map[string]*Client{},
 	}
@@ -38,7 +38,7 @@ func NewOpenIDConnectStore(config *schema.OpenIDConnectConfiguration, provider s
 }
 
 // GenerateOpaqueUserID either retrieves or creates an opaque user id from a sectorID and username.
-func (s *OpenIDConnectStore) GenerateOpaqueUserID(ctx context.Context, sectorID, username string) (opaqueID *model.UserOpaqueIdentifier, err error) {
+func (s *Store) GenerateOpaqueUserID(ctx context.Context, sectorID, username string) (opaqueID *model.UserOpaqueIdentifier, err error) {
 	if opaqueID, err = s.provider.LoadUserOpaqueIdentifierBySignature(ctx, "openid", sectorID, username); err != nil {
 		return nil, err
 	} else if opaqueID == nil {
@@ -55,7 +55,7 @@ func (s *OpenIDConnectStore) GenerateOpaqueUserID(ctx context.Context, sectorID,
 }
 
 // GetSubject returns a subject UUID for a username. If it exists, it returns the existing one, otherwise it creates and saves it.
-func (s *OpenIDConnectStore) GetSubject(ctx context.Context, sectorID, username string) (subject uuid.UUID, err error) {
+func (s *Store) GetSubject(ctx context.Context, sectorID, username string) (subject uuid.UUID, err error) {
 	var opaqueID *model.UserOpaqueIdentifier
 
 	if opaqueID, err = s.GenerateOpaqueUserID(ctx, sectorID, username); err != nil {
@@ -66,7 +66,7 @@ func (s *OpenIDConnectStore) GetSubject(ctx context.Context, sectorID, username
 }
 
 // GetClientPolicy retrieves the policy from the client with the matching provided id.
-func (s *OpenIDConnectStore) GetClientPolicy(id string) (level authorization.Level) {
+func (s *Store) GetClientPolicy(id string) (level authorization.Level) {
 	client, err := s.GetFullClient(id)
 	if err != nil {
 		return authorization.TwoFactor
@@ -76,7 +76,7 @@ func (s *OpenIDConnectStore) GetClientPolicy(id string) (level authorization.Lev
 }
 
 // GetFullClient returns a fosite.Client asserted as an Client matching the provided id.
-func (s *OpenIDConnectStore) GetFullClient(id string) (client *Client, err error) {
+func (s *Store) GetFullClient(id string) (client *Client, err error) {
 	client, ok := s.clients[id]
 	if !ok {
 		return nil, fosite.ErrNotFound
@@ -86,7 +86,7 @@ func (s *OpenIDConnectStore) GetFullClient(id string) (client *Client, err error
 }
 
 // IsValidClientID returns true if the provided id exists in the OpenIDConnectProvider.Clients map.
-func (s *OpenIDConnectStore) IsValidClientID(id string) (valid bool) {
+func (s *Store) IsValidClientID(id string) (valid bool) {
 	_, err := s.GetFullClient(id)
 
 	return err == nil
@@ -94,31 +94,31 @@ func (s *OpenIDConnectStore) IsValidClientID(id string) (valid bool) {
 
 // BeginTX starts a transaction.
 // This implements a portion of fosite storage.Transactional interface.
-func (s *OpenIDConnectStore) BeginTX(ctx context.Context) (c context.Context, err error) {
+func (s *Store) BeginTX(ctx context.Context) (c context.Context, err error) {
 	return s.provider.BeginTX(ctx)
 }
 
 // Commit completes a transaction.
 // This implements a portion of fosite storage.Transactional interface.
-func (s *OpenIDConnectStore) Commit(ctx context.Context) (err error) {
+func (s *Store) Commit(ctx context.Context) (err error) {
 	return s.provider.Commit(ctx)
 }
 
 // Rollback rolls a transaction back.
 // This implements a portion of fosite storage.Transactional interface.
-func (s *OpenIDConnectStore) Rollback(ctx context.Context) (err error) {
+func (s *Store) Rollback(ctx context.Context) (err error) {
 	return s.provider.Rollback(ctx)
 }
 
 // GetClient loads the client by its ID or returns an error if the client does not exist or another error occurred.
 // This implements a portion of fosite.ClientManager.
-func (s *OpenIDConnectStore) GetClient(_ context.Context, id string) (client fosite.Client, err error) {
+func (s *Store) GetClient(_ context.Context, id string) (client fosite.Client, err error) {
 	return s.GetFullClient(id)
 }
 
 // ClientAssertionJWTValid returns an error if the JTI is known or the DB check failed and nil if the JTI is not known.
 // This implements a portion of fosite.ClientManager.
-func (s *OpenIDConnectStore) ClientAssertionJWTValid(ctx context.Context, jti string) (err error) {
+func (s *Store) ClientAssertionJWTValid(ctx context.Context, jti string) (err error) {
 	signature := fmt.Sprintf("%x", sha256.Sum256([]byte(jti)))
 
 	blacklistedJTI, err := s.provider.LoadOAuth2BlacklistedJTI(ctx, signature)
@@ -138,7 +138,7 @@ func (s *OpenIDConnectStore) ClientAssertionJWTValid(ctx context.Context, jti st
 // SetClientAssertionJWT marks a JTI as known for the given expiry time. Before inserting the new JTI, it will clean
 // up any existing JTIs that have expired as those tokens can not be replayed due to the expiry.
 // This implements a portion of fosite.ClientManager.
-func (s *OpenIDConnectStore) SetClientAssertionJWT(ctx context.Context, jti string, exp time.Time) (err error) {
+func (s *Store) SetClientAssertionJWT(ctx context.Context, jti string, exp time.Time) (err error) {
 	blacklistedJTI := model.NewOAuth2BlacklistedJTI(jti, exp)
 
 	return s.provider.SaveOAuth2BlacklistedJTI(ctx, blacklistedJTI)
@@ -146,7 +146,7 @@ func (s *OpenIDConnectStore) SetClientAssertionJWT(ctx context.Context, jti stri
 
 // CreateAuthorizeCodeSession stores the authorization request for a given authorization code.
 // This implements a portion of oauth2.AuthorizeCodeStorage.
-func (s *OpenIDConnectStore) CreateAuthorizeCodeSession(ctx context.Context, code string, request fosite.Requester) (err error) {
+func (s *Store) CreateAuthorizeCodeSession(ctx context.Context, code string, request fosite.Requester) (err error) {
 	return s.saveSession(ctx, storage.OAuth2SessionTypeAuthorizeCode, code, request)
 }
 
@@ -154,7 +154,7 @@ func (s *OpenIDConnectStore) CreateAuthorizeCodeSession(ctx context.Context, cod
 // code should be set to invalid and consecutive requests to GetAuthorizeCodeSession should return the
 // ErrInvalidatedAuthorizeCode error.
 // This implements a portion of oauth2.AuthorizeCodeStorage.
-func (s *OpenIDConnectStore) InvalidateAuthorizeCodeSession(ctx context.Context, code string) (err error) {
+func (s *Store) InvalidateAuthorizeCodeSession(ctx context.Context, code string) (err error) {
 	return s.provider.DeactivateOAuth2Session(ctx, storage.OAuth2SessionTypeAuthorizeCode, code)
 }
 
@@ -163,45 +163,45 @@ func (s *OpenIDConnectStore) InvalidateAuthorizeCodeSession(ctx context.Context,
 // method should return the ErrInvalidatedAuthorizeCode error.
 // Make sure to also return the fosite.Requester value when returning the fosite.ErrInvalidatedAuthorizeCode error!
 // This implements a portion of oauth2.AuthorizeCodeStorage.
-func (s *OpenIDConnectStore) GetAuthorizeCodeSession(ctx context.Context, code string, session fosite.Session) (request fosite.Requester, err error) {
+func (s *Store) GetAuthorizeCodeSession(ctx context.Context, code string, session fosite.Session) (request fosite.Requester, err error) {
 	// TODO: Implement the fosite.ErrInvalidatedAuthorizeCode error above. This requires splitting the invalidated sessions and deleted sessions.
 	return s.loadSessionBySignature(ctx, storage.OAuth2SessionTypeAuthorizeCode, code, session)
 }
 
 // CreateAccessTokenSession stores the authorization request for a given access token.
 // This implements a portion of oauth2.AccessTokenStorage.
-func (s *OpenIDConnectStore) CreateAccessTokenSession(ctx context.Context, signature string, request fosite.Requester) (err error) {
+func (s *Store) CreateAccessTokenSession(ctx context.Context, signature string, request fosite.Requester) (err error) {
 	return s.saveSession(ctx, storage.OAuth2SessionTypeAccessToken, signature, request)
 }
 
 // DeleteAccessTokenSession marks an access token session as deleted.
 // This implements a portion of oauth2.AccessTokenStorage.
-func (s *OpenIDConnectStore) DeleteAccessTokenSession(ctx context.Context, signature string) (err error) {
+func (s *Store) DeleteAccessTokenSession(ctx context.Context, signature string) (err error) {
 	return s.revokeSessionBySignature(ctx, storage.OAuth2SessionTypeAccessToken, signature)
 }
 
 // RevokeAccessToken revokes an access token as specified in: https://tools.ietf.org/html/rfc7009#section-2.1
 // If the token passed to the request is an access token, the server MAY revoke the respective refresh token as well.
 // This implements a portion of oauth2.TokenRevocationStorage.
-func (s *OpenIDConnectStore) RevokeAccessToken(ctx context.Context, requestID string) (err error) {
+func (s *Store) RevokeAccessToken(ctx context.Context, requestID string) (err error) {
 	return s.revokeSessionByRequestID(ctx, storage.OAuth2SessionTypeAccessToken, requestID)
 }
 
 // GetAccessTokenSession gets the authorization request for a given access token.
 // This implements a portion of oauth2.AccessTokenStorage.
-func (s *OpenIDConnectStore) GetAccessTokenSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error) {
+func (s *Store) GetAccessTokenSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error) {
 	return s.loadSessionBySignature(ctx, storage.OAuth2SessionTypeAccessToken, signature, session)
 }
 
 // CreateRefreshTokenSession stores the authorization request for a given refresh token.
 // This implements a portion of oauth2.RefreshTokenStorage.
-func (s *OpenIDConnectStore) CreateRefreshTokenSession(ctx context.Context, signature string, request fosite.Requester) (err error) {
+func (s *Store) CreateRefreshTokenSession(ctx context.Context, signature string, request fosite.Requester) (err error) {
 	return s.saveSession(ctx, storage.OAuth2SessionTypeRefreshToken, signature, request)
 }
 
 // DeleteRefreshTokenSession marks the authorization request for a given refresh token as deleted.
 // This implements a portion of oauth2.RefreshTokenStorage.
-func (s *OpenIDConnectStore) DeleteRefreshTokenSession(ctx context.Context, signature string) (err error) {
+func (s *Store) DeleteRefreshTokenSession(ctx context.Context, signature string) (err error) {
 	return s.revokeSessionBySignature(ctx, storage.OAuth2SessionTypeRefreshToken, signature)
 }
 
@@ -209,51 +209,51 @@ func (s *OpenIDConnectStore) DeleteRefreshTokenSession(ctx context.Context, sign
 // If the particular token is a refresh token and the authorization server supports the revocation of access tokens,
 // then the authorization server SHOULD also invalidate all access tokens based on the same authorization grant (see Implementation Note).
 // This implements a portion of oauth2.TokenRevocationStorage.
-func (s *OpenIDConnectStore) RevokeRefreshToken(ctx context.Context, requestID string) (err error) {
+func (s *Store) RevokeRefreshToken(ctx context.Context, requestID string) (err error) {
 	return s.provider.DeactivateOAuth2SessionByRequestID(ctx, storage.OAuth2SessionTypeRefreshToken, requestID)
 }
 
 // RevokeRefreshTokenMaybeGracePeriod revokes an access token as specified in: https://tools.ietf.org/html/rfc7009#section-2.1
 // If the token passed to the request is an access token, the server MAY revoke the respective refresh token as well.
 // This implements a portion of oauth2.TokenRevocationStorage.
-func (s *OpenIDConnectStore) RevokeRefreshTokenMaybeGracePeriod(ctx context.Context, requestID string, signature string) (err error) {
+func (s *Store) RevokeRefreshTokenMaybeGracePeriod(ctx context.Context, requestID string, signature string) (err error) {
 	return s.RevokeRefreshToken(ctx, requestID)
 }
 
 // GetRefreshTokenSession gets the authorization request for a given refresh token.
 // This implements a portion of oauth2.RefreshTokenStorage.
-func (s *OpenIDConnectStore) GetRefreshTokenSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error) {
+func (s *Store) GetRefreshTokenSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error) {
 	return s.loadSessionBySignature(ctx, storage.OAuth2SessionTypeRefreshToken, signature, session)
 }
 
 // CreatePKCERequestSession stores the authorization request for a given PKCE request.
 // This implements a portion of pkce.PKCERequestStorage.
-func (s *OpenIDConnectStore) CreatePKCERequestSession(ctx context.Context, signature string, request fosite.Requester) (err error) {
+func (s *Store) CreatePKCERequestSession(ctx context.Context, signature string, request fosite.Requester) (err error) {
 	return s.saveSession(ctx, storage.OAuth2SessionTypePKCEChallenge, signature, request)
 }
 
 // DeletePKCERequestSession marks the authorization request for a given PKCE request as deleted.
 // This implements a portion of pkce.PKCERequestStorage.
-func (s *OpenIDConnectStore) DeletePKCERequestSession(ctx context.Context, signature string) (err error) {
+func (s *Store) DeletePKCERequestSession(ctx context.Context, signature string) (err error) {
 	return s.revokeSessionBySignature(ctx, storage.OAuth2SessionTypeAccessToken, signature)
 }
 
 // GetPKCERequestSession gets the authorization request for a given PKCE request.
 // This implements a portion of pkce.PKCERequestStorage.
-func (s *OpenIDConnectStore) GetPKCERequestSession(ctx context.Context, signature string, session fosite.Session) (requester fosite.Requester, err error) {
+func (s *Store) GetPKCERequestSession(ctx context.Context, signature string, session fosite.Session) (requester fosite.Requester, err error) {
 	return s.loadSessionBySignature(ctx, storage.OAuth2SessionTypePKCEChallenge, signature, session)
 }
 
 // CreateOpenIDConnectSession creates an open id connect session for a given authorize code.
 // This is relevant for explicit open id connect flow.
 // This implements a portion of openid.OpenIDConnectRequestStorage.
-func (s *OpenIDConnectStore) CreateOpenIDConnectSession(ctx context.Context, authorizeCode string, request fosite.Requester) (err error) {
+func (s *Store) CreateOpenIDConnectSession(ctx context.Context, authorizeCode string, request fosite.Requester) (err error) {
 	return s.saveSession(ctx, storage.OAuth2SessionTypeOpenIDConnect, authorizeCode, request)
 }
 
 // DeleteOpenIDConnectSession just implements the method required by fosite even though it's unused.
 // This implements a portion of openid.OpenIDConnectRequestStorage.
-func (s *OpenIDConnectStore) DeleteOpenIDConnectSession(ctx context.Context, authorizeCode string) (err error) {
+func (s *Store) DeleteOpenIDConnectSession(ctx context.Context, authorizeCode string) (err error) {
 	return s.revokeSessionBySignature(ctx, storage.OAuth2SessionTypeAccessToken, authorizeCode)
 }
 
@@ -262,12 +262,12 @@ func (s *OpenIDConnectStore) DeleteOpenIDConnectSession(ctx context.Context, aut
 // - ErrNoSessionFound if no session was found
 // - or an arbitrary error if an error occurred.
 // This implements a portion of openid.OpenIDConnectRequestStorage.
-func (s *OpenIDConnectStore) GetOpenIDConnectSession(ctx context.Context, authorizeCode string, request fosite.Requester) (r fosite.Requester, err error) {
+func (s *Store) GetOpenIDConnectSession(ctx context.Context, authorizeCode string, request fosite.Requester) (r fosite.Requester, err error) {
 	return s.loadSessionBySignature(ctx, storage.OAuth2SessionTypeOpenIDConnect, authorizeCode, request.GetSession())
 }
 
 // IsJWTUsed implements an interface required for RFC7523.
-func (s *OpenIDConnectStore) IsJWTUsed(ctx context.Context, jti string) (used bool, err error) {
+func (s *Store) IsJWTUsed(ctx context.Context, jti string) (used bool, err error) {
 	if err = s.ClientAssertionJWTValid(ctx, jti); err != nil {
 		return true, err
 	}
@@ -276,11 +276,11 @@ func (s *OpenIDConnectStore) IsJWTUsed(ctx context.Context, jti string) (used bo
 }
 
 // MarkJWTUsedForTime implements an interface required for rfc7523.RFC7523KeyStorage.
-func (s *OpenIDConnectStore) MarkJWTUsedForTime(ctx context.Context, jti string, exp time.Time) (err error) {
+func (s *Store) MarkJWTUsedForTime(ctx context.Context, jti string, exp time.Time) (err error) {
 	return s.SetClientAssertionJWT(ctx, jti, exp)
 }
 
-func (s *OpenIDConnectStore) loadSessionBySignature(ctx context.Context, sessionType storage.OAuth2SessionType, signature string, session fosite.Session) (r fosite.Requester, err error) {
+func (s *Store) loadSessionBySignature(ctx context.Context, sessionType storage.OAuth2SessionType, signature string, session fosite.Session) (r fosite.Requester, err error) {
 	var (
 		sessionModel *model.OAuth2Session
 	)
@@ -306,7 +306,7 @@ func (s *OpenIDConnectStore) loadSessionBySignature(ctx context.Context, session
 	return r, nil
 }
 
-func (s *OpenIDConnectStore) saveSession(ctx context.Context, sessionType storage.OAuth2SessionType, signature string, r fosite.Requester) (err error) {
+func (s *Store) saveSession(ctx context.Context, sessionType storage.OAuth2SessionType, signature string, r fosite.Requester) (err error) {
 	var session *model.OAuth2Session
 
 	if session, err = model.NewOAuth2SessionFromRequest(signature, r); err != nil {
@@ -316,11 +316,11 @@ func (s *OpenIDConnectStore) saveSession(ctx context.Context, sessionType storag
 	return s.provider.SaveOAuth2Session(ctx, sessionType, *session)
 }
 
-func (s *OpenIDConnectStore) revokeSessionBySignature(ctx context.Context, sessionType storage.OAuth2SessionType, signature string) (err error) {
+func (s *Store) revokeSessionBySignature(ctx context.Context, sessionType storage.OAuth2SessionType, signature string) (err error) {
 	return s.provider.RevokeOAuth2Session(ctx, sessionType, signature)
 }
 
-func (s *OpenIDConnectStore) revokeSessionByRequestID(ctx context.Context, sessionType storage.OAuth2SessionType, requestID string) (err error) {
+func (s *Store) revokeSessionByRequestID(ctx context.Context, sessionType storage.OAuth2SessionType, requestID string) (err error) {
 	if err = s.provider.RevokeOAuth2SessionByRequestID(ctx, sessionType, requestID); err != nil {
 		switch {
 		case errors.Is(err, sql.ErrNoRows):
diff --git a/internal/oidc/store_test.go b/internal/oidc/store_test.go
index 504af5e07..08cd7ae25 100644
--- a/internal/oidc/store_test.go
+++ b/internal/oidc/store_test.go
@@ -20,14 +20,14 @@ func TestOpenIDConnectStore_GetClientPolicy(t *testing.T) {
 				ID:          "myclient",
 				Description: "myclient desc",
 				Policy:      "one_factor",
-				Scopes:      []string{"openid", "profile"},
+				Scopes:      []string{ScopeOpenID, ScopeProfile},
 				Secret:      "mysecret",
 			},
 			{
 				ID:          "myotherclient",
 				Description: "myclient desc",
 				Policy:      "two_factor",
-				Scopes:      []string{"openid", "profile"},
+				Scopes:      []string{ScopeOpenID, ScopeProfile},
 				Secret:      "mysecret",
 			},
 		},
@@ -52,7 +52,7 @@ func TestOpenIDConnectStore_GetInternalClient(t *testing.T) {
 				ID:          "myclient",
 				Description: "myclient desc",
 				Policy:      "one_factor",
-				Scopes:      []string{"openid", "profile"},
+				Scopes:      []string{ScopeOpenID, ScopeProfile},
 				Secret:      "mysecret",
 			},
 		},
@@ -73,7 +73,7 @@ func TestOpenIDConnectStore_GetInternalClient_ValidClient(t *testing.T) {
 		ID:          "myclient",
 		Description: "myclient desc",
 		Policy:      "one_factor",
-		Scopes:      []string{"openid", "profile"},
+		Scopes:      []string{ScopeOpenID, ScopeProfile},
 		Secret:      "mysecret",
 	}
 
@@ -101,7 +101,7 @@ func TestOpenIDConnectStore_GetInternalClient_InvalidClient(t *testing.T) {
 		ID:          "myclient",
 		Description: "myclient desc",
 		Policy:      "one_factor",
-		Scopes:      []string{"openid", "profile"},
+		Scopes:      []string{ScopeOpenID, ScopeProfile},
 		Secret:      "mysecret",
 	}
 
@@ -125,7 +125,7 @@ func TestOpenIDConnectStore_IsValidClientID(t *testing.T) {
 				ID:          "myclient",
 				Description: "myclient desc",
 				Policy:      "one_factor",
-				Scopes:      []string{"openid", "profile"},
+				Scopes:      []string{ScopeOpenID, ScopeProfile},
 				Secret:      "mysecret",
 			},
 		},
diff --git a/internal/oidc/types.go b/internal/oidc/types.go
index 411a6fd94..d48b023bf 100644
--- a/internal/oidc/types.go
+++ b/internal/oidc/types.go
@@ -1,13 +1,14 @@
 package oidc
 
 import (
+	"net/url"
 	"time"
 
 	"github.com/ory/fosite"
 	"github.com/ory/fosite/handler/openid"
 	"github.com/ory/fosite/token/jwt"
 	"github.com/ory/herodot"
-	"gopkg.in/square/go-jose.v2"
+	jose "gopkg.in/square/go-jose.v2"
 
 	"github.com/authelia/authelia/v4/internal/authorization"
 	"github.com/authelia/authelia/v4/internal/model"
@@ -31,7 +32,7 @@ func NewSession() (session *model.OpenIDSession) {
 }
 
 // NewSessionWithAuthorizeRequest uses details from an AuthorizeRequester to generate an OpenIDSession.
-func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string, extra map[string]any,
+func NewSessionWithAuthorizeRequest(issuer *url.URL, kid, username string, amr []string, extra map[string]any,
 	authTime time.Time, consent *model.OAuth2ConsentSession, requester fosite.AuthorizeRequester) (session *model.OpenIDSession) {
 	if extra == nil {
 		extra = map[string]any{}
@@ -41,11 +42,11 @@ func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string,
 		DefaultSession: &openid.DefaultSession{
 			Claims: &jwt.IDTokenClaims{
 				Subject:     consent.Subject.UUID.String(),
-				Issuer:      issuer,
+				Issuer:      issuer.String(),
 				AuthTime:    authTime,
 				RequestedAt: consent.RequestedAt,
 				IssuedAt:    time.Now(),
-				Nonce:       requester.GetRequestForm().Get("nonce"),
+				Nonce:       requester.GetRequestForm().Get(ClaimNonce),
 				Audience:    requester.GetGrantedAudience(),
 				Extra:       extra,
 
@@ -53,7 +54,7 @@ func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string,
 			},
 			Headers: &jwt.Headers{
 				Extra: map[string]any{
-					"kid": kid,
+					JWTHeaderKeyIdentifier: kid,
 				},
 			},
 			Subject:  consent.Subject.UUID.String(),
@@ -69,29 +70,29 @@ func NewSessionWithAuthorizeRequest(issuer, kid, username string, amr []string,
 		session.Claims.Audience = append(session.Claims.Audience, requester.GetClient().GetID())
 	}
 
-	session.Claims.Add("azp", session.ClientID)
-	session.Claims.Add("client_id", session.ClientID)
+	session.Claims.Add(ClaimAuthorizedParty, session.ClientID)
+	session.Claims.Add(ClaimClientIdentifier, session.ClientID)
 
 	return session
 }
 
 // OpenIDConnectProvider for OpenID Connect.
 type OpenIDConnectProvider struct {
-	Fosite     fosite.OAuth2Provider
-	Store      *OpenIDConnectStore
-	KeyManager *KeyManager
+	fosite.OAuth2Provider
+	*herodot.JSONWriter
+	*Store
 
-	herodot *herodot.JSONWriter
+	KeyManager *KeyManager
 
 	discovery OpenIDConnectWellKnownConfiguration
 }
 
-// OpenIDConnectStore is Authelia's internal representation of the fosite.Storage interface. It maps the following
+// Store is Authelia's internal representation of the fosite.Storage interface. It maps the following
 // interfaces to the storage.Provider interface:
 // fosite.Storage, fosite.ClientManager, storage.Transactional, oauth2.AuthorizeCodeStorage, oauth2.AccessTokenStorage,
 // oauth2.RefreshTokenStorage, oauth2.TokenRevocationStorage, pkce.PKCERequestStorage,
 // openid.OpenIDConnectRequestStorage, and partially implements rfc7523.RFC7523KeyStorage.
-type OpenIDConnectStore struct {
+type Store struct {
 	provider storage.Provider
 	clients  map[string]*Client
 }
@@ -115,7 +116,63 @@ type Client struct {
 
 	Policy authorization.Level
 
-	PreConfiguredConsentDuration *time.Duration
+	Consent ClientConsent
+}
+
+// NewClientConsent converts the schema.OpenIDConnectClientConsentConfig into a oidc.ClientConsent.
+func NewClientConsent(mode string, duration *time.Duration) ClientConsent {
+	switch mode {
+	case ClientConsentModeImplicit.String():
+		return ClientConsent{Mode: ClientConsentModeImplicit}
+	case ClientConsentModePreConfigured.String():
+		return ClientConsent{Mode: ClientConsentModePreConfigured, Duration: *duration}
+	case ClientConsentModeExplicit.String():
+		return ClientConsent{Mode: ClientConsentModeExplicit}
+	default:
+		return ClientConsent{Mode: ClientConsentModeExplicit}
+	}
+}
+
+// ClientConsent is the consent configuration for a client.
+type ClientConsent struct {
+	Mode     ClientConsentMode
+	Duration time.Duration
+}
+
+// String returns the string representation of the ClientConsentMode.
+func (c ClientConsent) String() string {
+	return c.Mode.String()
+}
+
+// ClientConsentMode represents the consent mode for a client.
+type ClientConsentMode int
+
+const (
+	// ClientConsentModeExplicit means the client does not implicitly assume consent, and does not allow pre-configured
+	// consent sessions.
+	ClientConsentModeExplicit ClientConsentMode = iota
+
+	// ClientConsentModePreConfigured means the client does not implicitly assume consent, but does allow pre-configured
+	// consent sessions.
+	ClientConsentModePreConfigured
+
+	// ClientConsentModeImplicit means the client does implicitly assume consent, and does not allow pre-configured
+	// consent sessions.
+	ClientConsentModeImplicit
+)
+
+// String returns the string representation of the ClientConsentMode.
+func (c ClientConsentMode) String() string {
+	switch c {
+	case ClientConsentModeExplicit:
+		return explicit
+	case ClientConsentModeImplicit:
+		return implicit
+	case ClientConsentModePreConfigured:
+		return preconfigured
+	default:
+		return ""
+	}
 }
 
 // KeyManager keeps track of all of the active/inactive rsa keys and provides them to services requiring them.
@@ -139,8 +196,8 @@ type ConsentGetResponseBody struct {
 
 // ConsentPostRequestBody schema of the request body of the consent POST endpoint.
 type ConsentPostRequestBody struct {
+	ConsentID    string `json:"id"`
 	ClientID     string `json:"client_id"`
-	ConsentID    string `json:"consent_id"`
 	Consent      bool   `json:"consent"`
 	PreConfigure bool   `json:"pre_configure"`
 }
diff --git a/internal/oidc/types_test.go b/internal/oidc/types_test.go
index 04e4aec8f..b84461a07 100644
--- a/internal/oidc/types_test.go
+++ b/internal/oidc/types_test.go
@@ -34,7 +34,7 @@ func TestNewSessionWithAuthorizeRequest(t *testing.T) {
 
 	formValues := url.Values{}
 
-	formValues.Set("nonce", "abc123xyzauthelia")
+	formValues.Set(ClaimNonce, "abc123xyzauthelia")
 
 	request := &fosite.AuthorizeRequest{
 		Request: fosite.Request{
@@ -45,7 +45,7 @@ func TestNewSessionWithAuthorizeRequest(t *testing.T) {
 	}
 
 	extra := map[string]any{
-		"preferred_username": "john",
+		ClaimPreferredUsername: "john",
 	}
 
 	requested := time.Unix(1647332518, 0)
@@ -59,7 +59,7 @@ func TestNewSessionWithAuthorizeRequest(t *testing.T) {
 		Subject:     uuid.NullUUID{UUID: subject, Valid: true},
 	}
 
-	session := NewSessionWithAuthorizeRequest(issuer, "primary", "john", amr, extra, authAt, consent, request)
+	session := NewSessionWithAuthorizeRequest(MustParseRequestURI(issuer), "primary", "john", amr, extra, authAt, consent, request)
 
 	require.NotNil(t, session)
 	require.NotNil(t, session.Extra)
@@ -80,21 +80,27 @@ func TestNewSessionWithAuthorizeRequest(t *testing.T) {
 	assert.Equal(t, authAt, session.Claims.AuthTime)
 	assert.Equal(t, requested, session.Claims.RequestedAt)
 	assert.Equal(t, issuer, session.Claims.Issuer)
-	assert.Equal(t, "john", session.Claims.Extra["preferred_username"])
+	assert.Equal(t, "john", session.Claims.Extra[ClaimPreferredUsername])
 
-	assert.Equal(t, "primary", session.Headers.Get("kid"))
-
-	require.Contains(t, session.Claims.Extra, "preferred_username")
+	assert.Equal(t, "primary", session.Headers.Get(JWTHeaderKeyIdentifier))
 
 	consent = &model.OAuth2ConsentSession{
 		ChallengeID: uuid.New(),
 		RequestedAt: requested,
 	}
 
-	session = NewSessionWithAuthorizeRequest(issuer, "primary", "john", nil, nil, authAt, consent, request)
+	session = NewSessionWithAuthorizeRequest(MustParseRequestURI(issuer), "primary", "john", nil, nil, authAt, consent, request)
 
 	require.NotNil(t, session)
 	require.NotNil(t, session.Claims)
 	assert.NotNil(t, session.Claims.Extra)
 	assert.Nil(t, session.Claims.AuthenticationMethodsReferences)
 }
+
+func MustParseRequestURI(input string) *url.URL {
+	if requestURI, err := url.ParseRequestURI(input); err != nil {
+		panic(err)
+	} else {
+		return requestURI
+	}
+}
diff --git a/internal/server/handlers.go b/internal/server/handlers.go
index b9c9c95da..b899ebe06 100644
--- a/internal/server/handlers.go
+++ b/internal/server/handlers.go
@@ -237,7 +237,7 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 		r.GET("/debug/vars", expvarhandler.ExpvarHandler)
 	}
 
-	if providers.OpenIDConnect.Fosite != nil {
+	if providers.OpenIDConnect != nil {
 		middlewareOIDC := middlewares.NewBridgeBuilder(config, providers).WithPreMiddlewares(
 			middlewares.SecurityHeaders, middlewares.SecurityHeadersCSPNone, middlewares.SecurityHeadersNoStore,
 		).Build()
@@ -247,14 +247,14 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 
 		allowedOrigins := utils.StringSliceFromURLs(config.IdentityProviders.OIDC.CORS.AllowedOrigins)
 
-		r.OPTIONS(oidc.WellKnownOpenIDConfigurationPath, policyCORSPublicGET.HandleOPTIONS)
-		r.GET(oidc.WellKnownOpenIDConfigurationPath, policyCORSPublicGET.Middleware(middlewareOIDC(handlers.OpenIDConnectConfigurationWellKnownGET)))
+		r.OPTIONS(oidc.EndpointPathWellKnownOpenIDConfiguration, policyCORSPublicGET.HandleOPTIONS)
+		r.GET(oidc.EndpointPathWellKnownOpenIDConfiguration, policyCORSPublicGET.Middleware(middlewareOIDC(handlers.OpenIDConnectConfigurationWellKnownGET)))
 
-		r.OPTIONS(oidc.WellKnownOAuthAuthorizationServerPath, policyCORSPublicGET.HandleOPTIONS)
-		r.GET(oidc.WellKnownOAuthAuthorizationServerPath, policyCORSPublicGET.Middleware(middlewareOIDC(handlers.OAuthAuthorizationServerWellKnownGET)))
+		r.OPTIONS(oidc.EndpointPathWellKnownOAuthAuthorizationServer, policyCORSPublicGET.HandleOPTIONS)
+		r.GET(oidc.EndpointPathWellKnownOAuthAuthorizationServer, policyCORSPublicGET.Middleware(middlewareOIDC(handlers.OAuthAuthorizationServerWellKnownGET)))
 
-		r.OPTIONS(oidc.JWKsPath, policyCORSPublicGET.HandleOPTIONS)
-		r.GET(oidc.JWKsPath, policyCORSPublicGET.Middleware(middlewareAPI(handlers.JSONWebKeySetGET)))
+		r.OPTIONS(oidc.EndpointPathJWKs, policyCORSPublicGET.HandleOPTIONS)
+		r.GET(oidc.EndpointPathJWKs, policyCORSPublicGET.Middleware(middlewareAPI(handlers.JSONWebKeySetGET)))
 
 		// TODO (james-d-elliott): Remove in GA. This is a legacy implementation of the above endpoint.
 		r.OPTIONS("/api/oidc/jwks", policyCORSPublicGET.HandleOPTIONS)
@@ -263,11 +263,11 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 		policyCORSAuthorization := middlewares.NewCORSPolicyBuilder().
 			WithAllowedMethods("OPTIONS", "GET").
 			WithAllowedOrigins(allowedOrigins...).
-			WithEnabled(utils.IsStringInSlice(oidc.AuthorizationEndpoint, config.IdentityProviders.OIDC.CORS.Endpoints)).
+			WithEnabled(utils.IsStringInSlice(oidc.EndpointAuthorization, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
 
-		r.OPTIONS(oidc.AuthorizationPath, policyCORSAuthorization.HandleOnlyOPTIONS)
-		r.GET(oidc.AuthorizationPath, middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorizationGET)))
+		r.OPTIONS(oidc.EndpointPathAuthorization, policyCORSAuthorization.HandleOnlyOPTIONS)
+		r.GET(oidc.EndpointPathAuthorization, middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorizationGET)))
 
 		// TODO (james-d-elliott): Remove in GA. This is a legacy endpoint.
 		r.OPTIONS("/api/oidc/authorize", policyCORSAuthorization.HandleOnlyOPTIONS)
@@ -277,32 +277,32 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 			WithAllowCredentials(true).
 			WithAllowedMethods("OPTIONS", "POST").
 			WithAllowedOrigins(allowedOrigins...).
-			WithEnabled(utils.IsStringInSlice(oidc.TokenEndpoint, config.IdentityProviders.OIDC.CORS.Endpoints)).
+			WithEnabled(utils.IsStringInSlice(oidc.EndpointToken, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
 
-		r.OPTIONS(oidc.TokenPath, policyCORSToken.HandleOPTIONS)
-		r.POST(oidc.TokenPath, policyCORSToken.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectTokenPOST))))
+		r.OPTIONS(oidc.EndpointPathToken, policyCORSToken.HandleOPTIONS)
+		r.POST(oidc.EndpointPathToken, policyCORSToken.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectTokenPOST))))
 
 		policyCORSUserinfo := middlewares.NewCORSPolicyBuilder().
 			WithAllowCredentials(true).
 			WithAllowedMethods("OPTIONS", "GET", "POST").
 			WithAllowedOrigins(allowedOrigins...).
-			WithEnabled(utils.IsStringInSlice(oidc.UserinfoEndpoint, config.IdentityProviders.OIDC.CORS.Endpoints)).
+			WithEnabled(utils.IsStringInSlice(oidc.EndpointUserinfo, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
 
-		r.OPTIONS(oidc.UserinfoPath, policyCORSUserinfo.HandleOPTIONS)
-		r.GET(oidc.UserinfoPath, policyCORSUserinfo.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectUserinfo))))
-		r.POST(oidc.UserinfoPath, policyCORSUserinfo.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectUserinfo))))
+		r.OPTIONS(oidc.EndpointPathUserinfo, policyCORSUserinfo.HandleOPTIONS)
+		r.GET(oidc.EndpointPathUserinfo, policyCORSUserinfo.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectUserinfo))))
+		r.POST(oidc.EndpointPathUserinfo, policyCORSUserinfo.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectUserinfo))))
 
 		policyCORSIntrospection := middlewares.NewCORSPolicyBuilder().
 			WithAllowCredentials(true).
 			WithAllowedMethods("OPTIONS", "POST").
 			WithAllowedOrigins(allowedOrigins...).
-			WithEnabled(utils.IsStringInSlice(oidc.IntrospectionEndpoint, config.IdentityProviders.OIDC.CORS.Endpoints)).
+			WithEnabled(utils.IsStringInSlice(oidc.EndpointIntrospection, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
 
-		r.OPTIONS(oidc.IntrospectionPath, policyCORSIntrospection.HandleOPTIONS)
-		r.POST(oidc.IntrospectionPath, policyCORSIntrospection.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OAuthIntrospectionPOST))))
+		r.OPTIONS(oidc.EndpointPathIntrospection, policyCORSIntrospection.HandleOPTIONS)
+		r.POST(oidc.EndpointPathIntrospection, policyCORSIntrospection.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OAuthIntrospectionPOST))))
 
 		// TODO (james-d-elliott): Remove in GA. This is a legacy implementation of the above endpoint.
 		r.OPTIONS("/api/oidc/introspect", policyCORSIntrospection.HandleOPTIONS)
@@ -312,11 +312,11 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 			WithAllowCredentials(true).
 			WithAllowedMethods("OPTIONS", "POST").
 			WithAllowedOrigins(allowedOrigins...).
-			WithEnabled(utils.IsStringInSlice(oidc.RevocationEndpoint, config.IdentityProviders.OIDC.CORS.Endpoints)).
+			WithEnabled(utils.IsStringInSlice(oidc.EndpointRevocation, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
 
-		r.OPTIONS(oidc.RevocationPath, policyCORSRevocation.HandleOPTIONS)
-		r.POST(oidc.RevocationPath, policyCORSRevocation.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OAuthRevocationPOST))))
+		r.OPTIONS(oidc.EndpointPathRevocation, policyCORSRevocation.HandleOPTIONS)
+		r.POST(oidc.EndpointPathRevocation, policyCORSRevocation.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OAuthRevocationPOST))))
 
 		// TODO (james-d-elliott): Remove in GA. This is a legacy implementation of the above endpoint.
 		r.OPTIONS("/api/oidc/revoke", policyCORSRevocation.HandleOPTIONS)
diff --git a/internal/session/user_session.go b/internal/session/user_session.go
index d691ec695..88511eb5d 100644
--- a/internal/session/user_session.go
+++ b/internal/session/user_session.go
@@ -17,6 +17,11 @@ func NewDefaultUserSession() UserSession {
 	}
 }
 
+// IsAnonymous returns true if the username is empty or the AuthenticationLevel is authentication.NotAuthenticated.
+func (s *UserSession) IsAnonymous() bool {
+	return s.Username == "" || s.AuthenticationLevel == authentication.NotAuthenticated
+}
+
 // SetOneFactor sets the 1FA AMR's and expected property values for one factor authentication.
 func (s *UserSession) SetOneFactor(now time.Time, details *authentication.UserDetails, keepMeLoggedIn bool) {
 	s.FirstFactorAuthnTimestamp = now.Unix()
diff --git a/internal/storage/const.go b/internal/storage/const.go
index 4f451d8e3..dc249115f 100644
--- a/internal/storage/const.go
+++ b/internal/storage/const.go
@@ -13,13 +13,14 @@ const (
 	tableUserPreferences      = "user_preferences"
 	tableWebauthnDevices      = "webauthn_devices"
 
-	tableOAuth2ConsentSession       = "oauth2_consent_session"
-	tableOAuth2AuthorizeCodeSession = "oauth2_authorization_code_session"
-	tableOAuth2AccessTokenSession   = "oauth2_access_token_session"  //nolint:gosec // This is not a hardcoded credential.
-	tableOAuth2RefreshTokenSession  = "oauth2_refresh_token_session" //nolint:gosec // This is not a hardcoded credential.
-	tableOAuth2PKCERequestSession   = "oauth2_pkce_request_session"
-	tableOAuth2OpenIDConnectSession = "oauth2_openid_connect_session"
-	tableOAuth2BlacklistedJTI       = "oauth2_blacklisted_jti"
+	tableOAuth2ConsentSession          = "oauth2_consent_session"
+	tableOAuth2ConsentPreConfiguration = "oauth2_consent_preconfiguration"
+	tableOAuth2AuthorizeCodeSession    = "oauth2_authorization_code_session"
+	tableOAuth2AccessTokenSession      = "oauth2_access_token_session"  //nolint:gosec // This is not a hardcoded credential.
+	tableOAuth2RefreshTokenSession     = "oauth2_refresh_token_session" //nolint:gosec // This is not a hardcoded credential.
+	tableOAuth2PKCERequestSession      = "oauth2_pkce_request_session"
+	tableOAuth2OpenIDConnectSession    = "oauth2_openid_connect_session"
+	tableOAuth2BlacklistedJTI          = "oauth2_blacklisted_jti"
 
 	tableMigrations = "migrations"
 	tableEncryption = "encryption"
@@ -76,11 +77,6 @@ const (
 	providerSQLite   = "sqlite"
 )
 
-const (
-	// This is the latest schema version for the purpose of tests.
-	testLatestVersion = 5
-)
-
 const (
 	// SchemaLatest represents the value expected for a "migrate to latest" migration. It's the maximum 32bit signed integer.
 	SchemaLatest = 2147483647
diff --git a/internal/storage/migrations/V0004.OpenIDConenct.mysql.up.sql b/internal/storage/migrations/V0004.OpenIDConnect.mysql.up.sql
similarity index 100%
rename from internal/storage/migrations/V0004.OpenIDConenct.mysql.up.sql
rename to internal/storage/migrations/V0004.OpenIDConnect.mysql.up.sql
diff --git a/internal/storage/migrations/V0004.OpenIDConenct.postgres.up.sql b/internal/storage/migrations/V0004.OpenIDConnect.postgres.up.sql
similarity index 100%
rename from internal/storage/migrations/V0004.OpenIDConenct.postgres.up.sql
rename to internal/storage/migrations/V0004.OpenIDConnect.postgres.up.sql
diff --git a/internal/storage/migrations/V0004.OpenIDConenct.sqlite.up.sql b/internal/storage/migrations/V0004.OpenIDConnect.sqlite.up.sql
similarity index 100%
rename from internal/storage/migrations/V0004.OpenIDConenct.sqlite.up.sql
rename to internal/storage/migrations/V0004.OpenIDConnect.sqlite.up.sql
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.down.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.down.sql
new file mode 100644
index 000000000..e06f19d81
--- /dev/null
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.down.sql
@@ -0,0 +1,175 @@
+DROP TABLE oauth2_authorization_code_session;
+DROP TABLE oauth2_access_token_session;
+DROP TABLE oauth2_refresh_token_session;
+DROP TABLE oauth2_pkce_request_session;
+DROP TABLE oauth2_openid_connect_session;
+DROP TABLE oauth2_consent_session;
+DROP TABLE oauth2_consent_preconfiguration;
+
+CREATE TABLE oauth2_consent_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NULL DEFAULT NULL,
+    authorized BOOLEAN NOT NULL DEFAULT FALSE,
+    granted BOOLEAN NOT NULL DEFAULT FALSE,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    responded_at TIMESTAMP NULL DEFAULT NULL,
+    expires_at TIMESTAMP NULL DEFAULT NULL,
+    form_data TEXT NOT NULL,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_session_subject_fkey
+        FOREIGN KEY (subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE UNIQUE INDEX oauth2_consent_session_challenge_id_key ON oauth2_consent_session (challenge_id);
+
+CREATE TABLE oauth2_authorization_code_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_authorization_code_session_challenge_id_fkey
+        FOREIGN KEY (challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_authorization_code_session_subject_fkey
+        FOREIGN KEY (subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_authorization_code_session_request_id_idx ON oauth2_authorization_code_session (request_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_idx ON oauth2_authorization_code_session (client_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_subject_idx ON oauth2_authorization_code_session (client_id, subject);
+
+CREATE TABLE oauth2_access_token_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_access_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_access_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_access_token_session_request_id_idx ON oauth2_access_token_session (request_id);
+CREATE INDEX oauth2_access_token_session_client_id_idx ON oauth2_access_token_session (client_id);
+CREATE INDEX oauth2_access_token_session_client_id_subject_idx ON oauth2_access_token_session (client_id, subject);
+
+CREATE TABLE oauth2_refresh_token_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_refresh_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_refresh_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_refresh_token_session_request_id_idx ON oauth2_refresh_token_session (request_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_idx ON oauth2_refresh_token_session (client_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_subject_idx ON oauth2_refresh_token_session (client_id, subject);
+
+CREATE TABLE oauth2_pkce_request_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_pkce_request_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_pkce_request_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_pkce_request_session_request_id_idx ON oauth2_pkce_request_session (request_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_idx ON oauth2_pkce_request_session (client_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_subject_idx ON oauth2_pkce_request_session (client_id, subject);
+
+CREATE TABLE oauth2_openid_connect_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_openid_connect_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_openid_connect_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_openid_connect_session_request_id_idx ON oauth2_openid_connect_session (request_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_idx ON oauth2_openid_connect_session (client_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_subject_idx ON oauth2_openid_connect_session (client_id, subject);
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql
new file mode 100644
index 000000000..693b0ed91
--- /dev/null
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql
@@ -0,0 +1,198 @@
+CREATE TABLE oauth2_consent_preconfiguration (
+    id INTEGER AUTO_INCREMENT,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+	created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	expires_at TIMESTAMP NULL DEFAULT NULL,
+	revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    scopes TEXT NOT NULL,
+    audience TEXT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_preconfiguration_subjct_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+INSERT INTO oauth2_consent_preconfiguration (client_id, subject, created_at, expires_at, scopes, audience)
+SELECT client_id, subject, responded_at, expires_at, granted_scopes, granted_audience
+FROM oauth2_consent_session
+WHERE expires_at IS NOT NULL AND responded_at IS NOT NULL
+ORDER BY responded_at;
+
+DROP TABLE oauth2_authorization_code_session;
+DROP TABLE oauth2_access_token_session;
+DROP TABLE oauth2_refresh_token_session;
+DROP TABLE oauth2_pkce_request_session;
+DROP TABLE oauth2_openid_connect_session;
+DROP TABLE oauth2_consent_session;
+
+CREATE TABLE oauth2_consent_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    authorized BOOLEAN NOT NULL DEFAULT FALSE,
+    granted BOOLEAN NOT NULL DEFAULT FALSE,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    responded_at TIMESTAMP NULL DEFAULT NULL,
+    form_data TEXT NOT NULL,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    preconfiguration INTEGER NULL DEFAULT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_session_subject_fkey
+        FOREIGN KEY (subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT oauth2_consent_session_preconfiguration_fkey
+        FOREIGN KEY (preconfiguration)
+            REFERENCES oauth2_consent_preconfiguration(id) ON UPDATE CASCADE ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX oauth2_consent_session_challenge_id_key ON oauth2_consent_session (challenge_id);
+
+CREATE TABLE oauth2_authorization_code_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_authorization_code_session_challenge_id_fkey
+        FOREIGN KEY (challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_authorization_code_session_subject_fkey
+        FOREIGN KEY (subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_authorization_code_session_request_id_idx ON oauth2_authorization_code_session (request_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_idx ON oauth2_authorization_code_session (client_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_subject_idx ON oauth2_authorization_code_session (client_id, subject);
+
+CREATE TABLE oauth2_access_token_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_access_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_access_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_access_token_session_request_id_idx ON oauth2_access_token_session (request_id);
+CREATE INDEX oauth2_access_token_session_client_id_idx ON oauth2_access_token_session (client_id);
+CREATE INDEX oauth2_access_token_session_client_id_subject_idx ON oauth2_access_token_session (client_id, subject);
+
+CREATE TABLE oauth2_refresh_token_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_refresh_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_refresh_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_refresh_token_session_request_id_idx ON oauth2_refresh_token_session (request_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_idx ON oauth2_refresh_token_session (client_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_subject_idx ON oauth2_refresh_token_session (client_id, subject);
+
+CREATE TABLE oauth2_pkce_request_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_pkce_request_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_pkce_request_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_pkce_request_session_request_id_idx ON oauth2_pkce_request_session (request_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_idx ON oauth2_pkce_request_session (client_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_subject_idx ON oauth2_pkce_request_session (client_id, subject);
+
+CREATE TABLE oauth2_openid_connect_session (
+    id INTEGER AUTO_INCREMENT,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_openid_connect_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_openid_connect_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_openid_connect_session_request_id_idx ON oauth2_openid_connect_session (request_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_idx ON oauth2_openid_connect_session (client_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_subject_idx ON oauth2_openid_connect_session (client_id, subject);
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.down.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.down.sql
new file mode 100644
index 000000000..a180af297
--- /dev/null
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.down.sql
@@ -0,0 +1,175 @@
+DROP TABLE oauth2_authorization_code_session;
+DROP TABLE oauth2_access_token_session;
+DROP TABLE oauth2_refresh_token_session;
+DROP TABLE oauth2_pkce_request_session;
+DROP TABLE oauth2_openid_connect_session;
+DROP TABLE oauth2_consent_session;
+DROP TABLE oauth2_consent_preconfiguration;
+
+CREATE TABLE oauth2_consent_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NULL DEFAULT NULL,
+    authorized BOOLEAN NOT NULL DEFAULT FALSE,
+    granted BOOLEAN NOT NULL DEFAULT FALSE,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    responded_at TIMESTAMP WITH TIME ZONE NULL DEFAULT NULL,
+    expires_at TIMESTAMP WITH TIME ZONE NULL DEFAULT NULL,
+    form_data TEXT NOT NULL,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE UNIQUE INDEX oauth2_consent_session_challenge_id_key ON oauth2_consent_session (challenge_id);
+
+CREATE TABLE oauth2_authorization_code_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36),
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_authorization_code_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_authorization_code_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_authorization_code_session_request_id_idx ON oauth2_authorization_code_session (request_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_idx ON oauth2_authorization_code_session (client_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_subject_idx ON oauth2_authorization_code_session (client_id, subject);
+
+CREATE TABLE oauth2_access_token_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_access_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_access_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_access_token_session_request_id_idx ON oauth2_access_token_session (request_id);
+CREATE INDEX oauth2_access_token_session_client_id_idx ON oauth2_access_token_session (client_id);
+CREATE INDEX oauth2_access_token_session_client_id_subject_idx ON oauth2_access_token_session (client_id, subject);
+
+CREATE TABLE oauth2_refresh_token_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_refresh_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_refresh_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_refresh_token_session_request_id_idx ON oauth2_refresh_token_session (request_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_idx ON oauth2_refresh_token_session (client_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_subject_idx ON oauth2_refresh_token_session (client_id, subject);
+
+CREATE TABLE oauth2_pkce_request_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_pkce_request_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_pkce_request_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_pkce_request_session_request_id_idx ON oauth2_pkce_request_session (request_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_idx ON oauth2_pkce_request_session (client_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_subject_idx ON oauth2_pkce_request_session (client_id, subject);
+
+CREATE TABLE oauth2_openid_connect_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_openid_connect_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_openid_connect_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_openid_connect_session_request_id_idx ON oauth2_openid_connect_session (request_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_idx ON oauth2_openid_connect_session (client_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_subject_idx ON oauth2_openid_connect_session (client_id, subject);
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql
new file mode 100644
index 000000000..71a98616f
--- /dev/null
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql
@@ -0,0 +1,198 @@
+CREATE TABLE oauth2_consent_preconfiguration (
+    id SERIAL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+	created_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    expires_at TIMESTAMP WITH TIME ZONE NULL DEFAULT NULL,
+	revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    scopes TEXT NOT NULL,
+    audience TEXT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_preconfiguration_subjct_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+INSERT INTO oauth2_consent_preconfiguration (client_id, subject, created_at, expires_at, scopes, audience)
+SELECT client_id, subject, responded_at, expires_at, granted_scopes, granted_audience
+FROM oauth2_consent_session
+WHERE expires_at IS NOT NULL AND responded_at IS NOT NULL
+ORDER BY responded_at;
+
+DROP TABLE oauth2_authorization_code_session;
+DROP TABLE oauth2_access_token_session;
+DROP TABLE oauth2_refresh_token_session;
+DROP TABLE oauth2_pkce_request_session;
+DROP TABLE oauth2_openid_connect_session;
+DROP TABLE oauth2_consent_session;
+
+CREATE TABLE oauth2_consent_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    authorized BOOLEAN NOT NULL DEFAULT FALSE,
+    granted BOOLEAN NOT NULL DEFAULT FALSE,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    responded_at TIMESTAMP WITH TIME ZONE NULL DEFAULT NULL,
+    form_data TEXT NOT NULL,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL,
+    granted_audience TEXT NULL,
+    preconfiguration INTEGER NULL DEFAULT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT oauth2_consent_session_preconfiguration_fkey
+        FOREIGN KEY(preconfiguration)
+            REFERENCES oauth2_consent_preconfiguration(id) ON UPDATE CASCADE ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX oauth2_consent_session_challenge_id_key ON oauth2_consent_session (challenge_id);
+
+CREATE TABLE oauth2_authorization_code_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_authorization_code_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_authorization_code_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_authorization_code_session_request_id_idx ON oauth2_authorization_code_session (request_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_idx ON oauth2_authorization_code_session (client_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_subject_idx ON oauth2_authorization_code_session (client_id, subject);
+
+CREATE TABLE oauth2_access_token_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_access_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_access_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_access_token_session_request_id_idx ON oauth2_access_token_session (request_id);
+CREATE INDEX oauth2_access_token_session_client_id_idx ON oauth2_access_token_session (client_id);
+CREATE INDEX oauth2_access_token_session_client_id_subject_idx ON oauth2_access_token_session (client_id, subject);
+
+CREATE TABLE oauth2_refresh_token_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_refresh_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_refresh_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_refresh_token_session_request_id_idx ON oauth2_refresh_token_session (request_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_idx ON oauth2_refresh_token_session (client_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_subject_idx ON oauth2_refresh_token_session (client_id, subject);
+
+CREATE TABLE oauth2_pkce_request_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_pkce_request_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_pkce_request_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_pkce_request_session_request_id_idx ON oauth2_pkce_request_session (request_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_idx ON oauth2_pkce_request_session (client_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_subject_idx ON oauth2_pkce_request_session (client_id, subject);
+
+CREATE TABLE oauth2_openid_connect_session (
+    id SERIAL,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BYTEA NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_openid_connect_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_openid_connect_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_openid_connect_session_request_id_idx ON oauth2_openid_connect_session (request_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_idx ON oauth2_openid_connect_session (client_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_subject_idx ON oauth2_openid_connect_session (client_id, subject);
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.down.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.down.sql
new file mode 100644
index 000000000..e4bfaefeb
--- /dev/null
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.down.sql
@@ -0,0 +1,175 @@
+DROP TABLE oauth2_authorization_code_session;
+DROP TABLE oauth2_access_token_session;
+DROP TABLE oauth2_refresh_token_session;
+DROP TABLE oauth2_pkce_request_session;
+DROP TABLE oauth2_openid_connect_session;
+DROP TABLE oauth2_consent_session;
+DROP TABLE oauth2_consent_preconfiguration;
+
+CREATE TABLE oauth2_consent_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NULL DEFAULT NULL,
+    authorized BOOLEAN NOT NULL DEFAULT FALSE,
+    granted BOOLEAN NOT NULL DEFAULT FALSE,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    responded_at TIMESTAMP NULL DEFAULT NULL,
+    expires_at TIMESTAMP NULL DEFAULT NULL,
+    form_data TEXT NOT NULL,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+	requested_audience TEXT NULL DEFAULT '',
+	granted_audience TEXT NULL DEFAULT '',
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE UNIQUE INDEX oauth2_consent_session_challenge_id_key ON oauth2_consent_session (challenge_id);
+
+CREATE TABLE oauth2_authorization_code_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_authorization_code_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_authorization_code_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_authorization_code_session_request_id_idx ON oauth2_authorization_code_session (request_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_idx ON oauth2_authorization_code_session (client_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_subject_idx ON oauth2_authorization_code_session (client_id, subject);
+
+CREATE TABLE IF NOT EXISTS oauth2_access_token_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_access_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_access_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_access_token_session_request_id_idx ON oauth2_access_token_session (request_id);
+CREATE INDEX oauth2_access_token_session_client_id_idx ON oauth2_access_token_session (client_id);
+CREATE INDEX oauth2_access_token_session_client_id_subject_idx ON oauth2_access_token_session (client_id, subject);
+
+CREATE TABLE IF NOT EXISTS oauth2_refresh_token_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_refresh_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_refresh_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_refresh_token_session_request_id_idx ON oauth2_refresh_token_session (request_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_idx ON oauth2_refresh_token_session (client_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_subject_idx ON oauth2_refresh_token_session (client_id, subject);
+
+CREATE TABLE oauth2_pkce_request_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_pkce_request_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_pkce_request_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_pkce_request_session_request_id_idx ON oauth2_pkce_request_session (request_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_idx ON oauth2_pkce_request_session (client_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_subject_idx ON oauth2_pkce_request_session (client_id, subject);
+
+CREATE TABLE oauth2_openid_connect_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_openid_connect_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_openid_connect_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_openid_connect_session_request_id_idx ON oauth2_openid_connect_session (request_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_idx ON oauth2_openid_connect_session (client_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_subject_idx ON oauth2_openid_connect_session (client_id, subject);
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql
new file mode 100644
index 000000000..a491e82df
--- /dev/null
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql
@@ -0,0 +1,198 @@
+CREATE TABLE oauth2_consent_preconfiguration (
+    id INTEGER,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+	created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	expires_at TIMESTAMP NULL DEFAULT NULL,
+	revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    scopes TEXT NOT NULL,
+    audience TEXT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_preconfiguration_subjct_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+INSERT INTO oauth2_consent_preconfiguration (client_id, subject, created_at, expires_at, scopes, audience)
+SELECT client_id, subject, responded_at, expires_at, granted_scopes, granted_audience
+FROM oauth2_consent_session
+WHERE expires_at IS NOT NULL AND responded_at IS NOT NULL
+ORDER BY responded_at;
+
+DROP TABLE oauth2_authorization_code_session;
+DROP TABLE oauth2_access_token_session;
+DROP TABLE oauth2_refresh_token_session;
+DROP TABLE oauth2_pkce_request_session;
+DROP TABLE oauth2_openid_connect_session;
+DROP TABLE oauth2_consent_session;
+
+CREATE TABLE oauth2_consent_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    authorized BOOLEAN NOT NULL DEFAULT FALSE,
+    granted BOOLEAN NOT NULL DEFAULT FALSE,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    responded_at TIMESTAMP NULL DEFAULT NULL,
+    form_data TEXT NOT NULL,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    preconfiguration INTEGER NULL DEFAULT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_consent_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT oauth2_consent_session_preconfiguration_fkey
+        FOREIGN KEY(preconfiguration)
+            REFERENCES oauth2_consent_preconfiguration(id) ON UPDATE CASCADE ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX oauth2_consent_session_challenge_id_key ON oauth2_consent_session (challenge_id);
+
+CREATE TABLE oauth2_authorization_code_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_authorization_code_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_authorization_code_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_authorization_code_session_request_id_idx ON oauth2_authorization_code_session (request_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_idx ON oauth2_authorization_code_session (client_id);
+CREATE INDEX oauth2_authorization_code_session_client_id_subject_idx ON oauth2_authorization_code_session (client_id, subject);
+
+CREATE TABLE oauth2_access_token_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_access_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_access_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_access_token_session_request_id_idx ON oauth2_access_token_session (request_id);
+CREATE INDEX oauth2_access_token_session_client_id_idx ON oauth2_access_token_session (client_id);
+CREATE INDEX oauth2_access_token_session_client_id_subject_idx ON oauth2_access_token_session (client_id, subject);
+
+CREATE TABLE oauth2_refresh_token_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_refresh_token_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_refresh_token_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_refresh_token_session_request_id_idx ON oauth2_refresh_token_session (request_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_idx ON oauth2_refresh_token_session (client_id);
+CREATE INDEX oauth2_refresh_token_session_client_id_subject_idx ON oauth2_refresh_token_session (client_id, subject);
+
+CREATE TABLE oauth2_pkce_request_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_pkce_request_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_pkce_request_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_pkce_request_session_request_id_idx ON oauth2_pkce_request_session (request_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_idx ON oauth2_pkce_request_session (client_id);
+CREATE INDEX oauth2_pkce_request_session_client_id_subject_idx ON oauth2_pkce_request_session (client_id, subject);
+
+CREATE TABLE oauth2_openid_connect_session (
+    id INTEGER,
+    challenge_id CHAR(36) NOT NULL,
+    request_id VARCHAR(40) NOT NULL,
+    client_id VARCHAR(255) NOT NULL,
+    signature VARCHAR(255) NOT NULL,
+    subject CHAR(36) NOT NULL,
+    requested_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    requested_scopes TEXT NOT NULL,
+    granted_scopes TEXT NOT NULL,
+    requested_audience TEXT NULL DEFAULT '',
+    granted_audience TEXT NULL DEFAULT '',
+    active BOOLEAN NOT NULL DEFAULT FALSE,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE,
+    form_data TEXT NOT NULL,
+    session_data BLOB NOT NULL,
+    PRIMARY KEY (id),
+    CONSTRAINT oauth2_openid_connect_session_challenge_id_fkey
+        FOREIGN KEY(challenge_id)
+            REFERENCES oauth2_consent_session(challenge_id) ON UPDATE CASCADE ON DELETE CASCADE,
+    CONSTRAINT oauth2_openid_connect_session_subject_fkey
+        FOREIGN KEY(subject)
+            REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
+);
+
+CREATE INDEX oauth2_openid_connect_session_request_id_idx ON oauth2_openid_connect_session (request_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_idx ON oauth2_openid_connect_session (client_id);
+CREATE INDEX oauth2_openid_connect_session_client_id_subject_idx ON oauth2_openid_connect_session (client_id, subject);
diff --git a/internal/storage/migrations_test.go b/internal/storage/migrations_test.go
index 38fa84f42..f7c9df73e 100644
--- a/internal/storage/migrations_test.go
+++ b/internal/storage/migrations_test.go
@@ -7,11 +7,16 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
+const (
+	// This is the latest schema version for the purpose of tests.
+	LatestVersion = 6
+)
+
 func TestShouldObtainCorrectUpMigrations(t *testing.T) {
 	ver, err := latestMigrationVersion(providerSQLite)
 	require.NoError(t, err)
 
-	assert.Equal(t, testLatestVersion, ver)
+	assert.Equal(t, LatestVersion, ver)
 
 	migrations, err := loadMigrations(providerSQLite, 0, ver)
 	require.NoError(t, err)
@@ -27,7 +32,7 @@ func TestShouldObtainCorrectDownMigrations(t *testing.T) {
 	ver, err := latestMigrationVersion(providerSQLite)
 	require.NoError(t, err)
 
-	assert.Equal(t, testLatestVersion, ver)
+	assert.Equal(t, LatestVersion, ver)
 
 	migrations, err := loadMigrations(providerSQLite, ver, 0)
 	require.NoError(t, err)
diff --git a/internal/storage/provider.go b/internal/storage/provider.go
index fdf415a89..ecfe104b0 100644
--- a/internal/storage/provider.go
+++ b/internal/storage/provider.go
@@ -2,6 +2,7 @@ package storage
 
 import (
 	"context"
+	"database/sql"
 	"time"
 
 	"github.com/google/uuid"
@@ -32,13 +33,13 @@ type Provider interface {
 	FindIdentityVerification(ctx context.Context, jti string) (found bool, err error)
 
 	SaveTOTPConfiguration(ctx context.Context, config model.TOTPConfiguration) (err error)
-	UpdateTOTPConfigurationSignIn(ctx context.Context, id int, lastUsedAt *time.Time) (err error)
+	UpdateTOTPConfigurationSignIn(ctx context.Context, id int, lastUsedAt sql.NullTime) (err error)
 	DeleteTOTPConfiguration(ctx context.Context, username string) (err error)
 	LoadTOTPConfiguration(ctx context.Context, username string) (config *model.TOTPConfiguration, err error)
 	LoadTOTPConfigurations(ctx context.Context, limit, page int) (configs []model.TOTPConfiguration, err error)
 
 	SaveWebauthnDevice(ctx context.Context, device model.WebauthnDevice) (err error)
-	UpdateWebauthnDeviceSignIn(ctx context.Context, id int, rpid string, lastUsedAt *time.Time, signCount uint32, cloneWarning bool) (err error)
+	UpdateWebauthnDeviceSignIn(ctx context.Context, id int, rpid string, lastUsedAt sql.NullTime, signCount uint32, cloneWarning bool) (err error)
 	DeleteWebauthnDevice(ctx context.Context, kid string) (err error)
 	DeleteWebauthnDeviceByUsername(ctx context.Context, username, description string) (err error)
 	LoadWebauthnDevices(ctx context.Context, limit, page int) (devices []model.WebauthnDevice, err error)
@@ -48,12 +49,14 @@ type Provider interface {
 	DeletePreferredDuoDevice(ctx context.Context, username string) (err error)
 	LoadPreferredDuoDevice(ctx context.Context, username string) (device *model.DuoDevice, err error)
 
+	SaveOAuth2ConsentPreConfiguration(ctx context.Context, config model.OAuth2ConsentPreConfig) (insertedID int64, err error)
+	LoadOAuth2ConsentPreConfigurations(ctx context.Context, clientID string, subject uuid.UUID) (rows *ConsentPreConfigRows, err error)
+
 	SaveOAuth2ConsentSession(ctx context.Context, consent model.OAuth2ConsentSession) (err error)
 	SaveOAuth2ConsentSessionSubject(ctx context.Context, consent model.OAuth2ConsentSession) (err error)
 	SaveOAuth2ConsentSessionResponse(ctx context.Context, consent model.OAuth2ConsentSession, rejection bool) (err error)
 	SaveOAuth2ConsentSessionGranted(ctx context.Context, id int) (err error)
 	LoadOAuth2ConsentSessionByChallengeID(ctx context.Context, challengeID uuid.UUID) (consent *model.OAuth2ConsentSession, err error)
-	LoadOAuth2ConsentSessionsPreConfigured(ctx context.Context, clientID string, subject uuid.UUID) (rows *ConsentSessionRows, err error)
 
 	SaveOAuth2Session(ctx context.Context, sessionType OAuth2SessionType, session model.OAuth2Session) (err error)
 	RevokeOAuth2Session(ctx context.Context, sessionType OAuth2SessionType, signature string) (err error)
diff --git a/internal/storage/sql_provider.go b/internal/storage/sql_provider.go
index 6991e7021..7ee60ab5c 100644
--- a/internal/storage/sql_provider.go
+++ b/internal/storage/sql_provider.go
@@ -6,6 +6,7 @@ import (
 	"database/sql"
 	"errors"
 	"fmt"
+	"strings"
 	"time"
 
 	"github.com/google/uuid"
@@ -73,6 +74,15 @@ func NewSQLProvider(config *schema.Configuration, name, driverName, dataSourceNa
 		sqlSelectUserOpaqueIdentifiers:           fmt.Sprintf(queryFmtSelectUserOpaqueIdentifiers, tableUserOpaqueIdentifier),
 		sqlSelectUserOpaqueIdentifierBySignature: fmt.Sprintf(queryFmtSelectUserOpaqueIdentifierBySignature, tableUserOpaqueIdentifier),
 
+		sqlInsertOAuth2ConsentPreConfiguration:  fmt.Sprintf(queryFmtInsertOAuth2ConsentPreConfiguration, tableOAuth2ConsentPreConfiguration),
+		sqlSelectOAuth2ConsentPreConfigurations: fmt.Sprintf(queryFmtSelectOAuth2ConsentPreConfigurations, tableOAuth2ConsentPreConfiguration),
+
+		sqlInsertOAuth2ConsentSession:              fmt.Sprintf(queryFmtInsertOAuth2ConsentSession, tableOAuth2ConsentSession),
+		sqlUpdateOAuth2ConsentSessionSubject:       fmt.Sprintf(queryFmtUpdateOAuth2ConsentSessionSubject, tableOAuth2ConsentSession),
+		sqlUpdateOAuth2ConsentSessionResponse:      fmt.Sprintf(queryFmtUpdateOAuth2ConsentSessionResponse, tableOAuth2ConsentSession),
+		sqlUpdateOAuth2ConsentSessionGranted:       fmt.Sprintf(queryFmtUpdateOAuth2ConsentSessionGranted, tableOAuth2ConsentSession),
+		sqlSelectOAuth2ConsentSessionByChallengeID: fmt.Sprintf(queryFmtSelectOAuth2ConsentSessionByChallengeID, tableOAuth2ConsentSession),
+
 		sqlInsertOAuth2AuthorizeCodeSession:                fmt.Sprintf(queryFmtInsertOAuth2Session, tableOAuth2AuthorizeCodeSession),
 		sqlSelectOAuth2AuthorizeCodeSession:                fmt.Sprintf(queryFmtSelectOAuth2Session, tableOAuth2AuthorizeCodeSession),
 		sqlRevokeOAuth2AuthorizeCodeSession:                fmt.Sprintf(queryFmtRevokeOAuth2Session, tableOAuth2AuthorizeCodeSession),
@@ -108,13 +118,6 @@ func NewSQLProvider(config *schema.Configuration, name, driverName, dataSourceNa
 		sqlDeactivateOAuth2OpenIDConnectSession:            fmt.Sprintf(queryFmtDeactivateOAuth2Session, tableOAuth2OpenIDConnectSession),
 		sqlDeactivateOAuth2OpenIDConnectSessionByRequestID: fmt.Sprintf(queryFmtDeactivateOAuth2SessionByRequestID, tableOAuth2OpenIDConnectSession),
 
-		sqlInsertOAuth2ConsentSession:               fmt.Sprintf(queryFmtInsertOAuth2ConsentSession, tableOAuth2ConsentSession),
-		sqlUpdateOAuth2ConsentSessionSubject:        fmt.Sprintf(queryFmtUpdateOAuth2ConsentSessionSubject, tableOAuth2ConsentSession),
-		sqlUpdateOAuth2ConsentSessionResponse:       fmt.Sprintf(queryFmtUpdateOAuth2ConsentSessionResponse, tableOAuth2ConsentSession),
-		sqlUpdateOAuth2ConsentSessionGranted:        fmt.Sprintf(queryFmtUpdateOAuth2ConsentSessionGranted, tableOAuth2ConsentSession),
-		sqlSelectOAuth2ConsentSessionByChallengeID:  fmt.Sprintf(queryFmtSelectOAuth2ConsentSessionByChallengeID, tableOAuth2ConsentSession),
-		sqlSelectOAuth2ConsentSessionsPreConfigured: fmt.Sprintf(queryFmtSelectOAuth2ConsentSessionsPreConfigured, tableOAuth2ConsentSession),
-
 		sqlUpsertOAuth2BlacklistedJTI: fmt.Sprintf(queryFmtUpsertOAuth2BlacklistedJTI, tableOAuth2BlacklistedJTI),
 		sqlSelectOAuth2BlacklistedJTI: fmt.Sprintf(queryFmtSelectOAuth2BlacklistedJTI, tableOAuth2BlacklistedJTI),
 
@@ -202,6 +205,17 @@ type SQLProvider struct {
 	sqlUpsertEncryptionValue string
 	sqlSelectEncryptionValue string
 
+	// Table: oauth2_consent_preconfiguration.
+	sqlInsertOAuth2ConsentPreConfiguration  string
+	sqlSelectOAuth2ConsentPreConfigurations string
+
+	// Table: oauth2_consent_session.
+	sqlInsertOAuth2ConsentSession              string
+	sqlUpdateOAuth2ConsentSessionSubject       string
+	sqlUpdateOAuth2ConsentSessionResponse      string
+	sqlUpdateOAuth2ConsentSessionGranted       string
+	sqlSelectOAuth2ConsentSessionByChallengeID string
+
 	// Table: oauth2_authorization_code_session.
 	sqlInsertOAuth2AuthorizeCodeSession                string
 	sqlSelectOAuth2AuthorizeCodeSession                string
@@ -242,14 +256,6 @@ type SQLProvider struct {
 	sqlDeactivateOAuth2OpenIDConnectSession            string
 	sqlDeactivateOAuth2OpenIDConnectSessionByRequestID string
 
-	// Table: oauth2_consent_session.
-	sqlInsertOAuth2ConsentSession               string
-	sqlUpdateOAuth2ConsentSessionSubject        string
-	sqlUpdateOAuth2ConsentSessionResponse       string
-	sqlUpdateOAuth2ConsentSessionGranted        string
-	sqlSelectOAuth2ConsentSessionByChallengeID  string
-	sqlSelectOAuth2ConsentSessionsPreConfigured string
-
 	sqlUpsertOAuth2BlacklistedJTI string
 	sqlSelectOAuth2BlacklistedJTI string
 
@@ -404,8 +410,8 @@ func (p *SQLProvider) LoadUserOpaqueIdentifierBySignature(ctx context.Context, s
 func (p *SQLProvider) SaveOAuth2ConsentSession(ctx context.Context, consent model.OAuth2ConsentSession) (err error) {
 	if _, err = p.db.ExecContext(ctx, p.sqlInsertOAuth2ConsentSession,
 		consent.ChallengeID, consent.ClientID, consent.Subject, consent.Authorized, consent.Granted,
-		consent.RequestedAt, consent.RespondedAt, consent.ExpiresAt, consent.Form,
-		consent.RequestedScopes, consent.GrantedScopes, consent.RequestedAudience, consent.GrantedAudience); err != nil {
+		consent.RequestedAt, consent.RespondedAt, consent.Form,
+		consent.RequestedScopes, consent.GrantedScopes, consent.RequestedAudience, consent.GrantedAudience, consent.PreConfiguration); err != nil {
 		return fmt.Errorf("error inserting oauth2 consent session with challenge id '%s' for subject '%s': %w", consent.ChallengeID.String(), consent.Subject.UUID.String(), err)
 	}
 
@@ -423,7 +429,7 @@ func (p *SQLProvider) SaveOAuth2ConsentSessionSubject(ctx context.Context, conse
 
 // SaveOAuth2ConsentSessionResponse updates an OAuth2.0 consent session with the response.
 func (p *SQLProvider) SaveOAuth2ConsentSessionResponse(ctx context.Context, consent model.OAuth2ConsentSession, authorized bool) (err error) {
-	if _, err = p.db.ExecContext(ctx, p.sqlUpdateOAuth2ConsentSessionResponse, authorized, consent.ExpiresAt, consent.GrantedScopes, consent.GrantedAudience, consent.ID); err != nil {
+	if _, err = p.db.ExecContext(ctx, p.sqlUpdateOAuth2ConsentSessionResponse, authorized, consent.GrantedScopes, consent.GrantedAudience, consent.PreConfiguration, consent.ID); err != nil {
 		return fmt.Errorf("error updating oauth2 consent session (authorized  '%t') with id '%d' and challenge id '%s' for subject '%s': %w", authorized, consent.ID, consent.ChallengeID, consent.Subject.UUID, err)
 	}
 
@@ -450,19 +456,43 @@ func (p *SQLProvider) LoadOAuth2ConsentSessionByChallengeID(ctx context.Context,
 	return consent, nil
 }
 
-// LoadOAuth2ConsentSessionsPreConfigured returns an OAuth2.0 consents that are pre-configured given the consent signature.
-func (p *SQLProvider) LoadOAuth2ConsentSessionsPreConfigured(ctx context.Context, clientID string, subject uuid.UUID) (rows *ConsentSessionRows, err error) {
-	var r *sqlx.Rows
-
-	if r, err = p.db.QueryxContext(ctx, p.sqlSelectOAuth2ConsentSessionsPreConfigured, clientID, subject); err != nil {
-		if errors.Is(err, sql.ErrNoRows) {
-			return &ConsentSessionRows{}, nil
+// SaveOAuth2ConsentPreConfiguration inserts an OAuth2.0 consent pre-configuration.
+func (p *SQLProvider) SaveOAuth2ConsentPreConfiguration(ctx context.Context, config model.OAuth2ConsentPreConfig) (insertedID int64, err error) {
+	switch p.name {
+	case providerPostgres:
+		if err = p.db.GetContext(ctx, &insertedID, p.sqlInsertOAuth2ConsentPreConfiguration,
+			config.ClientID, config.Subject, config.CreatedAt, config.ExpiresAt,
+			config.Revoked, config.Scopes, config.Audience); err != nil {
+			return -1, fmt.Errorf("error inserting oauth2 consent pre-configuration for subject '%s' with client id '%s' and scopes '%s': %w", config.Subject.String(), config.ClientID, strings.Join(config.Scopes, " "), err)
 		}
 
-		return &ConsentSessionRows{}, fmt.Errorf("error selecting oauth2 consent session by signature with client id '%s' and subject '%s': %w", clientID, subject.String(), err)
+		return insertedID, nil
+	default:
+		var result sql.Result
+
+		if result, err = p.db.ExecContext(ctx, p.sqlInsertOAuth2ConsentPreConfiguration,
+			config.ClientID, config.Subject, config.CreatedAt, config.ExpiresAt,
+			config.Revoked, config.Scopes, config.Audience); err != nil {
+			return -1, fmt.Errorf("error inserting oauth2 consent pre-configuration for subject '%s' with client id '%s' and scopes '%s': %w", config.Subject.String(), config.ClientID, strings.Join(config.Scopes, " "), err)
+		}
+
+		return result.LastInsertId()
+	}
+}
+
+// LoadOAuth2ConsentPreConfigurations returns an OAuth2.0 consents pre-configurations given the consent signature.
+func (p *SQLProvider) LoadOAuth2ConsentPreConfigurations(ctx context.Context, clientID string, subject uuid.UUID) (rows *ConsentPreConfigRows, err error) {
+	var r *sqlx.Rows
+
+	if r, err = p.db.QueryxContext(ctx, p.sqlSelectOAuth2ConsentPreConfigurations, clientID, subject); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			return &ConsentPreConfigRows{}, nil
+		}
+
+		return &ConsentPreConfigRows{}, fmt.Errorf("error selecting oauth2 consent pre-configurations by signature with client id '%s' and subject '%s': %w", clientID, subject.String(), err)
 	}
 
-	return &ConsentSessionRows{rows: r}, nil
+	return &ConsentPreConfigRows{rows: r}, nil
 }
 
 // SaveOAuth2Session saves a OAuth2Session to the database.
@@ -724,7 +754,7 @@ func (p *SQLProvider) FindIdentityVerification(ctx context.Context, jti string)
 	}
 
 	switch {
-	case verification.Consumed != nil:
+	case verification.Consumed.Valid:
 		return false, fmt.Errorf("the token has already been consumed")
 	case verification.ExpiresAt.Before(time.Now()):
 		return false, fmt.Errorf("the token expired %s ago", time.Since(verification.ExpiresAt))
@@ -750,7 +780,7 @@ func (p *SQLProvider) SaveTOTPConfiguration(ctx context.Context, config model.TO
 }
 
 // UpdateTOTPConfigurationSignIn updates a registered Webauthn devices sign in information.
-func (p *SQLProvider) UpdateTOTPConfigurationSignIn(ctx context.Context, id int, lastUsedAt *time.Time) (err error) {
+func (p *SQLProvider) UpdateTOTPConfigurationSignIn(ctx context.Context, id int, lastUsedAt sql.NullTime) (err error) {
 	if _, err = p.db.ExecContext(ctx, p.sqlUpdateTOTPConfigRecordSignIn, lastUsedAt, id); err != nil {
 		return fmt.Errorf("error updating TOTP configuration id %d: %w", id, err)
 	}
@@ -841,7 +871,7 @@ func (p *SQLProvider) SaveWebauthnDevice(ctx context.Context, device model.Webau
 }
 
 // UpdateWebauthnDeviceSignIn updates a registered Webauthn devices sign in information.
-func (p *SQLProvider) UpdateWebauthnDeviceSignIn(ctx context.Context, id int, rpid string, lastUsedAt *time.Time, signCount uint32, cloneWarning bool) (err error) {
+func (p *SQLProvider) UpdateWebauthnDeviceSignIn(ctx context.Context, id int, rpid string, lastUsedAt sql.NullTime, signCount uint32, cloneWarning bool) (err error) {
 	if _, err = p.db.ExecContext(ctx, p.sqlUpdateWebauthnDeviceRecordSignIn, rpid, lastUsedAt, signCount, cloneWarning, id); err != nil {
 		return fmt.Errorf("error updating Webauthn signin metadata for id '%x': %w", id, err)
 	}
diff --git a/internal/storage/sql_provider_backend_postgres.go b/internal/storage/sql_provider_backend_postgres.go
index 06fc40c78..8a3ee7779 100644
--- a/internal/storage/sql_provider_backend_postgres.go
+++ b/internal/storage/sql_provider_backend_postgres.go
@@ -32,6 +32,7 @@ func NewPostgreSQLProvider(config *schema.Configuration) (provider *PostgreSQLPr
 	provider.sqlUpsertPreferred2FAMethod = fmt.Sprintf(queryFmtUpsertPreferred2FAMethodPostgreSQL, tableUserPreferences)
 	provider.sqlUpsertEncryptionValue = fmt.Sprintf(queryFmtUpsertEncryptionValuePostgreSQL, tableEncryption)
 	provider.sqlUpsertOAuth2BlacklistedJTI = fmt.Sprintf(queryFmtUpsertOAuth2BlacklistedJTIPostgreSQL, tableOAuth2BlacklistedJTI)
+	provider.sqlInsertOAuth2ConsentPreConfiguration = fmt.Sprintf(queryFmtInsertOAuth2ConsentPreConfigurationPostgreSQL, tableOAuth2ConsentPreConfiguration)
 
 	// PostgreSQL requires rebinding of any query that contains a '?' placeholder to use the '$#' notation placeholders.
 	provider.sqlFmtRenameTable = provider.db.Rebind(provider.sqlFmtRenameTable)
@@ -77,12 +78,13 @@ func NewPostgreSQLProvider(config *schema.Configuration) (provider *PostgreSQLPr
 
 	provider.sqlSelectEncryptionValue = provider.db.Rebind(provider.sqlSelectEncryptionValue)
 
+	provider.sqlSelectOAuth2ConsentPreConfigurations = provider.db.Rebind(provider.sqlSelectOAuth2ConsentPreConfigurations)
+
 	provider.sqlInsertOAuth2ConsentSession = provider.db.Rebind(provider.sqlInsertOAuth2ConsentSession)
 	provider.sqlUpdateOAuth2ConsentSessionSubject = provider.db.Rebind(provider.sqlUpdateOAuth2ConsentSessionSubject)
 	provider.sqlUpdateOAuth2ConsentSessionResponse = provider.db.Rebind(provider.sqlUpdateOAuth2ConsentSessionResponse)
 	provider.sqlUpdateOAuth2ConsentSessionGranted = provider.db.Rebind(provider.sqlUpdateOAuth2ConsentSessionGranted)
 	provider.sqlSelectOAuth2ConsentSessionByChallengeID = provider.db.Rebind(provider.sqlSelectOAuth2ConsentSessionByChallengeID)
-	provider.sqlSelectOAuth2ConsentSessionsPreConfigured = provider.db.Rebind(provider.sqlSelectOAuth2ConsentSessionsPreConfigured)
 
 	provider.sqlInsertOAuth2AuthorizeCodeSession = provider.db.Rebind(provider.sqlInsertOAuth2AuthorizeCodeSession)
 	provider.sqlRevokeOAuth2AuthorizeCodeSession = provider.db.Rebind(provider.sqlRevokeOAuth2AuthorizeCodeSession)
diff --git a/internal/storage/sql_provider_queries.go b/internal/storage/sql_provider_queries.go
index eedfca30a..327ab546f 100644
--- a/internal/storage/sql_provider_queries.go
+++ b/internal/storage/sql_provider_queries.go
@@ -234,22 +234,30 @@ const (
 )
 
 const (
+	queryFmtSelectOAuth2ConsentPreConfigurations = `
+		SELECT id, client_id, subject, created_at, expires_at, revoked, scopes, audience
+		FROM %s
+		WHERE client_id = ? AND subject = ? AND
+			  revoked = FALSE AND (expires_at IS NULL OR expires_at >= CURRENT_TIMESTAMP);`
+
+	queryFmtInsertOAuth2ConsentPreConfiguration = `
+		INSERT INTO %s (client_id, subject, created_at, expires_at, revoked, scopes, audience)
+		VALUES(?, ?, ?, ?, ?, ?, ?);`
+
+	queryFmtInsertOAuth2ConsentPreConfigurationPostgreSQL = `
+		INSERT INTO %s (client_id, subject, created_at, expires_at, revoked, scopes, audience)
+		VALUES($1, $2, $3, $4, $5, $6, $7)
+		RETURNING id;`
+
 	queryFmtSelectOAuth2ConsentSessionByChallengeID = `
-		SELECT id, challenge_id, client_id, subject, authorized, granted, requested_at, responded_at, expires_at,
-		form_data, requested_scopes, granted_scopes, requested_audience, granted_audience
+		SELECT id, challenge_id, client_id, subject, authorized, granted, requested_at, responded_at,
+		form_data, requested_scopes, granted_scopes, requested_audience, granted_audience, preconfiguration
 		FROM %s
 		WHERE challenge_id = ?;`
 
-	queryFmtSelectOAuth2ConsentSessionsPreConfigured = `
-		SELECT id, challenge_id, client_id, subject, authorized, granted, requested_at, responded_at, expires_at,
-		form_data, requested_scopes, granted_scopes, requested_audience, granted_audience
-		FROM %s
-		WHERE client_id = ? AND subject = ? AND
-			  authorized = TRUE AND granted = TRUE AND expires_at IS NOT NULL AND expires_at >= CURRENT_TIMESTAMP;`
-
 	queryFmtInsertOAuth2ConsentSession = `
-		INSERT INTO %s (challenge_id, client_id, subject, authorized, granted, requested_at, responded_at, expires_at,
-		form_data, requested_scopes, granted_scopes, requested_audience, granted_audience)
+		INSERT INTO %s (challenge_id, client_id, subject, authorized, granted, requested_at, responded_at,
+		form_data, requested_scopes, granted_scopes, requested_audience, granted_audience, preconfiguration)
 		VALUES(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?);`
 
 	queryFmtUpdateOAuth2ConsentSessionSubject = `
@@ -259,7 +267,7 @@ const (
 
 	queryFmtUpdateOAuth2ConsentSessionResponse = `
 		UPDATE %s
-		SET authorized = ?, responded_at = CURRENT_TIMESTAMP, expires_at = ?, granted_scopes = ?, granted_audience = ?
+		SET authorized = ?, responded_at = CURRENT_TIMESTAMP, granted_scopes = ?, granted_audience = ?, preconfiguration = ?
 		WHERE id = ? AND responded_at IS NULL;`
 
 	queryFmtUpdateOAuth2ConsentSessionGranted = `
diff --git a/internal/storage/sql_provider_schema_test.go b/internal/storage/sql_provider_schema_test.go
index 8769e52bf..16352e451 100644
--- a/internal/storage/sql_provider_schema_test.go
+++ b/internal/storage/sql_provider_schema_test.go
@@ -31,98 +31,98 @@ func TestShouldReturnErrOnTargetSameAsCurrent(t *testing.T) {
 
 func TestShouldReturnErrOnUpMigrationTargetVersionLessTHanCurrent(t *testing.T) {
 	assert.EqualError(t,
-		schemaMigrateChecks(providerPostgres, true, 0, testLatestVersion),
-		fmt.Sprintf(ErrFmtMigrateUpTargetLessThanCurrent, 0, testLatestVersion))
+		schemaMigrateChecks(providerPostgres, true, 0, LatestVersion),
+		fmt.Sprintf(ErrFmtMigrateUpTargetLessThanCurrent, 0, LatestVersion))
 
 	assert.NoError(t,
-		schemaMigrateChecks(providerPostgres, true, testLatestVersion, 0))
+		schemaMigrateChecks(providerPostgres, true, LatestVersion, 0))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerSQLite, true, 0, testLatestVersion),
-		fmt.Sprintf(ErrFmtMigrateUpTargetLessThanCurrent, 0, testLatestVersion))
+		schemaMigrateChecks(providerSQLite, true, 0, LatestVersion),
+		fmt.Sprintf(ErrFmtMigrateUpTargetLessThanCurrent, 0, LatestVersion))
 
 	assert.NoError(t,
-		schemaMigrateChecks(providerSQLite, true, testLatestVersion, 0))
+		schemaMigrateChecks(providerSQLite, true, LatestVersion, 0))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerMySQL, true, 0, testLatestVersion),
-		fmt.Sprintf(ErrFmtMigrateUpTargetLessThanCurrent, 0, testLatestVersion))
+		schemaMigrateChecks(providerMySQL, true, 0, LatestVersion),
+		fmt.Sprintf(ErrFmtMigrateUpTargetLessThanCurrent, 0, LatestVersion))
 
 	assert.NoError(t,
-		schemaMigrateChecks(providerMySQL, true, testLatestVersion, 0))
+		schemaMigrateChecks(providerMySQL, true, LatestVersion, 0))
 }
 
 func TestMigrationUpShouldReturnErrOnAlreadyLatest(t *testing.T) {
 	assert.Equal(t,
 		ErrSchemaAlreadyUpToDate,
-		schemaMigrateChecks(providerPostgres, true, SchemaLatest, testLatestVersion))
+		schemaMigrateChecks(providerPostgres, true, SchemaLatest, LatestVersion))
 
 	assert.Equal(t,
 		ErrSchemaAlreadyUpToDate,
-		schemaMigrateChecks(providerMySQL, true, SchemaLatest, testLatestVersion))
+		schemaMigrateChecks(providerMySQL, true, SchemaLatest, LatestVersion))
 
 	assert.Equal(t,
 		ErrSchemaAlreadyUpToDate,
-		schemaMigrateChecks(providerSQLite, true, SchemaLatest, testLatestVersion))
+		schemaMigrateChecks(providerSQLite, true, SchemaLatest, LatestVersion))
 }
 
 func TestShouldReturnErrOnVersionDoesntExits(t *testing.T) {
 	assert.EqualError(t,
-		schemaMigrateChecks(providerPostgres, true, SchemaLatest-1, testLatestVersion),
-		fmt.Sprintf(ErrFmtMigrateUpTargetGreaterThanLatest, SchemaLatest-1, testLatestVersion))
+		schemaMigrateChecks(providerPostgres, true, SchemaLatest-1, LatestVersion),
+		fmt.Sprintf(ErrFmtMigrateUpTargetGreaterThanLatest, SchemaLatest-1, LatestVersion))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerMySQL, true, SchemaLatest-1, testLatestVersion),
-		fmt.Sprintf(ErrFmtMigrateUpTargetGreaterThanLatest, SchemaLatest-1, testLatestVersion))
+		schemaMigrateChecks(providerMySQL, true, SchemaLatest-1, LatestVersion),
+		fmt.Sprintf(ErrFmtMigrateUpTargetGreaterThanLatest, SchemaLatest-1, LatestVersion))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerSQLite, true, SchemaLatest-1, testLatestVersion),
-		fmt.Sprintf(ErrFmtMigrateUpTargetGreaterThanLatest, SchemaLatest-1, testLatestVersion))
+		schemaMigrateChecks(providerSQLite, true, SchemaLatest-1, LatestVersion),
+		fmt.Sprintf(ErrFmtMigrateUpTargetGreaterThanLatest, SchemaLatest-1, LatestVersion))
 }
 
 func TestMigrationDownShouldReturnErrOnTargetLessThanPre1(t *testing.T) {
 	assert.EqualError(t,
-		schemaMigrateChecks(providerSQLite, false, -4, testLatestVersion),
+		schemaMigrateChecks(providerSQLite, false, -4, LatestVersion),
 		fmt.Sprintf(ErrFmtMigrateDownTargetLessThanMinimum, -4))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerMySQL, false, -2, testLatestVersion),
+		schemaMigrateChecks(providerMySQL, false, -2, LatestVersion),
 		fmt.Sprintf(ErrFmtMigrateDownTargetLessThanMinimum, -2))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerPostgres, false, -2, testLatestVersion),
+		schemaMigrateChecks(providerPostgres, false, -2, LatestVersion),
 		fmt.Sprintf(ErrFmtMigrateDownTargetLessThanMinimum, -2))
 
 	assert.NoError(t,
-		schemaMigrateChecks(providerPostgres, false, -1, testLatestVersion))
+		schemaMigrateChecks(providerPostgres, false, -1, LatestVersion))
 }
 
 func TestMigrationDownShouldReturnErrOnTargetVersionGreaterThanCurrent(t *testing.T) {
 	assert.EqualError(t,
-		schemaMigrateChecks(providerSQLite, false, testLatestVersion, 0),
-		fmt.Sprintf(ErrFmtMigrateDownTargetGreaterThanCurrent, testLatestVersion, 0))
+		schemaMigrateChecks(providerSQLite, false, LatestVersion, 0),
+		fmt.Sprintf(ErrFmtMigrateDownTargetGreaterThanCurrent, LatestVersion, 0))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerMySQL, false, testLatestVersion, 0),
-		fmt.Sprintf(ErrFmtMigrateDownTargetGreaterThanCurrent, testLatestVersion, 0))
+		schemaMigrateChecks(providerMySQL, false, LatestVersion, 0),
+		fmt.Sprintf(ErrFmtMigrateDownTargetGreaterThanCurrent, LatestVersion, 0))
 
 	assert.EqualError(t,
-		schemaMigrateChecks(providerPostgres, false, testLatestVersion, 0),
-		fmt.Sprintf(ErrFmtMigrateDownTargetGreaterThanCurrent, testLatestVersion, 0))
+		schemaMigrateChecks(providerPostgres, false, LatestVersion, 0),
+		fmt.Sprintf(ErrFmtMigrateDownTargetGreaterThanCurrent, LatestVersion, 0))
 }
 
 func TestShouldReturnErrWhenCurrentIsGreaterThanLatest(t *testing.T) {
 	assert.EqualError(t,
 		schemaMigrateChecks(providerPostgres, true, SchemaLatest-4, SchemaLatest-5),
-		fmt.Sprintf(errFmtSchemaCurrentGreaterThanLatestKnown, testLatestVersion))
+		fmt.Sprintf(errFmtSchemaCurrentGreaterThanLatestKnown, LatestVersion))
 
 	assert.EqualError(t,
 		schemaMigrateChecks(providerMySQL, true, SchemaLatest-4, SchemaLatest-5),
-		fmt.Sprintf(errFmtSchemaCurrentGreaterThanLatestKnown, testLatestVersion))
+		fmt.Sprintf(errFmtSchemaCurrentGreaterThanLatestKnown, LatestVersion))
 
 	assert.EqualError(t,
 		schemaMigrateChecks(providerSQLite, true, SchemaLatest-4, SchemaLatest-5),
-		fmt.Sprintf(errFmtSchemaCurrentGreaterThanLatestKnown, testLatestVersion))
+		fmt.Sprintf(errFmtSchemaCurrentGreaterThanLatestKnown, LatestVersion))
 }
 
 func TestSchemaVersionToString(t *testing.T) {
diff --git a/internal/storage/sql_rows.go b/internal/storage/sql_rows.go
index 148dbf38d..f89c19121 100644
--- a/internal/storage/sql_rows.go
+++ b/internal/storage/sql_rows.go
@@ -8,13 +8,13 @@ import (
 	"github.com/authelia/authelia/v4/internal/model"
 )
 
-// ConsentSessionRows holds and assists with retrieving multiple model.OAuth2ConsentSession rows.
-type ConsentSessionRows struct {
+// ConsentPreConfigRows holds and assists with retrieving multiple model.OAuth2ConsentSession rows.
+type ConsentPreConfigRows struct {
 	rows *sqlx.Rows
 }
 
 // Next is the row iterator.
-func (r *ConsentSessionRows) Next() bool {
+func (r *ConsentPreConfigRows) Next() bool {
 	if r.rows == nil {
 		return false
 	}
@@ -23,7 +23,7 @@ func (r *ConsentSessionRows) Next() bool {
 }
 
 // Close the rows.
-func (r *ConsentSessionRows) Close() (err error) {
+func (r *ConsentPreConfigRows) Close() (err error) {
 	if r.rows == nil {
 		return nil
 	}
@@ -32,16 +32,16 @@ func (r *ConsentSessionRows) Close() (err error) {
 }
 
 // Get returns the *model.OAuth2ConsentSession or scan error.
-func (r *ConsentSessionRows) Get() (consent *model.OAuth2ConsentSession, err error) {
+func (r *ConsentPreConfigRows) Get() (config *model.OAuth2ConsentPreConfig, err error) {
 	if r.rows == nil {
 		return nil, sql.ErrNoRows
 	}
 
-	consent = &model.OAuth2ConsentSession{}
+	config = &model.OAuth2ConsentPreConfig{}
 
-	if err = r.rows.StructScan(consent); err != nil {
+	if err = r.rows.StructScan(config); err != nil {
 		return nil, err
 	}
 
-	return consent, nil
+	return config, nil
 }
diff --git a/internal/suites/example/compose/oidc-client/docker-compose.yml b/internal/suites/example/compose/oidc-client/docker-compose.yml
index 3a9ecc808..c9645d8a9 100644
--- a/internal/suites/example/compose/oidc-client/docker-compose.yml
+++ b/internal/suites/example/compose/oidc-client/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   oidc-client:
-    image: ghcr.io/authelia/oidc-tester-app:master-01ff268
+    image: ghcr.io/authelia/oidc-tester-app:master-aeac7f4
     command: /entrypoint.sh
     depends_on:
       - authelia-backend
diff --git a/internal/suites/scenario_oidc_test.go b/internal/suites/scenario_oidc_test.go
index f303d4615..65b867471 100644
--- a/internal/suites/scenario_oidc_test.go
+++ b/internal/suites/scenario_oidc_test.go
@@ -10,6 +10,8 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/suite"
+
+	"github.com/authelia/authelia/v4/internal/oidc"
 )
 
 type OIDCScenario struct {
@@ -101,36 +103,44 @@ func (s *OIDCScenario) TestShouldAuthorizeAccessToOIDCApp() {
 	rBase64 := regexp.MustCompile(`^[-_A-Za-z0-9+\\/]+([=]{0,3})$`)
 
 	testCases := []struct {
-		desc, elementID, elementText string
-		pattern                      *regexp.Regexp
+		desc, elementID string
+		expected        any
 	}{
-		{"welcome", "welcome", "Logged in as john!", nil},
-		{"at_hash", "claim-at_hash", "", rBase64},
-		{"jti", "claim-jti", "", rUUID},
-		{"iat", "claim-iat", "", rInteger},
-		{"nbf", "claim-nbf", "", rInteger},
-		{"rat", "claim-rat", "", rInteger},
-		{"expires", "claim-exp", "", rInteger},
-		{"amr", "claim-amr", "pwd, otp, mfa", nil},
-		{"acr", "claim-acr", "", nil},
-		{"issuer", "claim-iss", "https://login.example.com:8080", nil},
-		{"name", "claim-name", "John Doe", nil},
-		{"preferred_username", "claim-preferred_username", "john", nil},
-		{"groups", "claim-groups", "admins, dev", nil},
-		{"email", "claim-email", "john.doe@authelia.com", nil},
-		{"email_verified", "claim-email_verified", "", rBoolean},
+		{"welcome", "welcome", "Logged in as john!"},
+		{oidc.ClaimAccessTokenHash, "", rBase64},
+		{oidc.ClaimJWTID, "", rUUID},
+		{oidc.ClaimIssuedAt, "", rInteger},
+		{oidc.ClaimSubject, "", rUUID},
+		{oidc.ClaimNotBefore, "", rInteger},
+		{oidc.ClaimRequestedAt, "", rInteger},
+		{oidc.ClaimExpirationTime, "", rInteger},
+		{oidc.ClaimAuthenticationMethodsReference, "", "pwd, otp, mfa"},
+		{oidc.ClaimAuthenticationContextClassReference, "", ""},
+		{oidc.ClaimIssuer, "", "https://login.example.com:8080"},
+		{oidc.ClaimFullName, "", "John Doe"},
+		{oidc.ClaimPreferredUsername, "", "john"},
+		{oidc.ClaimGroups, "", "admins, dev"},
+		{oidc.ClaimPreferredEmail, "", "john.doe@authelia.com"},
+		{oidc.ClaimEmailVerified, "", rBoolean},
 	}
 
-	var text string
+	var actual string
 
 	for _, tc := range testCases {
 		s.T().Run(fmt.Sprintf("check_claims/%s", tc.desc), func(t *testing.T) {
-			text, err = s.WaitElementLocatedByID(t, s.Context(ctx), tc.elementID).Text()
+			switch tc.elementID {
+			case "":
+				actual, err = s.WaitElementLocatedByID(t, s.Context(ctx), "claim-"+tc.desc).Text()
+			default:
+				actual, err = s.WaitElementLocatedByID(t, s.Context(ctx), tc.elementID).Text()
+			}
+
 			assert.NoError(t, err)
-			if tc.pattern == nil {
-				assert.Equal(t, tc.elementText, text)
-			} else {
-				assert.Regexp(t, tc.pattern, text)
+			switch expected := tc.expected.(type) {
+			case *regexp.Regexp:
+				assert.Regexp(t, expected, actual)
+			default:
+				assert.Equal(t, expected, actual)
 			}
 		})
 	}
diff --git a/web/src/constants/SearchParams.ts b/web/src/constants/SearchParams.ts
new file mode 100644
index 000000000..c23f1a2f6
--- /dev/null
+++ b/web/src/constants/SearchParams.ts
@@ -0,0 +1 @@
+export const Identifier = "id";
diff --git a/web/src/hooks/Consent.ts b/web/src/hooks/Consent.ts
deleted file mode 100644
index 08300c6e6..000000000
--- a/web/src/hooks/Consent.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-import { useRemoteCall } from "@hooks/RemoteCall";
-import { getConsentResponse } from "@services/Consent";
-
-export function useConsentResponse() {
-    return useRemoteCall(getConsentResponse, []);
-}
diff --git a/web/src/hooks/ConsentID.ts b/web/src/hooks/ConsentID.ts
deleted file mode 100644
index b780fc601..000000000
--- a/web/src/hooks/ConsentID.ts
+++ /dev/null
@@ -1,8 +0,0 @@
-import queryString from "query-string";
-import { useLocation } from "react-router-dom";
-
-export function useConsentID() {
-    const location = useLocation();
-    const queryParams = queryString.parse(location.search);
-    return queryParams && "consent_id" in queryParams ? (queryParams["consent_id"] as string) : undefined;
-}
diff --git a/web/src/hooks/Workflow.ts b/web/src/hooks/Workflow.ts
index f4a56a4cf..659b5546d 100644
--- a/web/src/hooks/Workflow.ts
+++ b/web/src/hooks/Workflow.ts
@@ -1,8 +1,10 @@
-import queryString from "query-string";
-import { useLocation } from "react-router-dom";
+import { useSearchParams } from "react-router-dom";
 
-export function useWorkflow() {
-    const location = useLocation();
-    const queryParams = queryString.parse(location.search);
-    return queryParams && "workflow" in queryParams ? (queryParams["workflow"] as string) : undefined;
+export function useWorkflow(): [string | undefined, string | undefined] {
+    const [searchParams] = useSearchParams();
+
+    const workflow = searchParams.get("workflow");
+    const id = searchParams.get("workflow_id");
+
+    return [workflow === null ? undefined : workflow, id === null ? undefined : id];
 }
diff --git a/web/src/models/Webauthn.ts b/web/src/models/Webauthn.ts
index bdbfb2f6a..bbd75503d 100644
--- a/web/src/models/Webauthn.ts
+++ b/web/src/models/Webauthn.ts
@@ -76,6 +76,8 @@ export interface PublicKeyCredentialJSON
     clientExtensionResults: AuthenticationExtensionsClientOutputs;
     response: AuthenticatorAssertionResponseJSON;
     targetURL?: string;
+    workflow?: string;
+    workflowID?: string;
 }
 
 export enum AttestationResult {
diff --git a/web/src/services/Consent.ts b/web/src/services/Consent.ts
index a3a26380e..ed535f7d0 100644
--- a/web/src/services/Consent.ts
+++ b/web/src/services/Consent.ts
@@ -2,8 +2,8 @@ import { ConsentPath } from "@services/Api";
 import { Get, Post } from "@services/Client";
 
 interface ConsentPostRequestBody {
+    id?: string;
     client_id: string;
-    consent_id?: string;
     consent: boolean;
     pre_configure: boolean;
 }
@@ -21,23 +21,23 @@ export interface ConsentGetResponseBody {
 }
 
 export function getConsentResponse(consentID: string) {
-    return Get<ConsentGetResponseBody>(ConsentPath + "?consent_id=" + consentID);
+    return Get<ConsentGetResponseBody>(ConsentPath + "?id=" + consentID);
 }
 
-export function acceptConsent(preConfigure: boolean, clientID: string, consentID?: string) {
+export function acceptConsent(preConfigure: boolean, clientID: string, consentID: string | null) {
     const body: ConsentPostRequestBody = {
+        id: consentID === null ? undefined : consentID,
         client_id: clientID,
-        consent_id: consentID,
         consent: true,
         pre_configure: preConfigure,
     };
     return Post<ConsentPostResponseBody>(ConsentPath, body);
 }
 
-export function rejectConsent(clientID: string, consentID?: string) {
+export function rejectConsent(clientID: string, consentID: string | null) {
     const body: ConsentPostRequestBody = {
+        id: consentID === null ? undefined : consentID,
         client_id: clientID,
-        consent_id: consentID,
         consent: false,
         pre_configure: false,
     };
diff --git a/web/src/services/OneTimePassword.ts b/web/src/services/OneTimePassword.ts
index 51e9f3164..ec66e9e83 100644
--- a/web/src/services/OneTimePassword.ts
+++ b/web/src/services/OneTimePassword.ts
@@ -2,21 +2,20 @@ import { CompleteTOTPSignInPath } from "@services/Api";
 import { PostWithOptionalResponse } from "@services/Client";
 import { SignInResponse } from "@services/SignIn";
 
-interface CompleteTOTPSigninBody {
+interface CompleteTOTPSignInBody {
     token: string;
     targetURL?: string;
     workflow?: string;
+    workflowID?: string;
 }
 
-export function completeTOTPSignIn(passcode: string, targetURL?: string, workflow?: string) {
-    const body: CompleteTOTPSigninBody = { token: `${passcode}` };
-    if (targetURL) {
-        body.targetURL = targetURL;
-    }
-
-    if (workflow) {
-        body.workflow = workflow;
-    }
+export function completeTOTPSignIn(passcode: string, targetURL?: string, workflow?: string, workflowID?: string) {
+    const body: CompleteTOTPSignInBody = {
+        token: `${passcode}`,
+        targetURL: targetURL,
+        workflow: workflow,
+        workflowID: workflowID,
+    };
 
     return PostWithOptionalResponse<SignInResponse>(CompleteTOTPSignInPath, body);
 }
diff --git a/web/src/services/PushNotification.ts b/web/src/services/PushNotification.ts
index 2a7e40872..c24b08a50 100644
--- a/web/src/services/PushNotification.ts
+++ b/web/src/services/PushNotification.ts
@@ -5,20 +5,18 @@ import {
 } from "@services/Api";
 import { Get, PostWithOptionalResponse } from "@services/Client";
 
-interface CompletePushSigninBody {
+interface CompletePushSignInBody {
     targetURL?: string;
     workflow?: string;
+    workflowID?: string;
 }
 
-export function completePushNotificationSignIn(targetURL?: string, workflow?: string) {
-    const body: CompletePushSigninBody = {};
-    if (targetURL) {
-        body.targetURL = targetURL;
-    }
-
-    if (workflow) {
-        body.workflow = workflow;
-    }
+export function completePushNotificationSignIn(targetURL?: string, workflow?: string, workflowID?: string) {
+    const body: CompletePushSignInBody = {
+        targetURL: targetURL,
+        workflow: workflow,
+        workflowID: workflowID,
+    };
 
     return PostWithOptionalResponse<DuoSignInResponse>(CompletePushNotificationSignInPath, body);
 }
diff --git a/web/src/services/Webauthn.ts b/web/src/services/Webauthn.ts
index 176fd840d..7dc2de6ce 100644
--- a/web/src/services/Webauthn.ts
+++ b/web/src/services/Webauthn.ts
@@ -131,6 +131,8 @@ function encodeAttestationPublicKeyCredential(
 function encodeAssertionPublicKeyCredential(
     credential: PublicKeyCredential,
     targetURL: string | undefined,
+    workflow: string | undefined,
+    workflowID: string | undefined,
 ): PublicKeyCredentialJSON {
     const response = credential.response as AuthenticatorAssertionResponse;
 
@@ -154,6 +156,8 @@ function encodeAssertionPublicKeyCredential(
             userHandle: userHandle,
         },
         targetURL: targetURL,
+        workflow: workflow,
+        workflowID: workflowID,
     };
 }
 
@@ -319,8 +323,10 @@ async function postAttestationPublicKeyCredentialResult(
 export async function postAssertionPublicKeyCredentialResult(
     credential: PublicKeyCredential,
     targetURL: string | undefined,
+    workflow?: string,
+    workflowID?: string,
 ): Promise<AxiosResponse<ServiceResponse<SignInResponse>>> {
-    const credentialJSON = encodeAssertionPublicKeyCredential(credential, targetURL);
+    const credentialJSON = encodeAssertionPublicKeyCredential(credential, targetURL, workflow, workflowID);
 
     return axios.post<ServiceResponse<SignInResponse>>(WebauthnAssertionPath, credentialJSON);
 }
@@ -353,7 +359,11 @@ export async function performAttestationCeremony(token: string): Promise<Attesta
     return AttestationResult.Failure;
 }
 
-export async function performAssertionCeremony(targetURL: string | undefined): Promise<AssertionResult> {
+export async function performAssertionCeremony(
+    targetURL?: string,
+    workflow?: string,
+    workflowID?: string,
+): Promise<AssertionResult> {
     const assertionRequestOpts = await getAssertionRequestOptions();
 
     if (assertionRequestOpts.status !== 200 || assertionRequestOpts.options == null) {
@@ -368,7 +378,12 @@ export async function performAssertionCeremony(targetURL: string | undefined): P
         return AssertionResult.Failure;
     }
 
-    const response = await postAssertionPublicKeyCredentialResult(assertionResult.credential, targetURL);
+    const response = await postAssertionPublicKeyCredentialResult(
+        assertionResult.credential,
+        targetURL,
+        workflow,
+        workflowID,
+    );
 
     if (response.data.status === "OK" && response.status === 200) {
         return AssertionResult.Success;
diff --git a/web/src/views/LoginPortal/ConsentView/ConsentView.tsx b/web/src/views/LoginPortal/ConsentView/ConsentView.tsx
index 1eb3f6625..642d14fce 100644
--- a/web/src/views/LoginPortal/ConsentView/ConsentView.tsx
+++ b/web/src/views/LoginPortal/ConsentView/ConsentView.tsx
@@ -16,10 +16,10 @@ import {
 } from "@mui/material";
 import makeStyles from "@mui/styles/makeStyles";
 import { useTranslation } from "react-i18next";
-import { useNavigate } from "react-router-dom";
+import { useNavigate, useSearchParams } from "react-router-dom";
 
 import { IndexRoute } from "@constants/Routes";
-import { useConsentID } from "@hooks/ConsentID";
+import { Identifier } from "@constants/SearchParams";
 import { useNotifications } from "@hooks/NotificationsContext";
 import { useRedirector } from "@hooks/Redirector";
 import { useUserInfoGET } from "@hooks/UserInfo";
@@ -50,8 +50,9 @@ const ConsentView = function (props: Props) {
     const styles = useStyles();
     const { t: translate } = useTranslation();
     const navigate = useNavigate();
+    const [searchParams] = useSearchParams();
     const redirect = useRedirector();
-    const consentID = useConsentID();
+    const consentID = searchParams.get(Identifier);
     const { createErrorNotification, resetNotification } = useNotifications();
     const [response, setResponse] = useState<ConsentGetResponseBody | undefined>(undefined);
     const [error, setError] = useState<any>(undefined);
@@ -68,7 +69,7 @@ const ConsentView = function (props: Props) {
     }, [fetchUserInfo]);
 
     useEffect(() => {
-        if (consentID) {
+        if (consentID !== null) {
             getConsentResponse(consentID)
                 .then((r) => {
                     setResponse(r);
diff --git a/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx b/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx
index 5c03eec52..f6ed2a055 100644
--- a/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx
+++ b/web/src/views/LoginPortal/FirstFactor/FirstFactorForm.tsx
@@ -34,7 +34,7 @@ const FirstFactorForm = function (props: Props) {
     const navigate = useNavigate();
     const redirectionURL = useRedirectionURL();
     const requestMethod = useRequestMethod();
-    const workflow = useWorkflow();
+    const [workflow] = useWorkflow();
 
     const loginChannel = useMemo(() => new BroadcastChannel<boolean>("login"), []);
     const [rememberMe, setRememberMe] = useState(false);
diff --git a/web/src/views/LoginPortal/LoginPortal.tsx b/web/src/views/LoginPortal/LoginPortal.tsx
index bb1d7daf0..bcb66c86b 100644
--- a/web/src/views/LoginPortal/LoginPortal.tsx
+++ b/web/src/views/LoginPortal/LoginPortal.tsx
@@ -1,6 +1,6 @@
 import React, { Fragment, ReactNode, useCallback, useEffect, useState } from "react";
 
-import { Route, Routes, useLocation, useNavigate } from "react-router-dom";
+import { Route, Routes, useLocation, useNavigate, useSearchParams } from "react-router-dom";
 
 import {
     AuthenticatedRoute,
@@ -14,10 +14,8 @@ import { useConfiguration } from "@hooks/Configuration";
 import { useNotifications } from "@hooks/NotificationsContext";
 import { useRedirectionURL } from "@hooks/RedirectionURL";
 import { useRedirector } from "@hooks/Redirector";
-import { useRequestMethod } from "@hooks/RequestMethod";
 import { useAutheliaState } from "@hooks/State";
 import { useUserInfoPOST } from "@hooks/UserInfo";
-import { useWorkflow } from "@hooks/Workflow";
 import { SecondFactorMethod } from "@models/Methods";
 import { checkSafeRedirection } from "@services/SafeRedirection";
 import { AuthenticationLevel } from "@services/State";
@@ -41,8 +39,6 @@ const LoginPortal = function (props: Props) {
     const navigate = useNavigate();
     const location = useLocation();
     const redirectionURL = useRedirectionURL();
-    const requestMethod = useRequestMethod();
-    const workflow = useWorkflow();
     const { createErrorNotification } = useNotifications();
     const [firstFactorDisabled, setFirstFactorDisabled] = useState(true);
     const [broadcastRedirect, setBroadcastRedirect] = useState(false);
@@ -51,16 +47,23 @@ const LoginPortal = function (props: Props) {
     const [state, fetchState, , fetchStateError] = useAutheliaState();
     const [userInfo, fetchUserInfo, , fetchUserInfoError] = useUserInfoPOST();
     const [configuration, fetchConfiguration, , fetchConfigurationError] = useConfiguration();
+    const [searchParams] = useSearchParams();
 
     const redirect = useCallback(
-        (pathname: string, search?: string) => {
-            if (search) {
-                navigate({ pathname: pathname, search: search });
+        (
+            pathname: string,
+            preserveSearchParams: boolean = true,
+            searchParamsOverride: URLSearchParams | undefined = undefined,
+        ) => {
+            if (searchParamsOverride && URLSearchParamsHasValues(searchParamsOverride)) {
+                navigate({ pathname: pathname, search: `?${searchParamsOverride.toString()}` });
+            } else if (preserveSearchParams && URLSearchParamsHasValues(searchParams)) {
+                navigate({ pathname: pathname, search: `?${searchParams.toString()}` });
             } else {
                 navigate({ pathname: pathname });
             }
         },
-        [navigate],
+        [navigate, searchParams],
     );
 
     // Fetch the state when portal is mounted.
@@ -132,25 +135,19 @@ const LoginPortal = function (props: Props) {
                 return;
             }
 
-            const search = redirectionURL
-                ? `?rd=${encodeURIComponent(redirectionURL)}${requestMethod ? `&rm=${requestMethod}` : ""}${
-                      workflow ? `&workflow=${workflow}` : ""
-                  }`
-                : undefined;
-
             if (state.authentication_level === AuthenticationLevel.Unauthenticated) {
                 setFirstFactorDisabled(false);
-                redirect(IndexRoute, search);
+                redirect(IndexRoute);
             } else if (state.authentication_level >= AuthenticationLevel.OneFactor && userInfo && configuration) {
                 if (configuration.available_methods.size === 0) {
-                    redirect(AuthenticatedRoute);
+                    redirect(AuthenticatedRoute, false);
                 } else {
                     if (userInfo.method === SecondFactorMethod.Webauthn) {
-                        redirect(`${SecondFactorRoute}${SecondFactorWebauthnSubRoute}`, search);
+                        redirect(`${SecondFactorRoute}${SecondFactorWebauthnSubRoute}`);
                     } else if (userInfo.method === SecondFactorMethod.MobilePush) {
-                        redirect(`${SecondFactorRoute}${SecondFactorPushSubRoute}`, search);
+                        redirect(`${SecondFactorRoute}${SecondFactorPushSubRoute}`);
                     } else {
-                        redirect(`${SecondFactorRoute}${SecondFactorTOTPSubRoute}`, search);
+                        redirect(`${SecondFactorRoute}${SecondFactorTOTPSubRoute}`);
                     }
                 }
             }
@@ -158,8 +155,6 @@ const LoginPortal = function (props: Props) {
     }, [
         state,
         redirectionURL,
-        requestMethod,
-        workflow,
         redirect,
         userInfo,
         setFirstFactorDisabled,
@@ -249,3 +244,7 @@ function ComponentOrLoading(props: ComponentOrLoadingProps) {
         </Fragment>
     );
 }
+
+function URLSearchParamsHasValues(params?: URLSearchParams) {
+    return params ? !params.entries().next().done : false;
+}
diff --git a/web/src/views/LoginPortal/SecondFactor/OneTimePasswordMethod.tsx b/web/src/views/LoginPortal/SecondFactor/OneTimePasswordMethod.tsx
index 8f9309603..5cd60d08f 100644
--- a/web/src/views/LoginPortal/SecondFactor/OneTimePasswordMethod.tsx
+++ b/web/src/views/LoginPortal/SecondFactor/OneTimePasswordMethod.tsx
@@ -34,7 +34,7 @@ const OneTimePasswordMethod = function (props: Props) {
         props.authenticationLevel === AuthenticationLevel.TwoFactor ? State.Success : State.Idle,
     );
     const redirectionURL = useRedirectionURL();
-    const workflow = useWorkflow();
+    const [workflow, workflowID] = useWorkflow();
     const { t: translate } = useTranslation();
 
     const { onSignInSuccess, onSignInError } = props;
@@ -69,7 +69,7 @@ const OneTimePasswordMethod = function (props: Props) {
 
         try {
             setState(State.InProgress);
-            const res = await completeTOTPSignIn(passcodeStr, redirectionURL, workflow);
+            const res = await completeTOTPSignIn(passcodeStr, redirectionURL, workflow, workflowID);
             setState(State.Success);
             onSignInSuccessCallback(res ? res.redirect : undefined);
         } catch (err) {
@@ -84,6 +84,7 @@ const OneTimePasswordMethod = function (props: Props) {
         passcode,
         redirectionURL,
         workflow,
+        workflowID,
         resp,
         props.authenticationLevel,
         props.registered,
diff --git a/web/src/views/LoginPortal/SecondFactor/PushNotificationMethod.tsx b/web/src/views/LoginPortal/SecondFactor/PushNotificationMethod.tsx
index ecccb345e..ea4b93890 100644
--- a/web/src/views/LoginPortal/SecondFactor/PushNotificationMethod.tsx
+++ b/web/src/views/LoginPortal/SecondFactor/PushNotificationMethod.tsx
@@ -45,7 +45,7 @@ const PushNotificationMethod = function (props: Props) {
     const styles = useStyles();
     const [state, setState] = useState(State.SignInInProgress);
     const redirectionURL = useRedirectionURL();
-    const workflow = useWorkflow();
+    const [workflow, workflowID] = useWorkflow();
     const mounted = useIsMountedRef();
     const [enroll_url, setEnrollUrl] = useState("");
     const [devices, setDevices] = useState([] as SelectableDevice[]);
@@ -95,7 +95,7 @@ const PushNotificationMethod = function (props: Props) {
 
         try {
             setState(State.SignInInProgress);
-            const res = await completePushNotificationSignIn(redirectionURL, workflow);
+            const res = await completePushNotificationSignIn(redirectionURL, workflow, workflowID);
             // If the request was initiated and the user changed 2FA method in the meantime,
             // the process is interrupted to avoid updating state of unmounted component.
             if (!mounted.current) return;
@@ -139,6 +139,7 @@ const PushNotificationMethod = function (props: Props) {
         props.duoSelfEnrollment,
         redirectionURL,
         workflow,
+        workflowID,
         mounted,
         onSignInErrorCallback,
         onSignInSuccessCallback,
diff --git a/web/src/views/LoginPortal/SecondFactor/WebauthnMethod.tsx b/web/src/views/LoginPortal/SecondFactor/WebauthnMethod.tsx
index 6b42dd1c1..96fa00fcf 100644
--- a/web/src/views/LoginPortal/SecondFactor/WebauthnMethod.tsx
+++ b/web/src/views/LoginPortal/SecondFactor/WebauthnMethod.tsx
@@ -9,6 +9,7 @@ import LinearProgressBar from "@components/LinearProgressBar";
 import { useIsMountedRef } from "@hooks/Mounted";
 import { useRedirectionURL } from "@hooks/RedirectionURL";
 import { useTimer } from "@hooks/Timer";
+import { useWorkflow } from "@hooks/Workflow";
 import { AssertionResult } from "@models/Webauthn";
 import { AuthenticationLevel } from "@services/State";
 import {
@@ -40,6 +41,7 @@ const WebauthnMethod = function (props: Props) {
     const [state, setState] = useState(State.WaitTouch);
     const styles = useStyles();
     const redirectionURL = useRedirectionURL();
+    const [workflow, workflowID] = useWorkflow();
     const mounted = useIsMountedRef();
     const [timerPercent, triggerTimer] = useTimer(signInTimeout * 1000 - 500);
 
@@ -112,7 +114,12 @@ const WebauthnMethod = function (props: Props) {
 
             setState(State.InProgress);
 
-            const response = await postAssertionPublicKeyCredentialResult(result.credential, redirectionURL);
+            const response = await postAssertionPublicKeyCredentialResult(
+                result.credential,
+                redirectionURL,
+                workflow,
+                workflowID,
+            );
 
             if (response.data.status === "OK" && response.status === 200) {
                 onSignInSuccessCallback(response.data.data ? response.data.data.redirect : undefined);
@@ -135,6 +142,8 @@ const WebauthnMethod = function (props: Props) {
         onSignInErrorCallback,
         onSignInSuccessCallback,
         redirectionURL,
+        workflow,
+        workflowID,
         mounted,
         triggerTimer,
         props.authenticationLevel,

From 248f1d49d45c2fb1e9cf5727addca44aa17c5376 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Thu, 20 Oct 2022 14:21:45 +1100
Subject: [PATCH 160/263] feat(oidc): hashed client secrets (#4026)

Allow use of hashed OpenID Connect client secrets.
---
 ...contributing-development-commitmsg.md.tmpl |  1 +
 .../identity-providers/open-id-connect.md     |  6 +-
 .../contributing/guidelines/commit-message.md |  1 +
 .../contributing/guidelines/pull-request.md   |  2 +-
 .../openid-connect/apache-guacamole/index.md  |  2 +-
 .../openid-connect/argocd/index.md            |  2 +-
 .../openid-connect/bookstack/index.md         |  2 +-
 .../cloudflare-zerotrust/index.md             |  2 +-
 .../integration/openid-connect/gitea/index.md |  2 +-
 .../openid-connect/gitlab/index.md            |  2 +-
 .../openid-connect/grafana/index.md           |  2 +-
 .../openid-connect/harbor/index.md            |  2 +-
 .../openid-connect/hashicorp-vault/index.md   |  2 +-
 .../integration/openid-connect/komga/index.md |  2 +-
 .../openid-connect/nextcloud/index.md         |  2 +-
 .../openid-connect/outline/index.md           |  2 +-
 .../openid-connect/portainer/index.md         |  2 +-
 .../openid-connect/proxmox/index.md           |  2 +-
 .../openid-connect/seafile/index.md           |  2 +-
 .../openid-connect/synapse/index.md           |  2 +-
 .../en/reference/guides/rule-operators.md     |  2 +-
 internal/configuration/decode_hooks.go        | 52 +++++++++++++++++
 internal/configuration/provider.go            |  1 +
 .../schema/identity_providers.go              | 10 ++--
 internal/configuration/schema/types.go        | 25 ++++++++
 .../test_resources/config_oidc.yml            |  2 +-
 .../validator/identity_providers.go           |  4 +-
 .../validator/identity_providers_test.go      | 58 +++++++++++--------
 internal/oidc/client.go                       |  8 ++-
 internal/oidc/client_test.go                  | 47 ++++++++++-----
 internal/oidc/hasher.go                       | 19 ++++--
 internal/oidc/hasher_test.go                  | 10 ++--
 internal/oidc/provider.go                     |  2 +-
 internal/oidc/provider_test.go                | 12 ++--
 internal/oidc/store_test.go                   | 14 ++---
 internal/oidc/types.go                        |  7 ++-
 36 files changed, 218 insertions(+), 97 deletions(-)

diff --git a/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl b/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
index 7384db785..28f51882c 100644
--- a/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
+++ b/cmd/authelia-gen/templates/docs-contributing-development-commitmsg.md.tmpl
@@ -12,6 +12,7 @@ weight: 320
 toc: true
 aliases:
   - /docs/contributing/commitmsg-guidelines.html
+  - /contributing/development/guidelines-commit-message/
 ---
 
 The reasons for these conventions are as follows:
diff --git a/docs/content/en/configuration/identity-providers/open-id-connect.md b/docs/content/en/configuration/identity-providers/open-id-connect.md
index 57e31742d..e1018e764 100644
--- a/docs/content/en/configuration/identity-providers/open-id-connect.md
+++ b/docs/content/en/configuration/identity-providers/open-id-connect.md
@@ -118,7 +118,7 @@ identity_providers:
     clients:
       - id: myapp
         description: My Application
-        secret: this_is_a_secret
+        secret: '$plaintext$this_is_a_secret'
         sector_identifier: ''
         public: false
         authorization_policy: two_factor
@@ -352,7 +352,9 @@ A friendly description for this client shown in the UI. This defaults to the sam
 {{< confkey type="string" required="situational" >}}
 
 The shared secret between Authelia and the application consuming this client. This secret must match the secret
-configured in the application. Currently this is stored in plain text.
+configured in the application. This can either be stored in plain text (by prefixing the plain text secret with
+`$plaintext$` or can be a hashed password generated with
+[authelia crypto hash](../../reference/cli/authelia/authelia_hash-password.md).
 
 This secret must be generated by the administrator and can be done by following the
 [Generating a Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) guide.
diff --git a/docs/content/en/contributing/guidelines/commit-message.md b/docs/content/en/contributing/guidelines/commit-message.md
index 1260b5108..8683eb194 100644
--- a/docs/content/en/contributing/guidelines/commit-message.md
+++ b/docs/content/en/contributing/guidelines/commit-message.md
@@ -12,6 +12,7 @@ weight: 320
 toc: true
 aliases:
   - /docs/contributing/commitmsg-guidelines.html
+  - /contributing/development/guidelines-commit-message/
 ---
 
 The reasons for these conventions are as follows:
diff --git a/docs/content/en/contributing/guidelines/pull-request.md b/docs/content/en/contributing/guidelines/pull-request.md
index b7aa4ffa5..d3f2830ab 100644
--- a/docs/content/en/contributing/guidelines/pull-request.md
+++ b/docs/content/en/contributing/guidelines/pull-request.md
@@ -11,7 +11,7 @@ menu:
 weight: 320
 toc: true
 aliases:
-  - /contributing/development/pull-request/
+  - /contributing/development/guidelines-pull-request/
 ---
 
 [Pull Request] guidelines are in place in order to maintain consistency and clearly communicate our process for
diff --git a/docs/content/en/integration/openid-connect/apache-guacamole/index.md b/docs/content/en/integration/openid-connect/apache-guacamole/index.md
index 26bd069d0..c609109c5 100644
--- a/docs/content/en/integration/openid-connect/apache-guacamole/index.md
+++ b/docs/content/en/integration/openid-connect/apache-guacamole/index.md
@@ -59,7 +59,7 @@ The following YAML configuration is an example __Authelia__
 ```yaml
 - id: guacamole
   description: Apache Guacamole
-  secret: guacamole_client_secret
+  secret: '$plaintext$guacamole_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/argocd/index.md b/docs/content/en/integration/openid-connect/argocd/index.md
index 64a3b7bc2..625b97e3b 100644
--- a/docs/content/en/integration/openid-connect/argocd/index.md
+++ b/docs/content/en/integration/openid-connect/argocd/index.md
@@ -62,7 +62,7 @@ which will operate with the above example:
 ```yaml
 - id: argocd
   description: Argo CD
-  secret: argocd_client_secret
+  secret: '$plaintext$argocd_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/bookstack/index.md b/docs/content/en/integration/openid-connect/bookstack/index.md
index a23399516..f1a10653a 100644
--- a/docs/content/en/integration/openid-connect/bookstack/index.md
+++ b/docs/content/en/integration/openid-connect/bookstack/index.md
@@ -64,7 +64,7 @@ which will operate with the above example:
 ```yaml
 - id: bookstack
   description: BookStack
-  secret: bookstack_client_secret
+  secret: '$plaintext$bookstack_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
index 0ff85a013..97fc8e3d7 100644
--- a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
+++ b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
@@ -72,7 +72,7 @@ which will operate with the above example:
 ```yaml
 - id: cloudflare
   description: Cloudflare ZeroTrust
-  secret: cloudflare_client_secret
+  secret: '$plaintext$cloudflare_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/gitea/index.md b/docs/content/en/integration/openid-connect/gitea/index.md
index 3c395c414..3669ae1c3 100644
--- a/docs/content/en/integration/openid-connect/gitea/index.md
+++ b/docs/content/en/integration/openid-connect/gitea/index.md
@@ -79,7 +79,7 @@ will operate with the above example:
 ```yaml
 - id: gitea
   description: Gitea
-  secret: gitea_client_secret
+  secret: '$plaintext$gitea_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/gitlab/index.md b/docs/content/en/integration/openid-connect/gitlab/index.md
index 3c3beaf2a..342da49eb 100644
--- a/docs/content/en/integration/openid-connect/gitlab/index.md
+++ b/docs/content/en/integration/openid-connect/gitlab/index.md
@@ -75,7 +75,7 @@ which will operate with the above example:
 ```yaml
 - id: gitlab
   description: GitLab
-  secret: gitlab_client_secret
+  secret: '$plaintext$gitlab_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/grafana/index.md b/docs/content/en/integration/openid-connect/grafana/index.md
index a0fe50571..002fc63e2 100644
--- a/docs/content/en/integration/openid-connect/grafana/index.md
+++ b/docs/content/en/integration/openid-connect/grafana/index.md
@@ -93,7 +93,7 @@ which will operate with the above example:
 ```yaml
 - id: grafana
   description: Grafana
-  secret: grafana_client_secret
+  secret: '$plaintext$grafana_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/harbor/index.md b/docs/content/en/integration/openid-connect/harbor/index.md
index 2b32ca0ff..59d36873a 100644
--- a/docs/content/en/integration/openid-connect/harbor/index.md
+++ b/docs/content/en/integration/openid-connect/harbor/index.md
@@ -66,7 +66,7 @@ which will operate with the above example:
 ```yaml
 - id: harbor
   description: Harbor
-  secret: harbor_client_secret
+  secret: '$plaintext$harbor_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/hashicorp-vault/index.md b/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
index dd0a53c3b..e8dd07aa6 100644
--- a/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
+++ b/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
@@ -49,7 +49,7 @@ which will operate with the above example:
 ```yaml
 - id: vault
   description: HashiCorp Vault
-  secret: vault_client_secret
+  secret: '$plaintext$vault_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/komga/index.md b/docs/content/en/integration/openid-connect/komga/index.md
index cf4cf2370..1264b2c6b 100644
--- a/docs/content/en/integration/openid-connect/komga/index.md
+++ b/docs/content/en/integration/openid-connect/komga/index.md
@@ -71,7 +71,7 @@ which will operate with the above example:
 ```yaml
 - id: komga
   description: Komga
-  secret: komga_client_secret
+  secret: '$plaintext$komga_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/nextcloud/index.md b/docs/content/en/integration/openid-connect/nextcloud/index.md
index dbbf81710..b5b933702 100644
--- a/docs/content/en/integration/openid-connect/nextcloud/index.md
+++ b/docs/content/en/integration/openid-connect/nextcloud/index.md
@@ -87,7 +87,7 @@ which will operate with the above example:
 ```yaml
 - id: nextcloud
   description: NextCloud
-  secret: nextcloud_client_secret
+  secret: '$plaintext$nextcloud_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/outline/index.md b/docs/content/en/integration/openid-connect/outline/index.md
index be37bde99..c49beb489 100644
--- a/docs/content/en/integration/openid-connect/outline/index.md
+++ b/docs/content/en/integration/openid-connect/outline/index.md
@@ -66,7 +66,7 @@ which will operate with the above example:
 ```yaml
 - id: outline
   description: Outline
-  secret: outline_client_secret
+  secret: '$plaintext$outline_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/portainer/index.md b/docs/content/en/integration/openid-connect/portainer/index.md
index 7e9c6afd4..a90a98443 100644
--- a/docs/content/en/integration/openid-connect/portainer/index.md
+++ b/docs/content/en/integration/openid-connect/portainer/index.md
@@ -67,7 +67,7 @@ which will operate with the above example:
 ```yaml
 - id: portainer
   description: Portainer
-  secret: portainer_client_secret
+  secret: '$plaintext$portainer_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/proxmox/index.md b/docs/content/en/integration/openid-connect/proxmox/index.md
index 964eb8496..70c6f70cc 100644
--- a/docs/content/en/integration/openid-connect/proxmox/index.md
+++ b/docs/content/en/integration/openid-connect/proxmox/index.md
@@ -69,7 +69,7 @@ which will operate with the above example:
 ```yaml
 - id: proxmox
   description: Proxmox
-  secret: proxmox_client_secret
+  secret: '$plaintext$proxmox_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/seafile/index.md b/docs/content/en/integration/openid-connect/seafile/index.md
index eb722175e..740af8d1d 100644
--- a/docs/content/en/integration/openid-connect/seafile/index.md
+++ b/docs/content/en/integration/openid-connect/seafile/index.md
@@ -75,7 +75,7 @@ which will operate with the above example:
 ```yaml
 - id: seafile
   description: Seafile
-  secret: seafile_client_secret
+  secret: '$plaintext$seafile_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/integration/openid-connect/synapse/index.md b/docs/content/en/integration/openid-connect/synapse/index.md
index bbdac2740..8dc751d49 100644
--- a/docs/content/en/integration/openid-connect/synapse/index.md
+++ b/docs/content/en/integration/openid-connect/synapse/index.md
@@ -69,7 +69,7 @@ which will operate with the above example:
 ```yaml
 - id: synapse
   description: Synapse
-  secret: synapse_client_secret
+  secret: '$plaintext$synapse_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:
diff --git a/docs/content/en/reference/guides/rule-operators.md b/docs/content/en/reference/guides/rule-operators.md
index 4c0a68086..7bd4bff85 100644
--- a/docs/content/en/reference/guides/rule-operators.md
+++ b/docs/content/en/reference/guides/rule-operators.md
@@ -2,7 +2,7 @@
 title: "Access Control Rule Guide"
 description: "A reference guide on access control rule operators"
 lead: "This section contains a reference guide on access control rule operators."
-date: 2022-09-09T15:44:23+10:00
+date: 2022-10-19T14:09:22+11:00
 draft: false
 images: []
 menu:
diff --git a/internal/configuration/decode_hooks.go b/internal/configuration/decode_hooks.go
index 3dca0409f..3fa27396e 100644
--- a/internal/configuration/decode_hooks.go
+++ b/internal/configuration/decode_hooks.go
@@ -9,8 +9,10 @@ import (
 	"net/url"
 	"reflect"
 	"regexp"
+	"strings"
 	"time"
 
+	"github.com/go-crypt/crypt"
 	"github.com/mitchellh/mapstructure"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
@@ -412,3 +414,53 @@ func StringToPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
 		}
 	}
 }
+
+// StringToPasswordDigestHookFunc decodes a string into a crypt.Digest.
+func StringToPasswordDigestHookFunc(plaintext bool) mapstructure.DecodeHookFuncType {
+	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+		var ptr bool
+
+		if f.Kind() != reflect.String {
+			return data, nil
+		}
+
+		prefixType := ""
+
+		if t.Kind() == reflect.Ptr {
+			ptr = true
+			prefixType = "*"
+		}
+
+		expectedType := reflect.TypeOf(schema.PasswordDigest{})
+
+		if ptr && t.Elem() != expectedType {
+			return data, nil
+		} else if !ptr && t != expectedType {
+			return data, nil
+		}
+
+		dataStr := data.(string)
+
+		var result *schema.PasswordDigest
+
+		if !strings.HasPrefix(dataStr, "$") {
+			dataStr = fmt.Sprintf(crypt.StorageFormatSimple, crypt.AlgorithmPrefixPlainText, dataStr)
+		}
+
+		if dataStr != "" {
+			if result, err = schema.NewPasswordDigest(dataStr, plaintext); err != nil {
+				return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType.String(), err)
+			}
+		}
+
+		if ptr {
+			return result, nil
+		}
+
+		if result == nil {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseEmptyValue, prefixType, expectedType.String(), errDecodeNonPtrMustHaveValue)
+		}
+
+		return *result, nil
+	}
+}
diff --git a/internal/configuration/provider.go b/internal/configuration/provider.go
index 679589c12..91476ff4b 100644
--- a/internal/configuration/provider.go
+++ b/internal/configuration/provider.go
@@ -64,6 +64,7 @@ func unmarshal(ko *koanf.Koanf, val *schema.StructValidator, path string, o any)
 				StringToX509CertificateHookFunc(),
 				StringToX509CertificateChainHookFunc(),
 				StringToPrivateKeyHookFunc(),
+				StringToPasswordDigestHookFunc(true),
 				ToTimeDurationHookFunc(),
 			),
 			Metadata:         nil,
diff --git a/internal/configuration/schema/identity_providers.go b/internal/configuration/schema/identity_providers.go
index 916dbd6b7..04c6f35f9 100644
--- a/internal/configuration/schema/identity_providers.go
+++ b/internal/configuration/schema/identity_providers.go
@@ -43,11 +43,11 @@ type OpenIDConnectCORSConfiguration struct {
 
 // OpenIDConnectClientConfiguration configuration for an OpenID Connect client.
 type OpenIDConnectClientConfiguration struct {
-	ID               string  `koanf:"id"`
-	Description      string  `koanf:"description"`
-	Secret           string  `koanf:"secret"`
-	SectorIdentifier url.URL `koanf:"sector_identifier"`
-	Public           bool    `koanf:"public"`
+	ID               string          `koanf:"id"`
+	Description      string          `koanf:"description"`
+	Secret           *PasswordDigest `koanf:"secret"`
+	SectorIdentifier url.URL         `koanf:"sector_identifier"`
+	Public           bool            `koanf:"public"`
 
 	RedirectURIs []string `koanf:"redirect_uris"`
 
diff --git a/internal/configuration/schema/types.go b/internal/configuration/schema/types.go
index 6ac00a7a5..e421d7eb8 100644
--- a/internal/configuration/schema/types.go
+++ b/internal/configuration/schema/types.go
@@ -13,6 +13,8 @@ import (
 	"strconv"
 	"strings"
 	"time"
+
+	"github.com/go-crypt/crypt"
 )
 
 // NewAddressFromString returns an *Address and error depending on the ability to parse the string as an Address.
@@ -107,6 +109,29 @@ func (a Address) Listener() (net.Listener, error) {
 	return net.Listen(a.Scheme, a.HostPort())
 }
 
+// NewPasswordDigest returns a new PasswordDigest.
+func NewPasswordDigest(value string, plaintext bool) (digest *PasswordDigest, err error) {
+	var d crypt.Digest
+
+	switch {
+	case plaintext:
+		d, err = crypt.DecodeWithPlainText(value)
+	default:
+		d, err = crypt.Decode(value)
+	}
+
+	if err != nil {
+		return nil, err
+	}
+
+	return &PasswordDigest{d}, err
+}
+
+// PasswordDigest is a configuration type for the crypt.Digest.
+type PasswordDigest struct {
+	crypt.Digest
+}
+
 // NewX509CertificateChain creates a new *X509CertificateChain from a given string, parsing each PEM block one by one.
 func NewX509CertificateChain(in string) (chain *X509CertificateChain, err error) {
 	if in == "" {
diff --git a/internal/configuration/test_resources/config_oidc.yml b/internal/configuration/test_resources/config_oidc.yml
index 840894586..94a76e0bb 100644
--- a/internal/configuration/test_resources/config_oidc.yml
+++ b/internal/configuration/test_resources/config_oidc.yml
@@ -132,6 +132,6 @@ identity_providers:
         - https://example.com
     clients:
       - id: abc
-        secret: 123
+        secret: '123'
         consent_mode: explicit
 ...
diff --git a/internal/configuration/validator/identity_providers.go b/internal/configuration/validator/identity_providers.go
index bd1fcacaa..a2ee5a549 100644
--- a/internal/configuration/validator/identity_providers.go
+++ b/internal/configuration/validator/identity_providers.go
@@ -161,11 +161,11 @@ func validateOIDCClients(config *schema.OpenIDConnectConfiguration, validator *s
 		}
 
 		if client.Public {
-			if client.Secret != "" {
+			if client.Secret != nil {
 				validator.Push(fmt.Errorf(errFmtOIDCClientPublicInvalidSecret, client.ID))
 			}
 		} else {
-			if client.Secret == "" {
+			if client.Secret == nil {
 				validator.Push(fmt.Errorf(errFmtOIDCClientInvalidSecret, client.ID))
 			}
 		}
diff --git a/internal/configuration/validator/identity_providers_test.go b/internal/configuration/validator/identity_providers_test.go
index eb913a279..23eca844a 100644
--- a/internal/configuration/validator/identity_providers_test.go
+++ b/internal/configuration/validator/identity_providers_test.go
@@ -46,7 +46,7 @@ func TestShouldNotRaiseErrorWhenCORSEndpointsValid(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "example",
-					Secret: "example",
+					Secret: MustDecodeSecret("$plaintext$example"),
 				},
 			},
 		},
@@ -69,7 +69,7 @@ func TestShouldRaiseErrorWhenCORSEndpointsNotValid(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "example",
-					Secret: "example",
+					Secret: MustDecodeSecret("$plaintext$example"),
 				},
 			},
 		},
@@ -114,7 +114,7 @@ func TestShouldRaiseErrorWhenOIDCCORSOriginsHasInvalidValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:           "myclient",
-					Secret:       "jk12nb3klqwmnelqkwenm",
+					Secret:       MustDecodeSecret("$plaintext$jk12nb3klqwmnelqkwenm"),
 					Policy:       "two_factor",
 					RedirectURIs: []string{"https://example.com/oauth2_callback", "https://localhost:566/callback", "http://an.example.com/callback", "file://a/file"},
 				},
@@ -173,7 +173,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:           "",
-					Secret:       "",
+					Secret:       nil,
 					Policy:       "",
 					RedirectURIs: []string{},
 				},
@@ -188,7 +188,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-1",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: "a-policy",
 					RedirectURIs: []string{
 						"https://google.com",
@@ -202,13 +202,13 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:           "client-x",
-					Secret:       "a-secret",
+					Secret:       MustDecodeSecret("$plaintext$a-secret"),
 					Policy:       policyTwoFactor,
 					RedirectURIs: []string{},
 				},
 				{
 					ID:           "client-x",
-					Secret:       "a-secret",
+					Secret:       MustDecodeSecret("$plaintext$a-secret"),
 					Policy:       policyTwoFactor,
 					RedirectURIs: []string{},
 				},
@@ -220,7 +220,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-check-uri-parse",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: policyTwoFactor,
 					RedirectURIs: []string{
 						"http://abc@%two",
@@ -236,7 +236,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-check-uri-abs",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: policyTwoFactor,
 					RedirectURIs: []string{
 						"google.com",
@@ -252,7 +252,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-valid-sector",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: policyTwoFactor,
 					RedirectURIs: []string{
 						"https://google.com",
@@ -266,7 +266,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-valid-sector",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: policyTwoFactor,
 					RedirectURIs: []string{
 						"https://google.com",
@@ -280,7 +280,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-invalid-sector",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: policyTwoFactor,
 					RedirectURIs: []string{
 						"https://google.com",
@@ -302,7 +302,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-invalid-sector",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Policy: policyTwoFactor,
 					RedirectURIs: []string{
 						"https://google.com",
@@ -350,7 +350,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadScopes(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
-					Secret: "good_secret",
+					Secret: MustDecodeSecret("$plaintext$good_secret"),
 					Policy: "two_factor",
 					Scopes: []string{"openid", "bad_scope"},
 					RedirectURIs: []string{
@@ -376,7 +376,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadGrantTypes(t *testing.T)
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:         "good_id",
-					Secret:     "good_secret",
+					Secret:     MustDecodeSecret("$plaintext$good_secret"),
 					Policy:     "two_factor",
 					GrantTypes: []string{"bad_grant_type"},
 					RedirectURIs: []string{
@@ -403,7 +403,7 @@ func TestShouldNotErrorOnCertificateValid(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
-					Secret: "good_secret",
+					Secret: MustDecodeSecret("$plaintext$good_secret"),
 					Policy: "two_factor",
 					RedirectURIs: []string{
 						"https://google.com/callback",
@@ -429,7 +429,7 @@ func TestShouldRaiseErrorOnCertificateNotValid(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
-					Secret: "good_secret",
+					Secret: MustDecodeSecret("$plaintext$good_secret"),
 					Policy: "two_factor",
 					RedirectURIs: []string{
 						"https://google.com/callback",
@@ -456,7 +456,7 @@ func TestShouldRaiseErrorOnKeySizeTooSmall(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
-					Secret: "good_secret",
+					Secret: MustDecodeSecret("$plaintext$good_secret"),
 					Policy: "two_factor",
 					RedirectURIs: []string{
 						"https://google.com/callback",
@@ -483,7 +483,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadResponseModes(t *testing
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:            "good_id",
-					Secret:        "good_secret",
+					Secret:        MustDecodeSecret("$plaintext$good_secret"),
 					Policy:        "two_factor",
 					ResponseModes: []string{"bad_responsemode"},
 					RedirectURIs: []string{
@@ -509,7 +509,7 @@ func TestShouldRaiseErrorWhenOIDCClientConfiguredWithBadUserinfoAlg(t *testing.T
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:                       "good_id",
-					Secret:                   "good_secret",
+					Secret:                   MustDecodeSecret("$plaintext$good_secret"),
 					Policy:                   "two_factor",
 					UserinfoSigningAlgorithm: "rs256",
 					RedirectURIs: []string{
@@ -536,7 +536,7 @@ func TestValidateIdentityProvidersShouldRaiseWarningOnSecurityIssue(t *testing.T
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "good_id",
-					Secret: "good_secret",
+					Secret: MustDecodeSecret("$plaintext$good_secret"),
 					Policy: "two_factor",
 					RedirectURIs: []string{
 						"https://google.com/callback",
@@ -563,7 +563,7 @@ func TestValidateIdentityProvidersShouldRaiseErrorsOnInvalidClientTypes(t *testi
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "client-with-invalid-secret",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Public: true,
 					Policy: "two_factor",
 					RedirectURIs: []string{
@@ -572,7 +572,7 @@ func TestValidateIdentityProvidersShouldRaiseErrorsOnInvalidClientTypes(t *testi
 				},
 				{
 					ID:     "client-with-bad-redirect-uri",
-					Secret: "a-secret",
+					Secret: MustDecodeSecret("$plaintext$a-secret"),
 					Public: false,
 					Policy: "two_factor",
 					RedirectURIs: []string{
@@ -642,7 +642,7 @@ func TestValidateIdentityProvidersShouldSetDefaultValues(t *testing.T) {
 			Clients: []schema.OpenIDConnectClientConfiguration{
 				{
 					ID:     "a-client",
-					Secret: "a-client-secret",
+					Secret: MustDecodeSecret("$plaintext$a-client-secret"),
 					RedirectURIs: []string{
 						"https://google.com",
 					},
@@ -650,7 +650,7 @@ func TestValidateIdentityProvidersShouldSetDefaultValues(t *testing.T) {
 				{
 					ID:                       "b-client",
 					Description:              "Normal Description",
-					Secret:                   "b-client-secret",
+					Secret:                   MustDecodeSecret("$plaintext$b-client-secret"),
 					Policy:                   policyOneFactor,
 					UserinfoSigningAlgorithm: "RS256",
 					RedirectURIs: []string{
@@ -775,6 +775,14 @@ func TestValidateOIDCClientRedirectURIsSupportingPrivateUseURISchemes(t *testing
 	})
 }
 
+func MustDecodeSecret(value string) *schema.PasswordDigest {
+	if secret, err := schema.NewPasswordDigest(value, true); err != nil {
+		panic(err)
+	} else {
+		return secret
+	}
+}
+
 func MustParseRSAPrivateKey(data string) *rsa.PrivateKey {
 	block, _ := pem.Decode([]byte(data))
 	if block == nil || block.Bytes == nil || len(block.Bytes) == 0 {
diff --git a/internal/oidc/client.go b/internal/oidc/client.go
index 7bdbc8a36..e256a9380 100644
--- a/internal/oidc/client.go
+++ b/internal/oidc/client.go
@@ -14,7 +14,7 @@ func NewClient(config schema.OpenIDConnectClientConfiguration) (client *Client)
 	client = &Client{
 		ID:               config.ID,
 		Description:      config.Description,
-		Secret:           []byte(config.Secret),
+		Secret:           config.Secret,
 		SectorIdentifier: config.SectorIdentifier.String(),
 		Public:           config.Public,
 
@@ -76,7 +76,11 @@ func (c *Client) GetConsentResponseBody(consent *model.OAuth2ConsentSession) Con
 
 // GetHashedSecret returns the Secret.
 func (c *Client) GetHashedSecret() []byte {
-	return c.Secret
+	if c.Secret == nil {
+		return []byte(nil)
+	}
+
+	return []byte(c.Secret.Encode())
 }
 
 // GetRedirectURIs returns the RedirectURIs.
diff --git a/internal/oidc/client_test.go b/internal/oidc/client_test.go
index 8483efa5c..01722d21a 100644
--- a/internal/oidc/client_test.go
+++ b/internal/oidc/client_test.go
@@ -26,7 +26,7 @@ func TestNewClient(t *testing.T) {
 		ID:            "myapp",
 		Description:   "My App",
 		Policy:        "two_factor",
-		Secret:        "abcdef",
+		Secret:        MustDecodeSecret("$plaintext$abcdef"),
 		RedirectURIs:  []string{"https://google.com/callback"},
 		Scopes:        schema.DefaultOpenIDConnectClientConfiguration.Scopes,
 		ResponseTypes: schema.DefaultOpenIDConnectClientConfiguration.ResponseTypes,
@@ -68,7 +68,7 @@ func TestIsAuthenticationLevelSufficient(t *testing.T) {
 	assert.False(t, c.IsAuthenticationLevelSufficient(authentication.TwoFactor))
 }
 
-func TestInternalClient_GetConsentResponseBody(t *testing.T) {
+func TestClient_GetConsentResponseBody(t *testing.T) {
 	c := Client{}
 
 	consentRequestBody := c.GetConsentResponseBody(nil)
@@ -95,7 +95,7 @@ func TestInternalClient_GetConsentResponseBody(t *testing.T) {
 	assert.Equal(t, expectedAudiences, consentRequestBody.Audience)
 }
 
-func TestInternalClient_GetAudience(t *testing.T) {
+func TestClient_GetAudience(t *testing.T) {
 	c := Client{}
 
 	audience := c.GetAudience()
@@ -108,7 +108,7 @@ func TestInternalClient_GetAudience(t *testing.T) {
 	assert.Equal(t, "https://example.com", audience[0])
 }
 
-func TestInternalClient_GetScopes(t *testing.T) {
+func TestClient_GetScopes(t *testing.T) {
 	c := Client{}
 
 	scopes := c.GetScopes()
@@ -121,7 +121,7 @@ func TestInternalClient_GetScopes(t *testing.T) {
 	assert.Equal(t, "openid", scopes[0])
 }
 
-func TestInternalClient_GetGrantTypes(t *testing.T) {
+func TestClient_GetGrantTypes(t *testing.T) {
 	c := Client{}
 
 	grantTypes := c.GetGrantTypes()
@@ -135,19 +135,30 @@ func TestInternalClient_GetGrantTypes(t *testing.T) {
 	assert.Equal(t, "device_code", grantTypes[0])
 }
 
-func TestInternalClient_GetHashedSecret(t *testing.T) {
+func TestClient_Hashing(t *testing.T) {
 	c := Client{}
 
 	hashedSecret := c.GetHashedSecret()
 	assert.Equal(t, []byte(nil), hashedSecret)
 
-	c.Secret = []byte("a_bad_secret")
+	c.Secret = MustDecodeSecret("$plaintext$a_bad_secret")
 
-	hashedSecret = c.GetHashedSecret()
-	assert.Equal(t, []byte("a_bad_secret"), hashedSecret)
+	assert.True(t, c.Secret.MatchBytes([]byte("a_bad_secret")))
 }
 
-func TestInternalClient_GetID(t *testing.T) {
+func TestClient_GetHashedSecret(t *testing.T) {
+	c := Client{}
+
+	hashedSecret := c.GetHashedSecret()
+	assert.Equal(t, []byte(nil), hashedSecret)
+
+	c.Secret = MustDecodeSecret("$plaintext$a_bad_secret")
+
+	hashedSecret = c.GetHashedSecret()
+	assert.Equal(t, []byte("$plaintext$a_bad_secret"), hashedSecret)
+}
+
+func TestClient_GetID(t *testing.T) {
 	c := Client{}
 
 	id := c.GetID()
@@ -159,7 +170,7 @@ func TestInternalClient_GetID(t *testing.T) {
 	assert.Equal(t, "myid", id)
 }
 
-func TestInternalClient_GetRedirectURIs(t *testing.T) {
+func TestClient_GetRedirectURIs(t *testing.T) {
 	c := Client{}
 
 	redirectURIs := c.GetRedirectURIs()
@@ -172,7 +183,7 @@ func TestInternalClient_GetRedirectURIs(t *testing.T) {
 	assert.Equal(t, "https://example.com/oauth2/callback", redirectURIs[0])
 }
 
-func TestInternalClient_GetResponseModes(t *testing.T) {
+func TestClient_GetResponseModes(t *testing.T) {
 	c := Client{}
 
 	responseModes := c.GetResponseModes()
@@ -191,7 +202,7 @@ func TestInternalClient_GetResponseModes(t *testing.T) {
 	assert.Equal(t, fosite.ResponseModeFragment, responseModes[3])
 }
 
-func TestInternalClient_GetResponseTypes(t *testing.T) {
+func TestClient_GetResponseTypes(t *testing.T) {
 	c := Client{}
 
 	responseTypes := c.GetResponseTypes()
@@ -206,7 +217,7 @@ func TestInternalClient_GetResponseTypes(t *testing.T) {
 	assert.Equal(t, "id_token", responseTypes[1])
 }
 
-func TestInternalClient_IsPublic(t *testing.T) {
+func TestClient_IsPublic(t *testing.T) {
 	c := Client{}
 
 	assert.False(t, c.IsPublic())
@@ -214,3 +225,11 @@ func TestInternalClient_IsPublic(t *testing.T) {
 	c.Public = true
 	assert.True(t, c.IsPublic())
 }
+
+func MustDecodeSecret(value string) *schema.PasswordDigest {
+	if secret, err := schema.NewPasswordDigest(value, true); err != nil {
+		panic(err)
+	} else {
+		return secret
+	}
+}
diff --git a/internal/oidc/hasher.go b/internal/oidc/hasher.go
index 0bacbe98f..7aad32b25 100644
--- a/internal/oidc/hasher.go
+++ b/internal/oidc/hasher.go
@@ -2,19 +2,26 @@ package oidc
 
 import (
 	"context"
-	"crypto/subtle"
+
+	"github.com/go-crypt/crypt"
 )
 
 // Compare compares the hash with the data and returns an error if they don't match.
-func (h PlainTextHasher) Compare(_ context.Context, hash, data []byte) (err error) {
-	if subtle.ConstantTimeCompare(hash, data) == 0 {
-		return errPasswordsDoNotMatch
+func (h AdaptiveHasher) Compare(_ context.Context, hash, data []byte) (err error) {
+	var digest crypt.Digest
+
+	if digest, err = crypt.DecodeWithPlainText(string(hash)); err != nil {
+		return err
 	}
 
-	return nil
+	if digest.MatchBytes(data) {
+		return nil
+	}
+
+	return errPasswordsDoNotMatch
 }
 
 // Hash creates a new hash from data.
-func (h PlainTextHasher) Hash(_ context.Context, data []byte) (hash []byte, err error) {
+func (h AdaptiveHasher) Hash(_ context.Context, data []byte) (hash []byte, err error) {
 	return data, nil
 }
diff --git a/internal/oidc/hasher_test.go b/internal/oidc/hasher_test.go
index a86123bf4..bc3dfac1b 100644
--- a/internal/oidc/hasher_test.go
+++ b/internal/oidc/hasher_test.go
@@ -8,9 +8,9 @@ import (
 )
 
 func TestShouldNotRaiseErrorOnEqualPasswordsPlainText(t *testing.T) {
-	hasher := PlainTextHasher{}
+	hasher := AdaptiveHasher{}
 
-	a := []byte("abc")
+	a := []byte("$plaintext$abc")
 	b := []byte("abc")
 
 	ctx := context.Background()
@@ -21,9 +21,9 @@ func TestShouldNotRaiseErrorOnEqualPasswordsPlainText(t *testing.T) {
 }
 
 func TestShouldRaiseErrorOnNonEqualPasswordsPlainText(t *testing.T) {
-	hasher := PlainTextHasher{}
+	hasher := AdaptiveHasher{}
 
-	a := []byte("abc")
+	a := []byte("$plaintext$abc")
 	b := []byte("abcd")
 
 	ctx := context.Background()
@@ -34,7 +34,7 @@ func TestShouldRaiseErrorOnNonEqualPasswordsPlainText(t *testing.T) {
 }
 
 func TestShouldHashPassword(t *testing.T) {
-	hasher := PlainTextHasher{}
+	hasher := AdaptiveHasher{}
 
 	data := []byte("abc")
 
diff --git a/internal/oidc/provider.go b/internal/oidc/provider.go
index 8843a6807..9273df318 100644
--- a/internal/oidc/provider.go
+++ b/internal/oidc/provider.go
@@ -69,7 +69,7 @@ func NewOpenIDConnectProvider(config *schema.OpenIDConnectConfiguration, store s
 		cconfig,
 		provider.Store,
 		strategy,
-		PlainTextHasher{},
+		AdaptiveHasher{},
 
 		/*
 			These are the OAuth2 and OpenIDConnect factories. Order is important (the OAuth2 factories at the top must
diff --git a/internal/oidc/provider_test.go b/internal/oidc/provider_test.go
index 6d0c3ecef..e4a486eb5 100644
--- a/internal/oidc/provider_test.go
+++ b/internal/oidc/provider_test.go
@@ -31,7 +31,7 @@ func TestNewOpenIDConnectProvider_ShouldEnableOptionalDiscoveryValues(t *testing
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:               "a-client",
-				Secret:           "a-client-secret",
+				Secret:           MustDecodeSecret("$plaintext$a-client-secret"),
 				SectorIdentifier: url.URL{Host: "google.com"},
 				Policy:           "one_factor",
 				RedirectURIs: []string{
@@ -62,7 +62,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GoodConfiguration(t *tes
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
-				Secret: "a-client-secret",
+				Secret: MustDecodeSecret("$plaintext$a-client-secret"),
 				Policy: "one_factor",
 				RedirectURIs: []string{
 					"https://google.com",
@@ -71,7 +71,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GoodConfiguration(t *tes
 			{
 				ID:          "b-client",
 				Description: "Normal Description",
-				Secret:      "b-client-secret",
+				Secret:      MustDecodeSecret("$plaintext$b-client-secret"),
 				Policy:      "two_factor",
 				RedirectURIs: []string{
 					"https://google.com",
@@ -102,7 +102,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
-				Secret: "a-client-secret",
+				Secret: MustDecodeSecret("$plaintext$a-client-secret"),
 				Policy: "one_factor",
 				RedirectURIs: []string{
 					"https://google.com",
@@ -192,7 +192,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOAuth2WellKnownConfig
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
-				Secret: "a-client-secret",
+				Secret: MustDecodeSecret("$plaintext$a-client-secret"),
 				Policy: "one_factor",
 				RedirectURIs: []string{
 					"https://google.com",
@@ -271,7 +271,7 @@ func TestOpenIDConnectProvider_NewOpenIDConnectProvider_GetOpenIDConnectWellKnow
 		Clients: []schema.OpenIDConnectClientConfiguration{
 			{
 				ID:     "a-client",
-				Secret: "a-client-secret",
+				Secret: MustDecodeSecret("$plaintext$a-client-secret"),
 				Policy: "one_factor",
 				RedirectURIs: []string{
 					"https://google.com",
diff --git a/internal/oidc/store_test.go b/internal/oidc/store_test.go
index 08cd7ae25..adba95453 100644
--- a/internal/oidc/store_test.go
+++ b/internal/oidc/store_test.go
@@ -21,14 +21,14 @@ func TestOpenIDConnectStore_GetClientPolicy(t *testing.T) {
 				Description: "myclient desc",
 				Policy:      "one_factor",
 				Scopes:      []string{ScopeOpenID, ScopeProfile},
-				Secret:      "mysecret",
+				Secret:      MustDecodeSecret("$plaintext$mysecret"),
 			},
 			{
 				ID:          "myotherclient",
 				Description: "myclient desc",
 				Policy:      "two_factor",
 				Scopes:      []string{ScopeOpenID, ScopeProfile},
-				Secret:      "mysecret",
+				Secret:      MustDecodeSecret("$plaintext$mysecret"),
 			},
 		},
 	}, nil)
@@ -53,7 +53,7 @@ func TestOpenIDConnectStore_GetInternalClient(t *testing.T) {
 				Description: "myclient desc",
 				Policy:      "one_factor",
 				Scopes:      []string{ScopeOpenID, ScopeProfile},
-				Secret:      "mysecret",
+				Secret:      MustDecodeSecret("$plaintext$mysecret"),
 			},
 		},
 	}, nil)
@@ -74,7 +74,7 @@ func TestOpenIDConnectStore_GetInternalClient_ValidClient(t *testing.T) {
 		Description: "myclient desc",
 		Policy:      "one_factor",
 		Scopes:      []string{ScopeOpenID, ScopeProfile},
-		Secret:      "mysecret",
+		Secret:      MustDecodeSecret("$plaintext$mysecret"),
 	}
 
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
@@ -93,7 +93,7 @@ func TestOpenIDConnectStore_GetInternalClient_ValidClient(t *testing.T) {
 	assert.Equal(t, client.ResponseTypes, c1.ResponseTypes)
 	assert.Equal(t, client.RedirectURIs, c1.RedirectURIs)
 	assert.Equal(t, client.Policy, authorization.OneFactor)
-	assert.Equal(t, client.Secret, []byte(c1.Secret))
+	assert.Equal(t, client.Secret.Encode(), "$plaintext$mysecret")
 }
 
 func TestOpenIDConnectStore_GetInternalClient_InvalidClient(t *testing.T) {
@@ -102,7 +102,7 @@ func TestOpenIDConnectStore_GetInternalClient_InvalidClient(t *testing.T) {
 		Description: "myclient desc",
 		Policy:      "one_factor",
 		Scopes:      []string{ScopeOpenID, ScopeProfile},
-		Secret:      "mysecret",
+		Secret:      MustDecodeSecret("$plaintext$mysecret"),
 	}
 
 	s := NewOpenIDConnectStore(&schema.OpenIDConnectConfiguration{
@@ -126,7 +126,7 @@ func TestOpenIDConnectStore_IsValidClientID(t *testing.T) {
 				Description: "myclient desc",
 				Policy:      "one_factor",
 				Scopes:      []string{ScopeOpenID, ScopeProfile},
-				Secret:      "mysecret",
+				Secret:      MustDecodeSecret("$plaintext$mysecret"),
 			},
 		},
 	}, nil)
diff --git a/internal/oidc/types.go b/internal/oidc/types.go
index d48b023bf..97d84542a 100644
--- a/internal/oidc/types.go
+++ b/internal/oidc/types.go
@@ -4,6 +4,7 @@ import (
 	"net/url"
 	"time"
 
+	"github.com/go-crypt/crypt"
 	"github.com/ory/fosite"
 	"github.com/ory/fosite/handler/openid"
 	"github.com/ory/fosite/token/jwt"
@@ -101,7 +102,7 @@ type Store struct {
 type Client struct {
 	ID               string
 	Description      string
-	Secret           []byte
+	Secret           crypt.Digest
 	SectorIdentifier string
 	Public           bool
 
@@ -182,8 +183,8 @@ type KeyManager struct {
 	jwks *jose.JSONWebKeySet
 }
 
-// PlainTextHasher implements the fosite.Hasher interface without an actual hashing algo.
-type PlainTextHasher struct{}
+// AdaptiveHasher implements the fosite.Hasher interface without an actual hashing algo.
+type AdaptiveHasher struct{}
 
 // ConsentGetResponseBody schema of the response body of the consent GET endpoint.
 type ConsentGetResponseBody struct {

From 9e29295bdf1bc12df2b8abaecb5d8bcea76d4f3b Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Thu, 20 Oct 2022 15:27:09 +1100
Subject: [PATCH 161/263] docs(oidc): adjust client secret information (#4211)

---
 .../identity-providers/open-id-connect.md     |  6 +--
 .../openid-connect/apache-guacamole/index.md  | 11 ++++--
 .../openid-connect/argocd/index.md            | 11 ++++--
 .../openid-connect/bookstack/index.md         | 11 ++++--
 .../cloudflare-zerotrust/index.md             | 11 ++++--
 .../integration/openid-connect/gitea/index.md | 11 ++++--
 .../openid-connect/gitlab/index.md            | 11 ++++--
 .../openid-connect/grafana/index.md           | 11 ++++--
 .../openid-connect/harbor/index.md            | 11 ++++--
 .../openid-connect/hashicorp-vault/index.md   | 11 ++++--
 .../integration/openid-connect/komga/index.md | 11 ++++--
 .../openid-connect/nextcloud/index.md         | 11 ++++--
 .../openid-connect/outline/index.md           | 11 ++++--
 .../openid-connect/portainer/index.md         | 11 ++++--
 .../openid-connect/proxmox/index.md           | 13 +++++--
 .../openid-connect/seafile/index.md           | 13 +++++--
 .../openid-connect/specific-information.md    | 39 +++++++++++++++++++
 .../openid-connect/synapse/index.md           | 11 ++++--
 .../openid-connect/synology-dsm/index.md      | 15 +++++--
 19 files changed, 182 insertions(+), 58 deletions(-)
 create mode 100644 docs/content/en/integration/openid-connect/specific-information.md

diff --git a/docs/content/en/configuration/identity-providers/open-id-connect.md b/docs/content/en/configuration/identity-providers/open-id-connect.md
index e1018e764..04fd9677e 100644
--- a/docs/content/en/configuration/identity-providers/open-id-connect.md
+++ b/docs/content/en/configuration/identity-providers/open-id-connect.md
@@ -352,12 +352,10 @@ A friendly description for this client shown in the UI. This defaults to the sam
 {{< confkey type="string" required="situational" >}}
 
 The shared secret between Authelia and the application consuming this client. This secret must match the secret
-configured in the application. This can either be stored in plain text (by prefixing the plain text secret with
-`$plaintext$` or can be a hashed password generated with
-[authelia crypto hash](../../reference/cli/authelia/authelia_hash-password.md).
+configured in the application.
 
 This secret must be generated by the administrator and can be done by following the
-[Generating a Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) guide.
+[Generating Client Secrets](../../integration/openid-connect/specific-information.md#generating-client-secrets) guide.
 
 This must be provided when the client is a confidential client type, and must be blank when using the public client
 type. To set the client type to public see the [public](#public) configuration option.
diff --git a/docs/content/en/integration/openid-connect/apache-guacamole/index.md b/docs/content/en/integration/openid-connect/apache-guacamole/index.md
index c609109c5..fb9328b64 100644
--- a/docs/content/en/integration/openid-connect/apache-guacamole/index.md
+++ b/docs/content/en/integration/openid-connect/apache-guacamole/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/argocd/index.md b/docs/content/en/integration/openid-connect/argocd/index.md
index 625b97e3b..0359decea 100644
--- a/docs/content/en/integration/openid-connect/argocd/index.md
+++ b/docs/content/en/integration/openid-connect/argocd/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/bookstack/index.md b/docs/content/en/integration/openid-connect/bookstack/index.md
index f1a10653a..0238aef50 100644
--- a/docs/content/en/integration/openid-connect/bookstack/index.md
+++ b/docs/content/en/integration/openid-connect/bookstack/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
index 97fc8e3d7..0e9c92494 100644
--- a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
+++ b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
@@ -20,9 +20,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/gitea/index.md b/docs/content/en/integration/openid-connect/gitea/index.md
index 3669ae1c3..0676a961c 100644
--- a/docs/content/en/integration/openid-connect/gitea/index.md
+++ b/docs/content/en/integration/openid-connect/gitea/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/gitlab/index.md b/docs/content/en/integration/openid-connect/gitlab/index.md
index 342da49eb..44cd36dce 100644
--- a/docs/content/en/integration/openid-connect/gitlab/index.md
+++ b/docs/content/en/integration/openid-connect/gitlab/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/grafana/index.md b/docs/content/en/integration/openid-connect/grafana/index.md
index 002fc63e2..d19e23768 100644
--- a/docs/content/en/integration/openid-connect/grafana/index.md
+++ b/docs/content/en/integration/openid-connect/grafana/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/harbor/index.md b/docs/content/en/integration/openid-connect/harbor/index.md
index 59d36873a..61293cbc7 100644
--- a/docs/content/en/integration/openid-connect/harbor/index.md
+++ b/docs/content/en/integration/openid-connect/harbor/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/hashicorp-vault/index.md b/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
index e8dd07aa6..7342a66ee 100644
--- a/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
+++ b/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/komga/index.md b/docs/content/en/integration/openid-connect/komga/index.md
index 1264b2c6b..d0dabdc01 100644
--- a/docs/content/en/integration/openid-connect/komga/index.md
+++ b/docs/content/en/integration/openid-connect/komga/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/nextcloud/index.md b/docs/content/en/integration/openid-connect/nextcloud/index.md
index b5b933702..de78a4508 100644
--- a/docs/content/en/integration/openid-connect/nextcloud/index.md
+++ b/docs/content/en/integration/openid-connect/nextcloud/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/outline/index.md b/docs/content/en/integration/openid-connect/outline/index.md
index c49beb489..fbf6c719c 100644
--- a/docs/content/en/integration/openid-connect/outline/index.md
+++ b/docs/content/en/integration/openid-connect/outline/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/portainer/index.md b/docs/content/en/integration/openid-connect/portainer/index.md
index a90a98443..4713bdfb7 100644
--- a/docs/content/en/integration/openid-connect/portainer/index.md
+++ b/docs/content/en/integration/openid-connect/portainer/index.md
@@ -24,9 +24,14 @@ aliases:
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/proxmox/index.md b/docs/content/en/integration/openid-connect/proxmox/index.md
index 70c6f70cc..89869a17c 100644
--- a/docs/content/en/integration/openid-connect/proxmox/index.md
+++ b/docs/content/en/integration/openid-connect/proxmox/index.md
@@ -22,15 +22,20 @@ aliases:
 * [Proxmox]
   * 7.1-10
 
-## Before You Begin
+### Common Notes
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Specific Notes
 
 *__Important Note:__ [Proxmox] requires you create the Realm prior to adding the provider. This is not covered in this
 guide.*
 
+### Assumptions
+
 This example makes the following assumptions:
 
 * __Application Root URL:__ `https://proxmox.example.com`
diff --git a/docs/content/en/integration/openid-connect/seafile/index.md b/docs/content/en/integration/openid-connect/seafile/index.md
index 740af8d1d..4385be778 100644
--- a/docs/content/en/integration/openid-connect/seafile/index.md
+++ b/docs/content/en/integration/openid-connect/seafile/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
@@ -39,7 +44,7 @@ This example makes the following assumptions:
 
 To configure [Seafile] to utilize Authelia as an [OpenID Connect] Provider:
 
-1. [Seafile] may require some dependencies such as `requests_oauthlib` to be manually installed. 
+1. [Seafile] may require some dependencies such as `requests_oauthlib` to be manually installed.
    See the [Seafile] documentation in the [see also](#see-also) section for more information.
 
 2. Edit your [Seafile] `seahub_settings.py` configuration file and add configure the following:
diff --git a/docs/content/en/integration/openid-connect/specific-information.md b/docs/content/en/integration/openid-connect/specific-information.md
new file mode 100644
index 000000000..a005bf44f
--- /dev/null
+++ b/docs/content/en/integration/openid-connect/specific-information.md
@@ -0,0 +1,39 @@
+---
+title: "Specific Information"
+description: "Specific information regarding integrating the Authelia OpenID Connect Provider with an OpenID Connect relying party"
+lead: "Specific information regarding integrating the Authelia OpenID Connect Provider with an OpenID Connect relying party."
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  integration:
+    parent: "openid-connect"
+weight: 615
+toc: true
+---
+
+## Generating Client Secrets
+
+We strongly recommend the following guidelines for generating client secrets:
+
+1. Each client should have a unique secret.
+2. Each secret should be randomly generated.
+3. Each secret should have a length above 40 characters.
+4. The secrets should be stored in the configuration in a supported hash format. *__Note:__ This does not mean you
+   configure the relying party / client application with the hashed version, just the secret value in the Authelia
+   configuration.*
+5. Secrets should only have alphanumeric characters as some implementations do not appropriately encode the secret
+   when using it to access the token endpoint.
+
+Authelia provides an easy way to perform such actions via the [authelia crypto hash generate] command. Users can
+perform a command such as `authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72` command to
+both generate a client secret with 72 characters which is printed and is to be used with the relying party and hash it
+using PBKDF2 which can be stored in the Authelia configuration.
+
+[authelia crypto hash generate]: ../../reference/cli/authelia/authelia_crypto_hash_generate.md
+
+### Plaintext
+
+Authelia supports storing the plaintext secret in the configuration. This may be discontinued in the future. Plaintext
+is either denoted by the `$plaintext$` prefix where everything after the prefix is the secret. In addition if the secret
+does not start with the `$` character it's considered as a plaintext secret for the time being but is deprecated.
diff --git a/docs/content/en/integration/openid-connect/synapse/index.md b/docs/content/en/integration/openid-connect/synapse/index.md
index 8dc751d49..edc9dbbda 100644
--- a/docs/content/en/integration/openid-connect/synapse/index.md
+++ b/docs/content/en/integration/openid-connect/synapse/index.md
@@ -22,9 +22,14 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Assumptions
 
 This example makes the following assumptions:
 
diff --git a/docs/content/en/integration/openid-connect/synology-dsm/index.md b/docs/content/en/integration/openid-connect/synology-dsm/index.md
index fdbde09f6..d45dcf079 100644
--- a/docs/content/en/integration/openid-connect/synology-dsm/index.md
+++ b/docs/content/en/integration/openid-connect/synology-dsm/index.md
@@ -22,13 +22,20 @@ community: true
 
 ## Before You Begin
 
-You are required to utilize a unique client id and a unique and random client secret for all [OpenID Connect] relying
-parties. You should not use the client secret in this example, you should randomly generate one yourself. You may also
-choose to utilize a different client id, it's completely up to you.
+### Common Notes
+
+1. You are *__required__* to utilize a unique client id for every client.
+2. The client id on this page is merely an example and you can theoretically use any alphanumeric string.
+3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
+   [Generating Client Secrets] guide instead.
+
+### Specific Notes
 
 *__Important Note:__ [Synology DSM] does not support automatically creating users via [OpenID Connect]. It is therefore
 recommended that you ensure Authelia and [Synology DSM] share a LDAP server.*
 
+### Assumptions
+
 This example makes the following assumptions:
 
 * __Application Root URL:__ `https://dsm.example.com/`
@@ -69,7 +76,7 @@ which will operate with the above example:
 ```yaml
 - id: synology-dsm
   description: Synology DSM
-  secret: synology-dsm_client_secret
+  secret: '$plaintext$synology-dsm_client_secret'
   public: false
   authorization_policy: two_factor
   redirect_uris:

From 3f8958d1b10056f218b0dec2873cc0bf304ca821 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Thu, 20 Oct 2022 15:42:22 +1100
Subject: [PATCH 162/263] docs(oidc): fix missing link (#4212)

---
 .../en/integration/openid-connect/apache-guacamole/index.md     | 2 ++
 docs/content/en/integration/openid-connect/argocd/index.md      | 2 ++
 docs/content/en/integration/openid-connect/bookstack/index.md   | 2 ++
 .../en/integration/openid-connect/cloudflare-zerotrust/index.md | 2 ++
 docs/content/en/integration/openid-connect/gitea/index.md       | 2 ++
 docs/content/en/integration/openid-connect/gitlab/index.md      | 2 ++
 docs/content/en/integration/openid-connect/grafana/index.md     | 2 ++
 docs/content/en/integration/openid-connect/harbor/index.md      | 2 ++
 .../en/integration/openid-connect/hashicorp-vault/index.md      | 2 ++
 docs/content/en/integration/openid-connect/komga/index.md       | 2 ++
 docs/content/en/integration/openid-connect/nextcloud/index.md   | 2 ++
 docs/content/en/integration/openid-connect/outline/index.md     | 2 ++
 docs/content/en/integration/openid-connect/portainer/index.md   | 2 ++
 docs/content/en/integration/openid-connect/proxmox/index.md     | 2 ++
 docs/content/en/integration/openid-connect/seafile/index.md     | 2 ++
 docs/content/en/integration/openid-connect/synapse/index.md     | 2 ++
 .../content/en/integration/openid-connect/synology-dsm/index.md | 2 ++
 17 files changed, 34 insertions(+)

diff --git a/docs/content/en/integration/openid-connect/apache-guacamole/index.md b/docs/content/en/integration/openid-connect/apache-guacamole/index.md
index fb9328b64..8ff5bd875 100644
--- a/docs/content/en/integration/openid-connect/apache-guacamole/index.md
+++ b/docs/content/en/integration/openid-connect/apache-guacamole/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/argocd/index.md b/docs/content/en/integration/openid-connect/argocd/index.md
index 0359decea..ecc8efca1 100644
--- a/docs/content/en/integration/openid-connect/argocd/index.md
+++ b/docs/content/en/integration/openid-connect/argocd/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/bookstack/index.md b/docs/content/en/integration/openid-connect/bookstack/index.md
index 0238aef50..e972dc209 100644
--- a/docs/content/en/integration/openid-connect/bookstack/index.md
+++ b/docs/content/en/integration/openid-connect/bookstack/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
index 0e9c92494..54b6838e1 100644
--- a/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
+++ b/docs/content/en/integration/openid-connect/cloudflare-zerotrust/index.md
@@ -27,6 +27,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/gitea/index.md b/docs/content/en/integration/openid-connect/gitea/index.md
index 0676a961c..86e3a96d5 100644
--- a/docs/content/en/integration/openid-connect/gitea/index.md
+++ b/docs/content/en/integration/openid-connect/gitea/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/gitlab/index.md b/docs/content/en/integration/openid-connect/gitlab/index.md
index 44cd36dce..2719fdb87 100644
--- a/docs/content/en/integration/openid-connect/gitlab/index.md
+++ b/docs/content/en/integration/openid-connect/gitlab/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/grafana/index.md b/docs/content/en/integration/openid-connect/grafana/index.md
index d19e23768..4359be920 100644
--- a/docs/content/en/integration/openid-connect/grafana/index.md
+++ b/docs/content/en/integration/openid-connect/grafana/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/harbor/index.md b/docs/content/en/integration/openid-connect/harbor/index.md
index 61293cbc7..782861f4b 100644
--- a/docs/content/en/integration/openid-connect/harbor/index.md
+++ b/docs/content/en/integration/openid-connect/harbor/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/hashicorp-vault/index.md b/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
index 7342a66ee..572070354 100644
--- a/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
+++ b/docs/content/en/integration/openid-connect/hashicorp-vault/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/komga/index.md b/docs/content/en/integration/openid-connect/komga/index.md
index d0dabdc01..93ca8cdd9 100644
--- a/docs/content/en/integration/openid-connect/komga/index.md
+++ b/docs/content/en/integration/openid-connect/komga/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/nextcloud/index.md b/docs/content/en/integration/openid-connect/nextcloud/index.md
index de78a4508..f9d577fb5 100644
--- a/docs/content/en/integration/openid-connect/nextcloud/index.md
+++ b/docs/content/en/integration/openid-connect/nextcloud/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/outline/index.md b/docs/content/en/integration/openid-connect/outline/index.md
index fbf6c719c..6ddcccee5 100644
--- a/docs/content/en/integration/openid-connect/outline/index.md
+++ b/docs/content/en/integration/openid-connect/outline/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/portainer/index.md b/docs/content/en/integration/openid-connect/portainer/index.md
index 4713bdfb7..fa35c9829 100644
--- a/docs/content/en/integration/openid-connect/portainer/index.md
+++ b/docs/content/en/integration/openid-connect/portainer/index.md
@@ -31,6 +31,8 @@ aliases:
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/proxmox/index.md b/docs/content/en/integration/openid-connect/proxmox/index.md
index 89869a17c..a0db22e60 100644
--- a/docs/content/en/integration/openid-connect/proxmox/index.md
+++ b/docs/content/en/integration/openid-connect/proxmox/index.md
@@ -29,6 +29,8 @@ aliases:
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Specific Notes
 
 *__Important Note:__ [Proxmox] requires you create the Realm prior to adding the provider. This is not covered in this
diff --git a/docs/content/en/integration/openid-connect/seafile/index.md b/docs/content/en/integration/openid-connect/seafile/index.md
index 4385be778..5fad7db35 100644
--- a/docs/content/en/integration/openid-connect/seafile/index.md
+++ b/docs/content/en/integration/openid-connect/seafile/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/synapse/index.md b/docs/content/en/integration/openid-connect/synapse/index.md
index edc9dbbda..66be51962 100644
--- a/docs/content/en/integration/openid-connect/synapse/index.md
+++ b/docs/content/en/integration/openid-connect/synapse/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Assumptions
 
 This example makes the following assumptions:
diff --git a/docs/content/en/integration/openid-connect/synology-dsm/index.md b/docs/content/en/integration/openid-connect/synology-dsm/index.md
index d45dcf079..8e73ae933 100644
--- a/docs/content/en/integration/openid-connect/synology-dsm/index.md
+++ b/docs/content/en/integration/openid-connect/synology-dsm/index.md
@@ -29,6 +29,8 @@ community: true
 3. You *__should not__* use the client secret in this example, We *__strongly recommend__* reading the
    [Generating Client Secrets] guide instead.
 
+[Generating Client Secrets]: ../specific-information.md#generating-client-secrets
+
 ### Specific Notes
 
 *__Important Note:__ [Synology DSM] does not support automatically creating users via [OpenID Connect]. It is therefore

From 3113ec2b80ba1517660236eb7e7483da91991b17 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 21 Oct 2022 07:41:46 +1100
Subject: [PATCH 163/263] feat(commands): random character generator (#4213)

This improves all random character generator command usages to be nearly identical and reuse a large block of code. It also improves several functions to give more options when randomly generating outputs.
---
 .../openid-connect/specific-information.md    |  2 +-
 .../authelia/authelia_crypto_hash_generate.md | 12 ++--
 .../authelia_crypto_hash_generate_argon2.md   | 33 ++++++-----
 .../authelia_crypto_hash_generate_bcrypt.md   | 23 +++++---
 .../authelia_crypto_hash_generate_pbkdf2.md   | 25 ++++++---
 .../authelia_crypto_hash_generate_scrypt.md   | 29 ++++++----
 ...authelia_crypto_hash_generate_sha2crypt.md | 25 ++++++---
 .../cli/authelia/authelia_crypto_rand.md      |  6 +-
 internal/commands/const.go                    | 32 ++++++-----
 internal/commands/crypto.go                   | 50 ++---------------
 internal/commands/crypto_hash.go              | 26 +++------
 internal/commands/util.go                     | 55 +++++++++++++++++++
 internal/suites/suite_cli.go                  |  2 +-
 internal/suites/suite_duo_push.go             |  2 +-
 14 files changed, 186 insertions(+), 136 deletions(-)

diff --git a/docs/content/en/integration/openid-connect/specific-information.md b/docs/content/en/integration/openid-connect/specific-information.md
index a005bf44f..8e461e1d7 100644
--- a/docs/content/en/integration/openid-connect/specific-information.md
+++ b/docs/content/en/integration/openid-connect/specific-information.md
@@ -2,7 +2,7 @@
 title: "Specific Information"
 description: "Specific information regarding integrating the Authelia OpenID Connect Provider with an OpenID Connect relying party"
 lead: "Specific information regarding integrating the Authelia OpenID Connect Provider with an OpenID Connect relying party."
-date: 2022-06-15T17:51:47+10:00
+date: 2022-10-20T15:27:09+11:00
 draft: false
 images: []
 menu:
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
index 0ddbe8ab6..6ffdfb80f 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
@@ -37,10 +37,14 @@ authelia crypto hash generate --help
 ### Options
 
 ```
-  -c, --config strings    configuration files to load (default [configuration.yml])
-  -h, --help              help for generate
-      --no-confirm        skip the password confirmation prompt
-      --password string   manually supply the password rather than using the terminal prompt
+  -c, --config strings             configuration files to load (default [configuration.yml])
+  -h, --help                       help for generate
+      --no-confirm                 skip the password confirmation prompt
+      --password string            manually supply the password rather than using the terminal prompt
+      --random                     uses a randomly generated password
+      --random.characters string   sets the explicit characters for the random string
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --random.length int          when using a randomly generated password it configures the length (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
index 7c1423243..e1cf3b066 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
@@ -35,19 +35,26 @@ authelia crypto hash generate argon2 --help
 ### Options
 
 ```
-  -c, --config strings      configuration files to load (default [configuration.yml])
-  -h, --help                help for argon2
-  -i, --iterations int      number of iterations (default 3)
-  -k, --key-size int        key size in bytes (default 32)
-  -m, --memory int          memory in kibibytes (default 65536)
-      --no-confirm          skip the password confirmation prompt
-  -p, --parallelism int     parallelism or threads (default 4)
-      --password string     manually supply the password rather than using the terminal prompt
-      --profile string      profile to use, options are low-memory and recommended
-      --random              uses a randomly generated password
-      --random.length int   when using a randomly generated password it configures the length (default 72)
-  -s, --salt-size int       salt size in bytes (default 16)
-  -v, --variant string      variant, options are 'argon2id', 'argon2i', and 'argon2d' (default "argon2id")
+  -h, --help              help for argon2
+  -i, --iterations int    number of iterations (default 3)
+  -k, --key-size int      key size in bytes (default 32)
+  -m, --memory int        memory in kibibytes (default 65536)
+  -p, --parallelism int   parallelism or threads (default 4)
+      --profile string    profile to use, options are low-memory and recommended
+  -s, --salt-size int     salt size in bytes (default 16)
+  -v, --variant string    variant, options are 'argon2id', 'argon2i', and 'argon2d' (default "argon2id")
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings             configuration files to load (default [configuration.yml])
+      --no-confirm                 skip the password confirmation prompt
+      --password string            manually supply the password rather than using the terminal prompt
+      --random                     uses a randomly generated password
+      --random.characters string   sets the explicit characters for the random string
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --random.length int          when using a randomly generated password it configures the length (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
index c09dcfa63..322fddba1 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
@@ -35,14 +35,21 @@ authelia crypto hash generate bcrypt --help
 ### Options
 
 ```
-  -c, --config strings      configuration files to load (default [configuration.yml])
-  -i, --cost int            hashing cost (default 12)
-  -h, --help                help for bcrypt
-      --no-confirm          skip the password confirmation prompt
-      --password string     manually supply the password rather than using the terminal prompt
-      --random              uses a randomly generated password
-      --random.length int   when using a randomly generated password it configures the length (default 72)
-  -v, --variant string      variant, options are 'standard' and 'sha256' (default "standard")
+  -i, --cost int         hashing cost (default 12)
+  -h, --help             help for bcrypt
+  -v, --variant string   variant, options are 'standard' and 'sha256' (default "standard")
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings             configuration files to load (default [configuration.yml])
+      --no-confirm                 skip the password confirmation prompt
+      --password string            manually supply the password rather than using the terminal prompt
+      --random                     uses a randomly generated password
+      --random.characters string   sets the explicit characters for the random string
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --random.length int          when using a randomly generated password it configures the length (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
index 4578b612a..8455e2a43 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
@@ -35,15 +35,22 @@ authelia crypto hash generate pbkdf2 --help
 ### Options
 
 ```
-  -c, --config strings      configuration files to load (default [configuration.yml])
-  -h, --help                help for pbkdf2
-  -i, --iterations int      number of iterations (default 310000)
-      --no-confirm          skip the password confirmation prompt
-      --password string     manually supply the password rather than using the terminal prompt
-      --random              uses a randomly generated password
-      --random.length int   when using a randomly generated password it configures the length (default 72)
-  -s, --salt-size int       salt size in bytes (default 16)
-  -v, --variant string      variant, options are 'sha1', 'sha224', 'sha256', 'sha384', and 'sha512' (default "sha512")
+  -h, --help             help for pbkdf2
+  -i, --iterations int   number of iterations (default 310000)
+  -s, --salt-size int    salt size in bytes (default 16)
+  -v, --variant string   variant, options are 'sha1', 'sha224', 'sha256', 'sha384', and 'sha512' (default "sha512")
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings             configuration files to load (default [configuration.yml])
+      --no-confirm                 skip the password confirmation prompt
+      --password string            manually supply the password rather than using the terminal prompt
+      --random                     uses a randomly generated password
+      --random.characters string   sets the explicit characters for the random string
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --random.length int          when using a randomly generated password it configures the length (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
index 945b8f40a..5fe84640d 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
@@ -35,17 +35,24 @@ authelia crypto hash generate scrypt --help
 ### Options
 
 ```
-  -r, --block-size int      block size (default 8)
-  -c, --config strings      configuration files to load (default [configuration.yml])
-  -h, --help                help for scrypt
-  -i, --iterations int      number of iterations (default 16)
-  -k, --key-size int        key size in bytes (default 32)
-      --no-confirm          skip the password confirmation prompt
-  -p, --parallelism int     parallelism or threads (default 1)
-      --password string     manually supply the password rather than using the terminal prompt
-      --random              uses a randomly generated password
-      --random.length int   when using a randomly generated password it configures the length (default 72)
-  -s, --salt-size int       salt size in bytes (default 16)
+  -r, --block-size int    block size (default 8)
+  -h, --help              help for scrypt
+  -i, --iterations int    number of iterations (default 16)
+  -k, --key-size int      key size in bytes (default 32)
+  -p, --parallelism int   parallelism or threads (default 1)
+  -s, --salt-size int     salt size in bytes (default 16)
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings             configuration files to load (default [configuration.yml])
+      --no-confirm                 skip the password confirmation prompt
+      --password string            manually supply the password rather than using the terminal prompt
+      --random                     uses a randomly generated password
+      --random.characters string   sets the explicit characters for the random string
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --random.length int          when using a randomly generated password it configures the length (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
index e0533e68d..8cf8d0099 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
@@ -35,15 +35,22 @@ authelia crypto hash generate sha2crypt --help
 ### Options
 
 ```
-  -c, --config strings      configuration files to load (default [configuration.yml])
-  -h, --help                help for sha2crypt
-  -i, --iterations int      number of iterations (default 50000)
-      --no-confirm          skip the password confirmation prompt
-      --password string     manually supply the password rather than using the terminal prompt
-      --random              uses a randomly generated password
-      --random.length int   when using a randomly generated password it configures the length (default 72)
-  -s, --salt-size int       salt size in bytes (default 16)
-  -v, --variant string      variant, options are sha256 and sha512 (default "sha512")
+  -h, --help             help for sha2crypt
+  -i, --iterations int   number of iterations (default 50000)
+  -s, --salt-size int    salt size in bytes (default 16)
+  -v, --variant string   variant, options are sha256 and sha512 (default "sha512")
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config strings             configuration files to load (default [configuration.yml])
+      --no-confirm                 skip the password confirmation prompt
+      --password string            manually supply the password rather than using the terminal prompt
+      --random                     uses a randomly generated password
+      --random.characters string   sets the explicit characters for the random string
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --random.length int          when using a randomly generated password it configures the length (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
index 74293cdff..eae0b660f 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
@@ -43,10 +43,10 @@ authelia crypto rand --characters 0123456789ABCDEF
 ### Options
 
 ```
-      --characters string   Sets the explicit characters for the random output
-  -c, --charset string      Sets the charset for the output, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --characters string   Sets the explicit characters for the random string
+  -c, --charset string      Sets the charset for the random string, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
   -h, --help                help for rand
-  -n, --length int          Sets the length of the random output (default 80)
+  -n, --length int          Sets the length of the random output (default 72)
 ```
 
 ### SEE ALSO
diff --git a/internal/commands/const.go b/internal/commands/const.go
index 13bb8aa24..549643ef0 100644
--- a/internal/commands/const.go
+++ b/internal/commands/const.go
@@ -529,21 +529,23 @@ const (
 	cmdFlagNameBits  = "bits"
 	cmdFlagNameCurve = "curve"
 
-	cmdFlagNamePassword     = "password"
-	cmdFlagNameRandom       = "random"
-	cmdFlagNameRandomLength = "random.length"
-	cmdFlagNameNoConfirm    = "no-confirm"
-	cmdFlagNameVariant      = "variant"
-	cmdFlagNameCost         = "cost"
-	cmdFlagNameIterations   = "iterations"
-	cmdFlagNameParallelism  = "parallelism"
-	cmdFlagNameBlockSize    = "block-size"
-	cmdFlagNameMemory       = "memory"
-	cmdFlagNameKeySize      = "key-size"
-	cmdFlagNameSaltSize     = "salt-size"
-	cmdFlagNameProfile      = "profile"
-	cmdFlagNameSHA512       = "sha512"
-	cmdFlagNameConfig       = "config"
+	cmdFlagNamePassword         = "password"
+	cmdFlagNameRandom           = "random"
+	cmdFlagNameRandomLength     = "random.length"
+	cmdFlagNameRandomCharSet    = "random.charset"
+	cmdFlagNameRandomCharacters = "random.characters"
+	cmdFlagNameNoConfirm        = "no-confirm"
+	cmdFlagNameVariant          = "variant"
+	cmdFlagNameCost             = "cost"
+	cmdFlagNameIterations       = "iterations"
+	cmdFlagNameParallelism      = "parallelism"
+	cmdFlagNameBlockSize        = "block-size"
+	cmdFlagNameMemory           = "memory"
+	cmdFlagNameKeySize          = "key-size"
+	cmdFlagNameSaltSize         = "salt-size"
+	cmdFlagNameProfile          = "profile"
+	cmdFlagNameSHA512           = "sha512"
+	cmdFlagNameConfig           = "config"
 
 	cmdFlagNameCharSet    = "charset"
 	cmdFlagNameCharacters = "characters"
diff --git a/internal/commands/crypto.go b/internal/commands/crypto.go
index 60b33948b..d401b61d5 100644
--- a/internal/commands/crypto.go
+++ b/internal/commands/crypto.go
@@ -44,53 +44,15 @@ func newCryptoRandCmd() (cmd *cobra.Command) {
 		Example: cmdAutheliaCryptoRandExample,
 		Args:    cobra.NoArgs,
 		RunE: func(cmd *cobra.Command, args []string) (err error) {
-			useCharSet, useCharacters := cmd.Flags().Changed(cmdFlagNameCharSet), cmd.Flags().Changed(cmdFlagNameCharacters)
-			if useCharSet && useCharacters {
-				return fmt.Errorf("flags '--%s' and '--%s' are mutually exclusive, only one may be specified", cmdFlagNameCharSet, cmdFlagNameCharacters)
-			}
-
 			var (
-				charset string
-				n       int
+				random string
 			)
 
-			if n, err = cmd.Flags().GetInt(cmdFlagNameLength); err != nil {
+			if random, err = flagsGetRandomCharacters(cmd.Flags(), cmdFlagNameLength, cmdFlagNameCharSet, cmdFlagNameCharacters); err != nil {
 				return err
 			}
 
-			if n < 1 {
-				return fmt.Errorf("length must be at least 1")
-			}
-
-			switch {
-			case useCharSet, !useCharSet && !useCharacters:
-				var c string
-
-				if c, err = cmd.Flags().GetString(cmdFlagNameCharSet); err != nil {
-					return err
-				}
-
-				switch c {
-				case "ascii":
-					charset = utils.CharSetASCII
-				case "alphanumeric":
-					charset = utils.CharSetAlphaNumeric
-				case "alphabetic":
-					charset = utils.CharSetAlphabetic
-				case "numeric-hex":
-					charset = utils.CharSetNumericHex
-				case "numeric":
-					charset = utils.CharSetNumeric
-				default:
-					return fmt.Errorf("invalid charset '%s', must be one of 'ascii', 'alphanumeric', 'alphabetic', 'numeric', or 'numeric-hex'", c)
-				}
-			case useCharacters:
-				if charset, err = cmd.Flags().GetString(cmdFlagNameCharacters); err != nil {
-					return err
-				}
-			}
-
-			fmt.Printf("Random Value: %s\n", utils.RandomString(n, charset, true))
+			fmt.Printf("Random Value: %s\n", random)
 
 			return nil
 		},
@@ -98,9 +60,9 @@ func newCryptoRandCmd() (cmd *cobra.Command) {
 		DisableAutoGenTag: true,
 	}
 
-	cmd.Flags().StringP(cmdFlagNameCharSet, "c", "alphanumeric", "Sets the charset for the output, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex'")
-	cmd.Flags().String(cmdFlagNameCharacters, "", "Sets the explicit characters for the random output")
-	cmd.Flags().IntP(cmdFlagNameLength, "n", 80, "Sets the length of the random output")
+	cmd.Flags().StringP(cmdFlagNameCharSet, "c", "alphanumeric", "Sets the charset for the random string, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex'")
+	cmd.Flags().String(cmdFlagNameCharacters, "", "Sets the explicit characters for the random string")
+	cmd.Flags().IntP(cmdFlagNameLength, "n", 72, "Sets the length of the random output")
 
 	return cmd
 }
diff --git a/internal/commands/crypto_hash.go b/internal/commands/crypto_hash.go
index 5d80a4aac..ce45da15a 100644
--- a/internal/commands/crypto_hash.go
+++ b/internal/commands/crypto_hash.go
@@ -14,7 +14,6 @@ import (
 	"github.com/authelia/authelia/v4/internal/configuration"
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 	"github.com/authelia/authelia/v4/internal/configuration/validator"
-	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 func newHashPasswordCmd() (cmd *cobra.Command) {
@@ -105,6 +104,7 @@ func newCryptoHashGenerateCmd() (cmd *cobra.Command) {
 
 	cmdFlagConfig(cmd)
 	cmdFlagPassword(cmd, true)
+	cmdFlagRandomPassword(cmd)
 
 	for _, use := range []string{cmdUseHashArgon2, cmdUseHashSHA2Crypt, cmdUseHashPBKDF2, cmdUseHashBCrypt, cmdUseHashSCrypt} {
 		cmd.AddCommand(newCryptoHashGenerateSubCmd(use))
@@ -129,10 +129,6 @@ func newCryptoHashGenerateSubCmd(use string) (cmd *cobra.Command) {
 		DisableAutoGenTag: true,
 	}
 
-	cmdFlagConfig(cmd)
-	cmdFlagPassword(cmd, true)
-	cmdFlagRandomPassword(cmd)
-
 	switch use {
 	case cmdUseHashArgon2:
 		cmdFlagIterations(cmd, schema.DefaultPasswordConfig.Argon2.Iterations)
@@ -419,13 +415,7 @@ func cmdCryptoHashGetPassword(cmd *cobra.Command, args []string, useArgs, useRan
 
 	switch {
 	case random:
-		var length int
-
-		if length, err = cmd.Flags().GetInt(cmdFlagNameRandomLength); err != nil {
-			return
-		}
-
-		password = utils.RandomString(length, utils.CharSetAlphaNumeric, true)
+		password, err = flagsGetRandomCharacters(cmd.Flags(), cmdFlagNameRandomLength, cmdFlagNameRandomCharSet, cmdFlagNameCharacters)
 
 		return
 	case cmd.Flags().Changed(cmdFlagNamePassword):
@@ -494,20 +484,22 @@ func hashReadPasswordWithPrompt(prompt string) (data []byte, err error) {
 }
 
 func cmdFlagConfig(cmd *cobra.Command) {
-	cmd.Flags().StringSliceP(cmdFlagNameConfig, "c", []string{"configuration.yml"}, "configuration files to load")
+	cmd.PersistentFlags().StringSliceP(cmdFlagNameConfig, "c", []string{"configuration.yml"}, "configuration files to load")
 }
 
 func cmdFlagPassword(cmd *cobra.Command, noConfirm bool) {
-	cmd.Flags().String(cmdFlagNamePassword, "", "manually supply the password rather than using the terminal prompt")
+	cmd.PersistentFlags().String(cmdFlagNamePassword, "", "manually supply the password rather than using the terminal prompt")
 
 	if noConfirm {
-		cmd.Flags().Bool(cmdFlagNameNoConfirm, false, "skip the password confirmation prompt")
+		cmd.PersistentFlags().Bool(cmdFlagNameNoConfirm, false, "skip the password confirmation prompt")
 	}
 }
 
 func cmdFlagRandomPassword(cmd *cobra.Command) {
-	cmd.Flags().Bool(cmdFlagNameRandom, false, "uses a randomly generated password")
-	cmd.Flags().Int(cmdFlagNameRandomLength, 72, "when using a randomly generated password it configures the length")
+	cmd.PersistentFlags().Bool(cmdFlagNameRandom, false, "uses a randomly generated password")
+	cmd.PersistentFlags().Int(cmdFlagNameRandomLength, 72, "when using a randomly generated password it configures the length")
+	cmd.PersistentFlags().String(cmdFlagNameRandomCharSet, "alphanumeric", "sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex'")
+	cmd.PersistentFlags().String(cmdFlagNameRandomCharacters, "", "sets the explicit characters for the random string")
 }
 
 func cmdFlagIterations(cmd *cobra.Command, value int) {
diff --git a/internal/commands/util.go b/internal/commands/util.go
index 96043bfba..9aa63e78e 100644
--- a/internal/commands/util.go
+++ b/internal/commands/util.go
@@ -3,6 +3,10 @@ package commands
 import (
 	"fmt"
 	"os"
+
+	"github.com/spf13/pflag"
+
+	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 func recoverErr(i any) error {
@@ -29,3 +33,54 @@ func configFilterExisting(configs []string) (finalConfigs []string) {
 
 	return finalConfigs
 }
+
+func flagsGetRandomCharacters(flags *pflag.FlagSet, flagNameLength, flagNameCharSet, flagNameCharacters string) (r string, err error) {
+	var (
+		n       int
+		charset string
+	)
+
+	if n, err = flags.GetInt(flagNameLength); err != nil {
+		return "", err
+	}
+
+	if n < 1 {
+		return "", fmt.Errorf("flag --%s with value '%d' is invalid: must be at least 1", flagNameLength, n)
+	}
+
+	useCharSet, useCharacters := flags.Changed(flagNameCharSet), flags.Changed(flagNameCharacters)
+
+	if useCharSet && useCharacters {
+		return "", fmt.Errorf("flag --%s and flag --%s are mutually exclusive, only one may be used", flagNameCharSet, flagNameCharacters)
+	}
+
+	switch {
+	case useCharSet, !useCharSet && !useCharacters:
+		var c string
+
+		if c, err = flags.GetString(flagNameCharSet); err != nil {
+			return "", err
+		}
+
+		switch c {
+		case "ascii":
+			charset = utils.CharSetASCII
+		case "alphanumeric":
+			charset = utils.CharSetAlphaNumeric
+		case "alphabetic":
+			charset = utils.CharSetAlphabetic
+		case "numeric-hex":
+			charset = utils.CharSetNumericHex
+		case "numeric":
+			charset = utils.CharSetNumeric
+		default:
+			return "", fmt.Errorf("flag '--%s' with value '%s' is invalid, must be one of 'ascii', 'alphanumeric', 'alphabetic', 'numeric', or 'numeric-hex'", flagNameCharSet, c)
+		}
+	case useCharacters:
+		if charset, err = flags.GetString(flagNameCharacters); err != nil {
+			return "", err
+		}
+	}
+
+	return utils.RandomString(n, charset, true), nil
+}
diff --git a/internal/suites/suite_cli.go b/internal/suites/suite_cli.go
index 873a57f8e..7a81f088b 100644
--- a/internal/suites/suite_cli.go
+++ b/internal/suites/suite_cli.go
@@ -49,7 +49,7 @@ func init() {
 		SetUp:           setup,
 		SetUpTimeout:    5 * time.Minute,
 		OnSetupTimeout:  displayAutheliaLogs,
-		TestTimeout:     2 * time.Minute,
+		TestTimeout:     3 * time.Minute,
 		TearDown:        teardown,
 		TearDownTimeout: 2 * time.Minute,
 	})
diff --git a/internal/suites/suite_duo_push.go b/internal/suites/suite_duo_push.go
index 586655844..2505ed24c 100644
--- a/internal/suites/suite_duo_push.go
+++ b/internal/suites/suite_duo_push.go
@@ -64,7 +64,7 @@ func init() {
 		SetUpTimeout:    5 * time.Minute,
 		OnSetupTimeout:  displayAutheliaLogs,
 		OnError:         displayAutheliaLogs,
-		TestTimeout:     3 * time.Minute,
+		TestTimeout:     4 * time.Minute,
 		TearDown:        teardown,
 		TearDownTimeout: 2 * time.Minute,
 

From f5e451e51d3b47e3ee64fceab8a9d026ecfe982f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 21 Oct 2022 08:59:58 +1100
Subject: [PATCH 164/263] build(web): update deps (#4219)

---
 web/package.json   |  10 ++--
 web/pnpm-lock.yaml | 142 ++++++++++++++++++++++-----------------------
 2 files changed, 76 insertions(+), 76 deletions(-)

diff --git a/web/package.json b/web/package.json
index 4ba60b885..3bd47d402 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,14 +31,14 @@
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
-    "i18next": "21.10.0",
+    "i18next": "22.0.1",
     "i18next-browser-languagedetector": "6.1.8",
     "i18next-http-backend": "1.4.4",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
     "react": "18.2.0",
     "react-dom": "18.2.0",
-    "react-i18next": "11.18.6",
+    "react-i18next": "12.0.0",
     "react-loading": "2.0.3",
     "react-otp-input": "2.4.0",
     "react-router-dom": "6.4.2",
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.0",
-    "@types/node": "18.11.2",
+    "@types/node": "18.11.3",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
@@ -162,7 +162,7 @@
     "eslint-config-prettier": "8.5.0",
     "eslint-config-react-app": "7.0.1",
     "eslint-formatter-rdjson": "1.0.5",
-    "eslint-import-resolver-typescript": "3.5.1",
+    "eslint-import-resolver-typescript": "3.5.2",
     "eslint-plugin-import": "2.26.0",
     "eslint-plugin-jsx-a11y": "6.6.1",
     "eslint-plugin-prettier": "4.2.1",
@@ -180,6 +180,6 @@
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.2",
-    "vite-tsconfig-paths": "3.5.1"
+    "vite-tsconfig-paths": "3.5.2"
   }
 }
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 1fe59d238..9b0de7d44 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.2.0
-  '@types/node': 18.11.2
+  '@types/node': 18.11.3
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -33,14 +33,14 @@ specifiers:
   eslint-config-prettier: 8.5.0
   eslint-config-react-app: 7.0.1
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.1
+  eslint-import-resolver-typescript: 3.5.2
   eslint-plugin-import: 2.26.0
   eslint-plugin-jsx-a11y: 6.6.1
   eslint-plugin-prettier: 4.2.1
   eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
-  i18next: 21.10.0
+  i18next: 22.0.1
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
   jest: 29.2.1
@@ -52,7 +52,7 @@ specifiers:
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0
-  react-i18next: 11.18.6
+  react-i18next: 12.0.0
   react-loading: 2.0.3
   react-otp-input: 2.4.0
   react-router-dom: 6.4.2
@@ -62,7 +62,7 @@ specifiers:
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.2
-  vite-tsconfig-paths: 3.5.1
+  vite-tsconfig-paths: 3.5.2
   zxcvbn: 4.4.2
 
 dependencies:
@@ -79,14 +79,14 @@ dependencies:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  i18next: 21.10.0
+  i18next: 22.0.1
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 11.18.6_vfm63zmruocgezzfl2v26zlzpy
+  react-i18next: 12.0.0_d4t5m5ae4lmqad6yvxsbvc7zzi
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.0
-  '@types/node': 18.11.2
+  '@types/node': 18.11.3
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -110,16 +110,16 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.25.0
   eslint-config-prettier: 8.5.0_eslint@8.25.0
-  eslint-config-react-app: 7.0.1_qmd4m3kwjsj7vjajupe47kzjqa
+  eslint-config-react-app: 7.0.1_jwd25u6kfcoup66mu5jx6ufsj4
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
-  eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
+  eslint-import-resolver-typescript: 3.5.2_fyln4uq2tv75svthy6prqvt6lm
+  eslint-plugin-import: 2.26.0_5r7jgxw73ljm6f74emcsxw3vua
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
   eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
   eslint-plugin-react: 7.31.10_eslint@8.25.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
   husky: 8.0.1
-  jest: 29.2.1_@types+node@18.11.2
+  jest: 29.2.1_@types+node@18.11.3
   jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.1
@@ -130,7 +130,7 @@ devDependencies:
   vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.8
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.2_vite@3.1.8
-  vite-tsconfig-paths: 3.5.1_vite@3.1.8
+  vite-tsconfig-paths: 3.5.2_vite@3.1.8
 
 packages:
 
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2515,7 +2515,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2536,14 +2536,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.1_@types+node@18.11.2
+      jest-config: 29.2.1_@types+node@18.11.3
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2570,7 +2570,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       jest-mock: 29.2.1
     dev: true
 
@@ -2597,7 +2597,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       jest-message-util: 29.2.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
@@ -2630,7 +2630,7 @@ packages:
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2750,7 +2750,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2762,7 +2762,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2774,7 +2774,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3370,7 +3370,7 @@ packages:
     engines: {node: '>=12'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       '@types/aria-query': 4.2.2
       aria-query: 5.0.0
       chalk: 4.1.2
@@ -3476,7 +3476,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3505,7 +3505,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3526,8 +3526,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.2:
-    resolution: {integrity: sha512-BWN3M23gLO2jVG8g/XHIRFWiiV4/GckeFIqbU/C4V3xpoBBWSMk4OZomouN0wCkfQFPqgZikyLr7DOYDysIkkw==}
+  /@types/node/18.11.3:
+    resolution: {integrity: sha512-fNjDQzzOsZeKZu5NATgXUPsaFaTxeRgFXoosrHivTl8RGeV733OLawXsGfEk9a8/tySyZUyiZ6E8LcjPFZ2y1A==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5286,7 +5286,7 @@ packages:
       eslint: 8.25.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_qmd4m3kwjsj7vjajupe47kzjqa:
+  /eslint-config-react-app/7.0.1_jwd25u6kfcoup66mu5jx6ufsj4:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5305,7 +5305,7 @@ packages:
       confusing-browser-globals: 1.0.11
       eslint: 8.25.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
-      eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
+      eslint-plugin-import: 2.26.0_5r7jgxw73ljm6f74emcsxw3vua
       eslint-plugin-jest: 25.7.0_ktuq5bhtjfperqqn2aknj5bg6m
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
       eslint-plugin-react: 7.31.10_eslint@8.25.0
@@ -5334,9 +5334,9 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-import-resolver-typescript/3.5.1_fyln4uq2tv75svthy6prqvt6lm:
-    resolution: {integrity: sha512-U7LUjNJPYjNsHvAUAkt/RU3fcTSpbllA0//35B4eLYTX74frmOepbt7F7J3D1IGtj9k21buOpaqtDd4ZlS/BYQ==}
-    engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
+  /eslint-import-resolver-typescript/3.5.2_fyln4uq2tv75svthy6prqvt6lm:
+    resolution: {integrity: sha512-zX4ebnnyXiykjhcBvKIf5TNvt8K7yX6bllTRZ14MiurKPjDpCAZujlszTdB8pcNXhZcOf+god4s9SjQa5GnytQ==}
+    engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
       eslint-plugin-import: '*'
@@ -5344,7 +5344,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.25.0
-      eslint-plugin-import: 2.26.0_kveaa6wnjes3jwdpngialwsaea
+      eslint-plugin-import: 2.26.0_5r7jgxw73ljm6f74emcsxw3vua
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5354,7 +5354,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_6rnc4xtmo5gwf7dzqvzvazx7ja:
+  /eslint-module-utils/2.7.3_abjtvfrqx6apykyqhkvez5sn74:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5375,7 +5375,7 @@ packages:
       '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
-      eslint-import-resolver-typescript: 3.5.1_fyln4uq2tv75svthy6prqvt6lm
+      eslint-import-resolver-typescript: 3.5.2_fyln4uq2tv75svthy6prqvt6lm
       find-up: 2.1.0
     transitivePeerDependencies:
       - supports-color
@@ -5399,7 +5399,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_kveaa6wnjes3jwdpngialwsaea:
+  /eslint-plugin-import/2.26.0_5r7jgxw73ljm6f74emcsxw3vua:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5416,7 +5416,7 @@ packages:
       doctrine: 2.1.0
       eslint: 8.25.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_6rnc4xtmo5gwf7dzqvzvazx7ja
+      eslint-module-utils: 2.7.3_abjtvfrqx6apykyqhkvez5sn74
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5446,7 +5446,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
       '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
       eslint: 8.25.0
-      jest: 29.2.1_@types+node@18.11.2
+      jest: 29.2.1_@types+node@18.11.3
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6246,8 +6246,8 @@ packages:
       - encoding
     dev: false
 
-  /i18next/21.10.0:
-    resolution: {integrity: sha512-YeuIBmFsGjUfO3qBmMOc0rQaun4mIpGKET5WDwvu8lU7gvwpcariZLNtL0Fzj+zazcHUrlXHiptcFhBMFaxzfg==}
+  /i18next/22.0.1:
+    resolution: {integrity: sha512-CRbtl6urEcIDbIzP4sGoPf9YuDNto1JgCRsfdvcVUOPb8nPAQ0azhPZiSdD5AFg/Erb58+/nDRmhm8bzVyjABQ==}
     dependencies:
       '@babel/runtime': 7.19.0
     dev: false
@@ -6647,7 +6647,7 @@ packages:
       '@jest/expect': 29.2.1
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6666,7 +6666,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.1_@types+node@18.11.2:
+  /jest-cli/29.2.1_@types+node@18.11.3:
     resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6683,7 +6683,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.1_@types+node@18.11.2
+      jest-config: 29.2.1_@types+node@18.11.3
       jest-util: 29.2.1
       jest-validate: 29.2.1
       prompts: 2.4.2
@@ -6694,7 +6694,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.1_@types+node@18.11.2:
+  /jest-config/29.2.1_@types+node@18.11.3:
     resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6709,7 +6709,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       babel-jest: 29.2.1_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6774,7 +6774,7 @@ packages:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       jest-mock: 29.2.1
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6791,7 +6791,7 @@ packages:
       '@jest/environment': 29.2.1
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       jest-mock: 29.2.1
       jest-util: 29.2.1
     dev: true
@@ -6807,7 +6807,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6830,7 +6830,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6881,7 +6881,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       jest-util: 29.2.1
     dev: true
 
@@ -6946,7 +6946,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6977,7 +6977,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7000,7 +7000,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       graceful-fs: 4.2.10
     dev: true
 
@@ -7045,7 +7045,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7057,7 +7057,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7069,7 +7069,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7096,7 +7096,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.1_@types+node@18.11.2
+      jest: 29.2.1_@types+node@18.11.3
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7110,7 +7110,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7124,7 +7124,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7136,7 +7136,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7145,13 +7145,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.2
+      '@types/node': 18.11.3
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.1_@types+node@18.11.2:
+  /jest/29.2.1_@types+node@18.11.3:
     resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7164,7 +7164,7 @@ packages:
       '@jest/core': 29.2.1
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.1_@types+node@18.11.2
+      jest-cli: 29.2.1_@types+node@18.11.3
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -8138,8 +8138,8 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/11.18.6_vfm63zmruocgezzfl2v26zlzpy:
-    resolution: {integrity: sha512-yHb2F9BiT0lqoQDt8loZ5gWP331GwctHz9tYQ8A2EIEUu+CcEdjBLQWli1USG3RdWQt3W+jqQLg/d4rrQR96LA==}
+  /react-i18next/12.0.0_d4t5m5ae4lmqad6yvxsbvc7zzi:
+    resolution: {integrity: sha512-/O7N6aIEAl1FaWZBNvhdIo9itvF/MO/nRKr9pYqRc9LhuC1u21SlfwpiYQqvaeNSEW3g3qUXLREOWMt+gxrWbg==}
     peerDependencies:
       i18next: '>= 19.0.0'
       react: '>= 16.8.0 || 18'
@@ -8151,9 +8151,9 @@ packages:
       react-native:
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
+      '@babel/runtime': 7.19.0
       html-parse-stringify: 3.0.1
-      i18next: 21.10.0
+      i18next: 22.0.1
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false
@@ -9292,8 +9292,8 @@ packages:
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.1_vite@3.1.8:
-    resolution: {integrity: sha512-t7cPvDMDxOCUxxNLqngXiX+L6jPYBr+eMgkeVadknxBb89d2s1aejz+wFEep010VfXjGVAUWGEFPe1fkRYTFvg==}
+  /vite-tsconfig-paths/3.5.2_vite@3.1.8:
+    resolution: {integrity: sha512-xJMgHA2oJ28QCG2f+hXrcqzo7IttrSRK4A//Tp94CfuX5eetOx33qiwXHUdi3FwkHP2ocpxHuvE45Ix67gwEmQ==}
     peerDependencies:
       vite: '>2.0.0-0'
     dependencies:
@@ -9334,7 +9334,7 @@ packages:
     dev: true
 
   /void-elements/3.1.0:
-    resolution: {integrity: sha512-Dhxzh5HZuiHQhbvTW9AMetFfBHDMYpo23Uo9btPXgdYP+3T5S+p+jgNy7spra+veYhBP2dCSgxR/i2Y02h5/6w==}
+    resolution: {integrity: sha1-YU9/v42AHwu18GYfWy9XhXUOTwk=}
     engines: {node: '>=0.10.0'}
     dev: false
 

From 1fa7e4cb1b9b47949bfde419c25a1dfe9ffef4b2 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 21 Oct 2022 10:12:37 +1100
Subject: [PATCH 165/263] build(api): update swagger api (#4220)

---
 cmd/authelia-scripts/cmd/gen.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cmd/authelia-scripts/cmd/gen.go b/cmd/authelia-scripts/cmd/gen.go
index 16fa23923..cfd97c2d8 100644
--- a/cmd/authelia-scripts/cmd/gen.go
+++ b/cmd/authelia-scripts/cmd/gen.go
@@ -7,5 +7,5 @@
 package cmd
 
 const (
-	versionSwaggerUI = "4.14.3"
+	versionSwaggerUI = "4.15.0"
 )

From 6e835bd8f85f1cd465d46515c4823670a062fab6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 21 Oct 2022 19:05:24 +1100
Subject: [PATCH 166/263] build(deps): update dependency i18next to v22.0.2
 (#4223)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/package.json b/web/package.json
index 3bd47d402..25eb0b47e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
-    "i18next": "22.0.1",
+    "i18next": "22.0.2",
     "i18next-browser-languagedetector": "6.1.8",
     "i18next-http-backend": "1.4.4",
     "qrcode.react": "3.1.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 9b0de7d44..4818c6e9b 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -40,7 +40,7 @@ specifiers:
   eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
-  i18next: 22.0.1
+  i18next: 22.0.2
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
   jest: 29.2.1
@@ -79,14 +79,14 @@ dependencies:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  i18next: 22.0.1
+  i18next: 22.0.2
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 12.0.0_d4t5m5ae4lmqad6yvxsbvc7zzi
+  react-i18next: 12.0.0_nedrny62vyfw32zwpg5ep5hijq
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
@@ -6246,8 +6246,8 @@ packages:
       - encoding
     dev: false
 
-  /i18next/22.0.1:
-    resolution: {integrity: sha512-CRbtl6urEcIDbIzP4sGoPf9YuDNto1JgCRsfdvcVUOPb8nPAQ0azhPZiSdD5AFg/Erb58+/nDRmhm8bzVyjABQ==}
+  /i18next/22.0.2:
+    resolution: {integrity: sha512-rGXWILemhx0dpNE5PfudVU1g4SdW0hkh4WYHaP8Cl6gm1KkMdBckmNqj9WvYqp8fOSocqX5FFJeadwiOZHLSXQ==}
     dependencies:
       '@babel/runtime': 7.19.0
     dev: false
@@ -8138,7 +8138,7 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/12.0.0_d4t5m5ae4lmqad6yvxsbvc7zzi:
+  /react-i18next/12.0.0_nedrny62vyfw32zwpg5ep5hijq:
     resolution: {integrity: sha512-/O7N6aIEAl1FaWZBNvhdIo9itvF/MO/nRKr9pYqRc9LhuC1u21SlfwpiYQqvaeNSEW3g3qUXLREOWMt+gxrWbg==}
     peerDependencies:
       i18next: '>= 19.0.0'
@@ -8153,7 +8153,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       html-parse-stringify: 3.0.1
-      i18next: 22.0.1
+      i18next: 22.0.2
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false

From 9532823a99c93d2ab53624f530742190163418f4 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 21 Oct 2022 19:41:33 +1100
Subject: [PATCH 167/263] feat(configuration): mtls clients (#4221)

This implements mTLS support for LDAP, Redis, and SMTP. Specified via the tls.certificate_chain and tls.private_key options.

Closes #4044
---
 config.template.yml                           | 76 ++++++++++++++++
 .../en/configuration/first-factor/ldap.md     | 68 ++++++++++++++
 .../en/configuration/notifications/smtp.md    | 74 ++++++++++++++-
 .../en/configuration/prologue/common.md       | 35 +++++++-
 .../content/en/configuration/session/redis.md | 68 ++++++++++++++
 docs/data/configkeys.json                     |  2 +-
 internal/authentication/ldap_user_provider.go |  2 +-
 internal/configuration/config.template.yml    | 76 ++++++++++++++++
 internal/configuration/decode_hooks.go        | 70 +++++++++++++++
 internal/configuration/provider.go            |  2 +
 .../configuration/schema/authentication.go    |  5 +-
 internal/configuration/schema/const.go        | 42 +++++++--
 internal/configuration/schema/keys.go         |  9 ++
 internal/configuration/schema/notifier.go     |  3 +-
 internal/configuration/schema/session.go      |  8 ++
 internal/configuration/schema/shared.go       | 17 +++-
 internal/configuration/schema/types.go        | 90 ++++++++++++++++++-
 .../configuration/test_resources/config.yml   | 29 ++++++
 .../validator/access_control_test.go          | 26 ++++++
 .../configuration/validator/authentication.go | 55 +++++-------
 .../validator/authentication_test.go          | 61 +++++++++++--
 .../validator/configuration_test.go           |  2 +-
 internal/configuration/validator/const.go     | 14 +--
 .../configuration/validator/const_test.go     |  4 +
 .../validator/identity_providers_test.go      | 14 +--
 internal/configuration/validator/notifier.go  | 12 ++-
 .../configuration/validator/notifier_test.go  | 52 +++++++++--
 internal/configuration/validator/session.go   | 12 +++
 .../configuration/validator/session_test.go   | 64 ++++++++++++-
 internal/configuration/validator/shared.go    | 42 +++++++++
 internal/notification/smtp_notifier.go        |  2 +-
 internal/notification/smtp_notifier_test.go   |  2 +-
 internal/session/provider_config.go           |  2 +-
 internal/session/provider_config_test.go      |  2 +-
 internal/utils/crypto.go                      | 35 +++-----
 internal/utils/crypto_test.go                 | 68 --------------
 36 files changed, 974 insertions(+), 171 deletions(-)
 create mode 100644 internal/configuration/validator/shared.go

diff --git a/config.template.yml b/config.template.yml
index 16ea13b17..2572b06fe 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -315,6 +315,82 @@ authentication_backend:
       ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
       minimum_version: TLS1.2
 
+      ## Maximum TLS version for either Secure LDAP or LDAP StartTLS.
+      maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+      #   -----BEGIN CERTIFICATE-----
+      #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+      #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+      #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+      #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+      #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+      #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+      #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+      #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+      #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+      #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+      #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+      #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+      #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+      #   -----END CERTIFICATE-----
+      #   -----BEGIN CERTIFICATE-----
+      #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+      #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+      #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+      #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+      #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+      #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+      #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+      #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+      #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+      #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+      #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+      #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+      #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+      #   qocikt3WAdU^invalid DO NOT USE=
+      #   -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+      #    -----BEGIN RSA PRIVATE KEY-----
+      #   MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+      #   T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+      #   KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+      #   +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+      #   LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+      #   txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+      #   aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+      #   Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+      #   ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+      #   LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+      #   jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+      #   BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+      #   Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+      #   R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+      #   tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+      #   ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+      #   lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+      #   6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+      #   fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+      #   9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+      #   jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+      #   rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+      #   n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+      #   yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+      #   27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+      #   DO NOT USE==
+      #   -----END RSA PRIVATE KEY-----
+
     ## The distinguished name of the container searched for objects in the directory information tree.
     ## See also: additional_users_dn, additional_groups_dn.
     base_dn: dc=example,dc=com
diff --git a/docs/content/en/configuration/first-factor/ldap.md b/docs/content/en/configuration/first-factor/ldap.md
index d7474d1a9..f1d9604da 100644
--- a/docs/content/en/configuration/first-factor/ldap.md
+++ b/docs/content/en/configuration/first-factor/ldap.md
@@ -28,6 +28,74 @@ authentication_backend:
       server_name: ldap.example.com
       skip_verify: false
       minimum_version: TLS1.2
+      maximum_version: TLS1.3
+      certificate_chain: |
+        -----BEGIN CERTIFICATE-----
+        MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+        -----BEGIN CERTIFICATE-----
+        MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        qocikt3WAdU^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+      private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        DO NOT USE==
+        -----END RSA PRIVATE KEY-----
     base_dn: DC=example,DC=com
     additional_users_dn: ou=users
     users_filter: (&({username_attribute}={input})(objectClass=person))
diff --git a/docs/content/en/configuration/notifications/smtp.md b/docs/content/en/configuration/notifications/smtp.md
index 20cd93a5d..e2a69d963 100644
--- a/docs/content/en/configuration/notifications/smtp.md
+++ b/docs/content/en/configuration/notifications/smtp.md
@@ -37,6 +37,74 @@ notifier:
       server_name: smtp.example.com
       skip_verify: false
       minimum_version: TLS1.2
+      maximum_version: TLS1.3
+      certificate_chain: |
+        -----BEGIN CERTIFICATE-----
+        MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+        -----BEGIN CERTIFICATE-----
+        MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        qocikt3WAdU^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+      private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        DO NOT USE==
+        -----END RSA PRIVATE KEY-----
 ```
 
 ## Options
@@ -139,9 +207,9 @@ for more information. This option disables this measure (not recommended).
 
 Some SMTP servers ignore SMTP specifications and claim to support STARTTLS when they in fact do not.
 For security reasons Authelia refuses to send messages to these servers.
-This option disables this measure and is enabled  *__AT YOUR OWN RISK__*. It's *__strongly recommended__* 
-that instead of enabling this option you either fix the issue with the SMTP server's configuration or 
-have the administrators of the server fix it. If the issue can't be fixed by configuration we recommend 
+This option disables this measure and is enabled  *__AT YOUR OWN RISK__*. It's *__strongly recommended__*
+that instead of enabling this option you either fix the issue with the SMTP server's configuration or
+have the administrators of the server fix it. If the issue can't be fixed by configuration we recommend
 lodging an issue with the authors of the SMTP server.
 See [security] for more information.
 
diff --git a/docs/content/en/configuration/prologue/common.md b/docs/content/en/configuration/prologue/common.md
index 4c37a16c5..6222e5448 100644
--- a/docs/content/en/configuration/prologue/common.md
+++ b/docs/content/en/configuration/prologue/common.md
@@ -129,10 +129,39 @@ instead you should tweak the `server_name` option, and the global option
 
 {{< confkey type="string" default="TLS1.2" required="no" >}}
 
-The key `minimum_version` controls the minimum TLS version Authelia will use when opening TLS connections.
-The possible values are `TLS1.3`, `TLS1.2`, `TLS1.1`, `TLS1.0`. Anything other than `TLS1.3` or `TLS1.2`
+Controls the minimum TLS version Authelia will use when performing TLS handshakes.
+The possible values are `TLS1.3`, `TLS1.2`, `TLS1.1`, `TLS1.0`, `SSL3.0`. Anything other than `TLS1.3` or `TLS1.2`
 are very old and deprecated. You should avoid using these and upgrade your backend service instead of decreasing
-this value.
+this value. At the time of this writing `SSL3.0` will always produce errors.
+
+### maximum_version
+
+{{< confkey type="string" default="TLS1.3" required="no" >}}
+
+Controls the maximum TLS version Authelia will use when performing TLS handshakes.
+The possible values are `TLS1.3`, `TLS1.2`, `TLS1.1`, `TLS1.0`, `SSL3.0`. Anything other than `TLS1.3` or `TLS1.2`
+are very old and deprecated. You should avoid using these and upgrade your backend service instead of decreasing
+this value. At the time of this writing `SSL3.0` will always produce errors.
+
+### certificate_chain
+
+{{< confkey type="string" required="no" >}}
+
+The certificate chain/bundle to be used with the [private_key](#private_key) to perform mutual TLS authentication with
+the server.
+
+The value must be one or more certificates encoded in the DER base64 ([RFC4648]) encoded PEM format.
+
+### private_key
+
+{{< confkey type="string" required="yes" >}}
+
+*__Important Note:__ This can also be defined using a [secret](../methods/secrets.md) which is __strongly recommended__
+especially for containerized deployments.*
+
+The private key to be used with the [certificate_chain](#certificate_chain) for mutual TLS authentication.
+
+The value must be one private key encoded in the DER base64 ([RFC4648]) encoded PEM format.
 
 ## Server Buffers
 
diff --git a/docs/content/en/configuration/session/redis.md b/docs/content/en/configuration/session/redis.md
index dd9e2bbc5..e8fc23dc3 100644
--- a/docs/content/en/configuration/session/redis.md
+++ b/docs/content/en/configuration/session/redis.md
@@ -34,6 +34,74 @@ session:
       server_name: myredis.example.com
       skip_verify: false
       minimum_version: TLS1.2
+      maximum_version: TLS1.3
+      certificate_chain: |
+        -----BEGIN CERTIFICATE-----
+        MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+        -----BEGIN CERTIFICATE-----
+        MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        qocikt3WAdU^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+      private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        DO NOT USE==
+        -----END RSA PRIVATE KEY-----
     high_availability:
       sentinel_name: mysentinel
       # If `sentinel_username` is supplied, Authelia will connect using ACL-based
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index 76fc3c6a9..3f0938209 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.maximum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.tls.private_key","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_PRIVATE_KEY_FILE"},{"path":"authentication_backend.ldap.tls.certificate_chain","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_CERTIFICATE_CHAIN"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.maximum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MAXIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.tls.private_key","secret":true,"env":"AUTHELIA_SESSION_REDIS_TLS_PRIVATE_KEY_FILE"},{"path":"session.redis.tls.certificate_chain","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_CERTIFICATE_CHAIN"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.maximum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MAXIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.smtp.tls.private_key","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_PRIVATE_KEY_FILE"},{"path":"notifier.smtp.tls.certificate_chain","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_CERTIFICATE_CHAIN"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/internal/authentication/ldap_user_provider.go b/internal/authentication/ldap_user_provider.go
index 46db74610..a4c23a37a 100644
--- a/internal/authentication/ldap_user_provider.go
+++ b/internal/authentication/ldap_user_provider.go
@@ -53,7 +53,7 @@ func newLDAPUserProvider(config schema.LDAPAuthenticationBackend, disableResetPa
 		config.TLS = schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS
 	}
 
-	tlsConfig := utils.NewTLSConfig(config.TLS, tls.VersionTLS12, certPool)
+	tlsConfig := utils.NewTLSConfig(config.TLS, certPool)
 
 	var dialOpts = []ldap.DialOpt{
 		ldap.DialWithDialer(&net.Dialer{Timeout: config.Timeout}),
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 16ea13b17..2572b06fe 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -315,6 +315,82 @@ authentication_backend:
       ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
       minimum_version: TLS1.2
 
+      ## Maximum TLS version for either Secure LDAP or LDAP StartTLS.
+      maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+      #   -----BEGIN CERTIFICATE-----
+      #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+      #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+      #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+      #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+      #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+      #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+      #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+      #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+      #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+      #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+      #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+      #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+      #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+      #   -----END CERTIFICATE-----
+      #   -----BEGIN CERTIFICATE-----
+      #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+      #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+      #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+      #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+      #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+      #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+      #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+      #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+      #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+      #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+      #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+      #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+      #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+      #   qocikt3WAdU^invalid DO NOT USE=
+      #   -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+      #    -----BEGIN RSA PRIVATE KEY-----
+      #   MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+      #   T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+      #   KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+      #   +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+      #   LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+      #   txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+      #   aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+      #   Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+      #   ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+      #   LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+      #   jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+      #   BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+      #   Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+      #   R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+      #   tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+      #   ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+      #   lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+      #   6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+      #   fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+      #   9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+      #   jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+      #   rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+      #   n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+      #   yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+      #   27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+      #   DO NOT USE==
+      #   -----END RSA PRIVATE KEY-----
+
     ## The distinguished name of the container searched for objects in the directory information tree.
     ## See also: additional_users_dn, additional_groups_dn.
     base_dn: dc=example,dc=com
diff --git a/internal/configuration/decode_hooks.go b/internal/configuration/decode_hooks.go
index 3fa27396e..a5872627f 100644
--- a/internal/configuration/decode_hooks.go
+++ b/internal/configuration/decode_hooks.go
@@ -346,6 +346,76 @@ func StringToX509CertificateChainHookFunc() mapstructure.DecodeHookFuncType {
 	}
 }
 
+// StringToTLSVersionHookFunc decodes strings to schema.TLSVersion's.
+func StringToTLSVersionHookFunc() mapstructure.DecodeHookFuncType {
+	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+		var ptr bool
+
+		if f.Kind() != reflect.String {
+			return data, nil
+		}
+
+		prefixType := ""
+
+		if t.Kind() == reflect.Ptr {
+			ptr = true
+			prefixType = "*"
+		}
+
+		expectedType := reflect.TypeOf(schema.TLSVersion{})
+
+		if ptr && t.Elem() != expectedType {
+			return data, nil
+		} else if !ptr && t != expectedType {
+			return data, nil
+		}
+
+		dataStr := data.(string)
+
+		var result *schema.TLSVersion
+
+		if result, err = schema.NewTLSVersion(dataStr); err != nil {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParse, dataStr, prefixType, expectedType, err)
+		}
+
+		if ptr {
+			return result, nil
+		}
+
+		return *result, nil
+	}
+}
+
+// StringToCryptoPrivateKeyHookFunc decodes strings to schema.CryptographicPrivateKey's.
+func StringToCryptoPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
+	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
+		if f.Kind() != reflect.String {
+			return data, nil
+		}
+
+		field, _ := reflect.TypeOf(schema.TLSConfig{}).FieldByName("PrivateKey")
+		expectedType := field.Type
+
+		if t != expectedType {
+			return data, nil
+		}
+
+		dataStr := data.(string)
+
+		var i any
+
+		if i, err = utils.ParseX509FromPEM([]byte(dataStr)); err != nil {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "", expectedType, err)
+		}
+
+		if result, ok := i.(schema.CryptographicPrivateKey); !ok {
+			return nil, fmt.Errorf(errFmtDecodeHookCouldNotParseBasic, "", expectedType, fmt.Errorf("the data is for a %T not a %s", i, expectedType))
+		} else {
+			return result, nil
+		}
+	}
+}
+
 // StringToPrivateKeyHookFunc decodes strings to rsa.PrivateKey's.
 func StringToPrivateKeyHookFunc() mapstructure.DecodeHookFuncType {
 	return func(f reflect.Type, t reflect.Type, data interface{}) (value interface{}, err error) {
diff --git a/internal/configuration/provider.go b/internal/configuration/provider.go
index 91476ff4b..e64a3b661 100644
--- a/internal/configuration/provider.go
+++ b/internal/configuration/provider.go
@@ -64,6 +64,8 @@ func unmarshal(ko *koanf.Koanf, val *schema.StructValidator, path string, o any)
 				StringToX509CertificateHookFunc(),
 				StringToX509CertificateChainHookFunc(),
 				StringToPrivateKeyHookFunc(),
+				StringToCryptoPrivateKeyHookFunc(),
+				StringToTLSVersionHookFunc(),
 				StringToPasswordDigestHookFunc(true),
 				ToTimeDurationHookFunc(),
 			),
diff --git a/internal/configuration/schema/authentication.go b/internal/configuration/schema/authentication.go
index 35466e2e6..e070a503a 100644
--- a/internal/configuration/schema/authentication.go
+++ b/internal/configuration/schema/authentication.go
@@ -1,6 +1,7 @@
 package schema
 
 import (
+	"crypto/tls"
 	"net/url"
 	"time"
 )
@@ -180,7 +181,7 @@ var DefaultLDAPAuthenticationBackendConfigurationImplementationCustom = LDAPAuth
 	GroupNameAttribute:   "cn",
 	Timeout:              time.Second * 5,
 	TLS: &TLSConfig{
-		MinimumVersion: "TLS1.2",
+		MinimumVersion: TLSVersion{tls.VersionTLS12},
 	},
 }
 
@@ -194,6 +195,6 @@ var DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory =
 	GroupNameAttribute:   "cn",
 	Timeout:              time.Second * 5,
 	TLS: &TLSConfig{
-		MinimumVersion: "TLS1.2",
+		MinimumVersion: TLSVersion{tls.VersionTLS12},
 	},
 }
diff --git a/internal/configuration/schema/const.go b/internal/configuration/schema/const.go
index 23491b648..c59b8ffc5 100644
--- a/internal/configuration/schema/const.go
+++ b/internal/configuration/schema/const.go
@@ -1,6 +1,7 @@
 package schema
 
 import (
+	"errors"
 	"regexp"
 	"time"
 )
@@ -9,20 +10,51 @@ const (
 	argon2   = "argon2"
 	argon2id = "argon2id"
 	sha512   = "sha512"
-	sha256   = "sha256"
 )
 
-// ProfileRefreshDisabled represents a value for refresh_interval that disables the check entirely.
+const (
+	// TLSVersion13 is the textual representation of TLS 1.3.
+	TLSVersion13 = "TLS1.3"
+
+	// TLSVersion12 is the textual representation of TLS 1.2.
+	TLSVersion12 = "TLS1.2"
+
+	// TLSVersion11 is the textual representation of TLS 1.1.
+	TLSVersion11 = "TLS1.1"
+
+	// TLSVersion10 is the textual representation of TLS 1.0.
+	TLSVersion10 = "TLS1.0"
+
+	// SSLVersion30 is the textual representation of SSL 3.0.
+	SSLVersion30 = "SSL3.0"
+
+	// Version13 is the textual representation of version 1.3.
+	Version13 = "1.3"
+
+	// Version12 is the textual representation of version 1.2.
+	Version12 = "1.2"
+
+	// Version11 is the textual representation of version 1.1.
+	Version11 = "1.1"
+
+	// Version10 is the textual representation of version 1.0.
+	Version10 = "1.0"
+)
+
+// ErrTLSVersionNotSupported returned when an unknown TLS version supplied.
+var ErrTLSVersionNotSupported = errors.New("supplied tls version isn't supported")
+
+// ProfileRefreshDisabled represents a Value for refresh_interval that disables the check entirely.
 const ProfileRefreshDisabled = "disable"
 
 const (
-	// ProfileRefreshAlways represents a value for refresh_interval that's the same as 0ms.
+	// ProfileRefreshAlways represents a Value for refresh_interval that's the same as 0ms.
 	ProfileRefreshAlways = "always"
 
-	// RefreshIntervalDefault represents the default value of refresh_interval.
+	// RefreshIntervalDefault represents the default Value of refresh_interval.
 	RefreshIntervalDefault = "5m"
 
-	// RefreshIntervalAlways represents the duration value refresh interval should have if set to always.
+	// RefreshIntervalAlways represents the duration Value refresh interval should have if set to always.
 	RefreshIntervalAlways = 0 * time.Millisecond
 )
 
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index 618a74403..283d4e692 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -84,8 +84,11 @@ var Keys = []string{
 	"authentication_backend.ldap.timeout",
 	"authentication_backend.ldap.start_tls",
 	"authentication_backend.ldap.tls.minimum_version",
+	"authentication_backend.ldap.tls.maximum_version",
 	"authentication_backend.ldap.tls.skip_verify",
 	"authentication_backend.ldap.tls.server_name",
+	"authentication_backend.ldap.tls.private_key",
+	"authentication_backend.ldap.tls.certificate_chain",
 	"authentication_backend.ldap.base_dn",
 	"authentication_backend.ldap.additional_users_dn",
 	"authentication_backend.ldap.users_filter",
@@ -115,8 +118,11 @@ var Keys = []string{
 	"session.redis.maximum_active_connections",
 	"session.redis.minimum_idle_connections",
 	"session.redis.tls.minimum_version",
+	"session.redis.tls.maximum_version",
 	"session.redis.tls.skip_verify",
 	"session.redis.tls.server_name",
+	"session.redis.tls.private_key",
+	"session.redis.tls.certificate_chain",
 	"session.redis.high_availability.sentinel_name",
 	"session.redis.high_availability.sentinel_username",
 	"session.redis.high_availability.sentinel_password",
@@ -195,8 +201,11 @@ var Keys = []string{
 	"notifier.smtp.disable_html_emails",
 	"notifier.smtp.disable_starttls",
 	"notifier.smtp.tls.minimum_version",
+	"notifier.smtp.tls.maximum_version",
 	"notifier.smtp.tls.skip_verify",
 	"notifier.smtp.tls.server_name",
+	"notifier.smtp.tls.private_key",
+	"notifier.smtp.tls.certificate_chain",
 	"notifier.template_path",
 	"server.host",
 	"server.port",
diff --git a/internal/configuration/schema/notifier.go b/internal/configuration/schema/notifier.go
index 159a90dea..a95b935f1 100644
--- a/internal/configuration/schema/notifier.go
+++ b/internal/configuration/schema/notifier.go
@@ -1,6 +1,7 @@
 package schema
 
 import (
+	"crypto/tls"
 	"net/mail"
 	"time"
 )
@@ -42,6 +43,6 @@ var DefaultSMTPNotifierConfiguration = SMTPNotifierConfiguration{
 	Identifier:          "localhost",
 	StartupCheckAddress: mail.Address{Name: "Authelia Test", Address: "test@authelia.com"},
 	TLS: &TLSConfig{
-		MinimumVersion: "TLS1.2",
+		MinimumVersion: TLSVersion{tls.VersionTLS12},
 	},
 }
diff --git a/internal/configuration/schema/session.go b/internal/configuration/schema/session.go
index 6b55e8df3..2a935ee9a 100644
--- a/internal/configuration/schema/session.go
+++ b/internal/configuration/schema/session.go
@@ -1,6 +1,7 @@
 package schema
 
 import (
+	"crypto/tls"
 	"time"
 )
 
@@ -54,3 +55,10 @@ var DefaultSessionConfiguration = SessionConfiguration{
 	RememberMeDuration: time.Hour * 24 * 30,
 	SameSite:           "lax",
 }
+
+// DefaultRedisConfiguration is the default redis configuration.
+var DefaultRedisConfiguration = RedisSessionConfiguration{
+	TLS: &TLSConfig{
+		MinimumVersion: TLSVersion{Value: tls.VersionTLS12},
+	},
+}
diff --git a/internal/configuration/schema/shared.go b/internal/configuration/schema/shared.go
index 336121839..13d56b037 100644
--- a/internal/configuration/schema/shared.go
+++ b/internal/configuration/schema/shared.go
@@ -6,9 +6,20 @@ import (
 
 // TLSConfig is a representation of the TLS configuration.
 type TLSConfig struct {
-	MinimumVersion string `koanf:"minimum_version"`
-	SkipVerify     bool   `koanf:"skip_verify"`
-	ServerName     string `koanf:"server_name"`
+	MinimumVersion TLSVersion `koanf:"minimum_version"`
+	MaximumVersion TLSVersion `koanf:"maximum_version"`
+
+	SkipVerify bool   `koanf:"skip_verify"`
+	ServerName string `koanf:"server_name"`
+
+	PrivateKey       CryptographicPrivateKey `koanf:"private_key"`
+	CertificateChain X509CertificateChain    `koanf:"certificate_chain"`
+}
+
+// TLSCertificateConfig is a representation of the TLS Certificate configuration.
+type TLSCertificateConfig struct {
+	Key              CryptographicPrivateKey `koanf:"key"`
+	CertificateChain X509CertificateChain    `koanf:"certificate_chain"`
 }
 
 // ServerTimeouts represents server timeout configurations.
diff --git a/internal/configuration/schema/types.go b/internal/configuration/schema/types.go
index e421d7eb8..ee4ed3934 100644
--- a/internal/configuration/schema/types.go
+++ b/internal/configuration/schema/types.go
@@ -5,6 +5,7 @@ import (
 	"crypto/ecdsa"
 	"crypto/ed25519"
 	"crypto/rsa"
+	"crypto/tls"
 	"crypto/x509"
 	"encoding/pem"
 	"fmt"
@@ -174,6 +175,71 @@ func NewX509CertificateChain(in string) (chain *X509CertificateChain, err error)
 	return chain, nil
 }
 
+// NewTLSVersion returns a new TLSVersion given a string.
+func NewTLSVersion(input string) (version *TLSVersion, err error) {
+	switch strings.ReplaceAll(strings.ToUpper(input), " ", "") {
+	case TLSVersion13, Version13:
+		return &TLSVersion{tls.VersionTLS13}, nil
+	case TLSVersion12, Version12:
+		return &TLSVersion{tls.VersionTLS12}, nil
+	case TLSVersion11, Version11:
+		return &TLSVersion{tls.VersionTLS11}, nil
+	case TLSVersion10, Version10:
+		return &TLSVersion{tls.VersionTLS10}, nil
+	case SSLVersion30:
+		return &TLSVersion{tls.VersionSSL30}, nil //nolint:staticcheck
+	}
+
+	return nil, ErrTLSVersionNotSupported
+}
+
+// TLSVersion is a struct which handles tls.Config versions.
+type TLSVersion struct {
+	Value uint16
+}
+
+// MaxVersion returns the value of this as a MaxVersion value.
+func (v *TLSVersion) MaxVersion() uint16 {
+	if v.Value == 0 {
+		return tls.VersionTLS13
+	}
+
+	return v.Value
+}
+
+// MinVersion returns the value of this as a MinVersion value.
+func (v *TLSVersion) MinVersion() uint16 {
+	if v.Value == 0 {
+		return tls.VersionTLS12
+	}
+
+	return v.Value
+}
+
+// String provides the Stringer.
+func (v *TLSVersion) String() string {
+	switch v.Value {
+	case tls.VersionTLS10:
+		return TLSVersion10
+	case tls.VersionTLS11:
+		return TLSVersion11
+	case tls.VersionTLS12:
+		return TLSVersion12
+	case tls.VersionTLS13:
+		return TLSVersion13
+	case tls.VersionSSL30: //nolint:staticcheck
+		return SSLVersion30
+	default:
+		return ""
+	}
+}
+
+// CryptographicPrivateKey represents the actual crypto.PrivateKey interface.
+type CryptographicPrivateKey interface {
+	Public() crypto.PublicKey
+	Equal(x crypto.PrivateKey) bool
+}
+
 // X509CertificateChain is a helper struct that holds a list of *x509.Certificate's.
 type X509CertificateChain struct {
 	certs []*x509.Certificate
@@ -259,10 +325,32 @@ func (c *X509CertificateChain) EqualKey(other any) (equal bool) {
 }
 
 // Certificates for this X509CertificateChain.
-func (c *X509CertificateChain) Certificates() []*x509.Certificate {
+func (c *X509CertificateChain) Certificates() (certificates []*x509.Certificate) {
 	return c.certs
 }
 
+// CertificatesRaw for this X509CertificateChain.
+func (c *X509CertificateChain) CertificatesRaw() (certificates [][]byte) {
+	if !c.HasCertificates() {
+		return nil
+	}
+
+	for _, cert := range c.certs {
+		certificates = append(certificates, cert.Raw)
+	}
+
+	return certificates
+}
+
+// Leaf returns the first certificate if available for use with tls.Certificate.
+func (c *X509CertificateChain) Leaf() (leaf *x509.Certificate) {
+	if !c.HasCertificates() {
+		return nil
+	}
+
+	return c.certs[0]
+}
+
 // Validate the X509CertificateChain ensuring the certificates were provided in the correct order
 // (with nth being signed by the nth+1), and that all of the certificates are valid based on the current time.
 func (c *X509CertificateChain) Validate() (err error) {
diff --git a/internal/configuration/test_resources/config.yml b/internal/configuration/test_resources/config.yml
index fbe2eca0a..ea48a847f 100644
--- a/internal/configuration/test_resources/config.yml
+++ b/internal/configuration/test_resources/config.yml
@@ -18,6 +18,35 @@ duo_api:
 authentication_backend:
   ldap:
     url: ldap://127.0.0.1
+    tls:
+      private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA6z1LOg1ZCqb0lytXWZ+MRBpMHEXOoTOLYgfZXt1IYyE3Z758
+        cyalk0NYQhY5cZDsXPYWPvAHiPMUxutWkoxFwby56S+AbIMa3/Is+ILrHRJs8Exn
+        ZkpyrYFxPX12app2kErdmAkHSx0Z5/kuXiz96PHs8S8/ZbyZolLHzdfLtSzjvRm5
+        Zue5iFzsf19NJz5CIBfv8g5lRwtE8wNJoRSpn1xq7fqfuA0weDNFPzjlNWRLy6aa
+        rK7qJexRkmkCs4sLgyl+9NODYJpvmN8E1yhyC27E0joI6rBFVW7Ihv+cSPCdDzGp
+        EWe81x3AeqAa3mjVqkiq4u4Z2i8JDgBaPboqJwIDAQABAoIBAAFdLZ58jVOefDSU
+        L8F5R1rtvBs93GDa56f926jNJ6pLewLC+/2+757W+SAI+PRLntM7Kg3bXm/Q2QH+
+        Q1Y+MflZmspbWCdI61L5GIGoYKyeers59i+FpvySj5GHtLQRiTZ0+Kv1AXHSDWBm
+        9XneUOqU3IbZe0ifu1RRno72/VtjkGXbW8Mkkw+ohyGbIeTx/0/JQ6sSNZTT3Vk7
+        8i4IXptq3HSF0/vqZuah8rShoeNq72pD1YLM9YPdL5by1QkDLnqATDiCpLBTCaNV
+        I8sqYEun+HYbQzBj8ZACG2JVZpEEidONWQHw5BPWO95DSZYrVnEkuCqeH+u5vYt7
+        CHuJ3AECgYEA+W3v5z+j91w1VPHS0VB3SCDMouycAMIUnJPAbt+0LPP0scUFsBGE
+        hPAKddC54pmMZRQ2KIwBKiyWfCrJ8Xz8Yogn7fJgmwTHidJBr2WQpIEkNGlK3Dzi
+        jXL2sh0yC7sHvn0DqiQ79l/e7yRbSnv2wrTJEczOOH2haD7/tBRyCYECgYEA8W+q
+        E9YyGvEltnPFaOxofNZ8LHVcZSsQI5b6fc0iE7fjxFqeXPXEwGSOTwqQLQRiHn9b
+        CfPmIG4Vhyq0otVmlPvUnfBZ2OK+tl5X2/mQFO3ROMdvpi0KYa994uqfJdSTaqLn
+        jjoKFB906UFHnDQDLZUNiV1WwnkTglgLc+xrd6cCgYEAqqthyv6NyBTM3Tm2gcio
+        Ra9Dtntl51LlXZnvwy3IkDXBCd6BHM9vuLKyxZiziGx+Vy90O1xI872cnot8sINQ
+        Am+dur/tAEVN72zxyv0Y8qb2yfH96iKy9gxi5s75TnOEQgAygLnYWaWR2lorKRUX
+        bHTdXBOiS58S0UzCFEslGIECgYBqkO4SKWYeTDhoKvuEj2yjRYyzlu28XeCWxOo1
+        otiauX0YSyNBRt2cSgYiTzhKFng0m+QUJYp63/wymB/5C5Zmxi0XtWIDADpLhqLj
+        HmmBQ2Mo26alQ5YkffBju0mZyhVzaQop1eZi8WuKFV1FThPlB7hc3E0SM5zv2Grd
+        tQnOWwKBgQC40yZY0PcjuILhy+sIc0Wvh7LUA7taSdTye149kRvbvsCDN7Jh75lM
+        USjhLXY0Nld2zBm9r8wMb81mXH29uvD+tDqqsICvyuKlA/tyzXR+QTr7dCVKVwu0
+        1YjCJ36UpTsLre2f8nOSLtNmRfDPtbOE2mkOoO9dD9UU0XZwnvn9xw==
+        -----END RSA PRIVATE KEY-----
     base_dn: dc=example,dc=com
     username_attribute: uid
     additional_users_dn: ou=users
diff --git a/internal/configuration/validator/access_control_test.go b/internal/configuration/validator/access_control_test.go
index 7bf24d52f..ae7dabb18 100644
--- a/internal/configuration/validator/access_control_test.go
+++ b/internal/configuration/validator/access_control_test.go
@@ -201,6 +201,22 @@ func (suite *AccessControl) TestShouldRaiseErrorInvalidSubject() {
 	suite.Assert().EqualError(suite.validator.Errors()[1], fmt.Sprintf(errAccessControlRuleBypassPolicyInvalidWithSubjects, ruleDescriptor(1, suite.config.AccessControl.Rules[0])))
 }
 
+func (suite *AccessControl) TestShouldRaiseErrorBypassWithSubjectDomainRegexGroup() {
+	suite.config.AccessControl.Rules = []schema.ACLRule{
+		{
+			DomainsRegex: MustCompileRegexps([]string{`^(?P<User>\w+)\.example\.com$`}),
+			Policy:       "bypass",
+		},
+	}
+
+	ValidateRules(suite.config, suite.validator)
+
+	suite.Require().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "access control: rule #1: 'policy' option 'bypass' is not supported when 'domain_regex' option contains the user or group named matches. For more information see: https://www.authelia.com/c/acl-match-concept-2")
+}
+
 func (suite *AccessControl) TestShouldSetQueryDefaults() {
 	domains := []string{"public.example.com"}
 	suite.config.AccessControl.Rules = []schema.ACLRule{
@@ -359,3 +375,13 @@ func TestShouldReturnCorrectResultsForValidNetworkGroups(t *testing.T) {
 	assert.True(t, validNetwork)
 	assert.False(t, invalidNetwork)
 }
+
+func MustCompileRegexps(exps []string) (regexps []regexp.Regexp) {
+	regexps = make([]regexp.Regexp, len(exps))
+
+	for i, exp := range exps {
+		regexps[i] = *regexp.MustCompile(exp)
+	}
+
+	return regexps
+}
diff --git a/internal/configuration/validator/authentication.go b/internal/configuration/validator/authentication.go
index 280d383ec..62fe289b2 100644
--- a/internal/configuration/validator/authentication.go
+++ b/internal/configuration/validator/authentication.go
@@ -321,19 +321,35 @@ func validateLDAPAuthenticationBackend(config *schema.AuthenticationBackend, val
 		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendImplementation, config.LDAP.Implementation, strings.Join([]string{schema.LDAPImplementationCustom, schema.LDAPImplementationActiveDirectory}, "', '")))
 	}
 
+	configDefaultTLS := &schema.TLSConfig{}
+
 	if implementation != nil {
-		setDefaultImplementationLDAPAuthenticationBackendProfileMisc(config.LDAP, implementation)
+		if config.LDAP.Timeout == 0 {
+			config.LDAP.Timeout = implementation.Timeout
+		}
+
+		configDefaultTLS = &schema.TLSConfig{
+			MinimumVersion: implementation.TLS.MinimumVersion,
+			MaximumVersion: implementation.TLS.MaximumVersion,
+		}
+
 		setDefaultImplementationLDAPAuthenticationBackendProfileAttributes(config.LDAP, implementation)
 	}
 
-	if config.LDAP.TLS != nil {
-		if _, err := utils.TLSStringToTLSConfigVersion(config.LDAP.TLS.MinimumVersion); err != nil {
-			validator.Push(fmt.Errorf(errFmtLDAPAuthBackendTLSMinVersion, config.LDAP.TLS.MinimumVersion, err))
-		}
+	if config.LDAP.URL == "" {
+		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendMissingOption, "url"))
 	} else {
+		configDefaultTLS.ServerName = validateLDAPAuthenticationBackendURL(config.LDAP, validator)
+	}
+
+	if config.LDAP.TLS == nil {
 		config.LDAP.TLS = &schema.TLSConfig{}
 	}
 
+	if err := ValidateTLSConfig(config.LDAP.TLS, configDefaultTLS); err != nil {
+		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendTLSConfigInvalid, err))
+	}
+
 	if strings.Contains(config.LDAP.UsersFilter, "{0}") {
 		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendFilterReplacedPlaceholders, "users_filter", "{0}", "{input}"))
 	}
@@ -346,31 +362,9 @@ func validateLDAPAuthenticationBackend(config *schema.AuthenticationBackend, val
 		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendFilterReplacedPlaceholders, "groups_filter", "{1}", "{username}"))
 	}
 
-	if config.LDAP.URL == "" {
-		validator.Push(fmt.Errorf(errFmtLDAPAuthBackendMissingOption, "url"))
-	} else {
-		validateLDAPAuthenticationBackendURL(config.LDAP, validator)
-	}
-
 	validateLDAPRequiredParameters(config, validator)
 }
 
-func setDefaultImplementationLDAPAuthenticationBackendProfileMisc(config *schema.LDAPAuthenticationBackend, implementation *schema.LDAPAuthenticationBackend) {
-	if config.Timeout == 0 {
-		config.Timeout = implementation.Timeout
-	}
-
-	if implementation.TLS == nil {
-		return
-	}
-
-	if config.TLS == nil {
-		config.TLS = implementation.TLS
-	} else if config.TLS.MinimumVersion == "" {
-		config.TLS.MinimumVersion = implementation.TLS.MinimumVersion
-	}
-}
-
 func ldapImplementationShouldSetStr(config, implementation string) bool {
 	return config == "" && implementation != ""
 }
@@ -401,7 +395,7 @@ func setDefaultImplementationLDAPAuthenticationBackendProfileAttributes(config *
 	}
 }
 
-func validateLDAPAuthenticationBackendURL(config *schema.LDAPAuthenticationBackend, validator *schema.StructValidator) {
+func validateLDAPAuthenticationBackendURL(config *schema.LDAPAuthenticationBackend, validator *schema.StructValidator) (hostname string) {
 	var (
 		parsedURL *url.URL
 		err       error
@@ -420,9 +414,8 @@ func validateLDAPAuthenticationBackendURL(config *schema.LDAPAuthenticationBacke
 	}
 
 	config.URL = parsedURL.String()
-	if config.TLS.ServerName == "" {
-		config.TLS.ServerName = parsedURL.Hostname()
-	}
+
+	return parsedURL.Hostname()
 }
 
 func validateLDAPRequiredParameters(config *schema.AuthenticationBackend, validator *schema.StructValidator) {
diff --git a/internal/configuration/validator/authentication_test.go b/internal/configuration/validator/authentication_test.go
index 328e90590..5f589063c 100644
--- a/internal/configuration/validator/authentication_test.go
+++ b/internal/configuration/validator/authentication_test.go
@@ -1,6 +1,7 @@
 package validator
 
 import (
+	"crypto/tls"
 	"net/url"
 	"testing"
 	"time"
@@ -625,6 +626,42 @@ func (suite *LDAPAuthenticationBackendSuite) TestShouldRaiseErrorWhenPasswordNot
 	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: ldap: option 'password' is required")
 }
 
+func (suite *LDAPAuthenticationBackendSuite) TestShouldNotRaiseErrorWhenPasswordNotProvidedWithPermitUnauthenticatedBind() {
+	suite.config.LDAP.Password = ""
+	suite.config.LDAP.PermitUnauthenticatedBind = true
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: ldap: option 'permit_unauthenticated_bind' can't be enabled when password reset is enabled")
+}
+
+func (suite *LDAPAuthenticationBackendSuite) TestShouldRaiseErrorWhenPasswordProvidedWithPermitUnauthenticatedBind() {
+	suite.config.LDAP.Password = "test"
+	suite.config.LDAP.PermitUnauthenticatedBind = true
+	suite.config.PasswordReset.Disable = true
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: ldap: option 'permit_unauthenticated_bind' can't be enabled when a password is specified")
+}
+
+func (suite *LDAPAuthenticationBackendSuite) TestShouldNotRaiseErrorWhenPermitUnauthenticatedBindConfiguredCorrectly() {
+	suite.config.LDAP.Password = ""
+	suite.config.LDAP.PermitUnauthenticatedBind = true
+	suite.config.PasswordReset.Disable = true
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 0)
+}
+
 func (suite *LDAPAuthenticationBackendSuite) TestShouldRaiseErrorWhenBaseDNNotProvided() {
 	suite.config.LDAP.BaseDN = ""
 
@@ -783,19 +820,19 @@ func (suite *LDAPAuthenticationBackendSuite) TestShouldHelpDetectNoInputPlacehol
 }
 
 func (suite *LDAPAuthenticationBackendSuite) TestShouldSetDefaultTLSMinimumVersion() {
-	suite.config.LDAP.TLS = &schema.TLSConfig{MinimumVersion: ""}
+	suite.config.LDAP.TLS = &schema.TLSConfig{MinimumVersion: schema.TLSVersion{}}
 
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
 
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal(schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS.MinimumVersion, suite.config.LDAP.TLS.MinimumVersion)
+	suite.Assert().Equal(schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS.MinimumVersion.Value, suite.config.LDAP.TLS.MinimumVersion.MinVersion())
 }
 
-func (suite *LDAPAuthenticationBackendSuite) TestShouldNotAllowInvalidTLSValue() {
+func (suite *LDAPAuthenticationBackendSuite) TestShouldNotAllowSSL30() {
 	suite.config.LDAP.TLS = &schema.TLSConfig{
-		MinimumVersion: "SSL2.0",
+		MinimumVersion: schema.TLSVersion{Value: tls.VersionSSL30}, //nolint:staticcheck
 	}
 
 	ValidateAuthenticationBackend(&suite.config, suite.validator)
@@ -803,7 +840,21 @@ func (suite *LDAPAuthenticationBackendSuite) TestShouldNotAllowInvalidTLSValue()
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Require().Len(suite.validator.Errors(), 1)
 
-	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: ldap: tls: option 'minimum_tls_version' is invalid: SSL2.0: supplied tls version isn't supported")
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: ldap: tls: option 'minimum_version' is invalid: minimum version is TLS1.0 but SSL3.0 was configured")
+}
+
+func (suite *LDAPAuthenticationBackendSuite) TestShouldNotAllowTLSVerMinGreaterThanVerMax() {
+	suite.config.LDAP.TLS = &schema.TLSConfig{
+		MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS13},
+		MaximumVersion: schema.TLSVersion{Value: tls.VersionTLS12},
+	}
+
+	ValidateAuthenticationBackend(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "authentication_backend: ldap: tls: option combination of 'minimum_version' and 'maximum_version' is invalid: minimum version TLS1.3 is greater than the maximum version TLS1.2")
 }
 
 func TestLdapAuthenticationBackend(t *testing.T) {
diff --git a/internal/configuration/validator/configuration_test.go b/internal/configuration/validator/configuration_test.go
index e212fbf95..18ff2ae53 100644
--- a/internal/configuration/validator/configuration_test.go
+++ b/internal/configuration/validator/configuration_test.go
@@ -25,7 +25,7 @@ func newDefaultConfig() schema.Configuration {
 		DefaultPolicy: "two_factor",
 	}
 	config.Session = schema.SessionConfiguration{
-		Domain: "example.com",
+		Domain: examplecom,
 		Name:   "authelia_session",
 		Secret: "secret",
 	}
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index 30a7ab357..24c8810f5 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -58,7 +58,11 @@ const (
 	errFmtNotifierTemplatePathUnknownError        = "notifier: option 'template_path' refers to location '%s' which couldn't be opened: %w"
 	errFmtNotifierFileSystemFileNameNotConfigured = "notifier: filesystem: option 'filename' is required"
 	errFmtNotifierSMTPNotConfigured               = "notifier: smtp: option '%s' is required"
-	errFmtNotifierStartTlsDisabled                = "Notifier SMTP connection has opportunistic STARTTLS explicitly disabled which means all emails will be sent insecurely over plain text and this setting is only necessary for non-compliant SMTP servers which advertise they support STARTTLS when they actually don't support STARTTLS"
+	errFmtNotifierSMTPTLSConfigInvalid            = "notifier: smtp: tls: %w"
+	errFmtNotifierStartTlsDisabled                = "notifier: smtp: option 'disable_starttls' is enabled: " +
+		"opportunistic STARTTLS is explicitly disabled which means all emails will be sent insecurely over plaintext " +
+		"and this setting is only necessary for non-compliant SMTP servers which advertise they support STARTTLS " +
+		"when they actually don't support STARTTLS"
 )
 
 const (
@@ -91,10 +95,9 @@ const (
 	errFmtLDAPAuthBackendUnauthenticatedBindWithPassword     = "authentication_backend: ldap: option 'permit_unauthenticated_bind' can't be enabled when a password is specified"
 	errFmtLDAPAuthBackendUnauthenticatedBindWithResetEnabled = "authentication_backend: ldap: option 'permit_unauthenticated_bind' can't be enabled when password reset is enabled"
 
-	errFmtLDAPAuthBackendMissingOption = "authentication_backend: ldap: option '%s' is required"
-	errFmtLDAPAuthBackendTLSMinVersion = "authentication_backend: ldap: tls: option " +
-		"'minimum_tls_version' is invalid: %s: %w"
-	errFmtLDAPAuthBackendImplementation = "authentication_backend: ldap: option 'implementation' " +
+	errFmtLDAPAuthBackendMissingOption    = "authentication_backend: ldap: option '%s' is required"
+	errFmtLDAPAuthBackendTLSConfigInvalid = "authentication_backend: ldap: tls: %w"
+	errFmtLDAPAuthBackendImplementation   = "authentication_backend: ldap: option 'implementation' " +
 		errSuffixMustBeOneOf
 	errFmtLDAPAuthBackendFilterReplacedPlaceholders = "authentication_backend: ldap: option " +
 		"'%s' has an invalid placeholder: '%s' has been removed, please use '%s' instead"
@@ -247,6 +250,7 @@ const (
 	errFmtSessionRedisPortRange           = "session: redis: option 'port' must be between 1 and 65535 but is configured as '%d'"
 	errFmtSessionRedisHostRequired        = "session: redis: option 'host' is required"
 	errFmtSessionRedisHostOrNodesRequired = "session: redis: option 'host' or the 'high_availability' option 'nodes' is required"
+	errFmtSessionRedisTLSConfigInvalid    = "session: redis: tls: %w"
 
 	errFmtSessionRedisSentinelMissingName     = "session: redis: high_availability: option 'sentinel_name' is required"
 	errFmtSessionRedisSentinelNodeHostMissing = "session: redis: high_availability: option 'nodes': option 'host' is required for each node but one or more nodes are missing this"
diff --git a/internal/configuration/validator/const_test.go b/internal/configuration/validator/const_test.go
index 4fe7d56f0..ab398a187 100644
--- a/internal/configuration/validator/const_test.go
+++ b/internal/configuration/validator/const_test.go
@@ -10,3 +10,7 @@ const (
 	testLDAPUser      = "user"
 	testEncryptionKey = "a_not_so_secure_encryption_key"
 )
+
+const (
+	examplecom = "example.com"
+)
diff --git a/internal/configuration/validator/identity_providers_test.go b/internal/configuration/validator/identity_providers_test.go
index 23eca844a..727676bb4 100644
--- a/internal/configuration/validator/identity_providers_test.go
+++ b/internal/configuration/validator/identity_providers_test.go
@@ -257,7 +257,7 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 					RedirectURIs: []string{
 						"https://google.com",
 					},
-					SectorIdentifier: mustParseURL("example.com"),
+					SectorIdentifier: mustParseURL(examplecom),
 				},
 			},
 		},
@@ -289,12 +289,12 @@ func TestShouldRaiseErrorWhenOIDCServerClientBadValues(t *testing.T) {
 				},
 			},
 			Errors: []string{
-				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", "example.com", "scheme", "https"),
-				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", "example.com", "path", "/path"),
-				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", "example.com", "query", "query=abc"),
-				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", "example.com", "fragment", "fragment"),
-				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", "example.com", "username", "user"),
-				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifierWithoutValue, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", "example.com", "password"),
+				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", examplecom, "scheme", "https"),
+				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", examplecom, "path", "/path"),
+				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", examplecom, "query", "query=abc"),
+				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", examplecom, "fragment", "fragment"),
+				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifier, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", examplecom, "username", "user"),
+				fmt.Sprintf(errFmtOIDCClientInvalidSectorIdentifierWithoutValue, "client-invalid-sector", "https://user:pass@example.com/path?query=abc#fragment", examplecom, "password"),
 			},
 		},
 		{
diff --git a/internal/configuration/validator/notifier.go b/internal/configuration/validator/notifier.go
index ea37f972e..b3515188f 100644
--- a/internal/configuration/validator/notifier.go
+++ b/internal/configuration/validator/notifier.go
@@ -83,11 +83,17 @@ func validateSMTPNotifier(config *schema.SMTPNotifierConfiguration, validator *s
 	}
 
 	if config.TLS == nil {
-		config.TLS = schema.DefaultSMTPNotifierConfiguration.TLS
+		config.TLS = &schema.TLSConfig{}
 	}
 
-	if config.TLS.ServerName == "" {
-		config.TLS.ServerName = config.Host
+	configDefaultTLS := &schema.TLSConfig{
+		ServerName:     config.Host,
+		MinimumVersion: schema.DefaultSMTPNotifierConfiguration.TLS.MinimumVersion,
+		MaximumVersion: schema.DefaultSMTPNotifierConfiguration.TLS.MaximumVersion,
+	}
+
+	if err := ValidateTLSConfig(config.TLS, configDefaultTLS); err != nil {
+		validator.Push(fmt.Errorf(errFmtNotifierSMTPTLSConfigInvalid, err))
 	}
 
 	if config.DisableStartTLS {
diff --git a/internal/configuration/validator/notifier_test.go b/internal/configuration/validator/notifier_test.go
index c22b2494f..7ba756711 100644
--- a/internal/configuration/validator/notifier_test.go
+++ b/internal/configuration/validator/notifier_test.go
@@ -1,6 +1,7 @@
 package validator
 
 import (
+	"crypto/tls"
 	"fmt"
 	"net/mail"
 	"testing"
@@ -22,7 +23,7 @@ func (suite *NotifierSuite) SetupTest() {
 		Username: "john",
 		Password: "password",
 		Sender:   mail.Address{Name: "Authelia", Address: "authelia@example.com"},
-		Host:     "example.com",
+		Host:     examplecom,
 		Port:     25,
 	}
 	suite.config.FileSystem = nil
@@ -77,8 +78,8 @@ func (suite *NotifierSuite) TestSMTPShouldSetTLSDefaults() {
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal("example.com", suite.config.SMTP.TLS.ServerName)
-	suite.Assert().Equal("TLS1.2", suite.config.SMTP.TLS.MinimumVersion)
+	suite.Assert().Equal(examplecom, suite.config.SMTP.TLS.ServerName)
+	suite.Assert().Equal(uint16(tls.VersionTLS12), suite.config.SMTP.TLS.MinimumVersion.Value)
 	suite.Assert().False(suite.config.SMTP.TLS.SkipVerify)
 }
 
@@ -96,7 +97,7 @@ func (suite *NotifierSuite) TestSMTPShouldDefaultStartupCheckAddress() {
 func (suite *NotifierSuite) TestSMTPShouldDefaultTLSServerNameToHost() {
 	suite.config.SMTP.Host = "google.com"
 	suite.config.SMTP.TLS = &schema.TLSConfig{
-		MinimumVersion: "TLS1.1",
+		MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS11},
 	}
 
 	ValidateNotifier(&suite.config, suite.validator)
@@ -105,10 +106,51 @@ func (suite *NotifierSuite) TestSMTPShouldDefaultTLSServerNameToHost() {
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
 	suite.Assert().Equal("google.com", suite.config.SMTP.TLS.ServerName)
-	suite.Assert().Equal("TLS1.1", suite.config.SMTP.TLS.MinimumVersion)
+	suite.Assert().Equal(uint16(tls.VersionTLS11), suite.config.SMTP.TLS.MinimumVersion.MinVersion())
 	suite.Assert().False(suite.config.SMTP.TLS.SkipVerify)
 }
 
+func (suite *NotifierSuite) TestSMTPShouldErrorOnSSL30() {
+	suite.config.SMTP.Host = examplecom
+	suite.config.SMTP.TLS = &schema.TLSConfig{
+		MinimumVersion: schema.TLSVersion{Value: tls.VersionSSL30}, //nolint:staticcheck
+	}
+
+	ValidateNotifier(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "notifier: smtp: tls: option 'minimum_version' is invalid: minimum version is TLS1.0 but SSL3.0 was configured")
+}
+
+func (suite *NotifierSuite) TestSMTPShouldErrorOnTLSMinVerGreaterThanMaxVer() {
+	suite.config.SMTP.Host = examplecom
+	suite.config.SMTP.TLS = &schema.TLSConfig{
+		MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS13},
+		MaximumVersion: schema.TLSVersion{Value: tls.VersionTLS10},
+	}
+
+	ValidateNotifier(&suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "notifier: smtp: tls: option combination of 'minimum_version' and 'maximum_version' is invalid: minimum version TLS1.3 is greater than the maximum version TLS1.0")
+}
+
+func (suite *NotifierSuite) TestSMTPShouldWarnOnDisabledSTARTTLS() {
+	suite.config.SMTP.Host = examplecom
+	suite.config.SMTP.DisableStartTLS = true
+
+	ValidateNotifier(&suite.config, suite.validator)
+
+	suite.Require().Len(suite.validator.Warnings(), 1)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().EqualError(suite.validator.Warnings()[0], "notifier: smtp: option 'disable_starttls' is enabled: opportunistic STARTTLS is explicitly disabled which means all emails will be sent insecurely over plaintext and this setting is only necessary for non-compliant SMTP servers which advertise they support STARTTLS when they actually don't support STARTTLS")
+}
+
 func (suite *NotifierSuite) TestSMTPShouldEnsureHostAndPortAreProvided() {
 	suite.config.FileSystem = nil
 	ValidateNotifier(&suite.config, suite.validator)
diff --git a/internal/configuration/validator/session.go b/internal/configuration/validator/session.go
index 67517089f..f39ab517b 100644
--- a/internal/configuration/validator/session.go
+++ b/internal/configuration/validator/session.go
@@ -58,6 +58,18 @@ func validateRedisCommon(config *schema.SessionConfiguration, validator *schema.
 	if config.Secret == "" {
 		validator.Push(fmt.Errorf(errFmtSessionSecretRequired, "redis"))
 	}
+
+	if config.Redis.TLS != nil {
+		configDefaultTLS := &schema.TLSConfig{
+			ServerName:     config.Redis.Host,
+			MinimumVersion: schema.DefaultRedisConfiguration.TLS.MinimumVersion,
+			MaximumVersion: schema.DefaultRedisConfiguration.TLS.MaximumVersion,
+		}
+
+		if err := ValidateTLSConfig(config.Redis.TLS, configDefaultTLS); err != nil {
+			validator.Push(fmt.Errorf(errFmtSessionRedisTLSConfigInvalid, err))
+		}
+	}
 }
 
 func validateRedis(config *schema.SessionConfiguration, validator *schema.StructValidator) {
diff --git a/internal/configuration/validator/session_test.go b/internal/configuration/validator/session_test.go
index 605a65fa9..6e4336e47 100644
--- a/internal/configuration/validator/session_test.go
+++ b/internal/configuration/validator/session_test.go
@@ -1,6 +1,7 @@
 package validator
 
 import (
+	"crypto/tls"
 	"fmt"
 	"testing"
 
@@ -13,7 +14,7 @@ import (
 func newDefaultSessionConfig() schema.SessionConfiguration {
 	config := schema.SessionConfiguration{}
 	config.Secret = testJWTSecret
-	config.Domain = "example.com"
+	config.Domain = examplecom
 
 	return config
 }
@@ -354,6 +355,67 @@ func TestShouldRaiseErrorsWhenRedisHostNotSet(t *testing.T) {
 	assert.EqualError(t, errors[0], errFmtSessionRedisHostRequired)
 }
 
+func TestShouldSetDefaultRedisTLSOptions(t *testing.T) {
+	validator := schema.NewStructValidator()
+	config := newDefaultSessionConfig()
+
+	config.Redis = &schema.RedisSessionConfiguration{
+		Host: "redis.local",
+		Port: 6379,
+		TLS:  &schema.TLSConfig{},
+	}
+
+	ValidateSession(&config, validator)
+
+	assert.Len(t, validator.Warnings(), 0)
+	assert.Len(t, validator.Errors(), 0)
+
+	assert.Equal(t, uint16(tls.VersionTLS12), config.Redis.TLS.MinimumVersion.Value)
+	assert.Equal(t, uint16(0), config.Redis.TLS.MaximumVersion.Value)
+	assert.Equal(t, "redis.local", config.Redis.TLS.ServerName)
+}
+
+func TestShouldRaiseErrorOnBadRedisTLSOptionsSSL30(t *testing.T) {
+	validator := schema.NewStructValidator()
+	config := newDefaultSessionConfig()
+
+	config.Redis = &schema.RedisSessionConfiguration{
+		Host: "redis.local",
+		Port: 6379,
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionSSL30}, //nolint:staticcheck
+		},
+	}
+
+	ValidateSession(&config, validator)
+
+	assert.Len(t, validator.Warnings(), 0)
+	require.Len(t, validator.Errors(), 1)
+
+	assert.EqualError(t, validator.Errors()[0], "session: redis: tls: option 'minimum_version' is invalid: minimum version is TLS1.0 but SSL3.0 was configured")
+}
+
+func TestShouldRaiseErrorOnBadRedisTLSOptionsMinVerGreaterThanMax(t *testing.T) {
+	validator := schema.NewStructValidator()
+	config := newDefaultSessionConfig()
+
+	config.Redis = &schema.RedisSessionConfiguration{
+		Host: "redis.local",
+		Port: 6379,
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS13},
+			MaximumVersion: schema.TLSVersion{Value: tls.VersionTLS10},
+		},
+	}
+
+	ValidateSession(&config, validator)
+
+	assert.Len(t, validator.Warnings(), 0)
+	require.Len(t, validator.Errors(), 1)
+
+	assert.EqualError(t, validator.Errors()[0], "session: redis: tls: option combination of 'minimum_version' and 'maximum_version' is invalid: minimum version TLS1.3 is greater than the maximum version TLS1.0")
+}
+
 func TestShouldRaiseErrorWhenDomainNotSet(t *testing.T) {
 	validator := schema.NewStructValidator()
 	config := newDefaultSessionConfig()
diff --git a/internal/configuration/validator/shared.go b/internal/configuration/validator/shared.go
new file mode 100644
index 000000000..804945553
--- /dev/null
+++ b/internal/configuration/validator/shared.go
@@ -0,0 +1,42 @@
+package validator
+
+import (
+	"crypto/tls"
+	"errors"
+	"fmt"
+
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
+)
+
+// ValidateTLSConfig sets the default values and validates a schema.TLSConfig.
+func ValidateTLSConfig(config *schema.TLSConfig, configDefault *schema.TLSConfig) (err error) {
+	if config == nil {
+		return
+	}
+
+	if config.ServerName == "" {
+		config.ServerName = configDefault.ServerName
+	}
+
+	if config.MinimumVersion.Value == 0 {
+		config.MinimumVersion.Value = configDefault.MinimumVersion.Value
+	}
+
+	if config.MaximumVersion.Value == 0 {
+		config.MaximumVersion.Value = configDefault.MaximumVersion.Value
+	}
+
+	if config.MinimumVersion.MinVersion() < tls.VersionTLS10 {
+		return errors.New("option 'minimum_version' is invalid: minimum version is TLS1.0 but SSL3.0 was configured")
+	}
+
+	if config.MinimumVersion.MinVersion() > config.MaximumVersion.MaxVersion() {
+		return fmt.Errorf("option combination of 'minimum_version' and 'maximum_version' is invalid: minimum version %s is greater than the maximum version %s", config.MinimumVersion.String(), config.MaximumVersion.String())
+	}
+
+	if (config.CertificateChain.HasCertificates() || config.PrivateKey != nil) && !config.CertificateChain.EqualKey(config.PrivateKey) {
+		return errors.New("option 'certificates' is invalid: provided certificate is not the public key for the private key provided")
+	}
+
+	return nil
+}
diff --git a/internal/notification/smtp_notifier.go b/internal/notification/smtp_notifier.go
index cd7fa501d..0b4d70786 100644
--- a/internal/notification/smtp_notifier.go
+++ b/internal/notification/smtp_notifier.go
@@ -27,7 +27,7 @@ import (
 func NewSMTPNotifier(config *schema.SMTPNotifierConfiguration, certPool *x509.CertPool, templateProvider *templates.Provider) *SMTPNotifier {
 	notifier := &SMTPNotifier{
 		config:    config,
-		tlsConfig: utils.NewTLSConfig(config.TLS, tls.VersionTLS12, certPool),
+		tlsConfig: utils.NewTLSConfig(config.TLS, certPool),
 		log:       logging.Logger(),
 		templates: templateProvider,
 	}
diff --git a/internal/notification/smtp_notifier_test.go b/internal/notification/smtp_notifier_test.go
index efa7f8c09..0ecc3f36d 100644
--- a/internal/notification/smtp_notifier_test.go
+++ b/internal/notification/smtp_notifier_test.go
@@ -18,7 +18,7 @@ func TestShouldConfigureSMTPNotifierWithTLS11(t *testing.T) {
 			Port: 25,
 			TLS: &schema.TLSConfig{
 				ServerName:     "smtp.example.com",
-				MinimumVersion: "TLS1.1",
+				MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS11},
 			},
 		},
 	}
diff --git a/internal/session/provider_config.go b/internal/session/provider_config.go
index 0a1ba6e11..c9e694a28 100644
--- a/internal/session/provider_config.go
+++ b/internal/session/provider_config.go
@@ -75,7 +75,7 @@ func NewProviderConfig(config schema.SessionConfiguration, certPool *x509.CertPo
 		var tlsConfig *tls.Config
 
 		if config.Redis.TLS != nil {
-			tlsConfig = utils.NewTLSConfig(config.Redis.TLS, tls.VersionTLS12, certPool)
+			tlsConfig = utils.NewTLSConfig(config.Redis.TLS, certPool)
 		}
 
 		if config.Redis.HighAvailability != nil && config.Redis.HighAvailability.SentinelName != "" {
diff --git a/internal/session/provider_config_test.go b/internal/session/provider_config_test.go
index 3f7b79dac..23b131c71 100644
--- a/internal/session/provider_config_test.go
+++ b/internal/session/provider_config_test.go
@@ -42,7 +42,7 @@ func TestShouldCreateRedisSessionProviderTLS(t *testing.T) {
 		Password: "pass",
 		TLS: &schema.TLSConfig{
 			ServerName:     "redis.fqdn.example.com",
-			MinimumVersion: "TLS1.3",
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS13},
 		},
 	}
 	providerConfig := NewProviderConfig(configuration, nil)
diff --git a/internal/utils/crypto.go b/internal/utils/crypto.go
index bf7ea44ff..e8408cee6 100644
--- a/internal/utils/crypto.go
+++ b/internal/utils/crypto.go
@@ -235,17 +235,26 @@ func IsX509PrivateKey(i any) bool {
 }
 
 // NewTLSConfig generates a tls.Config from a schema.TLSConfig and a x509.CertPool.
-func NewTLSConfig(config *schema.TLSConfig, defaultMinVersion uint16, certPool *x509.CertPool) (tlsConfig *tls.Config) {
-	minVersion, err := TLSStringToTLSConfigVersion(config.MinimumVersion)
-	if err != nil {
-		minVersion = defaultMinVersion
+func NewTLSConfig(config *schema.TLSConfig, certPool *x509.CertPool) (tlsConfig *tls.Config) {
+	var certificates []tls.Certificate
+
+	if config.CertificateChain.HasCertificates() && config.PrivateKey != nil {
+		certificates = []tls.Certificate{
+			{
+				Certificate: config.CertificateChain.CertificatesRaw(),
+				Leaf:        config.CertificateChain.Leaf(),
+				PrivateKey:  config.PrivateKey,
+			},
+		}
 	}
 
 	return &tls.Config{
 		ServerName:         config.ServerName,
 		InsecureSkipVerify: config.SkipVerify, //nolint:gosec // Informed choice by user. Off by default.
-		MinVersion:         minVersion,
+		MinVersion:         config.MinimumVersion.MinVersion(),
+		MaxVersion:         config.MinimumVersion.MaxVersion(),
 		RootCAs:            certPool,
+		Certificates:       certificates,
 	}
 }
 
@@ -290,22 +299,6 @@ func NewX509CertPool(directory string) (certPool *x509.CertPool, warnings []erro
 	return certPool, warnings, errors
 }
 
-// TLSStringToTLSConfigVersion returns a go crypto/tls version for a tls.Config based on string input.
-func TLSStringToTLSConfigVersion(input string) (version uint16, err error) {
-	switch strings.ToUpper(input) {
-	case "TLS1.3", TLS13:
-		return tls.VersionTLS13, nil
-	case "TLS1.2", TLS12:
-		return tls.VersionTLS12, nil
-	case "TLS1.1", TLS11:
-		return tls.VersionTLS11, nil
-	case "TLS1.0", TLS10:
-		return tls.VersionTLS10, nil
-	}
-
-	return 0, ErrTLSVersionNotSupported
-}
-
 // WriteCertificateBytesToPEM writes a certificate/csr to a file in the PEM format.
 func WriteCertificateBytesToPEM(cert []byte, path string, csr bool) (err error) {
 	out, err := os.OpenFile(path, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)
diff --git a/internal/utils/crypto_test.go b/internal/utils/crypto_test.go
index 9d4adb9f5..dcc065721 100644
--- a/internal/utils/crypto_test.go
+++ b/internal/utils/crypto_test.go
@@ -5,7 +5,6 @@ import (
 	"crypto/ed25519"
 	"crypto/elliptic"
 	"crypto/rsa"
-	"crypto/tls"
 	"crypto/x509"
 	"runtime"
 	"strings"
@@ -14,75 +13,8 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
-
-	"github.com/authelia/authelia/v4/internal/configuration/schema"
 )
 
-func TestShouldSetupDefaultTLSMinVersionOnErr(t *testing.T) {
-	schemaTLSConfig := &schema.TLSConfig{
-		MinimumVersion: "NotAVersion",
-		ServerName:     "golang.org",
-		SkipVerify:     true,
-	}
-
-	tlsConfig := NewTLSConfig(schemaTLSConfig, tls.VersionTLS12, nil)
-
-	assert.Equal(t, uint16(tls.VersionTLS12), tlsConfig.MinVersion)
-	assert.Equal(t, "golang.org", tlsConfig.ServerName)
-	assert.True(t, tlsConfig.InsecureSkipVerify)
-}
-
-func TestShouldReturnCorrectTLSVersions(t *testing.T) {
-	tls13 := uint16(tls.VersionTLS13)
-	tls12 := uint16(tls.VersionTLS12)
-	tls11 := uint16(tls.VersionTLS11)
-	tls10 := uint16(tls.VersionTLS10)
-
-	version, err := TLSStringToTLSConfigVersion(TLS13)
-	assert.Equal(t, tls13, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion("TLS" + TLS13)
-	assert.Equal(t, tls13, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion(TLS12)
-	assert.Equal(t, tls12, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion("TLS" + TLS12)
-	assert.Equal(t, tls12, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion(TLS11)
-	assert.Equal(t, tls11, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion("TLS" + TLS11)
-	assert.Equal(t, tls11, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion(TLS10)
-	assert.Equal(t, tls10, version)
-	assert.NoError(t, err)
-
-	version, err = TLSStringToTLSConfigVersion("TLS" + TLS10)
-	assert.Equal(t, tls10, version)
-	assert.NoError(t, err)
-}
-
-func TestShouldReturnZeroAndErrorOnInvalidTLSVersions(t *testing.T) {
-	version, err := TLSStringToTLSConfigVersion("TLS1.4")
-	assert.Error(t, err)
-	assert.Equal(t, uint16(0), version)
-	assert.EqualError(t, err, "supplied tls version isn't supported")
-
-	version, err = TLSStringToTLSConfigVersion("SSL3.0")
-	assert.Error(t, err)
-	assert.Equal(t, uint16(0), version)
-	assert.EqualError(t, err, "supplied tls version isn't supported")
-}
-
 func TestShouldReturnErrWhenX509DirectoryNotExist(t *testing.T) {
 	pool, warnings, errors := NewX509CertPool("/tmp/asdfzyxabc123/not/a/real/dir")
 	assert.NotNil(t, pool)

From 5c981e7603b534711a730075d51623e0ff18c6be Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 21 Oct 2022 20:17:30 +1100
Subject: [PATCH 168/263] feat(configuration): comment unnecessary template
 lines (#4222)

This adjusts the default configuration to mostly include commented configuration.
---
 config.template.yml                        | 745 +++++++++++++--------
 internal/configuration/config.template.yml | 745 +++++++++++++--------
 internal/configuration/schema/const.go     |   6 +-
 3 files changed, 901 insertions(+), 595 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index 2572b06fe..93133344e 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -218,13 +218,13 @@ webauthn:
 ##
 ## Parameters used to contact the Duo API. Those are generated when you protect an application of type
 ## "Partner Auth API" in the management panel.
-duo_api:
-  disable: false
-  hostname: api-123456789.example.com
-  integration_key: ABCDEF
+# duo_api:
+  # disable: false
+  # hostname: api-123456789.example.com
+  # integration_key: ABCDEF
   ## Secret can also be set using a secret: https://www.authelia.com/c/secrets
-  secret_key: 1234567890abcdefghifjkl
-  enable_self_enrollment: false
+  # secret_key: 1234567890abcdefghifjkl
+  # enable_self_enrollment: false
 
 ##
 ## NTP Configuration
@@ -281,7 +281,7 @@ authentication_backend:
   ## This is the recommended Authentication Provider in production
   ## because it allows Authelia to offload the stateful operations
   ## onto the LDAP service.
-  ldap:
+  # ldap:
     ## The LDAP implementation, this affects elements like the attribute utilised for resetting a password.
     ## Acceptable options are as follows:
     ## - 'activedirectory' - For Microsoft Active Directory.
@@ -291,109 +291,109 @@ authentication_backend:
     ## Depending on the option here certain other values in this section have a default value, notably all of the
     ## attribute mappings have a default value that this config overrides, you can read more about these default values
     ## at https://www.authelia.com/c/ldap#defaults
-    implementation: custom
+    # implementation: custom
 
     ## The url to the ldap server. Format: <scheme>://<address>[:<port>].
     ## Scheme can be ldap or ldaps in the format (port optional).
-    url: ldap://127.0.0.1
+    # url: ldap://127.0.0.1
 
     ## The dial timeout for LDAP.
-    timeout: 5s
+    # timeout: 5s
 
     ## Use StartTLS with the LDAP connection.
-    start_tls: false
+    # start_tls: false
 
-    tls:
+    # tls:
       ## Server Name for certificate validation (in case it's not set correctly in the URL).
       # server_name: ldap.example.com
 
       ## Skip verifying the server certificate (to allow a self-signed certificate).
       ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
       ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
-      skip_verify: false
+      # skip_verify: false
 
       ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
-      minimum_version: TLS1.2
+      # minimum_version: TLS1.2
 
       ## Maximum TLS version for either Secure LDAP or LDAP StartTLS.
-      maximum_version: TLS1.3
+      # maximum_version: TLS1.3
 
       ## The certificate chain used with the private_key if the server requests TLS Client Authentication
       ## i.e. Mutual TLS.
       # certificate_chain: |
-      #   -----BEGIN CERTIFICATE-----
-      #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
-      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-      #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
-      #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
-      #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
-      #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
-      #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
-      #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
-      #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
-      #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
-      #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
-      #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
-      #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
-      #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
-      #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
-      #   -----END CERTIFICATE-----
-      #   -----BEGIN CERTIFICATE-----
-      #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
-      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-      #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
-      #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
-      #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
-      #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
-      #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
-      #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
-      #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-      #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
-      #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
-      #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
-      #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
-      #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
-      #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
-      #   qocikt3WAdU^invalid DO NOT USE=
-      #   -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
 
       ## The private key used with the certificate_chain if the server requests TLS Client Authentication
       ## i.e. Mutual TLS.
       # private_key: |
-      #    -----BEGIN RSA PRIVATE KEY-----
-      #   MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
-      #   T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
-      #   KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
-      #   +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
-      #   LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
-      #   txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
-      #   aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
-      #   Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
-      #   ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
-      #   LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
-      #   jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
-      #   BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
-      #   Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
-      #   R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
-      #   tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
-      #   ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
-      #   lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
-      #   6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
-      #   fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
-      #   9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
-      #   jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
-      #   rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
-      #   n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
-      #   yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
-      #   27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
-      #   DO NOT USE==
-      #   -----END RSA PRIVATE KEY-----
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
     ## The distinguished name of the container searched for objects in the directory information tree.
     ## See also: additional_users_dn, additional_groups_dn.
-    base_dn: dc=example,dc=com
+    # base_dn: dc=example,dc=com
 
     ## The attribute holding the username of the user. This attribute is used to populate the username in the session
     ## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
@@ -407,7 +407,7 @@ authentication_backend:
 
     ## The additional_users_dn is prefixed to base_dn and delimited by a comma when searching for users.
     ## i.e. with this set to OU=Users and base_dn set to DC=a,DC=com; OU=Users,DC=a,DC=com is searched for users.
-    additional_users_dn: ou=users
+    # additional_users_dn: ou=users
 
     ## The users filter used in search queries to find the user profile based on input filled in login form.
     ## Various placeholders are available in the user filter which you can read about in the documentation which can
@@ -421,11 +421,11 @@ authentication_backend:
     ##
     ## To allow sign in both with username and email, one can use a filter like
     ## (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
-    users_filter: (&({username_attribute}={input})(objectClass=person))
+    # users_filter: (&({username_attribute}={input})(objectClass=person))
 
     ## The additional_groups_dn is prefixed to base_dn and delimited by a comma when searching for groups.
     ## i.e. with this set to OU=Groups and base_dn set to DC=a,DC=com; OU=Groups,DC=a,DC=com is searched for groups.
-    additional_groups_dn: ou=groups
+    # additional_groups_dn: ou=groups
 
     ## The groups filter used in search queries to find the groups based on relevant authenticated user.
     ## Various placeholders are available in the groups filter which you can read about in the documentation which can
@@ -433,7 +433,7 @@ authentication_backend:
     ##
     ## If your groups use the `groupOfUniqueNames` structure use this instead:
     ##    (&(uniqueMember={dn})(objectClass=groupOfUniqueNames))
-    groups_filter: (&(member={dn})(objectClass=groupOfNames))
+    # groups_filter: (&(member={dn})(objectClass=groupOfNames))
 
     ## The attribute holding the name of the group.
     # group_name_attribute: cn
@@ -447,12 +447,12 @@ authentication_backend:
 
     ## Follow referrals returned by the server.
     ## This is especially useful for environments where read-only servers exist. Only implemented for write operations.
-    permit_referrals: false
+    # permit_referrals: false
 
     ## The username and password of the admin user.
-    user: cn=admin,dc=example,dc=com
+    # user: cn=admin,dc=example,dc=com
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-    password: password
+    # password: password
 
   ##
   ## File (Authentication Provider)
@@ -467,37 +467,37 @@ authentication_backend:
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
   # file:
-  #   path: /config/users_database.yml
-  #   watch: false
-  #   search:
-  #     email: false
-  #     case_insensitive: false
-  #   password:
-  #     algorithm: argon2
-  #     argon2:
-  #       variant: argon2id
-  #       iterations: 3
-  #       memory: 65536
-  #       parallelism: 4
-  #       key_length: 32
-  #       salt_length: 16
-  #     scrypt:
-  #       iterations: 16
-  #       block_size: 8
-  #       parallelism: 1
-  #       key_length: 32
-  #       salt_length: 16
-  #     pbkdf2:
-  #       variant: sha512
-  #       iterations: 310000
-  #       salt_length: 16
-  #     sha2crypt:
-  #       variant: sha512
-  #       iterations: 50000
-  #       salt_length: 16
-  #     bcrypt:
-  #       variant: standard
-  #       cost: 12
+    # path: /config/users_database.yml
+    # watch: false
+    # search:
+      # email: false
+      # case_insensitive: false
+    # password:
+      # algorithm: argon2
+      # argon2:
+        # variant: argon2id
+        # iterations: 3
+        # memory: 65536
+        # parallelism: 4
+        # key_length: 32
+        # salt_length: 16
+      # scrypt:
+        # iterations: 16
+        # block_size: 8
+        # parallelism: 1
+        # key_length: 32
+        # salt_length: 16
+      # pbkdf2:
+        # variant: sha512
+        # iterations: 310000
+        # salt_length: 16
+      # sha2crypt:
+        # variant: sha512
+        # iterations: 50000
+        # salt_length: 16
+      # bcrypt:
+        # variant: standard
+        # cost: 12
 
 
 ##
@@ -566,18 +566,18 @@ access_control:
   ## resource if there is no policy to be applied to the user.
   default_policy: deny
 
-  networks:
-    - name: internal
-      networks:
-        - 10.10.0.0/16
-        - 192.168.2.0/24
-    - name: VPN
-      networks: 10.9.0.0/16
+  # networks:
+    # - name: internal
+    #   networks:
+        # - 10.10.0.0/16
+        # - 192.168.2.0/24
+    # - name: VPN
+    #   networks: 10.9.0.0/16
 
-  rules:
+  # rules:
     ## Rules applied to everyone
-    - domain: 'public.example.com'
-      policy: bypass
+    # - domain: 'public.example.com'
+    #   policy: bypass
 
     ## Domain Regex examples. Generally we recommend just using a standard domain.
     # - domain_regex: '^(?P<User>\w+)\.example\.com$'
@@ -585,70 +585,70 @@ access_control:
     # - domain_regex: '^(?P<Group>\w+)\.example\.com$'
     #   policy: one_factor
     # - domain_regex:
-    #    - '^appgroup-.*\.example\.com$'
-    #    - '^appgroup2-.*\.example\.com$'
+      #  - '^appgroup-.*\.example\.com$'
+      #  - '^appgroup2-.*\.example\.com$'
     #   policy: one_factor
     # - domain_regex: '^.*\.example\.com$'
     #   policy: two_factor
 
-    - domain: 'secure.example.com'
-      policy: one_factor
-      ## Network based rule, if not provided any network matches.
-      networks:
-        - internal
-        - VPN
-        - 192.168.1.0/24
-        - 10.0.0.1
+    # - domain: 'secure.example.com'
+    #   policy: one_factor
+    ## Network based rule, if not provided any network matches.
+    #   networks:
+        # - internal
+        # - VPN
+        # - 192.168.1.0/24
+        # - 10.0.0.1
 
-    - domain:
-        - 'secure.example.com'
-        - 'private.example.com'
-      policy: two_factor
+    # - domain:
+        # - 'secure.example.com'
+        # - 'private.example.com'
+    #   policy: two_factor
 
-    - domain: 'singlefactor.example.com'
-      policy: one_factor
+    # - domain: 'singlefactor.example.com'
+    #   policy: one_factor
 
     ## Rules applied to 'admins' group
-    - domain: 'mx2.mail.example.com'
-      subject: 'group:admins'
-      policy: deny
+    # - domain: 'mx2.mail.example.com'
+    #   subject: 'group:admins'
+    #   policy: deny
 
-    - domain: '*.example.com'
-      subject:
-        - 'group:admins'
-        - 'group:moderators'
-      policy: two_factor
+    # - domain: '*.example.com'
+    #   subject:
+        # - 'group:admins'
+        # - 'group:moderators'
+    #   policy: two_factor
 
     ## Rules applied to 'dev' group
-    - domain: 'dev.example.com'
-      resources:
-        - '^/groups/dev/.*$'
-      subject: 'group:dev'
-      policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+        # - '^/groups/dev/.*$'
+    #   subject: 'group:dev'
+    #   policy: two_factor
 
     ## Rules applied to user 'john'
-    - domain: 'dev.example.com'
-      resources:
-        - '^/users/john/.*$'
-      subject: 'user:john'
-      policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+        # - '^/users/john/.*$'
+    #   subject: 'user:john'
+    #   policy: two_factor
 
     ## Rules applied to user 'harry'
-    - domain: 'dev.example.com'
-      resources:
-        - '^/users/harry/.*$'
-      subject: 'user:harry'
-      policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+        # - '^/users/harry/.*$'
+    #   subject: 'user:harry'
+    #   policy: two_factor
 
     ## Rules applied to user 'bob'
-    - domain: '*.mail.example.com'
-      subject: 'user:bob'
-      policy: two_factor
-    - domain: 'dev.example.com'
-      resources:
-        - '^/users/bob/.*$'
-      subject: 'user:bob'
-      policy: two_factor
+    # - domain: '*.mail.example.com'
+    #   subject: 'user:bob'
+    #   policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+    #     - '^/users/bob/.*$'
+    #   subject: 'user:bob'
+    #   policy: two_factor
 
 ##
 ## Session Provider Configuration
@@ -694,9 +694,9 @@ session:
   ##
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
-  redis:
-    host: 127.0.0.1
-    port: 6379
+  # redis:
+    # host: 127.0.0.1
+    # port: 6379
     ## Use a unix socket instead
     # host: /var/run/redis/redis.sock
 
@@ -704,16 +704,16 @@ session:
     # username: authelia
 
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-    password: authelia
+    # password: authelia
 
     ## This is the Redis DB Index https://redis.io/commands/select (sometimes referred to as database number, DB, etc).
-    database_index: 0
+    # database_index: 0
 
     ## The maximum number of concurrent active connections to Redis.
-    maximum_active_connections: 8
+    # maximum_active_connections: 8
 
     ## The target number of idle connections to have open ready for work. Useful when opening connections is slow.
-    minimum_idle_connections: 0
+    # minimum_idle_connections: 0
 
     ## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
     # tls:
@@ -728,6 +728,82 @@ session:
       ## Minimum TLS version for the connection.
       # minimum_version: TLS1.2
 
+      ## Maximum TLS version for the connection.
+      # maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
+
     ## The Redis HA configuration options.
     ## This provides specific options to Redis Sentinel, sentinel_name must be defined (Master Name).
     # high_availability:
@@ -744,10 +820,10 @@ session:
       ## If the host in the above section is defined, it will be combined with this list to connect to sentinel.
       ## For high availability to be used you must have either defined; the host above or at least one node below.
       # nodes:
-      #   - host: sentinel-node1
-      #     port: 6379
-      #   - host: sentinel-node2
-      #     port: 6379
+        # - host: sentinel-node1
+        #   port: 6379
+        # - host: sentinel-node2
+        #   port: 6379
 
       ## Choose the host with the lowest latency.
       # route_by_latency: false
@@ -777,7 +853,7 @@ regulation:
 ## Storage Provider Configuration
 ##
 ## The available providers are: `local`, `mysql`, `postgres`. You must use one and only one of these providers.
-storage:
+# storage:
   ## The encryption key that is used to encrypt sensitive information in the database. Must be a string with a minimum
   ## length of 20. Please see the docs if you configure this with an undesirable key and need to change it.
   # encryption_key: you_must_generate_a_random_string_of_more_than_twenty_chars_and_configure_this
@@ -791,37 +867,38 @@ storage:
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
   # local:
-  #   path: /config/db.sqlite3
+    ## Path to the SQLite3 Database.
+    # path: /config/db.sqlite3
 
   ##
   ## MySQL / MariaDB (Storage Provider)
   ##
-  mysql:
-    host: 127.0.0.1
-    port: 3306
-    database: authelia
-    username: authelia
+  # mysql:
+    # host: 127.0.0.1
+    # port: 3306
+    # database: authelia
+    # username: authelia
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-    password: mypassword
-    timeout: 5s
+    # password: mypassword
+    # timeout: 5s
 
   ##
   ## PostgreSQL (Storage Provider)
   ##
   # postgres:
-  #   host: 127.0.0.1
-  #   port: 5432
-  #   database: authelia
-  #   schema: public
-  #   username: authelia
-  #   ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-  #   password: mypassword
-  #   timeout: 5s
-  #   ssl:
-  #     mode: disable
-  #     root_certificate: disable
-  #     certificate: disable
-  #     key: disable
+    # host: 127.0.0.1
+    # port: 5432
+    # database: authelia
+    # schema: public
+    # username: authelia
+    ## Password can also be set using a secret: https://www.authelia.com/c/secrets
+    # password: mypassword
+    # timeout: 5s
+    # ssl:
+      # mode: disable
+      # root_certificate: disable
+      # certificate: disable
+      # key: disable
 
 ##
 ## Notification Provider
@@ -838,7 +915,7 @@ notifier:
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
   # filesystem:
-  #   filename: /config/notification.txt
+    # filename: /config/notification.txt
 
   ##
   ## SMTP (Notification Provider)
@@ -850,55 +927,131 @@ notifier:
   ##        (only works for unauthenticated connections)
   ##   - validate the SMTP server x509 certificate during the TLS handshake against the hosts trusted certificates
   ##     (configure in tls section)
-  smtp:
+  # smtp:
     ## The SMTP host to connect to.
-    host: 127.0.0.1
+    # host: 127.0.0.1
 
     ## The port to connect to the SMTP host on.
-    port: 1025
+    # port: 1025
 
     ## The connection timeout.
-    timeout: 5s
+    # timeout: 5s
 
     ## The username used for SMTP authentication.
-    username: test
+    # username: test
 
     ## The password used for SMTP authentication.
     ## Can also be set using a secret: https://www.authelia.com/c/secrets
-    password: password
+    # password: password
 
     ## The sender is used to is used for the MAIL FROM command and the FROM header.
     ## If this is not defined and the username is an email, we use the username as this value. This can either be just
     ## an email address or the RFC5322 'Name <email address>' format.
-    sender: "Authelia <admin@example.com>"
+    # sender: "Authelia <admin@example.com>"
 
     ## HELO/EHLO Identifier. Some SMTP Servers may reject the default of localhost.
-    identifier: localhost
+    # identifier: localhost
 
     ## Subject configuration of the emails sent. {title} is replaced by the text from the notifier.
-    subject: "[Authelia] {title}"
+    # subject: "[Authelia] {title}"
 
     ## This address is used during the startup check to verify the email configuration is correct.
     ## It's not important what it is except if your email server only allows local delivery.
-    startup_check_address: test@authelia.com
+    # startup_check_address: test@authelia.com
 
     ## By default we require some form of TLS. This disables this check though is not advised.
-    disable_require_tls: false
+    # disable_require_tls: false
 
     ## Disables sending HTML formatted emails.
-    disable_html_emails: false
+    # disable_html_emails: false
 
-    tls:
+    # tls:
       ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
       # server_name: smtp.example.com
 
       ## Skip verifying the server certificate (to allow a self-signed certificate).
       ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
       ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
-      skip_verify: false
+      # skip_verify: false
 
       ## Minimum TLS version for either StartTLS or SMTPS.
-      minimum_version: TLS1.2
+      # minimum_version: TLS1.2
+
+      ## Maximum TLS version for either StartTLS or SMTPS.
+      # maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
 ##
 ## Identity Providers
@@ -919,75 +1072,75 @@ notifier:
     ## issuer_private_key to sign JWT's. All certificates in the chain must be within the validity period, and every
     ## certificate included must be signed by the certificate immediately after it if provided.
     # issuer_certificate_chain: |
-    #   -----BEGIN CERTIFICATE-----
-    #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
-    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-    #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
-    #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
-    #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
-    #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
-    #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
-    #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
-    #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
-    #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
-    #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
-    #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
-    #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
-    #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
-    #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
-    #   -----END CERTIFICATE-----
-    #   -----BEGIN CERTIFICATE-----
-    #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
-    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-    #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
-    #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
-    #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
-    #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
-    #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
-    #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
-    #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-    #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
-    #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
-    #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
-    #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
-    #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
-    #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
-    #   qocikt3WAdU^invalid DO NOT USE=
-    #   -----END CERTIFICATE-----
+      # -----BEGIN CERTIFICATE-----
+      # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+      # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+      # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+      # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+      # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+      # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+      # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+      # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+      # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+      # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+      # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+      # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+      # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+      # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+      # -----END CERTIFICATE-----
+      # -----BEGIN CERTIFICATE-----
+      # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+      # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+      # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+      # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+      # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+      # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+      # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+      # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+      # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+      # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+      # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+      # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+      # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+      # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+      # qocikt3WAdU^invalid DO NOT USE=
+      # -----END CERTIFICATE-----
 
     ## The issuer_private_key is used to sign the JWT forged by OpenID Connect.
     ## Issuer Private Key can also be set using a secret: https://www.authelia.com/c/secrets
     # issuer_private_key: |
-    #   -----BEGIN RSA PRIVATE KEY-----
-    #  MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
-    #  T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
-    #  KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
-    #  +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
-    #  LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
-    #  txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
-    #  aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
-    #  Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
-    #  ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
-    #  LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
-    #  jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
-    #  BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
-    #  Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
-    #  R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
-    #  tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
-    #  ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
-    #  lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
-    #  6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
-    #  fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
-    #  9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
-    #  jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
-    #  rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
-    #  n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
-    #  yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
-    #  27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
-    #  DO NOT USE==
-    #  -----END RSA PRIVATE KEY-----
+      # -----BEGIN RSA PRIVATE KEY-----
+      # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+      # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+      # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+      # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+      # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+      # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+      # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+      # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+      # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+      # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+      # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+      # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+      # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+      # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+      # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+      # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+      # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+      # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+      # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+      # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+      # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+      # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+      # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+      # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+      # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+      # DO NOT USE==
+      # -----END RSA PRIVATE KEY-----
 
     ## The lifespans configure the expiration for these token types.
     # access_token_lifespan: 1h
@@ -1009,17 +1162,17 @@ notifier:
     # cors:
       ## List of endpoints in addition to the metadata endpoints to permit cross-origin requests on.
       # endpoints:
-      #    - authorization
-      #    - token
-      #    - revocation
-      #    - introspection
-      #    - userinfo
+        #  - authorization
+        #  - token
+        #  - revocation
+        #  - introspection
+        #  - userinfo
 
       ## List of allowed origins.
       ## Any origin with https is permitted unless this option is configured or the
       ## allowed_origins_from_client_redirect_uris option is enabled.
       # allowed_origins:
-      #   - https://example.com
+        # - https://example.com
 
       ## Automatically adds the origin portion of all redirect URI's on all clients to the list of allowed_origins,
       ## provided they have the scheme http or https and do not have the hostname of localhost.
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 2572b06fe..93133344e 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -218,13 +218,13 @@ webauthn:
 ##
 ## Parameters used to contact the Duo API. Those are generated when you protect an application of type
 ## "Partner Auth API" in the management panel.
-duo_api:
-  disable: false
-  hostname: api-123456789.example.com
-  integration_key: ABCDEF
+# duo_api:
+  # disable: false
+  # hostname: api-123456789.example.com
+  # integration_key: ABCDEF
   ## Secret can also be set using a secret: https://www.authelia.com/c/secrets
-  secret_key: 1234567890abcdefghifjkl
-  enable_self_enrollment: false
+  # secret_key: 1234567890abcdefghifjkl
+  # enable_self_enrollment: false
 
 ##
 ## NTP Configuration
@@ -281,7 +281,7 @@ authentication_backend:
   ## This is the recommended Authentication Provider in production
   ## because it allows Authelia to offload the stateful operations
   ## onto the LDAP service.
-  ldap:
+  # ldap:
     ## The LDAP implementation, this affects elements like the attribute utilised for resetting a password.
     ## Acceptable options are as follows:
     ## - 'activedirectory' - For Microsoft Active Directory.
@@ -291,109 +291,109 @@ authentication_backend:
     ## Depending on the option here certain other values in this section have a default value, notably all of the
     ## attribute mappings have a default value that this config overrides, you can read more about these default values
     ## at https://www.authelia.com/c/ldap#defaults
-    implementation: custom
+    # implementation: custom
 
     ## The url to the ldap server. Format: <scheme>://<address>[:<port>].
     ## Scheme can be ldap or ldaps in the format (port optional).
-    url: ldap://127.0.0.1
+    # url: ldap://127.0.0.1
 
     ## The dial timeout for LDAP.
-    timeout: 5s
+    # timeout: 5s
 
     ## Use StartTLS with the LDAP connection.
-    start_tls: false
+    # start_tls: false
 
-    tls:
+    # tls:
       ## Server Name for certificate validation (in case it's not set correctly in the URL).
       # server_name: ldap.example.com
 
       ## Skip verifying the server certificate (to allow a self-signed certificate).
       ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
       ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
-      skip_verify: false
+      # skip_verify: false
 
       ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
-      minimum_version: TLS1.2
+      # minimum_version: TLS1.2
 
       ## Maximum TLS version for either Secure LDAP or LDAP StartTLS.
-      maximum_version: TLS1.3
+      # maximum_version: TLS1.3
 
       ## The certificate chain used with the private_key if the server requests TLS Client Authentication
       ## i.e. Mutual TLS.
       # certificate_chain: |
-      #   -----BEGIN CERTIFICATE-----
-      #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
-      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-      #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
-      #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
-      #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
-      #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
-      #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
-      #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
-      #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
-      #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
-      #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
-      #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
-      #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
-      #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
-      #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
-      #   -----END CERTIFICATE-----
-      #   -----BEGIN CERTIFICATE-----
-      #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
-      #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-      #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-      #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
-      #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
-      #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
-      #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
-      #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
-      #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
-      #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-      #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
-      #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
-      #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
-      #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
-      #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
-      #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
-      #   qocikt3WAdU^invalid DO NOT USE=
-      #   -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
 
       ## The private key used with the certificate_chain if the server requests TLS Client Authentication
       ## i.e. Mutual TLS.
       # private_key: |
-      #    -----BEGIN RSA PRIVATE KEY-----
-      #   MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
-      #   T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
-      #   KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
-      #   +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
-      #   LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
-      #   txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
-      #   aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
-      #   Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
-      #   ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
-      #   LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
-      #   jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
-      #   BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
-      #   Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
-      #   R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
-      #   tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
-      #   ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
-      #   lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
-      #   6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
-      #   fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
-      #   9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
-      #   jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
-      #   rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
-      #   n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
-      #   yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
-      #   27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
-      #   DO NOT USE==
-      #   -----END RSA PRIVATE KEY-----
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
     ## The distinguished name of the container searched for objects in the directory information tree.
     ## See also: additional_users_dn, additional_groups_dn.
-    base_dn: dc=example,dc=com
+    # base_dn: dc=example,dc=com
 
     ## The attribute holding the username of the user. This attribute is used to populate the username in the session
     ## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
@@ -407,7 +407,7 @@ authentication_backend:
 
     ## The additional_users_dn is prefixed to base_dn and delimited by a comma when searching for users.
     ## i.e. with this set to OU=Users and base_dn set to DC=a,DC=com; OU=Users,DC=a,DC=com is searched for users.
-    additional_users_dn: ou=users
+    # additional_users_dn: ou=users
 
     ## The users filter used in search queries to find the user profile based on input filled in login form.
     ## Various placeholders are available in the user filter which you can read about in the documentation which can
@@ -421,11 +421,11 @@ authentication_backend:
     ##
     ## To allow sign in both with username and email, one can use a filter like
     ## (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
-    users_filter: (&({username_attribute}={input})(objectClass=person))
+    # users_filter: (&({username_attribute}={input})(objectClass=person))
 
     ## The additional_groups_dn is prefixed to base_dn and delimited by a comma when searching for groups.
     ## i.e. with this set to OU=Groups and base_dn set to DC=a,DC=com; OU=Groups,DC=a,DC=com is searched for groups.
-    additional_groups_dn: ou=groups
+    # additional_groups_dn: ou=groups
 
     ## The groups filter used in search queries to find the groups based on relevant authenticated user.
     ## Various placeholders are available in the groups filter which you can read about in the documentation which can
@@ -433,7 +433,7 @@ authentication_backend:
     ##
     ## If your groups use the `groupOfUniqueNames` structure use this instead:
     ##    (&(uniqueMember={dn})(objectClass=groupOfUniqueNames))
-    groups_filter: (&(member={dn})(objectClass=groupOfNames))
+    # groups_filter: (&(member={dn})(objectClass=groupOfNames))
 
     ## The attribute holding the name of the group.
     # group_name_attribute: cn
@@ -447,12 +447,12 @@ authentication_backend:
 
     ## Follow referrals returned by the server.
     ## This is especially useful for environments where read-only servers exist. Only implemented for write operations.
-    permit_referrals: false
+    # permit_referrals: false
 
     ## The username and password of the admin user.
-    user: cn=admin,dc=example,dc=com
+    # user: cn=admin,dc=example,dc=com
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-    password: password
+    # password: password
 
   ##
   ## File (Authentication Provider)
@@ -467,37 +467,37 @@ authentication_backend:
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
   # file:
-  #   path: /config/users_database.yml
-  #   watch: false
-  #   search:
-  #     email: false
-  #     case_insensitive: false
-  #   password:
-  #     algorithm: argon2
-  #     argon2:
-  #       variant: argon2id
-  #       iterations: 3
-  #       memory: 65536
-  #       parallelism: 4
-  #       key_length: 32
-  #       salt_length: 16
-  #     scrypt:
-  #       iterations: 16
-  #       block_size: 8
-  #       parallelism: 1
-  #       key_length: 32
-  #       salt_length: 16
-  #     pbkdf2:
-  #       variant: sha512
-  #       iterations: 310000
-  #       salt_length: 16
-  #     sha2crypt:
-  #       variant: sha512
-  #       iterations: 50000
-  #       salt_length: 16
-  #     bcrypt:
-  #       variant: standard
-  #       cost: 12
+    # path: /config/users_database.yml
+    # watch: false
+    # search:
+      # email: false
+      # case_insensitive: false
+    # password:
+      # algorithm: argon2
+      # argon2:
+        # variant: argon2id
+        # iterations: 3
+        # memory: 65536
+        # parallelism: 4
+        # key_length: 32
+        # salt_length: 16
+      # scrypt:
+        # iterations: 16
+        # block_size: 8
+        # parallelism: 1
+        # key_length: 32
+        # salt_length: 16
+      # pbkdf2:
+        # variant: sha512
+        # iterations: 310000
+        # salt_length: 16
+      # sha2crypt:
+        # variant: sha512
+        # iterations: 50000
+        # salt_length: 16
+      # bcrypt:
+        # variant: standard
+        # cost: 12
 
 
 ##
@@ -566,18 +566,18 @@ access_control:
   ## resource if there is no policy to be applied to the user.
   default_policy: deny
 
-  networks:
-    - name: internal
-      networks:
-        - 10.10.0.0/16
-        - 192.168.2.0/24
-    - name: VPN
-      networks: 10.9.0.0/16
+  # networks:
+    # - name: internal
+    #   networks:
+        # - 10.10.0.0/16
+        # - 192.168.2.0/24
+    # - name: VPN
+    #   networks: 10.9.0.0/16
 
-  rules:
+  # rules:
     ## Rules applied to everyone
-    - domain: 'public.example.com'
-      policy: bypass
+    # - domain: 'public.example.com'
+    #   policy: bypass
 
     ## Domain Regex examples. Generally we recommend just using a standard domain.
     # - domain_regex: '^(?P<User>\w+)\.example\.com$'
@@ -585,70 +585,70 @@ access_control:
     # - domain_regex: '^(?P<Group>\w+)\.example\.com$'
     #   policy: one_factor
     # - domain_regex:
-    #    - '^appgroup-.*\.example\.com$'
-    #    - '^appgroup2-.*\.example\.com$'
+      #  - '^appgroup-.*\.example\.com$'
+      #  - '^appgroup2-.*\.example\.com$'
     #   policy: one_factor
     # - domain_regex: '^.*\.example\.com$'
     #   policy: two_factor
 
-    - domain: 'secure.example.com'
-      policy: one_factor
-      ## Network based rule, if not provided any network matches.
-      networks:
-        - internal
-        - VPN
-        - 192.168.1.0/24
-        - 10.0.0.1
+    # - domain: 'secure.example.com'
+    #   policy: one_factor
+    ## Network based rule, if not provided any network matches.
+    #   networks:
+        # - internal
+        # - VPN
+        # - 192.168.1.0/24
+        # - 10.0.0.1
 
-    - domain:
-        - 'secure.example.com'
-        - 'private.example.com'
-      policy: two_factor
+    # - domain:
+        # - 'secure.example.com'
+        # - 'private.example.com'
+    #   policy: two_factor
 
-    - domain: 'singlefactor.example.com'
-      policy: one_factor
+    # - domain: 'singlefactor.example.com'
+    #   policy: one_factor
 
     ## Rules applied to 'admins' group
-    - domain: 'mx2.mail.example.com'
-      subject: 'group:admins'
-      policy: deny
+    # - domain: 'mx2.mail.example.com'
+    #   subject: 'group:admins'
+    #   policy: deny
 
-    - domain: '*.example.com'
-      subject:
-        - 'group:admins'
-        - 'group:moderators'
-      policy: two_factor
+    # - domain: '*.example.com'
+    #   subject:
+        # - 'group:admins'
+        # - 'group:moderators'
+    #   policy: two_factor
 
     ## Rules applied to 'dev' group
-    - domain: 'dev.example.com'
-      resources:
-        - '^/groups/dev/.*$'
-      subject: 'group:dev'
-      policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+        # - '^/groups/dev/.*$'
+    #   subject: 'group:dev'
+    #   policy: two_factor
 
     ## Rules applied to user 'john'
-    - domain: 'dev.example.com'
-      resources:
-        - '^/users/john/.*$'
-      subject: 'user:john'
-      policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+        # - '^/users/john/.*$'
+    #   subject: 'user:john'
+    #   policy: two_factor
 
     ## Rules applied to user 'harry'
-    - domain: 'dev.example.com'
-      resources:
-        - '^/users/harry/.*$'
-      subject: 'user:harry'
-      policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+        # - '^/users/harry/.*$'
+    #   subject: 'user:harry'
+    #   policy: two_factor
 
     ## Rules applied to user 'bob'
-    - domain: '*.mail.example.com'
-      subject: 'user:bob'
-      policy: two_factor
-    - domain: 'dev.example.com'
-      resources:
-        - '^/users/bob/.*$'
-      subject: 'user:bob'
-      policy: two_factor
+    # - domain: '*.mail.example.com'
+    #   subject: 'user:bob'
+    #   policy: two_factor
+    # - domain: 'dev.example.com'
+    #   resources:
+    #     - '^/users/bob/.*$'
+    #   subject: 'user:bob'
+    #   policy: two_factor
 
 ##
 ## Session Provider Configuration
@@ -694,9 +694,9 @@ session:
   ##
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
-  redis:
-    host: 127.0.0.1
-    port: 6379
+  # redis:
+    # host: 127.0.0.1
+    # port: 6379
     ## Use a unix socket instead
     # host: /var/run/redis/redis.sock
 
@@ -704,16 +704,16 @@ session:
     # username: authelia
 
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-    password: authelia
+    # password: authelia
 
     ## This is the Redis DB Index https://redis.io/commands/select (sometimes referred to as database number, DB, etc).
-    database_index: 0
+    # database_index: 0
 
     ## The maximum number of concurrent active connections to Redis.
-    maximum_active_connections: 8
+    # maximum_active_connections: 8
 
     ## The target number of idle connections to have open ready for work. Useful when opening connections is slow.
-    minimum_idle_connections: 0
+    # minimum_idle_connections: 0
 
     ## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
     # tls:
@@ -728,6 +728,82 @@ session:
       ## Minimum TLS version for the connection.
       # minimum_version: TLS1.2
 
+      ## Maximum TLS version for the connection.
+      # maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
+
     ## The Redis HA configuration options.
     ## This provides specific options to Redis Sentinel, sentinel_name must be defined (Master Name).
     # high_availability:
@@ -744,10 +820,10 @@ session:
       ## If the host in the above section is defined, it will be combined with this list to connect to sentinel.
       ## For high availability to be used you must have either defined; the host above or at least one node below.
       # nodes:
-      #   - host: sentinel-node1
-      #     port: 6379
-      #   - host: sentinel-node2
-      #     port: 6379
+        # - host: sentinel-node1
+        #   port: 6379
+        # - host: sentinel-node2
+        #   port: 6379
 
       ## Choose the host with the lowest latency.
       # route_by_latency: false
@@ -777,7 +853,7 @@ regulation:
 ## Storage Provider Configuration
 ##
 ## The available providers are: `local`, `mysql`, `postgres`. You must use one and only one of these providers.
-storage:
+# storage:
   ## The encryption key that is used to encrypt sensitive information in the database. Must be a string with a minimum
   ## length of 20. Please see the docs if you configure this with an undesirable key and need to change it.
   # encryption_key: you_must_generate_a_random_string_of_more_than_twenty_chars_and_configure_this
@@ -791,37 +867,38 @@ storage:
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
   # local:
-  #   path: /config/db.sqlite3
+    ## Path to the SQLite3 Database.
+    # path: /config/db.sqlite3
 
   ##
   ## MySQL / MariaDB (Storage Provider)
   ##
-  mysql:
-    host: 127.0.0.1
-    port: 3306
-    database: authelia
-    username: authelia
+  # mysql:
+    # host: 127.0.0.1
+    # port: 3306
+    # database: authelia
+    # username: authelia
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-    password: mypassword
-    timeout: 5s
+    # password: mypassword
+    # timeout: 5s
 
   ##
   ## PostgreSQL (Storage Provider)
   ##
   # postgres:
-  #   host: 127.0.0.1
-  #   port: 5432
-  #   database: authelia
-  #   schema: public
-  #   username: authelia
-  #   ## Password can also be set using a secret: https://www.authelia.com/c/secrets
-  #   password: mypassword
-  #   timeout: 5s
-  #   ssl:
-  #     mode: disable
-  #     root_certificate: disable
-  #     certificate: disable
-  #     key: disable
+    # host: 127.0.0.1
+    # port: 5432
+    # database: authelia
+    # schema: public
+    # username: authelia
+    ## Password can also be set using a secret: https://www.authelia.com/c/secrets
+    # password: mypassword
+    # timeout: 5s
+    # ssl:
+      # mode: disable
+      # root_certificate: disable
+      # certificate: disable
+      # key: disable
 
 ##
 ## Notification Provider
@@ -838,7 +915,7 @@ notifier:
   ## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness
   ##
   # filesystem:
-  #   filename: /config/notification.txt
+    # filename: /config/notification.txt
 
   ##
   ## SMTP (Notification Provider)
@@ -850,55 +927,131 @@ notifier:
   ##        (only works for unauthenticated connections)
   ##   - validate the SMTP server x509 certificate during the TLS handshake against the hosts trusted certificates
   ##     (configure in tls section)
-  smtp:
+  # smtp:
     ## The SMTP host to connect to.
-    host: 127.0.0.1
+    # host: 127.0.0.1
 
     ## The port to connect to the SMTP host on.
-    port: 1025
+    # port: 1025
 
     ## The connection timeout.
-    timeout: 5s
+    # timeout: 5s
 
     ## The username used for SMTP authentication.
-    username: test
+    # username: test
 
     ## The password used for SMTP authentication.
     ## Can also be set using a secret: https://www.authelia.com/c/secrets
-    password: password
+    # password: password
 
     ## The sender is used to is used for the MAIL FROM command and the FROM header.
     ## If this is not defined and the username is an email, we use the username as this value. This can either be just
     ## an email address or the RFC5322 'Name <email address>' format.
-    sender: "Authelia <admin@example.com>"
+    # sender: "Authelia <admin@example.com>"
 
     ## HELO/EHLO Identifier. Some SMTP Servers may reject the default of localhost.
-    identifier: localhost
+    # identifier: localhost
 
     ## Subject configuration of the emails sent. {title} is replaced by the text from the notifier.
-    subject: "[Authelia] {title}"
+    # subject: "[Authelia] {title}"
 
     ## This address is used during the startup check to verify the email configuration is correct.
     ## It's not important what it is except if your email server only allows local delivery.
-    startup_check_address: test@authelia.com
+    # startup_check_address: test@authelia.com
 
     ## By default we require some form of TLS. This disables this check though is not advised.
-    disable_require_tls: false
+    # disable_require_tls: false
 
     ## Disables sending HTML formatted emails.
-    disable_html_emails: false
+    # disable_html_emails: false
 
-    tls:
+    # tls:
       ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
       # server_name: smtp.example.com
 
       ## Skip verifying the server certificate (to allow a self-signed certificate).
       ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
       ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
-      skip_verify: false
+      # skip_verify: false
 
       ## Minimum TLS version for either StartTLS or SMTPS.
-      minimum_version: TLS1.2
+      # minimum_version: TLS1.2
+
+      ## Maximum TLS version for either StartTLS or SMTPS.
+      # maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
 ##
 ## Identity Providers
@@ -919,75 +1072,75 @@ notifier:
     ## issuer_private_key to sign JWT's. All certificates in the chain must be within the validity period, and every
     ## certificate included must be signed by the certificate immediately after it if provided.
     # issuer_certificate_chain: |
-    #   -----BEGIN CERTIFICATE-----
-    #   MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
-    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-    #   ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
-    #   /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
-    #   LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
-    #   91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
-    #   kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
-    #   Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
-    #   AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
-    #   AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
-    #   /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
-    #   lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
-    #   wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
-    #   OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
-    #   ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
-    #   -----END CERTIFICATE-----
-    #   -----BEGIN CERTIFICATE-----
-    #   MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
-    #   EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-    #   MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-    #   ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
-    #   zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
-    #   5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
-    #   kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
-    #   ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
-    #   Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
-    #   AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-    #   Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
-    #   kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
-    #   71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
-    #   HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
-    #   D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
-    #   2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
-    #   qocikt3WAdU^invalid DO NOT USE=
-    #   -----END CERTIFICATE-----
+      # -----BEGIN CERTIFICATE-----
+      # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+      # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+      # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+      # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+      # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+      # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+      # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+      # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+      # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+      # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+      # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+      # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+      # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+      # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+      # -----END CERTIFICATE-----
+      # -----BEGIN CERTIFICATE-----
+      # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+      # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+      # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+      # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+      # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+      # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+      # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+      # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+      # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+      # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+      # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+      # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+      # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+      # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+      # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+      # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+      # qocikt3WAdU^invalid DO NOT USE=
+      # -----END CERTIFICATE-----
 
     ## The issuer_private_key is used to sign the JWT forged by OpenID Connect.
     ## Issuer Private Key can also be set using a secret: https://www.authelia.com/c/secrets
     # issuer_private_key: |
-    #   -----BEGIN RSA PRIVATE KEY-----
-    #  MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
-    #  T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
-    #  KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
-    #  +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
-    #  LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
-    #  txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
-    #  aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
-    #  Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
-    #  ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
-    #  LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
-    #  jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
-    #  BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
-    #  Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
-    #  R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
-    #  tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
-    #  ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
-    #  lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
-    #  6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
-    #  fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
-    #  9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
-    #  jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
-    #  rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
-    #  n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
-    #  yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
-    #  27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
-    #  DO NOT USE==
-    #  -----END RSA PRIVATE KEY-----
+      # -----BEGIN RSA PRIVATE KEY-----
+      # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+      # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+      # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+      # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+      # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+      # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+      # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+      # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+      # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+      # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+      # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+      # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+      # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+      # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+      # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+      # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+      # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+      # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+      # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+      # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+      # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+      # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+      # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+      # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+      # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+      # DO NOT USE==
+      # -----END RSA PRIVATE KEY-----
 
     ## The lifespans configure the expiration for these token types.
     # access_token_lifespan: 1h
@@ -1009,17 +1162,17 @@ notifier:
     # cors:
       ## List of endpoints in addition to the metadata endpoints to permit cross-origin requests on.
       # endpoints:
-      #    - authorization
-      #    - token
-      #    - revocation
-      #    - introspection
-      #    - userinfo
+        #  - authorization
+        #  - token
+        #  - revocation
+        #  - introspection
+        #  - userinfo
 
       ## List of allowed origins.
       ## Any origin with https is permitted unless this option is configured or the
       ## allowed_origins_from_client_redirect_uris option is enabled.
       # allowed_origins:
-      #   - https://example.com
+        # - https://example.com
 
       ## Automatically adds the origin portion of all redirect URI's on all clients to the list of allowed_origins,
       ## provided they have the scheme http or https and do not have the hostname of localhost.
diff --git a/internal/configuration/schema/const.go b/internal/configuration/schema/const.go
index c59b8ffc5..3015c1527 100644
--- a/internal/configuration/schema/const.go
+++ b/internal/configuration/schema/const.go
@@ -48,13 +48,13 @@ var ErrTLSVersionNotSupported = errors.New("supplied tls version isn't supported
 const ProfileRefreshDisabled = "disable"
 
 const (
-	// ProfileRefreshAlways represents a Value for refresh_interval that's the same as 0ms.
+	// ProfileRefreshAlways represents a value for refresh_interval that's the same as 0ms.
 	ProfileRefreshAlways = "always"
 
-	// RefreshIntervalDefault represents the default Value of refresh_interval.
+	// RefreshIntervalDefault represents the default value of refresh_interval.
 	RefreshIntervalDefault = "5m"
 
-	// RefreshIntervalAlways represents the duration Value refresh interval should have if set to always.
+	// RefreshIntervalAlways represents the duration value refresh interval should have if set to always.
 	RefreshIntervalAlways = 0 * time.Millisecond
 )
 

From 4611636b2b42f282411a940daee7e8cd068f1d4a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 21 Oct 2022 20:34:44 +1100
Subject: [PATCH 169/263] build(deps): update node.js to v19 (#4203)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 Dockerfile.coverage                                          | 2 +-
 Dockerfile.dev                                               | 2 +-
 internal/suites/example/compose/authelia/Dockerfile.frontend | 2 +-
 internal/suites/example/compose/duo-api/Dockerfile           | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Dockerfile.coverage b/Dockerfile.coverage
index e418f6b7f..787f239b1 100644
--- a/Dockerfile.coverage
+++ b/Dockerfile.coverage
@@ -1,7 +1,7 @@
 # ========================================
 # ===== Build image for the frontend =====
 # ========================================
-FROM node:18-alpine AS builder-frontend
+FROM node:19-alpine AS builder-frontend
 
 WORKDIR /node/src/app
 
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 1d9871577..38c3ba1af 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -1,7 +1,7 @@
 # ========================================
 # ===== Build image for the frontend =====
 # ========================================
-FROM node:18-alpine AS builder-frontend
+FROM node:19-alpine AS builder-frontend
 
 WORKDIR /node/src/app
 
diff --git a/internal/suites/example/compose/authelia/Dockerfile.frontend b/internal/suites/example/compose/authelia/Dockerfile.frontend
index 45cc41c5e..ef85b9b38 100644
--- a/internal/suites/example/compose/authelia/Dockerfile.frontend
+++ b/internal/suites/example/compose/authelia/Dockerfile.frontend
@@ -1,4 +1,4 @@
-FROM node:18-alpine
+FROM node:19-alpine
 
 ARG USER_ID
 ARG GROUP_ID
diff --git a/internal/suites/example/compose/duo-api/Dockerfile b/internal/suites/example/compose/duo-api/Dockerfile
index 8f6237e49..c46a28a78 100644
--- a/internal/suites/example/compose/duo-api/Dockerfile
+++ b/internal/suites/example/compose/duo-api/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18-alpine
+FROM node:19-alpine
 
 WORKDIR /usr/app/src
 

From 2aff4bdbc383a0c00c17a25786ec94b816eb679f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 21 Oct 2022 20:49:53 +1100
Subject: [PATCH 170/263] build(deps): update module github.com/knadh/koanf to
 v1.4.4 (#4215)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 5 ++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/go.mod b/go.mod
index 47bcca9de..3529a8b71 100644
--- a/go.mod
+++ b/go.mod
@@ -21,7 +21,7 @@ require (
 	github.com/google/uuid v1.3.0
 	github.com/jackc/pgx/v4 v4.17.2
 	github.com/jmoiron/sqlx v1.3.5
-	github.com/knadh/koanf v1.4.3
+	github.com/knadh/koanf v1.4.4
 	github.com/mattn/go-sqlite3 v2.0.3+incompatible
 	github.com/mitchellh/mapstructure v1.5.0
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
diff --git a/go.sum b/go.sum
index e22c068d4..4402cdf9f 100644
--- a/go.sum
+++ b/go.sum
@@ -879,8 +879,8 @@ github.com/klauspost/compress v1.15.0 h1:xqfchp4whNFxn5A4XFyyYtitiWI8Hy5EW59jEwc
 github.com/klauspost/compress v1.15.0/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
 github.com/knadh/koanf v0.14.1-0.20201201075439-e0853799f9ec/go.mod h1:H5mEFsTeWizwFXHKtsITL5ipsLTuAMQoGuQpp+1JL9U=
 github.com/knadh/koanf v1.2.2/go.mod h1:xpPTwMhsA/aaQLAilyCCqfpEiY1gpa160AiCuWHJUjY=
-github.com/knadh/koanf v1.4.3 h1:rSJcSH5LSFhvzBRsAYfT3k7eLP0I4UxeZqjtAatk+wc=
-github.com/knadh/koanf v1.4.3/go.mod h1:5FAkuykKXZvLqhAbP4peWgM5CTcZmn7L1d27k/a+kfg=
+github.com/knadh/koanf v1.4.4 h1:d2jY5nCCeoaiqvEKSBW9rEc93EfNy/XWgWsSB3j7JEA=
+github.com/knadh/koanf v1.4.4/go.mod h1:Hgyjp4y8v44hpZtPzs7JZfRAW5AhN7KfZcwv1RYggDs=
 github.com/konsorten/go-windows-terminal-sequences v0.0.0-20180402223658-b729f2633dfe/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
@@ -2018,7 +2018,6 @@ gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C
 gopkg.in/yaml.v3 v3.0.0-20200605160147-a5ece683394c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gorm.io/driver/postgres v1.0.8/go.mod h1:4eOzrI1MUfm6ObJU/UcmbXyiHSs8jSwH95G5P5dxcAg=

From 8e99cfd22fe715f04be3a4708fc2dce95d0463fa Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 22 Oct 2022 10:51:24 +1100
Subject: [PATCH 171/263] build(deps): update dependency eslint to v8.26.0
 (#4229)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 176 +++++++++++++++++++++++----------------------
 2 files changed, 92 insertions(+), 86 deletions(-)

diff --git a/web/package.json b/web/package.json
index 25eb0b47e..34af6b344 100644
--- a/web/package.json
+++ b/web/package.json
@@ -158,7 +158,7 @@
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.12",
     "esbuild-jest": "0.5.0",
-    "eslint": "8.25.0",
+    "eslint": "8.26.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-config-react-app": "7.0.1",
     "eslint-formatter-rdjson": "1.0.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 4818c6e9b..33aa097af 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -29,7 +29,7 @@ specifiers:
   classnames: 2.3.2
   esbuild: 0.15.12
   esbuild-jest: 0.5.0
-  eslint: 8.25.0
+  eslint: 8.26.0
   eslint-config-prettier: 8.5.0
   eslint-config-react-app: 7.0.1
   eslint-formatter-rdjson: 1.0.5
@@ -103,21 +103,21 @@ devDependencies:
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
-  '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+  '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
+  '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
   '@vitejs/plugin-react': 2.1.0_vite@3.1.8
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
-  eslint: 8.25.0
-  eslint-config-prettier: 8.5.0_eslint@8.25.0
-  eslint-config-react-app: 7.0.1_jwd25u6kfcoup66mu5jx6ufsj4
+  eslint: 8.26.0
+  eslint-config-prettier: 8.5.0_eslint@8.26.0
+  eslint-config-react-app: 7.0.1_js7zyunwfzuon2jiu4xunbs6rq
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.2_fyln4uq2tv75svthy6prqvt6lm
-  eslint-plugin-import: 2.26.0_5r7jgxw73ljm6f74emcsxw3vua
-  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
-  eslint-plugin-prettier: 4.2.1_hvbqyfstm4urdpm6ffpwfka4e4
-  eslint-plugin-react: 7.31.10_eslint@8.25.0
-  eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
+  eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
+  eslint-plugin-import: 2.26.0_66dbmam7x4jttzjgt7jagac5je
+  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
+  eslint-plugin-prettier: 4.2.1_aniwkeyvlpmwkidetuytnokvcm
+  eslint-plugin-react: 7.31.10_eslint@8.26.0
+  eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
   jest: 29.2.1_@types+node@18.11.3
   jest-environment-jsdom: 29.2.1
@@ -127,7 +127,7 @@ devDependencies:
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
   vite: 3.1.8
-  vite-plugin-eslint: 1.8.1_eslint@8.25.0+vite@3.1.8
+  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.1.8
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.2_vite@3.1.8
   vite-tsconfig-paths: 3.5.2_vite@3.1.8
@@ -203,7 +203,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/eslint-parser/7.18.2_vj4r73z62tfyv4m5ogwqh4y7je:
+  /@babel/eslint-parser/7.18.2_wxy5unzcco5r76nfxbzwrmhnca:
     resolution: {integrity: sha512-oFQYkE8SuH14+uR51JVAmdqwKYXGRjEXx7s+WiagVjqQ+HPE+nnwyF2qlVG8evUsUHmPcA+6YXMEDbIhEyQc5A==}
     engines: {node: ^10.13.0 || ^12.13.0 || >=14.0.0}
     peerDependencies:
@@ -214,7 +214,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      eslint: 8.25.0
+      eslint: 8.26.0
       eslint-scope: 5.1.1
       eslint-visitor-keys: 2.1.0
       semver: 6.3.0
@@ -2462,8 +2462,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@humanwhocodes/config-array/0.10.5:
-    resolution: {integrity: sha512-XVVDtp+dVvRxMoxSiSfasYaG02VEe1qH5cKgMQJWhol6HwzbcqoCMJi8dAGoYAO57jhUyhI6cWuRiTcRaDaYug==}
+  /@humanwhocodes/config-array/0.11.6:
+    resolution: {integrity: sha512-jJr+hPTJYKyDILJfhNSHsjiwXYf26Flsz8DvNndOsHs5pwSnpGUEy8yzF0JYhCEvTDdV2vuOK5tt8BVhwO5/hg==}
     engines: {node: '>=10.10.0'}
     dependencies:
       '@humanwhocodes/object-schema': 1.2.1
@@ -3616,7 +3616,7 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.40.1_ukgdydjtebaxmxfqp5v5ulh64y:
+  /@typescript-eslint/eslint-plugin/5.40.1_c4zyna56jjjrggqkyejnaxjxfu:
     resolution: {integrity: sha512-FsWboKkWdytGiXT5O1/R9j37YgcjO8MKHSUmWnIEjVaz0krHkplPnYi7mwdb+5+cs0toFNQb0HIrN7zONdIEWg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3627,12 +3627,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
       '@typescript-eslint/scope-manager': 5.40.1
-      '@typescript-eslint/type-utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
-      '@typescript-eslint/utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/type-utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
       debug: 4.3.4
-      eslint: 8.25.0
+      eslint: 8.26.0
       ignore: 5.2.0
       regexpp: 3.2.0
       semver: 7.3.7
@@ -3642,20 +3642,20 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/experimental-utils/5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q:
+  /@typescript-eslint/experimental-utils/5.30.6_wyqvi574yv7oiwfeinomdzmc3m:
     resolution: {integrity: sha512-bqvT+0L8IjtW7MCrMgm9oVNxs4g7mESro1mm5c1/SNfTnHuFTf9OUX1WzVkTz75M9cp//UrTrSmGvK48NEKshQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
-      eslint: 8.25.0
+      '@typescript-eslint/utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
+      eslint: 8.26.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+  /@typescript-eslint/parser/5.40.1_wyqvi574yv7oiwfeinomdzmc3m:
     resolution: {integrity: sha512-IK6x55va5w4YvXd4b3VrXQPldV9vQTxi5ov+g4pMANsXPTXOcfjx08CRR1Dfrcc51syPtXHF5bgLlMHYFrvQtg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3669,7 +3669,7 @@ packages:
       '@typescript-eslint/types': 5.40.1
       '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
       debug: 4.3.4
-      eslint: 8.25.0
+      eslint: 8.26.0
       typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
@@ -3691,7 +3691,7 @@ packages:
       '@typescript-eslint/visitor-keys': 5.40.1
     dev: true
 
-  /@typescript-eslint/type-utils/5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+  /@typescript-eslint/type-utils/5.40.1_wyqvi574yv7oiwfeinomdzmc3m:
     resolution: {integrity: sha512-DLAs+AHQOe6n5LRraXiv27IYPhleF0ldEmx6yBqBgBLaNRKTkffhV1RPsjoJBhVup2zHxfaRtan8/YRBgYhU9Q==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3702,9 +3702,9 @@ packages:
         optional: true
     dependencies:
       '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
-      '@typescript-eslint/utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
       debug: 4.3.4
-      eslint: 8.25.0
+      eslint: 8.26.0
       tsutils: 3.21.0_typescript@4.8.4
       typescript: 4.8.4
     transitivePeerDependencies:
@@ -3763,7 +3763,7 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/utils/5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q:
+  /@typescript-eslint/utils/5.30.6_wyqvi574yv7oiwfeinomdzmc3m:
     resolution: {integrity: sha512-xFBLc/esUbLOJLk9jKv0E9gD/OH966M40aY9jJ8GiqpSkP2xOV908cokJqqhVd85WoIvHVHYXxSFE4cCSDzVvA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3773,15 +3773,15 @@ packages:
       '@typescript-eslint/scope-manager': 5.30.6
       '@typescript-eslint/types': 5.30.6
       '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.4
-      eslint: 8.25.0
+      eslint: 8.26.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.25.0
+      eslint-utils: 3.0.0_eslint@8.26.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+  /@typescript-eslint/utils/5.40.1_wyqvi574yv7oiwfeinomdzmc3m:
     resolution: {integrity: sha512-a2TAVScoX9fjryNrW6BZRnreDUszxqm9eQ9Esv8n5nXApMW0zeANUYlwh/DED04SC/ifuBvXgZpIK5xeJHQ3aw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3792,9 +3792,9 @@ packages:
       '@typescript-eslint/scope-manager': 5.40.1
       '@typescript-eslint/types': 5.40.1
       '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
-      eslint: 8.25.0
+      eslint: 8.26.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.25.0
+      eslint-utils: 3.0.0_eslint@8.26.0
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -5277,16 +5277,16 @@ packages:
       source-map: 0.6.1
     dev: true
 
-  /eslint-config-prettier/8.5.0_eslint@8.25.0:
+  /eslint-config-prettier/8.5.0_eslint@8.26.0:
     resolution: {integrity: sha512-obmWKLUNCnhtQRKc+tmnYuQl0pFU1ibYJQ5BGhTVB08bHe9wC8qUeG7c08dj9XX+AuPj1YSGSQIHl1pnDHZR0Q==}
     hasBin: true
     peerDependencies:
       eslint: '>=7.0.0'
     dependencies:
-      eslint: 8.25.0
+      eslint: 8.26.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_jwd25u6kfcoup66mu5jx6ufsj4:
+  /eslint-config-react-app/7.0.1_js7zyunwfzuon2jiu4xunbs6rq:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5297,20 +5297,20 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/eslint-parser': 7.18.2_vj4r73z62tfyv4m5ogwqh4y7je
+      '@babel/eslint-parser': 7.18.2_wxy5unzcco5r76nfxbzwrmhnca
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
-      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
+      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
-      eslint: 8.25.0
-      eslint-plugin-flowtype: 8.0.3_eslint@8.25.0
-      eslint-plugin-import: 2.26.0_5r7jgxw73ljm6f74emcsxw3vua
-      eslint-plugin-jest: 25.7.0_ktuq5bhtjfperqqn2aknj5bg6m
-      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.25.0
-      eslint-plugin-react: 7.31.10_eslint@8.25.0
-      eslint-plugin-react-hooks: 4.6.0_eslint@8.25.0
-      eslint-plugin-testing-library: 5.5.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      eslint: 8.26.0
+      eslint-plugin-flowtype: 8.0.3_eslint@8.26.0
+      eslint-plugin-import: 2.26.0_66dbmam7x4jttzjgt7jagac5je
+      eslint-plugin-jest: 25.7.0_himunudilofiyaga3ja2a2jxlq
+      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
+      eslint-plugin-react: 7.31.10_eslint@8.26.0
+      eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
+      eslint-plugin-testing-library: 5.5.1_wyqvi574yv7oiwfeinomdzmc3m
       typescript: 4.8.4
     transitivePeerDependencies:
       - '@babel/plugin-syntax-flow'
@@ -5334,7 +5334,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-import-resolver-typescript/3.5.2_fyln4uq2tv75svthy6prqvt6lm:
+  /eslint-import-resolver-typescript/3.5.2_mynvxvmq5qtyojffiqgev4x7mm:
     resolution: {integrity: sha512-zX4ebnnyXiykjhcBvKIf5TNvt8K7yX6bllTRZ14MiurKPjDpCAZujlszTdB8pcNXhZcOf+god4s9SjQa5GnytQ==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -5343,8 +5343,8 @@ packages:
     dependencies:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
-      eslint: 8.25.0
-      eslint-plugin-import: 2.26.0_5r7jgxw73ljm6f74emcsxw3vua
+      eslint: 8.26.0
+      eslint-plugin-import: 2.26.0_66dbmam7x4jttzjgt7jagac5je
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5372,16 +5372,16 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
-      eslint-import-resolver-typescript: 3.5.2_fyln4uq2tv75svthy6prqvt6lm
+      eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
       find-up: 2.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /eslint-plugin-flowtype/8.0.3_eslint@8.25.0:
+  /eslint-plugin-flowtype/8.0.3_eslint@8.26.0:
     resolution: {integrity: sha512-dX8l6qUL6O+fYPtpNRideCFSpmWOUVx5QcaGLVqe/vlDiBSe4vYljDWDETwnyFzpl7By/WVIu6rcrniCgH9BqQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5394,12 +5394,12 @@ packages:
       '@babel/plugin-transform-react-jsx':
         optional: true
     dependencies:
-      eslint: 8.25.0
+      eslint: 8.26.0
       lodash: 4.17.21
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_5r7jgxw73ljm6f74emcsxw3vua:
+  /eslint-plugin-import/2.26.0_66dbmam7x4jttzjgt7jagac5je:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5409,12 +5409,12 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
+      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
-      eslint: 8.25.0
+      eslint: 8.26.0
       eslint-import-resolver-node: 0.3.6
       eslint-module-utils: 2.7.3_abjtvfrqx6apykyqhkvez5sn74
       has: 1.0.3
@@ -5430,7 +5430,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_ktuq5bhtjfperqqn2aknj5bg6m:
+  /eslint-plugin-jest/25.7.0_himunudilofiyaga3ja2a2jxlq:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5443,16 +5443,16 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.40.1_ukgdydjtebaxmxfqp5v5ulh64y
-      '@typescript-eslint/experimental-utils': 5.30.6_z4bbprzjrhnsfa24uvmcbu7f5q
-      eslint: 8.25.0
+      '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
+      '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
+      eslint: 8.26.0
       jest: 29.2.1_@types+node@18.11.3
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.25.0:
+  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.26.0:
     resolution: {integrity: sha512-sXgFVNHiWffBq23uiS/JaP6eVR622DqwB4yTzKvGZGcPq6/yZ3WmOZfuBks/vHWo9GaFOqC2ZK4i6+C35knx7Q==}
     engines: {node: '>=4.0'}
     peerDependencies:
@@ -5466,7 +5466,7 @@ packages:
       axobject-query: 2.2.0
       damerau-levenshtein: 1.0.8
       emoji-regex: 9.2.2
-      eslint: 8.25.0
+      eslint: 8.26.0
       has: 1.0.3
       jsx-ast-utils: 3.3.2
       language-tags: 1.0.5
@@ -5474,7 +5474,7 @@ packages:
       semver: 6.3.0
     dev: true
 
-  /eslint-plugin-prettier/4.2.1_hvbqyfstm4urdpm6ffpwfka4e4:
+  /eslint-plugin-prettier/4.2.1_aniwkeyvlpmwkidetuytnokvcm:
     resolution: {integrity: sha512-f/0rXLXUt0oFYs8ra4w49wYZBG5GKZpAYsJSm6rnYL5uVDjd+zowwMwVZHnAjf4edNrKpCDYfXDgmRE/Ak7QyQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5485,22 +5485,22 @@ packages:
       eslint-config-prettier:
         optional: true
     dependencies:
-      eslint: 8.25.0
-      eslint-config-prettier: 8.5.0_eslint@8.25.0
+      eslint: 8.26.0
+      eslint-config-prettier: 8.5.0_eslint@8.26.0
       prettier: 2.7.1
       prettier-linter-helpers: 1.0.0
     dev: true
 
-  /eslint-plugin-react-hooks/4.6.0_eslint@8.25.0:
+  /eslint-plugin-react-hooks/4.6.0_eslint@8.26.0:
     resolution: {integrity: sha512-oFc7Itz9Qxh2x4gNHStv3BqJq54ExXmfC+a1NjAta66IAN87Wu0R/QArgIS9qKzX3dXKPI9H5crl9QchNMY9+g==}
     engines: {node: '>=10'}
     peerDependencies:
       eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0
     dependencies:
-      eslint: 8.25.0
+      eslint: 8.26.0
     dev: true
 
-  /eslint-plugin-react/7.31.10_eslint@8.25.0:
+  /eslint-plugin-react/7.31.10_eslint@8.26.0:
     resolution: {integrity: sha512-e4N/nc6AAlg4UKW/mXeYWd3R++qUano5/o+t+wnWxIf+bLsOaH3a4q74kX3nDjYym3VBN4HyO9nEn1GcAqgQOA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5509,7 +5509,7 @@ packages:
       array-includes: 3.1.5
       array.prototype.flatmap: 1.3.0
       doctrine: 2.1.0
-      eslint: 8.25.0
+      eslint: 8.26.0
       estraverse: 5.3.0
       jsx-ast-utils: 3.3.2
       minimatch: 3.1.2
@@ -5523,14 +5523,14 @@ packages:
       string.prototype.matchall: 4.0.7
     dev: true
 
-  /eslint-plugin-testing-library/5.5.1_z4bbprzjrhnsfa24uvmcbu7f5q:
+  /eslint-plugin-testing-library/5.5.1_wyqvi574yv7oiwfeinomdzmc3m:
     resolution: {integrity: sha512-plLEkkbAKBjPxsLj7x4jNapcHAg2ernkQlKKrN2I8NrQwPISZHyCUNvg5Hv3EDqOQReToQb5bnqXYbkijJPE/g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0, npm: '>=6'}
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.40.1_z4bbprzjrhnsfa24uvmcbu7f5q
-      eslint: 8.25.0
+      '@typescript-eslint/utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      eslint: 8.26.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5552,13 +5552,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.25.0:
+  /eslint-utils/3.0.0_eslint@8.26.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.25.0
+      eslint: 8.26.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -5572,14 +5572,15 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.25.0:
-    resolution: {integrity: sha512-DVlJOZ4Pn50zcKW5bYH7GQK/9MsoQG2d5eDH0ebEkE8PbgzTTmtt/VTH9GGJ4BfeZCpBLqFfvsjX35UacUL83A==}
+  /eslint/8.26.0:
+    resolution: {integrity: sha512-kzJkpaw1Bfwheq4VXUezFriD1GxszX6dUekM7Z3aC2o4hju+tsR/XyTC3RcoSD7jmy9VkPU3+N6YjVU2e96Oyg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
       '@eslint/eslintrc': 1.3.3
-      '@humanwhocodes/config-array': 0.10.5
+      '@humanwhocodes/config-array': 0.11.6
       '@humanwhocodes/module-importer': 1.0.1
+      '@nodelib/fs.walk': 1.2.8
       ajv: 6.12.6
       chalk: 4.1.2
       cross-spawn: 7.0.3
@@ -5587,7 +5588,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.25.0
+      eslint-utils: 3.0.0_eslint@8.26.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -5597,12 +5598,12 @@ packages:
       find-up: 5.0.0
       glob-parent: 6.0.2
       globals: 13.16.0
-      globby: 11.1.0
       grapheme-splitter: 1.0.4
       ignore: 5.2.0
       import-fresh: 3.3.0
       imurmurhash: 0.1.4
       is-glob: 4.0.3
+      is-path-inside: 3.0.3
       js-sdsl: 4.1.4
       js-yaml: 4.1.0
       json-stable-stringify-without-jsonify: 1.0.1
@@ -6482,6 +6483,11 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
+  /is-path-inside/3.0.3:
+    resolution: {integrity: sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==}
+    engines: {node: '>=8'}
+    dev: true
+
   /is-plain-obj/1.1.0:
     resolution: {integrity: sha512-yvkRyxmFKEOQ4pNXCmJG5AEQNlXJS5LaONXo5/cLdTZdWvsZ1ioJEonLGAosKlMWE8lwUy/bJzMjcw8az73+Fg==}
     engines: {node: '>=0.10.0'}
@@ -9254,7 +9260,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.25.0+vite@3.1.8:
+  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.1.8:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9262,7 +9268,7 @@ packages:
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@types/eslint': 8.4.5
-      eslint: 8.25.0
+      eslint: 8.26.0
       rollup: 2.78.0
       vite: 3.1.8
     dev: true

From 1d821a0d3a15b853e50c44aa786b846213f0355c Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 22 Oct 2022 15:25:12 +1100
Subject: [PATCH 172/263] fix(storage): mysql timestamp parsed incorrectly
 (#4230)

The timestamps in MySQL were not being parsed correctly. The driver treats all timestamp and datetime objects the same which is not correct.
---
 config.template.yml                           | 14 ++++----
 internal/configuration/config.template.yml    | 14 ++++----
 internal/storage/const.go                     |  4 +++
 .../storage/sql_provider_backend_mysql.go     | 33 ++++++++++++-------
 4 files changed, 40 insertions(+), 25 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index 93133344e..4531e0138 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -396,13 +396,13 @@ authentication_backend:
     # base_dn: dc=example,dc=com
 
     ## The attribute holding the username of the user. This attribute is used to populate the username in the session
-    ## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
-    ## Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually uses 'uid'. Beware that this
-    ## attribute holds the unique identifiers for the users binding the user and the configuration stored in database.
-    ## Therefore only single value attributes are allowed and the value must never be changed once attributed to a user
-    ## otherwise it would break the configuration for that user. Technically, non-unique attributes like 'mail' can also
-    ## be used but we don't recommend using them, we instead advise to use the attributes mentioned above
-    ## (sAMAccountName and uid) to follow https://www.ietf.org/rfc/rfc2307.txt.
+    ## information. For your information, Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually
+    ## uses 'uid'. Beware that this attribute holds the unique identifiers for the users binding the user and the
+    ## configuration stored in database. Therefore only single value attributes are allowed and the value must never be
+    ## changed once attributed to a user otherwise it would break the configuration for that user. Technically,
+    ## non-unique attributes like 'mail' can also be used but we don't recommend using them, we instead advise to use
+    ## a filter to perform alternative lookups and the attributes mentioned above (sAMAccountName and uid) to
+    ## follow https://www.ietf.org/rfc/rfc2307.txt.
     # username_attribute: uid
 
     ## The additional_users_dn is prefixed to base_dn and delimited by a comma when searching for users.
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 93133344e..4531e0138 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -396,13 +396,13 @@ authentication_backend:
     # base_dn: dc=example,dc=com
 
     ## The attribute holding the username of the user. This attribute is used to populate the username in the session
-    ## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
-    ## Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually uses 'uid'. Beware that this
-    ## attribute holds the unique identifiers for the users binding the user and the configuration stored in database.
-    ## Therefore only single value attributes are allowed and the value must never be changed once attributed to a user
-    ## otherwise it would break the configuration for that user. Technically, non-unique attributes like 'mail' can also
-    ## be used but we don't recommend using them, we instead advise to use the attributes mentioned above
-    ## (sAMAccountName and uid) to follow https://www.ietf.org/rfc/rfc2307.txt.
+    ## information. For your information, Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually
+    ## uses 'uid'. Beware that this attribute holds the unique identifiers for the users binding the user and the
+    ## configuration stored in database. Therefore only single value attributes are allowed and the value must never be
+    ## changed once attributed to a user otherwise it would break the configuration for that user. Technically,
+    ## non-unique attributes like 'mail' can also be used but we don't recommend using them, we instead advise to use
+    ## a filter to perform alternative lookups and the attributes mentioned above (sAMAccountName and uid) to
+    ## follow https://www.ietf.org/rfc/rfc2307.txt.
     # username_attribute: uid
 
     ## The additional_users_dn is prefixed to base_dn and delimited by a comma when searching for users.
diff --git a/internal/storage/const.go b/internal/storage/const.go
index dc249115f..825caae04 100644
--- a/internal/storage/const.go
+++ b/internal/storage/const.go
@@ -40,6 +40,10 @@ const (
 	OAuth2SessionTypeOpenIDConnect OAuth2SessionType = "openid connect"
 )
 
+const (
+	sqlNetworkTypeTCP = "tcp"
+)
+
 const (
 	encryptionNameCheck = "check"
 )
diff --git a/internal/storage/sql_provider_backend_mysql.go b/internal/storage/sql_provider_backend_mysql.go
index 6c313ee57..a336aeac9 100644
--- a/internal/storage/sql_provider_backend_mysql.go
+++ b/internal/storage/sql_provider_backend_mysql.go
@@ -4,6 +4,7 @@ import (
 	"fmt"
 	"time"
 
+	"github.com/go-sql-driver/mysql"
 	_ "github.com/go-sql-driver/mysql" // Load the MySQL Driver used in the connection string.
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
@@ -30,21 +31,31 @@ func NewMySQLProvider(config *schema.Configuration) (provider *MySQLProvider) {
 }
 
 func dataSourceNameMySQL(config schema.MySQLStorageConfiguration) (dataSourceName string) {
-	dataSourceName = fmt.Sprintf("%s:%s", config.Username, config.Password)
+	dconfig := mysql.NewConfig()
 
-	if dataSourceName != "" {
-		dataSourceName += "@"
+	switch {
+	case config.Port == 0:
+		dconfig.Net = sqlNetworkTypeTCP
+		dconfig.Addr = fmt.Sprintf("%s:%d", config.Host, 3306)
+	default:
+		dconfig.Net = sqlNetworkTypeTCP
+		dconfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
 	}
 
-	address := config.Host
-	if config.Port > 0 {
-		address += fmt.Sprintf(":%d", config.Port)
+	switch config.Port {
+	case 0:
+		dconfig.Addr = config.Host
+	default:
+		dconfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
 	}
 
-	dataSourceName += fmt.Sprintf("tcp(%s)/%s", address, config.Database)
+	dconfig.DBName = config.Database
+	dconfig.User = config.Username
+	dconfig.Passwd = config.Password
+	dconfig.Timeout = config.Timeout
+	dconfig.MultiStatements = true
+	dconfig.ParseTime = true
+	dconfig.Loc = time.Local
 
-	dataSourceName += "?"
-	dataSourceName += fmt.Sprintf("timeout=%ds&multiStatements=true&parseTime=true", int32(config.Timeout/time.Second))
-
-	return dataSourceName
+	return dconfig.FormatDSN()
 }

From 1ea29cb2c24b44d15dffed3964e41e56b32da02d Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 22 Oct 2022 16:41:27 +1100
Subject: [PATCH 173/263] feat(storage): unix socket support (#4231)

Support for unix sockets for MySQL and PostgreSQL.
---
 .../content/en/configuration/storage/mysql.md |  14 +-
 .../en/configuration/storage/postgres.md      |  14 +-
 go.mod                                        |   9 +-
 go.sum                                        |  42 +----
 internal/commands/helpers.go                  |  27 +++-
 internal/configuration/validator/session.go   |   6 +-
 .../configuration/validator/session_test.go   |   2 +-
 internal/storage/const.go                     |   3 +-
 .../storage/sql_provider_backend_mysql.go     |  42 ++---
 .../storage/sql_provider_backend_postgres.go  | 149 +++++++++++++++---
 10 files changed, 205 insertions(+), 103 deletions(-)

diff --git a/docs/content/en/configuration/storage/mysql.md b/docs/content/en/configuration/storage/mysql.md
index a8ba2f64a..00fd9d1d8 100644
--- a/docs/content/en/configuration/storage/mysql.md
+++ b/docs/content/en/configuration/storage/mysql.md
@@ -55,12 +55,22 @@ See the [encryption_key docs](introduction.md#encryption_key).
 
 {{< confkey type="string" default="localhost" required="no" >}}
 
-The database server host.
+The database server host. This can also be a unix socket.
 
 If utilising an IPv6 literal address it must be enclosed by square brackets and quoted:
 
 ```yaml
-host: "[fd00:1111:2222:3333::1]"
+storage:
+  mysql:
+    host: "[fd00:1111:2222:3333::1]"
+```
+
+If utilizing a unix socket it must have the `unix:` prefix:
+
+```yaml
+storage:
+  mysql:
+    host: /var/run/mysqld.sock
 ```
 
 ### port
diff --git a/docs/content/en/configuration/storage/postgres.md b/docs/content/en/configuration/storage/postgres.md
index 3008c81fc..97aa701ef 100644
--- a/docs/content/en/configuration/storage/postgres.md
+++ b/docs/content/en/configuration/storage/postgres.md
@@ -57,12 +57,22 @@ See the [encryption_key docs](introduction.md#encryption_key).
 
 {{< confkey type="string" required="yes" >}}
 
-The database server host.
+The database server host. This can also be a unix socket.
 
 If utilising an IPv6 literal address it must be enclosed by square brackets and quoted:
 
 ```yaml
-host: "[fd00:1111:2222:3333::1]"
+storage:
+  postgres:
+    host: "[fd00:1111:2222:3333::1]"
+```
+
+If utilizing a unix socket it must have the `unix:` prefix:
+
+```yaml
+storage:
+  postgres:
+    host: /var/run/postgres.sock
 ```
 
 ### port
diff --git a/go.mod b/go.mod
index 3529a8b71..5af10b040 100644
--- a/go.mod
+++ b/go.mod
@@ -19,7 +19,7 @@ require (
 	github.com/golang-jwt/jwt/v4 v4.4.2
 	github.com/golang/mock v1.6.0
 	github.com/google/uuid v1.3.0
-	github.com/jackc/pgx/v4 v4.17.2
+	github.com/jackc/pgx/v5 v5.0.3
 	github.com/jmoiron/sqlx v1.3.5
 	github.com/knadh/koanf v1.4.4
 	github.com/mattn/go-sqlite3 v2.0.3+incompatible
@@ -66,13 +66,8 @@ require (
 	github.com/gorilla/websocket v1.4.2 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/inconshreveable/mousetrap v1.0.1 // indirect
-	github.com/jackc/chunkreader/v2 v2.0.1 // indirect
-	github.com/jackc/pgconn v1.13.0 // indirect
-	github.com/jackc/pgio v1.0.0 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
-	github.com/jackc/pgproto3/v2 v2.3.1 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b // indirect
-	github.com/jackc/pgtype v1.12.0 // indirect
 	github.com/jandelgado/gcov2lcov v1.0.5 // indirect
 	github.com/klauspost/compress v1.15.0 // indirect
 	github.com/magiconair/properties v1.8.5 // indirect
@@ -105,7 +100,7 @@ require (
 	github.com/ysmood/goob v0.4.0 // indirect
 	github.com/ysmood/gson v0.7.1 // indirect
 	github.com/ysmood/leakless v0.8.0 // indirect
-	golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8 // indirect
+	golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90 // indirect
 	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
 	golang.org/x/net v0.0.0-20220722155237-a158d28d115b // indirect
 	golang.org/x/sys v0.1.0 // indirect
diff --git a/go.sum b/go.sum
index 4402cdf9f..befa3974d 100644
--- a/go.sum
+++ b/go.sum
@@ -44,11 +44,8 @@ github.com/DataDog/datadog-go v4.0.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3
 github.com/Gurpartap/logrus-stack v0.0.0-20170710170904-89c00d8a28f4 h1:vdT7QwBhJJEVNFMBNhRSFDRCB6O16T28VhvqRgqFyn8=
 github.com/Gurpartap/logrus-stack v0.0.0-20170710170904-89c00d8a28f4/go.mod h1:SvXOG8ElV28oAiG9zv91SDe5+9PfIr7PPccpr8YyXNs=
 github.com/Knetic/govaluate v3.0.1-0.20171022003610-9aa49832a739+incompatible/go.mod h1:r7JcOSlj0wfOMncg0iLm8Leh48TZaKVeNIfJntJ2wa0=
-github.com/Masterminds/semver v1.4.2 h1:WBLTQ37jOCzSLtXNdoo8bNM8876KhNqOKvrlGITgsTc=
 github.com/Masterminds/semver v1.4.2/go.mod h1:MB6lktGJrhw8PrUyiEoblNEGEQ+RzHPF078ddwwvV3Y=
 github.com/Masterminds/semver/v3 v3.0.3/go.mod h1:VPu/7SZ7ePZ3QOrcuXROw5FAcLl4a0cBrbBpGY/8hQs=
-github.com/Masterminds/semver/v3 v3.1.1 h1:hLg3sBzpNErnxhQtUy/mmLR2I9foDujNK030IGemrRc=
-github.com/Masterminds/semver/v3 v3.1.1/go.mod h1:VPu/7SZ7ePZ3QOrcuXROw5FAcLl4a0cBrbBpGY/8hQs=
 github.com/Microsoft/go-winio v0.4.11/go.mod h1:VhR8bwka0BXejwEJY73c50VrPtXAaKcyvVC4A4RozmA=
 github.com/Microsoft/go-winio v0.4.14/go.mod h1:qXqCSQ3Xa7+6tgxaGTIe4Kpcdsi+P8jBhyzoq1bpyYA=
 github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8D7ML55dXQrVaamCz2vxCfdQBasLZfHKk=
@@ -133,7 +130,6 @@ github.com/cncf/xds/go v0.0.0-20210312221358-fbca930ec8ed/go.mod h1:eXthEFrGJvWH
 github.com/cncf/xds/go v0.0.0-20210805033703-aa0b78936158/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
-github.com/cockroachdb/apd v1.1.0 h1:3LFP3629v+1aKXU5Q37mxmRxX/pIu1nijXydLShEq5I=
 github.com/cockroachdb/apd v1.1.0/go.mod h1:8Sl8LxpKi29FqWXR16WEFZRNSz3SoPzUzeMeY4+DwBQ=
 github.com/cockroachdb/cockroach-go v0.0.0-20181001143604-e0a95dfd547c/go.mod h1:XGLbWH/ujMcbPbhZq52Nv6UrCghb1yGn//133kEsvDk=
 github.com/cockroachdb/cockroach-go v0.0.0-20190925194419-606b3d062051/go.mod h1:XGLbWH/ujMcbPbhZq52Nv6UrCghb1yGn//133kEsvDk=
@@ -583,8 +579,6 @@ github.com/gobuffalo/x v0.0.0-20181007152206-913e47c59ca7/go.mod h1:9rDPXaB3kXdK
 github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
 github.com/gofrs/uuid v3.1.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
 github.com/gofrs/uuid v3.2.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
-github.com/gofrs/uuid v4.0.0+incompatible h1:1SD/1F5pU8p29ybwgQSwpQk+mwdRrXCYuPhW6m+TnJw=
-github.com/gofrs/uuid v4.0.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
 github.com/gofrs/uuid/v3 v3.1.2/go.mod h1:xPwMqoocQ1L5G6pXX5BcE7N5jlzn2o19oqAKxwZW/kI=
 github.com/gogo/googleapis v1.1.0/go.mod h1:gf4bu3Q80BeJ6H1S1vYPm8/ELATdvryBaNFGgqEef3s=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
@@ -755,7 +749,6 @@ github.com/instana/go-sensor v1.29.0/go.mod h1:Uh9j3eF2mBw/FLk2MxISmVDIj8mtJBFRj
 github.com/instana/testify v1.6.2-0.20200721153833-94b1851f4d65/go.mod h1:nYhEREG/B7HUY7P+LKOrqy53TpIqmJ9JyUShcaEKtGw=
 github.com/jackc/chunkreader v1.0.0/go.mod h1:RT6O25fNZIuasFJRyZ4R/Y2BbhasbmZXF9QQ7T3kePo=
 github.com/jackc/chunkreader/v2 v2.0.0/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk=
-github.com/jackc/chunkreader/v2 v2.0.1 h1:i+RDz65UE+mmpjTfyz0MoVTnzeYxroil2G82ki7MGG8=
 github.com/jackc/chunkreader/v2 v2.0.1/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk=
 github.com/jackc/fake v0.0.0-20150926172116-812a484cc733/go.mod h1:WrMFNQdiFJ80sQsxDoMokWK1W5TQtxBFNpzWTD84ibQ=
 github.com/jackc/pgconn v0.0.0-20190420214824-7e0022ef6ba3/go.mod h1:jkELnwuX+w9qN5YIfX0fl88Ehu4XC3keFuOJJk9pcnA=
@@ -767,16 +760,8 @@ github.com/jackc/pgconn v1.5.0/go.mod h1:QeD3lBfpTFe8WUnPZWN5KY/mB8FGMIYRdd8P8Jr
 github.com/jackc/pgconn v1.5.1-0.20200601181101-fa742c524853/go.mod h1:QeD3lBfpTFe8WUnPZWN5KY/mB8FGMIYRdd8P8Jr0fAI=
 github.com/jackc/pgconn v1.6.0/go.mod h1:yeseQo4xhQbgyJs2c87RAXOH2i624N0Fh1KSPJya7qo=
 github.com/jackc/pgconn v1.8.0/go.mod h1:1C2Pb36bGIP9QHGBYCjnyhqu7Rv3sGshaQUvmfGIB/o=
-github.com/jackc/pgconn v1.9.0/go.mod h1:YctiPyvzfU11JFxoXokUOOKQXQmDMoJL9vJzHH8/2JY=
-github.com/jackc/pgconn v1.9.1-0.20210724152538-d89c8390a530/go.mod h1:4z2w8XhRbP1hYxkpTuBjTS3ne3J48K83+u0zoyvg2pI=
-github.com/jackc/pgconn v1.13.0 h1:3L1XMNV2Zvca/8BYhzcRFS70Lr0WlDg16Di6SFGAbys=
-github.com/jackc/pgconn v1.13.0/go.mod h1:AnowpAqO4CMIIJNZl2VJp+KrkAZciAkhEl0W0JIobpI=
-github.com/jackc/pgio v1.0.0 h1:g12B9UwVnzGhueNavwioyEEpAmqMe1E/BN9ES+8ovkE=
 github.com/jackc/pgio v1.0.0/go.mod h1:oP+2QK2wFfUWgr+gxjoBH9KGBb31Eio69xUb0w5bYf8=
 github.com/jackc/pgmock v0.0.0-20190831213851-13a1b77aafa2/go.mod h1:fGZlG77KXmcq05nJLRkk0+p82V8B8Dw8KN2/V9c/OAE=
-github.com/jackc/pgmock v0.0.0-20201204152224-4fe30f7445fd/go.mod h1:hrBW0Enj2AZTNpt/7Y5rr2xe/9Mn757Wtb2xeBzPv2c=
-github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65 h1:DadwsjnMwFjfWc9y5Wi/+Zz7xoE5ALHsRQlOctkOiHc=
-github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65/go.mod h1:5R2h2EEX+qri8jOWMbJCtaPWkrrNc7OHwsp2TCqp7ak=
 github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgproto3 v1.1.0/go.mod h1:eR5FA3leWg7p9aeAqi37XOTgTIbkABlvcPB3E5rlc78=
@@ -787,9 +772,6 @@ github.com/jackc/pgproto3/v2 v2.0.0-rc3.0.20190831210041-4c03ce451f29/go.mod h1:
 github.com/jackc/pgproto3/v2 v2.0.1/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
 github.com/jackc/pgproto3/v2 v2.0.2/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
 github.com/jackc/pgproto3/v2 v2.0.6/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
-github.com/jackc/pgproto3/v2 v2.1.1/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
-github.com/jackc/pgproto3/v2 v2.3.1 h1:nwj7qwf0S+Q7ISFfBndqeLwSwxs+4DPsbRFjECT1Y4Y=
-github.com/jackc/pgproto3/v2 v2.3.1/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
 github.com/jackc/pgservicefile v0.0.0-20200307190119-3430c5407db8/go.mod h1:vsD4gTJCa9TptPL8sPkXrLZ+hDuNrZCnj29CQpr4X1E=
 github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b h1:C8S2+VttkHFdOOCXJe+YGfa4vHYwlt4Zx+IVXQ97jYg=
 github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b/go.mod h1:vsD4gTJCa9TptPL8sPkXrLZ+hDuNrZCnj29CQpr4X1E=
@@ -801,9 +783,6 @@ github.com/jackc/pgtype v1.3.0/go.mod h1:b0JqxHvPmljG+HQ5IsvQ0yqeSi4nGcDTVjFoiLD
 github.com/jackc/pgtype v1.3.1-0.20200510190516-8cd94a14c75a/go.mod h1:vaogEUkALtxZMCH411K+tKzNpwzCKU+AnPzBKZ+I+Po=
 github.com/jackc/pgtype v1.3.1-0.20200606141011-f6355165a91c/go.mod h1:cvk9Bgu/VzJ9/lxTO5R5sf80p0DiucVtN7ZxvaC4GmQ=
 github.com/jackc/pgtype v1.6.2/go.mod h1:JCULISAZBFGrHaOXIIFiyfzW5VY0GRitRr8NeJsrdig=
-github.com/jackc/pgtype v1.8.1-0.20210724151600-32e20a603178/go.mod h1:C516IlIV9NKqfsMCXTdChteoXmwgUceqaLfjg2e3NlM=
-github.com/jackc/pgtype v1.12.0 h1:Dlq8Qvcch7kiehm8wPGIW0W3KsCCHJnRacKW0UM8n5w=
-github.com/jackc/pgtype v1.12.0/go.mod h1:LUMuVrfsFfdKGLw+AFFVv6KtHOFMwRgDDzBt76IqCA4=
 github.com/jackc/pgx v3.2.0+incompatible/go.mod h1:0ZGrqGqkRlliWnWB4zKnWtjbSWbGkVEFm4TeybAXq+I=
 github.com/jackc/pgx v3.6.2+incompatible/go.mod h1:0ZGrqGqkRlliWnWB4zKnWtjbSWbGkVEFm4TeybAXq+I=
 github.com/jackc/pgx/v4 v4.0.0-20190420224344-cc3461e65d96/go.mod h1:mdxmSJJuR08CZQyj1PVQBHy9XOp5p8/SHH6a0psbY9Y=
@@ -815,15 +794,13 @@ github.com/jackc/pgx/v4 v4.6.0/go.mod h1:vPh43ZzxijXUVJ+t/EmXBtFmbFVO72cuneCT9oA
 github.com/jackc/pgx/v4 v4.6.1-0.20200510190926-94ba730bb1e9/go.mod h1:t3/cdRQl6fOLDxqtlyhe9UWgfIi9R8+8v8GKV5TRA/o=
 github.com/jackc/pgx/v4 v4.6.1-0.20200606145419-4e5062306904/go.mod h1:ZDaNWkt9sW1JMiNn0kdYBaLelIhw7Pg4qd+Vk6tw7Hg=
 github.com/jackc/pgx/v4 v4.10.1/go.mod h1:QlrWebbs3kqEZPHCTGyxecvzG6tvIsYu+A5b1raylkA=
-github.com/jackc/pgx/v4 v4.12.1-0.20210724153913-640aa07df17c/go.mod h1:1QD0+tgSXP7iUjYm9C1NxKhny7lq6ee99u/z+IHFcgs=
-github.com/jackc/pgx/v4 v4.17.2 h1:0Ut0rpeKwvIVbMQ1KbMBU4h6wxehBI535LK6Flheh8E=
-github.com/jackc/pgx/v4 v4.17.2/go.mod h1:lcxIZN44yMIrWI78a5CpucdD14hX0SBDbNRvjDBItsw=
+github.com/jackc/pgx/v5 v5.0.3 h1:4flM5ecR/555F0EcnjdaZa6MhBU+nr0QbZIo5vaKjuM=
+github.com/jackc/pgx/v5 v5.0.3/go.mod h1:JBbvW3Hdw77jKl9uJrEDATUZIFM2VFPzRq4RWIhkF4o=
 github.com/jackc/puddle v0.0.0-20190413234325-e4ced69a3a2b/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v0.0.0-20190608224051-11cab39313c9/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v1.1.0/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v1.1.1/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v1.1.3/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
-github.com/jackc/puddle v1.3.0/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jandelgado/gcov2lcov v1.0.4-0.20210120124023-b83752c6dc08/go.mod h1:NnSxK6TMlg1oGDBfGelGbjgorT5/L3cchlbtgFYZSss=
 github.com/jandelgado/gcov2lcov v1.0.4/go.mod h1:NnSxK6TMlg1oGDBfGelGbjgorT5/L3cchlbtgFYZSss=
 github.com/jandelgado/gcov2lcov v1.0.5 h1:rkBt40h0CVK4oCb8Dps950gvfd1rYvQ8+cWa346lVU0=
@@ -889,6 +866,7 @@ github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
 github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.2.0/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/pty v1.1.3/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/pty v1.1.5/go.mod h1:9r2w37qlBe7rQ6e1fg1S/9xpWHSnaqNdHD3WcMdbPDA=
@@ -902,7 +880,6 @@ github.com/lib/pq v1.1.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.2.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.3.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.10.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.10.2/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lib/pq v1.10.7 h1:p7ZhMD+KsSRozJr34udlUrhboJwWAgCg34+/ZZNvZZw=
 github.com/lib/pq v1.10.7/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
@@ -1021,7 +998,6 @@ github.com/nats-io/nkeys v0.1.0/go.mod h1:xpnFELMwJABBLVhffcfd1MZx6VsNRFpEugbxzi
 github.com/nats-io/nkeys v0.1.3/go.mod h1:xpnFELMwJABBLVhffcfd1MZx6VsNRFpEugbxziKVo7w=
 github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c=
 github.com/nicksnyder/go-i18n v1.10.0/go.mod h1:HrK7VCrbOvQoUAQ7Vpy7i87N7JZZZ7R2xBGjv0j365Q=
-github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWbfPhv4DMiApHyliiK5xCTNVSPiaAs=
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
 github.com/npillmayer/nestext v0.1.3/go.mod h1:h2lrijH8jpicr25dFY+oAJLyzlya6jhnuG+zWp9L0Uk=
 github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A=
@@ -1205,6 +1181,7 @@ github.com/rogpeppe/go-internal v1.2.2/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFR
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.3.2/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
 github.com/rogpeppe/go-internal v1.4.0/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
+github.com/rogpeppe/go-internal v1.5.2 h1:qLvObTrvO/XRCqmkKxUlOBc48bI3efyDuAZe25QiF0w=
 github.com/rogpeppe/go-internal v1.5.2/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
 github.com/rs/cors v1.6.0/go.mod h1:gFx+x8UowdsKA9AchylcLynDq+nNFfI8FkUZdN/jGCU=
 github.com/rs/xid v1.2.1/go.mod h1:+uKXf+4Djp6Md1KODXJxgGQPKngRmWyn10oCKFzNHOQ=
@@ -1242,7 +1219,6 @@ github.com/sergi/go-diff v1.0.0/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAm
 github.com/sergi/go-diff v1.1.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
 github.com/shopspring/decimal v0.0.0-20180709203117-cd690d0c9e24/go.mod h1:M+9NzErvs504Cn4c5DxATwIqPbtswREoFCre64PpcG4=
 github.com/shopspring/decimal v0.0.0-20200227202807-02e2044944cc/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
-github.com/shopspring/decimal v1.2.0 h1:abSATXmQEYyShuxI4/vyW3tV1MrKAJzCZ/0zLUXYbsQ=
 github.com/shopspring/decimal v1.2.0/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
 github.com/shurcooL/go v0.0.0-20180423040247-9e1955d9fb6e/go.mod h1:TDJrrUr11Vxrven61rcy3hJMUqaf/CLWYhHNPmT14Lk=
 github.com/shurcooL/go-goon v0.0.0-20170922171312-37c2f522c041/go.mod h1:N5mDOmsrJOB+vfqUK+7DmDyjhSLIIBnXo9lvZJj3MWQ=
@@ -1490,13 +1466,10 @@ golang.org/x/crypto v0.0.0-20200604202706-70a84ac30bf9/go.mod h1:LzIPMQfyMNhhGPh
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20201203163018-be400aefbc4c/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
-golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20220214200702-86341886e292/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8 h1:GIAS/yBem/gq2MUqgNIzUHW7cJMmx3TGZOrnyYaNQ6c=
-golang.org/x/crypto v0.0.0-20220817201139-bc19a97f63c8/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
+golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90 h1:Y/gsMcFOcR+6S6f3YeMKl5g+dZMEWqcz5Czj/GWYbkM=
+golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -1734,7 +1707,6 @@ golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3
 golang.org/x/text v0.3.1-0.20181227161524-e6919f6577db/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
@@ -1972,8 +1944,8 @@ gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d/go.mod h1:cuepJuh7vyXfUy
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/cheggaaa/pb.v1 v1.0.25/go.mod h1:V/YB90LKu/1FcN3WVnfiiE5oMCibMjukxqG/qStrOgw=
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
diff --git a/internal/commands/helpers.go b/internal/commands/helpers.go
index 01f23e8f8..0bfec419d 100644
--- a/internal/commands/helpers.go
+++ b/internal/commands/helpers.go
@@ -1,6 +1,8 @@
 package commands
 
 import (
+	"crypto/x509"
+
 	"github.com/authelia/authelia/v4/internal/authentication"
 	"github.com/authelia/authelia/v4/internal/authorization"
 	"github.com/authelia/authelia/v4/internal/metrics"
@@ -17,11 +19,22 @@ import (
 )
 
 func getStorageProvider() (provider storage.Provider) {
+	switch {
+	case config.Storage.Local == nil:
+		return getStorageProviderWithPool(nil)
+	default:
+		caCertPool, _, _ := utils.NewX509CertPool(config.CertificatesDirectory)
+
+		return getStorageProviderWithPool(caCertPool)
+	}
+}
+
+func getStorageProviderWithPool(caCertPool *x509.CertPool) (provider storage.Provider) {
 	switch {
 	case config.Storage.PostgreSQL != nil:
-		return storage.NewPostgreSQLProvider(config)
+		return storage.NewPostgreSQLProvider(config, caCertPool)
 	case config.Storage.MySQL != nil:
-		return storage.NewMySQLProvider(config)
+		return storage.NewMySQLProvider(config, caCertPool)
 	case config.Storage.Local != nil:
 		return storage.NewSQLiteProvider(config)
 	default:
@@ -31,12 +44,12 @@ func getStorageProvider() (provider storage.Provider) {
 
 func getProviders() (providers middlewares.Providers, warnings []error, errors []error) {
 	// TODO: Adjust this so the CertPool can be used like a provider.
-	autheliaCertPool, warnings, errors := utils.NewX509CertPool(config.CertificatesDirectory)
+	caCertPool, warnings, errors := utils.NewX509CertPool(config.CertificatesDirectory)
 	if len(warnings) != 0 || len(errors) != 0 {
 		return providers, warnings, errors
 	}
 
-	storageProvider := getStorageProvider()
+	storageProvider := getStorageProviderWithPool(caCertPool)
 
 	var (
 		userProvider authentication.UserProvider
@@ -47,7 +60,7 @@ func getProviders() (providers middlewares.Providers, warnings []error, errors [
 	case config.AuthenticationBackend.File != nil:
 		userProvider = authentication.NewFileUserProvider(config.AuthenticationBackend.File)
 	case config.AuthenticationBackend.LDAP != nil:
-		userProvider = authentication.NewLDAPUserProvider(config.AuthenticationBackend, autheliaCertPool)
+		userProvider = authentication.NewLDAPUserProvider(config.AuthenticationBackend, caCertPool)
 	}
 
 	templatesProvider, err := templates.New(templates.Config{EmailTemplatesPath: config.Notifier.TemplatePath})
@@ -59,7 +72,7 @@ func getProviders() (providers middlewares.Providers, warnings []error, errors [
 
 	switch {
 	case config.Notifier.SMTP != nil:
-		notifier = notification.NewSMTPNotifier(config.Notifier.SMTP, autheliaCertPool, templatesProvider)
+		notifier = notification.NewSMTPNotifier(config.Notifier.SMTP, caCertPool, templatesProvider)
 	case config.Notifier.FileSystem != nil:
 		notifier = notification.NewFileNotifier(*config.Notifier.FileSystem)
 	}
@@ -68,7 +81,7 @@ func getProviders() (providers middlewares.Providers, warnings []error, errors [
 
 	clock := utils.RealClock{}
 	authorizer := authorization.NewAuthorizer(config)
-	sessionProvider := session.NewProvider(config.Session, autheliaCertPool)
+	sessionProvider := session.NewProvider(config.Session, caCertPool)
 	regulator := regulation.NewRegulator(config.Regulation, storageProvider, clock)
 
 	oidcProvider, err := oidc.NewOpenIDConnectProvider(config.IdentityProviders.OIDC, storageProvider)
diff --git a/internal/configuration/validator/session.go b/internal/configuration/validator/session.go
index f39ab517b..7cf7a84b0 100644
--- a/internal/configuration/validator/session.go
+++ b/internal/configuration/validator/session.go
@@ -1,8 +1,8 @@
 package validator
 
 import (
-	"errors"
 	"fmt"
+	"path"
 	"strings"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
@@ -79,9 +79,7 @@ func validateRedis(config *schema.SessionConfiguration, validator *schema.Struct
 
 	validateRedisCommon(config, validator)
 
-	if !strings.HasPrefix(config.Redis.Host, "/") && config.Redis.Port == 0 {
-		validator.Push(errors.New("A redis port different than 0 must be provided"))
-	} else if config.Redis.Port < 0 || config.Redis.Port > 65535 {
+	if !path.IsAbs(config.Redis.Host) && (config.Redis.Port < 1 || config.Redis.Port > 65535) {
 		validator.Push(fmt.Errorf(errFmtSessionRedisPortRange, config.Redis.Port))
 	}
 
diff --git a/internal/configuration/validator/session_test.go b/internal/configuration/validator/session_test.go
index 6e4336e47..29ef3d91f 100644
--- a/internal/configuration/validator/session_test.go
+++ b/internal/configuration/validator/session_test.go
@@ -149,7 +149,7 @@ func TestShouldRaiseErrorWhenRedisHasHostnameButNoPort(t *testing.T) {
 
 	assert.False(t, validator.HasWarnings())
 	assert.Len(t, validator.Errors(), 1)
-	assert.EqualError(t, validator.Errors()[0], "A redis port different than 0 must be provided")
+	assert.EqualError(t, validator.Errors()[0], "session: redis: option 'port' must be between 1 and 65535 but is configured as '0'")
 }
 
 func TestShouldRaiseOneErrorWhenRedisHighAvailabilityHasNodesWithNoHost(t *testing.T) {
diff --git a/internal/storage/const.go b/internal/storage/const.go
index 825caae04..39645979d 100644
--- a/internal/storage/const.go
+++ b/internal/storage/const.go
@@ -41,7 +41,8 @@ const (
 )
 
 const (
-	sqlNetworkTypeTCP = "tcp"
+	sqlNetworkTypeTCP        = "tcp"
+	sqlNetworkTypeUnixSocket = "unix"
 )
 
 const (
diff --git a/internal/storage/sql_provider_backend_mysql.go b/internal/storage/sql_provider_backend_mysql.go
index a336aeac9..b0382ed7d 100644
--- a/internal/storage/sql_provider_backend_mysql.go
+++ b/internal/storage/sql_provider_backend_mysql.go
@@ -1,11 +1,12 @@
 package storage
 
 import (
+	"crypto/x509"
 	"fmt"
+	"path"
 	"time"
 
 	"github.com/go-sql-driver/mysql"
-	_ "github.com/go-sql-driver/mysql" // Load the MySQL Driver used in the connection string.
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 )
@@ -16,9 +17,9 @@ type MySQLProvider struct {
 }
 
 // NewMySQLProvider a MySQL provider.
-func NewMySQLProvider(config *schema.Configuration) (provider *MySQLProvider) {
+func NewMySQLProvider(config *schema.Configuration, caCertPool *x509.CertPool) (provider *MySQLProvider) {
 	provider = &MySQLProvider{
-		SQLProvider: NewSQLProvider(config, providerMySQL, providerMySQL, dataSourceNameMySQL(*config.Storage.MySQL)),
+		SQLProvider: NewSQLProvider(config, providerMySQL, providerMySQL, dsnMySQL(config.Storage.MySQL)),
 	}
 
 	// All providers have differing SELECT existing table statements.
@@ -30,32 +31,35 @@ func NewMySQLProvider(config *schema.Configuration) (provider *MySQLProvider) {
 	return provider
 }
 
-func dataSourceNameMySQL(config schema.MySQLStorageConfiguration) (dataSourceName string) {
-	dconfig := mysql.NewConfig()
+func dsnMySQL(config *schema.MySQLStorageConfiguration) (dataSourceName string) {
+	dsnConfig := mysql.NewConfig()
 
 	switch {
+	case path.IsAbs(config.Host):
+		dsnConfig.Net = sqlNetworkTypeUnixSocket
+		dsnConfig.Addr = config.Host
 	case config.Port == 0:
-		dconfig.Net = sqlNetworkTypeTCP
-		dconfig.Addr = fmt.Sprintf("%s:%d", config.Host, 3306)
+		dsnConfig.Net = sqlNetworkTypeTCP
+		dsnConfig.Addr = fmt.Sprintf("%s:%d", config.Host, 3306)
 	default:
-		dconfig.Net = sqlNetworkTypeTCP
-		dconfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
+		dsnConfig.Net = sqlNetworkTypeTCP
+		dsnConfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
 	}
 
 	switch config.Port {
 	case 0:
-		dconfig.Addr = config.Host
+		dsnConfig.Addr = config.Host
 	default:
-		dconfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
+		dsnConfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
 	}
 
-	dconfig.DBName = config.Database
-	dconfig.User = config.Username
-	dconfig.Passwd = config.Password
-	dconfig.Timeout = config.Timeout
-	dconfig.MultiStatements = true
-	dconfig.ParseTime = true
-	dconfig.Loc = time.Local
+	dsnConfig.DBName = config.Database
+	dsnConfig.User = config.Username
+	dsnConfig.Passwd = config.Password
+	dsnConfig.Timeout = config.Timeout
+	dsnConfig.MultiStatements = true
+	dsnConfig.ParseTime = true
+	dsnConfig.Loc = time.Local
 
-	return dconfig.FormatDSN()
+	return dsnConfig.FormatDSN()
 }
diff --git a/internal/storage/sql_provider_backend_postgres.go b/internal/storage/sql_provider_backend_postgres.go
index 8a3ee7779..80f9929aa 100644
--- a/internal/storage/sql_provider_backend_postgres.go
+++ b/internal/storage/sql_provider_backend_postgres.go
@@ -1,11 +1,15 @@
 package storage
 
 import (
+	"crypto/tls"
+	"crypto/x509"
+	"errors"
 	"fmt"
-	"strings"
-	"time"
+	"os"
+	"path"
 
-	_ "github.com/jackc/pgx/v4/stdlib" // Load the PostgreSQL Driver used in the connection string.
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/stdlib"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
 )
@@ -16,9 +20,9 @@ type PostgreSQLProvider struct {
 }
 
 // NewPostgreSQLProvider a PostgreSQL provider.
-func NewPostgreSQLProvider(config *schema.Configuration) (provider *PostgreSQLProvider) {
+func NewPostgreSQLProvider(config *schema.Configuration, caCertPool *x509.CertPool) (provider *PostgreSQLProvider) {
 	provider = &PostgreSQLProvider{
-		SQLProvider: NewSQLProvider(config, providerPostgres, "pgx", dataSourceNamePostgreSQL(*config.Storage.PostgreSQL)),
+		SQLProvider: NewSQLProvider(config, providerPostgres, "pgx", dsnPostgreSQL(config.Storage.PostgreSQL, caCertPool)),
 	}
 
 	// All providers have differing SELECT existing table statements.
@@ -128,33 +132,128 @@ func NewPostgreSQLProvider(config *schema.Configuration) (provider *PostgreSQLPr
 	return provider
 }
 
-func dataSourceNamePostgreSQL(config schema.PostgreSQLStorageConfiguration) (dataSourceName string) {
-	args := []string{
-		fmt.Sprintf("host=%s", config.Host),
-		fmt.Sprintf("user='%s'", config.Username),
-		fmt.Sprintf("password='%s'", config.Password),
-		fmt.Sprintf("dbname=%s", config.Database),
-		fmt.Sprintf("search_path=%s", config.Schema),
-		fmt.Sprintf("sslmode=%s", config.SSL.Mode),
+func dsnPostgreSQL(config *schema.PostgreSQLStorageConfiguration, globalCACertPool *x509.CertPool) (dsn string) {
+	dsnConfig, _ := pgx.ParseConfig("")
+
+	ca, certs := loadPostgreSQLLegacyTLS(config)
+
+	switch config.SSL.Mode {
+	case "disable":
+		break
+	default:
+		var caCertPool *x509.CertPool
+
+		switch ca {
+		case nil:
+			caCertPool = globalCACertPool
+		default:
+			caCertPool = globalCACertPool.Clone()
+			caCertPool.AddCert(ca)
+		}
+
+		dsnConfig.TLSConfig = &tls.Config{
+			Certificates:       certs,
+			RootCAs:            caCertPool,
+			InsecureSkipVerify: true, //nolint:gosec
+		}
+
+		switch {
+		case config.SSL.Mode == "require" && config.SSL.RootCertificate != "" || config.SSL.Mode == "verify-ca":
+			dsnConfig.TLSConfig.VerifyPeerCertificate = newPostgreSQLVerifyCAFunc(dsnConfig.TLSConfig)
+		case config.SSL.Mode == "verify-full":
+			dsnConfig.TLSConfig.InsecureSkipVerify = false
+			dsnConfig.TLSConfig.ServerName = config.Host
+		}
 	}
 
-	if config.Port > 0 {
-		args = append(args, fmt.Sprintf("port=%d", config.Port))
+	dsnConfig.Host = config.Host
+	dsnConfig.Port = uint16(config.Port)
+	dsnConfig.Database = config.Database
+	dsnConfig.User = config.Username
+	dsnConfig.Password = config.Password
+	dsnConfig.ConnectTimeout = config.Timeout
+	dsnConfig.RuntimeParams = map[string]string{
+		"search_path": config.Schema,
 	}
 
+	if dsnConfig.Port == 0 && !path.IsAbs(dsnConfig.Host) {
+		dsnConfig.Port = 4321
+	}
+
+	return stdlib.RegisterConnConfig(dsnConfig)
+}
+
+func loadPostgreSQLLegacyTLS(config *schema.PostgreSQLStorageConfiguration) (ca *x509.Certificate, certs []tls.Certificate) {
+	var (
+		err error
+	)
+
 	if config.SSL.RootCertificate != "" {
-		args = append(args, fmt.Sprintf("sslrootcert=%s", config.SSL.RootCertificate))
+		var caPEMBlock []byte
+
+		if caPEMBlock, err = os.ReadFile(config.SSL.RootCertificate); err != nil {
+			return nil, nil
+		}
+
+		if ca, err = x509.ParseCertificate(caPEMBlock); err != nil {
+			return nil, nil
+		}
 	}
 
-	if config.SSL.Certificate != "" {
-		args = append(args, fmt.Sprintf("sslcert=%s", config.SSL.Certificate))
+	if config.SSL.Certificate != "" && config.SSL.Key != "" {
+		var (
+			keyPEMBlock  []byte
+			certPEMBlock []byte
+		)
+
+		if keyPEMBlock, err = os.ReadFile(config.SSL.Key); err != nil {
+			return nil, nil
+		}
+
+		if certPEMBlock, err = os.ReadFile(config.SSL.Certificate); err != nil {
+			return nil, nil
+		}
+
+		var cert tls.Certificate
+
+		if cert, err = tls.X509KeyPair(certPEMBlock, keyPEMBlock); err != nil {
+			return nil, nil
+		}
+
+		certs = []tls.Certificate{cert}
 	}
 
-	if config.SSL.Key != "" {
-		args = append(args, fmt.Sprintf("sslkey=%s", config.SSL.Key))
-	}
-
-	args = append(args, fmt.Sprintf("connect_timeout=%d", int32(config.Timeout/time.Second)))
-
-	return strings.Join(args, " ")
+	return ca, certs
+}
+
+func newPostgreSQLVerifyCAFunc(config *tls.Config) func(certificates [][]byte, _ [][]*x509.Certificate) (err error) {
+	return func(certificates [][]byte, _ [][]*x509.Certificate) (err error) {
+		certs := make([]*x509.Certificate, len(certificates))
+
+		var cert *x509.Certificate
+
+		for i, asn1Data := range certificates {
+			if cert, err = x509.ParseCertificate(asn1Data); err != nil {
+				return errors.New("failed to parse certificate from server: " + err.Error())
+			}
+
+			certs[i] = cert
+		}
+
+		// Leave DNSName empty to skip hostname verification.
+		opts := x509.VerifyOptions{
+			Roots:         config.RootCAs,
+			Intermediates: x509.NewCertPool(),
+		}
+
+		// Skip the first cert because it's the leaf. All others
+		// are intermediates.
+		for _, cert = range certs[1:] {
+			opts.Intermediates.AddCert(cert)
+		}
+
+		_, err = certs[0].Verify(opts)
+
+		return err
+	}
 }

From 69c4c02d03fb4fab591be2d3282fc3fd25d2f981 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 22 Oct 2022 19:27:59 +1100
Subject: [PATCH 174/263] feat(storage): tls connection support (#4233)

This adds support to PostgreSQL and MySQL to connect via TLS via the standard TLS configuration options.
---
 config.template.yml                           | 235 ++++++++++++++++--
 .../content/en/configuration/storage/mysql.md |  90 ++++++-
 .../en/configuration/storage/postgres.md      | 116 ++++++---
 docs/data/configkeys.json                     |   2 +-
 internal/configuration/config.template.yml    | 235 ++++++++++++++++--
 internal/configuration/schema/keys.go         |  12 +
 internal/configuration/schema/storage.go      |  23 +-
 internal/configuration/validator/const.go     |  15 +-
 internal/configuration/validator/storage.go   |  44 +++-
 .../configuration/validator/storage_test.go   | 209 +++++++++++++++-
 .../storage/sql_provider_backend_mysql.go     |  11 +-
 .../storage/sql_provider_backend_postgres.go  |  78 +++---
 internal/utils/crypto.go                      |   4 +-
 13 files changed, 934 insertions(+), 140 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index 4531e0138..89c45d675 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -304,18 +304,22 @@ authentication_backend:
     # start_tls: false
 
     # tls:
-      ## Server Name for certificate validation (in case it's not set correctly in the URL).
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host portion of the url option.
       # server_name: ldap.example.com
 
-      ## Skip verifying the server certificate (to allow a self-signed certificate).
-      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
-      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
       # skip_verify: false
 
-      ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
+      ## Minimum TLS version for the connection.
       # minimum_version: TLS1.2
 
-      ## Maximum TLS version for either Secure LDAP or LDAP StartTLS.
+      ## Maximum TLS version for the connection.
       # maximum_version: TLS1.3
 
       ## The certificate chain used with the private_key if the server requests TLS Client Authentication
@@ -717,12 +721,16 @@ session:
 
     ## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
     # tls:
-      ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
       # server_name: myredis.example.com
 
-      ## Skip verifying the server certificate (to allow a self-signed certificate).
-      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
-      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
       # skip_verify: false
 
       ## Minimum TLS version for the connection.
@@ -882,6 +890,99 @@ regulation:
     # password: mypassword
     # timeout: 5s
 
+    ## MySQL TLS settings. Configuring this requires TLS.
+    # tls:
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
+      # server_name: mysql.example.com
+
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
+      # skip_verify: false
+
+      ## Minimum TLS version for the connection.
+      # minimum_version: TLS1.2
+
+      ## Maximum TLS version for the connection.
+      # maximum_version: TLS1.3
+
+        ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+        ## i.e. Mutual TLS.
+        # certificate_chain: |
+          # -----BEGIN CERTIFICATE-----
+          # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+          # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+          # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+          # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+          # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+          # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+          # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+          # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+          # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+          # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+          # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+          # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+          # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+          # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+          # -----END CERTIFICATE-----
+          # -----BEGIN CERTIFICATE-----
+          # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+          # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+          # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+          # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+          # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+          # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+          # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+          # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+          # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+          # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+          # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+          # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+          # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+          # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+          # qocikt3WAdU^invalid DO NOT USE=
+          # -----END CERTIFICATE-----
+
+        ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+        ## i.e. Mutual TLS.
+        # private_key: |
+          #  -----BEGIN RSA PRIVATE KEY-----
+          # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+          # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+          # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+          # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+          # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+          # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+          # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+          # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+          # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+          # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+          # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+          # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+          # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+          # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+          # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+          # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+          # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+          # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+          # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+          # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+          # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+          # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+          # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+          # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+          # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+          # DO NOT USE==
+          # -----END RSA PRIVATE KEY-----
+
   ##
   ## PostgreSQL (Storage Provider)
   ##
@@ -894,11 +995,99 @@ regulation:
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
     # password: mypassword
     # timeout: 5s
-    # ssl:
-      # mode: disable
-      # root_certificate: disable
-      # certificate: disable
-      # key: disable
+
+    ## PostgreSQL TLS settings. Configuring this requires TLS.
+    # tls:
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
+      # server_name: postgres.example.com
+
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
+      # skip_verify: false
+
+      ## Minimum TLS version for the connection.
+      # minimum_version: TLS1.2
+
+      ## Maximum TLS version for the connection.
+      # maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
 ##
 ## Notification Provider
@@ -966,18 +1155,22 @@ notifier:
     # disable_html_emails: false
 
     # tls:
-      ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
       # server_name: smtp.example.com
 
-      ## Skip verifying the server certificate (to allow a self-signed certificate).
-      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
-      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
       # skip_verify: false
 
-      ## Minimum TLS version for either StartTLS or SMTPS.
+      ## Minimum TLS version for the connection.
       # minimum_version: TLS1.2
 
-      ## Maximum TLS version for either StartTLS or SMTPS.
+      ## Maximum TLS version for the connection.
       # maximum_version: TLS1.3
 
       ## The certificate chain used with the private_key if the server requests TLS Client Authentication
diff --git a/docs/content/en/configuration/storage/mysql.md b/docs/content/en/configuration/storage/mysql.md
index 00fd9d1d8..f9ef749c1 100644
--- a/docs/content/en/configuration/storage/mysql.md
+++ b/docs/content/en/configuration/storage/mysql.md
@@ -17,12 +17,12 @@ aliases:
 
 ## Version support
 
-When using MySQL or MariaDB we recommend using the latest version that is officially supported by the MySQL or MariaDB
-developers. We also suggest checking out [PostgreSQL](postgres.md) as an alternative.
+When using [MySQL] or [MariaDB] we recommend using the latest version that is officially supported by the [MySQL] or
+[MariaDB] developers. We also suggest checking out [PostgreSQL](postgres.md) as an alternative.
 
-The oldest versions that have been tested are MySQL 5.7 and MariaDB 10.6.
+The oldest versions that have been tested are [MySQL] 5.7 and [MariaDB] 10.6.
 
-If using MySQL 5.7 or MariaDB 10.6 you may be required to adjust the `explicit_defaults_for_timestamp` setting. This
+If using [MySQL] 5.7 or [MariaDB] 10.6 you may be required to adjust the `explicit_defaults_for_timestamp` setting. This
 will be evident when the container starts with an error similar to `Error 1067: Invalid default value for 'exp'`. You
 can adjust this setting in the mysql.cnf file like so:
 
@@ -43,6 +43,78 @@ storage:
     username: authelia
     password: mypassword
     timeout: 5s
+    tls:
+      server_name: mysql.example.com
+      skip_verify: false
+      minimum_version: TLS1.2
+      maximum_version: TLS1.3
+      certificate_chain: |
+        -----BEGIN CERTIFICATE-----
+        MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+        -----BEGIN CERTIFICATE-----
+        MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        qocikt3WAdU^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+      private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        DO NOT USE==
+        -----END RSA PRIVATE KEY-----
 ```
 
 ## Options
@@ -65,7 +137,7 @@ storage:
     host: "[fd00:1111:2222:3333::1]"
 ```
 
-If utilizing a unix socket it must have the `unix:` prefix:
+If utilizing a unix socket it must have the `/` prefix:
 
 ```yaml
 storage:
@@ -110,3 +182,11 @@ characters and the user password is changed to this value.
 {{< confkey type="duration" default="5s" required="no" >}}
 
 The SQL connection timeout.
+
+### tls
+
+If defined enables connecting to [MySQL] or [MariaDB] over a TLS socket, and additionally controls the TLS connection
+validation process. You can see how to configure the tls section [here](../prologue/common.md#tls-configuration).
+
+[MySQL]: https://www.mysql.com/
+[MariaDB]: https://mariadb.org/
diff --git a/docs/content/en/configuration/storage/postgres.md b/docs/content/en/configuration/storage/postgres.md
index 97aa701ef..d888640d5 100644
--- a/docs/content/en/configuration/storage/postgres.md
+++ b/docs/content/en/configuration/storage/postgres.md
@@ -16,10 +16,10 @@ aliases:
 
 ## Version support
 
-See [PostgreSQL support](https://www.postgresql.org/support/versioning/) for the versions supported by PostgreSQL. We
-recommend the *current minor* version of one of the versions supported by PostgreSQL.
+See [PostgreSQL support](https://www.postgresql.org/support/versioning/) for the versions supported by [PostgreSQL]. We
+recommend the *current minor* version of one of the versions supported by [PostgreSQL].
 
-The versions of PostgreSQL that should be supported by Authelia are:
+The versions of [PostgreSQL] that should be supported by Authelia are:
 
 * 14
 * 13
@@ -40,11 +40,78 @@ storage:
     schema: public
     username: authelia
     password: mypassword
-    ssl:
-      mode: disable
-      root_certificate: /path/to/root_cert.pem
-      certificate: /path/to/cert.pem
-      key: /path/to/key.pem
+    tls:
+      server_name: psotgres.example.com
+      skip_verify: false
+      minimum_version: TLS1.2
+      maximum_version: TLS1.3
+      certificate_chain: |
+        -----BEGIN CERTIFICATE-----
+        MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+        -----BEGIN CERTIFICATE-----
+        MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        qocikt3WAdU^invalid DO NOT USE=
+        -----END CERTIFICATE-----
+      private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        DO NOT USE==
+        -----END RSA PRIVATE KEY-----
 ```
 
 ## Options
@@ -67,7 +134,7 @@ storage:
     host: "[fd00:1111:2222:3333::1]"
 ```
 
-If utilizing a unix socket it must have the `unix:` prefix:
+If utilizing a unix socket it must have the `/` prefix:
 
 ```yaml
 storage:
@@ -120,32 +187,9 @@ characters and the user password is changed to this value.
 
 The SQL connection timeout.
 
-### ssl
+### tls
 
-#### mode
+If defined enables connecting to [PostgreSQL] over a TLS socket, and additionally controls the TLS connection
+validation process. You can see how to configure the tls section [here](../prologue/common.md#tls-configuration).
 
-{{< confkey type="string" default="disable" required="no" >}}
-
-SSL mode configures how to handle SSL connections with Postgres.
-Valid options are 'disable', 'require', 'verify-ca', or 'verify-full'.
-See the [PostgreSQL Documentation](https://www.postgresql.org/docs/12/libpq-ssl.html)
-or [pgx - PostgreSQL Driver and Toolkit Documentation](https://pkg.go.dev/github.com/jackc/pgx?tab=doc)
-for more information.
-
-#### root_certificate
-
-{{< confkey type="string" required="no" >}}
-
-The optional location of the root certificate file encoded in the PEM format for validation purposes.
-
-#### certificate
-
-{{< confkey type="string" required="no" >}}
-
-The optional location of the certificate file encoded in the PEM format for validation purposes.
-
-#### key
-
-{{< confkey type="string" required="no" >}}
-
-The optional location of the key file encoded in the PEM format for authentication purposes.
+[PostgreSQL]: https://www.postgresql.org/
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index 3f0938209..ea96acbf1 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.maximum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.tls.private_key","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_PRIVATE_KEY_FILE"},{"path":"authentication_backend.ldap.tls.certificate_chain","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_CERTIFICATE_CHAIN"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.maximum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MAXIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.tls.private_key","secret":true,"env":"AUTHELIA_SESSION_REDIS_TLS_PRIVATE_KEY_FILE"},{"path":"session.redis.tls.certificate_chain","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_CERTIFICATE_CHAIN"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.maximum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MAXIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.smtp.tls.private_key","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_PRIVATE_KEY_FILE"},{"path":"notifier.smtp.tls.certificate_chain","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_CERTIFICATE_CHAIN"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.maximum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.tls.private_key","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_PRIVATE_KEY_FILE"},{"path":"authentication_backend.ldap.tls.certificate_chain","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_CERTIFICATE_CHAIN"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.maximum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MAXIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.tls.private_key","secret":true,"env":"AUTHELIA_SESSION_REDIS_TLS_PRIVATE_KEY_FILE"},{"path":"session.redis.tls.certificate_chain","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_CERTIFICATE_CHAIN"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.mysql.tls.minimum_version","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_MINIMUM_VERSION"},{"path":"storage.mysql.tls.maximum_version","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_MAXIMUM_VERSION"},{"path":"storage.mysql.tls.skip_verify","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_SKIP_VERIFY"},{"path":"storage.mysql.tls.server_name","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_SERVER_NAME"},{"path":"storage.mysql.tls.private_key","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_TLS_PRIVATE_KEY_FILE"},{"path":"storage.mysql.tls.certificate_chain","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_CERTIFICATE_CHAIN"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.tls.minimum_version","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_MINIMUM_VERSION"},{"path":"storage.postgres.tls.maximum_version","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_MAXIMUM_VERSION"},{"path":"storage.postgres.tls.skip_verify","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_SKIP_VERIFY"},{"path":"storage.postgres.tls.server_name","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_SERVER_NAME"},{"path":"storage.postgres.tls.private_key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_PRIVATE_KEY_FILE"},{"path":"storage.postgres.tls.certificate_chain","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_CERTIFICATE_CHAIN"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.maximum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MAXIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.smtp.tls.private_key","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_PRIVATE_KEY_FILE"},{"path":"notifier.smtp.tls.certificate_chain","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_CERTIFICATE_CHAIN"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 4531e0138..89c45d675 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -304,18 +304,22 @@ authentication_backend:
     # start_tls: false
 
     # tls:
-      ## Server Name for certificate validation (in case it's not set correctly in the URL).
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host portion of the url option.
       # server_name: ldap.example.com
 
-      ## Skip verifying the server certificate (to allow a self-signed certificate).
-      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
-      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
       # skip_verify: false
 
-      ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
+      ## Minimum TLS version for the connection.
       # minimum_version: TLS1.2
 
-      ## Maximum TLS version for either Secure LDAP or LDAP StartTLS.
+      ## Maximum TLS version for the connection.
       # maximum_version: TLS1.3
 
       ## The certificate chain used with the private_key if the server requests TLS Client Authentication
@@ -717,12 +721,16 @@ session:
 
     ## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
     # tls:
-      ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
       # server_name: myredis.example.com
 
-      ## Skip verifying the server certificate (to allow a self-signed certificate).
-      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
-      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
       # skip_verify: false
 
       ## Minimum TLS version for the connection.
@@ -882,6 +890,99 @@ regulation:
     # password: mypassword
     # timeout: 5s
 
+    ## MySQL TLS settings. Configuring this requires TLS.
+    # tls:
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
+      # server_name: mysql.example.com
+
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
+      # skip_verify: false
+
+      ## Minimum TLS version for the connection.
+      # minimum_version: TLS1.2
+
+      ## Maximum TLS version for the connection.
+      # maximum_version: TLS1.3
+
+        ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+        ## i.e. Mutual TLS.
+        # certificate_chain: |
+          # -----BEGIN CERTIFICATE-----
+          # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+          # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+          # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+          # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+          # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+          # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+          # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+          # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+          # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+          # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+          # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+          # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+          # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+          # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+          # -----END CERTIFICATE-----
+          # -----BEGIN CERTIFICATE-----
+          # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+          # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+          # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+          # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+          # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+          # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+          # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+          # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+          # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+          # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+          # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+          # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+          # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+          # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+          # qocikt3WAdU^invalid DO NOT USE=
+          # -----END CERTIFICATE-----
+
+        ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+        ## i.e. Mutual TLS.
+        # private_key: |
+          #  -----BEGIN RSA PRIVATE KEY-----
+          # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+          # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+          # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+          # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+          # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+          # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+          # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+          # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+          # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+          # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+          # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+          # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+          # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+          # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+          # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+          # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+          # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+          # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+          # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+          # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+          # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+          # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+          # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+          # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+          # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+          # DO NOT USE==
+          # -----END RSA PRIVATE KEY-----
+
   ##
   ## PostgreSQL (Storage Provider)
   ##
@@ -894,11 +995,99 @@ regulation:
     ## Password can also be set using a secret: https://www.authelia.com/c/secrets
     # password: mypassword
     # timeout: 5s
-    # ssl:
-      # mode: disable
-      # root_certificate: disable
-      # certificate: disable
-      # key: disable
+
+    ## PostgreSQL TLS settings. Configuring this requires TLS.
+    # tls:
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
+      # server_name: postgres.example.com
+
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
+      # skip_verify: false
+
+      ## Minimum TLS version for the connection.
+      # minimum_version: TLS1.2
+
+      ## Maximum TLS version for the connection.
+      # maximum_version: TLS1.3
+
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
 ##
 ## Notification Provider
@@ -966,18 +1155,22 @@ notifier:
     # disable_html_emails: false
 
     # tls:
-      ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
+      ## The server subject name to check the servers certificate against during the validation process.
+      ## This option is not required if the certificate has a SAN which matches the host option.
       # server_name: smtp.example.com
 
-      ## Skip verifying the server certificate (to allow a self-signed certificate).
-      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
-      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      ## Skip verifying the server certificate entirely. In preference to setting this we strongly recommend you add the
+      ## certificate or the certificate of the authority signing the certificate to the certificates directory which is
+      ## defined by the `certificates_directory` option at the top of the configuration.
+      ## It's important to note the public key should be added to the directory, not the private key.
+      ## This option is strongly discouraged but may be useful in some self-signed situations where validation is not
+      ## important to the administrator.
       # skip_verify: false
 
-      ## Minimum TLS version for either StartTLS or SMTPS.
+      ## Minimum TLS version for the connection.
       # minimum_version: TLS1.2
 
-      ## Maximum TLS version for either StartTLS or SMTPS.
+      ## Maximum TLS version for the connection.
       # maximum_version: TLS1.3
 
       ## The certificate chain used with the private_key if the server requests TLS Client Authentication
diff --git a/internal/configuration/schema/keys.go b/internal/configuration/schema/keys.go
index 283d4e692..bcd577f39 100644
--- a/internal/configuration/schema/keys.go
+++ b/internal/configuration/schema/keys.go
@@ -174,6 +174,12 @@ var Keys = []string{
 	"storage.mysql.username",
 	"storage.mysql.password",
 	"storage.mysql.timeout",
+	"storage.mysql.tls.minimum_version",
+	"storage.mysql.tls.maximum_version",
+	"storage.mysql.tls.skip_verify",
+	"storage.mysql.tls.server_name",
+	"storage.mysql.tls.private_key",
+	"storage.mysql.tls.certificate_chain",
 	"storage.postgres.host",
 	"storage.postgres.port",
 	"storage.postgres.database",
@@ -181,6 +187,12 @@ var Keys = []string{
 	"storage.postgres.password",
 	"storage.postgres.timeout",
 	"storage.postgres.schema",
+	"storage.postgres.tls.minimum_version",
+	"storage.postgres.tls.maximum_version",
+	"storage.postgres.tls.skip_verify",
+	"storage.postgres.tls.server_name",
+	"storage.postgres.tls.private_key",
+	"storage.postgres.tls.certificate_chain",
 	"storage.postgres.ssl.mode",
 	"storage.postgres.ssl.root_certificate",
 	"storage.postgres.ssl.certificate",
diff --git a/internal/configuration/schema/storage.go b/internal/configuration/schema/storage.go
index de4eae7bb..d8eb93808 100644
--- a/internal/configuration/schema/storage.go
+++ b/internal/configuration/schema/storage.go
@@ -1,6 +1,9 @@
 package schema
 
-import "time"
+import (
+	"crypto/tls"
+	"time"
+)
 
 // LocalStorageConfiguration represents the configuration when using local storage.
 type LocalStorageConfiguration struct {
@@ -20,6 +23,8 @@ type SQLStorageConfiguration struct {
 // MySQLStorageConfiguration represents the configuration of a MySQL database.
 type MySQLStorageConfiguration struct {
 	SQLStorageConfiguration `koanf:",squash"`
+
+	TLS *TLSConfig `koanf:"tls"`
 }
 
 // PostgreSQLStorageConfiguration represents the configuration of a PostgreSQL database.
@@ -27,7 +32,9 @@ type PostgreSQLStorageConfiguration struct {
 	SQLStorageConfiguration `koanf:",squash"`
 	Schema                  string `koanf:"schema"`
 
-	SSL PostgreSQLSSLStorageConfiguration `koanf:"ssl"`
+	TLS *TLSConfig `koanf:"tls"`
+
+	SSL *PostgreSQLSSLStorageConfiguration `koanf:"ssl"`
 }
 
 // PostgreSQLSSLStorageConfiguration represents the SSL configuration of a PostgreSQL database.
@@ -52,10 +59,20 @@ var DefaultSQLStorageConfiguration = SQLStorageConfiguration{
 	Timeout: 5 * time.Second,
 }
 
+// DefaultMySQLStorageConfiguration represents the default MySQL configuration.
+var DefaultMySQLStorageConfiguration = MySQLStorageConfiguration{
+	TLS: &TLSConfig{
+		MinimumVersion: TLSVersion{tls.VersionTLS12},
+	},
+}
+
 // DefaultPostgreSQLStorageConfiguration represents the default PostgreSQL configuration.
 var DefaultPostgreSQLStorageConfiguration = PostgreSQLStorageConfiguration{
 	Schema: "public",
-	SSL: PostgreSQLSSLStorageConfiguration{
+	TLS: &TLSConfig{
+		MinimumVersion: TLSVersion{tls.VersionTLS12},
+	},
+	SSL: &PostgreSQLSSLStorageConfiguration{
 		Mode: "disable",
 	},
 }
diff --git a/internal/configuration/validator/const.go b/internal/configuration/validator/const.go
index 24c8810f5..a8b102ac7 100644
--- a/internal/configuration/validator/const.go
+++ b/internal/configuration/validator/const.go
@@ -121,12 +121,15 @@ const (
 
 // Storage Error constants.
 const (
-	errStrStorage                            = "storage: configuration for a 'local', 'mysql' or 'postgres' database must be provided"
-	errStrStorageEncryptionKeyMustBeProvided = "storage: option 'encryption_key' is required"
-	errStrStorageEncryptionKeyTooShort       = "storage: option 'encryption_key' must be 20 characters or longer"
-	errFmtStorageUserPassMustBeProvided      = "storage: %s: option 'username' and 'password' are required" //nolint:gosec
-	errFmtStorageOptionMustBeProvided        = "storage: %s: option '%s' is required"
-	errFmtStoragePostgreSQLInvalidSSLMode    = "storage: postgres: ssl: option 'mode' must be one of '%s' but it is configured as '%s'"
+	errStrStorage                                 = "storage: configuration for a 'local', 'mysql' or 'postgres' database must be provided"
+	errStrStorageEncryptionKeyMustBeProvided      = "storage: option 'encryption_key' is required"
+	errStrStorageEncryptionKeyTooShort            = "storage: option 'encryption_key' must be 20 characters or longer"
+	errFmtStorageUserPassMustBeProvided           = "storage: %s: option 'username' and 'password' are required" //nolint:gosec
+	errFmtStorageOptionMustBeProvided             = "storage: %s: option '%s' is required"
+	errFmtStorageTLSConfigInvalid                 = "storage: %s: tls: %w"
+	errFmtStoragePostgreSQLInvalidSSLMode         = "storage: postgres: ssl: option 'mode' must be one of '%s' but it is configured as '%s'"
+	errFmtStoragePostgreSQLInvalidSSLAndTLSConfig = "storage: postgres: can't define both 'tls' and 'ssl' configuration options"
+	warnFmtStoragePostgreSQLInvalidSSLDeprecated  = "storage: postgres: ssl: the ssl configuration options are deprecated and we recommend the tls options instead"
 )
 
 // Telemetry Error constants.
diff --git a/internal/configuration/validator/storage.go b/internal/configuration/validator/storage.go
index a545113bf..7172383a7 100644
--- a/internal/configuration/validator/storage.go
+++ b/internal/configuration/validator/storage.go
@@ -17,7 +17,7 @@ func ValidateStorage(config schema.StorageConfiguration, validator *schema.Struc
 
 	switch {
 	case config.MySQL != nil:
-		validateSQLConfiguration(&config.MySQL.SQLStorageConfiguration, validator, "mysql")
+		validateMySQLConfiguration(config.MySQL, validator)
 	case config.PostgreSQL != nil:
 		validatePostgreSQLConfiguration(config.PostgreSQL, validator)
 	case config.Local != nil:
@@ -49,6 +49,22 @@ func validateSQLConfiguration(config *schema.SQLStorageConfiguration, validator
 	}
 }
 
+func validateMySQLConfiguration(config *schema.MySQLStorageConfiguration, validator *schema.StructValidator) {
+	validateSQLConfiguration(&config.SQLStorageConfiguration, validator, "mysql")
+
+	if config.TLS != nil {
+		configDefaultTLS := &schema.TLSConfig{
+			ServerName:     config.Host,
+			MinimumVersion: schema.DefaultMySQLStorageConfiguration.TLS.MinimumVersion,
+			MaximumVersion: schema.DefaultMySQLStorageConfiguration.TLS.MaximumVersion,
+		}
+
+		if err := ValidateTLSConfig(config.TLS, configDefaultTLS); err != nil {
+			validator.Push(fmt.Errorf(errFmtStorageTLSConfigInvalid, "mysql", err))
+		}
+	}
+}
+
 func validatePostgreSQLConfiguration(config *schema.PostgreSQLStorageConfiguration, validator *schema.StructValidator) {
 	validateSQLConfiguration(&config.SQLStorageConfiguration, validator, "postgres")
 
@@ -56,10 +72,28 @@ func validatePostgreSQLConfiguration(config *schema.PostgreSQLStorageConfigurati
 		config.Schema = schema.DefaultPostgreSQLStorageConfiguration.Schema
 	}
 
-	if config.SSL.Mode == "" {
-		config.SSL.Mode = schema.DefaultPostgreSQLStorageConfiguration.SSL.Mode
-	} else if !utils.IsStringInSlice(config.SSL.Mode, validStoragePostgreSQLSSLModes) {
-		validator.Push(fmt.Errorf(errFmtStoragePostgreSQLInvalidSSLMode, strings.Join(validStoragePostgreSQLSSLModes, "', '"), config.SSL.Mode))
+	switch {
+	case config.TLS != nil && config.SSL != nil:
+		validator.Push(fmt.Errorf(errFmtStoragePostgreSQLInvalidSSLAndTLSConfig))
+	case config.TLS != nil:
+		configDefaultTLS := &schema.TLSConfig{
+			ServerName:     config.Host,
+			MinimumVersion: schema.DefaultPostgreSQLStorageConfiguration.TLS.MinimumVersion,
+			MaximumVersion: schema.DefaultPostgreSQLStorageConfiguration.TLS.MaximumVersion,
+		}
+
+		if err := ValidateTLSConfig(config.TLS, configDefaultTLS); err != nil {
+			validator.Push(fmt.Errorf(errFmtStorageTLSConfigInvalid, "postgres", err))
+		}
+	case config.SSL != nil:
+		validator.PushWarning(fmt.Errorf(warnFmtStoragePostgreSQLInvalidSSLDeprecated))
+
+		switch {
+		case config.SSL.Mode == "":
+			config.SSL.Mode = schema.DefaultPostgreSQLStorageConfiguration.SSL.Mode
+		case !utils.IsStringInSlice(config.SSL.Mode, validStoragePostgreSQLSSLModes):
+			validator.Push(fmt.Errorf(errFmtStoragePostgreSQLInvalidSSLMode, strings.Join(validStoragePostgreSQLSSLModes, "', '"), config.SSL.Mode))
+		}
 	}
 }
 
diff --git a/internal/configuration/validator/storage_test.go b/internal/configuration/validator/storage_test.go
index bf0d0a67c..8ac7d9dbb 100644
--- a/internal/configuration/validator/storage_test.go
+++ b/internal/configuration/validator/storage_test.go
@@ -1,6 +1,7 @@
 package validator
 
 import (
+	"crypto/tls"
 	"testing"
 
 	"github.com/stretchr/testify/suite"
@@ -79,6 +80,70 @@ func (suite *StorageSuite) TestShouldValidateMySQLHostUsernamePasswordAndDatabas
 	suite.Require().Len(suite.validator.Errors(), 0)
 }
 
+func (suite *StorageSuite) TestShouldSetDefaultMySQLTLSServerName() {
+	suite.config.MySQL = &schema.MySQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "mysql1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS12},
+		},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal(suite.config.MySQL.Host, suite.config.MySQL.TLS.ServerName)
+}
+
+func (suite *StorageSuite) TestShouldRaiseErrorOnInvalidMySQLTLSVersion() {
+	suite.config.MySQL = &schema.MySQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionSSL30}, //nolint:staticcheck
+		},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "storage: mysql: tls: option 'minimum_version' is invalid: minimum version is TLS1.0 but SSL3.0 was configured")
+}
+
+func (suite *StorageSuite) TestShouldRaiseErrorOnInvalidMySQLTLSMinVersionGreaterThanMaximum() {
+	suite.config.MySQL = &schema.MySQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS13},
+			MaximumVersion: schema.TLSVersion{Value: tls.VersionTLS11},
+		},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "storage: mysql: tls: option combination of 'minimum_version' and 'maximum_version' is invalid: minimum version TLS1.3 is greater than the maximum version TLS1.1")
+}
+
 func (suite *StorageSuite) TestShouldValidatePostgreSQLHostUsernamePasswordAndDatabaseAreProvided() {
 	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{}
 	suite.config.MySQL = nil
@@ -104,7 +169,7 @@ func (suite *StorageSuite) TestShouldValidatePostgreSQLHostUsernamePasswordAndDa
 	suite.Assert().Len(suite.validator.Errors(), 0)
 }
 
-func (suite *StorageSuite) TestShouldValidatePostgresSSLModeAndSchemaDefaults() {
+func (suite *StorageSuite) TestShouldValidatePostgresSchemaDefault() {
 	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
 		SQLStorageConfiguration: schema.SQLStorageConfiguration{
 			Host:     "db1",
@@ -119,10 +184,140 @@ func (suite *StorageSuite) TestShouldValidatePostgresSSLModeAndSchemaDefaults()
 	suite.Assert().Len(suite.validator.Warnings(), 0)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
-	suite.Assert().Equal("disable", suite.config.PostgreSQL.SSL.Mode)
+	suite.Assert().Nil(suite.config.PostgreSQL.SSL)
+	suite.Assert().Nil(suite.config.PostgreSQL.TLS)
+
 	suite.Assert().Equal("public", suite.config.PostgreSQL.Schema)
 }
 
+func (suite *StorageSuite) TestShouldValidatePostgresTLSDefaults() {
+	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Nil(suite.config.PostgreSQL.SSL)
+	suite.Require().NotNil(suite.config.PostgreSQL.TLS)
+
+	suite.Assert().Equal(uint16(tls.VersionTLS12), suite.config.PostgreSQL.TLS.MinimumVersion.Value)
+}
+
+func (suite *StorageSuite) TestShouldSetDefaultPostgreSQLTLSServerName() {
+	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "mysql1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS12},
+		},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().Equal(suite.config.PostgreSQL.Host, suite.config.PostgreSQL.TLS.ServerName)
+}
+
+func (suite *StorageSuite) TestShouldRaiseErrorOnInvalidPostgreSQLTLSVersion() {
+	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionSSL30}, //nolint:staticcheck
+		},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "storage: postgres: tls: option 'minimum_version' is invalid: minimum version is TLS1.0 but SSL3.0 was configured")
+}
+
+func (suite *StorageSuite) TestShouldRaiseErrorOnInvalidPostgreSQLMinVersionGreaterThanMaximum() {
+	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		TLS: &schema.TLSConfig{
+			MinimumVersion: schema.TLSVersion{Value: tls.VersionTLS13},
+			MaximumVersion: schema.TLSVersion{Value: tls.VersionTLS11},
+		},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "storage: postgres: tls: option combination of 'minimum_version' and 'maximum_version' is invalid: minimum version TLS1.3 is greater than the maximum version TLS1.1")
+}
+
+func (suite *StorageSuite) TestShouldValidatePostgresSSLDefaults() {
+	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		SSL: &schema.PostgreSQLSSLStorageConfiguration{},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 1)
+	suite.Assert().Len(suite.validator.Errors(), 0)
+
+	suite.Assert().NotNil(suite.config.PostgreSQL.SSL)
+	suite.Require().Nil(suite.config.PostgreSQL.TLS)
+
+	suite.Assert().Equal(schema.DefaultPostgreSQLStorageConfiguration.SSL.Mode, suite.config.PostgreSQL.SSL.Mode)
+}
+
+func (suite *StorageSuite) TestShouldRaiseErrorOnTLSAndLegacySSL() {
+	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
+		SQLStorageConfiguration: schema.SQLStorageConfiguration{
+			Host:     "db1",
+			Username: "myuser",
+			Password: "pass",
+			Database: "database",
+		},
+		SSL: &schema.PostgreSQLSSLStorageConfiguration{},
+		TLS: &schema.TLSConfig{},
+	}
+
+	ValidateStorage(suite.config, suite.validator)
+
+	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Errors(), 1)
+
+	suite.Assert().EqualError(suite.validator.Errors()[0], "storage: postgres: can't define both 'tls' and 'ssl' configuration options")
+}
+
 func (suite *StorageSuite) TestShouldValidatePostgresDefaultsDontOverrideConfiguration() {
 	suite.config.PostgreSQL = &schema.PostgreSQLStorageConfiguration{
 		SQLStorageConfiguration: schema.SQLStorageConfiguration{
@@ -132,18 +327,20 @@ func (suite *StorageSuite) TestShouldValidatePostgresDefaultsDontOverrideConfigu
 			Database: "database",
 		},
 		Schema: "authelia",
-		SSL: schema.PostgreSQLSSLStorageConfiguration{
+		SSL: &schema.PostgreSQLSSLStorageConfiguration{
 			Mode: "require",
 		},
 	}
 
 	ValidateStorage(suite.config, suite.validator)
 
-	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Require().Len(suite.validator.Warnings(), 1)
 	suite.Assert().Len(suite.validator.Errors(), 0)
 
 	suite.Assert().Equal("require", suite.config.PostgreSQL.SSL.Mode)
 	suite.Assert().Equal("authelia", suite.config.PostgreSQL.Schema)
+
+	suite.Assert().EqualError(suite.validator.Warnings()[0], "storage: postgres: ssl: the ssl configuration options are deprecated and we recommend the tls options instead")
 }
 
 func (suite *StorageSuite) TestShouldValidatePostgresSSLModeMustBeValid() {
@@ -154,14 +351,14 @@ func (suite *StorageSuite) TestShouldValidatePostgresSSLModeMustBeValid() {
 			Password: "pass",
 			Database: "database",
 		},
-		SSL: schema.PostgreSQLSSLStorageConfiguration{
+		SSL: &schema.PostgreSQLSSLStorageConfiguration{
 			Mode: "unknown",
 		},
 	}
 
 	ValidateStorage(suite.config, suite.validator)
 
-	suite.Assert().Len(suite.validator.Warnings(), 0)
+	suite.Assert().Len(suite.validator.Warnings(), 1)
 	suite.Require().Len(suite.validator.Errors(), 1)
 	suite.Assert().EqualError(suite.validator.Errors()[0], "storage: postgres: ssl: option 'mode' must be one of 'disable', 'require', 'verify-ca', 'verify-full' but it is configured as 'unknown'")
 }
diff --git a/internal/storage/sql_provider_backend_mysql.go b/internal/storage/sql_provider_backend_mysql.go
index b0382ed7d..32cc7de16 100644
--- a/internal/storage/sql_provider_backend_mysql.go
+++ b/internal/storage/sql_provider_backend_mysql.go
@@ -9,6 +9,7 @@ import (
 	"github.com/go-sql-driver/mysql"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
+	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 // MySQLProvider is a MySQL provider.
@@ -19,7 +20,7 @@ type MySQLProvider struct {
 // NewMySQLProvider a MySQL provider.
 func NewMySQLProvider(config *schema.Configuration, caCertPool *x509.CertPool) (provider *MySQLProvider) {
 	provider = &MySQLProvider{
-		SQLProvider: NewSQLProvider(config, providerMySQL, providerMySQL, dsnMySQL(config.Storage.MySQL)),
+		SQLProvider: NewSQLProvider(config, providerMySQL, providerMySQL, dsnMySQL(config.Storage.MySQL, caCertPool)),
 	}
 
 	// All providers have differing SELECT existing table statements.
@@ -31,7 +32,7 @@ func NewMySQLProvider(config *schema.Configuration, caCertPool *x509.CertPool) (
 	return provider
 }
 
-func dsnMySQL(config *schema.MySQLStorageConfiguration) (dataSourceName string) {
+func dsnMySQL(config *schema.MySQLStorageConfiguration, caCertPool *x509.CertPool) (dataSourceName string) {
 	dsnConfig := mysql.NewConfig()
 
 	switch {
@@ -46,6 +47,12 @@ func dsnMySQL(config *schema.MySQLStorageConfiguration) (dataSourceName string)
 		dsnConfig.Addr = fmt.Sprintf("%s:%d", config.Host, config.Port)
 	}
 
+	if config.TLS != nil {
+		_ = mysql.RegisterTLSConfig("storage", utils.NewTLSConfig(config.TLS, caCertPool))
+
+		dsnConfig.TLSConfig = "storage"
+	}
+
 	switch config.Port {
 	case 0:
 		dsnConfig.Addr = config.Host
diff --git a/internal/storage/sql_provider_backend_postgres.go b/internal/storage/sql_provider_backend_postgres.go
index 80f9929aa..19a14f351 100644
--- a/internal/storage/sql_provider_backend_postgres.go
+++ b/internal/storage/sql_provider_backend_postgres.go
@@ -12,6 +12,7 @@ import (
 	"github.com/jackc/pgx/v5/stdlib"
 
 	"github.com/authelia/authelia/v4/internal/configuration/schema"
+	"github.com/authelia/authelia/v4/internal/utils"
 )
 
 // PostgreSQLProvider is a PostgreSQL provider.
@@ -135,42 +136,12 @@ func NewPostgreSQLProvider(config *schema.Configuration, caCertPool *x509.CertPo
 func dsnPostgreSQL(config *schema.PostgreSQLStorageConfiguration, globalCACertPool *x509.CertPool) (dsn string) {
 	dsnConfig, _ := pgx.ParseConfig("")
 
-	ca, certs := loadPostgreSQLLegacyTLS(config)
-
-	switch config.SSL.Mode {
-	case "disable":
-		break
-	default:
-		var caCertPool *x509.CertPool
-
-		switch ca {
-		case nil:
-			caCertPool = globalCACertPool
-		default:
-			caCertPool = globalCACertPool.Clone()
-			caCertPool.AddCert(ca)
-		}
-
-		dsnConfig.TLSConfig = &tls.Config{
-			Certificates:       certs,
-			RootCAs:            caCertPool,
-			InsecureSkipVerify: true, //nolint:gosec
-		}
-
-		switch {
-		case config.SSL.Mode == "require" && config.SSL.RootCertificate != "" || config.SSL.Mode == "verify-ca":
-			dsnConfig.TLSConfig.VerifyPeerCertificate = newPostgreSQLVerifyCAFunc(dsnConfig.TLSConfig)
-		case config.SSL.Mode == "verify-full":
-			dsnConfig.TLSConfig.InsecureSkipVerify = false
-			dsnConfig.TLSConfig.ServerName = config.Host
-		}
-	}
-
 	dsnConfig.Host = config.Host
 	dsnConfig.Port = uint16(config.Port)
 	dsnConfig.Database = config.Database
 	dsnConfig.User = config.Username
 	dsnConfig.Password = config.Password
+	dsnConfig.TLSConfig = loadPostgreSQLTLSConfig(config, globalCACertPool)
 	dsnConfig.ConnectTimeout = config.Timeout
 	dsnConfig.RuntimeParams = map[string]string{
 		"search_path": config.Schema,
@@ -183,7 +154,50 @@ func dsnPostgreSQL(config *schema.PostgreSQLStorageConfiguration, globalCACertPo
 	return stdlib.RegisterConnConfig(dsnConfig)
 }
 
-func loadPostgreSQLLegacyTLS(config *schema.PostgreSQLStorageConfiguration) (ca *x509.Certificate, certs []tls.Certificate) {
+func loadPostgreSQLTLSConfig(config *schema.PostgreSQLStorageConfiguration, globalCACertPool *x509.CertPool) (tlsConfig *tls.Config) {
+	if config.TLS == nil && config.SSL == nil {
+		return nil
+	}
+
+	if config.TLS != nil {
+		return utils.NewTLSConfig(config.TLS, globalCACertPool)
+	}
+
+	ca, certs := loadPostgreSQLLegacyTLSConfig(config)
+
+	switch config.SSL.Mode {
+	case "disable":
+		return nil
+	default:
+		var caCertPool *x509.CertPool
+
+		switch ca {
+		case nil:
+			caCertPool = globalCACertPool
+		default:
+			caCertPool = globalCACertPool.Clone()
+			caCertPool.AddCert(ca)
+		}
+
+		tlsConfig = &tls.Config{
+			Certificates:       certs,
+			RootCAs:            caCertPool,
+			InsecureSkipVerify: true, //nolint:gosec
+		}
+
+		switch {
+		case config.SSL.Mode == "require" && config.SSL.RootCertificate != "" || config.SSL.Mode == "verify-ca":
+			tlsConfig.VerifyPeerCertificate = newPostgreSQLVerifyCAFunc(tlsConfig)
+		case config.SSL.Mode == "verify-full":
+			tlsConfig.InsecureSkipVerify = false
+			tlsConfig.ServerName = config.Host
+		}
+	}
+
+	return tlsConfig
+}
+
+func loadPostgreSQLLegacyTLSConfig(config *schema.PostgreSQLStorageConfiguration) (ca *x509.Certificate, certs []tls.Certificate) {
 	var (
 		err error
 	)
diff --git a/internal/utils/crypto.go b/internal/utils/crypto.go
index e8408cee6..2e2dbab2d 100644
--- a/internal/utils/crypto.go
+++ b/internal/utils/crypto.go
@@ -235,7 +235,7 @@ func IsX509PrivateKey(i any) bool {
 }
 
 // NewTLSConfig generates a tls.Config from a schema.TLSConfig and a x509.CertPool.
-func NewTLSConfig(config *schema.TLSConfig, certPool *x509.CertPool) (tlsConfig *tls.Config) {
+func NewTLSConfig(config *schema.TLSConfig, caCertPool *x509.CertPool) (tlsConfig *tls.Config) {
 	var certificates []tls.Certificate
 
 	if config.CertificateChain.HasCertificates() && config.PrivateKey != nil {
@@ -253,7 +253,7 @@ func NewTLSConfig(config *schema.TLSConfig, certPool *x509.CertPool) (tlsConfig
 		InsecureSkipVerify: config.SkipVerify, //nolint:gosec // Informed choice by user. Off by default.
 		MinVersion:         config.MinimumVersion.MinVersion(),
 		MaxVersion:         config.MinimumVersion.MaxVersion(),
-		RootCAs:            certPool,
+		RootCAs:            caCertPool,
 		Certificates:       certificates,
 	}
 }

From 2c1250c1fdb7582004b8f36b6e4c0d1ba6023202 Mon Sep 17 00:00:00 2001
From: "allcontributors[bot]"
 <46447321+allcontributors[bot]@users.noreply.github.com>
Date: Sat, 22 Oct 2022 19:34:26 +1100
Subject: [PATCH 175/263] docs: add longerhv as a contributor for ideas, and
 code (#4232)

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 .all-contributorsrc |  10 ++
 README.md           | 217 ++++++++++++++++++++++----------------------
 2 files changed, 120 insertions(+), 107 deletions(-)

diff --git a/.all-contributorsrc b/.all-contributorsrc
index 72f97d226..5e4483c21 100644
--- a/.all-contributorsrc
+++ b/.all-contributorsrc
@@ -795,6 +795,16 @@
       "contributions": [
         "doc"
       ]
+    },
+    {
+      "login": "LongerHV",
+      "name": "Michał Mieszczak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/46924944?v=4",
+      "profile": "https://github.com/LongerHV",
+      "contributions": [
+        "ideas",
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7
diff --git a/README.md b/README.md
index b7f442ab6..af52d627d 100644
--- a/README.md
+++ b/README.md
@@ -195,113 +195,116 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
 <!-- prettier-ignore-start -->
 <!-- markdownlint-disable -->
 <table>
-  <tr>
-    <td align="center"><a href="https://github.com/clems4ever"><img src="https://avatars.githubusercontent.com/u/3193257?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Clément Michaud</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=clems4ever" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=clems4ever" title="Documentation">📖</a> <a href="#ideas-clems4ever" title="Ideas, Planning, & Feedback">🤔</a> <a href="#maintenance-clems4ever" title="Maintenance">🚧</a> <a href="#question-clems4ever" title="Answering Questions">💬</a> <a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3Aclems4ever" title="Reviewed Pull Requests">👀</a> <a href="https://github.com/authelia/authelia/commits?author=clems4ever" title="Tests">⚠️</a></td>
-    <td align="center"><a href="https://github.com/nightah"><img src="https://avatars.githubusercontent.com/u/3339418?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Amir Zarrinkafsh</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=nightah" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=nightah" title="Documentation">📖</a> <a href="#ideas-nightah" title="Ideas, Planning, & Feedback">🤔</a> <a href="#maintenance-nightah" title="Maintenance">🚧</a> <a href="#question-nightah" title="Answering Questions">💬</a> <a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3Anightah" title="Reviewed Pull Requests">👀</a> <a href="https://github.com/authelia/authelia/commits?author=nightah" title="Tests">⚠️</a></td>
-    <td align="center"><a href="https://github.com/james-d-elliott"><img src="https://avatars.githubusercontent.com/u/3903683?v=4?s=100" width="100px;" alt=""/><br /><sub><b>James Elliott</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=james-d-elliott" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=james-d-elliott" title="Documentation">📖</a> <a href="#ideas-james-d-elliott" title="Ideas, Planning, & Feedback">🤔</a> <a href="#maintenance-james-d-elliott" title="Maintenance">🚧</a> <a href="#question-james-d-elliott" title="Answering Questions">💬</a> <a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3Ajames-d-elliott" title="Reviewed Pull Requests">👀</a> <a href="https://github.com/authelia/authelia/commits?author=james-d-elliott" title="Tests">⚠️</a></td>
-    <td align="center"><a href="https://github.com/n4kre"><img src="https://avatars.githubusercontent.com/u/14371127?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Antoine Favre</b></sub></a><br /><a href="https://github.com/authelia/authelia/issues?q=author%3An4kre" title="Bug reports">🐛</a> <a href="#ideas-n4kre" title="Ideas, Planning, & Feedback">🤔</a></td>
-    <td align="center"><a href="https://github.com/BankaiNoJutsu"><img src="https://avatars.githubusercontent.com/u/2241519?v=4?s=100" width="100px;" alt=""/><br /><sub><b>BankaiNoJutsu</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=BankaiNoJutsu" title="Code">💻</a> <a href="#design-BankaiNoJutsu" title="Design">🎨</a></td>
-    <td align="center"><a href="https://github.com/p-rintz"><img src="https://avatars.githubusercontent.com/u/13933258?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Philipp Rintz</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=p-rintz" title="Documentation">📖</a></td>
-    <td align="center"><a href="http://callanbryant.co.uk/"><img src="https://avatars.githubusercontent.com/u/208440?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Callan Bryant</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=naggie" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=naggie" title="Documentation">📖</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/ViViDboarder"><img src="https://avatars.githubusercontent.com/u/137025?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ian</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ViViDboarder" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/FrozenDragoon"><img src="https://avatars.githubusercontent.com/u/5301673?v=4?s=100" width="100px;" alt=""/><br /><sub><b>FrozenDragoon</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=FrozenDragoon" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/vdot0x23"><img src="https://avatars.githubusercontent.com/u/40716069?v=4?s=100" width="100px;" alt=""/><br /><sub><b>vdot0x23</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=vdot0x23" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/alexw1982"><img src="https://avatars.githubusercontent.com/u/11628284?v=4?s=100" width="100px;" alt=""/><br /><sub><b>alexw1982</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=alexw1982" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/Sohalt"><img src="https://avatars.githubusercontent.com/u/2157287?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sohalt</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Sohalt" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=Sohalt" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/Tedyst"><img src="https://avatars.githubusercontent.com/u/13637623?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Stoica Tedy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Tedyst" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/Chemsmith"><img src="https://avatars.githubusercontent.com/u/9061024?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dylan Smith</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Chemsmith" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/LukasK13"><img src="https://avatars.githubusercontent.com/u/24586740?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Lukas Klass</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=LukasK13" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://staiger.it/"><img src="https://avatars.githubusercontent.com/u/9325003?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Philipp Staiger</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=lippl" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=lippl" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=lippl" title="Tests">⚠️</a></td>
-    <td align="center"><a href="https://yaleman.org/"><img src="https://avatars.githubusercontent.com/u/168188?v=4?s=100" width="100px;" alt=""/><br /><sub><b>James Hodgkinson</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=yaleman" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://chris.smith.xyz/"><img src="https://avatars.githubusercontent.com/u/1979423?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Chris Smith</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=chris13524" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/mqmq0"><img src="https://avatars.githubusercontent.com/u/13240971?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Mihály</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=mqmq0" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://iret.xyz/"><img src="https://avatars.githubusercontent.com/u/6560655?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Silver Bullet</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=SilverBut" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/skenmy"><img src="https://avatars.githubusercontent.com/u/1454505?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Paul Williams</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=skenmy" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=skenmy" title="Tests">⚠️</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/ntimo"><img src="https://avatars.githubusercontent.com/u/6145026?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Timo</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ntimo" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/andrewkliskey"><img src="https://avatars.githubusercontent.com/u/44645768?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Andrew Kliskey</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=andrewkliskey" title="Documentation">📖</a></td>
-    <td align="center"><a href="http://kristofmattei.be/"><img src="https://avatars.githubusercontent.com/u/864376?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Kristof Mattei</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Kristof-Mattei" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://www.zmiguel.me/"><img src="https://avatars.githubusercontent.com/u/4400540?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ZMiguel Valdiviesso</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=zmiguel" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/akusei"><img src="https://avatars.githubusercontent.com/u/12972900?v=4?s=100" width="100px;" alt=""/><br /><sub><b>akusei</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=akusei" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=akusei" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/Peaches491"><img src="https://avatars.githubusercontent.com/u/494334?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Daniel Miller</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Peaches491" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/dustins"><img src="https://avatars.githubusercontent.com/u/14645?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dustin Sweigart</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dustins" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=dustins" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=dustins" title="Tests">⚠️</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/rogue780"><img src="https://avatars.githubusercontent.com/u/247716?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Shawn Haggard</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=rogue780" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=rogue780" title="Tests">⚠️</a></td>
-    <td align="center"><a href="https://github.com/kevynb"><img src="https://avatars.githubusercontent.com/u/4941215?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Kevyn Bruyere</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=kevynb" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/ducksecops"><img src="https://avatars.githubusercontent.com/u/25612094?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Daniel Sutton</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ducksecops" title="Code">💻</a></td>
-    <td align="center"><a href="http://www.xenuser.org/"><img src="https://avatars.githubusercontent.com/u/2216868?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Valentin Höbel</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=xenuser" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/thehedgefrog"><img src="https://avatars.githubusercontent.com/u/38590447?v=4?s=100" width="100px;" alt=""/><br /><sub><b>thehedgefrog</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=thehedgefrog" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/ViRb3"><img src="https://avatars.githubusercontent.com/u/2650170?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Victor</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ViRb3" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/whiskerch"><img src="https://avatars.githubusercontent.com/u/35109315?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Chris Whisker</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=whiskerch" title="Documentation">📖</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/nasatome"><img src="https://avatars.githubusercontent.com/u/18271791?v=4?s=100" width="100px;" alt=""/><br /><sub><b>nasatome</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=nasatome" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/bbros-dev"><img src="https://avatars.githubusercontent.com/u/60454087?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Begley Brothers (Development)</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=bbros-dev" title="Documentation">📖</a></td>
-    <td align="center"><a href="http://mikekusold.com/"><img src="https://avatars.githubusercontent.com/u/509966?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Mike Kusold</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=kusold" title="Code">💻</a></td>
-    <td align="center"><a href="https://dzervas.gr/"><img src="https://avatars.githubusercontent.com/u/1029195?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dimitris Zervas</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dzervas" title="Documentation">📖</a></td>
-    <td align="center"><a href="http://paypal.me/DHoung"><img src="https://avatars.githubusercontent.com/u/52870424?v=4?s=100" width="100px;" alt=""/><br /><sub><b>TheCatLady</b></sub></a><br /><a href="#ideas-TheCatLady" title="Ideas, Planning, & Feedback">🤔</a></td>
-    <td align="center"><a href="https://lauri.vosandi.com/"><img src="https://avatars.githubusercontent.com/u/194685?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Lauri Võsandi</b></sub></a><br /><a href="#ideas-laurivosandi" title="Ideas, Planning, & Feedback">🤔</a></td>
-    <td align="center"><a href="https://github.com/knnnrd"><img src="https://avatars.githubusercontent.com/u/5852381?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Kennard Vermeiren</b></sub></a><br /><a href="#ideas-knnnrd" title="Ideas, Planning, & Feedback">🤔</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/ThinkChaos"><img src="https://avatars.githubusercontent.com/u/4761135?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ThinkChaos</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ThinkChaos" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=ThinkChaos" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=ThinkChaos" title="Tests">⚠️</a></td>
-    <td align="center"><a href="https://github.com/except"><img src="https://avatars.githubusercontent.com/u/26675576?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Hasan</b></sub></a><br /><a href="#security-except" title="Security">🛡️</a></td>
-    <td align="center"><a href="http://blog.dchidell.com"><img src="https://avatars.githubusercontent.com/u/26146619?v=4?s=100" width="100px;" alt=""/><br /><sub><b>David Chidell</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dchidell" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/mardom1"><img src="https://avatars.githubusercontent.com/u/32371724?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Marcel Marquardt</b></sub></a><br /><a href="https://github.com/authelia/authelia/issues?q=author%3Amardom1" title="Bug reports">🐛</a></td>
-    <td align="center"><a href="https://cdine.org"><img src="https://avatars.githubusercontent.com/u/127512?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ian Gallagher</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=craSH" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://wuhanstudio.cc"><img src="https://avatars.githubusercontent.com/u/15157070?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Wu Han</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=wuhanstudio" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/lavih"><img src="https://avatars.githubusercontent.com/u/47455309?v=4?s=100" width="100px;" alt=""/><br /><sub><b>lavih</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=lavih" title="Documentation">📖</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="http://jonbayl"><img src="https://avatars.githubusercontent.com/u/30201351?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jon B. </b></sub></a><br /><a href="#security-jonbayl" title="Security">🛡️</a></td>
-    <td align="center"><a href="https://github.com/AlexGustafsson"><img src="https://avatars.githubusercontent.com/u/14974112?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alex Gustafsson</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=AlexGustafsson" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=AlexGustafsson" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://www.aarsen.me/"><img src="https://avatars.githubusercontent.com/u/7805050?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Arsenović Arsen</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ArsenArsen" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=ArsenArsen" title="Tests">⚠️</a> <a href="#security-ArsenArsen" title="Security">🛡️</a></td>
-    <td align="center"><a href="https://github.com/dakriy"><img src="https://avatars.githubusercontent.com/u/13756065?v=4?s=100" width="100px;" alt=""/><br /><sub><b>dakriy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dakriy" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/davama"><img src="https://avatars.githubusercontent.com/u/5359152?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dave</b></sub></a><br /><a href="#userTesting-davama" title="User Testing">📓</a></td>
-    <td align="center"><a href="https://github.com/nreymundo"><img src="https://avatars.githubusercontent.com/u/5833447?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Nicolas Reymundo</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=nreymundo" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/polandy"><img src="https://avatars.githubusercontent.com/u/3670670?v=4?s=100" width="100px;" alt=""/><br /><sub><b>polandy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=polandy" title="Documentation">📖</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/you1996"><img src="https://avatars.githubusercontent.com/u/45292366?v=4?s=100" width="100px;" alt=""/><br /><sub><b>yossbg</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=you1996" title="Code">💻</a> <a href="#design-you1996" title="Design">🎨</a></td>
-    <td align="center"><a href="https://github.com/mpdcampbell"><img src="https://avatars.githubusercontent.com/u/47434940?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Michael Campbell</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=mpdcampbell" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://sievenpiper.co"><img src="https://avatars.githubusercontent.com/u/1131882?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Justin Sievenpiper</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=jsievenpiper" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/kaysond"><img src="https://avatars.githubusercontent.com/u/1147328?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Aram Akhavan</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=kaysond" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://skhuf.net"><img src="https://avatars.githubusercontent.com/u/286341?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Shadow</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=shadow7412" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/tarioch"><img src="https://avatars.githubusercontent.com/u/2998148?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Patrick Ruckstuhl</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=tarioch" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/FineWolf"><img src="https://avatars.githubusercontent.com/u/203591?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Andrew Moore</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=FineWolf" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=FineWolf" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=FineWolf" title="Tests">⚠️</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="http://www.dennisgaida.de"><img src="https://avatars.githubusercontent.com/u/2392217?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dennis Gaida</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=DennisGaida" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/Alestrix"><img src="https://avatars.githubusercontent.com/u/7452860?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alestrix</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Alestrix" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/bgh-github"><img src="https://avatars.githubusercontent.com/u/99472455?v=4?s=100" width="100px;" alt=""/><br /><sub><b>bgh-github</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=bgh-github" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/mind-ar"><img src="https://avatars.githubusercontent.com/u/10672208?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Manuel Nuñez</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=mind-ar" title="Code">💻</a> <a href="#translation-mind-ar" title="Translation">🌍</a></td>
-    <td align="center"><a href="https://github.com/protvis74"><img src="https://avatars.githubusercontent.com/u/50554836?v=4?s=100" width="100px;" alt=""/><br /><sub><b>protvis74</b></sub></a><br /><a href="#translation-protvis74" title="Translation">🌍</a></td>
-    <td align="center"><a href="http://itjamie.com"><img src="https://avatars.githubusercontent.com/u/1613241?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jamie (Bear) Murphy </b></sub></a><br /><a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3AITJamie" title="Reviewed Pull Requests">👀</a></td>
-    <td align="center"><a href="https://github.com/Beanow"><img src="https://avatars.githubusercontent.com/u/497556?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Robin van Boven</b></sub></a><br /><a href="#security-Beanow" title="Security">🛡️</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="http://www.cybertrol.com"><img src="https://avatars.githubusercontent.com/u/1178293?v=4?s=100" width="100px;" alt=""/><br /><sub><b>alphabet5</b></sub></a><br /><a href="#ideas-alphabet5" title="Ideas, Planning, & Feedback">🤔</a></td>
-    <td align="center"><a href="https://github.com/rjmidau"><img src="https://avatars.githubusercontent.com/u/8134995?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Robert Meredith</b></sub></a><br /><a href="#ideas-rjmidau" title="Ideas, Planning, & Feedback">🤔</a></td>
-    <td align="center"><a href="https://github.com/adriang-90"><img src="https://avatars.githubusercontent.com/u/60886162?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Adrian Gąsior</b></sub></a><br /><a href="#security-adriang-90" title="Security">🛡️</a></td>
-    <td align="center"><a href="http://jamesw.link/me"><img src="https://avatars.githubusercontent.com/u/8067792?v=4?s=100" width="100px;" alt=""/><br /><sub><b>James White</b></sub></a><br /><a href="#question-jamesmacwhite" title="Answering Questions">💬</a></td>
-    <td align="center"><a href="https://www.zxlim.xyz"><img src="https://avatars.githubusercontent.com/u/19372079?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Zhao Xiang Lim</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=zxlim" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/Auzborn123"><img src="https://avatars.githubusercontent.com/u/42992103?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Auzborn123</b></sub></a><br /><a href="#translation-Auzborn123" title="Translation">🌍</a></td>
-    <td align="center"><a href="https://github.com/SvanGlan"><img src="https://avatars.githubusercontent.com/u/106152205?v=4?s=100" width="100px;" alt=""/><br /><sub><b>SvanGlan</b></sub></a><br /><a href="#translation-SvanGlan" title="Translation">🌍</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/HannesJo0139"><img src="https://avatars.githubusercontent.com/u/42114183?v=4?s=100" width="100px;" alt=""/><br /><sub><b>HannesJo0139</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=HannesJo0139" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/andreas-berg"><img src="https://avatars.githubusercontent.com/u/39428693?v=4?s=100" width="100px;" alt=""/><br /><sub><b>andreas-berg</b></sub></a><br /><a href="https://github.com/authelia/authelia/issues?q=author%3Aandreas-berg" title="Bug reports">🐛</a></td>
-    <td align="center"><a href="http://radenac.me"><img src="https://avatars.githubusercontent.com/u/47008408?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Clément Radenac</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=clem3109" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/boomam"><img src="https://avatars.githubusercontent.com/u/37086258?v=4?s=100" width="100px;" alt=""/><br /><sub><b>boomam</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=boomam" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/Northguy"><img src="https://avatars.githubusercontent.com/u/1189058?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Northguy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Northguy" title="Documentation">📖</a></td>
-    <td align="center"><a href="https://github.com/polarathene"><img src="https://avatars.githubusercontent.com/u/5098581?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Brennan Kinney</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=polarathene" title="Documentation">📖</a></td>
-  </tr>
+  <tbody>
+    <tr>
+      <td align="center"><a href="https://github.com/clems4ever"><img src="https://avatars.githubusercontent.com/u/3193257?v=4?s=100" width="100px;" alt="Clément Michaud"/><br /><sub><b>Clément Michaud</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=clems4ever" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=clems4ever" title="Documentation">📖</a> <a href="#ideas-clems4ever" title="Ideas, Planning, & Feedback">🤔</a> <a href="#maintenance-clems4ever" title="Maintenance">🚧</a> <a href="#question-clems4ever" title="Answering Questions">💬</a> <a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3Aclems4ever" title="Reviewed Pull Requests">👀</a> <a href="https://github.com/authelia/authelia/commits?author=clems4ever" title="Tests">⚠️</a></td>
+      <td align="center"><a href="https://github.com/nightah"><img src="https://avatars.githubusercontent.com/u/3339418?v=4?s=100" width="100px;" alt="Amir Zarrinkafsh"/><br /><sub><b>Amir Zarrinkafsh</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=nightah" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=nightah" title="Documentation">📖</a> <a href="#ideas-nightah" title="Ideas, Planning, & Feedback">🤔</a> <a href="#maintenance-nightah" title="Maintenance">🚧</a> <a href="#question-nightah" title="Answering Questions">💬</a> <a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3Anightah" title="Reviewed Pull Requests">👀</a> <a href="https://github.com/authelia/authelia/commits?author=nightah" title="Tests">⚠️</a></td>
+      <td align="center"><a href="https://github.com/james-d-elliott"><img src="https://avatars.githubusercontent.com/u/3903683?v=4?s=100" width="100px;" alt="James Elliott"/><br /><sub><b>James Elliott</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=james-d-elliott" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=james-d-elliott" title="Documentation">📖</a> <a href="#ideas-james-d-elliott" title="Ideas, Planning, & Feedback">🤔</a> <a href="#maintenance-james-d-elliott" title="Maintenance">🚧</a> <a href="#question-james-d-elliott" title="Answering Questions">💬</a> <a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3Ajames-d-elliott" title="Reviewed Pull Requests">👀</a> <a href="https://github.com/authelia/authelia/commits?author=james-d-elliott" title="Tests">⚠️</a></td>
+      <td align="center"><a href="https://github.com/n4kre"><img src="https://avatars.githubusercontent.com/u/14371127?v=4?s=100" width="100px;" alt="Antoine Favre"/><br /><sub><b>Antoine Favre</b></sub></a><br /><a href="https://github.com/authelia/authelia/issues?q=author%3An4kre" title="Bug reports">🐛</a> <a href="#ideas-n4kre" title="Ideas, Planning, & Feedback">🤔</a></td>
+      <td align="center"><a href="https://github.com/BankaiNoJutsu"><img src="https://avatars.githubusercontent.com/u/2241519?v=4?s=100" width="100px;" alt="BankaiNoJutsu"/><br /><sub><b>BankaiNoJutsu</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=BankaiNoJutsu" title="Code">💻</a> <a href="#design-BankaiNoJutsu" title="Design">🎨</a></td>
+      <td align="center"><a href="https://github.com/p-rintz"><img src="https://avatars.githubusercontent.com/u/13933258?v=4?s=100" width="100px;" alt="Philipp Rintz"/><br /><sub><b>Philipp Rintz</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=p-rintz" title="Documentation">📖</a></td>
+      <td align="center"><a href="http://callanbryant.co.uk/"><img src="https://avatars.githubusercontent.com/u/208440?v=4?s=100" width="100px;" alt="Callan Bryant"/><br /><sub><b>Callan Bryant</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=naggie" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=naggie" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/ViViDboarder"><img src="https://avatars.githubusercontent.com/u/137025?v=4?s=100" width="100px;" alt="Ian"/><br /><sub><b>Ian</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ViViDboarder" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/FrozenDragoon"><img src="https://avatars.githubusercontent.com/u/5301673?v=4?s=100" width="100px;" alt="FrozenDragoon"/><br /><sub><b>FrozenDragoon</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=FrozenDragoon" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/vdot0x23"><img src="https://avatars.githubusercontent.com/u/40716069?v=4?s=100" width="100px;" alt="vdot0x23"/><br /><sub><b>vdot0x23</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=vdot0x23" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/alexw1982"><img src="https://avatars.githubusercontent.com/u/11628284?v=4?s=100" width="100px;" alt="alexw1982"/><br /><sub><b>alexw1982</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=alexw1982" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/Sohalt"><img src="https://avatars.githubusercontent.com/u/2157287?v=4?s=100" width="100px;" alt="Sohalt"/><br /><sub><b>Sohalt</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Sohalt" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=Sohalt" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/Tedyst"><img src="https://avatars.githubusercontent.com/u/13637623?v=4?s=100" width="100px;" alt="Stoica Tedy"/><br /><sub><b>Stoica Tedy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Tedyst" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/Chemsmith"><img src="https://avatars.githubusercontent.com/u/9061024?v=4?s=100" width="100px;" alt="Dylan Smith"/><br /><sub><b>Dylan Smith</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Chemsmith" title="Code">💻</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/LukasK13"><img src="https://avatars.githubusercontent.com/u/24586740?v=4?s=100" width="100px;" alt="Lukas Klass"/><br /><sub><b>Lukas Klass</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=LukasK13" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://staiger.it/"><img src="https://avatars.githubusercontent.com/u/9325003?v=4?s=100" width="100px;" alt="Philipp Staiger"/><br /><sub><b>Philipp Staiger</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=lippl" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=lippl" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=lippl" title="Tests">⚠️</a></td>
+      <td align="center"><a href="https://yaleman.org/"><img src="https://avatars.githubusercontent.com/u/168188?v=4?s=100" width="100px;" alt="James Hodgkinson"/><br /><sub><b>James Hodgkinson</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=yaleman" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://chris.smith.xyz/"><img src="https://avatars.githubusercontent.com/u/1979423?v=4?s=100" width="100px;" alt="Chris Smith"/><br /><sub><b>Chris Smith</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=chris13524" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/mqmq0"><img src="https://avatars.githubusercontent.com/u/13240971?v=4?s=100" width="100px;" alt="Mihály"/><br /><sub><b>Mihály</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=mqmq0" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://iret.xyz/"><img src="https://avatars.githubusercontent.com/u/6560655?v=4?s=100" width="100px;" alt="Silver Bullet"/><br /><sub><b>Silver Bullet</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=SilverBut" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/skenmy"><img src="https://avatars.githubusercontent.com/u/1454505?v=4?s=100" width="100px;" alt="Paul Williams"/><br /><sub><b>Paul Williams</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=skenmy" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=skenmy" title="Tests">⚠️</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/ntimo"><img src="https://avatars.githubusercontent.com/u/6145026?v=4?s=100" width="100px;" alt="Timo"/><br /><sub><b>Timo</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ntimo" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/andrewkliskey"><img src="https://avatars.githubusercontent.com/u/44645768?v=4?s=100" width="100px;" alt="Andrew Kliskey"/><br /><sub><b>Andrew Kliskey</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=andrewkliskey" title="Documentation">📖</a></td>
+      <td align="center"><a href="http://kristofmattei.be/"><img src="https://avatars.githubusercontent.com/u/864376?v=4?s=100" width="100px;" alt="Kristof Mattei"/><br /><sub><b>Kristof Mattei</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Kristof-Mattei" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://www.zmiguel.me/"><img src="https://avatars.githubusercontent.com/u/4400540?v=4?s=100" width="100px;" alt="ZMiguel Valdiviesso"/><br /><sub><b>ZMiguel Valdiviesso</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=zmiguel" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/akusei"><img src="https://avatars.githubusercontent.com/u/12972900?v=4?s=100" width="100px;" alt="akusei"/><br /><sub><b>akusei</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=akusei" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=akusei" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/Peaches491"><img src="https://avatars.githubusercontent.com/u/494334?v=4?s=100" width="100px;" alt="Daniel Miller"/><br /><sub><b>Daniel Miller</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Peaches491" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/dustins"><img src="https://avatars.githubusercontent.com/u/14645?v=4?s=100" width="100px;" alt="Dustin Sweigart"/><br /><sub><b>Dustin Sweigart</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dustins" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=dustins" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=dustins" title="Tests">⚠️</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/rogue780"><img src="https://avatars.githubusercontent.com/u/247716?v=4?s=100" width="100px;" alt="Shawn Haggard"/><br /><sub><b>Shawn Haggard</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=rogue780" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=rogue780" title="Tests">⚠️</a></td>
+      <td align="center"><a href="https://github.com/kevynb"><img src="https://avatars.githubusercontent.com/u/4941215?v=4?s=100" width="100px;" alt="Kevyn Bruyere"/><br /><sub><b>Kevyn Bruyere</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=kevynb" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/ducksecops"><img src="https://avatars.githubusercontent.com/u/25612094?v=4?s=100" width="100px;" alt="Daniel Sutton"/><br /><sub><b>Daniel Sutton</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ducksecops" title="Code">💻</a></td>
+      <td align="center"><a href="http://www.xenuser.org/"><img src="https://avatars.githubusercontent.com/u/2216868?v=4?s=100" width="100px;" alt="Valentin Höbel"/><br /><sub><b>Valentin Höbel</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=xenuser" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/thehedgefrog"><img src="https://avatars.githubusercontent.com/u/38590447?v=4?s=100" width="100px;" alt="thehedgefrog"/><br /><sub><b>thehedgefrog</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=thehedgefrog" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/ViRb3"><img src="https://avatars.githubusercontent.com/u/2650170?v=4?s=100" width="100px;" alt="Victor"/><br /><sub><b>Victor</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ViRb3" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/whiskerch"><img src="https://avatars.githubusercontent.com/u/35109315?v=4?s=100" width="100px;" alt="Chris Whisker"/><br /><sub><b>Chris Whisker</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=whiskerch" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/nasatome"><img src="https://avatars.githubusercontent.com/u/18271791?v=4?s=100" width="100px;" alt="nasatome"/><br /><sub><b>nasatome</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=nasatome" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/bbros-dev"><img src="https://avatars.githubusercontent.com/u/60454087?v=4?s=100" width="100px;" alt="Begley Brothers (Development)"/><br /><sub><b>Begley Brothers (Development)</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=bbros-dev" title="Documentation">📖</a></td>
+      <td align="center"><a href="http://mikekusold.com/"><img src="https://avatars.githubusercontent.com/u/509966?v=4?s=100" width="100px;" alt="Mike Kusold"/><br /><sub><b>Mike Kusold</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=kusold" title="Code">💻</a></td>
+      <td align="center"><a href="https://dzervas.gr/"><img src="https://avatars.githubusercontent.com/u/1029195?v=4?s=100" width="100px;" alt="Dimitris Zervas"/><br /><sub><b>Dimitris Zervas</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dzervas" title="Documentation">📖</a></td>
+      <td align="center"><a href="http://paypal.me/DHoung"><img src="https://avatars.githubusercontent.com/u/52870424?v=4?s=100" width="100px;" alt="TheCatLady"/><br /><sub><b>TheCatLady</b></sub></a><br /><a href="#ideas-TheCatLady" title="Ideas, Planning, & Feedback">🤔</a></td>
+      <td align="center"><a href="https://lauri.vosandi.com/"><img src="https://avatars.githubusercontent.com/u/194685?v=4?s=100" width="100px;" alt="Lauri Võsandi"/><br /><sub><b>Lauri Võsandi</b></sub></a><br /><a href="#ideas-laurivosandi" title="Ideas, Planning, & Feedback">🤔</a></td>
+      <td align="center"><a href="https://github.com/knnnrd"><img src="https://avatars.githubusercontent.com/u/5852381?v=4?s=100" width="100px;" alt="Kennard Vermeiren"/><br /><sub><b>Kennard Vermeiren</b></sub></a><br /><a href="#ideas-knnnrd" title="Ideas, Planning, & Feedback">🤔</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/ThinkChaos"><img src="https://avatars.githubusercontent.com/u/4761135?v=4?s=100" width="100px;" alt="ThinkChaos"/><br /><sub><b>ThinkChaos</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ThinkChaos" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=ThinkChaos" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=ThinkChaos" title="Tests">⚠️</a></td>
+      <td align="center"><a href="https://github.com/except"><img src="https://avatars.githubusercontent.com/u/26675576?v=4?s=100" width="100px;" alt="Hasan"/><br /><sub><b>Hasan</b></sub></a><br /><a href="#security-except" title="Security">🛡️</a></td>
+      <td align="center"><a href="http://blog.dchidell.com"><img src="https://avatars.githubusercontent.com/u/26146619?v=4?s=100" width="100px;" alt="David Chidell"/><br /><sub><b>David Chidell</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dchidell" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/mardom1"><img src="https://avatars.githubusercontent.com/u/32371724?v=4?s=100" width="100px;" alt="Marcel Marquardt"/><br /><sub><b>Marcel Marquardt</b></sub></a><br /><a href="https://github.com/authelia/authelia/issues?q=author%3Amardom1" title="Bug reports">🐛</a></td>
+      <td align="center"><a href="https://cdine.org"><img src="https://avatars.githubusercontent.com/u/127512?v=4?s=100" width="100px;" alt="Ian Gallagher"/><br /><sub><b>Ian Gallagher</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=craSH" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://wuhanstudio.cc"><img src="https://avatars.githubusercontent.com/u/15157070?v=4?s=100" width="100px;" alt="Wu Han"/><br /><sub><b>Wu Han</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=wuhanstudio" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/lavih"><img src="https://avatars.githubusercontent.com/u/47455309?v=4?s=100" width="100px;" alt="lavih"/><br /><sub><b>lavih</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=lavih" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="http://jonbayl"><img src="https://avatars.githubusercontent.com/u/30201351?v=4?s=100" width="100px;" alt="Jon B. "/><br /><sub><b>Jon B. </b></sub></a><br /><a href="#security-jonbayl" title="Security">🛡️</a></td>
+      <td align="center"><a href="https://github.com/AlexGustafsson"><img src="https://avatars.githubusercontent.com/u/14974112?v=4?s=100" width="100px;" alt="Alex Gustafsson"/><br /><sub><b>Alex Gustafsson</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=AlexGustafsson" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=AlexGustafsson" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://www.aarsen.me/"><img src="https://avatars.githubusercontent.com/u/7805050?v=4?s=100" width="100px;" alt="Arsenović Arsen"/><br /><sub><b>Arsenović Arsen</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=ArsenArsen" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=ArsenArsen" title="Tests">⚠️</a> <a href="#security-ArsenArsen" title="Security">🛡️</a></td>
+      <td align="center"><a href="https://github.com/dakriy"><img src="https://avatars.githubusercontent.com/u/13756065?v=4?s=100" width="100px;" alt="dakriy"/><br /><sub><b>dakriy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=dakriy" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/davama"><img src="https://avatars.githubusercontent.com/u/5359152?v=4?s=100" width="100px;" alt="Dave"/><br /><sub><b>Dave</b></sub></a><br /><a href="#userTesting-davama" title="User Testing">📓</a></td>
+      <td align="center"><a href="https://github.com/nreymundo"><img src="https://avatars.githubusercontent.com/u/5833447?v=4?s=100" width="100px;" alt="Nicolas Reymundo"/><br /><sub><b>Nicolas Reymundo</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=nreymundo" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/polandy"><img src="https://avatars.githubusercontent.com/u/3670670?v=4?s=100" width="100px;" alt="polandy"/><br /><sub><b>polandy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=polandy" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/you1996"><img src="https://avatars.githubusercontent.com/u/45292366?v=4?s=100" width="100px;" alt="yossbg"/><br /><sub><b>yossbg</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=you1996" title="Code">💻</a> <a href="#design-you1996" title="Design">🎨</a></td>
+      <td align="center"><a href="https://github.com/mpdcampbell"><img src="https://avatars.githubusercontent.com/u/47434940?v=4?s=100" width="100px;" alt="Michael Campbell"/><br /><sub><b>Michael Campbell</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=mpdcampbell" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://sievenpiper.co"><img src="https://avatars.githubusercontent.com/u/1131882?v=4?s=100" width="100px;" alt="Justin Sievenpiper"/><br /><sub><b>Justin Sievenpiper</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=jsievenpiper" title="Code">💻</a></td>
+      <td align="center"><a href="https://github.com/kaysond"><img src="https://avatars.githubusercontent.com/u/1147328?v=4?s=100" width="100px;" alt="Aram Akhavan"/><br /><sub><b>Aram Akhavan</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=kaysond" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://skhuf.net"><img src="https://avatars.githubusercontent.com/u/286341?v=4?s=100" width="100px;" alt="Shadow"/><br /><sub><b>Shadow</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=shadow7412" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/tarioch"><img src="https://avatars.githubusercontent.com/u/2998148?v=4?s=100" width="100px;" alt="Patrick Ruckstuhl"/><br /><sub><b>Patrick Ruckstuhl</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=tarioch" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/FineWolf"><img src="https://avatars.githubusercontent.com/u/203591?v=4?s=100" width="100px;" alt="Andrew Moore"/><br /><sub><b>Andrew Moore</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=FineWolf" title="Code">💻</a> <a href="https://github.com/authelia/authelia/commits?author=FineWolf" title="Documentation">📖</a> <a href="https://github.com/authelia/authelia/commits?author=FineWolf" title="Tests">⚠️</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="http://www.dennisgaida.de"><img src="https://avatars.githubusercontent.com/u/2392217?v=4?s=100" width="100px;" alt="Dennis Gaida"/><br /><sub><b>Dennis Gaida</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=DennisGaida" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/Alestrix"><img src="https://avatars.githubusercontent.com/u/7452860?v=4?s=100" width="100px;" alt="Alestrix"/><br /><sub><b>Alestrix</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Alestrix" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/bgh-github"><img src="https://avatars.githubusercontent.com/u/99472455?v=4?s=100" width="100px;" alt="bgh-github"/><br /><sub><b>bgh-github</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=bgh-github" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/mind-ar"><img src="https://avatars.githubusercontent.com/u/10672208?v=4?s=100" width="100px;" alt="Manuel Nuñez"/><br /><sub><b>Manuel Nuñez</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=mind-ar" title="Code">💻</a> <a href="#translation-mind-ar" title="Translation">🌍</a></td>
+      <td align="center"><a href="https://github.com/protvis74"><img src="https://avatars.githubusercontent.com/u/50554836?v=4?s=100" width="100px;" alt="protvis74"/><br /><sub><b>protvis74</b></sub></a><br /><a href="#translation-protvis74" title="Translation">🌍</a></td>
+      <td align="center"><a href="http://itjamie.com"><img src="https://avatars.githubusercontent.com/u/1613241?v=4?s=100" width="100px;" alt="Jamie (Bear) Murphy "/><br /><sub><b>Jamie (Bear) Murphy </b></sub></a><br /><a href="https://github.com/authelia/authelia/pulls?q=is%3Apr+reviewed-by%3AITJamie" title="Reviewed Pull Requests">👀</a></td>
+      <td align="center"><a href="https://github.com/Beanow"><img src="https://avatars.githubusercontent.com/u/497556?v=4?s=100" width="100px;" alt="Robin van Boven"/><br /><sub><b>Robin van Boven</b></sub></a><br /><a href="#security-Beanow" title="Security">🛡️</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="http://www.cybertrol.com"><img src="https://avatars.githubusercontent.com/u/1178293?v=4?s=100" width="100px;" alt="alphabet5"/><br /><sub><b>alphabet5</b></sub></a><br /><a href="#ideas-alphabet5" title="Ideas, Planning, & Feedback">🤔</a></td>
+      <td align="center"><a href="https://github.com/rjmidau"><img src="https://avatars.githubusercontent.com/u/8134995?v=4?s=100" width="100px;" alt="Robert Meredith"/><br /><sub><b>Robert Meredith</b></sub></a><br /><a href="#ideas-rjmidau" title="Ideas, Planning, & Feedback">🤔</a></td>
+      <td align="center"><a href="https://github.com/adriang-90"><img src="https://avatars.githubusercontent.com/u/60886162?v=4?s=100" width="100px;" alt="Adrian Gąsior"/><br /><sub><b>Adrian Gąsior</b></sub></a><br /><a href="#security-adriang-90" title="Security">🛡️</a></td>
+      <td align="center"><a href="http://jamesw.link/me"><img src="https://avatars.githubusercontent.com/u/8067792?v=4?s=100" width="100px;" alt="James White"/><br /><sub><b>James White</b></sub></a><br /><a href="#question-jamesmacwhite" title="Answering Questions">💬</a></td>
+      <td align="center"><a href="https://www.zxlim.xyz"><img src="https://avatars.githubusercontent.com/u/19372079?v=4?s=100" width="100px;" alt="Zhao Xiang Lim"/><br /><sub><b>Zhao Xiang Lim</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=zxlim" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/Auzborn123"><img src="https://avatars.githubusercontent.com/u/42992103?v=4?s=100" width="100px;" alt="Auzborn123"/><br /><sub><b>Auzborn123</b></sub></a><br /><a href="#translation-Auzborn123" title="Translation">🌍</a></td>
+      <td align="center"><a href="https://github.com/SvanGlan"><img src="https://avatars.githubusercontent.com/u/106152205?v=4?s=100" width="100px;" alt="SvanGlan"/><br /><sub><b>SvanGlan</b></sub></a><br /><a href="#translation-SvanGlan" title="Translation">🌍</a></td>
+    </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/HannesJo0139"><img src="https://avatars.githubusercontent.com/u/42114183?v=4?s=100" width="100px;" alt="HannesJo0139"/><br /><sub><b>HannesJo0139</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=HannesJo0139" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/andreas-berg"><img src="https://avatars.githubusercontent.com/u/39428693?v=4?s=100" width="100px;" alt="andreas-berg"/><br /><sub><b>andreas-berg</b></sub></a><br /><a href="https://github.com/authelia/authelia/issues?q=author%3Aandreas-berg" title="Bug reports">🐛</a></td>
+      <td align="center"><a href="http://radenac.me"><img src="https://avatars.githubusercontent.com/u/47008408?v=4?s=100" width="100px;" alt="Clément Radenac"/><br /><sub><b>Clément Radenac</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=clem3109" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/boomam"><img src="https://avatars.githubusercontent.com/u/37086258?v=4?s=100" width="100px;" alt="boomam"/><br /><sub><b>boomam</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=boomam" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/Northguy"><img src="https://avatars.githubusercontent.com/u/1189058?v=4?s=100" width="100px;" alt="Northguy"/><br /><sub><b>Northguy</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=Northguy" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/polarathene"><img src="https://avatars.githubusercontent.com/u/5098581?v=4?s=100" width="100px;" alt="Brennan Kinney"/><br /><sub><b>Brennan Kinney</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=polarathene" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/LongerHV"><img src="https://avatars.githubusercontent.com/u/46924944?v=4?s=100" width="100px;" alt="Michał Mieszczak"/><br /><sub><b>Michał Mieszczak</b></sub></a><br /><a href="#ideas-LongerHV" title="Ideas, Planning, & Feedback">🤔</a> <a href="https://github.com/authelia/authelia/commits?author=LongerHV" title="Code">💻</a></td>
+    </tr>
+  </tbody>
 </table>
 
 <!-- markdownlint-restore -->

From 00ab27933644f79f391ee2d7d3b6ff4a3968359f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 22 Oct 2022 22:19:32 +1100
Subject: [PATCH 176/263] refactor: csp gen (#4163)

Generator for CSP.
---
 cmd/authelia-gen/cmd_code.go                  |  51 ++++++-
 cmd/authelia-gen/cmd_docs.go                  |   2 +-
 cmd/authelia-gen/cmd_docs_cli.go              |  24 ++--
 cmd/authelia-gen/cmd_docs_data.go             | 132 ++++++++++++++++++
 cmd/authelia-gen/cmd_docs_date.go             |  10 +-
 cmd/authelia-gen/cmd_docs_keys.go             |  81 -----------
 cmd/authelia-gen/cmd_locales.go               |   2 +-
 cmd/authelia-gen/cmd_root.go                  |   6 +-
 cmd/authelia-gen/const.go                     |  46 +++++-
 cmd/authelia-gen/helpers.go                   |  48 +++++++
 cmd/authelia-gen/templates.go                 |   1 +
 cmd/authelia-gen/templates/server_gen.go.tmpl |  13 ++
 cmd/authelia-gen/types.go                     |  22 +++
 .../en/configuration/miscellaneous/server.md  |   8 +-
 .../cli/authelia-gen/authelia-gen.md          |  12 +-
 .../cli/authelia-gen/authelia-gen_code.md     |  13 +-
 .../authelia-gen/authelia-gen_code_keys.md    |  12 +-
 .../authelia-gen/authelia-gen_code_scripts.md |  12 +-
 .../authelia-gen/authelia-gen_code_server.md  |  59 ++++++++
 .../authelia-gen/authelia-gen_commit-lint.md  |  12 +-
 .../cli/authelia-gen/authelia-gen_docs.md     |  14 +-
 .../cli/authelia-gen/authelia-gen_docs_cli.md |  12 +-
 .../authelia-gen/authelia-gen_docs_data.md    |  61 ++++++++
 ...keys.md => authelia-gen_docs_data_keys.md} |  22 +--
 .../authelia-gen_docs_data_misc.md            |  59 ++++++++
 .../authelia-gen/authelia-gen_docs_date.md    |  12 +-
 .../cli/authelia-gen/authelia-gen_github.md   |  12 +-
 .../authelia-gen_github_issue-templates.md    |  12 +-
 ...a-gen_github_issue-templates_bug-report.md |  12 +-
 ..._github_issue-templates_feature-request.md |  12 +-
 .../cli/authelia-gen/authelia-gen_locales.md  |  12 +-
 docs/data/misc.json                           |   1 +
 docs/layouts/shortcodes/csp.html              |   2 +
 internal/server/const.go                      |   3 +-
 internal/server/gen.go                        |  13 ++
 internal/server/template.go                   |   8 +-
 36 files changed, 642 insertions(+), 191 deletions(-)
 create mode 100644 cmd/authelia-gen/cmd_docs_data.go
 delete mode 100644 cmd/authelia-gen/cmd_docs_keys.go
 create mode 100644 cmd/authelia-gen/helpers.go
 create mode 100644 cmd/authelia-gen/templates/server_gen.go.tmpl
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_code_server.md
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data.md
 rename docs/content/en/reference/cli/authelia-gen/{authelia-gen_docs_keys.md => authelia-gen_docs_data_keys.md} (70%)
 create mode 100644 docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_misc.md
 create mode 100644 docs/data/misc.json
 create mode 100644 docs/layouts/shortcodes/csp.html
 create mode 100644 internal/server/gen.go

diff --git a/cmd/authelia-gen/cmd_code.go b/cmd/authelia-gen/cmd_code.go
index 2d3e931ad..1359298c5 100644
--- a/cmd/authelia-gen/cmd_code.go
+++ b/cmd/authelia-gen/cmd_code.go
@@ -30,7 +30,19 @@ func newCodeCmd() *cobra.Command {
 		DisableAutoGenTag: true,
 	}
 
-	cmd.AddCommand(newCodeKeysCmd(), newCodeScriptsCmd())
+	cmd.AddCommand(newCodeKeysCmd(), newCodeServerCmd(), newCodeScriptsCmd())
+
+	return cmd
+}
+
+func newCodeServerCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseServer,
+		Short: "Generate the Authelia server files",
+		RunE:  codeServerRunE,
+
+		DisableAutoGenTag: true,
+	}
 
 	return cmd
 }
@@ -59,6 +71,38 @@ func newCodeKeysCmd() *cobra.Command {
 	return cmd
 }
 
+func codeServerRunE(cmd *cobra.Command, args []string) (err error) {
+	data := TemplateCSP{
+		PlaceholderNONCE:    codeCSPNonce,
+		TemplateDefault:     buildCSP(codeCSPProductionDefaultSrc, codeCSPValuesCommon, codeCSPValuesProduction),
+		TemplateDevelopment: buildCSP(codeCSPDevelopmentDefaultSrc, codeCSPValuesCommon, codeCSPValuesDevelopment),
+	}
+
+	var outputPath string
+
+	if outputPath, err = getPFlagPath(cmd.Flags(), cmdFlagRoot, cmdFlagFileServerGenerated); err != nil {
+		return err
+	}
+
+	var f *os.File
+
+	if f, err = os.Create(outputPath); err != nil {
+		return fmt.Errorf("failed to create file '%s': %w", outputPath, err)
+	}
+
+	if err = tmplServer.Execute(f, data); err != nil {
+		_ = f.Close()
+
+		return fmt.Errorf("failed to write output file '%s': %w", outputPath, err)
+	}
+
+	if err = f.Close(); err != nil {
+		return fmt.Errorf("failed to close output file '%s': %w", outputPath, err)
+	}
+
+	return nil
+}
+
 func codeScriptsRunE(cmd *cobra.Command, args []string) (err error) {
 	var (
 		root, pathScriptsGen string
@@ -129,11 +173,6 @@ func codeScriptsRunE(cmd *cobra.Command, args []string) (err error) {
 	return nil
 }
 
-// GitHubTagsJSON represents the JSON struct for the GitHub Tags API.
-type GitHubTagsJSON struct {
-	Name string `json:"name"`
-}
-
 func codeKeysRunE(cmd *cobra.Command, args []string) (err error) {
 	var (
 		pathCodeConfigKeys, root string
diff --git a/cmd/authelia-gen/cmd_docs.go b/cmd/authelia-gen/cmd_docs.go
index 2902b8aa0..54d1135f1 100644
--- a/cmd/authelia-gen/cmd_docs.go
+++ b/cmd/authelia-gen/cmd_docs.go
@@ -13,7 +13,7 @@ func newDocsCmd() *cobra.Command {
 		DisableAutoGenTag: true,
 	}
 
-	cmd.AddCommand(newDocsCLICmd(), newDocsDateCmd(), newDocsKeysCmd())
+	cmd.AddCommand(newDocsCLICmd(), newDocsDataCmd(), newDocsDateCmd())
 
 	return cmd
 }
diff --git a/cmd/authelia-gen/cmd_docs_cli.go b/cmd/authelia-gen/cmd_docs_cli.go
index e41b6f189..178583749 100644
--- a/cmd/authelia-gen/cmd_docs_cli.go
+++ b/cmd/authelia-gen/cmd_docs_cli.go
@@ -27,45 +27,39 @@ func newDocsCLICmd() *cobra.Command {
 }
 
 func docsCLIRunE(cmd *cobra.Command, args []string) (err error) {
-	var root, pathDocsCLIReference string
+	var outputPath string
 
-	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
+	if outputPath, err = getPFlagPath(cmd.Flags(), cmdFlagRoot, cmdFlagDocs, cmdFlagDocsContent, cmdFlagDocsCLIReference); err != nil {
 		return err
 	}
 
-	if pathDocsCLIReference, err = cmd.Flags().GetString(cmdFlagDocsCLIReference); err != nil {
-		return err
-	}
-
-	fullPathDocsCLIReference := filepath.Join(root, pathDocsCLIReference)
-
-	if err = os.MkdirAll(fullPathDocsCLIReference, 0775); err != nil {
+	if err = os.MkdirAll(outputPath, 0775); err != nil {
 		if !os.IsExist(err) {
 			return err
 		}
 	}
 
-	if err = genCLIDoc(commands.NewRootCmd(), filepath.Join(fullPathDocsCLIReference, "authelia")); err != nil {
+	if err = genCLIDoc(commands.NewRootCmd(), filepath.Join(outputPath, "authelia")); err != nil {
 		return err
 	}
 
-	if err = genCLIDocWriteIndex(fullPathDocsCLIReference, "authelia"); err != nil {
+	if err = genCLIDocWriteIndex(outputPath, "authelia"); err != nil {
 		return err
 	}
 
-	if err = genCLIDoc(cmdscripts.NewRootCmd(), filepath.Join(fullPathDocsCLIReference, "authelia-scripts")); err != nil {
+	if err = genCLIDoc(cmdscripts.NewRootCmd(), filepath.Join(outputPath, "authelia-scripts")); err != nil {
 		return err
 	}
 
-	if err = genCLIDocWriteIndex(fullPathDocsCLIReference, "authelia-scripts"); err != nil {
+	if err = genCLIDocWriteIndex(outputPath, "authelia-scripts"); err != nil {
 		return err
 	}
 
-	if err = genCLIDoc(newRootCmd(), filepath.Join(fullPathDocsCLIReference, cmdUseRoot)); err != nil {
+	if err = genCLIDoc(newRootCmd(), filepath.Join(outputPath, cmdUseRoot)); err != nil {
 		return err
 	}
 
-	if err = genCLIDocWriteIndex(fullPathDocsCLIReference, cmdUseRoot); err != nil {
+	if err = genCLIDocWriteIndex(outputPath, cmdUseRoot); err != nil {
 		return err
 	}
 
diff --git a/cmd/authelia-gen/cmd_docs_data.go b/cmd/authelia-gen/cmd_docs_data.go
new file mode 100644
index 000000000..b0eddf21b
--- /dev/null
+++ b/cmd/authelia-gen/cmd_docs_data.go
@@ -0,0 +1,132 @@
+package main
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"reflect"
+	"strings"
+
+	"github.com/spf13/cobra"
+
+	"github.com/authelia/authelia/v4/internal/configuration"
+	"github.com/authelia/authelia/v4/internal/configuration/schema"
+)
+
+func newDocsDataCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseDocsData,
+		Short: "Generate docs data files",
+		RunE:  rootSubCommandsRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	cmd.AddCommand(newDocsDataMiscCmd(), newDocsDataKeysCmd())
+
+	return cmd
+}
+
+func newDocsDataMiscCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseDocsDataMisc,
+		Short: "Generate docs data file misc.json",
+		RunE:  docsDataMiscRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func docsDataMiscRunE(cmd *cobra.Command, args []string) (err error) {
+	data := DocsDataMisc{
+		CSP: TemplateCSP{
+			PlaceholderNONCE:    codeCSPNonce,
+			TemplateDefault:     buildCSP(codeCSPProductionDefaultSrc, codeCSPValuesCommon, codeCSPValuesProduction),
+			TemplateDevelopment: buildCSP(codeCSPDevelopmentDefaultSrc, codeCSPValuesCommon, codeCSPValuesDevelopment),
+		},
+	}
+
+	data.CSP.TemplateDefault = strings.ReplaceAll(data.CSP.TemplateDefault, "%s", codeCSPNonce)
+	data.CSP.TemplateDevelopment = strings.ReplaceAll(data.CSP.TemplateDevelopment, "%s", codeCSPNonce)
+
+	var (
+		outputPath string
+		dataJSON   []byte
+	)
+
+	if outputPath, err = getPFlagPath(cmd.Flags(), cmdFlagRoot, cmdFlagDocs, cmdFlagDocsData, cmdFlagDocsDataMisc); err != nil {
+		return err
+	}
+
+	if dataJSON, err = json.Marshal(data); err != nil {
+		return err
+	}
+
+	if err = os.WriteFile(outputPath, dataJSON, 0600); err != nil {
+		return fmt.Errorf("failed to write file '%s': %w", outputPath, err)
+	}
+
+	return nil
+}
+
+func newDocsDataKeysCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   cmdUseKeys,
+		Short: "Generate the docs data file for configuration keys",
+		RunE:  docsKeysRunE,
+
+		DisableAutoGenTag: true,
+	}
+
+	return cmd
+}
+
+func docsKeysRunE(cmd *cobra.Command, args []string) (err error) {
+	//nolint:prealloc
+	var (
+		data []ConfigurationKey
+	)
+
+	keys := readTags("", reflect.TypeOf(schema.Configuration{}))
+
+	for _, key := range keys {
+		if strings.Contains(key, "[]") {
+			continue
+		}
+
+		ck := ConfigurationKey{
+			Path:   key,
+			Secret: configuration.IsSecretKey(key),
+		}
+
+		switch {
+		case ck.Secret:
+			ck.Env = configuration.ToEnvironmentSecretKey(key, configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter)
+		default:
+			ck.Env = configuration.ToEnvironmentKey(key, configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter)
+		}
+
+		data = append(data, ck)
+	}
+
+	var (
+		dataJSON   []byte
+		outputPath string
+	)
+
+	if outputPath, err = getPFlagPath(cmd.Flags(), cmdFlagRoot, cmdFlagDocs, cmdFlagDocsData, cmdFlagDocsDataKeys); err != nil {
+		return err
+	}
+
+	if dataJSON, err = json.Marshal(data); err != nil {
+		return err
+	}
+
+	if err = os.WriteFile(outputPath, dataJSON, 0600); err != nil {
+		return fmt.Errorf("failed to write file '%s': %w", outputPath, err)
+	}
+
+	return nil
+}
diff --git a/cmd/authelia-gen/cmd_docs_date.go b/cmd/authelia-gen/cmd_docs_date.go
index 2f752db4b..9eea8ccad 100644
--- a/cmd/authelia-gen/cmd_docs_date.go
+++ b/cmd/authelia-gen/cmd_docs_date.go
@@ -32,14 +32,10 @@ func newDocsDateCmd() *cobra.Command {
 
 func docsDateRunE(cmd *cobra.Command, args []string) (err error) {
 	var (
-		root, pathDocsContent, cwd, commitUtil, commitSince, commitFilter string
+		pathDocsContent, cwd, commitUtil, commitSince, commitFilter string
 	)
 
-	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
-		return err
-	}
-
-	if pathDocsContent, err = cmd.Flags().GetString(cmdFlagDocsContent); err != nil {
+	if pathDocsContent, err = getPFlagPath(cmd.Flags(), cmdFlagRoot, cmdFlagDocs, cmdFlagDocsContent); err != nil {
 		return err
 	}
 
@@ -59,7 +55,7 @@ func docsDateRunE(cmd *cobra.Command, args []string) (err error) {
 		commitFilter = fmt.Sprintf("%s...%s", commitUtil, commitSince)
 	}
 
-	return filepath.Walk(filepath.Join(root, pathDocsContent), func(path string, info fs.FileInfo, err error) error {
+	return filepath.Walk(pathDocsContent, func(path string, info fs.FileInfo, err error) error {
 		if err != nil {
 			return err
 		}
diff --git a/cmd/authelia-gen/cmd_docs_keys.go b/cmd/authelia-gen/cmd_docs_keys.go
deleted file mode 100644
index df6763acb..000000000
--- a/cmd/authelia-gen/cmd_docs_keys.go
+++ /dev/null
@@ -1,81 +0,0 @@
-package main
-
-import (
-	"encoding/json"
-	"fmt"
-	"os"
-	"path/filepath"
-	"reflect"
-	"strings"
-
-	"github.com/spf13/cobra"
-
-	"github.com/authelia/authelia/v4/internal/configuration"
-	"github.com/authelia/authelia/v4/internal/configuration/schema"
-)
-
-func newDocsKeysCmd() *cobra.Command {
-	cmd := &cobra.Command{
-		Use:   cmdUseKeys,
-		Short: "Generate the docs data file for configuration keys",
-		RunE:  docsKeysRunE,
-
-		DisableAutoGenTag: true,
-	}
-
-	return cmd
-}
-
-func docsKeysRunE(cmd *cobra.Command, args []string) (err error) {
-	//nolint:prealloc
-	var (
-		pathDocsConfigKeys, root string
-		data                     []ConfigurationKey
-	)
-
-	keys := readTags("", reflect.TypeOf(schema.Configuration{}))
-
-	for _, key := range keys {
-		if strings.Contains(key, "[]") {
-			continue
-		}
-
-		ck := ConfigurationKey{
-			Path:   key,
-			Secret: configuration.IsSecretKey(key),
-		}
-
-		switch {
-		case ck.Secret:
-			ck.Env = configuration.ToEnvironmentSecretKey(key, configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter)
-		default:
-			ck.Env = configuration.ToEnvironmentKey(key, configuration.DefaultEnvPrefix, configuration.DefaultEnvDelimiter)
-		}
-
-		data = append(data, ck)
-	}
-
-	var (
-		dataJSON []byte
-	)
-
-	if root, err = cmd.Flags().GetString(cmdFlagRoot); err != nil {
-		return err
-	}
-
-	if pathDocsConfigKeys, err = cmd.Flags().GetString(cmdFlagFileDocsKeys); err != nil {
-		return err
-	}
-
-	fullPathDocsConfigKeys := filepath.Join(root, pathDocsConfigKeys)
-
-	if dataJSON, err = json.Marshal(data); err != nil {
-		return err
-	}
-
-	if err = os.WriteFile(fullPathDocsConfigKeys, dataJSON, 0600); err != nil {
-		return fmt.Errorf("failed to write file '%s': %w", fullPathDocsConfigKeys, err)
-	}
-
-	return nil
-}
diff --git a/cmd/authelia-gen/cmd_locales.go b/cmd/authelia-gen/cmd_locales.go
index 6948ac7b4..0fcc390c3 100644
--- a/cmd/authelia-gen/cmd_locales.go
+++ b/cmd/authelia-gen/cmd_locales.go
@@ -46,7 +46,7 @@ func localesRunE(cmd *cobra.Command, args []string) (err error) {
 		return err
 	}
 
-	if pathDocsDataLanguages, err = cmd.Flags().GetString(cmdFlagDocsDataLanguages); err != nil {
+	if pathDocsDataLanguages, err = getPFlagPath(cmd.Flags(), cmdFlagRoot, cmdFlagDocs, cmdFlagDocsData, cmdFlagDocsDataLanguages); err != nil {
 		return err
 	}
 
diff --git a/cmd/authelia-gen/cmd_root.go b/cmd/authelia-gen/cmd_root.go
index 1ce6cf2dc..d0809957c 100644
--- a/cmd/authelia-gen/cmd_root.go
+++ b/cmd/authelia-gen/cmd_root.go
@@ -33,12 +33,16 @@ func newRootCmd() *cobra.Command {
 	cmd.PersistentFlags().String(cmdFlagDirLocales, dirLocales, "The locales directory in relation to the root")
 	cmd.PersistentFlags().String(cmdFlagFileWebI18N, fileWebI18NIndex, "The i18n typescript configuration file in relation to the root")
 	cmd.PersistentFlags().String(cmdFlagDocsDataLanguages, fileDocsDataLanguages, "The languages docs data file in relation to the docs data folder")
+	cmd.PersistentFlags().String(cmdFlagDocsDataMisc, fileDocsDataMisc, "The misc docs data file in relation to the docs data folder")
 	cmd.PersistentFlags().String(cmdFlagDocsCLIReference, dirDocsCLIReference, "The directory to store the markdown in")
+	cmd.PersistentFlags().String(cmdFlagDocs, dirDocs, "The directory with the docs")
 	cmd.PersistentFlags().String(cmdFlagDocsContent, dirDocsContent, "The directory with the docs content")
+	cmd.PersistentFlags().String(cmdFlagDocsData, dirDocsData, "The directory with the docs data")
 	cmd.PersistentFlags().String(cmdFlagFileConfigKeys, fileCodeConfigKeys, "Sets the path of the keys file")
-	cmd.PersistentFlags().String(cmdFlagFileDocsKeys, fileDocsConfigKeys, "Sets the path of the docs keys file")
+	cmd.PersistentFlags().String(cmdFlagDocsDataKeys, fileDocsDataConfigKeys, "Sets the path of the docs keys file")
 	cmd.PersistentFlags().String(cmdFlagPackageConfigKeys, pkgConfigSchema, "Sets the package name of the keys file")
 	cmd.PersistentFlags().String(cmdFlagFileScriptsGen, fileScriptsGen, "Sets the path of the authelia-scripts gen file")
+	cmd.PersistentFlags().String(cmdFlagFileServerGenerated, fileServerGenerated, "Sets the path of the server generated file")
 	cmd.PersistentFlags().String(cmdFlagPackageScriptsGen, pkgScriptsGen, "Sets the package name of the authelia-scripts gen file")
 	cmd.PersistentFlags().String(cmdFlagFileConfigCommitLint, fileCICommitLintConfig, "The commit lint javascript configuration file in relation to the root")
 	cmd.PersistentFlags().String(cmdFlagFileDocsCommitMsgGuidelines, fileDocsCommitMessageGuidelines, "The commit message guidelines documentation file in relation to the root")
diff --git a/cmd/authelia-gen/const.go b/cmd/authelia-gen/const.go
index 53f01051e..f68364e9e 100644
--- a/cmd/authelia-gen/const.go
+++ b/cmd/authelia-gen/const.go
@@ -12,14 +12,18 @@ const (
 
 	fileDocsCommitMessageGuidelines = "docs/content/en/contributing/guidelines/commit-message.md"
 
-	fileDocsConfigKeys = "docs/data/configkeys.json"
-	fileCodeConfigKeys = "internal/configuration/schema/keys.go"
-	fileScriptsGen     = "cmd/authelia-scripts/cmd/gen.go"
+	fileCodeConfigKeys  = "internal/configuration/schema/keys.go"
+	fileServerGenerated = "internal/server/gen.go"
+	fileScriptsGen      = "cmd/authelia-scripts/cmd/gen.go"
 
-	dirDocsContent      = "docs/content"
-	dirDocsCLIReference = dirDocsContent + "/en/reference/cli"
+	dirDocs             = "docs"
+	dirDocsContent      = "content"
+	dirDocsData         = "data"
+	dirDocsCLIReference = "en/reference/cli"
 
-	fileDocsDataLanguages = "docs/data/languages.json"
+	fileDocsDataLanguages  = "languages.json"
+	fileDocsDataMisc       = "misc.json"
+	fileDocsDataConfigKeys = "configkeys.json"
 
 	fileGitHubIssueTemplateFR = ".github/ISSUE_TEMPLATE/feature-request.yml"
 	fileGitHubIssueTemplateBR = ".github/ISSUE_TEMPLATE/bug-report.yml"
@@ -48,6 +52,8 @@ const (
 	cmdUseDocs                   = "docs"
 	cmdUseDocsDate               = "date"
 	cmdUseDocsCLI                = "cli"
+	cmdUseDocsData               = "data"
+	cmdUseDocsDataMisc           = "misc"
 	cmdUseGitHub                 = "github"
 	cmdUseGitHubIssueTemplates   = "issue-templates"
 	cmdUseGitHubIssueTemplatesFR = "feature-request"
@@ -57,6 +63,7 @@ const (
 	cmdUseCode                   = "code"
 	cmdUseCodeScripts            = "scripts"
 	cmdUseKeys                   = "keys"
+	cmdUseServer                 = "server"
 )
 
 const (
@@ -66,11 +73,15 @@ const (
 	cmdFlagDirLocales                  = "dir.locales"
 	cmdFlagDocsCLIReference            = "dir.docs.cli-reference"
 	cmdFlagDocsContent                 = "dir.docs.content"
+	cmdFlagDocsData                    = "dir.docs.data"
+	cmdFlagDocs                        = "dir.docs"
 	cmdFlagDocsDataLanguages           = "file.docs.data.languages"
+	cmdFlagDocsDataMisc                = "file.docs.data.misc"
+	cmdFlagDocsDataKeys                = "file.docs.data.keys"
 	cmdFlagCwd                         = "cwd"
 	cmdFlagFileConfigKeys              = "file.configuration-keys"
-	cmdFlagFileDocsKeys                = "file.docs-keys"
 	cmdFlagFileScriptsGen              = "file.scripts.gen"
+	cmdFlagFileServerGenerated         = "file.server.generated"
 	cmdFlagFileConfigCommitLint        = "file.commit-lint-config"
 	cmdFlagFileDocsCommitMsgGuidelines = "file.docs-commit-msg-guidelines"
 	cmdFlagFileWebI18N                 = "file.web-i18n"
@@ -79,3 +90,24 @@ const (
 	cmdFlagPackageConfigKeys           = "package.configuration.keys"
 	cmdFlagPackageScriptsGen           = "package.scripts.gen"
 )
+
+const (
+	codeCSPProductionDefaultSrc  = "'self'"
+	codeCSPDevelopmentDefaultSrc = "'self' 'unsafe-eval'"
+	codeCSPNonce                 = "${NONCE}"
+)
+
+var (
+	codeCSPValuesCommon = []CSPValue{
+		{Name: "default-src", Value: ""},
+		{Name: "frame-src", Value: "'none'"},
+		{Name: "object-src", Value: "'none'"},
+		{Name: "style-src", Value: "'self' 'nonce-%s'"},
+		{Name: "frame-ancestors", Value: "'none'"},
+		{Name: "base-uri", Value: "'self'"},
+	}
+
+	codeCSPValuesProduction = []CSPValue{}
+
+	codeCSPValuesDevelopment = []CSPValue{}
+)
diff --git a/cmd/authelia-gen/helpers.go b/cmd/authelia-gen/helpers.go
new file mode 100644
index 000000000..09ac84e8f
--- /dev/null
+++ b/cmd/authelia-gen/helpers.go
@@ -0,0 +1,48 @@
+package main
+
+import (
+	"fmt"
+	"path/filepath"
+	"strings"
+
+	"github.com/spf13/pflag"
+)
+
+func getPFlagPath(flags *pflag.FlagSet, flagNames ...string) (fullPath string, err error) {
+	if len(flagNames) == 0 {
+		return "", fmt.Errorf("no flag names")
+	}
+
+	var p string
+
+	for i, flagName := range flagNames {
+		if p, err = flags.GetString(flagName); err != nil {
+			return "", fmt.Errorf("failed to lookup flag '%s': %w", flagName, err)
+		}
+
+		if i == 0 {
+			fullPath = p
+		} else {
+			fullPath = filepath.Join(fullPath, p)
+		}
+	}
+
+	return fullPath, nil
+}
+
+func buildCSP(defaultSrc string, ruleSets ...[]CSPValue) string {
+	var rules []string
+
+	for _, ruleSet := range ruleSets {
+		for _, rule := range ruleSet {
+			switch rule.Name {
+			case "default-src":
+				rules = append(rules, fmt.Sprintf("%s %s", rule.Name, defaultSrc))
+			default:
+				rules = append(rules, fmt.Sprintf("%s %s", rule.Name, rule.Value))
+			}
+		}
+	}
+
+	return strings.Join(rules, "; ")
+}
diff --git a/cmd/authelia-gen/templates.go b/cmd/authelia-gen/templates.go
index 4f65a4b18..794add4b3 100644
--- a/cmd/authelia-gen/templates.go
+++ b/cmd/authelia-gen/templates.go
@@ -24,6 +24,7 @@ var (
 	tmplDotCommitLintRC             = template.Must(newTMPL("dot_commitlintrc.js"))
 	tmplDocsCommitMessageGuidelines = template.Must(newTMPL("docs-contributing-development-commitmsg.md"))
 	tmplScriptsGen                  = template.Must(newTMPL("cmd-authelia-scripts-gen.go"))
+	tmplServer                      = template.Must(newTMPL("server_gen.go"))
 )
 
 func fmJoinX(elems []string, sep string, n int, p string) string {
diff --git a/cmd/authelia-gen/templates/server_gen.go.tmpl b/cmd/authelia-gen/templates/server_gen.go.tmpl
new file mode 100644
index 000000000..b1d96e86c
--- /dev/null
+++ b/cmd/authelia-gen/templates/server_gen.go.tmpl
@@ -0,0 +1,13 @@
+// Code generated by go generate. DO NOT EDIT.
+//
+// Run the following command to generate this file:
+// 		go run ./cmd/authelia-gen code server
+//
+
+package server
+
+const (
+	placeholderCSPNonce = "{{ .PlaceholderNONCE }}"
+	tmplCSPDefault      = "{{ .TemplateDefault }}"
+	tmplCSPDevelopment  = "{{ .TemplateDevelopment }}"
+)
diff --git a/cmd/authelia-gen/types.go b/cmd/authelia-gen/types.go
index 7c47772e8..99e13fd45 100644
--- a/cmd/authelia-gen/types.go
+++ b/cmd/authelia-gen/types.go
@@ -25,6 +25,23 @@ type tmplScriptsGEnData struct {
 	VersionSwaggerUI string
 }
 
+// GitHubTagsJSON represents the JSON struct for the GitHub Tags API.
+type GitHubTagsJSON struct {
+	Name string `json:"name"`
+}
+
+// DocsDataMisc represents the docs misc data schema.
+type DocsDataMisc struct {
+	CSP TemplateCSP `json:"csp"`
+}
+
+// TemplateCSP represents the CSP template vars.
+type TemplateCSP struct {
+	TemplateDefault     string `json:"default"`
+	TemplateDevelopment string `json:"development"`
+	PlaceholderNONCE    string `json:"nonce"`
+}
+
 // ConfigurationKey is the docs json model for the Authelia configuration keys.
 type ConfigurationKey struct {
 	Path   string `json:"path"`
@@ -121,3 +138,8 @@ var labelTypeDescriptions = [...]string{
 func (t labelType) String() string {
 	return fmt.Sprintf("%s/%s", labelAreaPrefixType, labelTypeDescriptions[t])
 }
+
+type CSPValue struct {
+	Name  string
+	Value string
+}
diff --git a/docs/content/en/configuration/miscellaneous/server.md b/docs/content/en/configuration/miscellaneous/server.md
index 4d6202c26..65ba79629 100644
--- a/docs/content/en/configuration/miscellaneous/server.md
+++ b/docs/content/en/configuration/miscellaneous/server.md
@@ -161,11 +161,11 @@ or intermediate certificates. If no item is provided mutual TLS is disabled.
 
 {{< confkey type="string" required="no" >}}
 
-This customizes the value of the Content-Security-Policy header. It will replace all instances of `${NONCE}` with the
-nonce value of the Authelia react bundle. This is an advanced option to customize and you should do sufficient research
-about how browsers utilize and understand this header before attempting to customize it.
+This customizes the value of the Content-Security-Policy header. It will replace all instances of the below placeholder
+with the nonce value of the Authelia react bundle. This is an advanced option to customize and you should do sufficient
+research about how browsers utilize and understand this header before attempting to customize it.
 
-For example, the default CSP template is `default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'`.
+{{< csp >}}
 
 ### buffers
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
index b373fc18b..1dc7be5b0 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen.md
@@ -24,8 +24,10 @@ authelia-gen [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -33,10 +35,12 @@ authelia-gen [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
   -h, --help                                     help for authelia-gen
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
index 7ef95dbcb..65adbfe01 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code.md
@@ -30,8 +30,10 @@ authelia-gen code [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen code [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
@@ -54,4 +58,5 @@ authelia-gen code [flags]
 * [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
 * [authelia-gen code keys](authelia-gen_code_keys.md)	 - Generate the list of valid configuration keys
 * [authelia-gen code scripts](authelia-gen_code_scripts.md)	 - Generate the generated portion of the authelia-scripts command
+* [authelia-gen code server](authelia-gen_code_server.md)	 - Generate the Authelia server files
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
index 15166ede3..2b0a9ea98 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_keys.md
@@ -30,8 +30,10 @@ authelia-gen code keys [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen code keys [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
index be30fd2fa..b482188e3 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_scripts.md
@@ -30,8 +30,10 @@ authelia-gen code scripts [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen code scripts [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_server.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_server.md
new file mode 100644
index 000000000..75d4b7c7c
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_code_server.md
@@ -0,0 +1,59 @@
+---
+title: "authelia-gen code server"
+description: "Reference for the authelia-gen code server command."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen code server
+
+Generate the Authelia server files
+
+```
+authelia-gen code server [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for server
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen code](authelia-gen_code.md)	 - Generate code
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
index 5868626f9..c559fd142 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_commit-lint.md
@@ -30,8 +30,10 @@ authelia-gen commit-lint [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen commit-lint [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
index 03c9d55d0..5c28d1603 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs.md
@@ -30,8 +30,10 @@ authelia-gen docs [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen docs [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
@@ -53,6 +57,6 @@ authelia-gen docs [flags]
 
 * [authelia-gen](authelia-gen.md)	 - Authelia's generator tooling
 * [authelia-gen docs cli](authelia-gen_docs_cli.md)	 - Generate CLI docs
+* [authelia-gen docs data](authelia-gen_docs_data.md)	 - Generate docs data files
 * [authelia-gen docs date](authelia-gen_docs_date.md)	 - Generate doc dates
-* [authelia-gen docs keys](authelia-gen_docs_keys.md)	 - Generate the docs data file for configuration keys
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
index 164df34ee..8f4dfa7b6 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_cli.md
@@ -30,8 +30,10 @@ authelia-gen docs cli [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen docs cli [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data.md
new file mode 100644
index 000000000..2ba5ed90a
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data.md
@@ -0,0 +1,61 @@
+---
+title: "authelia-gen docs data"
+description: "Reference for the authelia-gen docs data command."
+lead: ""
+date: 2022-09-16T14:21:05+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen docs data
+
+Generate docs data files
+
+```
+authelia-gen docs data [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for data
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen docs](authelia-gen_docs.md)	 - Generate docs
+* [authelia-gen docs data keys](authelia-gen_docs_data_keys.md)	 - Generate the docs data file for configuration keys
+* [authelia-gen docs data misc](authelia-gen_docs_data_misc.md)	 - Generate docs data file misc.json
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_keys.md
similarity index 70%
rename from docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
rename to docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_keys.md
index f16322dc9..82932eedd 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_keys.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_keys.md
@@ -1,6 +1,6 @@
 ---
-title: "authelia-gen docs keys"
-description: "Reference for the authelia-gen docs keys command."
+title: "authelia-gen docs data keys"
+description: "Reference for the authelia-gen docs data keys command."
 lead: ""
 date: 2022-09-16T14:21:05+10:00
 draft: false
@@ -12,12 +12,12 @@ weight: 330
 toc: true
 ---
 
-## authelia-gen docs keys
+## authelia-gen docs data keys
 
 Generate the docs data file for configuration keys
 
 ```
-authelia-gen docs keys [flags]
+authelia-gen docs data keys [flags]
 ```
 
 ### Options
@@ -30,8 +30,10 @@ authelia-gen docs keys [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen docs keys [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
@@ -51,5 +55,5 @@ authelia-gen docs keys [flags]
 
 ### SEE ALSO
 
-* [authelia-gen docs](authelia-gen_docs.md)	 - Generate docs
+* [authelia-gen docs data](authelia-gen_docs_data.md)	 - Generate docs data files
 
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_misc.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_misc.md
new file mode 100644
index 000000000..cdcb1042e
--- /dev/null
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_data_misc.md
@@ -0,0 +1,59 @@
+---
+title: "authelia-gen docs data misc"
+description: "Reference for the authelia-gen docs data misc command."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "cli-authelia-gen"
+weight: 330
+toc: true
+---
+
+## authelia-gen docs data misc
+
+Generate docs data file misc.json
+
+```
+authelia-gen docs data misc [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for misc
+```
+
+### Options inherited from parent commands
+
+```
+  -C, --cwd string                               Sets the CWD for git commands
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
+      --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
+  -d, --dir.root string                          The repository root (default "./")
+  -X, --exclude strings                          Sets the names of excluded generators
+      --file.bug-report string                   Sets the path of the bug report issue template file (default ".github/ISSUE_TEMPLATE/bug-report.yml")
+      --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
+      --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
+      --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
+      --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
+      --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
+      --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
+      --package.configuration.keys string        Sets the package name of the keys file (default "schema")
+      --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
+      --versions int                             the maximum number of minor versions to list in output templates (default 5)
+```
+
+### SEE ALSO
+
+* [authelia-gen docs data](authelia-gen_docs_data.md)	 - Generate docs data files
+
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
index 1ef854d4a..4110ca86c 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_docs_date.md
@@ -32,8 +32,10 @@ authelia-gen docs date [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -41,10 +43,12 @@ authelia-gen docs date [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
index 5948e57a3..432b603e9 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github.md
@@ -30,8 +30,10 @@ authelia-gen github [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen github [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
index ee4b8d234..bc855e6f0 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates.md
@@ -30,8 +30,10 @@ authelia-gen github issue-templates [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen github issue-templates [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
index 55390f914..0f6c5be4e 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_bug-report.md
@@ -30,8 +30,10 @@ authelia-gen github issue-templates bug-report [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen github issue-templates bug-report [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
index 0ac91c4ae..63ca5cb17 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_github_issue-templates_feature-request.md
@@ -30,8 +30,10 @@ authelia-gen github issue-templates feature-request [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen github issue-templates feature-request [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
index 5cd715185..69d169ec1 100644
--- a/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
+++ b/docs/content/en/reference/cli/authelia-gen/authelia-gen_locales.md
@@ -30,8 +30,10 @@ authelia-gen locales [flags]
 
 ```
   -C, --cwd string                               Sets the CWD for git commands
-      --dir.docs.cli-reference string            The directory to store the markdown in (default "docs/content/en/reference/cli")
-      --dir.docs.content string                  The directory with the docs content (default "docs/content")
+      --dir.docs string                          The directory with the docs (default "docs")
+      --dir.docs.cli-reference string            The directory to store the markdown in (default "en/reference/cli")
+      --dir.docs.content string                  The directory with the docs content (default "content")
+      --dir.docs.data string                     The directory with the docs data (default "data")
       --dir.locales string                       The locales directory in relation to the root (default "internal/server/locales")
   -d, --dir.root string                          The repository root (default "./")
   -X, --exclude strings                          Sets the names of excluded generators
@@ -39,10 +41,12 @@ authelia-gen locales [flags]
       --file.commit-lint-config string           The commit lint javascript configuration file in relation to the root (default "web/.commitlintrc.js")
       --file.configuration-keys string           Sets the path of the keys file (default "internal/configuration/schema/keys.go")
       --file.docs-commit-msg-guidelines string   The commit message guidelines documentation file in relation to the root (default "docs/content/en/contributing/guidelines/commit-message.md")
-      --file.docs-keys string                    Sets the path of the docs keys file (default "docs/data/configkeys.json")
-      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "docs/data/languages.json")
+      --file.docs.data.keys string               Sets the path of the docs keys file (default "configkeys.json")
+      --file.docs.data.languages string          The languages docs data file in relation to the docs data folder (default "languages.json")
+      --file.docs.data.misc string               The misc docs data file in relation to the docs data folder (default "misc.json")
       --file.feature-request string              Sets the path of the feature request issue template file (default ".github/ISSUE_TEMPLATE/feature-request.yml")
       --file.scripts.gen string                  Sets the path of the authelia-scripts gen file (default "cmd/authelia-scripts/cmd/gen.go")
+      --file.server.generated string             Sets the path of the server generated file (default "internal/server/gen.go")
       --file.web-i18n string                     The i18n typescript configuration file in relation to the root (default "web/src/i18n/index.ts")
       --package.configuration.keys string        Sets the package name of the keys file (default "schema")
       --package.scripts.gen string               Sets the package name of the authelia-scripts gen file (default "cmd")
diff --git a/docs/data/misc.json b/docs/data/misc.json
new file mode 100644
index 000000000..dc84fbe39
--- /dev/null
+++ b/docs/data/misc.json
@@ -0,0 +1 @@
+{"csp":{"default":"default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'; require-trusted-types-for 'script'","development":"default-src 'self' 'unsafe-eval'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'","nonce":"${NONCE}"}}
\ No newline at end of file
diff --git a/docs/layouts/shortcodes/csp.html b/docs/layouts/shortcodes/csp.html
new file mode 100644
index 000000000..b5465737e
--- /dev/null
+++ b/docs/layouts/shortcodes/csp.html
@@ -0,0 +1,2 @@
+<p><strong>Placeholder Value:</strong>  <code>{{ $.Site.Data.misc.csp.nonce }}</code></p>
+<p><strong>Default Template:</strong> <code>{{ $.Site.Data.misc.csp.default }}</code></p>
diff --git a/internal/server/const.go b/internal/server/const.go
index 4d7a636b2..f4a774674 100644
--- a/internal/server/const.go
+++ b/internal/server/const.go
@@ -72,8 +72,7 @@ X_AUTHELIA_HEALTHCHECK_PATH=%s
 `
 
 const (
-	cspDefaultTemplate  = "default-src 'self'%s; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-%s'; frame-ancestors 'none'; base-uri 'self'"
-	cspNoncePlaceholder = "${NONCE}"
+	tmplCSPSwagger = "default-src 'self'; img-src 'self' https://validator.swagger.io data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'nonce-%s'; style-src 'self' 'nonce-%s'; base-uri 'self'"
 )
 
 const (
diff --git a/internal/server/gen.go b/internal/server/gen.go
new file mode 100644
index 000000000..9f7333090
--- /dev/null
+++ b/internal/server/gen.go
@@ -0,0 +1,13 @@
+// Code generated by go generate. DO NOT EDIT.
+//
+// Run the following command to generate this file:
+// 		go run ./cmd/authelia-gen code server
+//
+
+package server
+
+const (
+	placeholderCSPNonce = "${NONCE}"
+	tmplCSPDefault      = "default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-%s'; frame-ancestors 'none'; base-uri 'self'; require-trusted-types-for 'script'"
+	tmplCSPDevelopment  = "default-src 'self' 'unsafe-eval'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-%s'; frame-ancestors 'none'; base-uri 'self'"
+)
diff --git a/internal/server/template.go b/internal/server/template.go
index 3f1d914f9..0042f8856 100644
--- a/internal/server/template.go
+++ b/internal/server/template.go
@@ -75,13 +75,13 @@ func ServeTemplatedFile(publicDir, file, assetPath, duoSelfEnrollment, rememberM
 
 		switch {
 		case publicDir == assetsSwagger:
-			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf("base-uri 'self'; default-src 'self'; img-src 'self' https://validator.swagger.io data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'nonce-%s'; style-src 'self' 'nonce-%s'", nonce, nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(tmplCSPSwagger, nonce, nonce))
 		case ctx.Configuration.Server.Headers.CSPTemplate != "":
-			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, strings.ReplaceAll(ctx.Configuration.Server.Headers.CSPTemplate, cspNoncePlaceholder, nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, strings.ReplaceAll(ctx.Configuration.Server.Headers.CSPTemplate, placeholderCSPNonce, nonce))
 		case os.Getenv("ENVIRONMENT") == dev:
-			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(cspDefaultTemplate, " 'unsafe-eval'", nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(tmplCSPDevelopment, nonce))
 		default:
-			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(cspDefaultTemplate, "", nonce))
+			ctx.Response.Header.Add(fasthttp.HeaderContentSecurityPolicy, fmt.Sprintf(tmplCSPDefault, nonce))
 		}
 
 		err := tmpl.Execute(ctx.Response.BodyWriter(), struct{ Base, BaseURL, CSPNonce, DuoSelfEnrollment, LogoOverride, RememberMe, ResetPassword, ResetPasswordCustomURL, Session, Theme string }{Base: base, BaseURL: baseURL, CSPNonce: nonce, DuoSelfEnrollment: duoSelfEnrollment, LogoOverride: logoOverride, RememberMe: rememberMe, ResetPassword: resetPassword, ResetPasswordCustomURL: resetPasswordCustomURL, Session: session, Theme: theme})

From 0837c1dc8dbc2b55fd6532f35bde5288814f8be8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 22 Oct 2022 23:02:38 +1100
Subject: [PATCH 177/263] build(deps): update module
 github.com/go-webauthn/webauthn to v0.5.0 (#4235)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 go.mod |  9 +++++----
 go.sum | 23 +++++++++++++++--------
 2 files changed, 20 insertions(+), 12 deletions(-)

diff --git a/go.mod b/go.mod
index 5af10b040..939b3294a 100644
--- a/go.mod
+++ b/go.mod
@@ -15,7 +15,7 @@ require (
 	github.com/go-ldap/ldap/v3 v3.4.4
 	github.com/go-rod/rod v0.112.0
 	github.com/go-sql-driver/mysql v1.6.0
-	github.com/go-webauthn/webauthn v0.4.0
+	github.com/go-webauthn/webauthn v0.5.0
 	github.com/golang-jwt/jwt/v4 v4.4.2
 	github.com/golang/mock v1.6.0
 	github.com/google/uuid v1.3.0
@@ -60,9 +60,10 @@ require (
 	github.com/fxamacker/cbor/v2 v2.4.0 // indirect
 	github.com/go-crypt/x v0.1.3 // indirect
 	github.com/go-redis/redis/v8 v8.11.5 // indirect
-	github.com/go-webauthn/revoke v0.1.3 // indirect
+	github.com/go-webauthn/revoke v0.1.6 // indirect
 	github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b // indirect
 	github.com/golang/protobuf v1.5.2 // indirect
+	github.com/google/go-tpm v0.3.3 // indirect
 	github.com/gorilla/websocket v1.4.2 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/inconshreveable/mousetrap v1.0.1 // indirect
@@ -100,9 +101,9 @@ require (
 	github.com/ysmood/goob v0.4.0 // indirect
 	github.com/ysmood/gson v0.7.1 // indirect
 	github.com/ysmood/leakless v0.8.0 // indirect
-	golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90 // indirect
+	golang.org/x/crypto v0.1.0 // indirect
 	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
-	golang.org/x/net v0.0.0-20220722155237-a158d28d115b // indirect
+	golang.org/x/net v0.1.0 // indirect
 	golang.org/x/sys v0.1.0 // indirect
 	golang.org/x/tools v0.1.12 // indirect
 	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
diff --git a/go.sum b/go.sum
index befa3974d..861355db7 100644
--- a/go.sum
+++ b/go.sum
@@ -321,10 +321,10 @@ github.com/go-sql-driver/mysql v1.6.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LB
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE=
 github.com/go-test/deep v1.0.2-0.20181118220953-042da051cf31/go.mod h1:wGDj63lr65AM2AQyKZd/NYHGb0R+1RLqB8NKt3aSFNA=
-github.com/go-webauthn/revoke v0.1.3 h1:SU+/fD+Py4MMTqKnMfBJ5Td4skcvfWtjQbZnvT9ppB0=
-github.com/go-webauthn/revoke v0.1.3/go.mod h1:Vzr3vqXqGQVS21hYpbetmpIoN4HiSjv2gcZI7ltlneI=
-github.com/go-webauthn/webauthn v0.4.0 h1:nZFPH1yOXWpzBVpRFLtfeBb42NXz+T/xtSN+PZJXMDE=
-github.com/go-webauthn/webauthn v0.4.0/go.mod h1:x/nbCjR4E4b30gQ3Ws4zVpjN4ovkr4Ekjq64OExWi6U=
+github.com/go-webauthn/revoke v0.1.6 h1:3tv+itza9WpX5tryRQx4GwxCCBrCIiJ8GIkOhxiAmmU=
+github.com/go-webauthn/revoke v0.1.6/go.mod h1:TB4wuW4tPlwgF3znujA96F70/YSQXHPPWl7vgY09Iy8=
+github.com/go-webauthn/webauthn v0.5.0 h1:Tbmp37AGIhYbQmcy2hEffo3U3cgPClqvxJ7cLUnF7Rc=
+github.com/go-webauthn/webauthn v0.5.0/go.mod h1:0CBq/jNfPS9l033j4AxMk8K8MluiMsde9uGNSPFLEVE=
 github.com/gobuffalo/attrs v0.0.0-20190224210810-a9411de4debd/go.mod h1:4duuawTqi2wkkpB4ePgWMaai6/Kc6WEz83bhFwpHzj0=
 github.com/gobuffalo/attrs v0.1.0/go.mod h1:fmNpaWyHM0tRm8gCZWKx8yY9fvaNLo2PyzBNSrBZ5Hw=
 github.com/gobuffalo/buffalo v0.12.8-0.20181004233540-fac9bb505aa8/go.mod h1:sLyT7/dceRXJUxSsE813JTQtA3Eb1vjxWfo/N//vXIY=
@@ -644,6 +644,12 @@ github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8
 github.com/google/go-cmp v0.5.8 h1:e6P7q2lk1O+qJJb4BtCQXlK8vWEO8V1ZeuEdJNOqZyg=
 github.com/google/go-jsonnet v0.16.0/go.mod h1:sOcuej3UW1vpPTZOr8L7RQimqai1a57bt5j22LzGZCw=
 github.com/google/go-jsonnet v0.17.0/go.mod h1:sOcuej3UW1vpPTZOr8L7RQimqai1a57bt5j22LzGZCw=
+github.com/google/go-tpm v0.1.2-0.20190725015402-ae6dd98980d4/go.mod h1:H9HbmUG2YgV/PHITkO7p6wxEEj/v5nlsVWIwumwH2NI=
+github.com/google/go-tpm v0.3.0/go.mod h1:iVLWvrPp/bHeEkxTFi9WG6K9w0iy2yIszHwZGHPbzAw=
+github.com/google/go-tpm v0.3.3 h1:P/ZFNBZYXRxc+z7i5uyd8VP7MaDteuLZInzrH2idRGo=
+github.com/google/go-tpm v0.3.3/go.mod h1:9Hyn3rgnzWF9XBWVk6ml6A6hNkbWjNFlDQL51BeghL4=
+github.com/google/go-tpm-tools v0.0.0-20190906225433-1614c142f845/go.mod h1:AVfHadzbdzHo54inR2x1v640jdi1YSi3NauM2DUsxk0=
+github.com/google/go-tpm-tools v0.2.0/go.mod h1:npUd03rQ60lxN7tzeBJreG38RvWwme2N1reF/eeiBk4=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/martian v2.1.0+incompatible/go.mod h1:9I4somxYTbIHy5NJKHRl3wXiIaQGbYVAs8BPL6v8lEs=
 github.com/google/martian/v3 v3.0.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0=
@@ -1468,8 +1474,8 @@ golang.org/x/crypto v0.0.0-20201203163018-be400aefbc4c/go.mod h1:jdWPYTVW3xRLrWP
 golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20220214200702-86341886e292/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90 h1:Y/gsMcFOcR+6S6f3YeMKl5g+dZMEWqcz5Czj/GWYbkM=
-golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
+golang.org/x/crypto v0.1.0 h1:MDRAIl0xIo9Io2xV565hzXHw3zVseKrJKodhohM5CjU=
+golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
 golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -1572,8 +1578,8 @@ golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qx
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
-golang.org/x/net v0.0.0-20220722155237-a158d28d115b h1:PxfKdU9lEEDYjdIzOtC4qFWgkU2rGHdKlKowJSMN9h0=
-golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
+golang.org/x/net v0.1.0 h1:hZ/3BUoy5aId7sCpA/Tc5lt8DkFgdVS2onTpJsZ/fl0=
+golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20181003184128-c57b0facaced/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1688,6 +1694,7 @@ golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210629170331-7dc0b73dc9fb/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

From a6268e3c112e01e00f0a33f76c6f914a9c08731b Mon Sep 17 00:00:00 2001
From: Paul Ohl <37795294+paul-ohl@users.noreply.github.com>
Date: Sat, 22 Oct 2022 16:19:11 -0400
Subject: [PATCH 178/263] docs: grammar fixes for forwarded headers (#4237)

There were minor typos, and a phrase with no ending.
---
 .../en/integration/proxies/fowarded-headers/index.md        | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/content/en/integration/proxies/fowarded-headers/index.md b/docs/content/en/integration/proxies/fowarded-headers/index.md
index 9e7dbaa5b..a209ac9b0 100644
--- a/docs/content/en/integration/proxies/fowarded-headers/index.md
+++ b/docs/content/en/integration/proxies/fowarded-headers/index.md
@@ -13,17 +13,17 @@ toc: true
 ---
 
 The`X-Forwarded-*` headers presented to __Authelia__ must be from trusted sources. As such you must ensure that the
-reverse proxies and load balances utilized with __Authelia__ are configured to remove and replace specific headers when
+reverse proxies and load balancers utilized with __Authelia__ are configured to remove and replace specific headers when
 they come directly from clients and not from proxies in your trusted environment.
 
 Some proxies require users explicitly configure the proxy to trust another proxy, however some implicitly trust all
-headers regardless of the source and you have to manually
+headers regardless of the source so you will have to manually configure them.
 
 ## Network Rules
 
 In particular this is important for [Access Control Rules](../../../configuration/security/access-control.md#rules) as
 the [network criteria](../../../configuration/security/access-control.md#networks) relies on the [X-Forwarded-For]
-header. This header is expected to have a true representation of the clients actual IP address.
+header. This header is expected to have a true representation of the client's actual IP address.
 
 If this is not removed from non-trusted proxies a user could theoretically hijack any rule that contains this criteria
 to potentially skip an authentication criteria depending on how it is configured.

From 11ebaad06ad523746d411316455b3ec9f7b7ea63 Mon Sep 17 00:00:00 2001
From: "allcontributors[bot]"
 <46447321+allcontributors[bot]@users.noreply.github.com>
Date: Sun, 23 Oct 2022 07:20:55 +1100
Subject: [PATCH 179/263] docs: add paul-ohl as a contributor for doc (#4238)

* update README.md

* update .all-contributorsrc

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
---
 .all-contributorsrc | 9 +++++++++
 README.md           | 3 +++
 2 files changed, 12 insertions(+)

diff --git a/.all-contributorsrc b/.all-contributorsrc
index 5e4483c21..44ecc1b3a 100644
--- a/.all-contributorsrc
+++ b/.all-contributorsrc
@@ -805,6 +805,15 @@
         "ideas",
         "code"
       ]
+    },
+    {
+      "login": "paul-ohl",
+      "name": "Paul Ohl",
+      "avatar_url": "https://avatars.githubusercontent.com/u/37795294?v=4",
+      "profile": "https://github.com/paul-ohl",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7
diff --git a/README.md b/README.md
index af52d627d..7d452d5ef 100644
--- a/README.md
+++ b/README.md
@@ -304,6 +304,9 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center"><a href="https://github.com/polarathene"><img src="https://avatars.githubusercontent.com/u/5098581?v=4?s=100" width="100px;" alt="Brennan Kinney"/><br /><sub><b>Brennan Kinney</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=polarathene" title="Documentation">📖</a></td>
       <td align="center"><a href="https://github.com/LongerHV"><img src="https://avatars.githubusercontent.com/u/46924944?v=4?s=100" width="100px;" alt="Michał Mieszczak"/><br /><sub><b>Michał Mieszczak</b></sub></a><br /><a href="#ideas-LongerHV" title="Ideas, Planning, & Feedback">🤔</a> <a href="https://github.com/authelia/authelia/commits?author=LongerHV" title="Code">💻</a></td>
     </tr>
+    <tr>
+      <td align="center"><a href="https://github.com/paul-ohl"><img src="https://avatars.githubusercontent.com/u/37795294?v=4?s=100" width="100px;" alt="Paul Ohl"/><br /><sub><b>Paul Ohl</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=paul-ohl" title="Documentation">📖</a></td>
+    </tr>
   </tbody>
 </table>
 

From e3d82bcfa0d41357da0adb631ed686118088f85f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 23 Oct 2022 07:42:19 +1100
Subject: [PATCH 180/263] refactor: fix misc alignment issues and gen (#4239)

---
 config.template.yml                        | 142 ++++++++++-----------
 docs/data/misc.json                        |   2 +-
 internal/configuration/config.template.yml | 142 ++++++++++-----------
 internal/server/gen.go                     |   2 +-
 4 files changed, 144 insertions(+), 144 deletions(-)

diff --git a/config.template.yml b/config.template.yml
index 89c45d675..4940b3f33 100644
--- a/config.template.yml
+++ b/config.template.yml
@@ -910,78 +910,78 @@ regulation:
       ## Maximum TLS version for the connection.
       # maximum_version: TLS1.3
 
-        ## The certificate chain used with the private_key if the server requests TLS Client Authentication
-        ## i.e. Mutual TLS.
-        # certificate_chain: |
-          # -----BEGIN CERTIFICATE-----
-          # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
-          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-          # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
-          # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
-          # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
-          # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
-          # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
-          # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
-          # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
-          # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
-          # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
-          # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
-          # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
-          # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
-          # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
-          # -----END CERTIFICATE-----
-          # -----BEGIN CERTIFICATE-----
-          # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
-          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-          # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
-          # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
-          # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
-          # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
-          # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
-          # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
-          # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-          # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
-          # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
-          # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
-          # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
-          # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
-          # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
-          # qocikt3WAdU^invalid DO NOT USE=
-          # -----END CERTIFICATE-----
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
 
-        ## The private key used with the certificate_chain if the server requests TLS Client Authentication
-        ## i.e. Mutual TLS.
-        # private_key: |
-          #  -----BEGIN RSA PRIVATE KEY-----
-          # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
-          # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
-          # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
-          # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
-          # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
-          # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
-          # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
-          # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
-          # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
-          # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
-          # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
-          # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
-          # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
-          # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
-          # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
-          # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
-          # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
-          # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
-          # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
-          # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
-          # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
-          # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
-          # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
-          # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
-          # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
-          # DO NOT USE==
-          # -----END RSA PRIVATE KEY-----
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
   ##
   ## PostgreSQL (Storage Provider)
diff --git a/docs/data/misc.json b/docs/data/misc.json
index dc84fbe39..f20002991 100644
--- a/docs/data/misc.json
+++ b/docs/data/misc.json
@@ -1 +1 @@
-{"csp":{"default":"default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'; require-trusted-types-for 'script'","development":"default-src 'self' 'unsafe-eval'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'","nonce":"${NONCE}"}}
\ No newline at end of file
+{"csp":{"default":"default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'","development":"default-src 'self' 'unsafe-eval'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'","nonce":"${NONCE}"}}
\ No newline at end of file
diff --git a/internal/configuration/config.template.yml b/internal/configuration/config.template.yml
index 89c45d675..4940b3f33 100644
--- a/internal/configuration/config.template.yml
+++ b/internal/configuration/config.template.yml
@@ -910,78 +910,78 @@ regulation:
       ## Maximum TLS version for the connection.
       # maximum_version: TLS1.3
 
-        ## The certificate chain used with the private_key if the server requests TLS Client Authentication
-        ## i.e. Mutual TLS.
-        # certificate_chain: |
-          # -----BEGIN CERTIFICATE-----
-          # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
-          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-          # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
-          # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
-          # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
-          # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
-          # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
-          # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
-          # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
-          # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
-          # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
-          # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
-          # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
-          # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
-          # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
-          # -----END CERTIFICATE-----
-          # -----BEGIN CERTIFICATE-----
-          # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
-          # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
-          # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-          # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
-          # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
-          # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
-          # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
-          # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
-          # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
-          # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-          # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
-          # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
-          # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
-          # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
-          # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
-          # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
-          # qocikt3WAdU^invalid DO NOT USE=
-          # -----END CERTIFICATE-----
+      ## The certificate chain used with the private_key if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # certificate_chain: |
+        # -----BEGIN CERTIFICATE-----
+        # MIIC5jCCAc6gAwIBAgIRAK4Sj7FiN6PXo/urPfO4E7owDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAPKv3pSyP4ozGEiVLJ14dIWFCEGEgq7WUMI0SZZqQA2ID0L59U/Q
+        # /Usyy7uC9gfMUzODTpANtkOjFQcQAsxlR1FOjVBrX5QgjSvXwbQn3DtwMA7XWSl6
+        # LuYx2rBYSlMSN5UZQm/RxMtXfLK2b51WgEEYDFi+nECSqKzR4R54eOPkBEWRfvuY
+        # 91AMjlhpivg8e4JWkq4LVQUKbmiFYwIdK8XQiN4blY9WwXwJFYs5sQ/UYMwBFi0H
+        # kWOh7GEjfxgoUOPauIueZSMSlQp7zqAH39N0ZSYb6cS0Npj57QoWZSY3ak87ebcR
+        # Nf4rCvZLby7LoN7qYCKxmCaDD3x2+NYpWH8CAwEAAaM1MDMwDgYDVR0PAQH/BAQD
+        # AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN
+        # AQELBQADggEBAHSITqIQSNzonFl3DzxHPEzr2hp6peo45buAAtu8FZHoA+U7Icfh
+        # /ZXjPg7Xz+hgFwM/DTNGXkMWacQA/PaNWvZspgRJf2AXvNbMSs2UQODr7Tbv+Fb4
+        # lyblmMUNYFMCFVAMU0eIxXAFq2qcwv8UMcQFT0Z/35s6PVOakYnAGGQjTfp5Ljuq
+        # wsdc/xWmM0cHWube6sdRRUD7SY20KU/kWzl8iFO0VbSSrDf1AlEhnLEkp1SPaxXg
+        # OdBnl98MeoramNiJ7NT6Jnyb3zZ578fjaWfThiBpagItI8GZmG4s4Ovh2JbheN8i
+        # ZsjNr9jqHTjhyLVbDRlmJzcqoj4JhbKs6/I^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
+        # -----BEGIN CERTIFICATE-----
+        # MIIDBDCCAeygAwIBAgIRALJsPg21kA0zY4F1wUCIuoMwDQYJKoZIhvcNAQELBQAw
+        # EzERMA8GA1UEChMIQXV0aGVsaWEwHhcNNzAwMTAxMDAwMDAwWhcNNzEwMTAxMDAw
+        # MDAwWjATMREwDwYDVQQKEwhBdXRoZWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+        # ADCCAQoCggEBAMXHBvVxUzYk0u34/DINMSF+uiOekKOAjOrC6Mi9Ww8ytPVO7t2S
+        # zfTvM+XnEJqkFQFgimERfG/eGhjF9XIEY6LtnXe8ATvOK4nTwdufzBaoeQu3Gd50
+        # 5VXr6OHRo//ErrGvFXwP3g8xLePABsi/fkH3oDN+ztewOBMDzpd+KgTrk8ysv2ou
+        # kNRMKFZZqASvCgv0LD5KWvUCnL6wgf1oTXG7aztduA4oSkUP321GpOmBC5+5ElU7
+        # ysoRzvD12o9QJ/IfEaulIX06w9yVMo60C/h6A3U6GdkT1SiyTIqR7v7KU/IWd/Qi
+        # Lfftcj91VhCmJ73Meff2e2S2PrpjdXbG5FMCAwEAAaNTMFEwDgYDVR0PAQH/BAQD
+        # AgKkMA8GA1UdJQQIMAYGBFUdJQAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+        # Z7AtA3mzFc0InSBA5fiMfeLXA3owDQYJKoZIhvcNAQELBQADggEBAEE5hm1mtlk/
+        # kviCoHH4evbpw7rxPxDftIQlqYTtvMM4eWY/6icFoSZ4fUHEWYyps8SsPu/8f2tf
+        # 71LGgZn0FdHi1QU2H8m0HHK7TFw+5Q6RLrLdSyk0PItJ71s9en7r8pX820nAFEHZ
+        # HkOSfJZ7B5hFgUDkMtVM6bardXAhoqcMk4YCU96e9d4PB4eI+xGc+mNuYvov3RbB
+        # D0s8ICyojeyPVLerz4wHjZu68Z5frAzhZ68YbzNs8j2fIBKKHkHyLG1iQyF+LJVj
+        # 2PjCP+auJsj6fQQpMGoyGtpLcSDh+ptcTngUD8JsWipzTCjmaNqdPHAOYmcgtf4b
+        # qocikt3WAdU^invalid DO NOT USE=
+        # -----END CERTIFICATE-----
 
-        ## The private key used with the certificate_chain if the server requests TLS Client Authentication
-        ## i.e. Mutual TLS.
-        # private_key: |
-          #  -----BEGIN RSA PRIVATE KEY-----
-          # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
-          # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
-          # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
-          # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
-          # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
-          # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
-          # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
-          # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
-          # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
-          # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
-          # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
-          # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
-          # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
-          # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
-          # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
-          # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
-          # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
-          # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
-          # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
-          # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
-          # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
-          # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
-          # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
-          # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
-          # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
-          # DO NOT USE==
-          # -----END RSA PRIVATE KEY-----
+      ## The private key used with the certificate_chain if the server requests TLS Client Authentication
+      ## i.e. Mutual TLS.
+      # private_key: |
+        #  -----BEGIN RSA PRIVATE KEY-----
+        # MIIEpAIBAAKCAQEA8q/elLI/ijMYSJUsnXh0hYUIQYSCrtZQwjRJlmpADYgPQvn1
+        # T9D9SzLLu4L2B8xTM4NOkA22Q6MVBxACzGVHUU6NUGtflCCNK9fBtCfcO3AwDtdZ
+        # KXou5jHasFhKUxI3lRlCb9HEy1d8srZvnVaAQRgMWL6cQJKorNHhHnh44+QERZF+
+        # +5j3UAyOWGmK+Dx7glaSrgtVBQpuaIVjAh0rxdCI3huVj1bBfAkVizmxD9RgzAEW
+        # LQeRY6HsYSN/GChQ49q4i55lIxKVCnvOoAff03RlJhvpxLQ2mPntChZlJjdqTzt5
+        # txE1/isK9ktvLsug3upgIrGYJoMPfHb41ilYfwIDAQABAoIBAQDTOdFf2JjHH1um
+        # aPgRAvNf9v7Nj5jytaRKs5nM6iNf46ls4QPreXnMhqSeSwj6lpNgBYxOgzC9Q+cc
+        # Y4ob/paJJPaIJTxmP8K/gyWcOQlNToL1l+eJ20eQoZm23NGr5fIsunSBwLEpTrdB
+        # ENqqtcwhW937K8Pxy/Q1nuLyU2bc6Tn/ivLozc8n27dpQWWKh8537VY7ancIaACr
+        # LJJLYxKqhQpjtBWAyCDvZQirnAOm9KnvIHaGXIswCZ4Xbsu0Y9NL+woARPyRVQvG
+        # jfxy4EmO9s1s6y7OObSukwKDSNihAKHx/VIbvVWx8g2Lv5fGOa+J2Y7o9Qurs8t5
+        # BQwMTt0BAoGBAPUw5Z32EszNepAeV3E2mPFUc5CLiqAxagZJuNDO2pKtyN29ETTR
+        # Ma4O1cWtGb6RqcNNN/Iukfkdk27Q5nC9VJSUUPYelOLc1WYOoUf6oKRzE72dkMQV
+        # R4bf6TkjD+OVR17fAfkswkGahZ5XA7j48KIQ+YC4jbnYKSxZTYyKPjH/AoGBAP1i
+        # tqXt36OVlP+y84wWqZSjMelBIVa9phDVGJmmhz3i1cMni8eLpJzWecA3pfnG6Tm9
+        # ze5M4whASleEt+M00gEvNaU9ND+z0wBfi+/DwJYIbv8PQdGrBiZFrPhTPjGQUldR
+        # lXccV2meeLZv7TagVxSi3DO6dSJfSEHyemd5j9mBAoGAX8Hv+0gOQZQCSOTAq8Nx
+        # 6dZcp9gHlNaXnMsP9eTDckOSzh636JPGvj6m+GPJSSbkURUIQ3oyokMNwFqvlNos
+        # fTaLhAOfjBZI9WnDTTQxpugWjphJ4HqbC67JC/qIiw5S6FdaEvGLEEoD4zoChywZ
+        # 9oGAn+fz2d/0/JAH/FpFPgsCgYEAp/ipZgPzziiZ9ov1wbdAQcWRj7RaWnssPFpX
+        # jXwEiXT3CgEMO4MJ4+KWIWOChrti3qFBg6i6lDyyS6Qyls7sLFbUdC7HlTcrOEMe
+        # rBoTcCI1GqZNlqWOVQ65ZIEiaI7o1vPBZo2GMQEZuq8mDKFsOMThvvTrM5cAep84
+        # n6HJR4ECgYABWcbsSnr0MKvVth/inxjbKapbZnp2HUCuw87Ie5zK2Of/tbC20wwk
+        # yKw3vrGoE3O1t1g2m2tn8UGGASeZ842jZWjIODdSi5+icysQGuULKt86h/woz2SQ
+        # 27GoE2i5mh6Yez6VAYbUuns3FcwIsMyWLq043Tu2DNkx9ijOOAuQzw^invalid..
+        # DO NOT USE==
+        # -----END RSA PRIVATE KEY-----
 
   ##
   ## PostgreSQL (Storage Provider)
diff --git a/internal/server/gen.go b/internal/server/gen.go
index 9f7333090..d80dcf10d 100644
--- a/internal/server/gen.go
+++ b/internal/server/gen.go
@@ -8,6 +8,6 @@ package server
 
 const (
 	placeholderCSPNonce = "${NONCE}"
-	tmplCSPDefault      = "default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-%s'; frame-ancestors 'none'; base-uri 'self'; require-trusted-types-for 'script'"
+	tmplCSPDefault      = "default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-%s'; frame-ancestors 'none'; base-uri 'self'"
 	tmplCSPDevelopment  = "default-src 'self' 'unsafe-eval'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-%s'; frame-ancestors 'none'; base-uri 'self'"
 )

From 6654fd6130d31fe6887adbad86452e54d212db71 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 23 Oct 2022 08:12:16 +1100
Subject: [PATCH 181/263] refactor: update users_database examples (#4240)

---
 docs/content/en/reference/guides/passwords.md       | 8 ++++----
 examples/compose/lite/authelia/users_database.yml   | 1 +
 examples/compose/local/authelia/users_database.yml  | 1 +
 internal/authentication/users_database.template.yml | 1 +
 4 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/docs/content/en/reference/guides/passwords.md b/docs/content/en/reference/guides/passwords.md
index a9f8218eb..42c204f25 100644
--- a/docs/content/en/reference/guides/passwords.md
+++ b/docs/content/en/reference/guides/passwords.md
@@ -25,31 +25,31 @@ The format of the [YAML] file is as follows:
 ```yaml
 users:
   john:
+    disabled: false
     displayname: "John Doe"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: john.doe@authelia.com
     groups:
       - admins
       - dev
-    disabled: false
   harry:
+    disabled: false
     displayname: "Harry Potter"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: harry.potter@authelia.com
     groups: []
-    disabled: false
   bob:
+    disabled: false
     displayname: "Bob Dylan"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: bob.dylan@authelia.com
     groups:
       - dev
-    disabled: false
   james:
+    disabled: false
     displayname: "James Dean"
     password: "$argon2id$v=19$m=65536,t=3,p=2$BpLnfgDsc2WD8F2q$o/vzA4myCqZZ36bUGsDY//8mKUYNZZaR0t4MFFSs+iM"
     email: james.dean@authelia.com
-    disabled: false
 ```
 
 ## Passwords
diff --git a/examples/compose/lite/authelia/users_database.yml b/examples/compose/lite/authelia/users_database.yml
index 8785bebe9..08944d06e 100644
--- a/examples/compose/lite/authelia/users_database.yml
+++ b/examples/compose/lite/authelia/users_database.yml
@@ -8,6 +8,7 @@
 # List of users
 users:
   authelia:
+    disabled: false
     displayname: "Authelia User"
     # Password is authelia
     password: "$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/"  # yamllint disable-line rule:line-length
diff --git a/examples/compose/local/authelia/users_database.yml b/examples/compose/local/authelia/users_database.yml
index f1811d933..1ca38bd6d 100644
--- a/examples/compose/local/authelia/users_database.yml
+++ b/examples/compose/local/authelia/users_database.yml
@@ -8,6 +8,7 @@
 # List of users
 users:
   <USERNAME>:
+    disabled: false
     displayname: "<DISPLAYNAME>"
     password: "<PASSWORD>"
     email: <USERNAME>@example.com
diff --git a/internal/authentication/users_database.template.yml b/internal/authentication/users_database.template.yml
index a6a691080..9e1b2043e 100644
--- a/internal/authentication/users_database.template.yml
+++ b/internal/authentication/users_database.template.yml
@@ -8,6 +8,7 @@
 
 users:
   authelia:
+    disabled: false
     displayname: "Test User"
     password: "$argon2id$v=19$m=32768,t=1,p=8$eUhVT1dQa082YVk2VUhDMQ$E8QI4jHbUBt3EdsU1NFDu4Bq5jObKNx7nBKSn1EYQxk"  # Password is 'authelia'
     email: authelia@authelia.com

From 138ad4c4d85a985847ac9e1d908e559b10ac02bc Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 23 Oct 2022 12:07:45 +1100
Subject: [PATCH 182/263] release: v4.37.0 (#4236)

---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index 34af6b344..dccb74030 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "authelia",
-  "version": "4.36.9",
+  "version": "4.37.0",
   "private": true,
   "pnpm": {
     "peerDependencyRules": {

From 96beb097065155bd3475d1e7384965e774ef34f1 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 23 Oct 2022 13:58:57 +1100
Subject: [PATCH 183/263] docs: update issue templates (#4241)

---
 .github/ISSUE_TEMPLATE/bug-report.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
index 52745d7fa..235c4914d 100644
--- a/.github/ISSUE_TEMPLATE/bug-report.yml
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -26,6 +26,7 @@ body:
       description: What version(s) of Authelia can you reproduce this bug on?
       multiple: true
       options:
+        - v4.37.0
         - v4.36.9
         - v4.36.8
         - v4.36.7
@@ -56,7 +57,6 @@ body:
         - v4.32.2
         - v4.32.1
         - v4.32.0
-        - v4.31.0
     validations:
       required: true
   - type: dropdown

From 296dc9ecc5c020191a407a56db97eaa9de71ca7e Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 23 Oct 2022 14:42:44 +1100
Subject: [PATCH 184/263] docs: fix missing secret links (#4242)

* docs: fix missing secret links

* docs: fix missing secret links

* docs: fix missing doc
---
 docs/content/en/configuration/first-factor/ldap.md | 7 +++++++
 docs/content/en/configuration/methods/secrets.md   | 7 ++++++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/docs/content/en/configuration/first-factor/ldap.md b/docs/content/en/configuration/first-factor/ldap.md
index f1d9604da..3afff36d0 100644
--- a/docs/content/en/configuration/first-factor/ldap.md
+++ b/docs/content/en/configuration/first-factor/ldap.md
@@ -266,6 +266,13 @@ server and utilizing a service account.*
 Permits binding to the server without a password. For this option to be enabled both the [password](#password)
 configuration option must be blank and the [password_reset disable](introduction.md#disable) option must be `true`.
 
+### permit_feature_detection_failure
+
+{{< confkey type="boolean" default="false" required="no" >}}
+
+Authelia searches for the RootDSE to discover supported controls and extensions. This option is a compatability option
+which *__should not__* be enabled unless the LDAP server returns an error when searching for the RootDSE.
+
 ### user
 
 {{< confkey type="string" required="yes" >}}
diff --git a/docs/content/en/configuration/methods/secrets.md b/docs/content/en/configuration/methods/secrets.md
index 2a767bb49..c8094790a 100644
--- a/docs/content/en/configuration/methods/secrets.md
+++ b/docs/content/en/configuration/methods/secrets.md
@@ -60,13 +60,18 @@ other configuration using the environment but instead of loading a file the valu
 [duo_api.secret_key]: ../second-factor/duo.md#secret_key
 [session.secret]: ../session/introduction.md#secret
 [session.redis.password]: ../session/redis.md#password
+[session.redis.tls.private_key]: ../session/redis.md#tls
 [session.redis.high_availability.sentinel_password]: ../session/redis.md#sentinel_password
 [storage.encryption_key]: ../storage/introduction.md#encryption_key
 [storage.mysql.password]: ../storage/mysql.md#password
+[storage.mysql.tls.private_key]: ../storage/mysql.md#tls
 [storage.postgres.password]: ../storage/postgres.md#password
-[storage.postgres.ssl.key]: ../storage/postgres.md#key
+[storage.postgres.tls.private_key]: ../storage/postgres.md#tls
+[storage.postgres.ssl.key]: ../storage/postgres.md
 [notifier.smtp.password]: ../notifications/smtp.md#password
+[notifier.smtp.tls.private_key]: ../notifications/smtp.md#tls
 [authentication_backend.ldap.password]: ../first-factor/ldap.md#password
+[authentication_backend.ldap.tls.private_key]: ../first-factor/ldap.md#tls
 [identity_providers.oidc.issuer_private_key]: ../identity-providers/open-id-connect.md#issuer_private_key
 [identity_providers.oidc.hmac_secret]: ../identity-providers/open-id-connect.md#hmac_secret
 

From 12e3cd56b130a6ef71058b734a6d51fe298c335f Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sun, 23 Oct 2022 18:09:19 +1100
Subject: [PATCH 185/263] docs: refactor generator guides (#4244)

---
 .../en/configuration/first-factor/ldap.md     |   2 +-
 .../identity-providers/open-id-connect.md     |   4 +-
 .../en/configuration/miscellaneous/guides.md  |  77 ---------
 .../en/configuration/miscellaneous/server.md  |   2 +-
 .../en/configuration/notifications/smtp.md    |   2 +-
 .../en/configuration/session/introduction.md  |   2 +-
 .../content/en/configuration/session/redis.md |   4 +-
 .../en/configuration/storage/introduction.md  |   2 +-
 .../content/en/configuration/storage/mysql.md |   2 +-
 .../en/configuration/storage/postgres.md      |   2 +-
 .../openid-connect/specific-information.md    |   4 +-
 .../overview/prologue/architecture/index.md   |   2 +-
 .../guides/generating-secure-values.md        | 151 ++++++++++++++++++
 13 files changed, 165 insertions(+), 91 deletions(-)
 delete mode 100644 docs/content/en/configuration/miscellaneous/guides.md
 create mode 100644 docs/content/en/reference/guides/generating-secure-values.md

diff --git a/docs/content/en/configuration/first-factor/ldap.md b/docs/content/en/configuration/first-factor/ldap.md
index 3afff36d0..a46710169 100644
--- a/docs/content/en/configuration/first-factor/ldap.md
+++ b/docs/content/en/configuration/first-factor/ldap.md
@@ -289,7 +289,7 @@ especially for containerized deployments.*
 The password paired with the [user](#user) used to bind to the LDAP server for lookup and password change operations.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters and the user password is changed to this value.
 
 ## Refresh Interval
diff --git a/docs/content/en/configuration/identity-providers/open-id-connect.md b/docs/content/en/configuration/identity-providers/open-id-connect.md
index 04fd9677e..9baad93f0 100644
--- a/docs/content/en/configuration/identity-providers/open-id-connect.md
+++ b/docs/content/en/configuration/identity-providers/open-id-connect.md
@@ -157,7 +157,7 @@ The HMAC secret used to sign the [JWT]'s. The provided string is hashed to a SHA
 purpose of meeting the required format.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters.
 
 ### issuer_certificate_chain
@@ -185,7 +185,7 @@ certificate immediately following it if present.
 especially for containerized deployments.*
 
 The private key used to sign/encrypt the [OpenID Connect] issued [JWT]'s. The key must be generated by the administrator
-and can be done by following the [Generating an RSA Keypair](../miscellaneous/guides.md#generating-an-rsa-keypair) guide.
+and can be done by following the [Generating an RSA Keypair](../../reference/guides/generating-secure-values.md#generating-an-rsa-keypair) guide.
 
 The private key *__MUST__*:
 * Be a PEM block encoded in the DER base64 format ([RFC4648]).
diff --git a/docs/content/en/configuration/miscellaneous/guides.md b/docs/content/en/configuration/miscellaneous/guides.md
deleted file mode 100644
index 20e04b6ed..000000000
--- a/docs/content/en/configuration/miscellaneous/guides.md
+++ /dev/null
@@ -1,77 +0,0 @@
----
-title: "Guides"
-description: "Miscellaneous Guides for Configuration."
-lead: "This section contains miscellaneous guides used in the configuration."
-date: 2022-06-15T17:51:47+10:00
-draft: false
-images: []
-menu:
-  configuration:
-    parent: "miscellaneous"
-weight: 199500
-toc: true
----
-
-## Generating a Random Alphanumeric String
-
-Some sections of the configuration recommend generating a random string. There are many ways to accomplish this, one
-possible way on Linux is utilizing the following command which prints a string with a length in characters of
-`${LENGTH}` to `stdout`. The string will only contain alphanumeric characters.
-
-```bash
-LENGTH=64
-tr -cd '[:alnum:]' < /dev/urandom | fold -w "${LENGTH}" | head -n 1 | tr -d '\n' ; echo
-```
-
-## Generating an RSA Keypair
-
-Some sections of the configuration need an RSA keypair. There are many ways to achieve this, this section explains two
-such ways.
-
-### openssl
-
-The `openssl` command on Linux can be used to generate a RSA 4096 bit keypair:
-
-```bash
-openssl genrsa -out private.pem 4096
-openssl rsa -in private.pem -outform PEM -pubout -out public.pem
-```
-
-### authelia
-
-The __Authelia__ docker container or CLI binary can be used to generate a RSA 4096 bit keypair:
-
-```bash
-docker run -u "$(id -u):$(id -g)" -v "$(pwd)":/keys authelia/authelia:latest authelia crypto pair rsa generate --bits 4096 --directory /keys
-```
-
-```bash
-authelia crypto pair rsa generate --directory /path/to/keys
-```
-
-## Generating an RSA Self-Signed Certificate
-
-Some sections of the configuration need a certificate and it may be possible to use a self-signed certificate. There are
-many ways to achieve this, this section explains two such ways.
-
-### openssl
-
-The `openssl` command on Linux can be used to generate a RSA 4096 bit self-signed certificate for the domain
-`example.com`:
-
-```bash
-openssl req -x509 -nodes -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 -subj '/CN=example.com'
-```
-
-### authelia
-
-The __Authelia__ docker container or binary can be used to generate a RSA 4096 bit self-signed certificate for the
-domain `example.com`:
-
-```bash
-docker run -u "$(id -u):$(id -g)" -v "$(pwd)":/keys authelia/authelia authelia crypto certificate rsa generate --common-name example.com --directory /keys
-```
-
-```bash
-authelia crypto certificate rsa generate --common-name example.com --directory /path/to/keys
-```
diff --git a/docs/content/en/configuration/miscellaneous/server.md b/docs/content/en/configuration/miscellaneous/server.md
index 65ba79629..45529df05 100644
--- a/docs/content/en/configuration/miscellaneous/server.md
+++ b/docs/content/en/configuration/miscellaneous/server.md
@@ -130,7 +130,7 @@ security on lower areas of the OSI model. However it required, if you specify bo
 [tls certificate](#certificate) options, Authelia will listen for TLS connections.
 
 The key must be generated by the administrator and can be done by following the
-[Generating an RSA Self Signed Certificate](../miscellaneous/guides.md#generating-an-rsa-self-signed-certificate)
+[Generating an RSA Self Signed Certificate](../../reference/guides/generating-secure-values.md#generating-an-rsa-self-signed-certificate)
 guide provided a self-signed certificate is fit for purpose. If a self-signed certificate is fit for purpose is beyond
 the scope of the documentation and if it is not fit for purpose we instead recommend generating a certificate signing
 request or obtaining a certificate signed by one of the many ACME certificate providers. Methods to achieve this are
diff --git a/docs/content/en/configuration/notifications/smtp.md b/docs/content/en/configuration/notifications/smtp.md
index e2a69d963..511bb668b 100644
--- a/docs/content/en/configuration/notifications/smtp.md
+++ b/docs/content/en/configuration/notifications/smtp.md
@@ -156,7 +156,7 @@ especially for containerized deployments.*
 The password paired with the [username](#username) sent for authentication with the SMTP server.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters and the user password is changed to this value.
 
 ### sender
diff --git a/docs/content/en/configuration/session/introduction.md b/docs/content/en/configuration/session/introduction.md
index 494ab0832..6bc2a3baa 100644
--- a/docs/content/en/configuration/session/introduction.md
+++ b/docs/content/en/configuration/session/introduction.md
@@ -88,7 +88,7 @@ especially for containerized deployments.*
 The secret key used to encrypt session data in Redis.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters.
 
 ### expiration
diff --git a/docs/content/en/configuration/session/redis.md b/docs/content/en/configuration/session/redis.md
index e8fc23dc3..fa6b9dd8a 100644
--- a/docs/content/en/configuration/session/redis.md
+++ b/docs/content/en/configuration/session/redis.md
@@ -154,7 +154,7 @@ especially for containerized deployments.*
 The password for [redis authentication](https://redis.io/commands/auth).
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters and the user password is changed to this value.
 
 ### database_index
@@ -213,7 +213,7 @@ authenticate to the Redis Sentinel with ACL-based authentication. Otherwise, thi
 authentication.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters and the user password is changed to this value.
 
 #### nodes
diff --git a/docs/content/en/configuration/storage/introduction.md b/docs/content/en/configuration/storage/introduction.md
index 412fa9fcb..d2c09e830 100644
--- a/docs/content/en/configuration/storage/introduction.md
+++ b/docs/content/en/configuration/storage/introduction.md
@@ -44,7 +44,7 @@ value, and use that to encrypt the data with the AES-GCM 256bit algorithm.
 The minimum length of this key is 20 characters.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters.
 
 See [security measures](../../overview/security/measures.md#storage-security-measures) for more information.
diff --git a/docs/content/en/configuration/storage/mysql.md b/docs/content/en/configuration/storage/mysql.md
index f9ef749c1..15aa648ee 100644
--- a/docs/content/en/configuration/storage/mysql.md
+++ b/docs/content/en/configuration/storage/mysql.md
@@ -174,7 +174,7 @@ especially for containerized deployments.*
 The password paired with the [username](#username) used to connect to the database.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters and the user password is changed to this value.
 
 ### timeout
diff --git a/docs/content/en/configuration/storage/postgres.md b/docs/content/en/configuration/storage/postgres.md
index d888640d5..4c3adbc60 100644
--- a/docs/content/en/configuration/storage/postgres.md
+++ b/docs/content/en/configuration/storage/postgres.md
@@ -178,7 +178,7 @@ especially for containerized deployments.*
 The password paired with the [username](#username) used to connect to the database.
 
 It's __strongly recommended__ this is a
-[Random Alphanumeric String](../miscellaneous/guides.md#generating-a-random-alphanumeric-string) with 64 or more
+[Random Alphanumeric String](../../reference/guides/generating-secure-values.md#generating-a-random-alphanumeric-string) with 64 or more
 characters and the user password is changed to this value.
 
 ### timeout
diff --git a/docs/content/en/integration/openid-connect/specific-information.md b/docs/content/en/integration/openid-connect/specific-information.md
index 8e461e1d7..a89bf29b6 100644
--- a/docs/content/en/integration/openid-connect/specific-information.md
+++ b/docs/content/en/integration/openid-connect/specific-information.md
@@ -25,12 +25,12 @@ We strongly recommend the following guidelines for generating client secrets:
 5. Secrets should only have alphanumeric characters as some implementations do not appropriately encode the secret
    when using it to access the token endpoint.
 
-Authelia provides an easy way to perform such actions via the [authelia crypto hash generate] command. Users can
+Authelia provides an easy way to perform such actions via the [Generating a Random Password Hash] guide. Users can
 perform a command such as `authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72` command to
 both generate a client secret with 72 characters which is printed and is to be used with the relying party and hash it
 using PBKDF2 which can be stored in the Authelia configuration.
 
-[authelia crypto hash generate]: ../../reference/cli/authelia/authelia_crypto_hash_generate.md
+[Generating a Random Password Hash]: ../../reference/guides/generating-secure-values.md#generating-a-random-password-hash
 
 ### Plaintext
 
diff --git a/docs/content/en/overview/prologue/architecture/index.md b/docs/content/en/overview/prologue/architecture/index.md
index 9b012bcde..d4e36f494 100644
--- a/docs/content/en/overview/prologue/architecture/index.md
+++ b/docs/content/en/overview/prologue/architecture/index.md
@@ -54,5 +54,5 @@ connections. Please note that it has been decided that we won't support websites
 risk due to misconfiguration (see [#590](https://github.com/authelia/authelia/issues/590)).
 
 If a self-signed certificate is required, the
-[Generating an RSA Self-Signed Certificate](../../../configuration/miscellaneous/guides.md#generating-an-rsa-self-signed-certificate)
+[Generating an RSA Self-Signed Certificate](../../../reference/guides/generating-secure-values.md#generating-an-rsa-self-signed-certificate)
 guide should be followed.
diff --git a/docs/content/en/reference/guides/generating-secure-values.md b/docs/content/en/reference/guides/generating-secure-values.md
new file mode 100644
index 000000000..46f9e7d46
--- /dev/null
+++ b/docs/content/en/reference/guides/generating-secure-values.md
@@ -0,0 +1,151 @@
+---
+title: "Generating Secure Values"
+description: "A reference guide on generating secure values such as password hashes, password strings, and cryptography keys"
+lead: "This section contains reference documentation for generating secure values such as password hashes, password strings, and cryptography keys."
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  reference:
+    parent: "guides"
+weight: 220
+toc: true
+---
+
+## Generating a Random Password Hash
+
+Often times it's required that a random password is generated. While you could randomly generate a string then hash it,
+we provide a convenience layer for this purpose.
+
+### authelia
+
+The __Authelia__ docker container or CLI binary can be used to generate a random alphanumeric string and output the
+the string and the hash at the same time.
+
+Use the `authelia crypto hash generate --help` command or see the [authelia crypto hash generate] reference guide for
+more information on all available options and algorithms.
+
+##### Using Docker
+
+```bash
+docker run authelia/authelia:latest authelia crypto hash generate argon2 --random --random.length 64 --random.charset alphanumeric
+```
+
+##### Using the Binary
+
+```bash
+authelia crypto hash generate argon2 --random --random.length 64 --random.charset alphanumeric
+```
+
+## Generating a Random Alphanumeric String
+
+Some sections of the configuration recommend generating a random string. There are many ways to accomplish this and the
+following methods are merely suggestions.
+
+### authelia
+
+The __Authelia__ docker container or CLI binary can be used to generate a random alphanumeric string.
+
+Use the `authelia crypto rand --help` command or see the [authelia crypto rand] reference guide for more information on
+all available options.
+
+##### Using Docker
+
+```bash
+docker run authelia/authelia:latest authelia crypto rand --length 64 --charset alphanumeric
+```
+
+##### Using the Binary
+
+```bash
+authelia crypto rand --length 64 --charset alphanumeric
+```
+
+### openssl
+
+The `openssl` command on Linux can be used to generate a random alphanumeric string:
+
+```bash
+openssl rand -hex 64
+```
+
+### Linux
+
+Basic Linux commands can be used to generate a random alphanumeric string:
+
+```bash
+LENGTH=64
+tr -cd '[:alnum:]' < /dev/urandom | fold -w "${LENGTH}" | head -n 1 | tr -d '\n' ; echo
+```
+
+## Generating an RSA Keypair
+
+Some sections of the configuration need an RSA keypair. There are many ways to achieve this, this section explains two
+such ways.
+
+### authelia
+
+The __Authelia__ docker container or CLI binary can be used to generate a RSA 4096 bit keypair.
+
+Use the `authelia crypto pair --help` command or see the [authelia crypto pair] reference guide for more
+information on all available options.
+
+##### Using Docker
+
+```bash
+docker run -u "$(id -u):$(id -g)" -v "$(pwd)":/keys authelia/authelia:latest authelia crypto pair rsa generate --bits 4096 --directory /keys
+```
+
+##### Using the Binary
+
+```bash
+authelia crypto pair rsa generate --directory /path/to/keys
+```
+
+### openssl
+
+The `openssl` command on Linux can be used to generate a RSA 4096 bit keypair:
+
+```bash
+openssl genrsa -out private.pem 4096
+openssl rsa -in private.pem -outform PEM -pubout -out public.pem
+```
+
+## Generating an RSA Self-Signed Certificate
+
+Some sections of the configuration need a certificate and it may be possible to use a self-signed certificate. There are
+many ways to achieve this, this section explains two such ways.
+
+### authelia
+
+The __Authelia__ docker container or binary can be used to generate a RSA 4096 bit self-signed certificate for the
+domain `example.com`.
+
+Use the `authelia crypto certificate --help` command or see the [authelia crypto certificate] reference guide for more
+information on all available options.
+
+##### Using Docker
+
+```bash
+docker run -u "$(id -u):$(id -g)" -v "$(pwd)":/keys authelia/authelia authelia crypto certificate rsa generate --common-name example.com --directory /keys
+```
+
+##### Using the Binary
+
+```bash
+authelia crypto certificate rsa generate --common-name example.com --directory /path/to/keys
+```
+
+### openssl
+
+The `openssl` command on Linux can be used to generate a RSA 4096 bit self-signed certificate for the domain
+`example.com`:
+
+```bash
+openssl req -x509 -nodes -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 -subj '/CN=example.com'
+```
+
+[authelia crypto hash generate]: ../cli/authelia/authelia_crypto_hash_generate.md
+[authelia crypto rand]: ../cli/authelia/authelia_crypto_rand.md
+[authelia crypto pair]: ../cli/authelia/authelia_crypto_pair.md
+[authelia crypto certificate]: ../cli/authelia/authelia_crypto_certificate.md

From 745459edd7c9523b9abad7d7c652fcb53d46eba3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 23 Oct 2022 21:02:12 +1100
Subject: [PATCH 186/263] build(deps): update module github.com/go-crypt/crypt
 to v0.1.14 (#4246)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 939b3294a..eb9a1556b 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/fsnotify/fsnotify v1.6.0
 	github.com/go-asn1-ber/asn1-ber v1.5.4
-	github.com/go-crypt/crypt v0.1.13
+	github.com/go-crypt/crypt v0.1.14
 	github.com/go-ldap/ldap/v3 v3.4.4
 	github.com/go-rod/rod v0.112.0
 	github.com/go-sql-driver/mysql v1.6.0
diff --git a/go.sum b/go.sum
index 861355db7..c0471d726 100644
--- a/go.sum
+++ b/go.sum
@@ -235,8 +235,8 @@ github.com/globalsign/mgo v0.0.0-20181015135952-eeefdecb41b8/go.mod h1:xkRDCp4j0
 github.com/go-asn1-ber/asn1-ber v1.5.4 h1:vXT6d/FNDiELJnLb6hGNa309LMsrCoYFvpwHDF0+Y1A=
 github.com/go-asn1-ber/asn1-ber v1.5.4/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkProFKoKdwZRWMe0=
 github.com/go-bindata/go-bindata v3.1.1+incompatible/go.mod h1:xK8Dsgwmeed+BBsSy2XTopBn/8uK2HWuGSnA11C3Joo=
-github.com/go-crypt/crypt v0.1.13 h1:MdmKsHjuT17LmFROTMtGEXBgojN23OyWhmV6JfGZNvw=
-github.com/go-crypt/crypt v0.1.13/go.mod h1:VNLdWMD0go46arq5WVZB2MV/9Vw02FOWhKDORXl7K2c=
+github.com/go-crypt/crypt v0.1.14 h1:Pd8iBYlbwDXJNi0lz8CS/qYvpvxCfP0XO/f5PYvVQ4o=
+github.com/go-crypt/crypt v0.1.14/go.mod h1:VNLdWMD0go46arq5WVZB2MV/9Vw02FOWhKDORXl7K2c=
 github.com/go-crypt/x v0.1.3 h1:3YSlHqOZsw4gcPzfqrcc5kg4GIhTKmkjl/ZVqJ3CbbU=
 github.com/go-crypt/x v0.1.3/go.mod h1:/6X1DjQki055ajXV/7pCHZM0OmMR1+csiXFkxK73Kc8=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=

From 53c1b645eeaaa5213a500b6e1ec58da0e081f386 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 24 Oct 2022 06:09:38 +1100
Subject: [PATCH 187/263] fix(storage): postgresql default port incorrect
 (#4251)

This fixes a typo with the default port for PostgreSQL in 4.37.

Fixes #4249
---
 .../migrations/V0006.ConsentPreConfiguration.mysql.up.sql       | 2 +-
 .../migrations/V0006.ConsentPreConfiguration.postgres.up.sql    | 2 +-
 .../migrations/V0006.ConsentPreConfiguration.sqlite.up.sql      | 2 +-
 internal/storage/sql_provider_backend_postgres.go               | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql
index 693b0ed91..a74a42fb9 100644
--- a/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.mysql.up.sql
@@ -8,7 +8,7 @@ CREATE TABLE oauth2_consent_preconfiguration (
     scopes TEXT NOT NULL,
     audience TEXT NULL,
     PRIMARY KEY (id),
-    CONSTRAINT oauth2_consent_preconfiguration_subjct_fkey
+    CONSTRAINT oauth2_consent_preconfiguration_subject_fkey
         FOREIGN KEY(subject)
             REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
 );
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql
index 71a98616f..964ddd3d9 100644
--- a/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.postgres.up.sql
@@ -8,7 +8,7 @@ CREATE TABLE oauth2_consent_preconfiguration (
     scopes TEXT NOT NULL,
     audience TEXT NULL,
     PRIMARY KEY (id),
-    CONSTRAINT oauth2_consent_preconfiguration_subjct_fkey
+    CONSTRAINT oauth2_consent_preconfiguration_subject_fkey
         FOREIGN KEY(subject)
             REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
 );
diff --git a/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql b/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql
index a491e82df..3f1bccef3 100644
--- a/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql
+++ b/internal/storage/migrations/V0006.ConsentPreConfiguration.sqlite.up.sql
@@ -8,7 +8,7 @@ CREATE TABLE oauth2_consent_preconfiguration (
     scopes TEXT NOT NULL,
     audience TEXT NULL,
     PRIMARY KEY (id),
-    CONSTRAINT oauth2_consent_preconfiguration_subjct_fkey
+    CONSTRAINT oauth2_consent_preconfiguration_subject_fkey
         FOREIGN KEY(subject)
             REFERENCES user_opaque_identifier(identifier) ON UPDATE RESTRICT ON DELETE RESTRICT
 );
diff --git a/internal/storage/sql_provider_backend_postgres.go b/internal/storage/sql_provider_backend_postgres.go
index 19a14f351..e8834db44 100644
--- a/internal/storage/sql_provider_backend_postgres.go
+++ b/internal/storage/sql_provider_backend_postgres.go
@@ -148,7 +148,7 @@ func dsnPostgreSQL(config *schema.PostgreSQLStorageConfiguration, globalCACertPo
 	}
 
 	if dsnConfig.Port == 0 && !path.IsAbs(dsnConfig.Host) {
-		dsnConfig.Port = 4321
+		dsnConfig.Port = 5432
 	}
 
 	return stdlib.RegisterConnConfig(dsnConfig)

From 89ef8449b684db91169d323085a85e4dfc9bf9ff Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 24 Oct 2022 06:26:18 +1100
Subject: [PATCH 188/263] release: v4.37.1 (#4252)

---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index dccb74030..ba10da12a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "authelia",
-  "version": "4.37.0",
+  "version": "4.37.1",
   "private": true,
   "pnpm": {
     "peerDependencyRules": {

From 55a7f8112d207d2383a833e07ac749366937b63d Mon Sep 17 00:00:00 2001
From: matvey00z <matvey.ff@gmail.com>
Date: Sun, 23 Oct 2022 21:58:11 +0200
Subject: [PATCH 189/263] Update a broken link in the docs (#4250)

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 docs/content/en/configuration/miscellaneous/introduction.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/en/configuration/miscellaneous/introduction.md b/docs/content/en/configuration/miscellaneous/introduction.md
index 67b436b90..d8de18f72 100644
--- a/docs/content/en/configuration/miscellaneous/introduction.md
+++ b/docs/content/en/configuration/miscellaneous/introduction.md
@@ -73,7 +73,7 @@ default_2fa_method: totp
 especially for containerized deployments.*
 
 Defines the secret used to craft JWT tokens leveraged by the identity verification process. This can a random string.
-It's strongly recommended this is a [Random Alphanumeric String](guides.md#generating-a-random-alphanumeric-string) with
+It's strongly recommended this is a [Random Alphanumeric String](../../reference/guides/generating-secure-values.md/#generating-a-random-alphanumeric-string) with
 64 or more characters.
 
 ### theme

From 3402712247117e91b9009fdf268da8349172d793 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 24 Oct 2022 12:51:25 +1100
Subject: [PATCH 190/263] build(deps): update dependency @types/node to
 v18.11.4 (#4253)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index ba10da12a..13c068e6a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.0",
-    "@types/node": "18.11.3",
+    "@types/node": "18.11.4",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
     "@types/react-dom": "18.0.6",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 33aa097af..8b12fd1cf 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.2.0
-  '@types/node': 18.11.3
+  '@types/node': 18.11.4
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.0
-  '@types/node': 18.11.3
+  '@types/node': 18.11.4
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
   '@types/react-dom': 18.0.6
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.26.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
-  jest: 29.2.1_@types+node@18.11.3
+  jest: 29.2.1_@types+node@18.11.4
   jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.1
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2515,7 +2515,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2536,14 +2536,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.1_@types+node@18.11.3
+      jest-config: 29.2.1_@types+node@18.11.4
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2570,7 +2570,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       jest-mock: 29.2.1
     dev: true
 
@@ -2597,7 +2597,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       jest-message-util: 29.2.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
@@ -2630,7 +2630,7 @@ packages:
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2750,7 +2750,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2762,7 +2762,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2774,7 +2774,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3476,7 +3476,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3505,7 +3505,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3526,8 +3526,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.3:
-    resolution: {integrity: sha512-fNjDQzzOsZeKZu5NATgXUPsaFaTxeRgFXoosrHivTl8RGeV733OLawXsGfEk9a8/tySyZUyiZ6E8LcjPFZ2y1A==}
+  /@types/node/18.11.4:
+    resolution: {integrity: sha512-BxcJpBu8D3kv/GZkx/gSMz6VnTJREBj/4lbzYOQueUOELkt8WrO6zAcSPmp9uRPEW/d+lUO8QK0W2xnS1hEU0A==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5446,7 +5446,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
-      jest: 29.2.1_@types+node@18.11.3
+      jest: 29.2.1_@types+node@18.11.4
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6653,7 +6653,7 @@ packages:
       '@jest/expect': 29.2.1
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6672,7 +6672,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.1_@types+node@18.11.3:
+  /jest-cli/29.2.1_@types+node@18.11.4:
     resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6689,7 +6689,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.1_@types+node@18.11.3
+      jest-config: 29.2.1_@types+node@18.11.4
       jest-util: 29.2.1
       jest-validate: 29.2.1
       prompts: 2.4.2
@@ -6700,7 +6700,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.1_@types+node@18.11.3:
+  /jest-config/29.2.1_@types+node@18.11.4:
     resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6715,7 +6715,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       babel-jest: 29.2.1_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6780,7 +6780,7 @@ packages:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       jest-mock: 29.2.1
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6797,7 +6797,7 @@ packages:
       '@jest/environment': 29.2.1
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       jest-mock: 29.2.1
       jest-util: 29.2.1
     dev: true
@@ -6813,7 +6813,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6836,7 +6836,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6887,7 +6887,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       jest-util: 29.2.1
     dev: true
 
@@ -6952,7 +6952,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6983,7 +6983,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7006,7 +7006,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       graceful-fs: 4.2.10
     dev: true
 
@@ -7051,7 +7051,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7063,7 +7063,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7075,7 +7075,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7102,7 +7102,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.1_@types+node@18.11.3
+      jest: 29.2.1_@types+node@18.11.4
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7116,7 +7116,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7130,7 +7130,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7142,7 +7142,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7151,13 +7151,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.3
+      '@types/node': 18.11.4
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.1_@types+node@18.11.3:
+  /jest/29.2.1_@types+node@18.11.4:
     resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7170,7 +7170,7 @@ packages:
       '@jest/core': 29.2.1
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.1_@types+node@18.11.3
+      jest-cli: 29.2.1_@types+node@18.11.4
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From ef15a4a79a6ded20d0d0900ba3b112a74bbe73b8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 24 Oct 2022 21:47:42 +0000
Subject: [PATCH 191/263] build(deps): update dependency @types/react-dom to
 v18.0.7 (#4259)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index 13c068e6a..55f968a9e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -151,7 +151,7 @@
     "@types/node": "18.11.4",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.21",
-    "@types/react-dom": "18.0.6",
+    "@types/react-dom": "18.0.7",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.40.1",
     "@typescript-eslint/parser": "5.40.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 8b12fd1cf..9a770064b 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -19,7 +19,7 @@ specifiers:
   '@types/node': 18.11.4
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
-  '@types/react-dom': 18.0.6
+  '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.40.1
   '@typescript-eslint/parser': 5.40.1
@@ -101,7 +101,7 @@ devDependencies:
   '@types/node': 18.11.4
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.21
-  '@types/react-dom': 18.0.6
+  '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
   '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
@@ -3403,7 +3403,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       '@testing-library/dom': 8.16.0
-      '@types/react-dom': 18.0.6
+      '@types/react-dom': 18.0.7
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: true
@@ -3550,8 +3550,8 @@ packages:
       '@types/react': 18.0.21
     dev: true
 
-  /@types/react-dom/18.0.6:
-    resolution: {integrity: sha512-/5OFZgfIPSwy+YuIBP/FgJnQnsxhZhjjrnxudMddeblOouIodEQ75X14Rr4wGSG/bknL+Omy9iWlLo1u/9GzAA==}
+  /@types/react-dom/18.0.7:
+    resolution: {integrity: sha512-HaXc+BbqAZE1RdsK3tC8SbkFy6UL2xF76lT9rQs5JkPrJg3rWA3Ou/Lhw3YJQzEDkBpmJ79nBsfnd05WrBd2QQ==}
     dependencies:
       '@types/react': 18.0.21
     dev: true

From 67389230f46077d27266cbc3b3c91cf0cd0f60a2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 01:41:46 +0000
Subject: [PATCH 192/263] build(deps): update dependency @types/react to
 v18.0.22 (#4258)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 100 ++++++++++++++++++++++-----------------------
 2 files changed, 49 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 55f968a9e..24f806e0f 100644
--- a/web/package.json
+++ b/web/package.json
@@ -150,7 +150,7 @@
     "@types/jest": "29.2.0",
     "@types/node": "18.11.4",
     "@types/qrcode.react": "1.0.2",
-    "@types/react": "18.0.21",
+    "@types/react": "18.0.22",
     "@types/react-dom": "18.0.7",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.40.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 9a770064b..910a8da1a 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -18,7 +18,7 @@ specifiers:
   '@types/jest': 29.2.0
   '@types/node': 18.11.4
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.21
+  '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.40.1
@@ -67,15 +67,15 @@ specifiers:
 
 dependencies:
   '@emotion/cache': 11.10.3
-  '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
-  '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
+  '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
+  '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_z3olqqf34i6isisqzfodoltscq
-  '@mui/material': 5.10.10_ikcgkdnp4bn3rgptamntbhbo7e
-  '@mui/styles': 5.10.10_iapumuv4e6jcjznwuxpf4tt22e
+  '@mui/icons-material': 5.10.9_evwhpag4mxw53zuf6742e34asy
+  '@mui/material': 5.10.10_lctyvefami74wfotzrj7aq3nvy
+  '@mui/styles': 5.10.10_gd4tregka43x4eiz452mfdbv4y
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
@@ -100,7 +100,7 @@ devDependencies:
   '@types/jest': 29.2.0
   '@types/node': 18.11.4
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.21
+  '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
@@ -2304,7 +2304,7 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.4_iapumuv4e6jcjznwuxpf4tt22e:
+  /@emotion/react/11.10.4_gd4tregka43x4eiz452mfdbv4y:
     resolution: {integrity: sha512-j0AkMpr6BL8gldJZ6XQsQ8DnS9TxEQu1R+OGmDZiWjBAJtCcbt0tS3I/YffoqHXxH6MjgI7KdMbYKw3MEiU9eA==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2323,7 +2323,7 @@ packages:
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       hoist-non-react-statics: 3.3.2
       react: 18.2.0
     dev: false
@@ -2342,7 +2342,7 @@ packages:
     resolution: {integrity: sha512-OiTkRgpxescko+M51tZsMq7Puu/KP55wMT8BgpcXVG2hqXc0Vo0mfymJ/Uj24Hp0i083ji/o0aLddh08UEjq8w==}
     dev: false
 
-  /@emotion/styled/11.10.4_g3tud4ene45llglqap74b5kkse:
+  /@emotion/styled/11.10.4_mldqul6eeo6d4bjurrn2pmigvy:
     resolution: {integrity: sha512-pRl4R8Ez3UXvOPfc2bzIoV8u9P97UedgHS4FPX594ntwEuAMA114wlaHvOK24HB48uqfXiGlYIZYCxVJ1R1ttQ==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2358,11 +2358,11 @@ packages:
       '@babel/runtime': 7.18.9
       '@emotion/babel-plugin': 11.10.0
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
+      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
       '@emotion/serialize': 1.1.0
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       react: 18.2.0
     dev: false
 
@@ -2824,7 +2824,7 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.102_rj7ozvcq3uehdlnj3cbwzbi5ce:
+  /@mui/base/5.0.0-alpha.102_3sauqnnrv7lnox3glal4dmngp4:
     resolution: {integrity: sha512-5e/qAIP+DlkrZxIt/cwnDw/A3ii22WkoEoWKHyu4+oeGs3/1Flh7qLaN4h5EAIBB9TvTEZEUzvmsTInmIj6ghg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2837,10 +2837,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/is-prop-valid': 1.2.0
-      '@mui/types': 7.2.0_@types+react@18.0.21
+      '@mui/types': 7.2.0_@types+react@18.0.22
       '@mui/utils': 5.10.9_react@18.2.0
       '@popperjs/core': 2.11.6
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       clsx: 1.2.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -2852,7 +2852,7 @@ packages:
     resolution: {integrity: sha512-aDuE2PNEh+hAndxEWlZgq7uiFPZKJtnkPDX7v6kSCrMXA32ZaQ6rZi5olmC7DUHt/BaOSxb7N/im/ss0XBkDhA==}
     dev: false
 
-  /@mui/icons-material/5.10.9_z3olqqf34i6isisqzfodoltscq:
+  /@mui/icons-material/5.10.9_evwhpag4mxw53zuf6742e34asy:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2864,12 +2864,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.10_ikcgkdnp4bn3rgptamntbhbo7e
-      '@types/react': 18.0.21
+      '@mui/material': 5.10.10_lctyvefami74wfotzrj7aq3nvy
+      '@types/react': 18.0.22
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.10_ikcgkdnp4bn3rgptamntbhbo7e:
+  /@mui/material/5.10.10_lctyvefami74wfotzrj7aq3nvy:
     resolution: {integrity: sha512-ioLvqY7VvcePz9dnEIRhpiVvtJmAFmvG6rtLXXzVdMmAVbSaelr5Io07mPz/mCyqE+Uv8/4EuJV276DWO7etzA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2887,14 +2887,14 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
-      '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/base': 5.0.0-alpha.102_rj7ozvcq3uehdlnj3cbwzbi5ce
+      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
+      '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
+      '@mui/base': 5.0.0-alpha.102_3sauqnnrv7lnox3glal4dmngp4
       '@mui/core-downloads-tracker': 5.10.10
-      '@mui/system': 5.10.10_h33l6npc22g7vcra72cibfsrvm
-      '@mui/types': 7.2.0_@types+react@18.0.21
+      '@mui/system': 5.10.10_qc3jfcxc65cvi4apunx356ezsi
+      '@mui/types': 7.2.0_@types+react@18.0.22
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
       csstype: 3.1.1
@@ -2905,7 +2905,7 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.9_iapumuv4e6jcjznwuxpf4tt22e:
+  /@mui/private-theming/5.10.9_gd4tregka43x4eiz452mfdbv4y:
     resolution: {integrity: sha512-BN7/CnsVPVyBaQpDTij4uV2xGYHHHhOgpdxeYLlIu+TqnsVM7wUeF+37kXvHovxM6xmL5qoaVUD98gDC0IZnHg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2917,7 +2917,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -2937,14 +2937,14 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/cache': 11.10.3
-      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
-      '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
+      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
+      '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.10_iapumuv4e6jcjznwuxpf4tt22e:
+  /@mui/styles/5.10.10_gd4tregka43x4eiz452mfdbv4y:
     resolution: {integrity: sha512-utr87q/euocRdc2ekFX7DL1gqTVfogSVeu74Nspr8rtK/afC9QwF3ScP/XThVXWPcQKjBWHMKWtAO9BSVE4KDg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2956,10 +2956,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.9_iapumuv4e6jcjznwuxpf4tt22e
-      '@mui/types': 7.2.0_@types+react@18.0.21
+      '@mui/private-theming': 5.10.9_gd4tregka43x4eiz452mfdbv4y
+      '@mui/types': 7.2.0_@types+react@18.0.22
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       clsx: 1.2.1
       csstype: 3.1.1
       hoist-non-react-statics: 3.3.2
@@ -2975,7 +2975,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.10_h33l6npc22g7vcra72cibfsrvm:
+  /@mui/system/5.10.10_qc3jfcxc65cvi4apunx356ezsi:
     resolution: {integrity: sha512-TXwtKN0adKpBrZmO+eilQWoPf2veh050HLYrN78Kps9OhlvO70v/2Kya0+mORFhu9yhpAwjHXO8JII/R4a5ZLA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2992,20 +2992,20 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_iapumuv4e6jcjznwuxpf4tt22e
-      '@emotion/styled': 11.10.4_g3tud4ene45llglqap74b5kkse
-      '@mui/private-theming': 5.10.9_iapumuv4e6jcjznwuxpf4tt22e
+      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
+      '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
+      '@mui/private-theming': 5.10.9_gd4tregka43x4eiz452mfdbv4y
       '@mui/styled-engine': 5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq
-      '@mui/types': 7.2.0_@types+react@18.0.21
+      '@mui/types': 7.2.0_@types+react@18.0.22
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
       clsx: 1.2.1
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/types/7.2.0_@types+react@18.0.21:
+  /@mui/types/7.2.0_@types+react@18.0.22:
     resolution: {integrity: sha512-lGXtFKe5lp3UxTBGqKI1l7G8sE2xBik8qCfrLHD5olwP/YU0/ReWoWT7Lp1//ri32dK39oPMrJN8TgbkCSbsNA==}
     peerDependencies:
       '@types/react': '*'
@@ -3013,7 +3013,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
     dev: false
 
   /@mui/utils/5.10.9_react@18.2.0:
@@ -3547,33 +3547,33 @@ packages:
   /@types/qrcode.react/1.0.2:
     resolution: {integrity: sha512-I9Oq5Cjlkgy3Tw7krCnCXLw2/zMhizkTere49OOcta23tkvH0xBTP0yInimTh0gstLRtb8Ki9NZVujE5UI6ffQ==}
     dependencies:
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
     dev: true
 
   /@types/react-dom/18.0.7:
     resolution: {integrity: sha512-HaXc+BbqAZE1RdsK3tC8SbkFy6UL2xF76lT9rQs5JkPrJg3rWA3Ou/Lhw3YJQzEDkBpmJ79nBsfnd05WrBd2QQ==}
     dependencies:
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
     dev: true
 
   /@types/react-is/17.0.3:
     resolution: {integrity: sha512-aBTIWg1emtu95bLTLx0cpkxwGW3ueZv71nE2YFBpL8k/z5czEW8yYpOo8Dp+UUAFAtKwNaOsh/ioSeQnWlZcfw==}
     dependencies:
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
     dev: false
 
   /@types/react-transition-group/4.4.5:
     resolution: {integrity: sha512-juKD/eiSM3/xZYzjuzH6ZwpP+/lejltmiS3QEzV/vmb/Q8+HfDmxu+Baga8UEMGBqV88Nbg4l2hY/K2DkyaLLA==}
     dependencies:
-      '@types/react': 18.0.21
+      '@types/react': 18.0.22
     dev: false
 
-  /@types/react/18.0.21:
-    resolution: {integrity: sha512-7QUCOxvFgnD5Jk8ZKlUAhVcRj7GuJRjnjjiY/IUBWKgOlnvDvTMLD4RTF7NPyVmbRhNrbomZiOepg7M/2Kj1mA==}
+  /@types/react/18.0.22:
+    resolution: {integrity: sha512-4yWc5PyCkZN8ke8K9rQHkTXxHIWHxLzzW6RI1kXVoepkD3vULpKzC2sDtAMKn78h92BRYuzf+7b/ms7ajE6hFw==}
     dependencies:
       '@types/prop-types': 15.7.5
       '@types/scheduler': 0.16.2
-      csstype: 3.1.0
+      csstype: 3.1.1
 
   /@types/scheduler/0.16.2:
     resolution: {integrity: sha512-hppQEBDmlwhFAXKJX2KnWLYu5yMfi91yazPb2l+lbJiwW+wdo1gNeRA+3RgNSO39WYX2euey41KEwnqesU2Jew==}
@@ -4741,12 +4741,8 @@ packages:
       cssom: 0.3.8
     dev: true
 
-  /csstype/3.1.0:
-    resolution: {integrity: sha512-uX1KG+x9h5hIJsaKR9xHUeUraxf8IODOwq9JLNPq6BwB04a/xgpq3rcx47l5BZu5zBPlgD342tdke3Hom/nJRA==}
-
   /csstype/3.1.1:
     resolution: {integrity: sha512-DJR/VvkAvSZW9bTouZue2sSxDwdTN92uHjqeKVm+0dAqdfNykRzQ95tay8aXMBAAPpUiq4Qcug2L7neoRh2Egw==}
-    dev: false
 
   /damerau-levenshtein/1.0.8:
     resolution: {integrity: sha512-sdQSFB7+llfUcQHUQO3+B8ERRj0Oa4w9POWMI/puGtuf7gFywGmkaLCElnudfTiKZV+NvHqL0ifzdrI8Ro7ESA==}

From 8e4e30757d016c8186c18724c8f3ec88f8550d17 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 13:12:39 +1100
Subject: [PATCH 193/263] build(deps): update module github.com/jackc/pgx/v5 to
 v5.0.4 (#4264)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index eb9a1556b..d17559764 100644
--- a/go.mod
+++ b/go.mod
@@ -19,7 +19,7 @@ require (
 	github.com/golang-jwt/jwt/v4 v4.4.2
 	github.com/golang/mock v1.6.0
 	github.com/google/uuid v1.3.0
-	github.com/jackc/pgx/v5 v5.0.3
+	github.com/jackc/pgx/v5 v5.0.4
 	github.com/jmoiron/sqlx v1.3.5
 	github.com/knadh/koanf v1.4.4
 	github.com/mattn/go-sqlite3 v2.0.3+incompatible
diff --git a/go.sum b/go.sum
index c0471d726..b96401301 100644
--- a/go.sum
+++ b/go.sum
@@ -800,8 +800,8 @@ github.com/jackc/pgx/v4 v4.6.0/go.mod h1:vPh43ZzxijXUVJ+t/EmXBtFmbFVO72cuneCT9oA
 github.com/jackc/pgx/v4 v4.6.1-0.20200510190926-94ba730bb1e9/go.mod h1:t3/cdRQl6fOLDxqtlyhe9UWgfIi9R8+8v8GKV5TRA/o=
 github.com/jackc/pgx/v4 v4.6.1-0.20200606145419-4e5062306904/go.mod h1:ZDaNWkt9sW1JMiNn0kdYBaLelIhw7Pg4qd+Vk6tw7Hg=
 github.com/jackc/pgx/v4 v4.10.1/go.mod h1:QlrWebbs3kqEZPHCTGyxecvzG6tvIsYu+A5b1raylkA=
-github.com/jackc/pgx/v5 v5.0.3 h1:4flM5ecR/555F0EcnjdaZa6MhBU+nr0QbZIo5vaKjuM=
-github.com/jackc/pgx/v5 v5.0.3/go.mod h1:JBbvW3Hdw77jKl9uJrEDATUZIFM2VFPzRq4RWIhkF4o=
+github.com/jackc/pgx/v5 v5.0.4 h1:r5O6y84qHX/z/HZV40JBdx2obsHz7/uRj5b+CcYEdeY=
+github.com/jackc/pgx/v5 v5.0.4/go.mod h1:U0ynklHtgg43fue9Ly30w3OCSTDPlXjig9ghrNGaguQ=
 github.com/jackc/puddle v0.0.0-20190413234325-e4ced69a3a2b/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v0.0.0-20190608224051-11cab39313c9/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v1.1.0/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=

From dfd196460f414edd09f62732fcd237339a17d4f3 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 25 Oct 2022 16:12:42 +1100
Subject: [PATCH 194/263] refactor: close database connections on shutdown
 (#4255)

This explicitly closes the database connection during shutdown.
---
 docs/content/en/configuration/miscellaneous/server.md | 2 +-
 internal/commands/root.go                             | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/docs/content/en/configuration/miscellaneous/server.md b/docs/content/en/configuration/miscellaneous/server.md
index 45529df05..39340d5bf 100644
--- a/docs/content/en/configuration/miscellaneous/server.md
+++ b/docs/content/en/configuration/miscellaneous/server.md
@@ -37,7 +37,7 @@ server:
   timeouts:
     read: 6s
     write: 6s
-    idle: 10s
+    idle: 30s
 ```
 
 ## Options
diff --git a/internal/commands/root.go b/internal/commands/root.go
index 0fe843523..e9639be44 100644
--- a/internal/commands/root.go
+++ b/internal/commands/root.go
@@ -193,6 +193,10 @@ func runServices(config *schema.Configuration, providers middlewares.Providers,
 		}
 	}
 
+	if err = providers.StorageProvider.Close(); err != nil {
+		log.WithError(err).Errorf("Error occurred closing the database connection")
+	}
+
 	if err = g.Wait(); err != nil {
 		log.WithError(err).Errorf("Error occurred waiting for shutdown")
 	}

From e8cc37c3f0307fedf01b9c843f9f60a2dcfc1284 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 09:52:51 +0000
Subject: [PATCH 195/263] build(deps): update typescript-eslint monorepo to
 v5.41.0 (#4261)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 102 ++++++++++++++++++++++-----------------------
 2 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 24f806e0f..3c571e3dd 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.22",
     "@types/react-dom": "18.0.7",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.40.1",
-    "@typescript-eslint/parser": "5.40.1",
+    "@typescript-eslint/eslint-plugin": "5.41.0",
+    "@typescript-eslint/parser": "5.41.0",
     "@vitejs/plugin-react": "2.1.0",
     "esbuild": "0.15.12",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 910a8da1a..aee35f851 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.40.1
-  '@typescript-eslint/parser': 5.40.1
+  '@typescript-eslint/eslint-plugin': 5.41.0
+  '@typescript-eslint/parser': 5.41.0
   '@vitejs/plugin-react': 2.1.0
   axios: 0.27.2
   broadcast-channel: 4.18.0
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
-  '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+  '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
+  '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
   '@vitejs/plugin-react': 2.1.0_vite@3.1.8
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_js7zyunwfzuon2jiu4xunbs6rq
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
-  eslint-plugin-import: 2.26.0_66dbmam7x4jttzjgt7jagac5je
+  eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
   eslint-plugin-prettier: 4.2.1_aniwkeyvlpmwkidetuytnokvcm
   eslint-plugin-react: 7.31.10_eslint@8.26.0
@@ -3616,8 +3616,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.40.1_c4zyna56jjjrggqkyejnaxjxfu:
-    resolution: {integrity: sha512-FsWboKkWdytGiXT5O1/R9j37YgcjO8MKHSUmWnIEjVaz0krHkplPnYi7mwdb+5+cs0toFNQb0HIrN7zONdIEWg==}
+  /@typescript-eslint/eslint-plugin/5.41.0_huremdigmcnkianavgfk3x6iou:
+    resolution: {integrity: sha512-DXUS22Y57/LAFSg3x7Vi6RNAuLpTXwxB9S2nIA7msBb/Zt8p7XqMwdpdc1IU7CkOQUPgAqR5fWvxuKCbneKGmA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3627,10 +3627,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
-      '@typescript-eslint/scope-manager': 5.40.1
-      '@typescript-eslint/type-utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
-      '@typescript-eslint/utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/scope-manager': 5.41.0
+      '@typescript-eslint/type-utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
       debug: 4.3.4
       eslint: 8.26.0
       ignore: 5.2.0
@@ -3655,8 +3655,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.40.1_wyqvi574yv7oiwfeinomdzmc3m:
-    resolution: {integrity: sha512-IK6x55va5w4YvXd4b3VrXQPldV9vQTxi5ov+g4pMANsXPTXOcfjx08CRR1Dfrcc51syPtXHF5bgLlMHYFrvQtg==}
+  /@typescript-eslint/parser/5.41.0_wyqvi574yv7oiwfeinomdzmc3m:
+    resolution: {integrity: sha512-HQVfix4+RL5YRWZboMD1pUfFN8MpRH4laziWkkAzyO1fvNOY/uinZcvo3QiFJVS/siNHupV8E5+xSwQZrl6PZA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3665,9 +3665,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.40.1
-      '@typescript-eslint/types': 5.40.1
-      '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.41.0
+      '@typescript-eslint/types': 5.41.0
+      '@typescript-eslint/typescript-estree': 5.41.0_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.26.0
       typescript: 4.8.4
@@ -3683,16 +3683,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.40.1:
-    resolution: {integrity: sha512-jkn4xsJiUQucI16OLCXrLRXDZ3afKhOIqXs4R3O+M00hdQLKR58WuyXPZZjhKLFCEP2g+TXdBRtLQ33UfAdRUg==}
+  /@typescript-eslint/scope-manager/5.41.0:
+    resolution: {integrity: sha512-xOxPJCnuktUkY2xoEZBKXO5DBCugFzjrVndKdUnyQr3+9aDWZReKq9MhaoVnbL+maVwWJu/N0SEtrtEUNb62QQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.40.1
-      '@typescript-eslint/visitor-keys': 5.40.1
+      '@typescript-eslint/types': 5.41.0
+      '@typescript-eslint/visitor-keys': 5.41.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.40.1_wyqvi574yv7oiwfeinomdzmc3m:
-    resolution: {integrity: sha512-DLAs+AHQOe6n5LRraXiv27IYPhleF0ldEmx6yBqBgBLaNRKTkffhV1RPsjoJBhVup2zHxfaRtan8/YRBgYhU9Q==}
+  /@typescript-eslint/type-utils/5.41.0_wyqvi574yv7oiwfeinomdzmc3m:
+    resolution: {integrity: sha512-L30HNvIG6A1Q0R58e4hu4h+fZqaO909UcnnPbwKiN6Rc3BUEx6ez2wgN7aC0cBfcAjZfwkzE+E2PQQ9nEuoqfA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3701,8 +3701,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
-      '@typescript-eslint/utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/typescript-estree': 5.41.0_typescript@4.8.4
+      '@typescript-eslint/utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
       debug: 4.3.4
       eslint: 8.26.0
       tsutils: 3.21.0_typescript@4.8.4
@@ -3716,8 +3716,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.40.1:
-    resolution: {integrity: sha512-Icg9kiuVJSwdzSQvtdGspOlWNjVDnF3qVIKXdJ103o36yRprdl3Ge5cABQx+csx960nuMF21v8qvO31v9t3OHw==}
+  /@typescript-eslint/types/5.41.0:
+    resolution: {integrity: sha512-5BejraMXMC+2UjefDvrH0Fo/eLwZRV6859SXRg+FgbhA0R0l6lDqDGAQYhKbXhPN2ofk2kY5sgGyLNL907UXpA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3742,8 +3742,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.40.1_typescript@4.8.4:
-    resolution: {integrity: sha512-5QTP/nW5+60jBcEPfXy/EZL01qrl9GZtbgDZtDPlfW5zj/zjNrdI2B5zMUHmOsfvOr2cWqwVdWjobCiHcedmQA==}
+  /@typescript-eslint/typescript-estree/5.41.0_typescript@4.8.4:
+    resolution: {integrity: sha512-SlzFYRwFSvswzDSQ/zPkIWcHv8O5y42YUskko9c4ki+fV6HATsTODUPbRbcGDFYP86gaJL5xohUEytvyNNcXWg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3751,8 +3751,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.40.1
-      '@typescript-eslint/visitor-keys': 5.40.1
+      '@typescript-eslint/types': 5.41.0
+      '@typescript-eslint/visitor-keys': 5.41.0
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3781,17 +3781,17 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.40.1_wyqvi574yv7oiwfeinomdzmc3m:
-    resolution: {integrity: sha512-a2TAVScoX9fjryNrW6BZRnreDUszxqm9eQ9Esv8n5nXApMW0zeANUYlwh/DED04SC/ifuBvXgZpIK5xeJHQ3aw==}
+  /@typescript-eslint/utils/5.41.0_wyqvi574yv7oiwfeinomdzmc3m:
+    resolution: {integrity: sha512-QlvfwaN9jaMga9EBazQ+5DDx/4sAdqDkcs05AsQHMaopluVCUyu1bTRUVKzXbgjDlrRAQrYVoi/sXJ9fmG+KLQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
       '@types/semver': 7.3.12
-      '@typescript-eslint/scope-manager': 5.40.1
-      '@typescript-eslint/types': 5.40.1
-      '@typescript-eslint/typescript-estree': 5.40.1_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.41.0
+      '@typescript-eslint/types': 5.41.0
+      '@typescript-eslint/typescript-estree': 5.41.0_typescript@4.8.4
       eslint: 8.26.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.26.0
@@ -3809,11 +3809,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.40.1:
-    resolution: {integrity: sha512-A2DGmeZ+FMja0geX5rww+DpvILpwo1OsiQs0M+joPWJYsiEFBLsH0y1oFymPNul6Z5okSmHpP4ivkc2N0Cgfkw==}
+  /@typescript-eslint/visitor-keys/5.41.0:
+    resolution: {integrity: sha512-vilqeHj267v8uzzakbm13HkPMl7cbYpKVjgFWZPIOHIJHZtinvypUhJ5xBXfWYg4eFKqztbMMpOgFpT9Gfx4fw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.40.1
+      '@typescript-eslint/types': 5.41.0
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5295,14 +5295,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_wxy5unzcco5r76nfxbzwrmhnca
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
-      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
+      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.26.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.26.0
-      eslint-plugin-import: 2.26.0_66dbmam7x4jttzjgt7jagac5je
-      eslint-plugin-jest: 25.7.0_himunudilofiyaga3ja2a2jxlq
+      eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
+      eslint-plugin-jest: 25.7.0_fnd6abgdh5k3pififntlu5cheq
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
       eslint-plugin-react: 7.31.10_eslint@8.26.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
@@ -5340,7 +5340,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.26.0
-      eslint-plugin-import: 2.26.0_66dbmam7x4jttzjgt7jagac5je
+      eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5350,7 +5350,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_abjtvfrqx6apykyqhkvez5sn74:
+  /eslint-module-utils/2.7.3_wpldeify6ml4exj7gzmn6kiyze:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5368,7 +5368,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
@@ -5395,7 +5395,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_66dbmam7x4jttzjgt7jagac5je:
+  /eslint-plugin-import/2.26.0_r2te5lumhbgztz2yv5ofo3mkvi:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5405,14 +5405,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.26.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_abjtvfrqx6apykyqhkvez5sn74
+      eslint-module-utils: 2.7.3_wpldeify6ml4exj7gzmn6kiyze
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5426,7 +5426,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_himunudilofiyaga3ja2a2jxlq:
+  /eslint-plugin-jest/25.7.0_fnd6abgdh5k3pififntlu5cheq:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5439,7 +5439,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.40.1_c4zyna56jjjrggqkyejnaxjxfu
+      '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
       jest: 29.2.1_@types+node@18.11.4
@@ -5525,7 +5525,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.40.1_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
     transitivePeerDependencies:
       - supports-color

From 2c15ea24ad9f4e4aea5230127f172ae6df3b4a9a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 12:32:02 +0000
Subject: [PATCH 196/263] build(deps): update module github.com/spf13/cobra to
 v1.6.1 (#4265)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index d17559764..72b1b2a9d 100644
--- a/go.mod
+++ b/go.mod
@@ -32,7 +32,7 @@ require (
 	github.com/pquerna/otp v1.3.0
 	github.com/prometheus/client_golang v1.13.0
 	github.com/sirupsen/logrus v1.9.0
-	github.com/spf13/cobra v1.6.0
+	github.com/spf13/cobra v1.6.1
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.0
 	github.com/trustelem/zxcvbn v1.0.1
diff --git a/go.sum b/go.sum
index b96401301..f7beb124f 100644
--- a/go.sum
+++ b/go.sum
@@ -1275,8 +1275,8 @@ github.com/spf13/cobra v0.0.6/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHN
 github.com/spf13/cobra v0.0.7/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/cobra v1.0.0/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/cobra v1.1.3/go.mod h1:pGADOWyqRD/YMrPZigI/zbliZ2wVD/23d+is3pSWzOo=
-github.com/spf13/cobra v1.6.0 h1:42a0n6jwCot1pUmomAp4T7DeMD+20LFv4Q54pxLf2LI=
-github.com/spf13/cobra v1.6.0/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
+github.com/spf13/cobra v1.6.1 h1:o94oiPyS4KD1mPy2fmcYYHHfCxLqYjJOhGsCHFZtEzA=
+github.com/spf13/cobra v1.6.1/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.1.0 h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmqnqMYADFk=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=

From 89235a9718b98931e6cc1ed60f84ddfd2a60af1f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Oct 2022 00:15:55 +1100
Subject: [PATCH 197/263] build(deps): update module
 github.com/valyala/fasthttp to v1.41.0 (#4267)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 4 ++--
 go.sum | 8 ++++++--
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/go.mod b/go.mod
index 72b1b2a9d..d29a799b1 100644
--- a/go.mod
+++ b/go.mod
@@ -36,7 +36,7 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.0
 	github.com/trustelem/zxcvbn v1.0.1
-	github.com/valyala/fasthttp v1.40.0
+	github.com/valyala/fasthttp v1.41.0
 	golang.org/x/sync v0.1.0
 	golang.org/x/term v0.1.0
 	golang.org/x/text v0.4.0
@@ -70,7 +70,7 @@ require (
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b // indirect
 	github.com/jandelgado/gcov2lcov v1.0.5 // indirect
-	github.com/klauspost/compress v1.15.0 // indirect
+	github.com/klauspost/compress v1.15.9 // indirect
 	github.com/magiconair/properties v1.8.5 // indirect
 	github.com/mattn/goveralls v0.0.6 // indirect
 	github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
diff --git a/go.sum b/go.sum
index f7beb124f..5f31f6574 100644
--- a/go.sum
+++ b/go.sum
@@ -858,8 +858,9 @@ github.com/kisielk/errcheck v1.2.0/go.mod h1:/BMXB+zMLi60iA8Vv6Ksmxu/1UDYcXs4uQL
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.9.5/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
-github.com/klauspost/compress v1.15.0 h1:xqfchp4whNFxn5A4XFyyYtitiWI8Hy5EW59jEwcyL6U=
 github.com/klauspost/compress v1.15.0/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
+github.com/klauspost/compress v1.15.9 h1:wKRjX6JRtDdrE9qwa4b/Cip7ACOshUI4smpCQanqjSY=
+github.com/klauspost/compress v1.15.9/go.mod h1:PhcZ0MbTNciWF3rruxRgKxI5NkcHHrHUDtV4Yw2GlzU=
 github.com/knadh/koanf v0.14.1-0.20201201075439-e0853799f9ec/go.mod h1:H5mEFsTeWizwFXHKtsITL5ipsLTuAMQoGuQpp+1JL9U=
 github.com/knadh/koanf v1.2.2/go.mod h1:xpPTwMhsA/aaQLAilyCCqfpEiY1gpa160AiCuWHJUjY=
 github.com/knadh/koanf v1.4.4 h1:d2jY5nCCeoaiqvEKSBW9rEc93EfNy/XWgWsSB3j7JEA=
@@ -1346,8 +1347,9 @@ github.com/urfave/cli v1.22.1/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtX
 github.com/urfave/negroni v1.0.0/go.mod h1:Meg73S6kFm/4PpbYdq35yYWoCZ9mS/YSx+lKnmiohz4=
 github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
-github.com/valyala/fasthttp v1.40.0 h1:CRq/00MfruPGFLTQKY8b+8SfdK60TxNztjRMnH0t1Yc=
 github.com/valyala/fasthttp v1.40.0/go.mod h1:t/G+3rLek+CyY9bnIE+YlMRddxVAAGjhxndDB4i4C0I=
+github.com/valyala/fasthttp v1.41.0 h1:zeR0Z1my1wDHTRiamBCXVglQdbUwgb9uWG3k1HQz6jY=
+github.com/valyala/fasthttp v1.41.0/go.mod h1:f6VbjjoI3z1NDOZOv17o6RvtRSWxC77seBFc2uWtgiY=
 github.com/valyala/tcplisten v1.0.0/go.mod h1:T0xQ8SeCZGxckz9qRXTfG43PvQ/mcWh7FwZEA7Ioqkc=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
@@ -1578,6 +1580,7 @@ golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qx
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
+golang.org/x/net v0.0.0-20220906165146-f3363e06e74c/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk=
 golang.org/x/net v0.1.0 h1:hZ/3BUoy5aId7sCpA/Tc5lt8DkFgdVS2onTpJsZ/fl0=
 golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
@@ -1700,6 +1703,7 @@ golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.1.0 h1:kunALQeHf1/185U1i0GOB/fy1IPRDDpuoOOqRReG57U=
 golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

From 979b926dc6f9a78fee056787b3ee7f4c54b587f1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 17:07:41 +0000
Subject: [PATCH 198/263] build(deps): update dependency @mui/material to
 v5.10.11 (#4266)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 26 +++++++++++++-------------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/web/package.json b/web/package.json
index 3c571e3dd..6d6e407af 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,7 +26,7 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.9",
-    "@mui/material": "5.10.10",
+    "@mui/material": "5.10.11",
     "@mui/styles": "5.10.10",
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index aee35f851..9258e46b2 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,7 +11,7 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.9
-  '@mui/material': 5.10.10
+  '@mui/material': 5.10.11
   '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
@@ -73,8 +73,8 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_evwhpag4mxw53zuf6742e34asy
-  '@mui/material': 5.10.10_lctyvefami74wfotzrj7aq3nvy
+  '@mui/icons-material': 5.10.9_phghchuxfqhoqnzsel7xdy3aaq
+  '@mui/material': 5.10.11_lctyvefami74wfotzrj7aq3nvy
   '@mui/styles': 5.10.10_gd4tregka43x4eiz452mfdbv4y
   axios: 0.27.2
   broadcast-channel: 4.18.0
@@ -2824,8 +2824,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.102_3sauqnnrv7lnox3glal4dmngp4:
-    resolution: {integrity: sha512-5e/qAIP+DlkrZxIt/cwnDw/A3ii22WkoEoWKHyu4+oeGs3/1Flh7qLaN4h5EAIBB9TvTEZEUzvmsTInmIj6ghg==}
+  /@mui/base/5.0.0-alpha.103_3sauqnnrv7lnox3glal4dmngp4:
+    resolution: {integrity: sha512-fJIyB2df3CHn7D26WHnutnY7vew6aytTlhmRJz6GX7ag19zU2GcOUhJAzY5qwWcrXKnlYgzimhEjaEnuiUWU4g==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2848,11 +2848,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.10:
-    resolution: {integrity: sha512-aDuE2PNEh+hAndxEWlZgq7uiFPZKJtnkPDX7v6kSCrMXA32ZaQ6rZi5olmC7DUHt/BaOSxb7N/im/ss0XBkDhA==}
+  /@mui/core-downloads-tracker/5.10.11:
+    resolution: {integrity: sha512-u5ff+UCFDHcR8MoQ8tuJR4c35vt7T/ki3aMEE2O3XQoGs8KJSrBiisFpFKyldg9/W2NSyoZxN+kxEGIfRxh+9Q==}
     dev: false
 
-  /@mui/icons-material/5.10.9_evwhpag4mxw53zuf6742e34asy:
+  /@mui/icons-material/5.10.9_phghchuxfqhoqnzsel7xdy3aaq:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2864,13 +2864,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.10_lctyvefami74wfotzrj7aq3nvy
+      '@mui/material': 5.10.11_lctyvefami74wfotzrj7aq3nvy
       '@types/react': 18.0.22
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.10_lctyvefami74wfotzrj7aq3nvy:
-    resolution: {integrity: sha512-ioLvqY7VvcePz9dnEIRhpiVvtJmAFmvG6rtLXXzVdMmAVbSaelr5Io07mPz/mCyqE+Uv8/4EuJV276DWO7etzA==}
+  /@mui/material/5.10.11_lctyvefami74wfotzrj7aq3nvy:
+    resolution: {integrity: sha512-KJ0wPCTbv6sFzwA3dgg0gowdfF+SRl7D510J9l6Nl/KFX0EawcewQudqKY4slYGFXniKa5PykqokpaWXsCCPqg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2889,8 +2889,8 @@ packages:
       '@babel/runtime': 7.19.0
       '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
       '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
-      '@mui/base': 5.0.0-alpha.102_3sauqnnrv7lnox3glal4dmngp4
-      '@mui/core-downloads-tracker': 5.10.10
+      '@mui/base': 5.0.0-alpha.103_3sauqnnrv7lnox3glal4dmngp4
+      '@mui/core-downloads-tracker': 5.10.11
       '@mui/system': 5.10.10_qc3jfcxc65cvi4apunx356ezsi
       '@mui/types': 7.2.0_@types+react@18.0.22
       '@mui/utils': 5.10.9_react@18.2.0

From 94c818561b32e9996b9a65f12bd483ae96069f35 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 20:48:21 +0000
Subject: [PATCH 199/263] build(deps): update dependency @types/node to
 v18.11.5 (#4263)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6d6e407af..886511d65 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.0",
-    "@types/node": "18.11.4",
+    "@types/node": "18.11.5",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.22",
     "@types/react-dom": "18.0.7",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 9258e46b2..a912c7d8d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.2.0
-  '@types/node': 18.11.4
+  '@types/node': 18.11.5
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.0
-  '@types/node': 18.11.4
+  '@types/node': 18.11.5
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.26.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
-  jest: 29.2.1_@types+node@18.11.4
+  jest: 29.2.1_@types+node@18.11.5
   jest-environment-jsdom: 29.2.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.1
@@ -2503,7 +2503,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2515,7 +2515,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2536,14 +2536,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.1_@types+node@18.11.4
+      jest-config: 29.2.1_@types+node@18.11.5
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2570,7 +2570,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       jest-mock: 29.2.1
     dev: true
 
@@ -2597,7 +2597,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       jest-message-util: 29.2.1
       jest-mock: 29.2.1
       jest-util: 29.2.1
@@ -2630,7 +2630,7 @@ packages:
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2750,7 +2750,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2762,7 +2762,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2774,7 +2774,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3476,7 +3476,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3505,7 +3505,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3526,8 +3526,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.4:
-    resolution: {integrity: sha512-BxcJpBu8D3kv/GZkx/gSMz6VnTJREBj/4lbzYOQueUOELkt8WrO6zAcSPmp9uRPEW/d+lUO8QK0W2xnS1hEU0A==}
+  /@types/node/18.11.5:
+    resolution: {integrity: sha512-3JRwhbjI+cHLAkUorhf8RnqUbFXajvzX4q6fMn5JwkgtuwfYtRQYI3u4V92vI6NJuTsbBQWWh3RZjFsuevyMGQ==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5442,7 +5442,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
-      jest: 29.2.1_@types+node@18.11.4
+      jest: 29.2.1_@types+node@18.11.5
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6649,7 +6649,7 @@ packages:
       '@jest/expect': 29.2.1
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6668,7 +6668,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.1_@types+node@18.11.4:
+  /jest-cli/29.2.1_@types+node@18.11.5:
     resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6685,7 +6685,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.1_@types+node@18.11.4
+      jest-config: 29.2.1_@types+node@18.11.5
       jest-util: 29.2.1
       jest-validate: 29.2.1
       prompts: 2.4.2
@@ -6696,7 +6696,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.1_@types+node@18.11.4:
+  /jest-config/29.2.1_@types+node@18.11.5:
     resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6711,7 +6711,7 @@ packages:
       '@babel/core': 7.19.0
       '@jest/test-sequencer': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       babel-jest: 29.2.1_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6776,7 +6776,7 @@ packages:
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       jest-mock: 29.2.1
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6793,7 +6793,7 @@ packages:
       '@jest/environment': 29.2.1
       '@jest/fake-timers': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       jest-mock: 29.2.1
       jest-util: 29.2.1
     dev: true
@@ -6809,7 +6809,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6832,7 +6832,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6883,7 +6883,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       jest-util: 29.2.1
     dev: true
 
@@ -6948,7 +6948,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       emittery: 0.10.2
       graceful-fs: 4.2.10
@@ -6979,7 +6979,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7002,7 +7002,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       graceful-fs: 4.2.10
     dev: true
 
@@ -7047,7 +7047,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7059,7 +7059,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7071,7 +7071,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7098,7 +7098,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.1_@types+node@18.11.4
+      jest: 29.2.1_@types+node@18.11.5
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7112,7 +7112,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7126,7 +7126,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7138,7 +7138,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7147,13 +7147,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.4
+      '@types/node': 18.11.5
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.1_@types+node@18.11.4:
+  /jest/29.2.1_@types+node@18.11.5:
     resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7166,7 +7166,7 @@ packages:
       '@jest/core': 29.2.1
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.1_@types+node@18.11.4
+      jest-cli: 29.2.1_@types+node@18.11.5
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 89166adf544dd353dba12d69a1b5aad91f4c5afb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 25 Oct 2022 23:41:02 +0000
Subject: [PATCH 200/263] build(deps): update module
 github.com/stretchr/testify to v1.8.1 (#4256)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index d29a799b1..20470ad06 100644
--- a/go.mod
+++ b/go.mod
@@ -34,7 +34,7 @@ require (
 	github.com/sirupsen/logrus v1.9.0
 	github.com/spf13/cobra v1.6.1
 	github.com/spf13/pflag v1.0.5
-	github.com/stretchr/testify v1.8.0
+	github.com/stretchr/testify v1.8.1
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.41.0
 	golang.org/x/sync v0.1.0
diff --git a/go.sum b/go.sum
index 5f31f6574..0dfb8ea01 100644
--- a/go.sum
+++ b/go.sum
@@ -1301,6 +1301,7 @@ github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.2.0/go.mod h1:qt09Ya8vawLte6SNmTgCsAVtYtaKzEcn8ATUoHMkEqE=
 github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
@@ -1309,8 +1310,9 @@ github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals=
-github.com/stretchr/testify v1.8.0 h1:pSgiaMZlXftHpm5L7V1+rVB+AZJydKsMxsQBIJw4PKk=
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1 h1:w7B6lhMri9wdJUVmEZPGGhZzrYTPvgJArz7wNPgYKsk=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
 github.com/subosito/gotenv v1.1.1/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
 github.com/subosito/gotenv v1.2.0 h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=
 github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=

From a283fda6d65dabeb0b7e4a1fcae7758ca7c4b2c0 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Wed, 26 Oct 2022 19:14:43 +1100
Subject: [PATCH 201/263] fix(oidc): handle authorization post requests (#4270)

This fixes an issue where the authorization endpoint was not handling post requests as per the specification. It also fixes the missing CORS middleware on the authorization endpoint.
---
 .../handlers/handler_oidc_authorization.go     |  4 ++--
 internal/middlewares/cors.go                   | 18 +++++++++---------
 internal/server/handlers.go                    | 16 +++++++++-------
 3 files changed, 20 insertions(+), 18 deletions(-)

diff --git a/internal/handlers/handler_oidc_authorization.go b/internal/handlers/handler_oidc_authorization.go
index 7c24c7c8f..df919e074 100644
--- a/internal/handlers/handler_oidc_authorization.go
+++ b/internal/handlers/handler_oidc_authorization.go
@@ -13,10 +13,10 @@ import (
 	"github.com/authelia/authelia/v4/internal/oidc"
 )
 
-// OpenIDConnectAuthorizationGET handles GET requests to the OpenID Connect 1.0 Authorization endpoint.
+// OpenIDConnectAuthorization handles GET/POST requests to the OpenID Connect 1.0 Authorization endpoint.
 //
 // https://openid.net/specs/openid-connect-core-1_0.html#AuthorizationEndpoint
-func OpenIDConnectAuthorizationGET(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter, r *http.Request) {
+func OpenIDConnectAuthorization(ctx *middlewares.AutheliaCtx, rw http.ResponseWriter, r *http.Request) {
 	var (
 		requester fosite.AuthorizeRequester
 		responder fosite.AuthorizeResponder
diff --git a/internal/middlewares/cors.go b/internal/middlewares/cors.go
index d5a7234a4..8de1aaf84 100644
--- a/internal/middlewares/cors.go
+++ b/internal/middlewares/cors.go
@@ -197,19 +197,19 @@ type CORSPolicy struct {
 
 // HandleOPTIONS is an OPTIONS handler that just adds CORS headers, the Allow header, and sets the status code to 204
 // without a body. This handler should generally not be used without using WithAllowedMethods.
-func (p CORSPolicy) HandleOPTIONS(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) HandleOPTIONS(ctx *fasthttp.RequestCtx) {
 	p.handleOPTIONS(ctx)
 	p.handle(ctx)
 }
 
 // HandleOnlyOPTIONS is an OPTIONS handler that just handles the Allow header, and sets the status code to 204
 // without a body. This handler should generally not be used without using WithAllowedMethods.
-func (p CORSPolicy) HandleOnlyOPTIONS(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) HandleOnlyOPTIONS(ctx *fasthttp.RequestCtx) {
 	p.handleOPTIONS(ctx)
 }
 
 // Middleware provides a middleware that adds the appropriate CORS headers for this CORSPolicyBuilder.
-func (p CORSPolicy) Middleware(next fasthttp.RequestHandler) (handler fasthttp.RequestHandler) {
+func (p *CORSPolicy) Middleware(next fasthttp.RequestHandler) (handler fasthttp.RequestHandler) {
 	return func(ctx *fasthttp.RequestCtx) {
 		p.handle(ctx)
 
@@ -217,7 +217,7 @@ func (p CORSPolicy) Middleware(next fasthttp.RequestHandler) (handler fasthttp.R
 	}
 }
 
-func (p CORSPolicy) handle(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) handle(ctx *fasthttp.RequestCtx) {
 	if !p.enabled {
 		return
 	}
@@ -229,7 +229,7 @@ func (p CORSPolicy) handle(ctx *fasthttp.RequestCtx) {
 	}
 }
 
-func (p CORSPolicy) handleOPTIONS(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) handleOPTIONS(ctx *fasthttp.RequestCtx) {
 	ctx.Response.ResetBody()
 
 	/* The OPTIONS method should not return a 204 as per the following specifications when read together:
@@ -250,13 +250,13 @@ func (p CORSPolicy) handleOPTIONS(ctx *fasthttp.RequestCtx) {
 	}
 }
 
-func (p CORSPolicy) handleVary(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) handleVary(ctx *fasthttp.RequestCtx) {
 	if len(p.vary) != 0 {
 		ctx.Response.Header.SetBytesKV(headerVary, p.vary)
 	}
 }
 
-func (p CORSPolicy) handleCORS(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) handleCORS(ctx *fasthttp.RequestCtx) {
 	var (
 		originURL *url.URL
 		err       error
@@ -302,7 +302,7 @@ func (p CORSPolicy) handleCORS(ctx *fasthttp.RequestCtx) {
 	p.handleAllowedMethods(ctx)
 }
 
-func (p CORSPolicy) handleAllowedMethods(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) handleAllowedMethods(ctx *fasthttp.RequestCtx) {
 	switch len(p.methods) {
 	case 0:
 		// TODO: It may be beneficial to be able to control this automatic behaviour.
@@ -314,7 +314,7 @@ func (p CORSPolicy) handleAllowedMethods(ctx *fasthttp.RequestCtx) {
 	}
 }
 
-func (p CORSPolicy) handleAllowedHeaders(ctx *fasthttp.RequestCtx) {
+func (p *CORSPolicy) handleAllowedHeaders(ctx *fasthttp.RequestCtx) {
 	switch len(p.headers) {
 	case 0:
 		// TODO: It may be beneficial to be able to control this automatic behaviour.
diff --git a/internal/server/handlers.go b/internal/server/handlers.go
index b899ebe06..11ae57153 100644
--- a/internal/server/handlers.go
+++ b/internal/server/handlers.go
@@ -261,21 +261,23 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 		r.GET("/api/oidc/jwks", policyCORSPublicGET.Middleware(middlewareOIDC(handlers.JSONWebKeySetGET)))
 
 		policyCORSAuthorization := middlewares.NewCORSPolicyBuilder().
-			WithAllowedMethods("OPTIONS", "GET").
+			WithAllowedMethods(fasthttp.MethodOptions, fasthttp.MethodGet, fasthttp.MethodPost).
 			WithAllowedOrigins(allowedOrigins...).
 			WithEnabled(utils.IsStringInSlice(oidc.EndpointAuthorization, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
 
 		r.OPTIONS(oidc.EndpointPathAuthorization, policyCORSAuthorization.HandleOnlyOPTIONS)
-		r.GET(oidc.EndpointPathAuthorization, middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorizationGET)))
+		r.GET(oidc.EndpointPathAuthorization, policyCORSAuthorization.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorization))))
+		r.POST(oidc.EndpointPathAuthorization, policyCORSAuthorization.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorization))))
 
 		// TODO (james-d-elliott): Remove in GA. This is a legacy endpoint.
 		r.OPTIONS("/api/oidc/authorize", policyCORSAuthorization.HandleOnlyOPTIONS)
-		r.GET("/api/oidc/authorize", middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorizationGET)))
+		r.GET("/api/oidc/authorize", policyCORSAuthorization.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorization))))
+		r.POST("/api/oidc/authorize", policyCORSAuthorization.Middleware(middlewareOIDC(middlewares.NewHTTPToAutheliaHandlerAdaptor(handlers.OpenIDConnectAuthorization))))
 
 		policyCORSToken := middlewares.NewCORSPolicyBuilder().
 			WithAllowCredentials(true).
-			WithAllowedMethods("OPTIONS", "POST").
+			WithAllowedMethods(fasthttp.MethodOptions, fasthttp.MethodPost).
 			WithAllowedOrigins(allowedOrigins...).
 			WithEnabled(utils.IsStringInSlice(oidc.EndpointToken, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
@@ -285,7 +287,7 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 
 		policyCORSUserinfo := middlewares.NewCORSPolicyBuilder().
 			WithAllowCredentials(true).
-			WithAllowedMethods("OPTIONS", "GET", "POST").
+			WithAllowedMethods(fasthttp.MethodOptions, fasthttp.MethodGet, fasthttp.MethodPost).
 			WithAllowedOrigins(allowedOrigins...).
 			WithEnabled(utils.IsStringInSlice(oidc.EndpointUserinfo, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
@@ -296,7 +298,7 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 
 		policyCORSIntrospection := middlewares.NewCORSPolicyBuilder().
 			WithAllowCredentials(true).
-			WithAllowedMethods("OPTIONS", "POST").
+			WithAllowedMethods(fasthttp.MethodOptions, fasthttp.MethodPost).
 			WithAllowedOrigins(allowedOrigins...).
 			WithEnabled(utils.IsStringInSlice(oidc.EndpointIntrospection, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()
@@ -310,7 +312,7 @@ func handleRouter(config schema.Configuration, providers middlewares.Providers)
 
 		policyCORSRevocation := middlewares.NewCORSPolicyBuilder().
 			WithAllowCredentials(true).
-			WithAllowedMethods("OPTIONS", "POST").
+			WithAllowedMethods(fasthttp.MethodOptions, fasthttp.MethodPost).
 			WithAllowedOrigins(allowedOrigins...).
 			WithEnabled(utils.IsStringInSlice(oidc.EndpointRevocation, config.IdentityProviders.OIDC.CORS.Endpoints)).
 			Build()

From 8925351519ff69f8d87ba610696cf0c33df58170 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Oct 2022 11:49:54 +0000
Subject: [PATCH 202/263] build(deps): update jest monorepo to v29.2.2 (#4260)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 283 +++++++++++++++++++++++++--------------------
 2 files changed, 160 insertions(+), 127 deletions(-)

diff --git a/web/package.json b/web/package.json
index 886511d65..76d4928ab 100644
--- a/web/package.json
+++ b/web/package.json
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.2.1",
-    "jest-environment-jsdom": "29.2.1",
+    "jest": "29.2.2",
+    "jest-environment-jsdom": "29.2.2",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index a912c7d8d..d1aae92d8 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -43,8 +43,8 @@ specifiers:
   i18next: 22.0.2
   i18next-browser-languagedetector: 6.1.8
   i18next-http-backend: 1.4.4
-  jest: 29.2.1
-  jest-environment-jsdom: 29.2.1
+  jest: 29.2.2
+  jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.26.0
   eslint-config-prettier: 8.5.0_eslint@8.26.0
-  eslint-config-react-app: 7.0.1_js7zyunwfzuon2jiu4xunbs6rq
+  eslint-config-react-app: 7.0.1_2kc4q5r3nphyswrf6yds6ub5nq
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
   eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.26.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
-  jest: 29.2.1_@types+node@18.11.5
-  jest-environment-jsdom: 29.2.1
+  jest: 29.2.2_@types+node@18.11.5
+  jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.2.1
+  jest-watch-typeahead: 2.2.0_jest@29.2.2
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -2522,8 +2522,8 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.2.1:
-    resolution: {integrity: sha512-kuLKYqnqgerXkBUwlHVxeSuhSnd+JMnMCLfU98bpacBSfWEJPegytDh3P2m15/JHzet32hGGld4KR4OzMb6/Tg==}
+  /@jest/core/29.2.2:
+    resolution: {integrity: sha512-susVl8o2KYLcZhhkvSB+b7xX575CX3TmSvxfeDjpRko7KmT89rHkXj6XkDkNpSeFMBzIENw5qIchO9HC9Sem+A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2532,9 +2532,9 @@ packages:
         optional: true
     dependencies:
       '@jest/console': 29.2.1
-      '@jest/reporters': 29.2.1
+      '@jest/reporters': 29.2.2
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.1
+      '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
       ansi-escapes: 4.3.2
@@ -2543,18 +2543,18 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.1_@types+node@18.11.5
+      jest-config: 29.2.2_@types+node@18.11.5
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.1
-      jest-resolve-dependencies: 29.2.1
-      jest-runner: 29.2.1
-      jest-runtime: 29.2.1
-      jest-snapshot: 29.2.1
+      jest-resolve: 29.2.2
+      jest-resolve-dependencies: 29.2.2
+      jest-runner: 29.2.2
+      jest-runtime: 29.2.2
+      jest-snapshot: 29.2.2
       jest-util: 29.2.1
-      jest-validate: 29.2.1
-      jest-watcher: 29.2.1
+      jest-validate: 29.2.2
+      jest-watcher: 29.2.2
       micromatch: 4.0.5
       pretty-format: 29.2.1
       slash: 3.0.0
@@ -2564,14 +2564,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.2.1:
-    resolution: {integrity: sha512-EutqA7T/X6zFjw6mAWRHND+ZkTPklmIEWCNbmwX6uCmOrFrWaLbDZjA+gePHJx6fFMMRvNfjXcvzXEtz54KPlg==}
+  /@jest/environment/29.2.2:
+    resolution: {integrity: sha512-OWn+Vhu0I1yxuGBJEFFekMYc8aGBGrY4rt47SOh/IFaI+D7ZHCk7pKRiSoZ2/Ml7b0Ony3ydmEHRx/tEOC7H1A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.2.1
+      '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
-      jest-mock: 29.2.1
+      jest-mock: 29.2.2
     dev: true
 
   /@jest/expect-utils/29.2.1:
@@ -2581,42 +2581,49 @@ packages:
       jest-get-type: 29.2.0
     dev: true
 
-  /@jest/expect/29.2.1:
-    resolution: {integrity: sha512-o14R2t2tHHHudwji43UKkzmmH49xfF5T++FQBK2tl88qwuBWQOcx7fNUYl+mA/9TPNAN0FkQ3usnpyS8FUwsvQ==}
+  /@jest/expect-utils/29.2.2:
+    resolution: {integrity: sha512-vwnVmrVhTmGgQzyvcpze08br91OL61t9O0lJMDyb6Y/D8EKQ9V7rGUb/p7PDt0GPzK0zFYqXWFo4EO2legXmkg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.2.1
-      jest-snapshot: 29.2.1
+      jest-get-type: 29.2.0
+    dev: true
+
+  /@jest/expect/29.2.2:
+    resolution: {integrity: sha512-zwblIZnrIVt8z/SiEeJ7Q9wKKuB+/GS4yZe9zw7gMqfGf4C5hBLGrVyxu1SzDbVSqyMSlprKl3WL1r80cBNkgg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      expect: 29.2.2
+      jest-snapshot: 29.2.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.2.1:
-    resolution: {integrity: sha512-KWil+8fef7Uj/P/PTZlPKk1Pw117wAmr71VWFV8ZDtRtkwmTG8oY4IRf0Ss44J2y5CYRy8d/zLOhxyoGRENjvA==}
+  /@jest/fake-timers/29.2.2:
+    resolution: {integrity: sha512-nqaW3y2aSyZDl7zQ7t1XogsxeavNpH6kkdq+EpXncIDvAkjvFD7hmhcIs1nWloengEWUoWqkqSA6MSbf9w6DgA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.11.5
       jest-message-util: 29.2.1
-      jest-mock: 29.2.1
+      jest-mock: 29.2.2
       jest-util: 29.2.1
     dev: true
 
-  /@jest/globals/29.2.1:
-    resolution: {integrity: sha512-Z4EejYPP1OPVq2abk1+9urAwJqkgw5jB2UJGlPjb5ZwzPQF8WLMcigKEfFzZb2OHhEVPP0RZD0/DbVTY1R6iQA==}
+  /@jest/globals/29.2.2:
+    resolution: {integrity: sha512-/nt+5YMh65kYcfBhj38B3Hm0Trk4IsuMXNDGKE/swp36yydBWfz3OXkLqkSvoAtPW8IJMSJDFCbTM2oj5SNprw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.1
-      '@jest/expect': 29.2.1
+      '@jest/environment': 29.2.2
+      '@jest/expect': 29.2.2
       '@jest/types': 29.2.1
-      jest-mock: 29.2.1
+      jest-mock: 29.2.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.2.1:
-    resolution: {integrity: sha512-sCsfUKM/yIF4nNed3e/rIgVIS58EiASGMDEPWqItfLZ9UO1ALW2ASDNJzdWkxEt0T8o2Ztj619G0KKrvK+McAw==}
+  /@jest/reporters/29.2.2:
+    resolution: {integrity: sha512-AzjL2rl2zJC0njIzcooBvjA4sJjvdoq98sDuuNs4aNugtLPSQ+91nysGKRF0uY1to5k0MdGMdOBggUsPqvBcpA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2627,7 +2634,7 @@ packages:
       '@bcoe/v8-coverage': 0.2.3
       '@jest/console': 29.2.1
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.1
+      '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.11.5
@@ -2688,8 +2695,8 @@ packages:
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.2.1:
-    resolution: {integrity: sha512-O/pnk0/xGj3lxPVNwB6HREJ7AYvUdyP2xo/s14/9Dtf091HoOeyIhWLKQE/4HzB8lNQBMo6J5mg0bHz/uCWK7w==}
+  /@jest/test-sequencer/29.2.2:
+    resolution: {integrity: sha512-Cuc1znc1pl4v9REgmmLf0jBd3Y65UXJpioGYtMr/JNpQEIGEzkmHhy6W6DLbSsXeUA13TDzymPv0ZGZ9jH3eIw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/test-result': 29.2.1
@@ -2721,8 +2728,8 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.2.1:
-    resolution: {integrity: sha512-xup+iEuaIRSQabQaeqxaQyN0vg1Dctrp9oTObQsNf3sZEowTIa5cANYuoyi8Tqhg4GCqEVLTf18KW7ii0UeFVA==}
+  /@jest/transform/29.2.2:
+    resolution: {integrity: sha512-aPe6rrletyuEIt2axxgdtxljmzH8O/nrov4byy6pDw9S8inIrTV+2PnjyP/oFHMSynzGxJ2s6OHowBNMXp/Jzg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -4120,8 +4127,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.2.1_@babel+core@7.19.0:
-    resolution: {integrity: sha512-gQJwArok0mqoREiCYhXKWOgUhElJj9DpnssW6GL8dG7ARYqHEhrM9fmPHTjdqEGRVXZAd6+imo3/Vwa8TjLcsw==}
+  /babel-jest/29.2.2_@babel+core@7.19.0:
+    resolution: {integrity: sha512-kkq2QSDIuvpgfoac3WZ1OOcHsQQDU5xYk2Ql7tLdJ8BVAYbefEXal+NfS45Y5LVZA7cxC8KYcQMObpCt1J025w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -4130,7 +4137,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/transform': 29.2.1
+      '@jest/transform': 29.2.2
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.2.0_@babel+core@7.19.0
@@ -4943,6 +4950,11 @@ packages:
     engines: {node: '>=12'}
     dev: true
 
+  /emittery/0.13.1:
+    resolution: {integrity: sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==}
+    engines: {node: '>=12'}
+    dev: true
+
   /emoji-regex/8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
     dev: true
@@ -5282,7 +5294,7 @@ packages:
       eslint: 8.26.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_js7zyunwfzuon2jiu4xunbs6rq:
+  /eslint-config-react-app/7.0.1_2kc4q5r3nphyswrf6yds6ub5nq:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5302,7 +5314,7 @@ packages:
       eslint: 8.26.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.26.0
       eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
-      eslint-plugin-jest: 25.7.0_fnd6abgdh5k3pififntlu5cheq
+      eslint-plugin-jest: 25.7.0_6amp5fdmvwluzjywjm3ep2edui
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
       eslint-plugin-react: 7.31.10_eslint@8.26.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
@@ -5426,7 +5438,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_fnd6abgdh5k3pififntlu5cheq:
+  /eslint-plugin-jest/25.7.0_6amp5fdmvwluzjywjm3ep2edui:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5442,7 +5454,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
-      jest: 29.2.1_@types+node@18.11.5
+      jest: 29.2.2_@types+node@18.11.5
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5731,6 +5743,17 @@ packages:
       jest-util: 29.2.1
     dev: true
 
+  /expect/29.2.2:
+    resolution: {integrity: sha512-hE09QerxZ5wXiOhqkXy5d2G9ar+EqOyifnCXCpMNu+vZ6DG9TJ6CO2c2kPDSLqERTTWrO7OZj8EkYHQqSd78Yw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/expect-utils': 29.2.2
+      jest-get-type: 29.2.0
+      jest-matcher-utils: 29.2.2
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
+    dev: true
+
   /extend-shallow/2.0.1:
     resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==}
     engines: {node: '>=0.10.0'}
@@ -6641,12 +6664,12 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.2.1:
-    resolution: {integrity: sha512-W+ZQQ5ln4Db2UZNM4NJIeasnhCdDhSuYW4eLgNAUi0XiSSpF634Kc5wiPvGiHvTgXMFVn1ZgWIijqhi9+kLNLg==}
+  /jest-circus/29.2.2:
+    resolution: {integrity: sha512-upSdWxx+Mh4DV7oueuZndJ1NVdgtTsqM4YgywHEx05UMH5nxxA2Qu9T9T9XVuR021XxqSoaKvSmmpAbjwwwxMw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.1
-      '@jest/expect': 29.2.1
+      '@jest/environment': 29.2.2
+      '@jest/expect': 29.2.2
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
@@ -6655,10 +6678,10 @@ packages:
       dedent: 0.7.0
       is-generator-fn: 2.1.0
       jest-each: 29.2.1
-      jest-matcher-utils: 29.2.1
+      jest-matcher-utils: 29.2.2
       jest-message-util: 29.2.1
-      jest-runtime: 29.2.1
-      jest-snapshot: 29.2.1
+      jest-runtime: 29.2.2
+      jest-snapshot: 29.2.2
       jest-util: 29.2.1
       p-limit: 3.1.0
       pretty-format: 29.2.1
@@ -6668,8 +6691,8 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.1_@types+node@18.11.5:
-    resolution: {integrity: sha512-UIMD5aNqvPKpdlJSaeUAoLfxsh9TZvOkaMETx5qXnkboc317bcbb0eLHbIj8sFBHdcJAIAM+IRKnIU7Wi61MBw==}
+  /jest-cli/29.2.2_@types+node@18.11.5:
+    resolution: {integrity: sha512-R45ygnnb2CQOfd8rTPFR+/fls0d+1zXS6JPYTBBrnLPrhr58SSuPTiA5Tplv8/PXpz4zXR/AYNxmwIj6J6nrvg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6678,16 +6701,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.2.1
+      '@jest/core': 29.2.2
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.1_@types+node@18.11.5
+      jest-config: 29.2.2_@types+node@18.11.5
       jest-util: 29.2.1
-      jest-validate: 29.2.1
+      jest-validate: 29.2.2
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6696,8 +6719,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.1_@types+node@18.11.5:
-    resolution: {integrity: sha512-EV5F1tQYW/quZV2br2o88hnYEeRzG53Dfi6rSG3TZBuzGQ6luhQBux/RLlU5QrJjCdq3LXxRRM8F1LP6DN1ycA==}
+  /jest-config/29.2.2_@types+node@18.11.5:
+    resolution: {integrity: sha512-Q0JX54a5g1lP63keRfKR8EuC7n7wwny2HoTRDb8cx78IwQOiaYUVZAdjViY3WcTxpR02rPUpvNVmZ1fkIlZPcw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6709,23 +6732,23 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.0
-      '@jest/test-sequencer': 29.2.1
+      '@jest/test-sequencer': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
-      babel-jest: 29.2.1_@babel+core@7.19.0
+      babel-jest: 29.2.2_@babel+core@7.19.0
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.2.1
-      jest-environment-node: 29.2.1
+      jest-circus: 29.2.2
+      jest-environment-node: 29.2.2
       jest-get-type: 29.2.0
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.1
-      jest-runner: 29.2.1
+      jest-resolve: 29.2.2
+      jest-runner: 29.2.2
       jest-util: 29.2.1
-      jest-validate: 29.2.1
+      jest-validate: 29.2.2
       micromatch: 4.0.5
       parse-json: 5.2.0
       pretty-format: 29.2.1
@@ -6763,8 +6786,8 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-environment-jsdom/29.2.1:
-    resolution: {integrity: sha512-MipBdmrjgzEdQMkK7b7wBShOfv1VqO6FVwa9S43bZwKYLC4dlWnPiCgNpZX3ypNEpJO8EMpMhg4HrUkWUZXGiw==}
+  /jest-environment-jsdom/29.2.2:
+    resolution: {integrity: sha512-5mNtTcky1+RYv9kxkwMwt7fkzyX4EJUarV7iI+NQLigpV4Hz4sgfOdP4kOpCHXbkRWErV7tgXoXLm2CKtucr+A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       canvas: ^2.5.0
@@ -6772,12 +6795,12 @@ packages:
       canvas:
         optional: true
     dependencies:
-      '@jest/environment': 29.2.1
-      '@jest/fake-timers': 29.2.1
+      '@jest/environment': 29.2.2
+      '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
       '@types/node': 18.11.5
-      jest-mock: 29.2.1
+      jest-mock: 29.2.2
       jest-util: 29.2.1
       jsdom: 20.0.0
     transitivePeerDependencies:
@@ -6786,15 +6809,15 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.2.1:
-    resolution: {integrity: sha512-PulFKwEMz6nTAdLUwglFKei3b/LixwlRiqTN6nvPE1JtrLtlnpd6LXnFI1NFHYJGlTmIWilMP2n9jEtPPKX50g==}
+  /jest-environment-node/29.2.2:
+    resolution: {integrity: sha512-B7qDxQjkIakQf+YyrqV5dICNs7tlCO55WJ4OMSXsqz1lpI/0PmeuXdx2F7eU8rnPbRkUR/fItSSUh0jvE2y/tw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.1
-      '@jest/fake-timers': 29.2.1
+      '@jest/environment': 29.2.2
+      '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
-      jest-mock: 29.2.1
+      jest-mock: 29.2.2
       jest-util: 29.2.1
     dev: true
 
@@ -6863,6 +6886,16 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
+  /jest-matcher-utils/29.2.2:
+    resolution: {integrity: sha512-4DkJ1sDPT+UX2MR7Y3od6KtvRi9Im1ZGLGgdLFLm4lPexbTaCgJW5NN3IOXlQHF7NSHY/VHhflQ+WoKtD/vyCw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      jest-diff: 29.2.1
+      jest-get-type: 29.2.0
+      pretty-format: 29.2.1
+    dev: true
+
   /jest-message-util/29.2.1:
     resolution: {integrity: sha512-Dx5nEjw9V8C1/Yj10S/8ivA8F439VS8vTq1L7hEgwHFn9ovSKNpYW/kwNh7UglaEgXO42XxzKJB+2x0nSglFVw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6878,8 +6911,8 @@ packages:
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.2.1:
-    resolution: {integrity: sha512-NDphaY/GqyQpTfnTZiTqqpMaw4Z0I7XnB7yBgrT6IwYrLGxpOhrejYr4ANY4YvO2sEGdd8Tx/6D0+WLQy7/qDA==}
+  /jest-mock/29.2.2:
+    resolution: {integrity: sha512-1leySQxNAnivvbcx0sCB37itu8f4OX2S/+gxLAV4Z62shT4r4dTG9tACDywUAEZoLSr36aYUTsVp3WKwWt4PMQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
@@ -6887,7 +6920,7 @@ packages:
       jest-util: 29.2.1
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.2.1:
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.2.2:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6896,7 +6929,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.2.1
+      jest-resolve: 29.2.2
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6914,53 +6947,53 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.2.1:
-    resolution: {integrity: sha512-o3mUGX2j08usj1jIAIE8KmUVpqVAn54k80kI27ldbZf2oJn6eghhB6DvJxjrcH40va9CQgWTfU5f2Ag/MoUqgQ==}
+  /jest-resolve-dependencies/29.2.2:
+    resolution: {integrity: sha512-wWOmgbkbIC2NmFsq8Lb+3EkHuW5oZfctffTGvwsA4JcJ1IRk8b2tg+hz44f0lngvRTeHvp3Kyix9ACgudHH9aQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.2.0
-      jest-snapshot: 29.2.1
+      jest-snapshot: 29.2.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.2.1:
-    resolution: {integrity: sha512-1dJTW76Z9622Viq4yRcwBuEXuzGtE9B2kdl05RC8Om/lAzac9uEgC+M8Q5osVidbuBPmxm8wSrcItYhca2ZAtQ==}
+  /jest-resolve/29.2.2:
+    resolution: {integrity: sha512-3gaLpiC3kr14rJR3w7vWh0CBX2QAhfpfiQTwrFPvVrcHe5VUBtIXaR004aWE/X9B2CFrITOQAp5gxLONGrk6GA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
       jest-haste-map: 29.2.1
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.2.1
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.2.2
       jest-util: 29.2.1
-      jest-validate: 29.2.1
+      jest-validate: 29.2.2
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.2.1:
-    resolution: {integrity: sha512-PojFI+uVhQ4u4YZKCN/a3yU0/l/pJJXhq1sW3JpCp8CyvGBYGddRFPKZ1WihApusxqWRTHjBJmGyPWv6Av2lWA==}
+  /jest-runner/29.2.2:
+    resolution: {integrity: sha512-1CpUxXDrbsfy9Hr9/1zCUUhT813kGGK//58HeIw/t8fa/DmkecEwZSWlb1N/xDKXg3uCFHQp1GCvlSClfImMxg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/console': 29.2.1
-      '@jest/environment': 29.2.1
+      '@jest/environment': 29.2.2
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.1
+      '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
       chalk: 4.1.2
-      emittery: 0.10.2
+      emittery: 0.13.1
       graceful-fs: 4.2.10
       jest-docblock: 29.2.0
-      jest-environment-node: 29.2.1
+      jest-environment-node: 29.2.2
       jest-haste-map: 29.2.1
       jest-leak-detector: 29.2.1
       jest-message-util: 29.2.1
-      jest-resolve: 29.2.1
-      jest-runtime: 29.2.1
+      jest-resolve: 29.2.2
+      jest-runtime: 29.2.2
       jest-util: 29.2.1
-      jest-watcher: 29.2.1
+      jest-watcher: 29.2.2
       jest-worker: 29.2.1
       p-limit: 3.1.0
       source-map-support: 0.5.13
@@ -6968,16 +7001,16 @@ packages:
       - supports-color
     dev: true
 
-  /jest-runtime/29.2.1:
-    resolution: {integrity: sha512-PSQ880OoIW9y8E6/jjhGn3eQNgNc6ndMzCZaKqy357bv7FqCfSyYepu3yDC6Sp1Vkt+GhP2M/PVgldS2uZSFZg==}
+  /jest-runtime/29.2.2:
+    resolution: {integrity: sha512-TpR1V6zRdLynckKDIQaY41od4o0xWL+KOPUCZvJK2bu5P1UXhjobt5nJ2ICNeIxgyj9NGkO0aWgDqYPVhDNKjA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.1
-      '@jest/fake-timers': 29.2.1
-      '@jest/globals': 29.2.1
+      '@jest/environment': 29.2.2
+      '@jest/fake-timers': 29.2.2
+      '@jest/globals': 29.2.2
       '@jest/source-map': 29.2.0
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.1
+      '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
       chalk: 4.1.2
@@ -6987,10 +7020,10 @@ packages:
       graceful-fs: 4.2.10
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
-      jest-mock: 29.2.1
+      jest-mock: 29.2.2
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.1
-      jest-snapshot: 29.2.1
+      jest-resolve: 29.2.2
+      jest-snapshot: 29.2.2
       jest-util: 29.2.1
       slash: 3.0.0
       strip-bom: 4.0.0
@@ -7006,8 +7039,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.2.1:
-    resolution: {integrity: sha512-KZdLD7iEz5M4ZYd+ezZ/kk73z+DtNbk/yJ4Qx7408Vb0CCuclJIZPa/HmIwSsCfIlOBNcYTKufr7x/Yv47oYlg==}
+  /jest-snapshot/29.2.2:
+    resolution: {integrity: sha512-GfKJrpZ5SMqhli3NJ+mOspDqtZfJBryGA8RIBxF+G+WbDoC7HCqKaeAss4Z/Sab6bAW11ffasx8/vGsj83jyjA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.0
@@ -7016,19 +7049,19 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
       '@babel/traverse': 7.19.0
       '@babel/types': 7.19.0
-      '@jest/expect-utils': 29.2.1
-      '@jest/transform': 29.2.1
+      '@jest/expect-utils': 29.2.2
+      '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
       chalk: 4.1.2
-      expect: 29.2.1
+      expect: 29.2.2
       graceful-fs: 4.2.10
       jest-diff: 29.2.1
       jest-get-type: 29.2.0
       jest-haste-map: 29.2.1
-      jest-matcher-utils: 29.2.1
+      jest-matcher-utils: 29.2.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
       natural-compare: 1.4.0
@@ -7078,8 +7111,8 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.2.1:
-    resolution: {integrity: sha512-DZVX5msG6J6DL5vUUw+++6LEkXUsPwB5R7fsfM7BXdz2Ipr0Ib046ak+8egrwAR++pvSM/5laxLK977ieIGxkQ==}
+  /jest-validate/29.2.2:
+    resolution: {integrity: sha512-eJXATaKaSnOuxNfs8CLHgdABFgUrd0TtWS8QckiJ4L/QVDF4KVbZFBBOwCBZHOS0Rc5fOxqngXeGXE3nGQkpQA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
@@ -7090,7 +7123,7 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.2.1:
+  /jest-watch-typeahead/2.2.0_jest@29.2.2:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -7098,7 +7131,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.1_@types+node@18.11.5
+      jest: 29.2.2_@types+node@18.11.5
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7120,8 +7153,8 @@ packages:
       string-length: 4.0.2
     dev: true
 
-  /jest-watcher/29.2.1:
-    resolution: {integrity: sha512-7jFaHUaRq50l4w/f6RuY713bvI5XskMmjWCE54NGYcY74fLkShS8LucXJke1QfGnwDSCoIqGnGGGKPwdaBYz2Q==}
+  /jest-watcher/29.2.2:
+    resolution: {integrity: sha512-j2otfqh7mOvMgN2WlJ0n7gIx9XCMWntheYGlBK7+5g3b1Su13/UAK7pdKGyd4kDlrLwtH2QPvRv5oNIxWvsJ1w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/test-result': 29.2.1
@@ -7129,7 +7162,7 @@ packages:
       '@types/node': 18.11.5
       ansi-escapes: 4.3.2
       chalk: 4.1.2
-      emittery: 0.10.2
+      emittery: 0.13.1
       jest-util: 29.2.1
       string-length: 4.0.2
     dev: true
@@ -7153,8 +7186,8 @@ packages:
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.1_@types+node@18.11.5:
-    resolution: {integrity: sha512-K0N+7rx+fv3Us3KhuwRSJt55MMpZPs9Q3WSO/spRZSnsalX8yEYOTQ1PiSN7OvqzoRX4JEUXCbOJRlP4n8m5LA==}
+  /jest/29.2.2_@types+node@18.11.5:
+    resolution: {integrity: sha512-r+0zCN9kUqoON6IjDdjbrsWobXM/09Nd45kIPRD8kloaRh1z5ZCMdVsgLXGxmlL7UpAJsvCYOQNO+NjvG/gqiQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7163,10 +7196,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.2.1
+      '@jest/core': 29.2.2
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.1_@types+node@18.11.5
+      jest-cli: 29.2.2_@types+node@18.11.5
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 53511332ab11202183f76e8e36cf153f487a8aad Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Oct 2022 16:04:55 +0000
Subject: [PATCH 203/263] build(deps): update dependency i18next-http-backend
 to v1.4.5 (#4271)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 76d4928ab..a19280f6e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -33,7 +33,7 @@
     "classnames": "2.3.2",
     "i18next": "22.0.2",
     "i18next-browser-languagedetector": "6.1.8",
-    "i18next-http-backend": "1.4.4",
+    "i18next-http-backend": "1.4.5",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
     "react": "18.2.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index d1aae92d8..51da277ba 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -42,7 +42,7 @@ specifiers:
   husky: 8.0.1
   i18next: 22.0.2
   i18next-browser-languagedetector: 6.1.8
-  i18next-http-backend: 1.4.4
+  i18next-http-backend: 1.4.5
   jest: 29.2.2
   jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
@@ -81,7 +81,7 @@ dependencies:
   classnames: 2.3.2
   i18next: 22.0.2
   i18next-browser-languagedetector: 6.1.8
-  i18next-http-backend: 1.4.4
+  i18next-http-backend: 1.4.5
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
@@ -6258,8 +6258,8 @@ packages:
       '@babel/runtime': 7.19.0
     dev: false
 
-  /i18next-http-backend/1.4.4:
-    resolution: {integrity: sha512-M4gLPe6JKZ2p1UmE6t4rzWV/sAxgrLThW7ztXAsTpFwFqXoyzhTzX8eYxVv9KjpCQh4K9nwxnEjEi+74C4Thbg==}
+  /i18next-http-backend/1.4.5:
+    resolution: {integrity: sha512-tLuHWuLWl6CmS07o+UB6EcQCaUjrZ1yhdseIN7sfq0u7phsMePJ8pqlGhIAdRDPF/q7ooyo5MID5DRFBCH+x5w==}
     dependencies:
       cross-fetch: 3.1.5
     transitivePeerDependencies:

From 520df6b63492dbb8b2f0058d75f016e808223079 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Oct 2022 20:03:11 +0000
Subject: [PATCH 204/263] build(deps): update dependency @vitejs/plugin-react
 to v2.2.0 (#4277)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |    2 +-
 web/pnpm-lock.yaml | 1188 ++++++++++++++++++++++++--------------------
 2 files changed, 645 insertions(+), 545 deletions(-)

diff --git a/web/package.json b/web/package.json
index a19280f6e..c95657746 100644
--- a/web/package.json
+++ b/web/package.json
@@ -155,7 +155,7 @@
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.41.0",
     "@typescript-eslint/parser": "5.41.0",
-    "@vitejs/plugin-react": "2.1.0",
+    "@vitejs/plugin-react": "2.2.0",
     "esbuild": "0.15.12",
     "esbuild-jest": "0.5.0",
     "eslint": "8.26.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 51da277ba..5bce8224d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -23,7 +23,7 @@ specifiers:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0
   '@typescript-eslint/parser': 5.41.0
-  '@vitejs/plugin-react': 2.1.0
+  '@vitejs/plugin-react': 2.2.0
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
   '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
-  '@vitejs/plugin-react': 2.1.0_vite@3.1.8
+  '@vitejs/plugin-react': 2.2.0_vite@3.1.8
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.26.0
@@ -157,6 +157,11 @@ packages:
     engines: {node: '>=6.9.0'}
     dev: true
 
+  /@babel/compat-data/7.19.4:
+    resolution: {integrity: sha512-CHIGpJcUQ5lU9KrPHTjBMhVwQG6CQjxfg36fGXl3qk/Gik1WwWachaXFuo0uCWJT/mStOKtcbFJCaVLihC1CMw==}
+    engines: {node: '>=6.9.0'}
+    dev: true
+
   /@babel/core/7.18.6:
     resolution: {integrity: sha512-cQbWBpxcbbs/IUredIPkHiAGULLV8iwgNRMFzvbhEXISp4f3rUUXE5+TIw6KwUWUR3DwyI6gmBRnmAtYaWehwQ==}
     engines: {node: '>=6.9.0'}
@@ -180,20 +185,20 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/core/7.19.0:
-    resolution: {integrity: sha512-reM4+U7B9ss148rh2n1Qs9ASS+w94irYXga7c2jaQv9RVzpS7Mv1a9rnYYwuDa45G+DkORt9g6An2k/V4d9LbQ==}
+  /@babel/core/7.19.6:
+    resolution: {integrity: sha512-D2Ue4KHpc6Ys2+AxpIx1BZ8+UegLLLE2p3KJEuJRKmokHOtl49jQ5ny1773KsGLZs8MQvBidAF6yWUJxRqtKtg==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.0
-      '@babel/helper-compilation-targets': 7.19.0_@babel+core@7.19.0
-      '@babel/helper-module-transforms': 7.19.0
-      '@babel/helpers': 7.19.0
-      '@babel/parser': 7.19.0
+      '@babel/generator': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
+      '@babel/helper-module-transforms': 7.19.6
+      '@babel/helpers': 7.19.4
+      '@babel/parser': 7.19.6
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
       convert-source-map: 1.8.0
       debug: 4.3.4
       gensync: 1.0.0-beta.2
@@ -233,7 +238,16 @@ packages:
     resolution: {integrity: sha512-S1ahxf1gZ2dpoiFgA+ohK9DIpz50bJ0CWs7Zlzb54Z4sG8qmdIrGrVqmy1sAtTVRb+9CU6U8VqT9L0Zj7hxHVg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
+      '@jridgewell/gen-mapping': 0.3.2
+      jsesc: 2.5.2
+    dev: true
+
+  /@babel/generator/7.19.6:
+    resolution: {integrity: sha512-oHGRUQeoX1QrKeJIKVe0hwjGqNnVYsM5Nep5zo0uE0m42sLH+Fsd2pStJ5sRM1bNyTUUoz0pe2lTeMJrb/taTA==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      '@babel/types': 7.19.4
       '@jridgewell/gen-mapping': 0.3.2
       jsesc: 2.5.2
     dev: true
@@ -242,7 +256,7 @@ packages:
     resolution: {integrity: sha512-duORpUiYrEpzKIop6iNbjnwKLAKnJ47csTyRACyEmWj0QdUrm5aqNJGHSSEQSUAvNW0ojX0dOmK9dZduvkfeXA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-builder-binary-assignment-operator-visitor/7.18.6:
@@ -250,7 +264,7 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-explode-assignable-expression': 7.18.6
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-compilation-targets/7.18.9_@babel+core@7.18.6:
@@ -269,8 +283,8 @@ packages:
       semver: 6.3.0
     dev: true
 
-  /@babel/helper-compilation-targets/7.19.0_@babel+core@7.19.0:
-    resolution: {integrity: sha512-Ai5bNWXIvwDvWM7njqsG3feMlL9hCVQsPYXodsZyLwshYkZVJt59Gftau4VrE8S9IT9asd2uSP1hG6wCNw+sXA==}
+  /@babel/helper-compilation-targets/7.19.3_@babel+core@7.19.6:
+    resolution: {integrity: sha512-65ESqLGyGmLvgR0mst5AdW1FkNlj9rQsCKduzEoEPhBCDFGXvz2jW6bXFG6i0/MrV2s7hhXjjb2yAzcPuQlLwg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -278,14 +292,14 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/compat-data': 7.19.0
-      '@babel/core': 7.19.0
+      '@babel/compat-data': 7.19.4
+      '@babel/core': 7.19.6
       '@babel/helper-validator-option': 7.18.6
-      browserslist: 4.21.2
+      browserslist: 4.21.4
       semver: 6.3.0
     dev: true
 
-  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.0:
+  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-YfDzdnoxHGV8CzqHGyCbFvXg5QESPFkXlHtvdCkesLjjVMT2Adxe4FGUR5ChIb3DxSaXO12iIOCWoXdsUVwnqw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -294,7 +308,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
@@ -306,7 +320,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/helper-create-regexp-features-plugin/7.18.6_@babel+core@7.19.0:
+  /@babel/helper-create-regexp-features-plugin/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-7LcpH1wnQLGrI+4v+nPp+zUvIkF9x0ddv1Hkdue10tg3gmRnLy97DXh4STiOf1qeIInyD69Qv5kKSZzKD8B/7A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -315,12 +329,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       regexpu-core: 5.1.0
     dev: true
 
-  /@babel/helper-define-polyfill-provider/0.3.1_@babel+core@7.19.0:
+  /@babel/helper-define-polyfill-provider/0.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-J9hGMpJQmtWmj46B3kBHmL38UhJGhYX7eqkcq+2gsstyYt341HmPeWspihX43yVRA0mS+8GGk2Gckc7bY/HCmA==}
     peerDependencies:
       '@babel/core': ^7.4.0-0
@@ -328,11 +342,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-compilation-targets': 7.19.0_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/traverse': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/traverse': 7.19.6
       debug: 4.3.4
       lodash.debounce: 4.0.8
       resolve: 1.22.1
@@ -350,7 +364,7 @@ packages:
     resolution: {integrity: sha512-eyAYAsQmB80jNfg4baAtLeWAQHfHFiR483rzFK+BhETlGZaQC9bsfrugfXDCbRHLQbIA7U5NxhhOxN7p/dWIcg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-function-name/7.19.0:
@@ -358,21 +372,21 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-hoist-variables/7.18.6:
     resolution: {integrity: sha512-UlJQPkFqFULIcyW5sbzgbkxn2FKRgwWiRexcuaR8RNJRy8+LLveqPjwZV/bwrLZCN0eUHD/x8D0heK1ozuoo6Q==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-member-expression-to-functions/7.18.6:
     resolution: {integrity: sha512-CeHxqwwipekotzPDUuJOfIMtcIHBuc7WAzLmTYWctVigqS5RktNMQ5bEwQSuGewzYnCtTWa3BARXeiLxDTv+Ng==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-module-imports/7.18.6:
@@ -397,18 +411,18 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/helper-module-transforms/7.19.0:
-    resolution: {integrity: sha512-3HBZ377Fe14RbLIA+ac3sY4PTgpxHVkFrESaWhoI5PuyXPBBX8+C34qblV9G89ZtycGJCmCI/Ut+VUDK4bltNQ==}
+  /@babel/helper-module-transforms/7.19.6:
+    resolution: {integrity: sha512-fCmcfQo/KYr/VXXDIyd3CBGZ6AFhPFy1TfSEJ+PilGVlQT6jcbqtHAM4C1EciRqMza7/TpOUZliuSH+U6HAhJw==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-simple-access': 7.18.6
+      '@babel/helper-simple-access': 7.19.4
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-validator-identifier': 7.19.1
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -417,14 +431,19 @@ packages:
     resolution: {integrity: sha512-HP59oD9/fEHQkdcbgFCnbmgH5vIQTJbxh2yf+CdM89/glUNnuzr87Q8GIjGEnOktTROemO0Pe0iPAYbqZuOUiA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-plugin-utils/7.18.9:
     resolution: {integrity: sha512-aBXPT3bmtLryXaoJLyYPXPlSD4p1ld9aYeR+sJNOZjJJGiOpb+fKfh3NkcCu7J54nUJwCERPBExCCpyCOHnu/w==}
     engines: {node: '>=6.9.0'}
 
-  /@babel/helper-remap-async-to-generator/7.18.6_@babel+core@7.19.0:
+  /@babel/helper-plugin-utils/7.19.0:
+    resolution: {integrity: sha512-40Ryx7I8mT+0gaNxm8JGTZFUITNqdLAgdg0hXzeVZxVD6nFsdhQvip6v8dqkRHzsz1VFpFAaOCHNn0vKBL7Czw==}
+    engines: {node: '>=6.9.0'}
+    dev: true
+
+  /@babel/helper-remap-async-to-generator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-z5wbmV55TveUPZlCLZvxWHtrjuJd+8inFhk7DG0WW87/oJuGDcjDiu7HIvGcpf5464L6xKCg3vNkmlVVz9hwyQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -433,11 +452,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-wrap-function': 7.18.6
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -449,8 +468,8 @@ packages:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-member-expression-to-functions': 7.18.6
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -459,31 +478,47 @@ packages:
     resolution: {integrity: sha512-iNpIgTgyAvDQpDj76POqg+YEt8fPxx3yaNBg3S30dxNKm2SWfYhD0TGrK/Eu9wHpUW63VQU894TsTg+GLbUa1g==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.18.10
+      '@babel/types': 7.19.4
+    dev: true
+
+  /@babel/helper-simple-access/7.19.4:
+    resolution: {integrity: sha512-f9Xq6WqBFqaDfbCzn2w85hwklswz5qsKlh7f08w4Y9yhJHpnNC0QemtSkK5YyOY8kPGvyiwdzZksGUhnGdaUIg==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-skip-transparent-expression-wrappers/7.18.6:
     resolution: {integrity: sha512-4KoLhwGS9vGethZpAhYnMejWkX64wsnHPDwvOsKWU6Fg4+AlK2Jz3TyjQLMEPvz+1zemi/WBdkYxCD0bAfIkiw==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-split-export-declaration/7.18.6:
     resolution: {integrity: sha512-bde1etTx6ZyTmobl9LLMMQsaizFVZrquTEHOqKeQESMKo4PlObf+8+JA25ZsIpZhT/WEd39+vOdLXAFG/nELpA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/helper-string-parser/7.18.10:
     resolution: {integrity: sha512-XtIfWmeNY3i4t7t4D2t02q50HvqHybPqW2ki1kosnvWCwuCMeo81Jf0gwr85jy/neUdg5XDdeFE/80DXiO+njw==}
     engines: {node: '>=6.9.0'}
+    dev: true
+
+  /@babel/helper-string-parser/7.19.4:
+    resolution: {integrity: sha512-nHtDoQcuqFmwYNYPz3Rah5ph2p8PFeFCsZk9A/48dPc/rGocJ5J3hAAZ7pb76VWX3fZKu+uEr/FhH5jLx7umrw==}
+    engines: {node: '>=6.9.0'}
 
   /@babel/helper-validator-identifier/7.18.6:
     resolution: {integrity: sha512-MmetCkz9ej86nJQV+sFCxoGGrUbU3q02kgLciwkrt9QqEB7cP39oKEY0PakknEO0Gu20SskMRi+AYZ3b1TpN9g==}
     engines: {node: '>=6.9.0'}
 
+  /@babel/helper-validator-identifier/7.19.1:
+    resolution: {integrity: sha512-awrNfaMtnHUr653GgGEs++LlAvW6w+DcPrOliSMXWCKo597CwL5Acf/wWdNkf/tfEQE3mjkeD1YOVZOUV/od1w==}
+    engines: {node: '>=6.9.0'}
+
   /@babel/helper-validator-option/7.18.6:
     resolution: {integrity: sha512-XO7gESt5ouv/LRJdrVjkShckw6STTaB7l9BrpBaAHDeF5YZT+01PCwmR0SJHnkW6i8OwW/EVWRShfi4j2x+KQw==}
     engines: {node: '>=6.9.0'}
@@ -495,8 +530,8 @@ packages:
     dependencies:
       '@babel/helper-function-name': 7.19.0
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -512,13 +547,13 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/helpers/7.19.0:
-    resolution: {integrity: sha512-DRBCKGwIEdqY3+rPJgG/dKfQy9+08rHIAJx8q2p+HSWP87s2HCrQmaAMMyMll2kIXKCW0cO1RdQskx15Xakftg==}
+  /@babel/helpers/7.19.4:
+    resolution: {integrity: sha512-G+z3aOx2nfDHwX/kyVii5fJq+bgscg89/dJNWpYeKeBv3v9xX8EIabmx1k6u9LS04H7nROFVRVK+e3k0VHp+sw==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -544,10 +579,18 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
-  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.0:
+  /@babel/parser/7.19.6:
+    resolution: {integrity: sha512-h1IUp81s2JYJ3mRkdxJgs4UvmSsRvDrx5ICSJbPvtWYv5i1nTBGcBpnog+89rAFMwvvru6E5NUHdBe01UeSzYA==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+    dependencies:
+      '@babel/types': 7.19.4
+    dev: true
+
+  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Dgxsyg54Fx1d4Nge8UnvTrED63vrwOdPmyvPzlNN/boaliRP54pm3pGzZD1SJUwrBA+Cs/xdG8kXX6Mn/RfISQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -556,11 +599,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Udgu8ZRgrBrttVz6A0EVL0SJ1z+RLbIeqsu632SA1hf0awEppD6TvdznoH+orIF8wtFFAV/Enmw9Y+9oV8TQcw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -569,13 +612,13 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.6
-      '@babel/plugin-proposal-optional-chaining': 7.18.6_@babel+core@7.19.0
+      '@babel/plugin-proposal-optional-chaining': 7.18.6_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-async-generator-functions/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-async-generator-functions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-WAz4R9bvozx4qwf74M+sfqPMKfSqwM0phxPTR6iJIi8robgzXwkEgmeJG1gEKhm6sDqT/U9aV3lfcqybIpev8w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -584,16 +627,16 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/helper-remap-async-to-generator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-remap-async-to-generator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-cumfXOF0+nzZrrN8Rf0t7M+tF6sZc7vhQwYQck9q1/5w2OExlD+b4v4RpMJFaV1Z7WcDRgO6FqvxqxGlwo+RHQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -602,14 +645,14 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-+I3oIiNxrCpup3Gi8n5IGMwj0gOCAjcJUSQEcotNnCCPMEnixawOQ+KeJPlgfjzx+FKQ1QSyZOWe7wmoJp7vhw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -618,15 +661,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-decorators/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-decorators/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-gAdhsjaYmiZVxx5vTMiRfj31nB7LhwBJFMSLzeDxc7X4tKLixup0+k9ughn0RcpBrv9E3PBaXJW7jF5TCihAOg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -635,17 +678,17 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-replace-supers': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/plugin-syntax-decorators': 7.18.6_@babel+core@7.19.0
+      '@babel/plugin-syntax-decorators': 7.18.6_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-1auuwmK+Rz13SJj36R+jqFPMJWyKEDd7lLSdOj4oJK0UTgGueSAtkrCvz9ewmgyU/P941Rv2fQwZJN8s6QruXw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -654,12 +697,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-export-namespace-from/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-export-namespace-from/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-zr/QcUlUo7GPo6+X1wC98NJADqmy5QTFWWhqeQWiki4XHafJtLl/YMGkmRB2szDD2IYJCCdBTd4ElwhId9T7Xw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -668,12 +711,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-lr1peyn9kOdbYc0xr0OdHTZ5FMqS6Di+H0Fz2I/JwMzGmzJETNeOFq2pBySw6X/KFL5EWDjlJuMsUGRFb8fQgQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -682,12 +725,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-logical-assignment-operators/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-logical-assignment-operators/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-zMo66azZth/0tVd7gmkxOkOjs2rpHyhpcFo565PUP37hSp6hSd9uUKIfTDFMz58BwqgQKhJ9YxtM5XddjXVn+Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -696,12 +739,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-wQxQzxYeJqHcfppzBDnm1yAY0jSRkUXR2z8RePZYrKwMKgMlE8+Z6LUno+bd6LvbGh8Gltvy74+9pIYkr+XkKA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -710,12 +753,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ozlZFogPqoLm8WBr5Z8UckIoE4YQ5KESVcNudyXOR8uqIkliTEgJ3RoketfG6pmzLdeZF0H/wjE9/cCEitBl7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -724,12 +767,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-object-rest-spread/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-object-rest-spread/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-9yuM6wr4rIsKa1wlUAbZEazkCrgw2sMPEXCr4Rnwetu7cEW1NydkCWytLuYletbf8vFxdJxFhwEZqMpOx2eZyw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -738,15 +781,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/compat-data': 7.19.0
-      '@babel/core': 7.19.0
-      '@babel/helper-compilation-targets': 7.19.0_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.0
+      '@babel/compat-data': 7.19.4
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Q40HEhs9DJQyaZfUjjn6vE8Cv4GmMHCYuMGIWUnlxH6400VGxOuwWsPt4FxXxJkC/5eOzgn0z21M9gMT4MOhbw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -755,12 +798,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-optional-chaining/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-optional-chaining/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-PatI6elL5eMzoypFAiYDpYQyMtXTn+iMhuxxQt5mAXD4fEmKorpSI3PHd+i3JXBJN3xyA6MvJv7at23HffFHwA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -769,13 +812,13 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.6
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.0
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-nutsvktDItsNn4rpGItSNV2sz1XwS+nfU0Rg8aCx3W3NOKVzdMjJRu0O5OkgDp3ZGICSTbgRpxZoWsxoKRvbeA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -784,14 +827,14 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-9Rysx7FOctvT5ouj5JODjAFAkgGoudQuLPamZb0v1TGLpapdNaftzifU8NTWQm0IRjqoYypdrSmyWgkocDQ8Dw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -800,16 +843,16 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.0
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-2BShG/d5yoZyXZfVePH91urL5wTG6ASZU9M4o03lKK8u8UW1y08OMttBSOADTcJrnPMpvDXRG3G8fyLh4ovs8w==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -818,9 +861,9 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.18.6:
@@ -832,10 +875,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.0:
+  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -843,8 +886,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-bigint/7.8.3_@babel+core@7.18.6:
@@ -856,10 +899,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-bigint/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-bigint/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-wnTnFlG+YxQm3vDxpGE57Pj0srRU4sHE/mDkt1qv2YJJSeUAec2ma4WLUnUPeKjyrfntVwe/N6dCXpU+zL3Npg==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -867,8 +910,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.18.6:
@@ -880,10 +923,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.0:
+  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.6:
     resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -891,11 +934,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.0:
+  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -904,11 +947,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-decorators/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-syntax-decorators/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-fqyLgjcxf/1yhyZ6A+yo1u9gJ7eleFQod2lkaUsF9DQ7sbbY3Ligym3L0+I2c0WmqNKDpoD9UTb1AKP3qRMOAQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -917,11 +960,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-5gdGbFon+PszYzqs83S3E5mpi7/y/8M9eC90MRTZfduQOYW76ig6SOSPNe41IG5LoP3FGBn2N0RjVDSQiS94kQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -929,11 +972,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-MXf5laXo6c1IbEbegDmzGPwGNTsHZmEy6QGznu5Sh2UCWvueywb2ee+CCE4zQiZstxU9BMoQO9i6zUFSY0Kj0Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -941,11 +984,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-flow/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-syntax-flow/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-LUbR+KNTBWCUAqRG9ex5Gnzu2IOkt8jRJbHHXFT9q+L9zm7M/QQbEqXyw1n1pohYvOyWC8CjeyjrSaIwiYjK7A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -954,11 +997,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-/DU3RXad9+bZwrgWJQKbr39gYbJpLJHezqEzRzi/BHRlJ9zsQb4CK2CA/5apllXNomwA1qHwzvHl+AdEmC5krQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -967,8 +1010,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-import-meta/7.10.4_@babel+core@7.18.6:
@@ -980,10 +1023,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-import-meta/7.10.4_@babel+core@7.19.0:
+  /@babel/plugin-syntax-import-meta/7.10.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-Yqfm+XDx0+Prh3VSeEQCPU81yC+JWZ2pDPFSS4ZdpfZhp4MkFMaDC1UqseovEKwSUpnIL7+vK+Clp7bfh0iD7g==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -991,8 +1034,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.18.6:
@@ -1004,10 +1047,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1015,8 +1058,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-jsx/7.18.6:
@@ -1031,7 +1074,7 @@ packages:
       '@babel/helper-plugin-utils': 7.18.9
     dev: false
 
-  /@babel/plugin-syntax-jsx/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-syntax-jsx/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-6mmljtAedFGTWu2p/8WIORGwy+61PLgOMPOdazc7YoJ9ZCWUyFy3A6CpPkRKLKD1ToAesxX8KGEViAiLo9N+7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1040,7 +1083,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.18.9
     dev: true
 
@@ -1053,10 +1096,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.0:
+  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1064,8 +1107,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.18.6:
@@ -1077,10 +1120,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1088,8 +1131,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.18.6:
@@ -1101,10 +1144,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.0:
+  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1112,8 +1155,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.18.6:
@@ -1125,10 +1168,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1136,8 +1179,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.18.6:
@@ -1149,10 +1192,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1160,8 +1203,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.18.6:
@@ -1173,10 +1216,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.0:
+  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1184,11 +1227,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.0:
+  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1197,8 +1240,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
   /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.18.6:
@@ -1211,10 +1254,10 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.0:
+  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1223,11 +1266,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-typescript/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-syntax-typescript/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-mAWAuq4rvOepWCBid55JuRNvpTNf2UGVgoz4JV0fXEKolsVZDzsa4NqCef758WZJj/GDu0gVGItjKFiClTAmZA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1236,11 +1279,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-9S9X9RUefzrsHZmKMbDXxweEH+YlE8JJEuat9FdvW9Qh1cw7W64jELCtWNkPBPX5En45uy28KGvA/AySqUh8CQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1249,11 +1292,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ARE5wZLKnTgPW7/1ftQmSi1CmkqqHo2DNmtztFhvgtOWSDfq0Cq9/9L+KnZNYSNrydBekhW3rwShduf59RoXag==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1262,15 +1305,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/helper-remap-async-to-generator': 7.18.6_@babel+core@7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-remap-async-to-generator': 7.18.6_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ExUcOqpPWnliRcPqves5HJcJOvHvIIWfuS4sroBUenPuMdmW+SMHDakmtS7qOo13sVppmUijqeTv7qqGsvURpQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1279,11 +1322,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-block-scoping/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-block-scoping/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-pRqwb91C42vs1ahSAWJkxOxU1RHWDn16XAa6ggQ72wjLlWyYeAcLvTtE0aM8ph3KNydy9CQF2nLYcjq1WysgxQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1292,11 +1335,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-classes/7.18.8_@babel+core@7.19.0:
+  /@babel/plugin-transform-classes/7.18.8_@babel+core@7.19.6:
     resolution: {integrity: sha512-RySDoXdF6hgHSHuAW4aLGyVQdmvEX/iJtjVre52k0pxRq4hzqze+rAVP++NmNv596brBpYmaiKgTZby7ziBnVg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1305,12 +1348,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-replace-supers': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
       globals: 11.12.0
@@ -1318,7 +1361,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-computed-properties/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-computed-properties/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-9repI4BhNrR0KenoR9vm3/cIc1tSBIo+u1WVjKCAynahj25O8zfbiE6JtAtHPGQSs4yZ+bA8mRasRP+qc+2R5A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1327,11 +1370,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-destructuring/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-destructuring/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-tgy3u6lRp17ilY8r1kP4i2+HDUwxlVqq3RTc943eAWSzGgpU1qhiKpqZ5CMyHReIYPHdo3Kg8v8edKtDqSVEyQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1340,11 +1383,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-6S3jpun1eEbAxq7TdjLotAsl4WpQI9DxfkycRcKrjhQYzU87qpXdknpBg/e+TdcMehqGnLFi7tnFUBR02Vq6wg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1353,12 +1396,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-duplicate-keys/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-duplicate-keys/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-NJU26U/208+sxYszf82nmGYqVF9QN8py2HFTblPT9hbawi8+1C5a9JubODLTGFuT0qlkqVinmkwOD13s0sZktg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1367,11 +1410,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-wzEtc0+2c88FVR34aQmiz56dxEkxr2g8DQb/KfaFa1JYXOFVsbhvAonFN6PwVWj++fKmku8NP80plJ5Et4wqHw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1380,12 +1423,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-builder-binary-assignment-operator-visitor': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-flow-strip-types/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-flow-strip-types/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-wE0xtA7csz+hw4fKPwxmu5jnzAsXPIO57XnRwzXP3T19jWh1BODnPGoG9xKYwvAwusP7iUktHayRFbMPGtODaQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1394,12 +1437,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-flow': 7.18.6_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-flow': 7.18.6_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.0:
+  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.6:
     resolution: {integrity: sha512-yEfTRnjuskWYo0k1mHUqrVWaZwrdq8AYbfrpqULOJOaucGSp4mNMVps+YtA8byoevxS/urwU75vyhQIxcCgiBQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1408,11 +1451,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-function-name/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-function-name/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-kJha/Gbs5RjzIu0CxZwf5e3aTTSlhZnHMT8zPWnJMjNpLOUgqevg+PN5oMH68nMCXnfiMo4Bhgxqj59KHTlAnA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1421,13 +1464,13 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-compilation-targets': 7.19.0_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-function-name': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-literals/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-literals/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-x3HEw0cJZVDoENXOp20HlypIHfl0zMIhMVZEBVTfmqbObIpsMxMbmU5nOEO8R7LYT+z5RORKPlTI5Hj4OsO9/Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1436,11 +1479,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-qSF1ihLGO3q+/g48k85tUjD033C29TNTVB2paCwZPVmOsjn9pClvYYrM2VeJpBY2bcNkuny0YUyTNRyRxJ54KA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1449,11 +1492,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Pra5aXsmTsOnjM3IajS8rTaLCy++nGM4v3YR4esk5PCsyg9z8NA5oQLwxzMUtDBd8F+UmVza3VxoAaWCbzH1rg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1462,9 +1505,9 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-module-transforms': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-module-transforms': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
@@ -1488,7 +1531,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Qfv2ZOWikpvmedXQJDSbxNqy7Xr/j2Y8/KfijM0iJyKkBTmWuvCA1yeH1yDM7NJhBW/2aXxeucLj6i80/LAJ/Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1497,7 +1540,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-module-transforms': 7.18.9
       '@babel/helper-plugin-utils': 7.18.9
       '@babel/helper-simple-access': 7.18.6
@@ -1506,7 +1549,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-systemjs/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-modules-systemjs/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-UbPYpXxLjTw6w6yXX2BYNxF3p6QY225wcTkfQCy3OMnSlS/C3xGtwUjEzGkldb/sy6PWLiCQ3NbYfjWUTI3t4g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1515,17 +1558,17 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-hoist-variables': 7.18.6
-      '@babel/helper-module-transforms': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-module-transforms': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-validator-identifier': 7.19.1
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-dcegErExVeXcRqNtkRU/z8WlBLnvD4MRnHgNs3MytRO1Mn1sHRyhbcpYbVMGclAqOjdW+9cfkdZno9dFdfKLfQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1534,14 +1577,14 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-module-transforms': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-module-transforms': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-named-capturing-groups-regex/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-named-capturing-groups-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-UmEOGF8XgaIqD74bC8g7iV3RYj8lMf0Bw7NJzvnS9qQhM4mg+1WHKotUIdjxgD2RGrgFLZZPCFPFj3P/kVDYhg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1550,12 +1593,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-DjwFA/9Iu3Z+vrAn+8pBUGcjhxKguSMlsFqeCKbhb9BAV756v0krzVK04CRDi/4aqmk8BsHb4a/gFcaA5joXRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1564,11 +1607,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-uvGz6zk+pZoS1aTZrOvrbj6Pp/kK2mp45t2B+bTDre2UgsZZ8EZLSJtUg7m/no0zOJUWgFONpB7Zv9W2tSaFlA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1577,14 +1620,14 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-replace-supers': 7.18.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.0:
+  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.6:
     resolution: {integrity: sha512-ivfbE3X2Ss+Fj8nnXvKJS6sjRG4gzwPMsP+taZC+ZzEGjAYlvENixmt1sZ5Ca6tWls+BlKSGKPJ6OOXvXCbkFg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1593,11 +1636,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-cYcs6qlgafTud3PAzrrRNbQtfpQ8+y/+M5tKmksS9+M1ckbH6kzY8MrexEM9mcA6JDsukE19iIRvAyYl463sMg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1606,11 +1649,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-react-display-name/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-react-display-name/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-TV4sQ+T013n61uMoygyMRm+xf04Bd5oqFpv2jAEQwSZ8NwQA7zeRPg1LMVg2PWi3zWBz+CLKD+v5bcpZ/BS0aA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1619,11 +1662,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-react-jsx-development/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-react-jsx-development/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-SA6HEjwYFKF7WDjWcMcMGUimmw/nhNRDWxr+KaLSCrkD/LMDBvWRmHAYgE1HDeF8KUuI8OAu+RT6EOtKxSW2qA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1632,11 +1675,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/plugin-transform-react-jsx': 7.18.10_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/plugin-transform-react-jsx': 7.19.0_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-transform-react-jsx-self/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-react-jsx-self/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-A0LQGx4+4Jv7u/tWzoJF7alZwnBDQd6cGLh9P+Ttk4dpiL+J5p7NSNv/9tlEFFJDq3kjxOavWmbm6t0Gk+A3Ig==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1645,12 +1688,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.18.9
     dev: true
 
-  /@babel/plugin-transform-react-jsx-source/7.18.6_@babel+core@7.19.0:
-    resolution: {integrity: sha512-utZmlASneDfdaMh0m/WausbjUjEdGrQJz0vFK93d7wD3xf5wBtX219+q6IlCNZeguIcxS2f/CvLZrlLSvSHQXw==}
+  /@babel/plugin-transform-react-jsx-source/7.19.6_@babel+core@7.19.6:
+    resolution: {integrity: sha512-RpAi004QyMNisst/pvSanoRdJ4q+jMCWyk9zdw/CyLB9j8RXEahodR6l2GyttDRyEVWZtbN+TpLiHJ3t34LbsQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1658,12 +1701,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-react-jsx/7.18.10_@babel+core@7.19.0:
-    resolution: {integrity: sha512-gCy7Iikrpu3IZjYZolFE4M1Sm+nrh1/6za2Ewj77Z+XirT4TsbJcvOFOyF+fRPwU6AKKK136CZxx6L8AbSFG6A==}
+  /@babel/plugin-transform-react-jsx/7.19.0_@babel+core@7.19.6:
+    resolution: {integrity: sha512-UVEvX3tXie3Szm3emi1+G63jyw1w5IcMY0FSKM+CRnKRI5Mr1YbCNgsSTwoTwKphQEG9P+QqmuRFneJPZuHNhg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1671,15 +1714,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-jsx': 7.18.6_@babel+core@7.19.0
-      '@babel/types': 7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-jsx': 7.18.6_@babel+core@7.19.6
+      '@babel/types': 7.19.4
     dev: true
 
-  /@babel/plugin-transform-react-pure-annotations/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-react-pure-annotations/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-I8VfEPg9r2TRDdvnHgPepTKvuRomzA8+u+nhY7qSI1fR2hRNebasZEETLyM5mAUr0Ku56OkXJ0I7NHJnO6cJiQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1688,12 +1731,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-poqRI2+qiSdeldcz4wTSTXBRryoq3Gc70ye7m7UD5Ww0nE29IXqMl6r7Nd15WBgRd74vloEMlShtH6CKxVzfmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1702,12 +1745,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       regenerator-transform: 0.15.0
     dev: true
 
-  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-oX/4MyMoypzHjFrT1CdivfKZ+XvIPMFXwwxHp/r0Ddy2Vuomt4HDFGmft1TAY2yiTKiNSsh3kjBAzcM8kSdsjA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1716,11 +1759,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-runtime/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-runtime/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-8uRHk9ZmRSnWqUgyae249EJZ94b0yAGLBIqzZzl+0iEdbno55Pmlt/32JZsHwXD9k/uZj18Aqqk35wBX4CBTXA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1729,18 +1772,18 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-plugin-utils': 7.18.9
-      babel-plugin-polyfill-corejs2: 0.3.1_@babel+core@7.19.0
-      babel-plugin-polyfill-corejs3: 0.5.2_@babel+core@7.19.0
-      babel-plugin-polyfill-regenerator: 0.3.1_@babel+core@7.19.0
+      '@babel/helper-plugin-utils': 7.19.0
+      babel-plugin-polyfill-corejs2: 0.3.1_@babel+core@7.19.6
+      babel-plugin-polyfill-corejs3: 0.5.2_@babel+core@7.19.6
+      babel-plugin-polyfill-regenerator: 0.3.1_@babel+core@7.19.6
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-eCLXXJqv8okzg86ywZJbRn19YJHU4XUa55oz2wbHhaQVn/MM+XhukiT7SYqp/7o00dg52Rj51Ny+Ecw4oyoygw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1749,11 +1792,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-spread/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-spread/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ayT53rT/ENF8WWexIRg9AiV9h0aIteyWn5ptfZTZQrjk/+f3WdrJGCY4c9wcgl2+MKkKPhzbYp97FTsquZpDCw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1762,12 +1805,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.6
     dev: true
 
-  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-kfiDrDQ+PBsQDO85yj1icueWMfGfJFKN1KCkndygtu/C9+XUfydLC8Iv5UYJqRwy4zk8EcplRxEOeLyjq1gm6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1776,11 +1819,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-template-literals/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-template-literals/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-UuqlRrQmT2SWRvahW46cGSany0uTlcj8NYOS5sRGYi8FxPYPoLd5DDmMd32ZXEj2Jq+06uGVQKHxa/hJx2EzKw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1789,11 +1832,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-typeof-symbol/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-typeof-symbol/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-7m71iS/QhsPk85xSjFPovHPcH3H9qeyzsujhTc+vcdnsXavoWYJ74zx0lP5RhpC5+iDnVLO+PPMHzC11qels1g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1802,11 +1845,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-typescript/7.18.8_@babel+core@7.19.0:
+  /@babel/plugin-transform-typescript/7.18.8_@babel+core@7.19.6:
     resolution: {integrity: sha512-p2xM8HI83UObjsZGofMV/EdYjamsDm6MoN3hXPYIT0+gxIoopE+B7rPYKAxfrz9K9PK7JafTTjqYC6qipLExYA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1815,15 +1858,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-unicode-escapes/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-unicode-escapes/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-XNRwQUXYMP7VLuy54cr/KS/WeL3AZeORhrmeZ7iewgu+X2eBqmpaLI/hzqr9ZxCeUoq0ASK4GUzSM0BDhZkLFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1832,11 +1875,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.0:
+  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-gE7A6Lt7YLnNOL3Pb9BNeZvi+d8l7tcRrG4+pwJjK9hD2xX4mEvjlQW60G9EEmfXVYRPv9VRQcyegIVHCql/AA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1845,12 +1888,12 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.18.6_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/preset-env/7.18.6_@babel+core@7.19.0:
+  /@babel/preset-env/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-WrthhuIIYKrEFAwttYzgRNQ5hULGmwTj+D6l7Zdfsv5M7IWV/OZbUfbeL++Qrzx1nVJwWROIFhCHRYQV4xbPNw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1859,87 +1902,87 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/compat-data': 7.19.0
-      '@babel/core': 7.19.0
-      '@babel/helper-compilation-targets': 7.19.0_@babel+core@7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/compat-data': 7.19.4
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-async-generator-functions': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-export-namespace-from': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-logical-assignment-operators': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-object-rest-spread': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-optional-chaining': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.0
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.0
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.0
-      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.0
-      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-block-scoping': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-classes': 7.18.8_@babel+core@7.19.0
-      '@babel/plugin-transform-computed-properties': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-destructuring': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-duplicate-keys': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.0
-      '@babel/plugin-transform-function-name': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-literals': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-modules-systemjs': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.0
-      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-spread': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-template-literals': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-typeof-symbol': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-unicode-escapes': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/preset-modules': 0.1.5_@babel+core@7.19.0
-      '@babel/types': 7.19.0
-      babel-plugin-polyfill-corejs2: 0.3.1_@babel+core@7.19.0
-      babel-plugin-polyfill-corejs3: 0.5.2_@babel+core@7.19.0
-      babel-plugin-polyfill-regenerator: 0.3.1_@babel+core@7.19.0
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-async-generator-functions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-export-namespace-from': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-logical-assignment-operators': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-object-rest-spread': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-optional-chaining': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.6
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.6
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.6
+      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.6
+      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-block-scoping': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-classes': 7.18.8_@babel+core@7.19.6
+      '@babel/plugin-transform-computed-properties': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-destructuring': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-duplicate-keys': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.6
+      '@babel/plugin-transform-function-name': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-literals': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-systemjs': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.6
+      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-spread': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-template-literals': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-typeof-symbol': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-unicode-escapes': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/preset-modules': 0.1.5_@babel+core@7.19.6
+      '@babel/types': 7.19.4
+      babel-plugin-polyfill-corejs2: 0.3.1_@babel+core@7.19.6
+      babel-plugin-polyfill-corejs3: 0.5.2_@babel+core@7.19.6
+      babel-plugin-polyfill-regenerator: 0.3.1_@babel+core@7.19.6
       core-js-compat: 3.23.4
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/preset-modules/0.1.5_@babel+core@7.19.0:
+  /@babel/preset-modules/0.1.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-A57th6YRG7oR3cq/yt/Y84MvGgE0eJG2F1JLhKuyG+jFxEgrd/HAMJatiFtmOiZurz+0DkrvbheCLaV5f2JfjA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -1947,15 +1990,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.0
-      '@babel/types': 7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/types': 7.19.4
       esutils: 2.0.3
     dev: true
 
-  /@babel/preset-react/7.18.6_@babel+core@7.19.0:
+  /@babel/preset-react/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-zXr6atUmyYdiWRVLOZahakYmOBHtWc2WGCkP8PYTgZi0iJXDY2CN180TdrIW4OGOAdLc7TifzDIvtx6izaRIzg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1964,16 +2007,16 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-transform-react-display-name': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-react-jsx': 7.18.10_@babel+core@7.19.0
-      '@babel/plugin-transform-react-jsx-development': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-react-pure-annotations': 7.18.6_@babel+core@7.19.0
+      '@babel/plugin-transform-react-display-name': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-react-jsx': 7.19.0_@babel+core@7.19.6
+      '@babel/plugin-transform-react-jsx-development': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-react-pure-annotations': 7.18.6_@babel+core@7.19.6
     dev: true
 
-  /@babel/preset-typescript/7.18.6_@babel+core@7.19.0:
+  /@babel/preset-typescript/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-s9ik86kXBAnD760aybBucdpnLsAt0jK1xqJn2juOn9lkOvSHV60os5hxoVJsPzMQxvnUJFAlkont2DvvaYEBtQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
@@ -1982,10 +2025,10 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/core': 7.19.6
+      '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-transform-typescript': 7.18.8_@babel+core@7.19.0
+      '@babel/plugin-transform-typescript': 7.18.8_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -2042,13 +2085,31 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.0
+      '@babel/generator': 7.19.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/parser': 7.19.6
+      '@babel/types': 7.19.4
+      debug: 4.3.4
+      globals: 11.12.0
+    transitivePeerDependencies:
+      - supports-color
+    dev: true
+
+  /@babel/traverse/7.19.6:
+    resolution: {integrity: sha512-6l5HrUCzFM04mfbG09AagtYyR2P0B71B1wN7PfSPiksDPz2k5H9CBC1tcZpz2M8OxbKTPccByoOJ22rUKbpmQQ==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      '@babel/code-frame': 7.18.6
+      '@babel/generator': 7.19.6
+      '@babel/helper-environment-visitor': 7.18.9
+      '@babel/helper-function-name': 7.19.0
+      '@babel/helper-hoist-variables': 7.18.6
+      '@babel/helper-split-export-declaration': 7.18.6
+      '@babel/parser': 7.19.6
+      '@babel/types': 7.19.4
       debug: 4.3.4
       globals: 11.12.0
     transitivePeerDependencies:
@@ -2068,10 +2129,19 @@ packages:
     resolution: {integrity: sha512-YuGopBq3ke25BVSiS6fgF49Ul9gH1x70Bcr6bqRLjWCkcX8Hre1/5+z+IiWOIerRMSSEfGZVB9z9kyq7wVs9YA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/helper-string-parser': 7.18.10
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-string-parser': 7.19.4
+      '@babel/helper-validator-identifier': 7.19.1
       to-fast-properties: 2.0.0
 
+  /@babel/types/7.19.4:
+    resolution: {integrity: sha512-M5LK7nAeS6+9j7hAq+b3fQs+pNfUtTGq+yFFfHnauFA8zQtLRfmuipmsKDKKLuyG+wC8ABW43A153YNawNTEtw==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      '@babel/helper-string-parser': 7.19.4
+      '@babel/helper-validator-identifier': 7.19.1
+      to-fast-properties: 2.0.0
+    dev: true
+
   /@bcoe/v8-coverage/0.2.3:
     resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
     dev: true
@@ -2709,7 +2779,7 @@ packages:
     resolution: {integrity: sha512-E9JjhUgNzvuQ+vVAL21vlyfy12gP0GhazGgJC4h6qUt1jSdUXGWJ1wfu/X7Sd8etSgxV4ovT1pb9v5D6QW4XgA==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@jest/types': 26.6.2
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
@@ -2732,7 +2802,7 @@ packages:
     resolution: {integrity: sha512-aPe6rrletyuEIt2axxgdtxljmzH8O/nrov4byy6pDw9S8inIrTV+2PnjyP/oFHMSynzGxJ2s6OHowBNMXp/Jzg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
@@ -3131,7 +3201,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-add-jsx-attribute/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-add-jsx-attribute/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-jDBKArXYO1u0B1dmd2Nf8Oy6aTF5vLDfLoO9Oon/GLkqZ/NiggYWZA+a2HpUMH4ITwNqS3z43k8LWApB8S583w==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3140,7 +3210,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-remove-jsx-attribute/6.3.1:
@@ -3153,7 +3223,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-remove-jsx-attribute/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-remove-jsx-attribute/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-dQzyJ4prwjcFd929T43Z8vSYiTlTu8eafV40Z2gO7zy/SV5GT+ogxRJRBIKWomPBOiaVXFg3jY4S5hyEN3IBjQ==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3162,7 +3232,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-remove-jsx-empty-expression/6.3.1:
@@ -3175,7 +3245,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-remove-jsx-empty-expression/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-remove-jsx-empty-expression/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-HBOUc1XwSU67fU26V5Sfb8MQsT0HvUyxru7d0oBJ4rA2s4HW3PhyAPC7fV/mdsSGpAvOdd8Wpvkjsr0fWPUO7A==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3184,7 +3254,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-replace-jsx-attribute-value/6.3.1:
@@ -3197,7 +3267,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-replace-jsx-attribute-value/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-replace-jsx-attribute-value/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-C12e6aN4BXAolRrI601gPn5MDFCRHO7C4TM8Kks+rDtl8eEq+NN1sak0eAzJu363x3TmHXdZn7+Efd2nr9I5dA==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3206,7 +3276,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-svg-dynamic-title/6.3.1:
@@ -3219,7 +3289,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-svg-dynamic-title/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-svg-dynamic-title/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-6NU55Mmh3M5u2CfCCt6TX29/pPneutrkJnnDCHbKZnjukZmmgUAZLtZ2g6ZoSPdarowaQmAiBRgAHqHmG0vuqA==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3228,7 +3298,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-svg-em-dimensions/6.3.1:
@@ -3241,7 +3311,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-svg-em-dimensions/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-svg-em-dimensions/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-HV1NGHYTTe1vCNKlBgq/gKuCSfaRlKcHIADn7P8w8U3Zvujdw1rmusutghJ1pZJV7pDt3Gt8ws+SVrqHnBO/Qw==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3250,7 +3320,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-transform-react-native-svg/6.3.1:
@@ -3263,7 +3333,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-transform-react-native-svg/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-transform-react-native-svg/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-2wZhSHvTolFNeKDAN/ZmIeSz2O9JSw72XD+o2bNp2QAaWqa8KGpn5Yk5WHso6xqfSAiRzAE+GXlsrBO4UP9LLw==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3272,7 +3342,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-plugin-transform-svg-component/6.3.1:
@@ -3285,7 +3355,7 @@ packages:
         optional: true
     dev: true
 
-  /@svgr/babel-plugin-transform-svg-component/6.3.1_@babel+core@7.19.0:
+  /@svgr/babel-plugin-transform-svg-component/6.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-cZ8Tr6ZAWNUFfDeCKn/pGi976iWSkS8ijmEYKosP+6ktdZ7lW9HVLHojyusPw3w0j8PI4VBeWAXAmi/2G7owxw==}
     engines: {node: '>=12'}
     peerDependencies:
@@ -3294,7 +3364,7 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
     dev: true
 
   /@svgr/babel-preset/6.4.0:
@@ -3316,7 +3386,7 @@ packages:
       '@svgr/babel-plugin-transform-svg-component': 6.3.1
     dev: true
 
-  /@svgr/babel-preset/6.4.0_@babel+core@7.19.0:
+  /@svgr/babel-preset/6.4.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-Ytuh7N282fv2Cy1JePf6HZ29/G5Hb8mQAjx4iykPjvfFl9NK6o5lZavmewgjOGT8kNPtwgvheuOQn4CifHRUhQ==}
     engines: {node: '>=10'}
     peerDependencies:
@@ -3325,15 +3395,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@svgr/babel-plugin-add-jsx-attribute': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-remove-jsx-attribute': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-remove-jsx-empty-expression': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-replace-jsx-attribute-value': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-svg-dynamic-title': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-svg-em-dimensions': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-transform-react-native-svg': 6.3.1_@babel+core@7.19.0
-      '@svgr/babel-plugin-transform-svg-component': 6.3.1_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@svgr/babel-plugin-add-jsx-attribute': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-remove-jsx-attribute': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-remove-jsx-empty-expression': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-replace-jsx-attribute-value': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-svg-dynamic-title': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-svg-em-dimensions': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-transform-react-native-svg': 6.3.1_@babel+core@7.19.6
+      '@svgr/babel-plugin-transform-svg-component': 6.3.1_@babel+core@7.19.6
     dev: true
 
   /@svgr/core/6.4.0:
@@ -3353,7 +3423,7 @@ packages:
     resolution: {integrity: sha512-PjcU8jCneKXJnrREycsgfgQ/bzR1ogSKC5MBeUu2wmEoJIjzXX7X14DDktUjU9bkBy26yMDiVHn46Nl82P3WEg==}
     engines: {node: '>=10'}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
       entities: 4.3.1
     dev: true
 
@@ -3363,8 +3433,8 @@ packages:
     peerDependencies:
       '@svgr/core': ^6.0.0
     dependencies:
-      '@babel/core': 7.19.0
-      '@svgr/babel-preset': 6.4.0_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@svgr/babel-preset': 6.4.0_@babel+core@7.19.6
       '@svgr/core': 6.4.0
       '@svgr/hast-util-to-babel-ast': 6.4.0
       svg-parser: 2.0.4
@@ -3453,20 +3523,20 @@ packages:
   /@types/babel__generator/7.6.4:
     resolution: {integrity: sha512-tFkciB9j2K755yrTALxD44McOrk+gfpIpvC3sxHjRawj6PfnQxrse4Clq5y/Rq+G3mrBurMax/lG8Qn2t9mSsg==}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@types/babel__template/7.4.1:
     resolution: {integrity: sha512-azBFKemX6kMg5Io+/rdGT0dkGreboUVR0Cdm3fz9QJWpaQGJRQXl7C+6hOTCZcMll7KFyEQpgbYI2lHdsS4U7g==}
     dependencies:
-      '@babel/parser': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/parser': 7.19.6
+      '@babel/types': 7.19.4
     dev: true
 
   /@types/babel__traverse/7.17.1:
     resolution: {integrity: sha512-kVzjari1s2YVi77D3w1yuvohV2idweYXMCDzqBiVNN63TcDWrIlTVOYpqVrvbbyOE/IyzBoTKF0fdnLPEORFxA==}
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@types/eslint/8.4.5:
@@ -3824,18 +3894,18 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.1.0_vite@3.1.8:
-    resolution: {integrity: sha512-am6rPyyU3LzUYne3Gd9oj9c4Rzbq5hQnuGXSMT6Gujq45Il/+bunwq3lrB7wghLkiF45ygMwft37vgJ/NE8IAA==}
+  /@vitejs/plugin-react/2.2.0_vite@3.1.8:
+    resolution: {integrity: sha512-FFpefhvExd1toVRlokZgxgy2JtnBOdp4ZDsq7ldCWaqGSGn9UhWMAVm/1lxPL14JfNS5yGz+s9yFrQY6shoStA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
       vite: ^3.0.0
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/plugin-transform-react-jsx': 7.18.10_@babel+core@7.19.0
-      '@babel/plugin-transform-react-jsx-development': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-react-jsx-self': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-react-jsx-source': 7.18.6_@babel+core@7.19.0
-      magic-string: 0.26.2
+      '@babel/core': 7.19.6
+      '@babel/plugin-transform-react-jsx': 7.19.0_@babel+core@7.19.6
+      '@babel/plugin-transform-react-jsx-development': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-react-jsx-self': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-react-jsx-source': 7.19.6_@babel+core@7.19.6
+      magic-string: 0.26.7
       react-refresh: 0.14.0
       vite: 3.1.8
     transitivePeerDependencies:
@@ -4127,7 +4197,7 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.2.2_@babel+core@7.19.0:
+  /babel-jest/29.2.2_@babel+core@7.19.6:
     resolution: {integrity: sha512-kkq2QSDIuvpgfoac3WZ1OOcHsQQDU5xYk2Ql7tLdJ8BVAYbefEXal+NfS45Y5LVZA7cxC8KYcQMObpCt1J025w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -4136,11 +4206,11 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@jest/transform': 29.2.2
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
-      babel-preset-jest: 29.2.0_@babel+core@7.19.0
+      babel-preset-jest: 29.2.0_@babel+core@7.19.6
       chalk: 4.1.2
       graceful-fs: 4.2.10
       slash: 3.0.0
@@ -4172,7 +4242,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
       '@types/babel__core': 7.1.19
       '@types/babel__traverse': 7.17.1
     dev: true
@@ -4182,7 +4252,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
       '@types/babel__core': 7.1.19
       '@types/babel__traverse': 7.17.1
     dev: true
@@ -4195,7 +4265,7 @@ packages:
       cosmiconfig: 7.0.1
       resolve: 1.22.1
 
-  /babel-plugin-polyfill-corejs2/0.3.1_@babel+core@7.19.0:
+  /babel-plugin-polyfill-corejs2/0.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-v7/T6EQcNfVLfcN2X8Lulb7DjprieyLWJK/zOWH5DUYcAgex9sP3h25Q+DLsX9TloXe3y1O8l2q2Jv9q8UVB9w==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -4203,15 +4273,15 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/compat-data': 7.19.0
-      '@babel/core': 7.19.0
-      '@babel/helper-define-polyfill-provider': 0.3.1_@babel+core@7.19.0
+      '@babel/compat-data': 7.19.4
+      '@babel/core': 7.19.6
+      '@babel/helper-define-polyfill-provider': 0.3.1_@babel+core@7.19.6
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-corejs3/0.5.2_@babel+core@7.19.0:
+  /babel-plugin-polyfill-corejs3/0.5.2_@babel+core@7.19.6:
     resolution: {integrity: sha512-G3uJih0XWiID451fpeFaYGVuxHEjzKTHtc9uGFEjR6hHrvNzeS/PX+LLLcetJcytsB5m4j+K3o/EpXJNb/5IEQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -4219,14 +4289,14 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-define-polyfill-provider': 0.3.1_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-define-polyfill-provider': 0.3.1_@babel+core@7.19.6
       core-js-compat: 3.23.4
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-regenerator/0.3.1_@babel+core@7.19.0:
+  /babel-plugin-polyfill-regenerator/0.3.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-Y2B06tvgHYt1x0yz17jGkGeeMr5FeKUu+ASJ+N6nB5lQ8Dapfg42i0OVrf8PNGJ3zKL4A23snMi1IRwrqqND7A==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
@@ -4234,8 +4304,8 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/helper-define-polyfill-provider': 0.3.1_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-define-polyfill-provider': 0.3.1_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -4267,7 +4337,7 @@ packages:
       '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.18.6
     dev: true
 
-  /babel-preset-current-node-syntax/1.0.1_@babel+core@7.19.0:
+  /babel-preset-current-node-syntax/1.0.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-M7LQ0bxarkxQoN+vz5aJPsLBn77n8QgTFmo8WK0/44auK2xlCXrYcUxHFxgU7qW5Yzw/CjmLRK2uJzaCd7LvqQ==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -4275,19 +4345,19 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-bigint': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.0
-      '@babel/plugin-syntax-import-meta': 7.10.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.0
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.0
-      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-bigint': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.6
+      '@babel/plugin-syntax-import-meta': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.6
     dev: true
 
   /babel-preset-jest/26.6.2_@babel+core@7.18.6:
@@ -4304,7 +4374,7 @@ packages:
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.18.6
     dev: true
 
-  /babel-preset-jest/29.2.0_@babel+core@7.19.0:
+  /babel-preset-jest/29.2.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-z9JmMJppMxNv8N7fNRHvhMg9cvIkMxQBXgFkane3yKVEvEOP+kB50lk8DFRvF9PGqbyXxlmebKWhuDORO8RgdA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -4313,28 +4383,28 @@ packages:
       '@babel/core':
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       babel-plugin-jest-hoist: 29.2.0
-      babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
+      babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.6
     dev: true
 
   /babel-preset-react-app/10.0.1:
     resolution: {integrity: sha512-b0D9IZ1WhhCWkrTXyFuIIgqGzSkRIH5D5AmB0bXbzYAB1OBAwHcUeyWW2LorutLWF5btNo/N7r/cIdmvvKJlYg==}
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-decorators': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-optional-chaining': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-flow-strip-types': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-react-display-name': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-transform-runtime': 7.18.6_@babel+core@7.19.0
-      '@babel/preset-env': 7.18.6_@babel+core@7.19.0
-      '@babel/preset-react': 7.18.6_@babel+core@7.19.0
-      '@babel/preset-typescript': 7.18.6_@babel+core@7.19.0
+      '@babel/core': 7.19.6
+      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-decorators': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-optional-chaining': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-flow-strip-types': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-react-display-name': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-runtime': 7.18.6_@babel+core@7.19.6
+      '@babel/preset-env': 7.18.6_@babel+core@7.19.6
+      '@babel/preset-react': 7.18.6_@babel+core@7.19.6
+      '@babel/preset-typescript': 7.18.6_@babel+core@7.19.6
       '@babel/runtime': 7.19.0
       babel-plugin-macros: 3.1.0
       babel-plugin-transform-react-remove-prop-types: 0.4.24
@@ -4414,6 +4484,17 @@ packages:
       update-browserslist-db: 1.0.4_browserslist@4.21.2
     dev: true
 
+  /browserslist/4.21.4:
+    resolution: {integrity: sha512-CBHJJdDmgjl3daYjN5Cp5kbTf1mUhZoS+beLklHIvkOWscs83YAhLlF3Wsh/lciQYAcbBJgTOD44VtG31ZM4Hw==}
+    engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
+    hasBin: true
+    dependencies:
+      caniuse-lite: 1.0.30001425
+      electron-to-chromium: 1.4.284
+      node-releases: 2.0.6
+      update-browserslist-db: 1.0.10_browserslist@4.21.4
+    dev: true
+
   /bser/2.1.1:
     resolution: {integrity: sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==}
     dependencies:
@@ -4473,6 +4554,10 @@ packages:
     resolution: {integrity: sha512-yy7XLWCubDobokgzudpkKux8e0UOOnLHE6mlNJBzT3lZJz6s5atSEzjoL+fsCPkI0G8MP5uVdDx1ur/fXEWkZA==}
     dev: true
 
+  /caniuse-lite/1.0.30001425:
+    resolution: {integrity: sha512-/pzFv0OmNG6W0ym80P3NtapU0QEiDS3VuYAZMGoLLqiC7f6FJFe1MjpQDREGApeenD9wloeytmVDj+JLXPC6qw==}
+    dev: true
+
   /capture-exit/2.0.0:
     resolution: {integrity: sha512-PiT/hQmTonHhl/HFGN+Lx3JJUznrVYJ3+AQsnthneZbvW7x+f08Tk7yLJTLEOUvBTbduLeeBkxEaYXUOUrRq6g==}
     engines: {node: 6.* || 8.* || >= 10.*}
@@ -4656,7 +4741,7 @@ packages:
   /core-js-compat/3.23.4:
     resolution: {integrity: sha512-RkSRPe+JYEoflcsuxJWaiMPhnZoFS51FcIxm53k4KzhISCBTmaGlto9dTIrYuk0hnJc3G6pKufAKepHnBq6B6Q==}
     dependencies:
-      browserslist: 4.21.2
+      browserslist: 4.21.4
       semver: 7.0.0
     dev: true
 
@@ -4945,6 +5030,10 @@ packages:
     resolution: {integrity: sha512-dQ6Zn4ll2NofGtxPXaDfY2laIa6NyCQdqXYHdwH90GJQW0LpJJib0ZU/ERtbb0XkBEmUD2eJtagbOie3pdMiPg==}
     dev: true
 
+  /electron-to-chromium/1.4.284:
+    resolution: {integrity: sha512-M8WEXFuKXMYMVr45fo8mq0wUrrJHheiKZf6BArTKk9ZBYCKJEOU5H8cdWgDT+qCVZf7Na4lVUaZsA+h6uA9+PA==}
+    dev: true
+
   /emittery/0.10.2:
     resolution: {integrity: sha512-aITqOwnLanpHLNXZJENbOgjUBeHocD+xsSJmNrjovKBW5HbSpW3d1pEls7GFQPUWXiwG9+0P4GtHfEqC/4M0Iw==}
     engines: {node: '>=12'}
@@ -6619,7 +6708,7 @@ packages:
     resolution: {integrity: sha512-6Lthe1hqXHBNsqvgDzGO6l03XNeu3CrG4RqQ1KM9+l5+jNGpEJfIELx1NS3SEHmJQA8np/u+E4EPRKRiu6m19A==}
     engines: {node: '>=8'}
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@babel/parser': 7.18.11
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.0
@@ -6731,11 +6820,11 @@ packages:
       ts-node:
         optional: true
     dependencies:
-      '@babel/core': 7.19.0
+      '@babel/core': 7.19.6
       '@jest/test-sequencer': 29.2.2
       '@jest/types': 29.2.1
       '@types/node': 18.11.5
-      babel-jest: 29.2.2_@babel+core@7.19.0
+      babel-jest: 29.2.2_@babel+core@7.19.6
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
@@ -7043,18 +7132,18 @@ packages:
     resolution: {integrity: sha512-GfKJrpZ5SMqhli3NJ+mOspDqtZfJBryGA8RIBxF+G+WbDoC7HCqKaeAss4Z/Sab6bAW11ffasx8/vGsj83jyjA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@babel/core': 7.19.0
-      '@babel/generator': 7.19.0
-      '@babel/plugin-syntax-jsx': 7.18.6_@babel+core@7.19.0
-      '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.0
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/core': 7.19.6
+      '@babel/generator': 7.19.6
+      '@babel/plugin-syntax-jsx': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.6
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
       '@jest/expect-utils': 29.2.2
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
-      babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.0
+      babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.6
       chalk: 4.1.2
       expect: 29.2.2
       graceful-fs: 4.2.10
@@ -7507,8 +7596,8 @@ packages:
     hasBin: true
     dev: true
 
-  /magic-string/0.26.2:
-    resolution: {integrity: sha512-NzzlXpclt5zAbmo6h6jNc8zl2gNRGHvmsZW4IvZhTC4W7k4OlLP+S5YLussa/r3ixNT66KOQfNORlXHSOy/X4A==}
+  /magic-string/0.26.7:
+    resolution: {integrity: sha512-hX9XH3ziStPoPhJxLq1syWuZMxbDvGNbVchfrdCtanC7D13888bMFow61x8axrx+GfHLtVeAx2kxL7tTGRl+Ow==}
     engines: {node: '>=12'}
     dependencies:
       sourcemap-codec: 1.4.8
@@ -9238,6 +9327,17 @@ packages:
       isobject: 3.0.1
     dev: true
 
+  /update-browserslist-db/1.0.10_browserslist@4.21.4:
+    resolution: {integrity: sha512-OztqDenkfFkbSG+tRxBeAnCVPckDBcvibKd35yDONx6OU8N7sqgwc7rCbkJ/WcYtVRZ4ba68d6byhC21GFh7sQ==}
+    hasBin: true
+    peerDependencies:
+      browserslist: '>= 4.21.0'
+    dependencies:
+      browserslist: 4.21.4
+      escalade: 3.1.1
+      picocolors: 1.0.0
+    dev: true
+
   /update-browserslist-db/1.0.4_browserslist@4.21.2:
     resolution: {integrity: sha512-jnmO2BEGUjsMOe/Fg9u0oczOe/ppIDZPebzccl1yDWGLFP16Pa1/RM5wEoKYPG2zstNcDuAStejyxsOuKINdGA==}
     hasBin: true

From 83ea444be53a37dbbbe4a0d6d2e586dd29379795 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Oct 2022 12:11:37 +1100
Subject: [PATCH 205/263] build(deps): update dependency @types/node to
 v18.11.7 (#4276)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index c95657746..e5389210e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.0",
-    "@types/node": "18.11.5",
+    "@types/node": "18.11.7",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.22",
     "@types/react-dom": "18.0.7",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 5bce8224d..9cab4db80 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.2.0
-  '@types/node': 18.11.5
+  '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.0
-  '@types/node': 18.11.5
+  '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.22
   '@types/react-dom': 18.0.7
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.26.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
-  jest: 29.2.2_@types+node@18.11.5
+  jest: 29.2.2_@types+node@18.11.7
   jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.2
@@ -2573,7 +2573,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2585,7 +2585,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2606,14 +2606,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.2_@types+node@18.11.5
+      jest-config: 29.2.2_@types+node@18.11.7
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2640,7 +2640,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       jest-mock: 29.2.2
     dev: true
 
@@ -2674,7 +2674,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       jest-message-util: 29.2.1
       jest-mock: 29.2.2
       jest-util: 29.2.1
@@ -2707,7 +2707,7 @@ packages:
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2827,7 +2827,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2839,7 +2839,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2851,7 +2851,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3553,7 +3553,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3582,7 +3582,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3603,8 +3603,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.5:
-    resolution: {integrity: sha512-3JRwhbjI+cHLAkUorhf8RnqUbFXajvzX4q6fMn5JwkgtuwfYtRQYI3u4V92vI6NJuTsbBQWWh3RZjFsuevyMGQ==}
+  /@types/node/18.11.7:
+    resolution: {integrity: sha512-LhFTglglr63mNXUSRYD8A+ZAIu5sFqNJ4Y2fPuY7UlrySJH87rRRlhtVmMHplmfk5WkoJGmDjE9oiTfyX94CpQ==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5543,7 +5543,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
-      jest: 29.2.2_@types+node@18.11.5
+      jest: 29.2.2_@types+node@18.11.7
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6761,7 +6761,7 @@ packages:
       '@jest/expect': 29.2.2
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6780,7 +6780,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.2_@types+node@18.11.5:
+  /jest-cli/29.2.2_@types+node@18.11.7:
     resolution: {integrity: sha512-R45ygnnb2CQOfd8rTPFR+/fls0d+1zXS6JPYTBBrnLPrhr58SSuPTiA5Tplv8/PXpz4zXR/AYNxmwIj6J6nrvg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6797,7 +6797,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.2_@types+node@18.11.5
+      jest-config: 29.2.2_@types+node@18.11.7
       jest-util: 29.2.1
       jest-validate: 29.2.2
       prompts: 2.4.2
@@ -6808,7 +6808,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.2_@types+node@18.11.5:
+  /jest-config/29.2.2_@types+node@18.11.7:
     resolution: {integrity: sha512-Q0JX54a5g1lP63keRfKR8EuC7n7wwny2HoTRDb8cx78IwQOiaYUVZAdjViY3WcTxpR02rPUpvNVmZ1fkIlZPcw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6823,7 +6823,7 @@ packages:
       '@babel/core': 7.19.6
       '@jest/test-sequencer': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       babel-jest: 29.2.2_@babel+core@7.19.6
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6888,7 +6888,7 @@ packages:
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       jest-mock: 29.2.2
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6905,7 +6905,7 @@ packages:
       '@jest/environment': 29.2.2
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       jest-mock: 29.2.2
       jest-util: 29.2.1
     dev: true
@@ -6921,7 +6921,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6944,7 +6944,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -7005,7 +7005,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       jest-util: 29.2.1
     dev: true
 
@@ -7070,7 +7070,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       emittery: 0.13.1
       graceful-fs: 4.2.10
@@ -7101,7 +7101,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7124,7 +7124,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       graceful-fs: 4.2.10
     dev: true
 
@@ -7169,7 +7169,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7181,7 +7181,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7193,7 +7193,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7220,7 +7220,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.2_@types+node@18.11.5
+      jest: 29.2.2_@types+node@18.11.7
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7234,7 +7234,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7248,7 +7248,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.13.1
@@ -7260,7 +7260,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7269,13 +7269,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.5
+      '@types/node': 18.11.7
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.2_@types+node@18.11.5:
+  /jest/29.2.2_@types+node@18.11.7:
     resolution: {integrity: sha512-r+0zCN9kUqoON6IjDdjbrsWobXM/09Nd45kIPRD8kloaRh1z5ZCMdVsgLXGxmlL7UpAJsvCYOQNO+NjvG/gqiQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7288,7 +7288,7 @@ packages:
       '@jest/core': 29.2.2
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.2_@types+node@18.11.5
+      jest-cli: 29.2.2_@types+node@18.11.7
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From b7ae0c1f28cfd7f52d62a81248c9840d95e73e57 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Oct 2022 12:46:20 +1100
Subject: [PATCH 206/263] build(deps): update dependency
 i18next-browser-languagedetector to v7 (#4272)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 44 +++++++++++++++++++++++++-------------------
 2 files changed, 26 insertions(+), 20 deletions(-)

diff --git a/web/package.json b/web/package.json
index e5389210e..b6d521682 100644
--- a/web/package.json
+++ b/web/package.json
@@ -32,7 +32,7 @@
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
     "i18next": "22.0.2",
-    "i18next-browser-languagedetector": "6.1.8",
+    "i18next-browser-languagedetector": "7.0.0",
     "i18next-http-backend": "1.4.5",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 9cab4db80..6d69a01f2 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -41,7 +41,7 @@ specifiers:
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
   i18next: 22.0.2
-  i18next-browser-languagedetector: 6.1.8
+  i18next-browser-languagedetector: 7.0.0
   i18next-http-backend: 1.4.5
   jest: 29.2.2
   jest-environment-jsdom: 29.2.2
@@ -80,7 +80,7 @@ dependencies:
   broadcast-channel: 4.18.0
   classnames: 2.3.2
   i18next: 22.0.2
-  i18next-browser-languagedetector: 6.1.8
+  i18next-browser-languagedetector: 7.0.0
   i18next-http-backend: 1.4.5
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
@@ -2053,6 +2053,12 @@ packages:
     dependencies:
       regenerator-runtime: 0.13.9
 
+  /@babel/runtime/7.19.4:
+    resolution: {integrity: sha512-EXpLCrk55f+cYqmHsSR+yD/0gAIMxxA9QK9lnQWzhMCvt+YmoBN7Zx94s++Kv0+unHk39vxNO8t+CMA2WSS3wA==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      regenerator-runtime: 0.13.9
+
   /@babel/template/7.18.10:
     resolution: {integrity: sha512-TI+rCtooWHr3QJ27kJxfjutghu44DLnasDMwpDqCXVTal9RLp3RSYNh4NdBrRP2cQAoG9A8juOQl6P6oZG4JxA==}
     engines: {node: '>=6.9.0'}
@@ -2338,7 +2344,7 @@ packages:
     dependencies:
       '@babel/helper-module-imports': 7.18.6
       '@babel/plugin-syntax-jsx': 7.18.6
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       '@emotion/hash': 0.9.0
       '@emotion/memoize': 0.8.0
       '@emotion/serialize': 1.1.0
@@ -2992,7 +2998,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.22
       prop-types: 15.8.1
@@ -4065,7 +4071,7 @@ packages:
     resolution: {integrity: sha512-o/HelwhuKpTj/frsOsbNLNgnNGVIFsVP/SW2BSF14gVl7kAfMOJ6/8wUAUvG1R1NHKrfG+2sHZTu0yauT1qBrA==}
     engines: {node: '>=6.0'}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       '@babel/runtime-corejs3': 7.18.6
     dev: true
 
@@ -4261,7 +4267,7 @@ packages:
     resolution: {integrity: sha512-Cg7TFGpIr01vOQNODXOOaGz2NpCU5gl8x1qJFbb6hbZxR7XrcE2vtbAsTAbJ7/xwJtUuJEw8K8Zr/AE0LHlesg==}
     engines: {node: '>=10', npm: '>=6'}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       cosmiconfig: 7.0.1
       resolve: 1.22.1
 
@@ -4810,7 +4816,7 @@ packages:
   /css-vendor/2.0.8:
     resolution: {integrity: sha512-x9Aq0XTInxrkuFeHKbYC7zWY8ai7qJ04Kxd9MnvbC1uO5DagxoHQjm4JvG+vCdXOoFtCjbL2XSZfxmoYa9uQVQ==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       is-in-browser: 1.1.3
     dev: false
 
@@ -6341,10 +6347,10 @@ packages:
     resolution: {integrity: sha512-ygGZLjmXfPHj+ZWh6LwbC37l43MhfztxetbFCoYTM2VjkIUpeHgSNn7QIyVFj7YQ1Wl9Cbw5sholVJPzWvC2MQ==}
     dev: false
 
-  /i18next-browser-languagedetector/6.1.8:
-    resolution: {integrity: sha512-Svm+MduCElO0Meqpj1kJAriTC6OhI41VhlT/A0UPjGoPZBhAHIaGE5EfsHlTpgdH09UVX7rcc72pSDDBeKSQQA==}
+  /i18next-browser-languagedetector/7.0.0:
+    resolution: {integrity: sha512-RrH7z5/DbhzhgCLDFIKXBTZlb2aXi38ZHa5e5oZaPt9zGLWmgAX49mzkQL/E7R6Y9fTE8QbZFuyMV0ronu4H/Q==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
     dev: false
 
   /i18next-http-backend/1.4.5:
@@ -7414,7 +7420,7 @@ packages:
   /jss-plugin-camel-case/10.9.2:
     resolution: {integrity: sha512-wgBPlL3WS0WDJ1lPJcgjux/SHnDuu7opmgQKSraKs4z8dCCyYMx9IDPFKBXQ8Q5dVYij1FFV0WdxyhuOOAXuTg==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       hyphenate-style-name: 1.0.4
       jss: 10.9.2
     dev: false
@@ -7422,21 +7428,21 @@ packages:
   /jss-plugin-default-unit/10.9.2:
     resolution: {integrity: sha512-pYg0QX3bBEFtTnmeSI3l7ad1vtHU42YEEpgW7pmIh+9pkWNWb5dwS/4onSfAaI0kq+dOZHzz4dWe+8vWnanoSg==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       jss: 10.9.2
     dev: false
 
   /jss-plugin-global/10.9.2:
     resolution: {integrity: sha512-GcX0aE8Ef6AtlasVrafg1DItlL/tWHoC4cGir4r3gegbWwF5ZOBYhx04gurPvWHC8F873aEGqge7C17xpwmp2g==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       jss: 10.9.2
     dev: false
 
   /jss-plugin-nested/10.9.2:
     resolution: {integrity: sha512-VgiOWIC6bvgDaAL97XCxGD0BxOKM0K0zeB/ECyNaVF6FqvdGB9KBBWRdy2STYAss4VVA7i5TbxFZN+WSX1kfQA==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       jss: 10.9.2
       tiny-warning: 1.0.3
     dev: false
@@ -7444,14 +7450,14 @@ packages:
   /jss-plugin-props-sort/10.9.2:
     resolution: {integrity: sha512-AP1AyUTbi2szylgr+O0OB7gkIxEGzySLITZ2GpsaoX72YMCGI2jYAc+WUhPfvUnZYiauF4zTnN4V4TGuvFjJlw==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       jss: 10.9.2
     dev: false
 
   /jss-plugin-rule-value-function/10.9.2:
     resolution: {integrity: sha512-vf5ms8zvLFMub6swbNxvzsurHfUZ5Shy5aJB2gIpY6WNA3uLinEcxYyraQXItRHi5ivXGqYciFDRM2ZoVoRZ4Q==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       jss: 10.9.2
       tiny-warning: 1.0.3
     dev: false
@@ -7459,7 +7465,7 @@ packages:
   /jss-plugin-vendor-prefixer/10.9.2:
     resolution: {integrity: sha512-SxcEoH+Rttf9fEv6KkiPzLdXRmI6waOTcMkbbEFgdZLDYNIP9UKNHFy6thhbRKqv0XMQZdrEsbDyV464zE/dUA==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       css-vendor: 2.0.8
       jss: 10.9.2
     dev: false
@@ -7467,7 +7473,7 @@ packages:
   /jss/10.9.2:
     resolution: {integrity: sha512-b8G6rWpYLR4teTUbGd4I4EsnWjg7MN0Q5bSsjKhVkJVjhQDy2KzkbD2AW3TuT0RYZVmZZHKIrXDn6kjU14qkUg==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       csstype: 3.1.1
       is-in-browser: 1.1.3
       tiny-warning: 1.0.3
@@ -8445,7 +8451,7 @@ packages:
   /regenerator-transform/0.15.0:
     resolution: {integrity: sha512-LsrGtPmbYg19bcPHwdtmXwbW+TqNvtY4riE3P83foeHRroMbH6/2ddFBfab3t7kbzc7v7p4wbkIecHImqt0QNg==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
     dev: true
 
   /regex-not/1.0.2:

From 22b0ef5d37840cad227cafcd0c4e32b89d7a92ea Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Thu, 27 Oct 2022 14:06:04 +1100
Subject: [PATCH 207/263] build(deps): update module
 github.com/mattn/go-sqlite3 to v1.14.16 (#4279)

---
 go.mod | 4 ++--
 go.sum | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index 20470ad06..9501aee80 100644
--- a/go.mod
+++ b/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/jackc/pgx/v5 v5.0.4
 	github.com/jmoiron/sqlx v1.3.5
 	github.com/knadh/koanf v1.4.4
-	github.com/mattn/go-sqlite3 v2.0.3+incompatible
+	github.com/mattn/go-sqlite3 v1.14.16
 	github.com/mitchellh/mapstructure v1.5.0
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
 	github.com/ory/fosite v0.42.2
@@ -113,4 +113,4 @@ require (
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 )
 
-replace github.com/mattn/go-sqlite3 v2.0.3+incompatible => github.com/mattn/go-sqlite3 v1.14.15
+exclude github.com/mattn/go-sqlite3 v2.0.3+incompatible
diff --git a/go.sum b/go.sum
index 0dfb8ea01..fbad11e8d 100644
--- a/go.sum
+++ b/go.sum
@@ -949,6 +949,8 @@ github.com/mattn/go-sqlite3 v1.11.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsO
 github.com/mattn/go-sqlite3 v1.14.6/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
 github.com/mattn/go-sqlite3 v1.14.15 h1:vfoHhTN1af61xCRSWzFIWzx2YskyMTwHLrExkBOjvxI=
 github.com/mattn/go-sqlite3 v1.14.15/go.mod h1:2eHXhiwb8IkHr+BDWZGa96P6+rkvnG63S2DGjv9HUNg=
+github.com/mattn/go-sqlite3 v1.14.16 h1:yOQRA0RpS5PFz/oikGwBEqvAWhWg5ufRz4ETLjwpU1Y=
+github.com/mattn/go-sqlite3 v1.14.16/go.mod h1:2eHXhiwb8IkHr+BDWZGa96P6+rkvnG63S2DGjv9HUNg=
 github.com/mattn/goveralls v0.0.2/go.mod h1:8d1ZMHsd7fW6IRPKQh46F2WRpyib5/X4FOpevwGNQEw=
 github.com/mattn/goveralls v0.0.6 h1:cr8Y0VMo/MnEZBjxNN/vh6G90SZ7IMb6lms1dzMoO+Y=
 github.com/mattn/goveralls v0.0.6/go.mod h1:h8b4ow6FxSPMQHF6o2ve3qsclnffZjYTNEKmLesRwqw=

From 69c57539a5398cafccbdd7e00f8fbf52bae8577e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Oct 2022 03:31:21 +0000
Subject: [PATCH 208/263] build(deps): update dependency @types/react to
 v18.0.23 (#4268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 94 +++++++++++++++++++++++-----------------------
 2 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/web/package.json b/web/package.json
index b6d521682..9ba95126b 100644
--- a/web/package.json
+++ b/web/package.json
@@ -150,7 +150,7 @@
     "@types/jest": "29.2.0",
     "@types/node": "18.11.7",
     "@types/qrcode.react": "1.0.2",
-    "@types/react": "18.0.22",
+    "@types/react": "18.0.23",
     "@types/react-dom": "18.0.7",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.41.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 6d69a01f2..49b91c13f 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -18,7 +18,7 @@ specifiers:
   '@types/jest': 29.2.0
   '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.22
+  '@types/react': 18.0.23
   '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0
@@ -67,15 +67,15 @@ specifiers:
 
 dependencies:
   '@emotion/cache': 11.10.3
-  '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
-  '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
+  '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
+  '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_phghchuxfqhoqnzsel7xdy3aaq
-  '@mui/material': 5.10.11_lctyvefami74wfotzrj7aq3nvy
-  '@mui/styles': 5.10.10_gd4tregka43x4eiz452mfdbv4y
+  '@mui/icons-material': 5.10.9_dl4zfq4wmflnc4bmgvttvmx37e
+  '@mui/material': 5.10.11_uliubsjsh475tiqsbpj3cyikla
+  '@mui/styles': 5.10.10_i2izv7j3km4zzxbpzq2d4xtojy
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
@@ -100,7 +100,7 @@ devDependencies:
   '@types/jest': 29.2.0
   '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.22
+  '@types/react': 18.0.23
   '@types/react-dom': 18.0.7
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
@@ -2380,7 +2380,7 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.4_gd4tregka43x4eiz452mfdbv4y:
+  /@emotion/react/11.10.4_i2izv7j3km4zzxbpzq2d4xtojy:
     resolution: {integrity: sha512-j0AkMpr6BL8gldJZ6XQsQ8DnS9TxEQu1R+OGmDZiWjBAJtCcbt0tS3I/YffoqHXxH6MjgI7KdMbYKw3MEiU9eA==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2399,7 +2399,7 @@ packages:
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       hoist-non-react-statics: 3.3.2
       react: 18.2.0
     dev: false
@@ -2418,7 +2418,7 @@ packages:
     resolution: {integrity: sha512-OiTkRgpxescko+M51tZsMq7Puu/KP55wMT8BgpcXVG2hqXc0Vo0mfymJ/Uj24Hp0i083ji/o0aLddh08UEjq8w==}
     dev: false
 
-  /@emotion/styled/11.10.4_mldqul6eeo6d4bjurrn2pmigvy:
+  /@emotion/styled/11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y:
     resolution: {integrity: sha512-pRl4R8Ez3UXvOPfc2bzIoV8u9P97UedgHS4FPX594ntwEuAMA114wlaHvOK24HB48uqfXiGlYIZYCxVJ1R1ttQ==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2434,11 +2434,11 @@ packages:
       '@babel/runtime': 7.18.9
       '@emotion/babel-plugin': 11.10.0
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
+      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
       '@emotion/serialize': 1.1.0
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       react: 18.2.0
     dev: false
 
@@ -2907,7 +2907,7 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.103_3sauqnnrv7lnox3glal4dmngp4:
+  /@mui/base/5.0.0-alpha.103_yyloj25vv7zmuk3uh3z5jonzqq:
     resolution: {integrity: sha512-fJIyB2df3CHn7D26WHnutnY7vew6aytTlhmRJz6GX7ag19zU2GcOUhJAzY5qwWcrXKnlYgzimhEjaEnuiUWU4g==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2920,10 +2920,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/is-prop-valid': 1.2.0
-      '@mui/types': 7.2.0_@types+react@18.0.22
+      '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
       '@popperjs/core': 2.11.6
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       clsx: 1.2.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -2935,7 +2935,7 @@ packages:
     resolution: {integrity: sha512-u5ff+UCFDHcR8MoQ8tuJR4c35vt7T/ki3aMEE2O3XQoGs8KJSrBiisFpFKyldg9/W2NSyoZxN+kxEGIfRxh+9Q==}
     dev: false
 
-  /@mui/icons-material/5.10.9_phghchuxfqhoqnzsel7xdy3aaq:
+  /@mui/icons-material/5.10.9_dl4zfq4wmflnc4bmgvttvmx37e:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2947,12 +2947,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.11_lctyvefami74wfotzrj7aq3nvy
-      '@types/react': 18.0.22
+      '@mui/material': 5.10.11_uliubsjsh475tiqsbpj3cyikla
+      '@types/react': 18.0.23
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.11_lctyvefami74wfotzrj7aq3nvy:
+  /@mui/material/5.10.11_uliubsjsh475tiqsbpj3cyikla:
     resolution: {integrity: sha512-KJ0wPCTbv6sFzwA3dgg0gowdfF+SRl7D510J9l6Nl/KFX0EawcewQudqKY4slYGFXniKa5PykqokpaWXsCCPqg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2970,14 +2970,14 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
-      '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
-      '@mui/base': 5.0.0-alpha.103_3sauqnnrv7lnox3glal4dmngp4
+      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
+      '@mui/base': 5.0.0-alpha.103_yyloj25vv7zmuk3uh3z5jonzqq
       '@mui/core-downloads-tracker': 5.10.11
-      '@mui/system': 5.10.10_qc3jfcxc65cvi4apunx356ezsi
-      '@mui/types': 7.2.0_@types+react@18.0.22
+      '@mui/system': 5.10.10_tafe65s2bnwvwedm7hukwbltla
+      '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
       csstype: 3.1.1
@@ -2988,7 +2988,7 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.9_gd4tregka43x4eiz452mfdbv4y:
+  /@mui/private-theming/5.10.9_i2izv7j3km4zzxbpzq2d4xtojy:
     resolution: {integrity: sha512-BN7/CnsVPVyBaQpDTij4uV2xGYHHHhOgpdxeYLlIu+TqnsVM7wUeF+37kXvHovxM6xmL5qoaVUD98gDC0IZnHg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3000,7 +3000,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -3020,14 +3020,14 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/cache': 11.10.3
-      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
-      '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
+      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.10_gd4tregka43x4eiz452mfdbv4y:
+  /@mui/styles/5.10.10_i2izv7j3km4zzxbpzq2d4xtojy:
     resolution: {integrity: sha512-utr87q/euocRdc2ekFX7DL1gqTVfogSVeu74Nspr8rtK/afC9QwF3ScP/XThVXWPcQKjBWHMKWtAO9BSVE4KDg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3039,10 +3039,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.9_gd4tregka43x4eiz452mfdbv4y
-      '@mui/types': 7.2.0_@types+react@18.0.22
+      '@mui/private-theming': 5.10.9_i2izv7j3km4zzxbpzq2d4xtojy
+      '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       clsx: 1.2.1
       csstype: 3.1.1
       hoist-non-react-statics: 3.3.2
@@ -3058,7 +3058,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.10_qc3jfcxc65cvi4apunx356ezsi:
+  /@mui/system/5.10.10_tafe65s2bnwvwedm7hukwbltla:
     resolution: {integrity: sha512-TXwtKN0adKpBrZmO+eilQWoPf2veh050HLYrN78Kps9OhlvO70v/2Kya0+mORFhu9yhpAwjHXO8JII/R4a5ZLA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3075,20 +3075,20 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_gd4tregka43x4eiz452mfdbv4y
-      '@emotion/styled': 11.10.4_mldqul6eeo6d4bjurrn2pmigvy
-      '@mui/private-theming': 5.10.9_gd4tregka43x4eiz452mfdbv4y
+      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
+      '@mui/private-theming': 5.10.9_i2izv7j3km4zzxbpzq2d4xtojy
       '@mui/styled-engine': 5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq
-      '@mui/types': 7.2.0_@types+react@18.0.22
+      '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
       clsx: 1.2.1
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/types/7.2.0_@types+react@18.0.22:
+  /@mui/types/7.2.0_@types+react@18.0.23:
     resolution: {integrity: sha512-lGXtFKe5lp3UxTBGqKI1l7G8sE2xBik8qCfrLHD5olwP/YU0/ReWoWT7Lp1//ri32dK39oPMrJN8TgbkCSbsNA==}
     peerDependencies:
       '@types/react': '*'
@@ -3096,7 +3096,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
     dev: false
 
   /@mui/utils/5.10.9_react@18.2.0:
@@ -3630,29 +3630,29 @@ packages:
   /@types/qrcode.react/1.0.2:
     resolution: {integrity: sha512-I9Oq5Cjlkgy3Tw7krCnCXLw2/zMhizkTere49OOcta23tkvH0xBTP0yInimTh0gstLRtb8Ki9NZVujE5UI6ffQ==}
     dependencies:
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
     dev: true
 
   /@types/react-dom/18.0.7:
     resolution: {integrity: sha512-HaXc+BbqAZE1RdsK3tC8SbkFy6UL2xF76lT9rQs5JkPrJg3rWA3Ou/Lhw3YJQzEDkBpmJ79nBsfnd05WrBd2QQ==}
     dependencies:
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
     dev: true
 
   /@types/react-is/17.0.3:
     resolution: {integrity: sha512-aBTIWg1emtu95bLTLx0cpkxwGW3ueZv71nE2YFBpL8k/z5czEW8yYpOo8Dp+UUAFAtKwNaOsh/ioSeQnWlZcfw==}
     dependencies:
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
     dev: false
 
   /@types/react-transition-group/4.4.5:
     resolution: {integrity: sha512-juKD/eiSM3/xZYzjuzH6ZwpP+/lejltmiS3QEzV/vmb/Q8+HfDmxu+Baga8UEMGBqV88Nbg4l2hY/K2DkyaLLA==}
     dependencies:
-      '@types/react': 18.0.22
+      '@types/react': 18.0.23
     dev: false
 
-  /@types/react/18.0.22:
-    resolution: {integrity: sha512-4yWc5PyCkZN8ke8K9rQHkTXxHIWHxLzzW6RI1kXVoepkD3vULpKzC2sDtAMKn78h92BRYuzf+7b/ms7ajE6hFw==}
+  /@types/react/18.0.23:
+    resolution: {integrity: sha512-R1wTULtCiJkudAN2DJGoYYySbGtOdzZyUWAACYinKdiQC8auxso4kLDUhQ7AJ2kh3F6A6z4v69U6tNY39hihVQ==}
     dependencies:
       '@types/prop-types': 15.7.5
       '@types/scheduler': 0.16.2

From 7e89904400c59ba612836f13da90a50a2ad097de Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Oct 2022 12:40:22 +0000
Subject: [PATCH 209/263] build(deps): update dependency i18next to v22.0.3
 (#4281)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 18 +++++++++---------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/web/package.json b/web/package.json
index 9ba95126b..98b82a040 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
-    "i18next": "22.0.2",
+    "i18next": "22.0.3",
     "i18next-browser-languagedetector": "7.0.0",
     "i18next-http-backend": "1.4.5",
     "qrcode.react": "3.1.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 49b91c13f..7d6714308 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -40,7 +40,7 @@ specifiers:
   eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
-  i18next: 22.0.2
+  i18next: 22.0.3
   i18next-browser-languagedetector: 7.0.0
   i18next-http-backend: 1.4.5
   jest: 29.2.2
@@ -79,14 +79,14 @@ dependencies:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  i18next: 22.0.2
+  i18next: 22.0.3
   i18next-browser-languagedetector: 7.0.0
   i18next-http-backend: 1.4.5
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 12.0.0_nedrny62vyfw32zwpg5ep5hijq
+  react-i18next: 12.0.0_stofmi6dj437ctg2rzgtmdpkoe
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
@@ -5014,7 +5014,7 @@ packages:
   /dom-helpers/5.2.1:
     resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       csstype: 3.1.1
     dev: false
 
@@ -6361,10 +6361,10 @@ packages:
       - encoding
     dev: false
 
-  /i18next/22.0.2:
-    resolution: {integrity: sha512-rGXWILemhx0dpNE5PfudVU1g4SdW0hkh4WYHaP8Cl6gm1KkMdBckmNqj9WvYqp8fOSocqX5FFJeadwiOZHLSXQ==}
+  /i18next/22.0.3:
+    resolution: {integrity: sha512-gG6kCG5+gnPXdK8TLTJ2oiuFSjn6CYMSUwV3vnmISxwTunJHREn/z6gi1g7942c61K1dL3Gm+9a64nZCPv6mlg==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
     dev: false
 
   /iconv-lite/0.6.3:
@@ -8268,7 +8268,7 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/12.0.0_nedrny62vyfw32zwpg5ep5hijq:
+  /react-i18next/12.0.0_stofmi6dj437ctg2rzgtmdpkoe:
     resolution: {integrity: sha512-/O7N6aIEAl1FaWZBNvhdIo9itvF/MO/nRKr9pYqRc9LhuC1u21SlfwpiYQqvaeNSEW3g3qUXLREOWMt+gxrWbg==}
     peerDependencies:
       i18next: '>= 19.0.0'
@@ -8283,7 +8283,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       html-parse-stringify: 3.0.1
-      i18next: 22.0.2
+      i18next: 22.0.3
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false

From 72b290869b94163e4b8672c055fc3ce19dea0496 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Oct 2022 15:26:41 +0000
Subject: [PATCH 210/263] build(deps): update emotion monorepo to v11.10.5
 (#4282)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   6 +--
 web/pnpm-lock.yaml | 103 +++++++++++++++++++++++----------------------
 2 files changed, 55 insertions(+), 54 deletions(-)

diff --git a/web/package.json b/web/package.json
index 98b82a040..6f64d1140 100644
--- a/web/package.json
+++ b/web/package.json
@@ -18,9 +18,9 @@
     }
   },
   "dependencies": {
-    "@emotion/cache": "11.10.3",
-    "@emotion/react": "11.10.4",
-    "@emotion/styled": "11.10.4",
+    "@emotion/cache": "11.10.5",
+    "@emotion/react": "11.10.5",
+    "@emotion/styled": "11.10.5",
     "@fortawesome/fontawesome-svg-core": "6.2.0",
     "@fortawesome/free-regular-svg-icons": "6.2.0",
     "@fortawesome/free-solid-svg-icons": "6.2.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 7d6714308..ba3d4a7b1 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -3,9 +3,9 @@ lockfileVersion: 5.4
 specifiers:
   '@commitlint/cli': 17.1.2
   '@commitlint/config-conventional': 17.1.0
-  '@emotion/cache': 11.10.3
-  '@emotion/react': 11.10.4
-  '@emotion/styled': 11.10.4
+  '@emotion/cache': 11.10.5
+  '@emotion/react': 11.10.5
+  '@emotion/styled': 11.10.5
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
@@ -66,15 +66,15 @@ specifiers:
   zxcvbn: 4.4.2
 
 dependencies:
-  '@emotion/cache': 11.10.3
-  '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
-  '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
+  '@emotion/cache': 11.10.5
+  '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
+  '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
   '@mui/icons-material': 5.10.9_dl4zfq4wmflnc4bmgvttvmx37e
-  '@mui/material': 5.10.11_uliubsjsh475tiqsbpj3cyikla
+  '@mui/material': 5.10.11_pg2ezatylteehkgge5iziahahu
   '@mui/styles': 5.10.10_i2izv7j3km4zzxbpzq2d4xtojy
   axios: 0.27.2
   broadcast-channel: 4.18.0
@@ -2046,6 +2046,7 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       regenerator-runtime: 0.13.9
+    dev: true
 
   /@babel/runtime/7.19.0:
     resolution: {integrity: sha512-eR8Lo9hnDS7tqkO7NsV+mKvCmv5boaXFSZ70DnfhcgiEne8hv9oCEd36Klw74EtizEqLsy4YnW8UWwpBVolHZA==}
@@ -2334,8 +2335,8 @@ packages:
     resolution: {integrity: sha512-RpfLEtTlyIxeNPGKcokS+p3BZII/Q3bYxryFRglh5H3A3T8q9fsLYm72VYAMEOOIBLEa8o93kFLiBDUWKrwXZA==}
     dev: true
 
-  /@emotion/babel-plugin/11.10.0:
-    resolution: {integrity: sha512-xVnpDAAbtxL1dsuSelU5A7BnY/lftws0wUexNJZTPsvX/1tM4GZJbclgODhvW4E+NH7E5VFcH0bBn30NvniPJA==}
+  /@emotion/babel-plugin/11.10.5:
+    resolution: {integrity: sha512-xE7/hyLHJac7D2Ve9dKroBBZqBT7WuPQmWcq7HSGb84sUuP4mlOWoB8dvVfD9yk5DHkU1m6RW7xSoDtnQHNQeA==}
     peerDependencies:
       '@babel/core': ^7.0.0
     peerDependenciesMeta:
@@ -2347,23 +2348,23 @@ packages:
       '@babel/runtime': 7.19.4
       '@emotion/hash': 0.9.0
       '@emotion/memoize': 0.8.0
-      '@emotion/serialize': 1.1.0
+      '@emotion/serialize': 1.1.1
       babel-plugin-macros: 3.1.0
       convert-source-map: 1.8.0
       escape-string-regexp: 4.0.0
       find-root: 1.1.0
       source-map: 0.5.7
-      stylis: 4.0.13
+      stylis: 4.1.3
     dev: false
 
-  /@emotion/cache/11.10.3:
-    resolution: {integrity: sha512-Psmp/7ovAa8appWh3g51goxu/z3iVms7JXOreq136D8Bbn6dYraPnmL6mdM8GThEx9vwSn92Fz+mGSjBzN8UPQ==}
+  /@emotion/cache/11.10.5:
+    resolution: {integrity: sha512-dGYHWyzTdmK+f2+EnIGBpkz1lKc4Zbj2KHd4cX3Wi8/OWr5pKslNjc3yABKH4adRGCvSX4VDC0i04mrrq0aiRA==}
     dependencies:
       '@emotion/memoize': 0.8.0
-      '@emotion/sheet': 1.2.0
+      '@emotion/sheet': 1.2.1
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      stylis: 4.0.13
+      stylis: 4.1.3
     dev: false
 
   /@emotion/hash/0.9.0:
@@ -2380,8 +2381,8 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.4_i2izv7j3km4zzxbpzq2d4xtojy:
-    resolution: {integrity: sha512-j0AkMpr6BL8gldJZ6XQsQ8DnS9TxEQu1R+OGmDZiWjBAJtCcbt0tS3I/YffoqHXxH6MjgI7KdMbYKw3MEiU9eA==}
+  /@emotion/react/11.10.5_i2izv7j3km4zzxbpzq2d4xtojy:
+    resolution: {integrity: sha512-TZs6235tCJ/7iF6/rvTaOH4oxQg2gMAcdHemjwLKIjKz4rRuYe1HJ2TQJKnAcRAfOUDdU8XoDadCe1rl72iv8A==}
     peerDependencies:
       '@babel/core': ^7.0.0
       '@types/react': '*'
@@ -2392,10 +2393,10 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
-      '@emotion/babel-plugin': 11.10.0
-      '@emotion/cache': 11.10.3
-      '@emotion/serialize': 1.1.0
+      '@babel/runtime': 7.19.4
+      '@emotion/babel-plugin': 11.10.5
+      '@emotion/cache': 11.10.5
+      '@emotion/serialize': 1.1.1
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
@@ -2404,8 +2405,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@emotion/serialize/1.1.0:
-    resolution: {integrity: sha512-F1ZZZW51T/fx+wKbVlwsfchr5q97iW8brAnXmsskz4d0hVB4O3M/SiA3SaeH06x02lSNzkkQv+n3AX3kCXKSFA==}
+  /@emotion/serialize/1.1.1:
+    resolution: {integrity: sha512-Zl/0LFggN7+L1liljxXdsVSVlg6E/Z/olVWpfxUTxOAmi8NU7YoeWeLfi1RmnB2TATHoaWwIBRoL+FvAJiTUQA==}
     dependencies:
       '@emotion/hash': 0.9.0
       '@emotion/memoize': 0.8.0
@@ -2414,12 +2415,12 @@ packages:
       csstype: 3.1.1
     dev: false
 
-  /@emotion/sheet/1.2.0:
-    resolution: {integrity: sha512-OiTkRgpxescko+M51tZsMq7Puu/KP55wMT8BgpcXVG2hqXc0Vo0mfymJ/Uj24Hp0i083ji/o0aLddh08UEjq8w==}
+  /@emotion/sheet/1.2.1:
+    resolution: {integrity: sha512-zxRBwl93sHMsOj4zs+OslQKg/uhF38MB+OMKoCrVuS0nyTkqnau+BM3WGEoOptg9Oz45T/aIGs1qbVAsEFo3nA==}
     dev: false
 
-  /@emotion/styled/11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y:
-    resolution: {integrity: sha512-pRl4R8Ez3UXvOPfc2bzIoV8u9P97UedgHS4FPX594ntwEuAMA114wlaHvOK24HB48uqfXiGlYIZYCxVJ1R1ttQ==}
+  /@emotion/styled/11.10.5_ddiadf2ao4stlmg4kctxi5bvma:
+    resolution: {integrity: sha512-8EP6dD7dMkdku2foLoruPCNkRevzdcBaY6q0l0OsbyJK+x8D9HWjX27ARiSIKNF634hY9Zdoedh8bJCiva8yZw==}
     peerDependencies:
       '@babel/core': ^7.0.0
       '@emotion/react': ^11.0.0-rc.0
@@ -2431,11 +2432,11 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.18.9
-      '@emotion/babel-plugin': 11.10.0
+      '@babel/runtime': 7.19.4
+      '@emotion/babel-plugin': 11.10.5
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/serialize': 1.1.0
+      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/serialize': 1.1.1
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@types/react': 18.0.23
@@ -2918,7 +2919,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       '@emotion/is-prop-valid': 1.2.0
       '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
@@ -2947,12 +2948,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.11_uliubsjsh475tiqsbpj3cyikla
+      '@mui/material': 5.10.11_pg2ezatylteehkgge5iziahahu
       '@types/react': 18.0.23
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.11_uliubsjsh475tiqsbpj3cyikla:
+  /@mui/material/5.10.11_pg2ezatylteehkgge5iziahahu:
     resolution: {integrity: sha512-KJ0wPCTbv6sFzwA3dgg0gowdfF+SRl7D510J9l6Nl/KFX0EawcewQudqKY4slYGFXniKa5PykqokpaWXsCCPqg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2970,11 +2971,11 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
+      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
       '@mui/base': 5.0.0-alpha.103_yyloj25vv7zmuk3uh3z5jonzqq
       '@mui/core-downloads-tracker': 5.10.11
-      '@mui/system': 5.10.10_tafe65s2bnwvwedm7hukwbltla
+      '@mui/system': 5.10.10_5q4p2mshrahpv5hw6yqye2so6m
       '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.23
@@ -3005,7 +3006,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/styled-engine/5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq:
+  /@mui/styled-engine/5.10.8_dovxhg2tvkkxkdnqyoum6wzcxm:
     resolution: {integrity: sha512-w+y8WI18EJV6zM/q41ug19cE70JTeO6sWFsQ7tgePQFpy6ToCVPh0YLrtqxUZXSoMStW5FMw0t9fHTFAqPbngw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3018,10 +3019,10 @@ packages:
       '@emotion/styled':
         optional: true
     dependencies:
-      '@babel/runtime': 7.19.0
-      '@emotion/cache': 11.10.3
-      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
+      '@babel/runtime': 7.19.4
+      '@emotion/cache': 11.10.5
+      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -3058,7 +3059,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.10_tafe65s2bnwvwedm7hukwbltla:
+  /@mui/system/5.10.10_5q4p2mshrahpv5hw6yqye2so6m:
     resolution: {integrity: sha512-TXwtKN0adKpBrZmO+eilQWoPf2veh050HLYrN78Kps9OhlvO70v/2Kya0+mORFhu9yhpAwjHXO8JII/R4a5ZLA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3074,11 +3075,11 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.4_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/styled': 11.10.4_acpyfrvj6vjxfu5qsyzb4chs4y
+      '@babel/runtime': 7.19.4
+      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
       '@mui/private-theming': 5.10.9_i2izv7j3km4zzxbpzq2d4xtojy
-      '@mui/styled-engine': 5.10.8_hfzxdiydbrbhhfpkwuv3jhvwmq
+      '@mui/styled-engine': 5.10.8_dovxhg2tvkkxkdnqyoum6wzcxm
       '@mui/types': 7.2.0_@types+react@18.0.23
       '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.23
@@ -3105,7 +3106,7 @@ packages:
     peerDependencies:
       react: ^17.0.0 || ^18.0.0 || 18
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       '@types/prop-types': 15.7.5
       '@types/react-is': 17.0.3
       prop-types: 15.8.1
@@ -8375,7 +8376,7 @@ packages:
       react: '>=16.6.0 || 18'
       react-dom: '>=16.6.0 || 18'
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       dom-helpers: 5.2.1
       loose-envify: 1.4.0
       prop-types: 15.8.1
@@ -8986,8 +8987,8 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /stylis/4.0.13:
-    resolution: {integrity: sha512-xGPXiFVl4YED9Jh7Euv2V220mriG9u4B2TA6Ybjc1catrstKD2PpIdU3U0RKpkVBC2EhmL/F0sPCr9vrFTNRag==}
+  /stylis/4.1.3:
+    resolution: {integrity: sha512-GP6WDNWf+o403jrEp9c5jibKavrtLW+/qYGhFxFrG8maXhwTBI7gLLhiBb0o7uFccWN+EOS9aMO6cGHWAO07OA==}
     dev: false
 
   /supports-color/5.5.0:

From d66058c3aef05a93773de8af6b47aa4fb775eb16 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 28 Oct 2022 06:27:10 +1100
Subject: [PATCH 211/263] build(deps): update dependency @types/react-dom to
 v18.0.8 (#4285)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6f64d1140..beef68827 100644
--- a/web/package.json
+++ b/web/package.json
@@ -151,7 +151,7 @@
     "@types/node": "18.11.7",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.23",
-    "@types/react-dom": "18.0.7",
+    "@types/react-dom": "18.0.8",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.41.0",
     "@typescript-eslint/parser": "5.41.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index ba3d4a7b1..74831f261 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -19,7 +19,7 @@ specifiers:
   '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.23
-  '@types/react-dom': 18.0.7
+  '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0
   '@typescript-eslint/parser': 5.41.0
@@ -101,7 +101,7 @@ devDependencies:
   '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.23
-  '@types/react-dom': 18.0.7
+  '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
   '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
@@ -3487,7 +3487,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.18.9
       '@testing-library/dom': 8.16.0
-      '@types/react-dom': 18.0.7
+      '@types/react-dom': 18.0.8
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: true
@@ -3634,8 +3634,8 @@ packages:
       '@types/react': 18.0.23
     dev: true
 
-  /@types/react-dom/18.0.7:
-    resolution: {integrity: sha512-HaXc+BbqAZE1RdsK3tC8SbkFy6UL2xF76lT9rQs5JkPrJg3rWA3Ou/Lhw3YJQzEDkBpmJ79nBsfnd05WrBd2QQ==}
+  /@types/react-dom/18.0.8:
+    resolution: {integrity: sha512-C3GYO0HLaOkk9dDAz3Dl4sbe4AKUGTCfFIZsz3n/82dPNN8Du533HzKatDxeUYWu24wJgMP1xICqkWk1YOLOIw==}
     dependencies:
       '@types/react': 18.0.23
     dev: true

From 1864e9f2f8baeba1687048ebe16af1627577bb87 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Oct 2022 22:11:59 +0000
Subject: [PATCH 212/263] build(deps): update dependency vite to v3.2.0 (#4278)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 51 ++++++++++++++++++++++++++++------------------
 2 files changed, 32 insertions(+), 21 deletions(-)

diff --git a/web/package.json b/web/package.json
index beef68827..45152561f 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.1.8",
+    "vite": "3.2.0",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 74831f261..090eb263e 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.1.8
+  vite: 3.2.0
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.2
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
   '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
-  '@vitejs/plugin-react': 2.2.0_vite@3.1.8
+  '@vitejs/plugin-react': 2.2.0_vite@3.2.0
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.26.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.1.8
-  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.1.8
+  vite: 3.2.0
+  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.0
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.2_vite@3.1.8
-  vite-tsconfig-paths: 3.5.2_vite@3.1.8
+  vite-plugin-svgr: 2.2.2_vite@3.2.0
+  vite-tsconfig-paths: 3.5.2_vite@3.2.0
 
 packages:
 
@@ -3901,7 +3901,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.2.0_vite@3.1.8:
+  /@vitejs/plugin-react/2.2.0_vite@3.2.0:
     resolution: {integrity: sha512-FFpefhvExd1toVRlokZgxgy2JtnBOdp4ZDsq7ldCWaqGSGn9UhWMAVm/1lxPL14JfNS5yGz+s9yFrQY6shoStA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3914,7 +3914,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.19.6_@babel+core@7.19.6
       magic-string: 0.26.7
       react-refresh: 0.14.0
-      vite: 3.1.8
+      vite: 3.2.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -8147,8 +8147,8 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /postcss/8.4.16:
-    resolution: {integrity: sha512-ipHE1XBvKzm5xI7hiHCZJCSugxvsdq2mPnsq5+UF+VHCjiBvtDrlxJfMBToWaP9D5XlgNmcFGqoHmUn0EYEaRQ==}
+  /postcss/8.4.18:
+    resolution: {integrity: sha512-Wi8mWhncLJm11GATDaQKobXSNEYGUHeQLiQqDFG1qQ5UTDPTEvKw0Xt5NsTpktGTwLps3ByrWsBrG0rB8YQ9oA==}
     engines: {node: ^10 || ^12 || >=14}
     dependencies:
       nanoid: 3.3.4
@@ -8598,6 +8598,14 @@ packages:
       fsevents: 2.3.2
     dev: true
 
+  /rollup/2.79.1:
+    resolution: {integrity: sha512-uKxbd0IhMZOhjAiD5oAFp7BqvkA4Dv47qpOCtaNvng4HBwdbWtdOh8f5nZNuk2rp51PMGk3bzfWu5oayNEuYnw==}
+    engines: {node: '>=10.0.0'}
+    hasBin: true
+    optionalDependencies:
+      fsevents: 2.3.2
+    dev: true
+
   /rsvp/4.8.5:
     resolution: {integrity: sha512-nfMOlASu9OnRJo1mbEk2cz0D56a1MBNrJ7orjRZQG10XDyuvwksKbuXNp6qa+kbn839HwjwhBzhFmdsaEAfauA==}
     engines: {node: 6.* || >= 7.*}
@@ -9396,7 +9404,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.1.8:
+  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.2.0:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9406,7 +9414,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.26.0
       rollup: 2.78.0
-      vite: 3.1.8
+      vite: 3.2.0
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9420,21 +9428,21 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.2_vite@3.1.8:
+  /vite-plugin-svgr/2.2.2_vite@3.2.0:
     resolution: {integrity: sha512-u8Ac27uZmDHTVGawpAhvLMJMuzbGeZGhe61TGeHoRQLxVhmQfIYCefa0iLbjC0ui1zFo6XZnS8EkzPITCYp85g==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 5.0.1
       '@svgr/core': 6.4.0
-      vite: 3.1.8
+      vite: 3.2.0
     transitivePeerDependencies:
       - '@babel/core'
       - rollup
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.2_vite@3.1.8:
+  /vite-tsconfig-paths/3.5.2_vite@3.2.0:
     resolution: {integrity: sha512-xJMgHA2oJ28QCG2f+hXrcqzo7IttrSRK4A//Tp94CfuX5eetOx33qiwXHUdi3FwkHP2ocpxHuvE45Ix67gwEmQ==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9443,19 +9451,20 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.1.8
+      vite: 3.2.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.1.8:
-    resolution: {integrity: sha512-m7jJe3nufUbuOfotkntGFupinL/fmuTNuQmiVE7cH2IZMuf4UbfbGYMUT3jVWgGYuRVLY9j8NnrRqgw5rr5QTg==}
+  /vite/3.2.0:
+    resolution: {integrity: sha512-Ovj7+cqIdM1I0LPCk2CWxzgADXMix3NLXpUT6g7P7zg/a9grk/TaC3qn9YMg7w7M0POIVCBOp1aBANJW+RH7oA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:
       less: '*'
       sass: '*'
       stylus: '*'
+      sugarss: '*'
       terser: ^5.4.0
     peerDependenciesMeta:
       less:
@@ -9464,13 +9473,15 @@ packages:
         optional: true
       stylus:
         optional: true
+      sugarss:
+        optional: true
       terser:
         optional: true
     dependencies:
       esbuild: 0.15.12
-      postcss: 8.4.16
+      postcss: 8.4.18
       resolve: 1.22.1
-      rollup: 2.78.0
+      rollup: 2.79.1
     optionalDependencies:
       fsevents: 2.3.2
     dev: true

From a048ab6d47667f4b412792b39955c46adbcac48b Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 28 Oct 2022 20:21:43 +1100
Subject: [PATCH 213/263] fix(authentication): erroneously escaped group base
 dn (#4288)

The BaseDN for groups was escaped improperly and failed on any BaseDN with special characters. This fixes the issue.
---
 internal/authentication/ldap_user_provider.go | 31 ++++++++++++-------
 .../ldap_user_provider_startup.go             |  2 +-
 .../authentication/ldap_user_provider_test.go |  4 +--
 3 files changed, 23 insertions(+), 14 deletions(-)

diff --git a/internal/authentication/ldap_user_provider.go b/internal/authentication/ldap_user_provider.go
index a4c23a37a..65f635bf7 100644
--- a/internal/authentication/ldap_user_provider.go
+++ b/internal/authentication/ldap_user_provider.go
@@ -126,21 +126,24 @@ func (p *LDAPUserProvider) GetDetails(username string) (details *UserDetails, er
 	}
 
 	var (
-		filter  string
 		request *ldap.SearchRequest
 		result  *ldap.SearchResult
 	)
 
-	if filter, err = p.resolveGroupsFilter(username, profile); err != nil {
-		return nil, fmt.Errorf("unable to create group filter for user '%s'. Cause: %w", username, err)
-	}
-
 	// Search for the users groups.
 	request = ldap.NewSearchRequest(
 		p.groupsBaseDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases,
-		0, 0, false, filter, p.groupsAttributes, nil,
+		0, 0, false, p.resolveGroupsFilter(username, profile), p.groupsAttributes, nil,
 	)
 
+	p.log.
+		WithField("base_dn", request.BaseDN).
+		WithField("filter", request.Filter).
+		WithField("attr", request.Attributes).
+		WithField("scope", request.Scope).
+		WithField("deref", request.DerefAliases).
+		Trace("Performing group search")
+
 	if result, err = p.search(client, request); err != nil {
 		return nil, fmt.Errorf("unable to retrieve groups of user '%s'. Cause: %w", username, err)
 	}
@@ -318,14 +321,20 @@ func (p *LDAPUserProvider) searchReferrals(request *ldap.SearchRequest, result *
 }
 
 func (p *LDAPUserProvider) getUserProfile(client LDAPClient, username string) (profile *ldapUserProfile, err error) {
-	userFilter := p.resolveUsersFilter(username)
-
 	// Search for the given username.
 	request := ldap.NewSearchRequest(
 		p.usersBaseDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases,
-		1, 0, false, userFilter, p.usersAttributes, nil,
+		1, 0, false, p.resolveUsersFilter(username), p.usersAttributes, nil,
 	)
 
+	p.log.
+		WithField("base_dn", request.BaseDN).
+		WithField("filter", request.Filter).
+		WithField("attr", request.Attributes).
+		WithField("scope", request.Scope).
+		WithField("deref", request.DerefAliases).
+		Trace("Performing user search")
+
 	var result *ldap.SearchResult
 
 	if result, err = p.search(client, request); err != nil {
@@ -398,7 +407,7 @@ func (p *LDAPUserProvider) resolveUsersFilter(username string) (filter string) {
 	return filter
 }
 
-func (p *LDAPUserProvider) resolveGroupsFilter(username string, profile *ldapUserProfile) (filter string, err error) { //nolint:unparam
+func (p *LDAPUserProvider) resolveGroupsFilter(username string, profile *ldapUserProfile) (filter string) {
 	filter = p.config.GroupsFilter
 
 	if p.groupsFilterReplacementInput {
@@ -418,7 +427,7 @@ func (p *LDAPUserProvider) resolveGroupsFilter(username string, profile *ldapUse
 
 	p.log.Tracef("Computed groups filter is %s", filter)
 
-	return filter, nil
+	return filter
 }
 
 func (p *LDAPUserProvider) modify(client LDAPClient, modifyRequest *ldap.ModifyRequest) (err error) {
diff --git a/internal/authentication/ldap_user_provider_startup.go b/internal/authentication/ldap_user_provider_startup.go
index 2956fd42e..a3a2e760a 100644
--- a/internal/authentication/ldap_user_provider_startup.go
+++ b/internal/authentication/ldap_user_provider_startup.go
@@ -130,7 +130,7 @@ func (p *LDAPUserProvider) parseDynamicGroupsConfiguration() {
 	}
 
 	if p.config.AdditionalGroupsDN != "" {
-		p.groupsBaseDN = ldap.EscapeFilter(p.config.AdditionalGroupsDN + "," + p.config.BaseDN)
+		p.groupsBaseDN = p.config.AdditionalGroupsDN + "," + p.config.BaseDN
 	} else {
 		p.groupsBaseDN = p.config.BaseDN
 	}
diff --git a/internal/authentication/ldap_user_provider_test.go b/internal/authentication/ldap_user_provider_test.go
index a74e24477..d28d05e9c 100644
--- a/internal/authentication/ldap_user_provider_test.go
+++ b/internal/authentication/ldap_user_provider_test.go
@@ -120,10 +120,10 @@ func TestEscapeSpecialCharsInGroupsFilter(t *testing.T) {
 		Emails:      []string{"john.doe@authelia.com"},
 	}
 
-	filter, _ := ldapClient.resolveGroupsFilter("john", &profile)
+	filter := ldapClient.resolveGroupsFilter("john", &profile)
 	assert.Equal(t, "(|(member=cn=john \\28external\\29,dc=example,dc=com)(uid=john)(uid=john))", filter)
 
-	filter, _ = ldapClient.resolveGroupsFilter("john#=(abc,def)", &profile)
+	filter = ldapClient.resolveGroupsFilter("john#=(abc,def)", &profile)
 	assert.Equal(t, "(|(member=cn=john \\28external\\29,dc=example,dc=com)(uid=john)(uid=john\\#\\=\\28abc\\,def\\29))", filter)
 }
 

From ab742a6e90c350cbe242204df92320e1c44f1c38 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 28 Oct 2022 21:11:46 +1100
Subject: [PATCH 214/263] release: v4.37.2 (#4289)

---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index 45152561f..0db2966fe 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "authelia",
-  "version": "4.37.1",
+  "version": "4.37.2",
   "private": true,
   "pnpm": {
     "peerDependencyRules": {

From c16456bd6d2be5a2a5ff775d9a7bf9aca1a06e8e Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 28 Oct 2022 22:47:34 +1100
Subject: [PATCH 215/263] docs: gen (#4293)

---
 .github/ISSUE_TEMPLATE/bug-report.yml                        | 2 ++
 cmd/authelia-scripts/cmd/gen.go                              | 2 +-
 docs/content/en/reference/guides/generating-secure-values.md | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
index 235c4914d..13ee8d8b9 100644
--- a/.github/ISSUE_TEMPLATE/bug-report.yml
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -26,6 +26,8 @@ body:
       description: What version(s) of Authelia can you reproduce this bug on?
       multiple: true
       options:
+        - v4.37.2
+        - v4.37.1
         - v4.37.0
         - v4.36.9
         - v4.36.8
diff --git a/cmd/authelia-scripts/cmd/gen.go b/cmd/authelia-scripts/cmd/gen.go
index cfd97c2d8..10f06b412 100644
--- a/cmd/authelia-scripts/cmd/gen.go
+++ b/cmd/authelia-scripts/cmd/gen.go
@@ -7,5 +7,5 @@
 package cmd
 
 const (
-	versionSwaggerUI = "4.15.0"
+	versionSwaggerUI = "4.15.2"
 )
diff --git a/docs/content/en/reference/guides/generating-secure-values.md b/docs/content/en/reference/guides/generating-secure-values.md
index 46f9e7d46..0bdd574dd 100644
--- a/docs/content/en/reference/guides/generating-secure-values.md
+++ b/docs/content/en/reference/guides/generating-secure-values.md
@@ -2,7 +2,7 @@
 title: "Generating Secure Values"
 description: "A reference guide on generating secure values such as password hashes, password strings, and cryptography keys"
 lead: "This section contains reference documentation for generating secure values such as password hashes, password strings, and cryptography keys."
-date: 2022-06-15T17:51:47+10:00
+date: 2022-10-23T18:09:19+11:00
 draft: false
 images: []
 menu:

From 2bb4d9f9b13b7da1749de8125d291e606aee957e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 29 Oct 2022 08:12:40 +1100
Subject: [PATCH 216/263] build(deps): update dependency i18next-http-backend
 to v2 (#4273)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 0db2966fe..f120c7d8e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -33,7 +33,7 @@
     "classnames": "2.3.2",
     "i18next": "22.0.3",
     "i18next-browser-languagedetector": "7.0.0",
-    "i18next-http-backend": "1.4.5",
+    "i18next-http-backend": "2.0.0",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
     "react": "18.2.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 090eb263e..456883a79 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -42,7 +42,7 @@ specifiers:
   husky: 8.0.1
   i18next: 22.0.3
   i18next-browser-languagedetector: 7.0.0
-  i18next-http-backend: 1.4.5
+  i18next-http-backend: 2.0.0
   jest: 29.2.2
   jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
@@ -81,7 +81,7 @@ dependencies:
   classnames: 2.3.2
   i18next: 22.0.3
   i18next-browser-languagedetector: 7.0.0
-  i18next-http-backend: 1.4.5
+  i18next-http-backend: 2.0.0
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
@@ -6354,8 +6354,8 @@ packages:
       '@babel/runtime': 7.19.4
     dev: false
 
-  /i18next-http-backend/1.4.5:
-    resolution: {integrity: sha512-tLuHWuLWl6CmS07o+UB6EcQCaUjrZ1yhdseIN7sfq0u7phsMePJ8pqlGhIAdRDPF/q7ooyo5MID5DRFBCH+x5w==}
+  /i18next-http-backend/2.0.0:
+    resolution: {integrity: sha512-6aFT5LcDOSxFyaoezruIxZDzpp6nu92j1iZc444nrz/OOaF7rsxQFNi1es19la53MQQFzG7uD2Koxi7Jav8khg==}
     dependencies:
       cross-fetch: 3.1.5
     transitivePeerDependencies:

From 0bdfd48651435aa96b8bbc27bfab9bfcc9244352 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 29 Oct 2022 09:02:59 +1100
Subject: [PATCH 217/263] build(deps): update module github.com/fasthttp/router
 to v1.4.13 (#4291)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 5 ++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/go.mod b/go.mod
index 9501aee80..e6da1373a 100644
--- a/go.mod
+++ b/go.mod
@@ -7,7 +7,7 @@ require (
 	github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
 	github.com/deckarep/golang-set v1.8.0
 	github.com/duosecurity/duo_api_golang v0.0.0-20220927171823-f4576e85b96c
-	github.com/fasthttp/router v1.4.12
+	github.com/fasthttp/router v1.4.13
 	github.com/fasthttp/session/v2 v2.4.13
 	github.com/fsnotify/fsnotify v1.6.0
 	github.com/go-asn1-ber/asn1-ber v1.5.4
diff --git a/go.sum b/go.sum
index fbad11e8d..ce29a0b2b 100644
--- a/go.sum
+++ b/go.sum
@@ -211,8 +211,8 @@ github.com/envoyproxy/go-control-plane v0.9.10-0.20210907150352-cf90f659a021/go.
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
 github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 h1:JWuenKqqX8nojtoVVWjGfOF9635RETekkoH6Cc9SX0A=
 github.com/facebookgo/stack v0.0.0-20160209184415-751773369052/go.mod h1:UbMTZqLaRiH3MsBH8va0n7s1pQYcu3uTb8G4tygF4Zg=
-github.com/fasthttp/router v1.4.12 h1:QEgK+UKARaC1bAzJgnIhdUMay6nwp+YFq6VGPlyKN1o=
-github.com/fasthttp/router v1.4.12/go.mod h1:41Qdc4Z4T2pWVVtATHCnoUnOtxdBoeKEYJTXhHwbxCQ=
+github.com/fasthttp/router v1.4.13 h1:42M7+7tNO6clb5seb4HhXlBIX1lnNv8DLhiT6jUv75A=
+github.com/fasthttp/router v1.4.13/go.mod h1:mVhHMaSQA2Hi1HeuL/ZMuZpsZWk5bya75EpaDr3fO7E=
 github.com/fasthttp/session/v2 v2.4.13 h1:I/j3w8UrXX1haXE+iraAbQuGihNVeTq6b8sp6L3ZJ6Q=
 github.com/fasthttp/session/v2 v2.4.13/go.mod h1:bAE6Bjl6ofQbkOpqcSuOVt/1R1LnbNLnFMHjGQcYP5M=
 github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
@@ -947,7 +947,6 @@ github.com/mattn/go-sqlite3 v1.9.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOq
 github.com/mattn/go-sqlite3 v1.10.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOqkbpncsNc=
 github.com/mattn/go-sqlite3 v1.11.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOqkbpncsNc=
 github.com/mattn/go-sqlite3 v1.14.6/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
-github.com/mattn/go-sqlite3 v1.14.15 h1:vfoHhTN1af61xCRSWzFIWzx2YskyMTwHLrExkBOjvxI=
 github.com/mattn/go-sqlite3 v1.14.15/go.mod h1:2eHXhiwb8IkHr+BDWZGa96P6+rkvnG63S2DGjv9HUNg=
 github.com/mattn/go-sqlite3 v1.14.16 h1:yOQRA0RpS5PFz/oikGwBEqvAWhWg5ufRz4ETLjwpU1Y=
 github.com/mattn/go-sqlite3 v1.14.16/go.mod h1:2eHXhiwb8IkHr+BDWZGa96P6+rkvnG63S2DGjv9HUNg=

From 6d1bfa1d0bed6e78baafc5ff22641de8c750a61e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 29 Oct 2022 11:41:10 +1100
Subject: [PATCH 218/263] build(deps): update dependency i18next to v22.0.4
 (#4294)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/package.json b/web/package.json
index f120c7d8e..98379adf0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "axios": "0.27.2",
     "broadcast-channel": "4.18.0",
     "classnames": "2.3.2",
-    "i18next": "22.0.3",
+    "i18next": "22.0.4",
     "i18next-browser-languagedetector": "7.0.0",
     "i18next-http-backend": "2.0.0",
     "qrcode.react": "3.1.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 456883a79..87f9fc00b 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -40,7 +40,7 @@ specifiers:
   eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
-  i18next: 22.0.3
+  i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.0
   i18next-http-backend: 2.0.0
   jest: 29.2.2
@@ -79,14 +79,14 @@ dependencies:
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
-  i18next: 22.0.3
+  i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.0
   i18next-http-backend: 2.0.0
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 12.0.0_stofmi6dj437ctg2rzgtmdpkoe
+  react-i18next: 12.0.0_n3kmhq4527torfjiti537juzwy
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
@@ -6362,8 +6362,8 @@ packages:
       - encoding
     dev: false
 
-  /i18next/22.0.3:
-    resolution: {integrity: sha512-gG6kCG5+gnPXdK8TLTJ2oiuFSjn6CYMSUwV3vnmISxwTunJHREn/z6gi1g7942c61K1dL3Gm+9a64nZCPv6mlg==}
+  /i18next/22.0.4:
+    resolution: {integrity: sha512-TOp7BTMKDbUkOHMzDlVsCYWpyaFkKakrrO3HNXfSz4EeJaWwnBScRmgQSTaWHScXVHBUFXTvShrCW8uryBYFcg==}
     dependencies:
       '@babel/runtime': 7.19.4
     dev: false
@@ -8269,7 +8269,7 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/12.0.0_stofmi6dj437ctg2rzgtmdpkoe:
+  /react-i18next/12.0.0_n3kmhq4527torfjiti537juzwy:
     resolution: {integrity: sha512-/O7N6aIEAl1FaWZBNvhdIo9itvF/MO/nRKr9pYqRc9LhuC1u21SlfwpiYQqvaeNSEW3g3qUXLREOWMt+gxrWbg==}
     peerDependencies:
       i18next: '>= 19.0.0'
@@ -8284,7 +8284,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       html-parse-stringify: 3.0.1
-      i18next: 22.0.3
+      i18next: 22.0.4
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false

From f32242f023d75bd5f8f0af8a18213f974bc632e2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 29 Oct 2022 13:11:09 +1100
Subject: [PATCH 219/263] build(deps): update dependency @types/react to
 v18.0.24 (#4284)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 94 +++++++++++++++++++++++-----------------------
 2 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/web/package.json b/web/package.json
index 98379adf0..9096e0f8b 100644
--- a/web/package.json
+++ b/web/package.json
@@ -150,7 +150,7 @@
     "@types/jest": "29.2.0",
     "@types/node": "18.11.7",
     "@types/qrcode.react": "1.0.2",
-    "@types/react": "18.0.23",
+    "@types/react": "18.0.24",
     "@types/react-dom": "18.0.8",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.41.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 87f9fc00b..91372dbe5 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -18,7 +18,7 @@ specifiers:
   '@types/jest': 29.2.0
   '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.23
+  '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0
@@ -67,15 +67,15 @@ specifiers:
 
 dependencies:
   '@emotion/cache': 11.10.5
-  '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
-  '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
+  '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
+  '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_dl4zfq4wmflnc4bmgvttvmx37e
-  '@mui/material': 5.10.11_pg2ezatylteehkgge5iziahahu
-  '@mui/styles': 5.10.10_i2izv7j3km4zzxbpzq2d4xtojy
+  '@mui/icons-material': 5.10.9_4ucrevsrp5tdlzg44kesjenzrm
+  '@mui/material': 5.10.11_gs4twfomdgooimayvnfrqgiwam
+  '@mui/styles': 5.10.10_bbvjflvjoibwhtpmedigb26h6y
   axios: 0.27.2
   broadcast-channel: 4.18.0
   classnames: 2.3.2
@@ -100,7 +100,7 @@ devDependencies:
   '@types/jest': 29.2.0
   '@types/node': 18.11.7
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.23
+  '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
@@ -2381,7 +2381,7 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.5_i2izv7j3km4zzxbpzq2d4xtojy:
+  /@emotion/react/11.10.5_bbvjflvjoibwhtpmedigb26h6y:
     resolution: {integrity: sha512-TZs6235tCJ/7iF6/rvTaOH4oxQg2gMAcdHemjwLKIjKz4rRuYe1HJ2TQJKnAcRAfOUDdU8XoDadCe1rl72iv8A==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2400,7 +2400,7 @@ packages:
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       hoist-non-react-statics: 3.3.2
       react: 18.2.0
     dev: false
@@ -2419,7 +2419,7 @@ packages:
     resolution: {integrity: sha512-zxRBwl93sHMsOj4zs+OslQKg/uhF38MB+OMKoCrVuS0nyTkqnau+BM3WGEoOptg9Oz45T/aIGs1qbVAsEFo3nA==}
     dev: false
 
-  /@emotion/styled/11.10.5_ddiadf2ao4stlmg4kctxi5bvma:
+  /@emotion/styled/11.10.5_wm6ohc3abj5yburmg6pjdgzp24:
     resolution: {integrity: sha512-8EP6dD7dMkdku2foLoruPCNkRevzdcBaY6q0l0OsbyJK+x8D9HWjX27ARiSIKNF634hY9Zdoedh8bJCiva8yZw==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2435,11 +2435,11 @@ packages:
       '@babel/runtime': 7.19.4
       '@emotion/babel-plugin': 11.10.5
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
       '@emotion/serialize': 1.1.1
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       react: 18.2.0
     dev: false
 
@@ -2908,7 +2908,7 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.103_yyloj25vv7zmuk3uh3z5jonzqq:
+  /@mui/base/5.0.0-alpha.103_knhnagtyfncgg2hpin7s37uixq:
     resolution: {integrity: sha512-fJIyB2df3CHn7D26WHnutnY7vew6aytTlhmRJz6GX7ag19zU2GcOUhJAzY5qwWcrXKnlYgzimhEjaEnuiUWU4g==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2921,10 +2921,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@emotion/is-prop-valid': 1.2.0
-      '@mui/types': 7.2.0_@types+react@18.0.23
+      '@mui/types': 7.2.0_@types+react@18.0.24
       '@mui/utils': 5.10.9_react@18.2.0
       '@popperjs/core': 2.11.6
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       clsx: 1.2.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -2936,7 +2936,7 @@ packages:
     resolution: {integrity: sha512-u5ff+UCFDHcR8MoQ8tuJR4c35vt7T/ki3aMEE2O3XQoGs8KJSrBiisFpFKyldg9/W2NSyoZxN+kxEGIfRxh+9Q==}
     dev: false
 
-  /@mui/icons-material/5.10.9_dl4zfq4wmflnc4bmgvttvmx37e:
+  /@mui/icons-material/5.10.9_4ucrevsrp5tdlzg44kesjenzrm:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2948,12 +2948,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.11_pg2ezatylteehkgge5iziahahu
-      '@types/react': 18.0.23
+      '@mui/material': 5.10.11_gs4twfomdgooimayvnfrqgiwam
+      '@types/react': 18.0.24
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.11_pg2ezatylteehkgge5iziahahu:
+  /@mui/material/5.10.11_gs4twfomdgooimayvnfrqgiwam:
     resolution: {integrity: sha512-KJ0wPCTbv6sFzwA3dgg0gowdfF+SRl7D510J9l6Nl/KFX0EawcewQudqKY4slYGFXniKa5PykqokpaWXsCCPqg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2971,14 +2971,14 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
-      '@mui/base': 5.0.0-alpha.103_yyloj25vv7zmuk3uh3z5jonzqq
+      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
+      '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
+      '@mui/base': 5.0.0-alpha.103_knhnagtyfncgg2hpin7s37uixq
       '@mui/core-downloads-tracker': 5.10.11
-      '@mui/system': 5.10.10_5q4p2mshrahpv5hw6yqye2so6m
-      '@mui/types': 7.2.0_@types+react@18.0.23
+      '@mui/system': 5.10.10_3ccit3vaizg4wqqen3724viway
+      '@mui/types': 7.2.0_@types+react@18.0.24
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
       csstype: 3.1.1
@@ -2989,7 +2989,7 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.9_i2izv7j3km4zzxbpzq2d4xtojy:
+  /@mui/private-theming/5.10.9_bbvjflvjoibwhtpmedigb26h6y:
     resolution: {integrity: sha512-BN7/CnsVPVyBaQpDTij4uV2xGYHHHhOgpdxeYLlIu+TqnsVM7wUeF+37kXvHovxM6xmL5qoaVUD98gDC0IZnHg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3001,7 +3001,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -3021,14 +3021,14 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@emotion/cache': 11.10.5
-      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
+      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
+      '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.10_i2izv7j3km4zzxbpzq2d4xtojy:
+  /@mui/styles/5.10.10_bbvjflvjoibwhtpmedigb26h6y:
     resolution: {integrity: sha512-utr87q/euocRdc2ekFX7DL1gqTVfogSVeu74Nspr8rtK/afC9QwF3ScP/XThVXWPcQKjBWHMKWtAO9BSVE4KDg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3040,10 +3040,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.9_i2izv7j3km4zzxbpzq2d4xtojy
-      '@mui/types': 7.2.0_@types+react@18.0.23
+      '@mui/private-theming': 5.10.9_bbvjflvjoibwhtpmedigb26h6y
+      '@mui/types': 7.2.0_@types+react@18.0.24
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       clsx: 1.2.1
       csstype: 3.1.1
       hoist-non-react-statics: 3.3.2
@@ -3059,7 +3059,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.10_5q4p2mshrahpv5hw6yqye2so6m:
+  /@mui/system/5.10.10_3ccit3vaizg4wqqen3724viway:
     resolution: {integrity: sha512-TXwtKN0adKpBrZmO+eilQWoPf2veh050HLYrN78Kps9OhlvO70v/2Kya0+mORFhu9yhpAwjHXO8JII/R4a5ZLA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3076,20 +3076,20 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.4
-      '@emotion/react': 11.10.5_i2izv7j3km4zzxbpzq2d4xtojy
-      '@emotion/styled': 11.10.5_ddiadf2ao4stlmg4kctxi5bvma
-      '@mui/private-theming': 5.10.9_i2izv7j3km4zzxbpzq2d4xtojy
+      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
+      '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
+      '@mui/private-theming': 5.10.9_bbvjflvjoibwhtpmedigb26h6y
       '@mui/styled-engine': 5.10.8_dovxhg2tvkkxkdnqyoum6wzcxm
-      '@mui/types': 7.2.0_@types+react@18.0.23
+      '@mui/types': 7.2.0_@types+react@18.0.24
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
       clsx: 1.2.1
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/types/7.2.0_@types+react@18.0.23:
+  /@mui/types/7.2.0_@types+react@18.0.24:
     resolution: {integrity: sha512-lGXtFKe5lp3UxTBGqKI1l7G8sE2xBik8qCfrLHD5olwP/YU0/ReWoWT7Lp1//ri32dK39oPMrJN8TgbkCSbsNA==}
     peerDependencies:
       '@types/react': '*'
@@ -3097,7 +3097,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
     dev: false
 
   /@mui/utils/5.10.9_react@18.2.0:
@@ -3631,29 +3631,29 @@ packages:
   /@types/qrcode.react/1.0.2:
     resolution: {integrity: sha512-I9Oq5Cjlkgy3Tw7krCnCXLw2/zMhizkTere49OOcta23tkvH0xBTP0yInimTh0gstLRtb8Ki9NZVujE5UI6ffQ==}
     dependencies:
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
     dev: true
 
   /@types/react-dom/18.0.8:
     resolution: {integrity: sha512-C3GYO0HLaOkk9dDAz3Dl4sbe4AKUGTCfFIZsz3n/82dPNN8Du533HzKatDxeUYWu24wJgMP1xICqkWk1YOLOIw==}
     dependencies:
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
     dev: true
 
   /@types/react-is/17.0.3:
     resolution: {integrity: sha512-aBTIWg1emtu95bLTLx0cpkxwGW3ueZv71nE2YFBpL8k/z5czEW8yYpOo8Dp+UUAFAtKwNaOsh/ioSeQnWlZcfw==}
     dependencies:
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
     dev: false
 
   /@types/react-transition-group/4.4.5:
     resolution: {integrity: sha512-juKD/eiSM3/xZYzjuzH6ZwpP+/lejltmiS3QEzV/vmb/Q8+HfDmxu+Baga8UEMGBqV88Nbg4l2hY/K2DkyaLLA==}
     dependencies:
-      '@types/react': 18.0.23
+      '@types/react': 18.0.24
     dev: false
 
-  /@types/react/18.0.23:
-    resolution: {integrity: sha512-R1wTULtCiJkudAN2DJGoYYySbGtOdzZyUWAACYinKdiQC8auxso4kLDUhQ7AJ2kh3F6A6z4v69U6tNY39hihVQ==}
+  /@types/react/18.0.24:
+    resolution: {integrity: sha512-wRJWT6ouziGUy+9uX0aW4YOJxAY0bG6/AOk5AW5QSvZqI7dk6VBIbXvcVgIw/W5Jrl24f77df98GEKTJGOLx7Q==}
     dependencies:
       '@types/prop-types': 15.7.5
       '@types/scheduler': 0.16.2

From 9c96134f212c18521f1dc4436f2336c9e36920f2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 29 Oct 2022 14:12:37 +1100
Subject: [PATCH 220/263] build(deps): update dependency vite to v3.2.1 (#4290)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 9096e0f8b..034108bdb 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.2.0",
+    "vite": "3.2.1",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 91372dbe5..ae198d412 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.2.0
+  vite: 3.2.1
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.2
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
   '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
-  '@vitejs/plugin-react': 2.2.0_vite@3.2.0
+  '@vitejs/plugin-react': 2.2.0_vite@3.2.1
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.26.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.2.0
-  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.0
+  vite: 3.2.1
+  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.1
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.2_vite@3.2.0
-  vite-tsconfig-paths: 3.5.2_vite@3.2.0
+  vite-plugin-svgr: 2.2.2_vite@3.2.1
+  vite-tsconfig-paths: 3.5.2_vite@3.2.1
 
 packages:
 
@@ -3901,7 +3901,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.2.0_vite@3.2.0:
+  /@vitejs/plugin-react/2.2.0_vite@3.2.1:
     resolution: {integrity: sha512-FFpefhvExd1toVRlokZgxgy2JtnBOdp4ZDsq7ldCWaqGSGn9UhWMAVm/1lxPL14JfNS5yGz+s9yFrQY6shoStA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3914,7 +3914,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.19.6_@babel+core@7.19.6
       magic-string: 0.26.7
       react-refresh: 0.14.0
-      vite: 3.2.0
+      vite: 3.2.1
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9404,7 +9404,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.2.0:
+  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.2.1:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9414,7 +9414,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.26.0
       rollup: 2.78.0
-      vite: 3.2.0
+      vite: 3.2.1
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9428,21 +9428,21 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.2_vite@3.2.0:
+  /vite-plugin-svgr/2.2.2_vite@3.2.1:
     resolution: {integrity: sha512-u8Ac27uZmDHTVGawpAhvLMJMuzbGeZGhe61TGeHoRQLxVhmQfIYCefa0iLbjC0ui1zFo6XZnS8EkzPITCYp85g==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 5.0.1
       '@svgr/core': 6.4.0
-      vite: 3.2.0
+      vite: 3.2.1
     transitivePeerDependencies:
       - '@babel/core'
       - rollup
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.2_vite@3.2.0:
+  /vite-tsconfig-paths/3.5.2_vite@3.2.1:
     resolution: {integrity: sha512-xJMgHA2oJ28QCG2f+hXrcqzo7IttrSRK4A//Tp94CfuX5eetOx33qiwXHUdi3FwkHP2ocpxHuvE45Ix67gwEmQ==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9451,13 +9451,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.2.0
+      vite: 3.2.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.2.0:
-    resolution: {integrity: sha512-Ovj7+cqIdM1I0LPCk2CWxzgADXMix3NLXpUT6g7P7zg/a9grk/TaC3qn9YMg7w7M0POIVCBOp1aBANJW+RH7oA==}
+  /vite/3.2.1:
+    resolution: {integrity: sha512-ADtMkfHuWq4tskJsri2n2FZkORO8ZyhI+zIz7zTrDAgDEtct1jdxOg3YsZBfHhKjmMoWLOSCr+64qrEDGo/DbQ==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From db9de7b5a4ad8fc8265fac4c25f9d798980db355 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 29 Oct 2022 17:00:46 +1100
Subject: [PATCH 221/263] build(deps): update traefik docker tag to v2.9.4
 (#4286)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 examples/compose/lite/docker-compose.yml                    | 2 +-
 examples/compose/local/docker-compose.yml                   | 2 +-
 internal/suites/example/compose/traefik2/docker-compose.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/compose/lite/docker-compose.yml b/examples/compose/lite/docker-compose.yml
index 190c3f6ac..7ed0312ed 100644
--- a/examples/compose/lite/docker-compose.yml
+++ b/examples/compose/lite/docker-compose.yml
@@ -45,7 +45,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.9.1
+    image: traefik:v2.9.4
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/examples/compose/local/docker-compose.yml b/examples/compose/local/docker-compose.yml
index dc62f232a..f3453c8c1 100644
--- a/examples/compose/local/docker-compose.yml
+++ b/examples/compose/local/docker-compose.yml
@@ -32,7 +32,7 @@ services:
       - TZ=Australia/Melbourne
 
   traefik:
-    image: traefik:v2.9.1
+    image: traefik:v2.9.4
     container_name: traefik
     volumes:
       - ./traefik:/etc/traefik
diff --git a/internal/suites/example/compose/traefik2/docker-compose.yml b/internal/suites/example/compose/traefik2/docker-compose.yml
index 151ceab16..a99aea134 100644
--- a/internal/suites/example/compose/traefik2/docker-compose.yml
+++ b/internal/suites/example/compose/traefik2/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   traefik:
-    image: traefik:v2.9.1
+    image: traefik:v2.9.4
     volumes:
       - '/var/run/docker.sock:/var/run/docker.sock'
     labels:

From 7f247ca63331be1d851736df1f35f901004d8c3c Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 31 Oct 2022 10:19:04 +1100
Subject: [PATCH 222/263] docs(deps): bump all deps (#4303)

---
 docs/package.json   |  22 +-
 docs/pnpm-lock.yaml | 917 +++++++++++++++++++++++---------------------
 2 files changed, 487 insertions(+), 452 deletions(-)

diff --git a/docs/package.json b/docs/package.json
index 328b903e4..a48b7366f 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -39,35 +39,35 @@
   },
   "devDependencies": {
     "@babel/cli": "7.19.3",
-    "@babel/core": "7.19.3",
-    "@babel/preset-env": "7.19.3",
-    "@fullhuman/postcss-purgecss": "4.1.3",
-    "@hyas/images": "0.2.3",
+    "@babel/core": "7.19.6",
+    "@babel/preset-env": "7.19.4",
+    "@fullhuman/postcss-purgecss": "5.0.0",
+    "@hyas/images": "0.3.0",
     "@popperjs/core": "2.11.6",
     "auto-changelog": "2.4.0",
-    "autoprefixer": "10.4.12",
+    "autoprefixer": "10.4.13",
     "bootstrap": "5.2.2",
     "bootstrap-icons": "1.9.1",
     "clipboard": "2.0.11",
-    "eslint": "8.24.0",
+    "eslint": "8.26.0",
     "exec-bin": "1.0.0",
     "flexsearch": "0.7.31",
     "highlight.js": "11.6.0",
     "hugo-installer": "4.0.1",
     "instant.page": "5.1.1",
-    "katex": "0.16.2",
+    "katex": "0.16.3",
     "lazysizes": "5.3.2",
     "markdownlint-cli2": "0.5.1",
     "netlify-plugin-submit-sitemap": "0.4.0",
     "node-fetch": "3.2.10",
-    "postcss": "8.4.17",
+    "postcss": "8.4.18",
     "postcss-cli": "10.0.0",
     "purgecss-whitelister": "2.4.0",
     "shx": "0.3.4",
-    "stylelint": "14.13.0",
-    "stylelint-config-standard-scss": "4.0.0"
+    "stylelint": "14.14.0",
+    "stylelint-config-standard-scss": "6.0.0"
   },
   "otherDependencies": {
-    "hugo": "0.104.3"
+    "hugo": "0.105.0"
   }
 }
diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml
index 44d724428..2f45b5082 100644
--- a/docs/pnpm-lock.yaml
+++ b/docs/pnpm-lock.yaml
@@ -2,63 +2,63 @@ lockfileVersion: 5.4
 
 specifiers:
   '@babel/cli': 7.19.3
-  '@babel/core': 7.19.3
-  '@babel/preset-env': 7.19.3
-  '@fullhuman/postcss-purgecss': 4.1.3
-  '@hyas/images': 0.2.3
+  '@babel/core': 7.19.6
+  '@babel/preset-env': 7.19.4
+  '@fullhuman/postcss-purgecss': 5.0.0
+  '@hyas/images': 0.3.0
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
-  autoprefixer: 10.4.12
+  autoprefixer: 10.4.13
   bootstrap: 5.2.2
   bootstrap-icons: 1.9.1
   clipboard: 2.0.11
-  eslint: 8.24.0
+  eslint: 8.26.0
   exec-bin: 1.0.0
   flexsearch: 0.7.31
   highlight.js: 11.6.0
   hugo-installer: 4.0.1
   instant.page: 5.1.1
-  katex: 0.16.2
+  katex: 0.16.3
   lazysizes: 5.3.2
   markdownlint-cli2: 0.5.1
   netlify-plugin-submit-sitemap: 0.4.0
   node-fetch: 3.2.10
-  postcss: 8.4.17
+  postcss: 8.4.18
   postcss-cli: 10.0.0
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.13.0
-  stylelint-config-standard-scss: 4.0.0
+  stylelint: 14.14.0
+  stylelint-config-standard-scss: 6.0.0
 
 devDependencies:
-  '@babel/cli': 7.19.3_@babel+core@7.19.3
-  '@babel/core': 7.19.3
-  '@babel/preset-env': 7.19.3_@babel+core@7.19.3
-  '@fullhuman/postcss-purgecss': 4.1.3_postcss@8.4.17
-  '@hyas/images': 0.2.3
+  '@babel/cli': 7.19.3_@babel+core@7.19.6
+  '@babel/core': 7.19.6
+  '@babel/preset-env': 7.19.4_@babel+core@7.19.6
+  '@fullhuman/postcss-purgecss': 5.0.0_postcss@8.4.18
+  '@hyas/images': 0.3.0
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
-  autoprefixer: 10.4.12_postcss@8.4.17
+  autoprefixer: 10.4.13_postcss@8.4.18
   bootstrap: 5.2.2_@popperjs+core@2.11.6
   bootstrap-icons: 1.9.1
   clipboard: 2.0.11
-  eslint: 8.24.0
+  eslint: 8.26.0
   exec-bin: 1.0.0
   flexsearch: 0.7.31
   highlight.js: 11.6.0
   hugo-installer: 4.0.1
   instant.page: 5.1.1
-  katex: 0.16.2
+  katex: 0.16.3
   lazysizes: 5.3.2
   markdownlint-cli2: 0.5.1
   netlify-plugin-submit-sitemap: 0.4.0
   node-fetch: 3.2.10
-  postcss: 8.4.17
-  postcss-cli: 10.0.0_postcss@8.4.17
+  postcss: 8.4.18
+  postcss-cli: 10.0.0_postcss@8.4.18
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.13.0
-  stylelint-config-standard-scss: 4.0.0_7mm2245zw6jpoub3zc2ef5m2tq
+  stylelint: 14.14.0
+  stylelint-config-standard-scss: 6.0.0_mnalcscwzozovshmobozjae4pq
 
 packages:
 
@@ -70,14 +70,14 @@ packages:
       '@jridgewell/trace-mapping': 0.3.13
     dev: true
 
-  /@babel/cli/7.19.3_@babel+core@7.19.3:
+  /@babel/cli/7.19.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-643/TybmaCAe101m2tSVHi9UKpETXP9c/Ff4mD2tAwkdP6esKIfaauZFc67vGEM6r9fekbEGid+sZhbEnSe3dg==}
     engines: {node: '>=6.9.0'}
     hasBin: true
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@jridgewell/trace-mapping': 0.3.13
       commander: 4.1.1
       convert-source-map: 1.8.0
@@ -97,25 +97,25 @@ packages:
       '@babel/highlight': 7.18.6
     dev: true
 
-  /@babel/compat-data/7.19.3:
-    resolution: {integrity: sha512-prBHMK4JYYK+wDjJF1q99KK4JLL+egWS4nmNqdlMUgCExMZ+iZW0hGhyC3VEbsPjvaN0TBhW//VIFwBrk8sEiw==}
+  /@babel/compat-data/7.20.0:
+    resolution: {integrity: sha512-Gt9jszFJYq7qzXVK4slhc6NzJXnOVmRECWcVjF/T23rNXD9NtWQ0W3qxdg+p9wWIB+VQw3GYV/U2Ha9bRTfs4w==}
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/core/7.19.3:
-    resolution: {integrity: sha512-WneDJxdsjEvyKtXKsaBGbDeiyOjR5vYq4HcShxnIbG0qixpoHjI3MqeZM9NDvsojNCEBItQE4juOo/bU6e72gQ==}
+  /@babel/core/7.19.6:
+    resolution: {integrity: sha512-D2Ue4KHpc6Ys2+AxpIx1BZ8+UegLLLE2p3KJEuJRKmokHOtl49jQ5ny1773KsGLZs8MQvBidAF6yWUJxRqtKtg==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.3
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
-      '@babel/helper-module-transforms': 7.19.0
-      '@babel/helpers': 7.19.0
-      '@babel/parser': 7.19.3
+      '@babel/generator': 7.20.0
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
+      '@babel/helper-module-transforms': 7.19.6
+      '@babel/helpers': 7.20.0
+      '@babel/parser': 7.20.0
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/traverse': 7.20.0
+      '@babel/types': 7.20.0
       convert-source-map: 1.8.0
       debug: 4.3.4
       gensync: 1.0.0-beta.2
@@ -125,11 +125,11 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/generator/7.19.3:
-    resolution: {integrity: sha512-fqVZnmp1ncvZU757UzDheKZpfPgatqY59XtW2/j/18H7u76akb8xqvjw82f+i2UKd/ksYsSick/BCLQUUtJ/qQ==}
+  /@babel/generator/7.20.0:
+    resolution: {integrity: sha512-GUPcXxWibClgmYJuIwC2Bc2Lg+8b9VjaJ+HlNdACEVt+Wlr1eoU1OPZjZRm7Hzl0gaTsUZNQfeihvZJhG7oc3w==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
       '@jridgewell/gen-mapping': 0.3.2
       jsesc: 2.5.2
     dev: true
@@ -138,7 +138,7 @@ packages:
     resolution: {integrity: sha512-duORpUiYrEpzKIop6iNbjnwKLAKnJ47csTyRACyEmWj0QdUrm5aqNJGHSSEQSUAvNW0ojX0dOmK9dZduvkfeXA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-builder-binary-assignment-operator-visitor/7.18.6:
@@ -146,29 +146,29 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-explode-assignable-expression': 7.18.6
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
-  /@babel/helper-compilation-targets/7.19.3_@babel+core@7.19.3:
+  /@babel/helper-compilation-targets/7.19.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-65ESqLGyGmLvgR0mst5AdW1FkNlj9rQsCKduzEoEPhBCDFGXvz2jW6bXFG6i0/MrV2s7hhXjjb2yAzcPuQlLwg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/compat-data': 7.19.3
-      '@babel/core': 7.19.3
+      '@babel/compat-data': 7.20.0
+      '@babel/core': 7.19.6
       '@babel/helper-validator-option': 7.18.6
       browserslist: 4.21.4
       semver: 6.3.0
     dev: true
 
-  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.3:
+  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-YfDzdnoxHGV8CzqHGyCbFvXg5QESPFkXlHtvdCkesLjjVMT2Adxe4FGUR5ChIb3DxSaXO12iIOCWoXdsUVwnqw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
@@ -180,24 +180,24 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.19.3:
+  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-htnV+mHX32DF81amCDrwIDr8nrp1PTm+3wfBN9/v8QJOLEioOCOG7qNyq0nHeFiWbT3Eb7gsPwEmV64UCQ1jzw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       regexpu-core: 5.1.0
     dev: true
 
-  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.19.3:
+  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-z5aQKU4IzbqCC1XH0nAqfsFLMVSo22SBKUc0BxGrLkolTdPTructy0ToNnlO2zA4j9Q/7pjMZf0DSY+DSTYzww==}
     peerDependencies:
       '@babel/core': ^7.4.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       debug: 4.3.4
       lodash.debounce: 4.0.8
@@ -216,7 +216,7 @@ packages:
     resolution: {integrity: sha512-eyAYAsQmB80jNfg4baAtLeWAQHfHFiR483rzFK+BhETlGZaQC9bsfrugfXDCbRHLQbIA7U5NxhhOxN7p/dWIcg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-function-name/7.19.0:
@@ -224,42 +224,42 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-hoist-variables/7.18.6:
     resolution: {integrity: sha512-UlJQPkFqFULIcyW5sbzgbkxn2FKRgwWiRexcuaR8RNJRy8+LLveqPjwZV/bwrLZCN0eUHD/x8D0heK1ozuoo6Q==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-member-expression-to-functions/7.18.9:
     resolution: {integrity: sha512-RxifAh2ZoVU67PyKIO4AMi1wTenGfMR/O/ae0CCRqwgBAt5v7xjdtRw7UoSbsreKrQn5t7r89eruK/9JjYHuDg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-module-imports/7.18.6:
     resolution: {integrity: sha512-0NFvs3VkuSYbFi1x2Vd6tKrywq+z/cLeYC/RJNFrIX/30Bf5aiGYbtvGXolEktzJH8o5E5KJ3tT+nkxuuZFVlA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
-  /@babel/helper-module-transforms/7.19.0:
-    resolution: {integrity: sha512-3HBZ377Fe14RbLIA+ac3sY4PTgpxHVkFrESaWhoI5PuyXPBBX8+C34qblV9G89ZtycGJCmCI/Ut+VUDK4bltNQ==}
+  /@babel/helper-module-transforms/7.19.6:
+    resolution: {integrity: sha512-fCmcfQo/KYr/VXXDIyd3CBGZ6AFhPFy1TfSEJ+PilGVlQT6jcbqtHAM4C1EciRqMza7/TpOUZliuSH+U6HAhJw==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-simple-access': 7.18.6
+      '@babel/helper-simple-access': 7.19.4
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-validator-identifier': 7.19.1
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/traverse': 7.20.0
+      '@babel/types': 7.20.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -268,7 +268,7 @@ packages:
     resolution: {integrity: sha512-HP59oD9/fEHQkdcbgFCnbmgH5vIQTJbxh2yf+CdM89/glUNnuzr87Q8GIjGEnOktTROemO0Pe0iPAYbqZuOUiA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-plugin-utils/7.19.0:
@@ -276,17 +276,17 @@ packages:
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.19.3:
+  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-dI7q50YKd8BAv3VEfgg7PS7yD3Rtbi2J1XMXaalXO0W0164hYLnh8zpjRS0mte9MfVp/tltvr/cfdXPvJr1opA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-wrap-function': 7.18.11
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -298,8 +298,8 @@ packages:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-member-expression-to-functions': 7.18.9
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/traverse': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/traverse': 7.20.0
+      '@babel/types': 7.20.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -308,30 +308,32 @@ packages:
     resolution: {integrity: sha512-iNpIgTgyAvDQpDj76POqg+YEt8fPxx3yaNBg3S30dxNKm2SWfYhD0TGrK/Eu9wHpUW63VQU894TsTg+GLbUa1g==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
+    dev: true
+
+  /@babel/helper-simple-access/7.19.4:
+    resolution: {integrity: sha512-f9Xq6WqBFqaDfbCzn2w85hwklswz5qsKlh7f08w4Y9yhJHpnNC0QemtSkK5YyOY8kPGvyiwdzZksGUhnGdaUIg==}
+    engines: {node: '>=6.9.0'}
+    dependencies:
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-skip-transparent-expression-wrappers/7.18.9:
     resolution: {integrity: sha512-imytd2gHi3cJPsybLRbmFrF7u5BIEuI2cNheyKi3/iOBC63kNn3q8Crn2xVuESli0aM4KYsyEqKyS7lFL8YVtw==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
   /@babel/helper-split-export-declaration/7.18.6:
     resolution: {integrity: sha512-bde1etTx6ZyTmobl9LLMMQsaizFVZrquTEHOqKeQESMKo4PlObf+8+JA25ZsIpZhT/WEd39+vOdLXAFG/nELpA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
-  /@babel/helper-string-parser/7.18.10:
-    resolution: {integrity: sha512-XtIfWmeNY3i4t7t4D2t02q50HvqHybPqW2ki1kosnvWCwuCMeo81Jf0gwr85jy/neUdg5XDdeFE/80DXiO+njw==}
-    engines: {node: '>=6.9.0'}
-    dev: true
-
-  /@babel/helper-validator-identifier/7.18.6:
-    resolution: {integrity: sha512-MmetCkz9ej86nJQV+sFCxoGGrUbU3q02kgLciwkrt9QqEB7cP39oKEY0PakknEO0Gu20SskMRi+AYZ3b1TpN9g==}
+  /@babel/helper-string-parser/7.19.4:
+    resolution: {integrity: sha512-nHtDoQcuqFmwYNYPz3Rah5ph2p8PFeFCsZk9A/48dPc/rGocJ5J3hAAZ7pb76VWX3fZKu+uEr/FhH5jLx7umrw==}
     engines: {node: '>=6.9.0'}
     dev: true
 
@@ -351,19 +353,19 @@ packages:
     dependencies:
       '@babel/helper-function-name': 7.19.0
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/traverse': 7.20.0
+      '@babel/types': 7.20.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/helpers/7.19.0:
-    resolution: {integrity: sha512-DRBCKGwIEdqY3+rPJgG/dKfQy9+08rHIAJx8q2p+HSWP87s2HCrQmaAMMyMll2kIXKCW0cO1RdQskx15Xakftg==}
+  /@babel/helpers/7.20.0:
+    resolution: {integrity: sha512-aGMjYraN0zosCEthoGLdqot1oRsmxVTQRHadsUPz5QM44Zej2PYRz7XiDE7GqnkZnNtLbOuxqoZw42vkU7+XEQ==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/traverse': 7.20.0
+      '@babel/types': 7.20.0
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -372,417 +374,417 @@ packages:
     resolution: {integrity: sha512-u7stbOuYjaPezCuLj29hNW1v64M2Md2qupEKP1fHc7WdOA3DgLh37suiSrZYY7haUB7iBeQZ9P1uiRF359do3g==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/helper-validator-identifier': 7.18.6
+      '@babel/helper-validator-identifier': 7.19.1
       chalk: 2.4.2
       js-tokens: 4.0.0
     dev: true
 
-  /@babel/parser/7.19.3:
-    resolution: {integrity: sha512-pJ9xOlNWHiy9+FuFP09DEAFbAn4JskgRsVcc169w2xRBC3FRGuQEwjeIMMND9L2zc0iEhO/tGv4Zq+km+hxNpQ==}
+  /@babel/parser/7.20.0:
+    resolution: {integrity: sha512-G9VgAhEaICnz8iiJeGJQyVl6J2nTjbW0xeisva0PK6XcKsga7BIaqm4ZF8Rg1Wbaqmy6znspNqhPaPkyukujzg==}
     engines: {node: '>=6.0.0'}
     hasBin: true
     dependencies:
-      '@babel/types': 7.19.3
+      '@babel/types': 7.20.0
     dev: true
 
-  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Dgxsyg54Fx1d4Nge8UnvTrED63vrwOdPmyvPzlNN/boaliRP54pm3pGzZD1SJUwrBA+Cs/xdG8kXX6Mn/RfISQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-AHrP9jadvH7qlOj6PINbgSuphjQUAK7AOT7DPjBo9EHoLhQTnnK5u45e1Hd4DbSQEO9nqPWtQ89r+XEOWFScKg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.13.0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.3
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-async-generator-functions/7.19.1_@babel+core@7.19.3:
+  /@babel/plugin-proposal-async-generator-functions/7.19.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-0yu8vNATgLy4ivqMNBIwb1HebCelqN7YX8SL3FDXORv/RqT0zEEWUCH4GH44JsSrvCu6GqnAdR5EBFAPeNBB4Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.3
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-cumfXOF0+nzZrrN8Rf0t7M+tF6sZc7vhQwYQck9q1/5w2OExlD+b4v4RpMJFaV1Z7WcDRgO6FqvxqxGlwo+RHQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-+I3oIiNxrCpup3Gi8n5IGMwj0gOCAjcJUSQEcotNnCCPMEnixawOQ+KeJPlgfjzx+FKQ1QSyZOWe7wmoJp7vhw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.12.0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.3
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-1auuwmK+Rz13SJj36R+jqFPMJWyKEDd7lLSdOj4oJK0UTgGueSAtkrCvz9ewmgyU/P941Rv2fQwZJN8s6QruXw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-k1NtHyOMvlDDFeb9G5PhUXuGj8m/wiwojgQVEhJ/fsVsMCpLyOP4h0uGEjYJKrRI+EVPlb5Jk+Gt9P97lOGwtA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-lr1peyn9kOdbYc0xr0OdHTZ5FMqS6Di+H0Fz2I/JwMzGmzJETNeOFq2pBySw6X/KFL5EWDjlJuMsUGRFb8fQgQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-128YbMpjCrP35IOExw2Fq+x55LMP42DzhOhX2aNNIdI9avSWl2PI0yuBWarr3RYpZBSPtabfadkH2yeRiMD61Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.3
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-wQxQzxYeJqHcfppzBDnm1yAY0jSRkUXR2z8RePZYrKwMKgMlE8+Z6LUno+bd6LvbGh8Gltvy74+9pIYkr+XkKA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ozlZFogPqoLm8WBr5Z8UckIoE4YQ5KESVcNudyXOR8uqIkliTEgJ3RoketfG6pmzLdeZF0H/wjE9/cCEitBl7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.3
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-object-rest-spread/7.18.9_@babel+core@7.19.3:
-    resolution: {integrity: sha512-kDDHQ5rflIeY5xl69CEqGEZ0KY369ehsCIEbTGb4siHG5BE9sga/T0r0OUwyZNLMmZE79E1kbsqAjwFCW4ds6Q==}
+  /@babel/plugin-proposal-object-rest-spread/7.19.4_@babel+core@7.19.6:
+    resolution: {integrity: sha512-wHmj6LDxVDnL+3WhXteUBaoM1aVILZODAUjg11kHqG4cOlfgMQGxw6aCgvrXrmaJR3Bn14oZhImyCPZzRpC93Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.19.3
-      '@babel/core': 7.19.3
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
+      '@babel/compat-data': 7.20.0
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.3
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Q40HEhs9DJQyaZfUjjn6vE8Cv4GmMHCYuMGIWUnlxH6400VGxOuwWsPt4FxXxJkC/5eOzgn0z21M9gMT4MOhbw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-v5nwt4IqBXihxGsW2QmCWMDS3B3bzGIk/EQVZz2ei7f3NJl8NzAJVvUmpDW5q1CRNY+Beb/k58UAH1Km1N411w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.3
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
     dev: true
 
-  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-nutsvktDItsNn4rpGItSNV2sz1XwS+nfU0Rg8aCx3W3NOKVzdMjJRu0O5OkgDp3ZGICSTbgRpxZoWsxoKRvbeA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-9Rysx7FOctvT5ouj5JODjAFAkgGoudQuLPamZb0v1TGLpapdNaftzifU8NTWQm0IRjqoYypdrSmyWgkocDQ8Dw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.3
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.3
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-2BShG/d5yoZyXZfVePH91urL5wTG6ASZU9M4o03lKK8u8UW1y08OMttBSOADTcJrnPMpvDXRG3G8fyLh4ovs8w==}
     engines: {node: '>=4'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.3:
+  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.3:
+  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.6:
     resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.3:
+  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-5gdGbFon+PszYzqs83S3E5mpi7/y/8M9eC90MRTZfduQOYW76ig6SOSPNe41IG5LoP3FGBn2N0RjVDSQiS94kQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-MXf5laXo6c1IbEbegDmzGPwGNTsHZmEy6QGznu5Sh2UCWvueywb2ee+CCE4zQiZstxU9BMoQO9i6zUFSY0Kj0Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-/DU3RXad9+bZwrgWJQKbr39gYbJpLJHezqEzRzi/BHRlJ9zsQb4CK2CA/5apllXNomwA1qHwzvHl+AdEmC5krQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.3:
+  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.3:
+  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.6:
     resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.3:
+  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.3:
+  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.3:
+  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-9S9X9RUefzrsHZmKMbDXxweEH+YlE8JJEuat9FdvW9Qh1cw7W64jELCtWNkPBPX5En45uy28KGvA/AySqUh8CQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ARE5wZLKnTgPW7/1ftQmSi1CmkqqHo2DNmtztFhvgtOWSDfq0Cq9/9L+KnZNYSNrydBekhW3rwShduf59RoXag==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-module-imports': 7.18.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.3
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-ExUcOqpPWnliRcPqves5HJcJOvHvIIWfuS4sroBUenPuMdmW+SMHDakmtS7qOo13sVppmUijqeTv7qqGsvURpQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-block-scoping/7.18.9_@babel+core@7.19.3:
-    resolution: {integrity: sha512-5sDIJRV1KtQVEbt/EIBwGy4T01uYIo4KRB3VUqzkhrAIOGx7AoctL9+Ux88btY0zXdDyPJ9mW+bg+v+XEkGmtw==}
+  /@babel/plugin-transform-block-scoping/7.20.0_@babel+core@7.19.6:
+    resolution: {integrity: sha512-sXOohbpHZSk7GjxK9b3dKB7CfqUD5DwOH+DggKzOQ7TXYP+RCSbRykfjQmn/zq+rBjycVRtLf9pYhAaEJA786w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-classes/7.19.0_@babel+core@7.19.3:
+  /@babel/plugin-transform-classes/7.19.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-YfeEE9kCjqTS9IitkgfJuxjcEtLUHMqa8yUJ6zdz8vR7hKuo6mOy2C05P0F1tdMmDCeuyidKnlrw/iTppHcr2A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-optimise-call-expression': 7.18.6
@@ -794,122 +796,122 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-+i0ZU1bCDymKakLxn5srGHrsAPRELC2WIbzwjLhHW9SIE1cPYkLCL0NlnXMZaM1vhfgA2+M7hySk42VBvrkBRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-destructuring/7.18.13_@babel+core@7.19.3:
-    resolution: {integrity: sha512-TodpQ29XekIsex2A+YJPj5ax2plkGa8YYY6mFjCohk/IG9IY42Rtuj1FuDeemfg2ipxIFLzPeA83SIBnlhSIow==}
+  /@babel/plugin-transform-destructuring/7.20.0_@babel+core@7.19.6:
+    resolution: {integrity: sha512-1dIhvZfkDVx/zn2S1aFwlruspTt4189j7fEkH0Y0VyuDM6bQt7bD6kLcz3l4IlLG+e5OReaBz9ROAbttRtUHqA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-6S3jpun1eEbAxq7TdjLotAsl4WpQI9DxfkycRcKrjhQYzU87qpXdknpBg/e+TdcMehqGnLFi7tnFUBR02Vq6wg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-d2bmXCtZXYc59/0SanQKbiWINadaJXqtvIQIzd4+hNwkWBgyCd5F/2t1kXoUdvPMrxzPvhK6EMQRROxsue+mfw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-wzEtc0+2c88FVR34aQmiz56dxEkxr2g8DQb/KfaFa1JYXOFVsbhvAonFN6PwVWj++fKmku8NP80plJ5Et4wqHw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-builder-binary-assignment-operator-visitor': 7.18.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.3:
+  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.6:
     resolution: {integrity: sha512-yEfTRnjuskWYo0k1mHUqrVWaZwrdq8AYbfrpqULOJOaucGSp4mNMVps+YtA8byoevxS/urwU75vyhQIxcCgiBQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-WvIBoRPaJQ5yVHzcnJFor7oS5Ls0PYixlTYE63lCj2RtdQEl15M68FXQlxnG6wdraJIXRdR7KI+hQ7q/9QjrCQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-IFQDSRoTPnrAIrI5zoZv73IFeZu2dhu6irxQjY9rNjTT53VmKg9fenjvoiOWOkJ6mm4jKVPtdMzBY98Fp4Z4cg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-qSF1ihLGO3q+/g48k85tUjD033C29TNTVB2paCwZPVmOsjn9pClvYYrM2VeJpBY2bcNkuny0YUyTNRyRxJ54KA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Pra5aXsmTsOnjM3IajS8rTaLCy++nGM4v3YR4esk5PCsyg9z8NA5oQLwxzMUtDBd8F+UmVza3VxoAaWCbzH1rg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-module-transforms': 7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-module-transforms': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-Qfv2ZOWikpvmedXQJDSbxNqy7Xr/j2Y8/KfijM0iJyKkBTmWuvCA1yeH1yDM7NJhBW/2aXxeucLj6i80/LAJ/Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-module-transforms': 7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-module-transforms': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-simple-access': 7.18.6
       babel-plugin-dynamic-import-node: 2.3.3
@@ -917,15 +919,15 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-systemjs/7.19.0_@babel+core@7.19.3:
+  /@babel/plugin-transform-modules-systemjs/7.19.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-x9aiR0WXAWmOWsqcsnrzGR+ieaTMVyGyffPVA7F8cXAGt/UxefYv6uSHZLkAFChN5M5Iy1+wjE+xJuPt22H39A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-hoist-variables': 7.18.6
-      '@babel/helper-module-transforms': 7.19.0
+      '@babel/helper-module-transforms': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-identifier': 7.19.1
       babel-plugin-dynamic-import-node: 2.3.3
@@ -933,262 +935,262 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-dcegErExVeXcRqNtkRU/z8WlBLnvD4MRnHgNs3MytRO1Mn1sHRyhbcpYbVMGclAqOjdW+9cfkdZno9dFdfKLfQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-module-transforms': 7.19.0
+      '@babel/core': 7.19.6
+      '@babel/helper-module-transforms': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.19.3:
+  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-oWk9l9WItWBQYS4FgXD4Uyy5kq898lvkXpXQxoJEY1RnvPk4R/Dvu2ebXU9q8lP+rlMwUQTFf2Ok6d78ODa0kw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-DjwFA/9Iu3Z+vrAn+8pBUGcjhxKguSMlsFqeCKbhb9BAV756v0krzVK04CRDi/4aqmk8BsHb4a/gFcaA5joXRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-uvGz6zk+pZoS1aTZrOvrbj6Pp/kK2mp45t2B+bTDre2UgsZZ8EZLSJtUg7m/no0zOJUWgFONpB7Zv9W2tSaFlA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-replace-supers': 7.18.9
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.3:
+  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.6:
     resolution: {integrity: sha512-ivfbE3X2Ss+Fj8nnXvKJS6sjRG4gzwPMsP+taZC+ZzEGjAYlvENixmt1sZ5Ca6tWls+BlKSGKPJ6OOXvXCbkFg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-cYcs6qlgafTud3PAzrrRNbQtfpQ8+y/+M5tKmksS9+M1ckbH6kzY8MrexEM9mcA6JDsukE19iIRvAyYl463sMg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-poqRI2+qiSdeldcz4wTSTXBRryoq3Gc70ye7m7UD5Ww0nE29IXqMl6r7Nd15WBgRd74vloEMlShtH6CKxVzfmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       regenerator-transform: 0.15.0
     dev: true
 
-  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-oX/4MyMoypzHjFrT1CdivfKZ+XvIPMFXwwxHp/r0Ddy2Vuomt4HDFGmft1TAY2yiTKiNSsh3kjBAzcM8kSdsjA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-eCLXXJqv8okzg86ywZJbRn19YJHU4XUa55oz2wbHhaQVn/MM+XhukiT7SYqp/7o00dg52Rj51Ny+Ecw4oyoygw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.19.3:
+  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-RsuMk7j6n+r752EtzyScnWkQyuJdli6LdO5Klv8Yx0OfPVTcQkIUfS8clx5e9yHXzlnhOZF3CbQ8C2uP5j074w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
     dev: true
 
-  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-kfiDrDQ+PBsQDO85yj1icueWMfGfJFKN1KCkndygtu/C9+XUfydLC8Iv5UYJqRwy4zk8EcplRxEOeLyjq1gm6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-S8cOWfT82gTezpYOiVaGHrCbhlHgKhQt8XH5ES46P2XWmX92yisoZywf5km75wv5sYcXDUCLMmMxOLCtthDgMA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.19.3:
+  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.19.6:
     resolution: {integrity: sha512-SRfwTtF11G2aemAZWivL7PD+C9z52v9EvMqH9BuYbabyPuKUvSWks3oCg6041pT925L4zVFqaVBeECwsmlguEw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.19.3:
+  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.19.6:
     resolution: {integrity: sha512-kKAdAI+YzPgGY/ftStBFXTI1LZFju38rYThnfMykS+IXy8BVx+res7s2fxf1l8I35DV2T97ezo6+SGrXz6B3iQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.3:
+  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.6:
     resolution: {integrity: sha512-gE7A6Lt7YLnNOL3Pb9BNeZvi+d8l7tcRrG4+pwJjK9hD2xX4mEvjlQW60G9EEmfXVYRPv9VRQcyegIVHCql/AA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
     dev: true
 
-  /@babel/preset-env/7.19.3_@babel+core@7.19.3:
-    resolution: {integrity: sha512-ziye1OTc9dGFOAXSWKUqQblYHNlBOaDl8wzqf2iKXJAltYiR3hKHUKmkt+S9PppW7RQpq4fFCrwwpIDj/f5P4w==}
+  /@babel/preset-env/7.19.4_@babel+core@7.19.6:
+    resolution: {integrity: sha512-5QVOTXUdqTCjQuh2GGtdd7YEhoRXBMVGROAtsBeLGIbIz3obCBIfRMT1I3ZKkMgNzwkyCkftDXSSkHxnfVf4qg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.19.3
-      '@babel/core': 7.19.3
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.3
+      '@babel/compat-data': 7.20.0
+      '@babel/core': 7.19.6
+      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
       '@babel/helper-plugin-utils': 7.19.0
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-proposal-async-generator-functions': 7.19.1_@babel+core@7.19.3
-      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-object-rest-spread': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.3
-      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.3
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.3
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.3
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.3
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.3
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.3
-      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.3
-      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-block-scoping': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-classes': 7.19.0_@babel+core@7.19.3
-      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-destructuring': 7.18.13_@babel+core@7.19.3
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.3
-      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-modules-systemjs': 7.19.0_@babel+core@7.19.3
-      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.19.3
-      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.3
-      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.19.3
-      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.19.3
-      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.19.3
-      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.3
-      '@babel/preset-modules': 0.1.5_@babel+core@7.19.3
-      '@babel/types': 7.19.3
-      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.19.3
-      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.19.3
-      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.19.3
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-proposal-async-generator-functions': 7.19.1_@babel+core@7.19.6
+      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-object-rest-spread': 7.19.4_@babel+core@7.19.6
+      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.6
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.6
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.6
+      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.6
+      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-block-scoping': 7.20.0_@babel+core@7.19.6
+      '@babel/plugin-transform-classes': 7.19.0_@babel+core@7.19.6
+      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-transform-destructuring': 7.20.0_@babel+core@7.19.6
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.6
+      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-systemjs': 7.19.0_@babel+core@7.19.6
+      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.19.6
+      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.6
+      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.19.6
+      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.19.6
+      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/preset-modules': 0.1.5_@babel+core@7.19.6
+      '@babel/types': 7.20.0
+      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.19.6
+      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.19.6
+      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.19.6
       core-js-compat: 3.25.2
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/preset-modules/0.1.5_@babel+core@7.19.3:
+  /@babel/preset-modules/0.1.5_@babel+core@7.19.6:
     resolution: {integrity: sha512-A57th6YRG7oR3cq/yt/Y84MvGgE0eJG2F1JLhKuyG+jFxEgrd/HAMJatiFtmOiZurz+0DkrvbheCLaV5f2JfjA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
+      '@babel/core': 7.19.6
       '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.3
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.3
-      '@babel/types': 7.19.3
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.6
+      '@babel/types': 7.20.0
       esutils: 2.0.3
     dev: true
 
@@ -1204,50 +1206,50 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/parser': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/parser': 7.20.0
+      '@babel/types': 7.20.0
     dev: true
 
-  /@babel/traverse/7.19.3:
-    resolution: {integrity: sha512-qh5yf6149zhq2sgIXmwjnsvmnNQC2iw70UFjp4olxucKrWd/dvlUsBI88VSLUsnMNF7/vnOiA+nk1+yLoCqROQ==}
+  /@babel/traverse/7.20.0:
+    resolution: {integrity: sha512-5+cAXQNARgjRUK0JWu2UBwja4JLSO/rBMPJzpsKb+oBF5xlUuCfljQepS4XypBQoiigL0VQjTZy6WiONtUdScQ==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.3
+      '@babel/generator': 7.20.0
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.19.3
-      '@babel/types': 7.19.3
+      '@babel/parser': 7.20.0
+      '@babel/types': 7.20.0
       debug: 4.3.4
       globals: 11.12.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/types/7.19.3:
-    resolution: {integrity: sha512-hGCaQzIY22DJlDh9CH7NOxgKkFjBk0Cw9xDO1Xmh2151ti7wiGfQ3LauXzL4HP1fmFlTX6XjpRETTpUcv7wQLw==}
+  /@babel/types/7.20.0:
+    resolution: {integrity: sha512-Jlgt3H0TajCW164wkTOTzHkZb075tMQMULzrLUoUeKmO7eFL96GgDxf7/Axhc5CAuKE3KFyVW1p6ysKsi2oXAg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/helper-string-parser': 7.18.10
+      '@babel/helper-string-parser': 7.19.4
       '@babel/helper-validator-identifier': 7.19.1
       to-fast-properties: 2.0.0
     dev: true
 
-  /@csstools/selector-specificity/2.0.2_zurzgjffv23ohtxa7nq7nizuja:
+  /@csstools/selector-specificity/2.0.2_dvkg4kkb622mvceygg47xxdz3a:
     resolution: {integrity: sha512-IkpVW/ehM1hWKln4fCA3NzJU8KwD+kIOvPZA4cqxoJHtE21CCzjyp+Kxbu0i5I4tBNOlXPL9mjwnWlL0VEG4Fg==}
     engines: {node: ^12 || ^14 || >=16}
     peerDependencies:
       postcss: ^8.2
       postcss-selector-parser: ^6.0.10
     dependencies:
-      postcss: 8.4.17
+      postcss: 8.4.18
       postcss-selector-parser: 6.0.10
     dev: true
 
-  /@eslint/eslintrc/1.3.2:
-    resolution: {integrity: sha512-AXYd23w1S/bv3fTs3Lz0vjiYemS08jWkI3hYyS9I1ry+0f+Yjs1wm+sU0BS8qDOPrBIkp4qHYC16I8uVtpLajQ==}
+  /@eslint/eslintrc/1.3.3:
+    resolution: {integrity: sha512-uj3pT6Mg+3t39fvLrj8iuCIJ38zKO9FpGtJ4BBJebJhEwjoT+KLVNCcHT5QC9NGRIEi7fZ0ZR8YRb884auB4Lg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
       ajv: 6.12.6
@@ -1263,17 +1265,17 @@ packages:
       - supports-color
     dev: true
 
-  /@fullhuman/postcss-purgecss/4.1.3_postcss@8.4.17:
-    resolution: {integrity: sha512-jqcsyfvq09VOsMXxJMPLRF6Fhg/NNltzWKnC9qtzva+QKTxerCO4esG6je7hbnmkpZtaDyPTwMBj9bzfWorsrw==}
+  /@fullhuman/postcss-purgecss/5.0.0_postcss@8.4.18:
+    resolution: {integrity: sha512-onDS/b/2pMRzqSoj4qOs2tYFmOpaspjTAgvACIHMPiicu1ptajiBruTrjBzTKdxWdX0ldaBb7wj8nEaTLyFkJw==}
     peerDependencies:
       postcss: ^8.0.0
     dependencies:
-      postcss: 8.4.17
-      purgecss: 4.1.3
+      postcss: 8.4.18
+      purgecss: 5.0.0
     dev: true
 
-  /@humanwhocodes/config-array/0.10.5:
-    resolution: {integrity: sha512-XVVDtp+dVvRxMoxSiSfasYaG02VEe1qH5cKgMQJWhol6HwzbcqoCMJi8dAGoYAO57jhUyhI6cWuRiTcRaDaYug==}
+  /@humanwhocodes/config-array/0.11.7:
+    resolution: {integrity: sha512-kBbPWzN8oVMLb0hOUYXhmxggL/1cJE6ydvjDIGi9EnAGUyA7cLVKQg+d/Dsm+KZwx2czGHrCmMVLiyg8s5JPKw==}
     engines: {node: '>=10.10.0'}
     dependencies:
       '@humanwhocodes/object-schema': 1.2.1
@@ -1283,10 +1285,6 @@ packages:
       - supports-color
     dev: true
 
-  /@humanwhocodes/gitignore-to-minimatch/1.0.2:
-    resolution: {integrity: sha512-rSqmMJDdLFUsyxR6FMtD00nfQKKLFb1kv+qBbOVKqErvloEIJLo5bDTJTQNTYgeyp78JsA7u/NPi5jT1GR/MuA==}
-    dev: true
-
   /@humanwhocodes/module-importer/1.0.1:
     resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
     engines: {node: '>=12.22'}
@@ -1296,8 +1294,8 @@ packages:
     resolution: {integrity: sha512-ZnQMnLV4e7hDlUvw8H+U8ASL02SS2Gn6+9Ac3wGGLIe7+je2AeAOxPY+izIPJDfFDb7eDjev0Us8MO1iFRN8hA==}
     dev: true
 
-  /@hyas/images/0.2.3:
-    resolution: {integrity: sha512-PoGQ8DC3erHHS9sAlsrrGOlfqV3RgmIFYhSWcigB/7tE6tUNj4j57T4MjmlEyNcawlVsHvCaoYqPaElQn24aaQ==}
+  /@hyas/images/0.3.0:
+    resolution: {integrity: sha512-8eBZN36N8Mc5xXNXNQDua37BbAY1AEi5Lg0wXq6iSIaY2wt/h3TzuXp64uxYWRZMpPmfTY0L0qY00AWjy9qc4Q==}
     dev: true
 
   /@jridgewell/gen-mapping/0.1.1:
@@ -1526,19 +1524,19 @@ packages:
       - encoding
     dev: true
 
-  /autoprefixer/10.4.12_postcss@8.4.17:
-    resolution: {integrity: sha512-WrCGV9/b97Pa+jtwf5UGaRjgQIg7OK3D06GnoYoZNcG1Xb8Gt3EfuKjlhh9i/VtT16g6PYjZ69jdJ2g8FxSC4Q==}
+  /autoprefixer/10.4.13_postcss@8.4.18:
+    resolution: {integrity: sha512-49vKpMqcZYsJjwotvt4+h/BCjJVnhGwcLpDt5xkcaOG3eLrG/HUYLagrihYsQ+qrIBgIzX1Rw7a6L8I/ZA1Atg==}
     engines: {node: ^10 || ^12 || >=14}
     hasBin: true
     peerDependencies:
       postcss: ^8.1.0
     dependencies:
       browserslist: 4.21.4
-      caniuse-lite: 1.0.30001412
+      caniuse-lite: 1.0.30001427
       fraction.js: 4.2.0
       normalize-range: 0.1.2
       picocolors: 1.0.0
-      postcss: 8.4.17
+      postcss: 8.4.18
       postcss-value-parser: 4.2.0
     dev: true
 
@@ -1548,38 +1546,38 @@ packages:
       object.assign: 4.1.2
     dev: true
 
-  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.19.3:
+  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.19.6:
     resolution: {integrity: sha512-8hOdmFYFSZhqg2C/JgLUQ+t52o5nirNwaWM2B9LWteozwIvM14VSwdsCAUET10qT+kmySAlseadmfeeSWFCy+Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.19.3
-      '@babel/core': 7.19.3
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.3
+      '@babel/compat-data': 7.20.0
+      '@babel/core': 7.19.6
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.6
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.19.3:
+  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.19.6:
     resolution: {integrity: sha512-+eHqR6OPcBhJOGgsIar7xoAB1GcSwVUA3XjAd7HJNzOXT4wv6/H7KIdA/Nc60cvUlDbKApmqNvD1B1bzOt4nyA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.6
       core-js-compat: 3.25.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.19.3:
+  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.19.6:
     resolution: {integrity: sha512-NtQGmyQDXjQqQ+IzRkBVwEOz9lQ4zxAQZgoAYEtU9dJjnl1Oc98qnN7jcp+bE7O7aYzVpavXE3/VKXNzUbh7aw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.3
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.3
+      '@babel/core': 7.19.6
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.6
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -1627,6 +1625,12 @@ packages:
       concat-map: 0.0.1
     dev: true
 
+  /brace-expansion/2.0.1:
+    resolution: {integrity: sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==}
+    dependencies:
+      balanced-match: 1.0.2
+    dev: true
+
   /braces/3.0.2:
     resolution: {integrity: sha512-b8um+L1RzM3WDSzvhm6gIz1yfTbBt6YTlcEKAvsmqCZZFw46z626lVj9j1yEPW33H5H+lBQpZMP1k8l+78Ha0A==}
     engines: {node: '>=8'}
@@ -1639,7 +1643,7 @@ packages:
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
     dependencies:
-      caniuse-lite: 1.0.30001412
+      caniuse-lite: 1.0.30001427
       electron-to-chromium: 1.4.261
       node-releases: 2.0.6
       update-browserslist-db: 1.0.9_browserslist@4.21.4
@@ -1715,8 +1719,8 @@ packages:
     engines: {node: '>=6'}
     dev: true
 
-  /caniuse-lite/1.0.30001412:
-    resolution: {integrity: sha512-+TeEIee1gS5bYOiuf+PS/kp2mrXic37Hl66VY6EAfxasIk5fELTktK2oOezYed12H8w7jt3s512PpulQidPjwA==}
+  /caniuse-lite/1.0.30001427:
+    resolution: {integrity: sha512-lfXQ73oB9c8DP5Suxaszm+Ta2sr/4tf8+381GkIm1MLj/YdLf+rEDyDSRCzeltuyTVGm+/s18gdZ0q+Wmp8VsQ==}
     dev: true
 
   /chalk/2.4.2:
@@ -1832,6 +1836,11 @@ packages:
     engines: {node: '>= 12'}
     dev: true
 
+  /commander/9.4.1:
+    resolution: {integrity: sha512-5EEkTNyHNGFPD2H+c/dXXfQZYa/scCKasxWcXJaWnNJ99pnQN9Vnmqow+p+PlFPE63Q6mThaZws1T+HxfpgtPw==}
+    engines: {node: ^12.20.0 || >=14}
+    dev: true
+
   /compress-brotli/1.3.8:
     resolution: {integrity: sha512-lVcQsjhxhIXsuupfy9fmZUFtAIdBmXA7EGY6GBdgZ++qkM9zG4YFT8iU7FoBxzryNDMOpD1HIFHUSX4D87oqhQ==}
     engines: {node: '>= 12'}
@@ -2088,13 +2097,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.24.0:
+  /eslint-utils/3.0.0_eslint@8.26.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.24.0
+      eslint: 8.26.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -2108,15 +2117,15 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.24.0:
-    resolution: {integrity: sha512-dWFaPhGhTAiPcCgm3f6LI2MBWbogMnTJzFBbhXVRQDJPkr9pGZvVjlVfXd+vyDcWPA2Ic9L2AXPIQM0+vk/cSQ==}
+  /eslint/8.26.0:
+    resolution: {integrity: sha512-kzJkpaw1Bfwheq4VXUezFriD1GxszX6dUekM7Z3aC2o4hju+tsR/XyTC3RcoSD7jmy9VkPU3+N6YjVU2e96Oyg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@eslint/eslintrc': 1.3.2
-      '@humanwhocodes/config-array': 0.10.5
-      '@humanwhocodes/gitignore-to-minimatch': 1.0.2
+      '@eslint/eslintrc': 1.3.3
+      '@humanwhocodes/config-array': 0.11.7
       '@humanwhocodes/module-importer': 1.0.1
+      '@nodelib/fs.walk': 1.2.8
       ajv: 6.12.6
       chalk: 4.1.2
       cross-spawn: 7.0.3
@@ -2124,7 +2133,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.24.0
+      eslint-utils: 3.0.0_eslint@8.26.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -2134,12 +2143,12 @@ packages:
       find-up: 5.0.0
       glob-parent: 6.0.2
       globals: 13.15.0
-      globby: 11.1.0
       grapheme-splitter: 1.0.4
       ignore: 5.2.0
       import-fresh: 3.3.0
       imurmurhash: 0.1.4
       is-glob: 4.0.3
+      is-path-inside: 3.0.3
       js-sdsl: 4.1.4
       js-yaml: 4.1.0
       json-stable-stringify-without-jsonify: 1.0.1
@@ -2428,6 +2437,17 @@ packages:
       path-is-absolute: 1.0.1
     dev: true
 
+  /glob/8.0.3:
+    resolution: {integrity: sha512-ull455NHSHI/Y1FqGaaYFaLGkNMMJbavMrEGFXG/PGrg6y7sutWHUHrz6gy6WEBH6akM1M414dWKCNs+IhKdiQ==}
+    engines: {node: '>=12'}
+    dependencies:
+      fs.realpath: 1.0.0
+      inflight: 1.0.6
+      inherits: 2.0.4
+      minimatch: 5.1.0
+      once: 1.4.0
+    dev: true
+
   /global-modules/2.0.0:
     resolution: {integrity: sha512-NGbfmJBp9x8IxyJSd1P+otYK8vonoJactOogrVfFRIAEY1ukil8RSKDz2Yo7wh1oihl51l/r6W4epkeKJHqL8A==}
     engines: {node: '>=6'}
@@ -2735,6 +2755,11 @@ packages:
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     dev: true
 
+  /is-path-inside/3.0.3:
+    resolution: {integrity: sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==}
+    engines: {node: '>=8'}
+    dev: true
+
   /is-path-inside/4.0.0:
     resolution: {integrity: sha512-lJJV/5dYS+RcL8uQdBDW9c9uWFLLBNRyFhnAKXw5tVqLlKZ4RMGZKv+YQ/IA3OhD+RpbJa1LLFM1FQPGyIXvOA==}
     engines: {node: '>=12'}
@@ -2823,8 +2848,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /katex/0.16.2:
-    resolution: {integrity: sha512-70DJdQAyh9EMsthw3AaQlDyFf54X7nWEUIa5W+rq8XOpEk//w5Th7/8SqFqpvi/KZ2t6MHUj4f9wLmztBmAYQA==}
+  /katex/0.16.3:
+    resolution: {integrity: sha512-3EykQddareoRmbtNiNEDgl3IGjryyrp2eg/25fHDEnlHymIDi33bptkMv6K4EOC2LZCybLW/ZkEo6Le+EM9pmA==}
     hasBin: true
     dependencies:
       commander: 8.3.0
@@ -3051,6 +3076,13 @@ packages:
       brace-expansion: 1.1.11
     dev: true
 
+  /minimatch/5.1.0:
+    resolution: {integrity: sha512-9TPBGGak4nHfGZsPBohm9AWg6NoT7QTCehS3BIJABslyZbzxfV78QM2Y6+i741OPZIafFAaiiEMh5OyIrJPgtg==}
+    engines: {node: '>=10'}
+    dependencies:
+      brace-expansion: 2.0.1
+    dev: true
+
   /minimist-options/4.1.0:
     resolution: {integrity: sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==}
     engines: {node: '>= 6'}
@@ -3327,7 +3359,7 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /postcss-cli/10.0.0_postcss@8.4.17:
+  /postcss-cli/10.0.0_postcss@8.4.18:
     resolution: {integrity: sha512-Wjy/00wBBEgQqnSToznxLWDnATznokFGXsHtF/3G8glRZpz5KYlfHcBW/VMJmWAeF2x49zjgy4izjM3/Wx1dKA==}
     engines: {node: '>=14'}
     hasBin: true
@@ -3340,9 +3372,9 @@ packages:
       get-stdin: 9.0.0
       globby: 13.1.2
       picocolors: 1.0.0
-      postcss: 8.4.17
-      postcss-load-config: 4.0.1_postcss@8.4.17
-      postcss-reporter: 7.0.5_postcss@8.4.17
+      postcss: 8.4.18
+      postcss-load-config: 4.0.1_postcss@8.4.18
+      postcss-reporter: 7.0.5_postcss@8.4.18
       pretty-hrtime: 1.0.3
       read-cache: 1.0.0
       slash: 4.0.0
@@ -3351,7 +3383,7 @@ packages:
       - ts-node
     dev: true
 
-  /postcss-load-config/4.0.1_postcss@8.4.17:
+  /postcss-load-config/4.0.1_postcss@8.4.18:
     resolution: {integrity: sha512-vEJIc8RdiBRu3oRAI0ymerOn+7rPuMvRXslTvZUKZonDHFIczxztIyJ1urxM1x9JXEikvpWWTUUqal5j/8QgvA==}
     engines: {node: '>= 14'}
     peerDependencies:
@@ -3364,7 +3396,7 @@ packages:
         optional: true
     dependencies:
       lilconfig: 2.0.5
-      postcss: 8.4.17
+      postcss: 8.4.18
       yaml: 2.1.1
     dev: true
 
@@ -3372,14 +3404,14 @@ packages:
     resolution: {integrity: sha512-3sOlxmbKcSHMjlUXQZKQ06jOswE7oVkXPxmZdoB1r5l0q6gTFTQSHxNxOrCccElbW7dxNytifNEo8qidX2Vsig==}
     dev: true
 
-  /postcss-reporter/7.0.5_postcss@8.4.17:
+  /postcss-reporter/7.0.5_postcss@8.4.18:
     resolution: {integrity: sha512-glWg7VZBilooZGOFPhN9msJ3FQs19Hie7l5a/eE6WglzYqVeH3ong3ShFcp9kDWJT1g2Y/wd59cocf9XxBtkWA==}
     engines: {node: '>=10'}
     peerDependencies:
       postcss: ^8.1.0
     dependencies:
       picocolors: 1.0.0
-      postcss: 8.4.17
+      postcss: 8.4.18
       thenby: 1.3.4
     dev: true
 
@@ -3387,22 +3419,22 @@ packages:
     resolution: {integrity: sha512-HvExULSwLqHLgUy1rl3ANIqCsvMS0WHss2UOsXhXnQaZ9VCc2oBvIpXrl00IUFT5ZDITME0o6oiXeiHr2SAIfw==}
     dev: true
 
-  /postcss-safe-parser/6.0.0_postcss@8.4.17:
+  /postcss-safe-parser/6.0.0_postcss@8.4.18:
     resolution: {integrity: sha512-FARHN8pwH+WiS2OPCxJI8FuRJpTVnn6ZNFiqAM2aeW2LwTHWWmWgIyKC6cUo0L8aeKiF/14MNvnpls6R2PBeMQ==}
     engines: {node: '>=12.0'}
     peerDependencies:
       postcss: ^8.3.3
     dependencies:
-      postcss: 8.4.17
+      postcss: 8.4.18
     dev: true
 
-  /postcss-scss/4.0.4_postcss@8.4.17:
+  /postcss-scss/4.0.4_postcss@8.4.18:
     resolution: {integrity: sha512-aBBbVyzA8b3hUL0MGrpydxxXKXFZc5Eqva0Q3V9qsBOLEMsjb6w49WfpsoWzpEgcqJGW4t7Rio8WXVU9Gd8vWg==}
     engines: {node: '>=12.0'}
     peerDependencies:
       postcss: ^8.3.3
     dependencies:
-      postcss: 8.4.17
+      postcss: 8.4.18
     dev: true
 
   /postcss-selector-parser/6.0.10:
@@ -3417,8 +3449,8 @@ packages:
     resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
     dev: true
 
-  /postcss/8.4.17:
-    resolution: {integrity: sha512-UNxNOLQydcOFi41yHNMcKRZ39NeXlr8AxGuZJsdub8vIb12fHzcq37DTU/QtbI6WLxNg2gF9Z+8qtRwTj1UI1Q==}
+  /postcss/8.4.18:
+    resolution: {integrity: sha512-Wi8mWhncLJm11GATDaQKobXSNEYGUHeQLiQqDFG1qQ5UTDPTEvKw0Xt5NsTpktGTwLps3ByrWsBrG0rB8YQ9oA==}
     engines: {node: ^10 || ^12 || >=14}
     dependencies:
       nanoid: 3.3.4
@@ -3460,13 +3492,13 @@ packages:
       scss-parser: 1.0.3
     dev: true
 
-  /purgecss/4.1.3:
-    resolution: {integrity: sha512-99cKy4s+VZoXnPxaoM23e5ABcP851nC2y2GROkkjS8eJaJtlciGavd7iYAw2V84WeBqggZ12l8ef44G99HmTaw==}
+  /purgecss/5.0.0:
+    resolution: {integrity: sha512-RAnuxrGuVyLLTr8uMbKaxDRGWMgK5CCYDfRyUNNcaz5P3kGgD2b7ymQGYEyo2ST7Tl/ScwFgf5l3slKMxHSbrw==}
     hasBin: true
     dependencies:
-      commander: 8.3.0
-      glob: 7.2.3
-      postcss: 8.4.17
+      commander: 9.4.1
+      glob: 8.0.3
+      postcss: 8.4.18
       postcss-selector-parser: 6.0.10
     dev: true
 
@@ -3849,49 +3881,52 @@ packages:
     resolution: {integrity: sha512-Dj1Okke1C3uKKwQcetra4jSuk0DqbzbYtXipzFlFMZtowbF1x7BKJwB9AayVMyFARvU8EDrZdcax4At/452cAg==}
     dev: true
 
-  /stylelint-config-recommended-scss/6.0.0_7mm2245zw6jpoub3zc2ef5m2tq:
-    resolution: {integrity: sha512-6QOe2/OzXV2AP5FE12A7+qtKdZik7Saf42SMMl84ksVBBPpTdrV+9HaCbPYiRMiwELY9hXCVdH4wlJ+YJb5eig==}
+  /stylelint-config-recommended-scss/8.0.0_mnalcscwzozovshmobozjae4pq:
+    resolution: {integrity: sha512-BxjxEzRaZoQb7Iinc3p92GS6zRdRAkIuEu2ZFLTxJK2e1AIcCb5B5MXY9KOXdGTnYFZ+KKx6R4Fv9zU6CtMYPQ==}
     peerDependencies:
-      stylelint: ^14.4.0
+      postcss: ^8.3.3
+      stylelint: ^14.10.0
+    peerDependenciesMeta:
+      postcss:
+        optional: true
     dependencies:
-      postcss-scss: 4.0.4_postcss@8.4.17
-      stylelint: 14.13.0
-      stylelint-config-recommended: 7.0.0_stylelint@14.13.0
-      stylelint-scss: 4.2.0_stylelint@14.13.0
+      postcss: 8.4.18
+      postcss-scss: 4.0.4_postcss@8.4.18
+      stylelint: 14.14.0
+      stylelint-config-recommended: 9.0.0_stylelint@14.14.0
+      stylelint-scss: 4.2.0_stylelint@14.14.0
+    dev: true
+
+  /stylelint-config-recommended/9.0.0_stylelint@14.14.0:
+    resolution: {integrity: sha512-9YQSrJq4NvvRuTbzDsWX3rrFOzOlYBmZP+o513BJN/yfEmGSr0AxdvrWs0P/ilSpVV/wisamAHu5XSk8Rcf4CQ==}
+    peerDependencies:
+      stylelint: ^14.10.0
+    dependencies:
+      stylelint: 14.14.0
+    dev: true
+
+  /stylelint-config-standard-scss/6.0.0_mnalcscwzozovshmobozjae4pq:
+    resolution: {integrity: sha512-aAWcQgiqsXg6Jyhq/Q/HPbVB7PHf4v/wdyFSDun/qlL/SPxtEcVeGMvJLzRVRaNf3tp3D93QP6N9QKwJa1L0Kw==}
+    peerDependencies:
+      stylelint: ^14.14.0
+    dependencies:
+      stylelint: 14.14.0
+      stylelint-config-recommended-scss: 8.0.0_mnalcscwzozovshmobozjae4pq
+      stylelint-config-standard: 29.0.0_stylelint@14.14.0
     transitivePeerDependencies:
       - postcss
     dev: true
 
-  /stylelint-config-recommended/7.0.0_stylelint@14.13.0:
-    resolution: {integrity: sha512-yGn84Bf/q41J4luis1AZ95gj0EQwRX8lWmGmBwkwBNSkpGSpl66XcPTulxGa/Z91aPoNGuIGBmFkcM1MejMo9Q==}
+  /stylelint-config-standard/29.0.0_stylelint@14.14.0:
+    resolution: {integrity: sha512-uy8tZLbfq6ZrXy4JKu3W+7lYLgRQBxYTUUB88vPgQ+ZzAxdrvcaSUW9hOMNLYBnwH+9Kkj19M2DHdZ4gKwI7tg==}
     peerDependencies:
-      stylelint: ^14.4.0
+      stylelint: ^14.14.0
     dependencies:
-      stylelint: 14.13.0
+      stylelint: 14.14.0
+      stylelint-config-recommended: 9.0.0_stylelint@14.14.0
     dev: true
 
-  /stylelint-config-standard-scss/4.0.0_7mm2245zw6jpoub3zc2ef5m2tq:
-    resolution: {integrity: sha512-xizu8PTEyB6zYXBiVg6VtvUYn9m57x+6ZtaOdaxsfpbe5eagLPGNlbYnKfm/CfN69ArUpnwR6LjgsTHzlGbtXQ==}
-    peerDependencies:
-      stylelint: ^14.4.0
-    dependencies:
-      stylelint: 14.13.0
-      stylelint-config-recommended-scss: 6.0.0_7mm2245zw6jpoub3zc2ef5m2tq
-      stylelint-config-standard: 25.0.0_stylelint@14.13.0
-    transitivePeerDependencies:
-      - postcss
-    dev: true
-
-  /stylelint-config-standard/25.0.0_stylelint@14.13.0:
-    resolution: {integrity: sha512-21HnP3VSpaT1wFjFvv9VjvOGDtAviv47uTp3uFmzcN+3Lt+RYRv6oAplLaV51Kf792JSxJ6svCJh/G18E9VnCA==}
-    peerDependencies:
-      stylelint: ^14.4.0
-    dependencies:
-      stylelint: 14.13.0
-      stylelint-config-recommended: 7.0.0_stylelint@14.13.0
-    dev: true
-
-  /stylelint-scss/4.2.0_stylelint@14.13.0:
+  /stylelint-scss/4.2.0_stylelint@14.14.0:
     resolution: {integrity: sha512-HHHMVKJJ5RM9pPIbgJ/XA67h9H0407G68Rm69H4fzFbFkyDMcTV1Byep3qdze5+fJ3c0U7mJrbj6S0Fg072uZA==}
     peerDependencies:
       stylelint: ^14.5.1
@@ -3901,15 +3936,15 @@ packages:
       postcss-resolve-nested-selector: 0.1.1
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
-      stylelint: 14.13.0
+      stylelint: 14.14.0
     dev: true
 
-  /stylelint/14.13.0:
-    resolution: {integrity: sha512-NJSAdloiAB/jgVJKxMR90mWlctvmeBFGFVUvyKngi9+j/qPSJ5ZB+u8jOmGbLTnS7OHrII9NFGehPRyar8U5vg==}
+  /stylelint/14.14.0:
+    resolution: {integrity: sha512-yUI+4xXfPHVnueYddSQ/e1GuEA/2wVhWQbGj16AmWLtQJtn28lVxfS4b0CsWyVRPgd3Auzi0NXOthIEUhtQmmA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@csstools/selector-specificity': 2.0.2_zurzgjffv23ohtxa7nq7nizuja
+      '@csstools/selector-specificity': 2.0.2_dvkg4kkb622mvceygg47xxdz3a
       balanced-match: 2.0.0
       colord: 2.9.3
       cosmiconfig: 7.0.1
@@ -3932,10 +3967,10 @@ packages:
       micromatch: 4.0.5
       normalize-path: 3.0.0
       picocolors: 1.0.0
-      postcss: 8.4.17
+      postcss: 8.4.18
       postcss-media-query-parser: 0.2.3
       postcss-resolve-nested-selector: 0.1.1
-      postcss-safe-parser: 6.0.0_postcss@8.4.17
+      postcss-safe-parser: 6.0.0_postcss@8.4.18
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
       resolve-from: 5.0.0

From 6b2f713e104e99b19223203fad976e41d086ed80 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Mon, 31 Oct 2022 11:52:14 +1100
Subject: [PATCH 223/263] fix(configuration): certificate_chains can't be
 defined as secrets (#4302)

This fixes an issue where certificate_chain values can't be defined as secrets. While not expressly needed for certificates, it's more convenient and less prone to error than defining a environment variable with the contents.
---
 docs/content/en/configuration/methods/secrets.md | 6 ++++++
 docs/data/configkeys.json                        | 2 +-
 internal/configuration/const.go                  | 2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/docs/content/en/configuration/methods/secrets.md b/docs/content/en/configuration/methods/secrets.md
index c8094790a..25802b9bb 100644
--- a/docs/content/en/configuration/methods/secrets.md
+++ b/docs/content/en/configuration/methods/secrets.md
@@ -60,18 +60,24 @@ other configuration using the environment but instead of loading a file the valu
 [duo_api.secret_key]: ../second-factor/duo.md#secret_key
 [session.secret]: ../session/introduction.md#secret
 [session.redis.password]: ../session/redis.md#password
+[session.redis.tls.certificate_chain]: ../session/redis.md#tls
 [session.redis.tls.private_key]: ../session/redis.md#tls
 [session.redis.high_availability.sentinel_password]: ../session/redis.md#sentinel_password
 [storage.encryption_key]: ../storage/introduction.md#encryption_key
 [storage.mysql.password]: ../storage/mysql.md#password
+[storage.mysql.tls.certificate_chain]: ../storage/mysql.md#tls
 [storage.mysql.tls.private_key]: ../storage/mysql.md#tls
 [storage.postgres.password]: ../storage/postgres.md#password
+[storage.postgres.tls.certificate_chain]: ../storage/postgres.md#tls
 [storage.postgres.tls.private_key]: ../storage/postgres.md#tls
 [storage.postgres.ssl.key]: ../storage/postgres.md
 [notifier.smtp.password]: ../notifications/smtp.md#password
+[notifier.smtp.tls.certificate_chain]: ../notifications/smtp.md#tls
 [notifier.smtp.tls.private_key]: ../notifications/smtp.md#tls
 [authentication_backend.ldap.password]: ../first-factor/ldap.md#password
+[authentication_backend.ldap.tls.certificate_chain]: ../first-factor/ldap.md#tls
 [authentication_backend.ldap.tls.private_key]: ../first-factor/ldap.md#tls
+[identity_providers.oidc.issuer_certificate_chain]: ../identity-providers/open-id-connect.md#issuer_certificate_chain
 [identity_providers.oidc.issuer_private_key]: ../identity-providers/open-id-connect.md#issuer_private_key
 [identity_providers.oidc.hmac_secret]: ../identity-providers/open-id-connect.md#hmac_secret
 
diff --git a/docs/data/configkeys.json b/docs/data/configkeys.json
index ea96acbf1..20377f12a 100644
--- a/docs/data/configkeys.json
+++ b/docs/data/configkeys.json
@@ -1 +1 @@
-[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.maximum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.tls.private_key","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_PRIVATE_KEY_FILE"},{"path":"authentication_backend.ldap.tls.certificate_chain","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_CERTIFICATE_CHAIN"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.maximum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MAXIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.tls.private_key","secret":true,"env":"AUTHELIA_SESSION_REDIS_TLS_PRIVATE_KEY_FILE"},{"path":"session.redis.tls.certificate_chain","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_CERTIFICATE_CHAIN"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.mysql.tls.minimum_version","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_MINIMUM_VERSION"},{"path":"storage.mysql.tls.maximum_version","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_MAXIMUM_VERSION"},{"path":"storage.mysql.tls.skip_verify","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_SKIP_VERIFY"},{"path":"storage.mysql.tls.server_name","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_SERVER_NAME"},{"path":"storage.mysql.tls.private_key","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_TLS_PRIVATE_KEY_FILE"},{"path":"storage.mysql.tls.certificate_chain","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_CERTIFICATE_CHAIN"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.tls.minimum_version","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_MINIMUM_VERSION"},{"path":"storage.postgres.tls.maximum_version","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_MAXIMUM_VERSION"},{"path":"storage.postgres.tls.skip_verify","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_SKIP_VERIFY"},{"path":"storage.postgres.tls.server_name","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_SERVER_NAME"},{"path":"storage.postgres.tls.private_key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_PRIVATE_KEY_FILE"},{"path":"storage.postgres.tls.certificate_chain","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_CERTIFICATE_CHAIN"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.maximum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MAXIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.smtp.tls.private_key","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_PRIVATE_KEY_FILE"},{"path":"notifier.smtp.tls.certificate_chain","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_CERTIFICATE_CHAIN"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
+[{"path":"theme","secret":false,"env":"AUTHELIA_THEME"},{"path":"certificates_directory","secret":false,"env":"AUTHELIA_CERTIFICATES_DIRECTORY"},{"path":"jwt_secret","secret":true,"env":"AUTHELIA_JWT_SECRET_FILE"},{"path":"default_redirection_url","secret":false,"env":"AUTHELIA_DEFAULT_REDIRECTION_URL"},{"path":"default_2fa_method","secret":false,"env":"AUTHELIA_DEFAULT_2FA_METHOD"},{"path":"log.level","secret":false,"env":"AUTHELIA_LOG_LEVEL"},{"path":"log.format","secret":false,"env":"AUTHELIA_LOG_FORMAT"},{"path":"log.file_path","secret":false,"env":"AUTHELIA_LOG_FILE_PATH"},{"path":"log.keep_stdout","secret":false,"env":"AUTHELIA_LOG_KEEP_STDOUT"},{"path":"identity_providers.oidc.hmac_secret","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE"},{"path":"identity_providers.oidc.issuer_certificate_chain","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_CERTIFICATE_CHAIN_FILE"},{"path":"identity_providers.oidc.issuer_private_key","secret":true,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE"},{"path":"identity_providers.oidc.access_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ACCESS_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.authorize_code_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_AUTHORIZE_CODE_LIFESPAN"},{"path":"identity_providers.oidc.id_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ID_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.refresh_token_lifespan","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_REFRESH_TOKEN_LIFESPAN"},{"path":"identity_providers.oidc.enable_client_debug_messages","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_CLIENT_DEBUG_MESSAGES"},{"path":"identity_providers.oidc.minimum_parameter_entropy","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_MINIMUM_PARAMETER_ENTROPY"},{"path":"identity_providers.oidc.enforce_pkce","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENFORCE_PKCE"},{"path":"identity_providers.oidc.enable_pkce_plain_challenge","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_ENABLE_PKCE_PLAIN_CHALLENGE"},{"path":"identity_providers.oidc.cors.endpoints","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ENDPOINTS"},{"path":"identity_providers.oidc.cors.allowed_origins","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS"},{"path":"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CORS_ALLOWED_ORIGINS_FROM_CLIENT_REDIRECT_URIS"},{"path":"identity_providers.oidc.clients","secret":false,"env":"AUTHELIA_IDENTITY_PROVIDERS_OIDC_CLIENTS"},{"path":"authentication_backend.password_reset.disable","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE"},{"path":"authentication_backend.password_reset.custom_url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_CUSTOM_URL"},{"path":"authentication_backend.refresh_interval","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL"},{"path":"authentication_backend.file.path","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH"},{"path":"authentication_backend.file.watch","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_WATCH"},{"path":"authentication_backend.file.password.algorithm","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ALGORITHM"},{"path":"authentication_backend.file.password.argon2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_VARIANT"},{"path":"authentication_backend.file.password.argon2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_ITERATIONS"},{"path":"authentication_backend.file.password.argon2.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_MEMORY"},{"path":"authentication_backend.file.password.argon2.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_PARALLELISM"},{"path":"authentication_backend.file.password.argon2.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_KEY_LENGTH"},{"path":"authentication_backend.file.password.argon2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ARGON2_SALT_LENGTH"},{"path":"authentication_backend.file.password.sha2crypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_VARIANT"},{"path":"authentication_backend.file.password.sha2crypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.sha2crypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SHA2CRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.pbkdf2.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_VARIANT"},{"path":"authentication_backend.file.password.pbkdf2.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_ITERATIONS"},{"path":"authentication_backend.file.password.pbkdf2.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PBKDF2_SALT_LENGTH"},{"path":"authentication_backend.file.password.bcrypt.variant","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_VARIANT"},{"path":"authentication_backend.file.password.bcrypt.cost","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_BCRYPT_COST"},{"path":"authentication_backend.file.password.scrypt.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_ITERATIONS"},{"path":"authentication_backend.file.password.scrypt.block_size","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_BLOCK_SIZE"},{"path":"authentication_backend.file.password.scrypt.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_PARALLELISM"},{"path":"authentication_backend.file.password.scrypt.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_KEY_LENGTH"},{"path":"authentication_backend.file.password.scrypt.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SCRYPT_SALT_LENGTH"},{"path":"authentication_backend.file.password.iterations","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_ITERATIONS"},{"path":"authentication_backend.file.password.memory","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_MEMORY"},{"path":"authentication_backend.file.password.parallelism","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_PARALLELISM"},{"path":"authentication_backend.file.password.key_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_KEY_LENGTH"},{"path":"authentication_backend.file.password.salt_length","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_PASSWORD_SALT_LENGTH"},{"path":"authentication_backend.file.search.email","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_EMAIL"},{"path":"authentication_backend.file.search.case_insensitive","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_FILE_SEARCH_CASE_INSENSITIVE"},{"path":"authentication_backend.ldap.implementation","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION"},{"path":"authentication_backend.ldap.url","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL"},{"path":"authentication_backend.ldap.timeout","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT"},{"path":"authentication_backend.ldap.start_tls","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS"},{"path":"authentication_backend.ldap.tls.minimum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MINIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.maximum_version","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_MAXIMUM_VERSION"},{"path":"authentication_backend.ldap.tls.skip_verify","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SKIP_VERIFY"},{"path":"authentication_backend.ldap.tls.server_name","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_SERVER_NAME"},{"path":"authentication_backend.ldap.tls.private_key","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_PRIVATE_KEY_FILE"},{"path":"authentication_backend.ldap.tls.certificate_chain","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TLS_CERTIFICATE_CHAIN_FILE"},{"path":"authentication_backend.ldap.base_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN"},{"path":"authentication_backend.ldap.additional_users_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN"},{"path":"authentication_backend.ldap.users_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER"},{"path":"authentication_backend.ldap.additional_groups_dn","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN"},{"path":"authentication_backend.ldap.groups_filter","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER"},{"path":"authentication_backend.ldap.group_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.username_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.mail_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE"},{"path":"authentication_backend.ldap.display_name_attribute","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE"},{"path":"authentication_backend.ldap.permit_referrals","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_REFERRALS"},{"path":"authentication_backend.ldap.permit_unauthenticated_bind","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_UNAUTHENTICATED_BIND"},{"path":"authentication_backend.ldap.permit_feature_detection_failure","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PERMIT_FEATURE_DETECTION_FAILURE"},{"path":"authentication_backend.ldap.user","secret":false,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER"},{"path":"authentication_backend.ldap.password","secret":true,"env":"AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE"},{"path":"session.name","secret":false,"env":"AUTHELIA_SESSION_NAME"},{"path":"session.domain","secret":false,"env":"AUTHELIA_SESSION_DOMAIN"},{"path":"session.same_site","secret":false,"env":"AUTHELIA_SESSION_SAME_SITE"},{"path":"session.secret","secret":true,"env":"AUTHELIA_SESSION_SECRET_FILE"},{"path":"session.expiration","secret":false,"env":"AUTHELIA_SESSION_EXPIRATION"},{"path":"session.inactivity","secret":false,"env":"AUTHELIA_SESSION_INACTIVITY"},{"path":"session.remember_me_duration","secret":false,"env":"AUTHELIA_SESSION_REMEMBER_ME_DURATION"},{"path":"session.redis.host","secret":false,"env":"AUTHELIA_SESSION_REDIS_HOST"},{"path":"session.redis.port","secret":false,"env":"AUTHELIA_SESSION_REDIS_PORT"},{"path":"session.redis.username","secret":false,"env":"AUTHELIA_SESSION_REDIS_USERNAME"},{"path":"session.redis.password","secret":true,"env":"AUTHELIA_SESSION_REDIS_PASSWORD_FILE"},{"path":"session.redis.database_index","secret":false,"env":"AUTHELIA_SESSION_REDIS_DATABASE_INDEX"},{"path":"session.redis.maximum_active_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MAXIMUM_ACTIVE_CONNECTIONS"},{"path":"session.redis.minimum_idle_connections","secret":false,"env":"AUTHELIA_SESSION_REDIS_MINIMUM_IDLE_CONNECTIONS"},{"path":"session.redis.tls.minimum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MINIMUM_VERSION"},{"path":"session.redis.tls.maximum_version","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_MAXIMUM_VERSION"},{"path":"session.redis.tls.skip_verify","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SKIP_VERIFY"},{"path":"session.redis.tls.server_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_TLS_SERVER_NAME"},{"path":"session.redis.tls.private_key","secret":true,"env":"AUTHELIA_SESSION_REDIS_TLS_PRIVATE_KEY_FILE"},{"path":"session.redis.tls.certificate_chain","secret":true,"env":"AUTHELIA_SESSION_REDIS_TLS_CERTIFICATE_CHAIN_FILE"},{"path":"session.redis.high_availability.sentinel_name","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_NAME"},{"path":"session.redis.high_availability.sentinel_username","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_USERNAME"},{"path":"session.redis.high_availability.sentinel_password","secret":true,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE"},{"path":"session.redis.high_availability.nodes","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_NODES"},{"path":"session.redis.high_availability.route_by_latency","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_BY_LATENCY"},{"path":"session.redis.high_availability.route_randomly","secret":false,"env":"AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_ROUTE_RANDOMLY"},{"path":"totp.disable","secret":false,"env":"AUTHELIA_TOTP_DISABLE"},{"path":"totp.issuer","secret":false,"env":"AUTHELIA_TOTP_ISSUER"},{"path":"totp.algorithm","secret":false,"env":"AUTHELIA_TOTP_ALGORITHM"},{"path":"totp.digits","secret":false,"env":"AUTHELIA_TOTP_DIGITS"},{"path":"totp.period","secret":false,"env":"AUTHELIA_TOTP_PERIOD"},{"path":"totp.skew","secret":false,"env":"AUTHELIA_TOTP_SKEW"},{"path":"totp.secret_size","secret":false,"env":"AUTHELIA_TOTP_SECRET_SIZE"},{"path":"duo_api.disable","secret":false,"env":"AUTHELIA_DUO_API_DISABLE"},{"path":"duo_api.hostname","secret":false,"env":"AUTHELIA_DUO_API_HOSTNAME"},{"path":"duo_api.integration_key","secret":true,"env":"AUTHELIA_DUO_API_INTEGRATION_KEY_FILE"},{"path":"duo_api.secret_key","secret":true,"env":"AUTHELIA_DUO_API_SECRET_KEY_FILE"},{"path":"duo_api.enable_self_enrollment","secret":false,"env":"AUTHELIA_DUO_API_ENABLE_SELF_ENROLLMENT"},{"path":"access_control.default_policy","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY"},{"path":"access_control.networks","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_NETWORKS"},{"path":"access_control.rules","secret":false,"env":"AUTHELIA_ACCESS_CONTROL_RULES"},{"path":"ntp.address","secret":false,"env":"AUTHELIA_NTP_ADDRESS"},{"path":"ntp.version","secret":false,"env":"AUTHELIA_NTP_VERSION"},{"path":"ntp.max_desync","secret":false,"env":"AUTHELIA_NTP_MAX_DESYNC"},{"path":"ntp.disable_startup_check","secret":false,"env":"AUTHELIA_NTP_DISABLE_STARTUP_CHECK"},{"path":"ntp.disable_failure","secret":false,"env":"AUTHELIA_NTP_DISABLE_FAILURE"},{"path":"regulation.max_retries","secret":false,"env":"AUTHELIA_REGULATION_MAX_RETRIES"},{"path":"regulation.find_time","secret":false,"env":"AUTHELIA_REGULATION_FIND_TIME"},{"path":"regulation.ban_time","secret":false,"env":"AUTHELIA_REGULATION_BAN_TIME"},{"path":"storage.local.path","secret":false,"env":"AUTHELIA_STORAGE_LOCAL_PATH"},{"path":"storage.mysql.host","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_HOST"},{"path":"storage.mysql.port","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_PORT"},{"path":"storage.mysql.database","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_DATABASE"},{"path":"storage.mysql.username","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_USERNAME"},{"path":"storage.mysql.password","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE"},{"path":"storage.mysql.timeout","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TIMEOUT"},{"path":"storage.mysql.tls.minimum_version","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_MINIMUM_VERSION"},{"path":"storage.mysql.tls.maximum_version","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_MAXIMUM_VERSION"},{"path":"storage.mysql.tls.skip_verify","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_SKIP_VERIFY"},{"path":"storage.mysql.tls.server_name","secret":false,"env":"AUTHELIA_STORAGE_MYSQL_TLS_SERVER_NAME"},{"path":"storage.mysql.tls.private_key","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_TLS_PRIVATE_KEY_FILE"},{"path":"storage.mysql.tls.certificate_chain","secret":true,"env":"AUTHELIA_STORAGE_MYSQL_TLS_CERTIFICATE_CHAIN_FILE"},{"path":"storage.postgres.host","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_HOST"},{"path":"storage.postgres.port","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_PORT"},{"path":"storage.postgres.database","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_DATABASE"},{"path":"storage.postgres.username","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_USERNAME"},{"path":"storage.postgres.password","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE"},{"path":"storage.postgres.timeout","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TIMEOUT"},{"path":"storage.postgres.schema","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SCHEMA"},{"path":"storage.postgres.tls.minimum_version","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_MINIMUM_VERSION"},{"path":"storage.postgres.tls.maximum_version","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_MAXIMUM_VERSION"},{"path":"storage.postgres.tls.skip_verify","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_SKIP_VERIFY"},{"path":"storage.postgres.tls.server_name","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_SERVER_NAME"},{"path":"storage.postgres.tls.private_key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_PRIVATE_KEY_FILE"},{"path":"storage.postgres.tls.certificate_chain","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_TLS_CERTIFICATE_CHAIN_FILE"},{"path":"storage.postgres.ssl.mode","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_MODE"},{"path":"storage.postgres.ssl.root_certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_ROOT_CERTIFICATE"},{"path":"storage.postgres.ssl.certificate","secret":false,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_CERTIFICATE"},{"path":"storage.postgres.ssl.key","secret":true,"env":"AUTHELIA_STORAGE_POSTGRES_SSL_KEY_FILE"},{"path":"storage.encryption_key","secret":true,"env":"AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE"},{"path":"notifier.disable_startup_check","secret":false,"env":"AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK"},{"path":"notifier.filesystem.filename","secret":false,"env":"AUTHELIA_NOTIFIER_FILESYSTEM_FILENAME"},{"path":"notifier.smtp.host","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_HOST"},{"path":"notifier.smtp.port","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_PORT"},{"path":"notifier.smtp.timeout","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TIMEOUT"},{"path":"notifier.smtp.username","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_USERNAME"},{"path":"notifier.smtp.password","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE"},{"path":"notifier.smtp.identifier","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_IDENTIFIER"},{"path":"notifier.smtp.sender","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SENDER"},{"path":"notifier.smtp.subject","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_SUBJECT"},{"path":"notifier.smtp.startup_check_address","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_STARTUP_CHECK_ADDRESS"},{"path":"notifier.smtp.disable_require_tls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS"},{"path":"notifier.smtp.disable_html_emails","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_HTML_EMAILS"},{"path":"notifier.smtp.disable_starttls","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_DISABLE_STARTTLS"},{"path":"notifier.smtp.tls.minimum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MINIMUM_VERSION"},{"path":"notifier.smtp.tls.maximum_version","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_MAXIMUM_VERSION"},{"path":"notifier.smtp.tls.skip_verify","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SKIP_VERIFY"},{"path":"notifier.smtp.tls.server_name","secret":false,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME"},{"path":"notifier.smtp.tls.private_key","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_PRIVATE_KEY_FILE"},{"path":"notifier.smtp.tls.certificate_chain","secret":true,"env":"AUTHELIA_NOTIFIER_SMTP_TLS_CERTIFICATE_CHAIN_FILE"},{"path":"notifier.template_path","secret":false,"env":"AUTHELIA_NOTIFIER_TEMPLATE_PATH"},{"path":"server.host","secret":false,"env":"AUTHELIA_SERVER_HOST"},{"path":"server.port","secret":false,"env":"AUTHELIA_SERVER_PORT"},{"path":"server.path","secret":false,"env":"AUTHELIA_SERVER_PATH"},{"path":"server.asset_path","secret":false,"env":"AUTHELIA_SERVER_ASSET_PATH"},{"path":"server.enable_pprof","secret":false,"env":"AUTHELIA_SERVER_ENABLE_PPROF"},{"path":"server.enable_expvars","secret":false,"env":"AUTHELIA_SERVER_ENABLE_EXPVARS"},{"path":"server.disable_healthcheck","secret":false,"env":"AUTHELIA_SERVER_DISABLE_HEALTHCHECK"},{"path":"server.tls.certificate","secret":false,"env":"AUTHELIA_SERVER_TLS_CERTIFICATE"},{"path":"server.tls.key","secret":true,"env":"AUTHELIA_SERVER_TLS_KEY_FILE"},{"path":"server.tls.client_certificates","secret":false,"env":"AUTHELIA_SERVER_TLS_CLIENT_CERTIFICATES"},{"path":"server.headers.csp_template","secret":false,"env":"AUTHELIA_SERVER_HEADERS_CSP_TEMPLATE"},{"path":"server.buffers.read","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_READ"},{"path":"server.buffers.write","secret":false,"env":"AUTHELIA_SERVER_BUFFERS_WRITE"},{"path":"server.timeouts.read","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_READ"},{"path":"server.timeouts.write","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_WRITE"},{"path":"server.timeouts.idle","secret":false,"env":"AUTHELIA_SERVER_TIMEOUTS_IDLE"},{"path":"telemetry.metrics.enabled","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ENABLED"},{"path":"telemetry.metrics.address","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_ADDRESS"},{"path":"telemetry.metrics.buffers.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_READ"},{"path":"telemetry.metrics.buffers.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_BUFFERS_WRITE"},{"path":"telemetry.metrics.timeouts.read","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_READ"},{"path":"telemetry.metrics.timeouts.write","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_WRITE"},{"path":"telemetry.metrics.timeouts.idle","secret":false,"env":"AUTHELIA_TELEMETRY_METRICS_TIMEOUTS_IDLE"},{"path":"webauthn.disable","secret":false,"env":"AUTHELIA_WEBAUTHN_DISABLE"},{"path":"webauthn.display_name","secret":false,"env":"AUTHELIA_WEBAUTHN_DISPLAY_NAME"},{"path":"webauthn.attestation_conveyance_preference","secret":false,"env":"AUTHELIA_WEBAUTHN_ATTESTATION_CONVEYANCE_PREFERENCE"},{"path":"webauthn.user_verification","secret":false,"env":"AUTHELIA_WEBAUTHN_USER_VERIFICATION"},{"path":"webauthn.timeout","secret":false,"env":"AUTHELIA_WEBAUTHN_TIMEOUT"},{"path":"password_policy.standard.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_ENABLED"},{"path":"password_policy.standard.min_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MIN_LENGTH"},{"path":"password_policy.standard.max_length","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_MAX_LENGTH"},{"path":"password_policy.standard.require_uppercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_UPPERCASE"},{"path":"password_policy.standard.require_lowercase","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_LOWERCASE"},{"path":"password_policy.standard.require_number","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_NUMBER"},{"path":"password_policy.standard.require_special","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_STANDARD_REQUIRE_SPECIAL"},{"path":"password_policy.zxcvbn.enabled","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_ENABLED"},{"path":"password_policy.zxcvbn.min_score","secret":false,"env":"AUTHELIA_PASSWORD_POLICY_ZXCVBN_MIN_SCORE"}]
\ No newline at end of file
diff --git a/internal/configuration/const.go b/internal/configuration/const.go
index 2f42563e0..a51fb8cbc 100644
--- a/internal/configuration/const.go
+++ b/internal/configuration/const.go
@@ -36,4 +36,4 @@ const (
 	errFmtDecodeHookCouldNotParseEmptyValue = "could not decode an empty value to a %s%s: %w"
 )
 
-var secretSuffixes = []string{"key", "secret", "password", "token"}
+var secretSuffixes = []string{"key", "secret", "password", "token", "certificate_chain"}

From 005c33fe74211c0195399350829a6cc413e52dd1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 31 Oct 2022 07:46:30 +0000
Subject: [PATCH 224/263] build(deps): update dependency @types/node to
 v18.11.8 (#4304)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 82 +++++++++++++++++++++++-----------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/web/package.json b/web/package.json
index 034108bdb..9c7becd85 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.0",
-    "@types/node": "18.11.7",
+    "@types/node": "18.11.8",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.24",
     "@types/react-dom": "18.0.8",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index ae198d412..de263fd19 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.2.0
-  '@types/node': 18.11.7
+  '@types/node': 18.11.8
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.0
-  '@types/node': 18.11.7
+  '@types/node': 18.11.8
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.26.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
-  jest: 29.2.2_@types+node@18.11.7
+  jest: 29.2.2_@types+node@18.11.8
   jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.2
@@ -2580,7 +2580,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2592,7 +2592,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2613,14 +2613,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.2_@types+node@18.11.7
+      jest-config: 29.2.2_@types+node@18.11.8
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2647,7 +2647,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       jest-mock: 29.2.2
     dev: true
 
@@ -2681,7 +2681,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       jest-message-util: 29.2.1
       jest-mock: 29.2.2
       jest-util: 29.2.1
@@ -2714,7 +2714,7 @@ packages:
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2834,7 +2834,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2846,7 +2846,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2858,7 +2858,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3560,7 +3560,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3589,7 +3589,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3610,8 +3610,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.7:
-    resolution: {integrity: sha512-LhFTglglr63mNXUSRYD8A+ZAIu5sFqNJ4Y2fPuY7UlrySJH87rRRlhtVmMHplmfk5WkoJGmDjE9oiTfyX94CpQ==}
+  /@types/node/18.11.8:
+    resolution: {integrity: sha512-uGwPWlE0Hj972KkHtCDVwZ8O39GmyjfMane1Z3GUBGGnkZ2USDq7SxLpVIiIHpweY9DS0QTDH0Nw7RNBsAAZ5A==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5550,7 +5550,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
-      jest: 29.2.2_@types+node@18.11.7
+      jest: 29.2.2_@types+node@18.11.8
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6768,7 +6768,7 @@ packages:
       '@jest/expect': 29.2.2
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6787,7 +6787,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.2_@types+node@18.11.7:
+  /jest-cli/29.2.2_@types+node@18.11.8:
     resolution: {integrity: sha512-R45ygnnb2CQOfd8rTPFR+/fls0d+1zXS6JPYTBBrnLPrhr58SSuPTiA5Tplv8/PXpz4zXR/AYNxmwIj6J6nrvg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6804,7 +6804,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.2_@types+node@18.11.7
+      jest-config: 29.2.2_@types+node@18.11.8
       jest-util: 29.2.1
       jest-validate: 29.2.2
       prompts: 2.4.2
@@ -6815,7 +6815,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.2_@types+node@18.11.7:
+  /jest-config/29.2.2_@types+node@18.11.8:
     resolution: {integrity: sha512-Q0JX54a5g1lP63keRfKR8EuC7n7wwny2HoTRDb8cx78IwQOiaYUVZAdjViY3WcTxpR02rPUpvNVmZ1fkIlZPcw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6830,7 +6830,7 @@ packages:
       '@babel/core': 7.19.6
       '@jest/test-sequencer': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       babel-jest: 29.2.2_@babel+core@7.19.6
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6895,7 +6895,7 @@ packages:
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       jest-mock: 29.2.2
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6912,7 +6912,7 @@ packages:
       '@jest/environment': 29.2.2
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       jest-mock: 29.2.2
       jest-util: 29.2.1
     dev: true
@@ -6928,7 +6928,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6951,7 +6951,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -7012,7 +7012,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       jest-util: 29.2.1
     dev: true
 
@@ -7077,7 +7077,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       emittery: 0.13.1
       graceful-fs: 4.2.10
@@ -7108,7 +7108,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7131,7 +7131,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       graceful-fs: 4.2.10
     dev: true
 
@@ -7176,7 +7176,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7188,7 +7188,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7200,7 +7200,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7227,7 +7227,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.2_@types+node@18.11.7
+      jest: 29.2.2_@types+node@18.11.8
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7241,7 +7241,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7255,7 +7255,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.13.1
@@ -7267,7 +7267,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7276,13 +7276,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.7
+      '@types/node': 18.11.8
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.2_@types+node@18.11.7:
+  /jest/29.2.2_@types+node@18.11.8:
     resolution: {integrity: sha512-r+0zCN9kUqoON6IjDdjbrsWobXM/09Nd45kIPRD8kloaRh1z5ZCMdVsgLXGxmlL7UpAJsvCYOQNO+NjvG/gqiQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7295,7 +7295,7 @@ packages:
       '@jest/core': 29.2.2
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.2_@types+node@18.11.7
+      jest-cli: 29.2.2_@types+node@18.11.8
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 7f8ed87b57c37d3808aeed248fa2b381f3c0035d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 31 Oct 2022 14:49:29 +0000
Subject: [PATCH 225/263] build(deps): update dependency vite to v3.2.2 (#4305)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 9c7becd85..6e2de16c6 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.2.1",
+    "vite": "3.2.2",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.1",
     "vite-plugin-svgr": "2.2.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index de263fd19..22c33ca75 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.2
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.2.1
+  vite: 3.2.2
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.1
   vite-plugin-svgr: 2.2.2
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
   '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
-  '@vitejs/plugin-react': 2.2.0_vite@3.2.1
+  '@vitejs/plugin-react': 2.2.0_vite@3.2.2
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
   eslint: 8.26.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.2.1
-  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.1
+  vite: 3.2.2
+  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.2
   vite-plugin-istanbul: 3.0.1
-  vite-plugin-svgr: 2.2.2_vite@3.2.1
-  vite-tsconfig-paths: 3.5.2_vite@3.2.1
+  vite-plugin-svgr: 2.2.2_vite@3.2.2
+  vite-tsconfig-paths: 3.5.2_vite@3.2.2
 
 packages:
 
@@ -3901,7 +3901,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.2.0_vite@3.2.1:
+  /@vitejs/plugin-react/2.2.0_vite@3.2.2:
     resolution: {integrity: sha512-FFpefhvExd1toVRlokZgxgy2JtnBOdp4ZDsq7ldCWaqGSGn9UhWMAVm/1lxPL14JfNS5yGz+s9yFrQY6shoStA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3914,7 +3914,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.19.6_@babel+core@7.19.6
       magic-string: 0.26.7
       react-refresh: 0.14.0
-      vite: 3.2.1
+      vite: 3.2.2
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9404,7 +9404,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.2.1:
+  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.2.2:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9414,7 +9414,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.26.0
       rollup: 2.78.0
-      vite: 3.2.1
+      vite: 3.2.2
     dev: true
 
   /vite-plugin-istanbul/3.0.1:
@@ -9428,21 +9428,21 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.2_vite@3.2.1:
+  /vite-plugin-svgr/2.2.2_vite@3.2.2:
     resolution: {integrity: sha512-u8Ac27uZmDHTVGawpAhvLMJMuzbGeZGhe61TGeHoRQLxVhmQfIYCefa0iLbjC0ui1zFo6XZnS8EkzPITCYp85g==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 5.0.1
       '@svgr/core': 6.4.0
-      vite: 3.2.1
+      vite: 3.2.2
     transitivePeerDependencies:
       - '@babel/core'
       - rollup
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.2_vite@3.2.1:
+  /vite-tsconfig-paths/3.5.2_vite@3.2.2:
     resolution: {integrity: sha512-xJMgHA2oJ28QCG2f+hXrcqzo7IttrSRK4A//Tp94CfuX5eetOx33qiwXHUdi3FwkHP2ocpxHuvE45Ix67gwEmQ==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9451,13 +9451,13 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.2.1
+      vite: 3.2.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.2.1:
-    resolution: {integrity: sha512-ADtMkfHuWq4tskJsri2n2FZkORO8ZyhI+zIz7zTrDAgDEtct1jdxOg3YsZBfHhKjmMoWLOSCr+64qrEDGo/DbQ==}
+  /vite/3.2.2:
+    resolution: {integrity: sha512-pLrhatFFOWO9kS19bQ658CnRYzv0WLbsPih6R+iFeEEhDOuYgYCX2rztUViMz/uy/V8cLCJvLFeiOK7RJEzHcw==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:

From 372cd64e82b6df752aa6da2868c94ea519bae5a4 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Nov 2022 08:45:10 +1100
Subject: [PATCH 226/263] build(deps): update dependency broadcast-channel to
 v4.18.1 (#4309)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6e2de16c6..d45eddefe 100644
--- a/web/package.json
+++ b/web/package.json
@@ -29,7 +29,7 @@
     "@mui/material": "5.10.11",
     "@mui/styles": "5.10.10",
     "axios": "0.27.2",
-    "broadcast-channel": "4.18.0",
+    "broadcast-channel": "4.18.1",
     "classnames": "2.3.2",
     "i18next": "22.0.4",
     "i18next-browser-languagedetector": "7.0.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 22c33ca75..446eef370 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -25,7 +25,7 @@ specifiers:
   '@typescript-eslint/parser': 5.41.0
   '@vitejs/plugin-react': 2.2.0
   axios: 0.27.2
-  broadcast-channel: 4.18.0
+  broadcast-channel: 4.18.1
   classnames: 2.3.2
   esbuild: 0.15.12
   esbuild-jest: 0.5.0
@@ -77,7 +77,7 @@ dependencies:
   '@mui/material': 5.10.11_gs4twfomdgooimayvnfrqgiwam
   '@mui/styles': 5.10.10_bbvjflvjoibwhtpmedigb26h6y
   axios: 0.27.2
-  broadcast-channel: 4.18.0
+  broadcast-channel: 4.18.1
   classnames: 2.3.2
   i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.0
@@ -4466,10 +4466,10 @@ packages:
       fill-range: 7.0.1
     dev: true
 
-  /broadcast-channel/4.18.0:
-    resolution: {integrity: sha512-jxCERZ/fV8LJUVWSGC8U687cYTB67XWn/DVcsYQ9MNpL3Lo2/x0pq8QcfSNTDKBQjAxgp7JQO5pOR8Gcw73Ajw==}
+  /broadcast-channel/4.18.1:
+    resolution: {integrity: sha512-eV1srWgt6H4hbtGqD7THn60me66WA5l0LogpssuX9jK6NK26HzIZr+VsrlD7Obe0BtYnwoo/a4v4z5gfty04DA==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       oblivious-set: 1.1.1
       p-queue: 6.6.2
       rimraf: 3.0.2
@@ -9330,7 +9330,7 @@ packages:
   /unload/2.3.1:
     resolution: {integrity: sha512-MUZEiDqvAN9AIDRbbBnVYVvfcR6DrjCqeU2YQMmliFZl9uaBUjTkhuDQkBiyAy8ad5bx1TXVbqZ3gg7namsWjA==}
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       detect-node: 2.1.0
     dev: false
 

From 95709b7069491aa22dc1f95cccf2e0ece15fcdae Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 1 Nov 2022 10:09:46 +1100
Subject: [PATCH 227/263] docs: update proxy versions (#4310)

---
 docs/content/en/integration/proxies/envoy.md   | 2 +-
 docs/content/en/integration/proxies/traefik.md | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/content/en/integration/proxies/envoy.md b/docs/content/en/integration/proxies/envoy.md
index 17c8f1120..b03b09a7e 100644
--- a/docs/content/en/integration/proxies/envoy.md
+++ b/docs/content/en/integration/proxies/envoy.md
@@ -60,7 +60,7 @@ networks:
 services:
   envoy:
     container_name: envoy
-    image: envoyproxy/envoy:v1.23.0
+    image: envoyproxy/envoy:v1.24
     restart: unless-stopped
     networks:
       net: {}
diff --git a/docs/content/en/integration/proxies/traefik.md b/docs/content/en/integration/proxies/traefik.md
index 7723ff643..cc9317e97 100644
--- a/docs/content/en/integration/proxies/traefik.md
+++ b/docs/content/en/integration/proxies/traefik.md
@@ -90,7 +90,7 @@ networks:
 services:
   traefik:
     container_name: traefik
-    image: traefik:v2.8
+    image: traefik:v2.9
     restart: unless-stopped
     command:
       - '--api=true'
@@ -227,7 +227,7 @@ networks:
 services:
   traefik:
     container_name: traefik
-    image: traefik:v2.6
+    image: traefik:v2.9
     restart: unless-stopped
     command:
       - '--api=true'

From 5a23df4544f2b25c516421cbea04931d0d16329a Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Tue, 1 Nov 2022 10:31:13 +1100
Subject: [PATCH 228/263] refactor: uuid parse bytes (#4311)

Use ParseBytes instead since it supports a byte encoded string.
---
 .../handlers/handler_oidc_authorization_consent_explicit.go | 2 +-
 .../handlers/handler_oidc_authorization_consent_implicit.go | 6 ++----
 .../handler_oidc_authorization_consent_pre_configured.go    | 2 +-
 internal/handlers/handler_oidc_consent.go                   | 2 +-
 4 files changed, 5 insertions(+), 7 deletions(-)

diff --git a/internal/handlers/handler_oidc_authorization_consent_explicit.go b/internal/handlers/handler_oidc_authorization_consent_explicit.go
index 3d2009964..c6aed268c 100644
--- a/internal/handlers/handler_oidc_authorization_consent_explicit.go
+++ b/internal/handlers/handler_oidc_authorization_consent_explicit.go
@@ -27,7 +27,7 @@ func handleOIDCAuthorizationConsentModeExplicit(ctx *middlewares.AutheliaCtx, is
 	case 0:
 		return handleOIDCAuthorizationConsentGenerate(ctx, issuer, client, userSession, subject, rw, r, requester)
 	default:
-		if consentID, err = uuid.Parse(string(bytesConsentID)); err != nil {
+		if consentID, err = uuid.ParseBytes(bytesConsentID); err != nil {
 			ctx.Logger.Errorf(logFmtErrConsentParseChallengeID, requester.GetID(), client.GetID(), client.Consent, bytesConsentID, err)
 
 			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentMalformedChallengeID)
diff --git a/internal/handlers/handler_oidc_authorization_consent_implicit.go b/internal/handlers/handler_oidc_authorization_consent_implicit.go
index 851da7a32..b9017f9b8 100644
--- a/internal/handlers/handler_oidc_authorization_consent_implicit.go
+++ b/internal/handlers/handler_oidc_authorization_consent_implicit.go
@@ -21,13 +21,11 @@ func handleOIDCAuthorizationConsentModeImplicit(ctx *middlewares.AutheliaCtx, is
 		err       error
 	)
 
-	bytesConsentID := ctx.QueryArgs().PeekBytes(qryArgConsentID)
-
-	switch len(bytesConsentID) {
+	switch bytesConsentID := ctx.QueryArgs().PeekBytes(qryArgConsentID); len(bytesConsentID) {
 	case 0:
 		return handleOIDCAuthorizationConsentModeImplicitWithoutID(ctx, issuer, client, userSession, subject, rw, r, requester)
 	default:
-		if consentID, err = uuid.Parse(string(bytesConsentID)); err != nil {
+		if consentID, err = uuid.ParseBytes(bytesConsentID); err != nil {
 			ctx.Logger.Errorf(logFmtErrConsentParseChallengeID, requester.GetID(), client.GetID(), client.Consent, bytesConsentID, err)
 
 			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentMalformedChallengeID)
diff --git a/internal/handlers/handler_oidc_authorization_consent_pre_configured.go b/internal/handlers/handler_oidc_authorization_consent_pre_configured.go
index 07e2d9150..e8dbdbc0d 100644
--- a/internal/handlers/handler_oidc_authorization_consent_pre_configured.go
+++ b/internal/handlers/handler_oidc_authorization_consent_pre_configured.go
@@ -31,7 +31,7 @@ func handleOIDCAuthorizationConsentModePreConfigured(ctx *middlewares.AutheliaCt
 	case 0:
 		return handleOIDCAuthorizationConsentModePreConfiguredWithoutID(ctx, issuer, client, userSession, subject, rw, r, requester)
 	default:
-		if consentID, err = uuid.Parse(string(bytesConsentID)); err != nil {
+		if consentID, err = uuid.ParseBytes(bytesConsentID); err != nil {
 			ctx.Logger.Errorf(logFmtErrConsentParseChallengeID, requester.GetID(), client.GetID(), client.Consent, bytesConsentID, err)
 
 			ctx.Providers.OpenIDConnect.WriteAuthorizeError(rw, requester, oidc.ErrConsentMalformedChallengeID)
diff --git a/internal/handlers/handler_oidc_consent.go b/internal/handlers/handler_oidc_consent.go
index 1418ea37c..bc5a81d62 100644
--- a/internal/handlers/handler_oidc_consent.go
+++ b/internal/handlers/handler_oidc_consent.go
@@ -23,7 +23,7 @@ func OpenIDConnectConsentGET(ctx *middlewares.AutheliaCtx) {
 		err       error
 	)
 
-	if consentID, err = uuid.Parse(string(ctx.RequestCtx.QueryArgs().PeekBytes(qryArgID))); err != nil {
+	if consentID, err = uuid.ParseBytes(ctx.RequestCtx.QueryArgs().PeekBytes(qryArgID)); err != nil {
 		ctx.Logger.Errorf("Unable to convert '%s' into a UUID: %+v", ctx.RequestCtx.QueryArgs().PeekBytes(qryArgID), err)
 		ctx.ReplyForbidden()
 

From 365bc1588a5840a8706a86a09c37bf9a5896b4a6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Nov 2022 02:44:50 +0000
Subject: [PATCH 229/263] build(deps): update typescript-eslint monorepo to
 v5.42.0 (#4308)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 107 ++++++++++++++++++++++++---------------------
 2 files changed, 58 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index d45eddefe..27f5463c0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.24",
     "@types/react-dom": "18.0.8",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.41.0",
-    "@typescript-eslint/parser": "5.41.0",
+    "@typescript-eslint/eslint-plugin": "5.42.0",
+    "@typescript-eslint/parser": "5.42.0",
     "@vitejs/plugin-react": "2.2.0",
     "esbuild": "0.15.12",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 446eef370..41c311cf9 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.41.0
-  '@typescript-eslint/parser': 5.41.0
+  '@typescript-eslint/eslint-plugin': 5.42.0
+  '@typescript-eslint/parser': 5.42.0
   '@vitejs/plugin-react': 2.2.0
   axios: 0.27.2
   broadcast-channel: 4.18.1
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
-  '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+  '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
+  '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
   '@vitejs/plugin-react': 2.2.0_vite@3.2.2
   esbuild: 0.15.12
   esbuild-jest: 0.5.0_esbuild@0.15.12
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_2kc4q5r3nphyswrf6yds6ub5nq
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
-  eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
+  eslint-plugin-import: 2.26.0_goironxpvhcmocjenyhcuwtawi
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
   eslint-plugin-prettier: 4.2.1_aniwkeyvlpmwkidetuytnokvcm
   eslint-plugin-react: 7.31.10_eslint@8.26.0
@@ -3700,8 +3700,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.41.0_huremdigmcnkianavgfk3x6iou:
-    resolution: {integrity: sha512-DXUS22Y57/LAFSg3x7Vi6RNAuLpTXwxB9S2nIA7msBb/Zt8p7XqMwdpdc1IU7CkOQUPgAqR5fWvxuKCbneKGmA==}
+  /@typescript-eslint/eslint-plugin/5.42.0_6xw5wg2354iw4zujk2f3vyfrzu:
+    resolution: {integrity: sha512-5TJh2AgL6+wpL8H/GTSjNb4WrjKoR2rqvFxR/DDTqYNk6uXn8BJMEcncLSpMbf/XV1aS0jAjYwn98uvVCiAywQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3711,13 +3711,14 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
-      '@typescript-eslint/scope-manager': 5.41.0
-      '@typescript-eslint/type-utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
-      '@typescript-eslint/utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/scope-manager': 5.42.0
+      '@typescript-eslint/type-utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
       debug: 4.3.4
       eslint: 8.26.0
       ignore: 5.2.0
+      natural-compare-lite: 1.4.0
       regexpp: 3.2.0
       semver: 7.3.7
       tsutils: 3.21.0_typescript@4.8.4
@@ -3739,8 +3740,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.41.0_wyqvi574yv7oiwfeinomdzmc3m:
-    resolution: {integrity: sha512-HQVfix4+RL5YRWZboMD1pUfFN8MpRH4laziWkkAzyO1fvNOY/uinZcvo3QiFJVS/siNHupV8E5+xSwQZrl6PZA==}
+  /@typescript-eslint/parser/5.42.0_wyqvi574yv7oiwfeinomdzmc3m:
+    resolution: {integrity: sha512-Ixh9qrOTDRctFg3yIwrLkgf33AHyEIn6lhyf5cCfwwiGtkWhNpVKlEZApi3inGQR/barWnY7qY8FbGKBO7p3JA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3749,9 +3750,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.41.0
-      '@typescript-eslint/types': 5.41.0
-      '@typescript-eslint/typescript-estree': 5.41.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.42.0
+      '@typescript-eslint/types': 5.42.0
+      '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.26.0
       typescript: 4.8.4
@@ -3767,16 +3768,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.41.0:
-    resolution: {integrity: sha512-xOxPJCnuktUkY2xoEZBKXO5DBCugFzjrVndKdUnyQr3+9aDWZReKq9MhaoVnbL+maVwWJu/N0SEtrtEUNb62QQ==}
+  /@typescript-eslint/scope-manager/5.42.0:
+    resolution: {integrity: sha512-l5/3IBHLH0Bv04y+H+zlcLiEMEMjWGaCX6WyHE5Uk2YkSGAMlgdUPsT/ywTSKgu9D1dmmKMYgYZijObfA39Wow==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.41.0
-      '@typescript-eslint/visitor-keys': 5.41.0
+      '@typescript-eslint/types': 5.42.0
+      '@typescript-eslint/visitor-keys': 5.42.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.41.0_wyqvi574yv7oiwfeinomdzmc3m:
-    resolution: {integrity: sha512-L30HNvIG6A1Q0R58e4hu4h+fZqaO909UcnnPbwKiN6Rc3BUEx6ez2wgN7aC0cBfcAjZfwkzE+E2PQQ9nEuoqfA==}
+  /@typescript-eslint/type-utils/5.42.0_wyqvi574yv7oiwfeinomdzmc3m:
+    resolution: {integrity: sha512-HW14TXC45dFVZxnVW8rnUGnvYyRC0E/vxXShFCthcC9VhVTmjqOmtqj6H5rm9Zxv+ORxKA/1aLGD7vmlLsdlOg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3785,8 +3786,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.41.0_typescript@4.8.4
-      '@typescript-eslint/utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
+      '@typescript-eslint/utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
       debug: 4.3.4
       eslint: 8.26.0
       tsutils: 3.21.0_typescript@4.8.4
@@ -3800,8 +3801,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.41.0:
-    resolution: {integrity: sha512-5BejraMXMC+2UjefDvrH0Fo/eLwZRV6859SXRg+FgbhA0R0l6lDqDGAQYhKbXhPN2ofk2kY5sgGyLNL907UXpA==}
+  /@typescript-eslint/types/5.42.0:
+    resolution: {integrity: sha512-t4lzO9ZOAUcHY6bXQYRuu+3SSYdD9TS8ooApZft4WARt4/f2Cj/YpvbTe8A4GuhT4bNW72goDMOy7SW71mZwGw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3826,8 +3827,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.41.0_typescript@4.8.4:
-    resolution: {integrity: sha512-SlzFYRwFSvswzDSQ/zPkIWcHv8O5y42YUskko9c4ki+fV6HATsTODUPbRbcGDFYP86gaJL5xohUEytvyNNcXWg==}
+  /@typescript-eslint/typescript-estree/5.42.0_typescript@4.8.4:
+    resolution: {integrity: sha512-2O3vSq794x3kZGtV7i4SCWZWCwjEtkWfVqX4m5fbUBomOsEOyd6OAD1qU2lbvV5S8tgy/luJnOYluNyYVeOTTg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3835,8 +3836,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.41.0
-      '@typescript-eslint/visitor-keys': 5.41.0
+      '@typescript-eslint/types': 5.42.0
+      '@typescript-eslint/visitor-keys': 5.42.0
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3865,17 +3866,17 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.41.0_wyqvi574yv7oiwfeinomdzmc3m:
-    resolution: {integrity: sha512-QlvfwaN9jaMga9EBazQ+5DDx/4sAdqDkcs05AsQHMaopluVCUyu1bTRUVKzXbgjDlrRAQrYVoi/sXJ9fmG+KLQ==}
+  /@typescript-eslint/utils/5.42.0_wyqvi574yv7oiwfeinomdzmc3m:
+    resolution: {integrity: sha512-JZ++3+h1vbeG1NUECXQZE3hg0kias9kOtcQr3+JVQ3whnjvKuMyktJAAIj6743OeNPnGBmjj7KEmiDL7qsdnCQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
       '@types/semver': 7.3.12
-      '@typescript-eslint/scope-manager': 5.41.0
-      '@typescript-eslint/types': 5.41.0
-      '@typescript-eslint/typescript-estree': 5.41.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.42.0
+      '@typescript-eslint/types': 5.42.0
+      '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
       eslint: 8.26.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.26.0
@@ -3893,11 +3894,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.41.0:
-    resolution: {integrity: sha512-vilqeHj267v8uzzakbm13HkPMl7cbYpKVjgFWZPIOHIJHZtinvypUhJ5xBXfWYg4eFKqztbMMpOgFpT9Gfx4fw==}
+  /@typescript-eslint/visitor-keys/5.42.0:
+    resolution: {integrity: sha512-QHbu5Hf/2lOEOwy+IUw0GoSCuAzByTAWWrOTKzTzsotiUnWFpuKnXcAhC9YztAf2EElQ0VvIK+pHJUPkM0q7jg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.41.0
+      '@typescript-eslint/types': 5.42.0
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5403,14 +5404,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_wxy5unzcco5r76nfxbzwrmhnca
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
-      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
+      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.26.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.26.0
-      eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
-      eslint-plugin-jest: 25.7.0_6amp5fdmvwluzjywjm3ep2edui
+      eslint-plugin-import: 2.26.0_goironxpvhcmocjenyhcuwtawi
+      eslint-plugin-jest: 25.7.0_vg4o634kebbkmy67d6ljsnmtoy
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
       eslint-plugin-react: 7.31.10_eslint@8.26.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
@@ -5448,7 +5449,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.26.0
-      eslint-plugin-import: 2.26.0_r2te5lumhbgztz2yv5ofo3mkvi
+      eslint-plugin-import: 2.26.0_goironxpvhcmocjenyhcuwtawi
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5458,7 +5459,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_wpldeify6ml4exj7gzmn6kiyze:
+  /eslint-module-utils/2.7.3_sxk65rprkegpqfhvolrvhmfthi:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5476,7 +5477,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
@@ -5503,7 +5504,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_r2te5lumhbgztz2yv5ofo3mkvi:
+  /eslint-plugin-import/2.26.0_goironxpvhcmocjenyhcuwtawi:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5513,14 +5514,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.26.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_wpldeify6ml4exj7gzmn6kiyze
+      eslint-module-utils: 2.7.3_sxk65rprkegpqfhvolrvhmfthi
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5534,7 +5535,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_6amp5fdmvwluzjywjm3ep2edui:
+  /eslint-plugin-jest/25.7.0_vg4o634kebbkmy67d6ljsnmtoy:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5547,7 +5548,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.41.0_huremdigmcnkianavgfk3x6iou
+      '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
       jest: 29.2.2_@types+node@18.11.8
@@ -5633,7 +5634,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.41.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
     transitivePeerDependencies:
       - supports-color
@@ -7787,6 +7788,10 @@ packages:
       - supports-color
     dev: true
 
+  /natural-compare-lite/1.4.0:
+    resolution: {integrity: sha512-Tj+HTDSJJKaZnfiuw+iaF9skdPpTo2GtEly5JHnWV/hfv2Qj/9RKsGISQtLh2ox3l5EAGw487hnBee0sIJ6v2g==}
+    dev: true
+
   /natural-compare/1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
     dev: true

From bf0b84b8e625f699114140f6dc80349311cf82ee Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Nov 2022 05:09:05 +0000
Subject: [PATCH 230/263] build(deps): update dependency @types/jest to v29.2.1
 (#4312)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 54 ++++++----------------------------------------
 2 files changed, 8 insertions(+), 48 deletions(-)

diff --git a/web/package.json b/web/package.json
index 27f5463c0..42c1dc1d9 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@commitlint/config-conventional": "17.1.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.2.0",
+    "@types/jest": "29.2.1",
     "@types/node": "18.11.8",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.24",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 41c311cf9..a80105265 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.2.0
+  '@types/jest': 29.2.1
   '@types/node': 18.11.8
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.24
@@ -97,7 +97,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.1.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.2.0
+  '@types/jest': 29.2.1
   '@types/node': 18.11.8
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.24
@@ -2651,13 +2651,6 @@ packages:
       jest-mock: 29.2.2
     dev: true
 
-  /@jest/expect-utils/29.2.1:
-    resolution: {integrity: sha512-yr4aHNg5Z1CjKby5ozm7sKjgBlCOorlAoFcvrOQ/4rbZRfgZQdnmh7cth192PYIgiPZo2bBXvqdOApnAMWFJZg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      jest-get-type: 29.2.0
-    dev: true
-
   /@jest/expect-utils/29.2.2:
     resolution: {integrity: sha512-vwnVmrVhTmGgQzyvcpze08br91OL61t9O0lJMDyb6Y/D8EKQ9V7rGUb/p7PDt0GPzK0zFYqXWFo4EO2legXmkg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -3579,10 +3572,10 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.2.0:
-    resolution: {integrity: sha512-KO7bPV21d65PKwv3LLsD8Jn3E05pjNjRZvkm+YTacWhVmykAb07wW6IkZUmQAltwQafNcDUEUrMO2h3jeBSisg==}
+  /@types/jest/29.2.1:
+    resolution: {integrity: sha512-nKixEdnGDqFOZkMTF74avFNr3yRqB1ZJ6sRZv5/28D5x2oLN14KApv7F9mfDT/vUic0L3tRCsh3XWpWjtJisUQ==}
     dependencies:
-      expect: 29.2.1
+      expect: 29.2.2
       pretty-format: 29.2.1
     dev: true
 
@@ -3673,7 +3666,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.2.0
+      '@types/jest': 29.2.1
     dev: true
 
   /@types/tough-cookie/4.0.2:
@@ -5829,17 +5822,6 @@ packages:
       - supports-color
     dev: true
 
-  /expect/29.2.1:
-    resolution: {integrity: sha512-BJtA754Fba0YWRWHgjKUMTA3ltWarKgITXHQnbZ2mTxTXC4yMQlR0FI7HkB3fJYkhWBf4qjNiqvg3LDtXCcVRQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/expect-utils': 29.2.1
-      jest-get-type: 29.2.0
-      jest-matcher-utils: 29.2.1
-      jest-message-util: 29.2.1
-      jest-util: 29.2.1
-    dev: true
-
   /expect/29.2.2:
     resolution: {integrity: sha512-hE09QerxZ5wXiOhqkXy5d2G9ar+EqOyifnCXCpMNu+vZ6DG9TJ6CO2c2kPDSLqERTTWrO7OZj8EkYHQqSd78Yw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6973,16 +6955,6 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-matcher-utils/29.2.1:
-    resolution: {integrity: sha512-hUTBh7H/Mnb6GTpihbLh8uF5rjAMdekfW/oZNXUMAXi7bbmym2HiRpzgqf/zzkjgejMrVAkPdVSQj+32enlUww==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.2.1
-      jest-get-type: 29.2.0
-      pretty-format: 29.2.1
-    dev: true
-
   /jest-matcher-utils/29.2.2:
     resolution: {integrity: sha512-4DkJ1sDPT+UX2MR7Y3od6KtvRi9Im1ZGLGgdLFLm4lPexbTaCgJW5NN3IOXlQHF7NSHY/VHhflQ+WoKtD/vyCw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -7184,18 +7156,6 @@ packages:
       micromatch: 4.0.5
     dev: true
 
-  /jest-util/29.1.2:
-    resolution: {integrity: sha512-vPCk9F353i0Ymx3WQq3+a4lZ07NXu9Ca8wya6o4Fe4/aO1e1awMMprZ3woPFpKwghEOW+UXgd15vVotuNN9ONQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/types': 29.2.1
-      '@types/node': 18.11.8
-      chalk: 4.1.2
-      ci-info: 3.3.2
-      graceful-fs: 4.2.10
-      picomatch: 2.3.1
-    dev: true
-
   /jest-util/29.2.1:
     resolution: {integrity: sha512-P5VWDj25r7kj7kl4pN2rG/RN2c1TLfYYYZYULnS/35nFDjBai+hBeo3MDrYZS7p6IoY3YHZnt2vq4L6mKnLk0g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -7246,7 +7206,7 @@ packages:
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.1.2
+      jest-util: 29.2.1
       string-length: 4.0.2
     dev: true
 

From 403125eb91af2c57bd297e803960b20d93f9531b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Nov 2022 08:20:25 +0000
Subject: [PATCH 231/263] build(deps): update commitlint monorepo to v17.2.0
 (#4307)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  4 ++--
 web/pnpm-lock.yaml | 58 +++++++++++++++++++++++-----------------------
 2 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/web/package.json b/web/package.json
index 42c1dc1d9..7292d831c 100644
--- a/web/package.json
+++ b/web/package.json
@@ -143,8 +143,8 @@
     ]
   },
   "devDependencies": {
-    "@commitlint/cli": "17.1.2",
-    "@commitlint/config-conventional": "17.1.0",
+    "@commitlint/cli": "17.2.0",
+    "@commitlint/config-conventional": "17.2.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index a80105265..87b92469f 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -1,8 +1,8 @@
 lockfileVersion: 5.4
 
 specifiers:
-  '@commitlint/cli': 17.1.2
-  '@commitlint/config-conventional': 17.1.0
+  '@commitlint/cli': 17.2.0
+  '@commitlint/config-conventional': 17.2.0
   '@emotion/cache': 11.10.5
   '@emotion/react': 11.10.5
   '@emotion/styled': 11.10.5
@@ -93,8 +93,8 @@ dependencies:
   zxcvbn: 4.4.2
 
 devDependencies:
-  '@commitlint/cli': 17.1.2
-  '@commitlint/config-conventional': 17.1.0
+  '@commitlint/cli': 17.2.0
+  '@commitlint/config-conventional': 17.2.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.1
@@ -2162,15 +2162,15 @@ packages:
       minimist: 1.2.6
     dev: true
 
-  /@commitlint/cli/17.1.2:
-    resolution: {integrity: sha512-h/4Hlka3bvCLbnxf0Er2ri5A44VMlbMSkdTRp8Adv2tRiklSTRIoPGs7OEXDv3EoDs2AAzILiPookgM4Gi7LOw==}
+  /@commitlint/cli/17.2.0:
+    resolution: {integrity: sha512-kd1zykcrjIKyDRftWW1E1TJqkgzeosEkv1BiYPCdzkb/g/3BrfgwZUHR1vg+HO3qKUb/0dN+jNXArhGGAHpmaQ==}
     engines: {node: '>=v14'}
     hasBin: true
     dependencies:
       '@commitlint/format': 17.0.0
-      '@commitlint/lint': 17.1.0
-      '@commitlint/load': 17.1.2
-      '@commitlint/read': 17.1.0
+      '@commitlint/lint': 17.2.0
+      '@commitlint/load': 17.2.0
+      '@commitlint/read': 17.2.0
       '@commitlint/types': 17.0.0
       execa: 5.1.1
       lodash: 4.17.21
@@ -2182,8 +2182,8 @@ packages:
       - '@swc/wasm'
     dev: true
 
-  /@commitlint/config-conventional/17.1.0:
-    resolution: {integrity: sha512-WU2p0c9/jLi8k2q2YrDV96Y8XVswQOceIQ/wyJvQxawJSCasLdRB3kUIYdNjOCJsxkpoUlV/b90ZPxp1MYZDiA==}
+  /@commitlint/config-conventional/17.2.0:
+    resolution: {integrity: sha512-g5hQqRa80f++SYS233dbDSg16YdyounMTAhVcmqtInNeY/GF3aA4st9SVtJxpeGrGmueMrU4L+BBb+6Vs5wrcg==}
     engines: {node: '>=v14'}
     dependencies:
       conventional-changelog-conventionalcommits: 5.0.0
@@ -2218,26 +2218,26 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@commitlint/is-ignored/17.1.0:
-    resolution: {integrity: sha512-JITWKDMHhIh8IpdIbcbuH9rEQJty1ZWelgjleTFrVRAcEwN/sPzk1aVUXRIZNXMJWbZj8vtXRJnFihrml8uECQ==}
+  /@commitlint/is-ignored/17.2.0:
+    resolution: {integrity: sha512-rgUPUQraHxoMLxiE8GK430HA7/R2vXyLcOT4fQooNrZq9ERutNrP6dw3gdKLkq22Nede3+gEHQYUzL4Wu75ndg==}
     engines: {node: '>=v14'}
     dependencies:
       '@commitlint/types': 17.0.0
       semver: 7.3.7
     dev: true
 
-  /@commitlint/lint/17.1.0:
-    resolution: {integrity: sha512-ltpqM2ogt/+SDhUaScFo0MdscncEF96lvQTPMM/VTTWlw7sTGLLWkOOppsee2MN/uLNNWjQ7kqkd4h6JqoM9AQ==}
+  /@commitlint/lint/17.2.0:
+    resolution: {integrity: sha512-N2oLn4Dj672wKH5qJ4LGO+73UkYXGHO+NTVUusGw83SjEv7GjpqPGKU6KALW2kFQ/GsDefSvOjpSi3CzWHQBDg==}
     engines: {node: '>=v14'}
     dependencies:
-      '@commitlint/is-ignored': 17.1.0
-      '@commitlint/parse': 17.0.0
-      '@commitlint/rules': 17.0.0
+      '@commitlint/is-ignored': 17.2.0
+      '@commitlint/parse': 17.2.0
+      '@commitlint/rules': 17.2.0
       '@commitlint/types': 17.0.0
     dev: true
 
-  /@commitlint/load/17.1.2:
-    resolution: {integrity: sha512-sk2p/jFYAWLChIfOIp/MGSIn/WzZ0vkc3afw+l4X8hGEYkvDe4gQUUAVxjl/6xMRn0HgnSLMZ04xXh5pkTsmgg==}
+  /@commitlint/load/17.2.0:
+    resolution: {integrity: sha512-HDD57qSqNrk399R4TIjw31AWBG8dBjNj1MrDKZKmC/wvimtnIFlqzcu1+sxfXIOHj/+M6tcMWDtvknGUd7SU+g==}
     engines: {node: '>=v14'}
     dependencies:
       '@commitlint/config-validator': 17.1.0
@@ -2257,13 +2257,13 @@ packages:
       - '@swc/wasm'
     dev: true
 
-  /@commitlint/message/17.0.0:
-    resolution: {integrity: sha512-LpcwYtN+lBlfZijHUdVr8aNFTVpHjuHI52BnfoV01TF7iSLnia0jttzpLkrLmI8HNQz6Vhr9UrxDWtKZiMGsBw==}
+  /@commitlint/message/17.2.0:
+    resolution: {integrity: sha512-/4l2KFKxBOuoEn1YAuuNNlAU05Zt7sNsC9H0mPdPm3chOrT4rcX0pOqrQcLtdMrMkJz0gC7b3SF80q2+LtdL9Q==}
     engines: {node: '>=v14'}
     dev: true
 
-  /@commitlint/parse/17.0.0:
-    resolution: {integrity: sha512-cKcpfTIQYDG1ywTIr5AG0RAiLBr1gudqEsmAGCTtj8ffDChbBRxm6xXs2nv7GvmJN7msOt7vOKleLvcMmRa1+A==}
+  /@commitlint/parse/17.2.0:
+    resolution: {integrity: sha512-vLzLznK9Y21zQ6F9hf8D6kcIJRb2haAK5T/Vt1uW2CbHYOIfNsR/hJs0XnF/J9ctM20Tfsqv4zBitbYvVw7F6Q==}
     engines: {node: '>=v14'}
     dependencies:
       '@commitlint/types': 17.0.0
@@ -2271,8 +2271,8 @@ packages:
       conventional-commits-parser: 3.2.4
     dev: true
 
-  /@commitlint/read/17.1.0:
-    resolution: {integrity: sha512-73BoFNBA/3Ozo2JQvGsE0J8SdrJAWGfZQRSHqvKaqgmY042Su4gXQLqvAzgr55S9DI1l9TiU/5WDuh8IE86d/g==}
+  /@commitlint/read/17.2.0:
+    resolution: {integrity: sha512-bbblBhrHkjxra3ptJNm0abxu7yeAaxumQ8ZtD6GIVqzURCETCP7Dm0tlVvGRDyXBuqX6lIJxh3W7oyKqllDsHQ==}
     engines: {node: '>=v14'}
     dependencies:
       '@commitlint/top-level': 17.0.0
@@ -2294,12 +2294,12 @@ packages:
       resolve-global: 1.0.0
     dev: true
 
-  /@commitlint/rules/17.0.0:
-    resolution: {integrity: sha512-45nIy3dERKXWpnwX9HeBzK5SepHwlDxdGBfmedXhL30fmFCkJOdxHyOJsh0+B0RaVsLGT01NELpfzJUmtpDwdQ==}
+  /@commitlint/rules/17.2.0:
+    resolution: {integrity: sha512-1YynwD4Eh7HXZNpqG8mtUlL2pSX2jBy61EejYJv4ooZPcg50Ak7LPOyD3a9UZnsE76AXWFBz+yo9Hv4MIpAa0Q==}
     engines: {node: '>=v14'}
     dependencies:
       '@commitlint/ensure': 17.0.0
-      '@commitlint/message': 17.0.0
+      '@commitlint/message': 17.2.0
       '@commitlint/to-lines': 17.0.0
       '@commitlint/types': 17.0.0
       execa: 5.1.1

From 295aa6c04e15ba66734b910792b667ad421a85ec Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Nov 2022 21:48:33 +1100
Subject: [PATCH 232/263] build(deps): update dependency @mui/material to
 v5.10.12 (#4306)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 34 +++++++++++++++++-----------------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/web/package.json b/web/package.json
index 7292d831c..f4a6a441f 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,7 +26,7 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.9",
-    "@mui/material": "5.10.11",
+    "@mui/material": "5.10.12",
     "@mui/styles": "5.10.10",
     "axios": "0.27.2",
     "broadcast-channel": "4.18.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 87b92469f..b35af046c 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,7 +11,7 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.9
-  '@mui/material': 5.10.11
+  '@mui/material': 5.10.12
   '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
@@ -73,8 +73,8 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_4ucrevsrp5tdlzg44kesjenzrm
-  '@mui/material': 5.10.11_gs4twfomdgooimayvnfrqgiwam
+  '@mui/icons-material': 5.10.9_5n7l3nqogz2ltkpvtlyqobxizm
+  '@mui/material': 5.10.12_gs4twfomdgooimayvnfrqgiwam
   '@mui/styles': 5.10.10_bbvjflvjoibwhtpmedigb26h6y
   axios: 0.27.2
   broadcast-channel: 4.18.1
@@ -2901,8 +2901,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.103_knhnagtyfncgg2hpin7s37uixq:
-    resolution: {integrity: sha512-fJIyB2df3CHn7D26WHnutnY7vew6aytTlhmRJz6GX7ag19zU2GcOUhJAzY5qwWcrXKnlYgzimhEjaEnuiUWU4g==}
+  /@mui/base/5.0.0-alpha.104_knhnagtyfncgg2hpin7s37uixq:
+    resolution: {integrity: sha512-tQPxZTzfYMwxYfKhEwufbTfdLpNjFdW7bXq6dK0j8651AAyZL4M8wynWUQ98hH1362R26mZFhVxHB2UD9t7VuA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2925,11 +2925,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.11:
-    resolution: {integrity: sha512-u5ff+UCFDHcR8MoQ8tuJR4c35vt7T/ki3aMEE2O3XQoGs8KJSrBiisFpFKyldg9/W2NSyoZxN+kxEGIfRxh+9Q==}
+  /@mui/core-downloads-tracker/5.10.12:
+    resolution: {integrity: sha512-cR8lOS606G++iVHR8I6ySgMAEiPoA3DxO/nLeqiv7w7d1707kvKoV4/7SWjh4ui+kHb052xlf/G196q2EKx31w==}
     dev: false
 
-  /@mui/icons-material/5.10.9_4ucrevsrp5tdlzg44kesjenzrm:
+  /@mui/icons-material/5.10.9_5n7l3nqogz2ltkpvtlyqobxizm:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2941,13 +2941,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.11_gs4twfomdgooimayvnfrqgiwam
+      '@mui/material': 5.10.12_gs4twfomdgooimayvnfrqgiwam
       '@types/react': 18.0.24
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.11_gs4twfomdgooimayvnfrqgiwam:
-    resolution: {integrity: sha512-KJ0wPCTbv6sFzwA3dgg0gowdfF+SRl7D510J9l6Nl/KFX0EawcewQudqKY4slYGFXniKa5PykqokpaWXsCCPqg==}
+  /@mui/material/5.10.12_gs4twfomdgooimayvnfrqgiwam:
+    resolution: {integrity: sha512-rG9ZTkG9qUwujyAY1I+uQAa9pkGdsWY3KN+wvS/6H6ZbYIA06QRwmig6ySC6LbeB3WL/I/1ngwJqWX7nfINSbA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2963,12 +2963,12 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@babel/runtime': 7.19.0
+      '@babel/runtime': 7.19.4
       '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
       '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
-      '@mui/base': 5.0.0-alpha.103_knhnagtyfncgg2hpin7s37uixq
-      '@mui/core-downloads-tracker': 5.10.11
-      '@mui/system': 5.10.10_3ccit3vaizg4wqqen3724viway
+      '@mui/base': 5.0.0-alpha.104_knhnagtyfncgg2hpin7s37uixq
+      '@mui/core-downloads-tracker': 5.10.12
+      '@mui/system': 5.10.12_3ccit3vaizg4wqqen3724viway
       '@mui/types': 7.2.0_@types+react@18.0.24
       '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.24
@@ -3052,8 +3052,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.10_3ccit3vaizg4wqqen3724viway:
-    resolution: {integrity: sha512-TXwtKN0adKpBrZmO+eilQWoPf2veh050HLYrN78Kps9OhlvO70v/2Kya0+mORFhu9yhpAwjHXO8JII/R4a5ZLA==}
+  /@mui/system/5.10.12_3ccit3vaizg4wqqen3724viway:
+    resolution: {integrity: sha512-9DcN3hF2KTTTpZ0K5Tn20B+Tz7tIqDmJLk1M6P0CYoAGUN/xrcF/6dn1zZ829rxE5tmauoDUekTfomrvPsvlSQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0

From 849207e927855b0fa6dd87ceb4e6029b61a2a332 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Nov 2022 21:59:05 +0000
Subject: [PATCH 233/263] build(deps): update dependency i18next-http-backend
 to v2.0.1 (#4315)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index f4a6a441f..21c152bfe 100644
--- a/web/package.json
+++ b/web/package.json
@@ -33,7 +33,7 @@
     "classnames": "2.3.2",
     "i18next": "22.0.4",
     "i18next-browser-languagedetector": "7.0.0",
-    "i18next-http-backend": "2.0.0",
+    "i18next-http-backend": "2.0.1",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
     "react": "18.2.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index b35af046c..598d530f0 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -42,7 +42,7 @@ specifiers:
   husky: 8.0.1
   i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.0
-  i18next-http-backend: 2.0.0
+  i18next-http-backend: 2.0.1
   jest: 29.2.2
   jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
@@ -81,7 +81,7 @@ dependencies:
   classnames: 2.3.2
   i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.0
-  i18next-http-backend: 2.0.0
+  i18next-http-backend: 2.0.1
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
@@ -6337,8 +6337,8 @@ packages:
       '@babel/runtime': 7.19.4
     dev: false
 
-  /i18next-http-backend/2.0.0:
-    resolution: {integrity: sha512-6aFT5LcDOSxFyaoezruIxZDzpp6nu92j1iZc444nrz/OOaF7rsxQFNi1es19la53MQQFzG7uD2Koxi7Jav8khg==}
+  /i18next-http-backend/2.0.1:
+    resolution: {integrity: sha512-kzvSkOT3yhVijumDlp8/TgD1v07lYdFXsf5YYbB7Yu+K2S6PO0lKgZ4c/fyFcAKWiAiTjt9uVecBAbnJjKzhOw==}
     dependencies:
       cross-fetch: 3.1.5
     transitivePeerDependencies:

From 8173670807244a18d235a5a2d85e7651777e3f9f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 2 Nov 2022 00:13:10 +0000
Subject: [PATCH 234/263] build(deps): update dependency @types/node to
 v18.11.9 (#4313)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 80 +++++++++++++++++++++++-----------------------
 2 files changed, 41 insertions(+), 41 deletions(-)

diff --git a/web/package.json b/web/package.json
index 21c152bfe..9b31b0177 100644
--- a/web/package.json
+++ b/web/package.json
@@ -148,7 +148,7 @@
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
     "@types/jest": "29.2.1",
-    "@types/node": "18.11.8",
+    "@types/node": "18.11.9",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.24",
     "@types/react-dom": "18.0.8",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 598d530f0..419105030 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -16,7 +16,7 @@ specifiers:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
   '@types/jest': 29.2.1
-  '@types/node': 18.11.8
+  '@types/node': 18.11.9
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
@@ -98,7 +98,7 @@ devDependencies:
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
   '@types/jest': 29.2.1
-  '@types/node': 18.11.8
+  '@types/node': 18.11.9
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.24
   '@types/react-dom': 18.0.8
@@ -119,7 +119,7 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.26.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
   husky: 8.0.1
-  jest: 29.2.2_@types+node@18.11.8
+  jest: 29.2.2_@types+node@18.11.9
   jest-environment-jsdom: 29.2.2
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0_jest@29.2.2
@@ -2580,7 +2580,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.1.2
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2592,7 +2592,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -2613,14 +2613,14 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       ci-info: 3.3.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.2_@types+node@18.11.8
+      jest-config: 29.2.2_@types+node@18.11.9
       jest-haste-map: 29.2.1
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
@@ -2647,7 +2647,7 @@ packages:
     dependencies:
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       jest-mock: 29.2.2
     dev: true
 
@@ -2674,7 +2674,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       jest-message-util: 29.2.1
       jest-mock: 29.2.2
       jest-util: 29.2.1
@@ -2707,7 +2707,7 @@ packages:
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       collect-v8-coverage: 1.0.1
       exit: 0.1.2
@@ -2827,7 +2827,7 @@ packages:
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       '@types/yargs': 15.0.14
       chalk: 4.1.2
     dev: true
@@ -2839,7 +2839,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -2851,7 +2851,7 @@ packages:
       '@jest/schemas': 29.0.0
       '@types/istanbul-lib-coverage': 2.0.4
       '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       '@types/yargs': 17.0.10
       chalk: 4.1.2
     dev: true
@@ -3553,7 +3553,7 @@ packages:
   /@types/graceful-fs/4.1.5:
     resolution: {integrity: sha512-anKkLmZZ+xm4p8JWBf4hElkM4XR+EZeA2M9BAkkTldmcyDY4mbdIJnRghDJH3Ov5ooY7/UAoENtmdMSkaAd7Cw==}
     dependencies:
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
     dev: true
 
   /@types/istanbul-lib-coverage/2.0.4:
@@ -3582,7 +3582,7 @@ packages:
   /@types/jsdom/20.0.0:
     resolution: {integrity: sha512-YfAchFs0yM1QPDrLm2VHe+WHGtqms3NXnXAMolrgrVP6fgBHHXy1ozAbo/dFtPNtZC/m66bPiCTWYmqp1F14gA==}
     dependencies:
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       '@types/tough-cookie': 4.0.2
       parse5: 7.0.0
     dev: true
@@ -3603,8 +3603,8 @@ packages:
     resolution: {integrity: sha512-0b+utRBSYj8L7XAp0d+DX7lI4cSmowNaaTkk6/1SKzbKkG+doLuPusB9EOvzLJ8ahJSk03bTLIL6cWaEd4dBKA==}
     dev: true
 
-  /@types/node/18.11.8:
-    resolution: {integrity: sha512-uGwPWlE0Hj972KkHtCDVwZ8O39GmyjfMane1Z3GUBGGnkZ2USDq7SxLpVIiIHpweY9DS0QTDH0Nw7RNBsAAZ5A==}
+  /@types/node/18.11.9:
+    resolution: {integrity: sha512-CRpX21/kGdzjOpFsZSkcrXMGIBWMGNIHXXBVFSH+ggkftxg+XYP20TESbh+zFvFj3EQOl5byk0HTRn1IL6hbqg==}
     dev: true
 
   /@types/normalize-package-data/2.4.1:
@@ -5544,7 +5544,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
       '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
       eslint: 8.26.0
-      jest: 29.2.2_@types+node@18.11.8
+      jest: 29.2.2_@types+node@18.11.9
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -6751,7 +6751,7 @@ packages:
       '@jest/expect': 29.2.2
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
@@ -6770,7 +6770,7 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.2_@types+node@18.11.8:
+  /jest-cli/29.2.2_@types+node@18.11.9:
     resolution: {integrity: sha512-R45ygnnb2CQOfd8rTPFR+/fls0d+1zXS6JPYTBBrnLPrhr58SSuPTiA5Tplv8/PXpz4zXR/AYNxmwIj6J6nrvg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -6787,7 +6787,7 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.2_@types+node@18.11.8
+      jest-config: 29.2.2_@types+node@18.11.9
       jest-util: 29.2.1
       jest-validate: 29.2.2
       prompts: 2.4.2
@@ -6798,7 +6798,7 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.2_@types+node@18.11.8:
+  /jest-config/29.2.2_@types+node@18.11.9:
     resolution: {integrity: sha512-Q0JX54a5g1lP63keRfKR8EuC7n7wwny2HoTRDb8cx78IwQOiaYUVZAdjViY3WcTxpR02rPUpvNVmZ1fkIlZPcw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -6813,7 +6813,7 @@ packages:
       '@babel/core': 7.19.6
       '@jest/test-sequencer': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       babel-jest: 29.2.2_@babel+core@7.19.6
       chalk: 4.1.2
       ci-info: 3.3.2
@@ -6878,7 +6878,7 @@ packages:
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       jest-mock: 29.2.2
       jest-util: 29.2.1
       jsdom: 20.0.0
@@ -6895,7 +6895,7 @@ packages:
       '@jest/environment': 29.2.2
       '@jest/fake-timers': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       jest-mock: 29.2.2
       jest-util: 29.2.1
     dev: true
@@ -6911,7 +6911,7 @@ packages:
     dependencies:
       '@jest/types': 26.6.2
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6934,7 +6934,7 @@ packages:
     dependencies:
       '@jest/types': 29.2.1
       '@types/graceful-fs': 4.1.5
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
@@ -6985,7 +6985,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       jest-util: 29.2.1
     dev: true
 
@@ -7050,7 +7050,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       emittery: 0.13.1
       graceful-fs: 4.2.10
@@ -7081,7 +7081,7 @@ packages:
       '@jest/test-result': 29.2.1
       '@jest/transform': 29.2.2
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
@@ -7104,7 +7104,7 @@ packages:
     resolution: {integrity: sha512-S5wqyz0DXnNJPd/xfIzZ5Xnp1HrJWBczg8mMfMpN78OJ5eDxXyf+Ygld9wX1DnUWbIbhM1YDY95NjR4CBXkb2g==}
     engines: {node: '>= 10.14.2'}
     dependencies:
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       graceful-fs: 4.2.10
     dev: true
 
@@ -7149,7 +7149,7 @@ packages:
     engines: {node: '>= 10.14.2'}
     dependencies:
       '@jest/types': 26.6.2
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       graceful-fs: 4.2.10
       is-ci: 2.0.0
@@ -7161,7 +7161,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       chalk: 4.1.2
       ci-info: 3.3.2
       graceful-fs: 4.2.10
@@ -7188,7 +7188,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.2_@types+node@18.11.8
+      jest: 29.2.2_@types+node@18.11.9
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7202,7 +7202,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.1.2
       '@jest/types': 29.1.2
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
@@ -7216,7 +7216,7 @@ packages:
     dependencies:
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.13.1
@@ -7228,7 +7228,7 @@ packages:
     resolution: {integrity: sha512-KWYVV1c4i+jbMpaBC+U++4Va0cp8OisU185o73T1vo99hqi7w8tSJfUXYswwqqrjzwxa6KpRK54WhPvwf5w6PQ==}
     engines: {node: '>= 10.13.0'}
     dependencies:
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       merge-stream: 2.0.0
       supports-color: 7.2.0
     dev: true
@@ -7237,13 +7237,13 @@ packages:
     resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@types/node': 18.11.8
+      '@types/node': 18.11.9
       jest-util: 29.2.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.2_@types+node@18.11.8:
+  /jest/29.2.2_@types+node@18.11.9:
     resolution: {integrity: sha512-r+0zCN9kUqoON6IjDdjbrsWobXM/09Nd45kIPRD8kloaRh1z5ZCMdVsgLXGxmlL7UpAJsvCYOQNO+NjvG/gqiQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
@@ -7256,7 +7256,7 @@ packages:
       '@jest/core': 29.2.2
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.2_@types+node@18.11.8
+      jest-cli: 29.2.2_@types+node@18.11.9
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From 1e057819f2cd2d4163863b570da3b00f90b10f38 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 2 Nov 2022 03:42:08 +0000
Subject: [PATCH 235/263] build(deps): update golang docker tag to v1.19.3
 (#4316)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 Dockerfile.coverage                                         | 2 +-
 Dockerfile.dev                                              | 2 +-
 internal/suites/example/compose/authelia/Dockerfile.backend | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile.coverage b/Dockerfile.coverage
index 787f239b1..6db2f7178 100644
--- a/Dockerfile.coverage
+++ b/Dockerfile.coverage
@@ -15,7 +15,7 @@ RUN yarn global add pnpm && \
 # =======================================
 # ===== Build image for the backend =====
 # =======================================
-FROM golang:1.19.2-alpine AS builder-backend
+FROM golang:1.19.3-alpine AS builder-backend
 
 WORKDIR /go/src/app
 
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 38c3ba1af..11f74ea67 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -13,7 +13,7 @@ RUN yarn install --frozen-lockfile && yarn build
 # =======================================
 # ===== Build image for the backend =====
 # =======================================
-FROM golang:1.19.2-alpine AS builder-backend
+FROM golang:1.19.3-alpine AS builder-backend
 
 WORKDIR /go/src/app
 
diff --git a/internal/suites/example/compose/authelia/Dockerfile.backend b/internal/suites/example/compose/authelia/Dockerfile.backend
index 7603bd8a0..e221a9f52 100644
--- a/internal/suites/example/compose/authelia/Dockerfile.backend
+++ b/internal/suites/example/compose/authelia/Dockerfile.backend
@@ -1,4 +1,4 @@
-FROM golang:1.19.2-alpine
+FROM golang:1.19.3-alpine
 
 ARG USER_ID
 ARG GROUP_ID

From d1e64235ba05da6c76632e66bcfa7d021a9f6c66 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 2 Nov 2022 06:31:27 +0000
Subject: [PATCH 236/263] build(deps): update dependency react-router-dom to
 v6.4.3 (#4314)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 22 +++++++++++-----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/web/package.json b/web/package.json
index 9b31b0177..f9a7f078a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -41,7 +41,7 @@
     "react-i18next": "12.0.0",
     "react-loading": "2.0.3",
     "react-otp-input": "2.4.0",
-    "react-router-dom": "6.4.2",
+    "react-router-dom": "6.4.3",
     "zxcvbn": "4.4.2"
   },
   "scripts": {
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 419105030..d7a3f21d8 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -55,7 +55,7 @@ specifiers:
   react-i18next: 12.0.0
   react-loading: 2.0.3
   react-otp-input: 2.4.0
-  react-router-dom: 6.4.2
+  react-router-dom: 6.4.3
   react-test-renderer: 18.2.0
   typescript: 4.8.4
   vite: 3.2.2
@@ -89,7 +89,7 @@ dependencies:
   react-i18next: 12.0.0_n3kmhq4527torfjiti537juzwy
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
-  react-router-dom: 6.4.2_biqbaboplfbrettd7655fr4n2y
+  react-router-dom: 6.4.3_biqbaboplfbrettd7655fr4n2y
   zxcvbn: 4.4.2
 
 devDependencies:
@@ -3144,8 +3144,8 @@ packages:
     resolution: {integrity: sha512-50/17A98tWUfQ176raKiOGXuYpLyyVMkxxG6oylzL3BPOlA6ADGdK7EYunSa4I064xerltq9TGXs8HmOk5E+vw==}
     dev: false
 
-  /@remix-run/router/1.0.2:
-    resolution: {integrity: sha512-GRSOFhJzjGN+d4sKHTMSvNeUPoZiDHWmRnXfzaxrqe7dE/Nzlc8BiMSJdLDESZlndM7jIUrZ/F4yWqVYlI0rwQ==}
+  /@remix-run/router/1.0.3:
+    resolution: {integrity: sha512-ceuyTSs7PZ/tQqi19YZNBc5X7kj1f8p+4DIyrcIYFY9h+hd1OKm4RqtiWldR9eGEvIiJfsqwM4BsuCtRIuEw6Q==}
     engines: {node: '>=14'}
     dev: false
 
@@ -8291,26 +8291,26 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /react-router-dom/6.4.2_biqbaboplfbrettd7655fr4n2y:
-    resolution: {integrity: sha512-yM1kjoTkpfjgczPrcyWrp+OuQMyB1WleICiiGfstnQYo/S8hPEEnVjr/RdmlH6yKK4Tnj1UGXFSa7uwAtmDoLQ==}
+  /react-router-dom/6.4.3_biqbaboplfbrettd7655fr4n2y:
+    resolution: {integrity: sha512-MiaYQU8CwVCaOfJdYvt84KQNjT78VF0TJrA17SIQgNHRvLnXDJO6qsFqq8F/zzB1BWZjCFIrQpu4QxcshitziQ==}
     engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
       react-dom: '>=16.8 || 18'
     dependencies:
-      '@remix-run/router': 1.0.2
+      '@remix-run/router': 1.0.3
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
-      react-router: 6.4.2_react@18.2.0
+      react-router: 6.4.3_react@18.2.0
     dev: false
 
-  /react-router/6.4.2_react@18.2.0:
-    resolution: {integrity: sha512-Rb0BAX9KHhVzT1OKhMvCDMw776aTYM0DtkxqUBP8dNBom3mPXlfNs76JNGK8wKJ1IZEY1+WGj+cvZxHVk/GiKw==}
+  /react-router/6.4.3_react@18.2.0:
+    resolution: {integrity: sha512-BT6DoGn6aV1FVP5yfODMOiieakp3z46P1Fk0RNzJMACzE7C339sFuHebfvWtnB4pzBvXXkHP2vscJzWRuUjTtA==}
     engines: {node: '>=14'}
     peerDependencies:
       react: '>=16.8 || 18'
     dependencies:
-      '@remix-run/router': 1.0.2
+      '@remix-run/router': 1.0.3
       react: 18.2.0
     dev: false
 

From 83b4b000a60150da9e2afcf86952b5d5c8d9421c Mon Sep 17 00:00:00 2001
From: "allcontributors[bot]"
 <46447321+allcontributors[bot]@users.noreply.github.com>
Date: Wed, 2 Nov 2022 19:34:42 +1100
Subject: [PATCH 237/263] add smkent as a contributor for ideas (#4319)

* update README.md

* update .all-contributorsrc

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
---
 .all-contributorsrc | 9 +++++++++
 README.md           | 1 +
 2 files changed, 10 insertions(+)

diff --git a/.all-contributorsrc b/.all-contributorsrc
index 44ecc1b3a..7dcf00357 100644
--- a/.all-contributorsrc
+++ b/.all-contributorsrc
@@ -814,6 +814,15 @@
       "contributions": [
         "doc"
       ]
+    },
+    {
+      "login": "smkent",
+      "name": "Stephen Kent",
+      "avatar_url": "https://avatars.githubusercontent.com/u/2831985?v=4",
+      "profile": "https://github.com/smkent",
+      "contributions": [
+        "ideas"
+      ]
     }
   ],
   "contributorsPerLine": 7
diff --git a/README.md b/README.md
index 7d452d5ef..9faedeae5 100644
--- a/README.md
+++ b/README.md
@@ -306,6 +306,7 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
     </tr>
     <tr>
       <td align="center"><a href="https://github.com/paul-ohl"><img src="https://avatars.githubusercontent.com/u/37795294?v=4?s=100" width="100px;" alt="Paul Ohl"/><br /><sub><b>Paul Ohl</b></sub></a><br /><a href="https://github.com/authelia/authelia/commits?author=paul-ohl" title="Documentation">📖</a></td>
+      <td align="center"><a href="https://github.com/smkent"><img src="https://avatars.githubusercontent.com/u/2831985?v=4?s=100" width="100px;" alt="Stephen Kent"/><br /><sub><b>Stephen Kent</b></sub></a><br /><a href="#ideas-smkent" title="Ideas, Planning, & Feedback">🤔</a></td>
     </tr>
   </tbody>
 </table>

From 4c64ae7eb38a079d74ca65a688cce358184012bd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 2 Nov 2022 20:47:01 +1100
Subject: [PATCH 238/263] build(deps): update module
 github.com/prometheus/client_golang to v1.13.1 (#4320)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index e6da1373a..be85f6dc2 100644
--- a/go.mod
+++ b/go.mod
@@ -30,7 +30,7 @@ require (
 	github.com/otiai10/copy v1.7.0
 	github.com/pkg/errors v0.9.1
 	github.com/pquerna/otp v1.3.0
-	github.com/prometheus/client_golang v1.13.0
+	github.com/prometheus/client_golang v1.13.1
 	github.com/sirupsen/logrus v1.9.0
 	github.com/spf13/cobra v1.6.1
 	github.com/spf13/pflag v1.0.5
diff --git a/go.sum b/go.sum
index ce29a0b2b..3e058770a 100644
--- a/go.sum
+++ b/go.sum
@@ -1143,8 +1143,8 @@ github.com/prometheus/client_golang v1.9.0/go.mod h1:FqZLKOZnGdFAhOK4nqGHa7D66Id
 github.com/prometheus/client_golang v1.11.0/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
 github.com/prometheus/client_golang v1.11.1/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
 github.com/prometheus/client_golang v1.12.1/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
-github.com/prometheus/client_golang v1.13.0 h1:b71QUfeo5M8gq2+evJdTPfZhYMAU0uKPkyPJ7TPsloU=
-github.com/prometheus/client_golang v1.13.0/go.mod h1:vTeo+zgvILHsnnj/39Ou/1fPN5nJFOEMgftOUOmlvYQ=
+github.com/prometheus/client_golang v1.13.1 h1:3gMjIY2+/hzmqhtUC/aQNYldJA6DtH3CgQvwS+02K1c=
+github.com/prometheus/client_golang v1.13.1/go.mod h1:vTeo+zgvILHsnnj/39Ou/1fPN5nJFOEMgftOUOmlvYQ=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=

From a7d01c521107021092167d551ba7e749cfdea5e1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 3 Nov 2022 23:47:28 +0000
Subject: [PATCH 239/263] build(deps): update dependency
 i18next-browser-languagedetector to v7.0.1 (#4326)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index f9a7f078a..d19f103fb 100644
--- a/web/package.json
+++ b/web/package.json
@@ -32,7 +32,7 @@
     "broadcast-channel": "4.18.1",
     "classnames": "2.3.2",
     "i18next": "22.0.4",
-    "i18next-browser-languagedetector": "7.0.0",
+    "i18next-browser-languagedetector": "7.0.1",
     "i18next-http-backend": "2.0.1",
     "qrcode.react": "3.1.0",
     "query-string": "7.1.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index d7a3f21d8..483dddb22 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -41,7 +41,7 @@ specifiers:
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.1
   i18next: 22.0.4
-  i18next-browser-languagedetector: 7.0.0
+  i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
   jest: 29.2.2
   jest-environment-jsdom: 29.2.2
@@ -80,7 +80,7 @@ dependencies:
   broadcast-channel: 4.18.1
   classnames: 2.3.2
   i18next: 22.0.4
-  i18next-browser-languagedetector: 7.0.0
+  i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
@@ -6331,8 +6331,8 @@ packages:
     resolution: {integrity: sha512-ygGZLjmXfPHj+ZWh6LwbC37l43MhfztxetbFCoYTM2VjkIUpeHgSNn7QIyVFj7YQ1Wl9Cbw5sholVJPzWvC2MQ==}
     dev: false
 
-  /i18next-browser-languagedetector/7.0.0:
-    resolution: {integrity: sha512-RrH7z5/DbhzhgCLDFIKXBTZlb2aXi38ZHa5e5oZaPt9zGLWmgAX49mzkQL/E7R6Y9fTE8QbZFuyMV0ronu4H/Q==}
+  /i18next-browser-languagedetector/7.0.1:
+    resolution: {integrity: sha512-Pa5kFwaczXJAeHE56CHG2aWzFBMJNUNghf0Pm4SwSrEMps/PTKqW90EYWlIvhuYStf3Sn1K0vw+gH3+TLdkH1g==}
     dependencies:
       '@babel/runtime': 7.19.4
     dev: false

From 500410fac31e736685d611fe8c94c09333e7bea9 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 4 Nov 2022 11:32:49 +1100
Subject: [PATCH 240/263] refactor(commands): include rfc3986 charset (#4328)

This includes the RFC3986 unreserved charset as an option, and allows the '-upper' and '-lower' suffix for alphabetic inclusive charsets.
---
 .../authelia/authelia_crypto_hash_generate.md   |  4 ++--
 .../authelia_crypto_hash_generate_argon2.md     |  4 ++--
 .../authelia_crypto_hash_generate_bcrypt.md     |  4 ++--
 .../authelia_crypto_hash_generate_pbkdf2.md     |  4 ++--
 .../authelia_crypto_hash_generate_scrypt.md     |  4 ++--
 .../authelia_crypto_hash_generate_sha2crypt.md  |  4 ++--
 .../cli/authelia/authelia_crypto_rand.md        |  6 +++---
 internal/commands/const.go                      | 10 +++++++---
 internal/commands/crypto.go                     |  6 +++---
 internal/commands/crypto_hash.go                |  6 +++---
 internal/commands/util.go                       | 17 ++++++++++++++++-
 internal/utils/const.go                         | 16 +++++++++++++++-
 12 files changed, 59 insertions(+), 26 deletions(-)

diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
index 6ffdfb80f..9f0ed8d61 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate.md
@@ -43,8 +43,8 @@ authelia crypto hash generate --help
       --password string            manually supply the password rather than using the terminal prompt
       --random                     uses a randomly generated password
       --random.characters string   sets the explicit characters for the random string
-      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
-      --random.length int          when using a randomly generated password it configures the length (default 72)
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
+      --random.length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
index e1cf3b066..b4cea0659 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_argon2.md
@@ -53,8 +53,8 @@ authelia crypto hash generate argon2 --help
       --password string            manually supply the password rather than using the terminal prompt
       --random                     uses a randomly generated password
       --random.characters string   sets the explicit characters for the random string
-      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
-      --random.length int          when using a randomly generated password it configures the length (default 72)
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
+      --random.length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
index 322fddba1..fdf1beb07 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_bcrypt.md
@@ -48,8 +48,8 @@ authelia crypto hash generate bcrypt --help
       --password string            manually supply the password rather than using the terminal prompt
       --random                     uses a randomly generated password
       --random.characters string   sets the explicit characters for the random string
-      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
-      --random.length int          when using a randomly generated password it configures the length (default 72)
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
+      --random.length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
index 8455e2a43..56c977f35 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_pbkdf2.md
@@ -49,8 +49,8 @@ authelia crypto hash generate pbkdf2 --help
       --password string            manually supply the password rather than using the terminal prompt
       --random                     uses a randomly generated password
       --random.characters string   sets the explicit characters for the random string
-      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
-      --random.length int          when using a randomly generated password it configures the length (default 72)
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
+      --random.length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
index 5fe84640d..ca078fedf 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_scrypt.md
@@ -51,8 +51,8 @@ authelia crypto hash generate scrypt --help
       --password string            manually supply the password rather than using the terminal prompt
       --random                     uses a randomly generated password
       --random.characters string   sets the explicit characters for the random string
-      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
-      --random.length int          when using a randomly generated password it configures the length (default 72)
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
+      --random.length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
index 8cf8d0099..6a35cab21 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_hash_generate_sha2crypt.md
@@ -49,8 +49,8 @@ authelia crypto hash generate sha2crypt --help
       --password string            manually supply the password rather than using the terminal prompt
       --random                     uses a randomly generated password
       --random.characters string   sets the explicit characters for the random string
-      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
-      --random.length int          when using a randomly generated password it configures the length (default 72)
+      --random.charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
+      --random.length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
index eae0b660f..fdf6d8664 100644
--- a/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
+++ b/docs/content/en/reference/cli/authelia/authelia_crypto_rand.md
@@ -43,10 +43,10 @@ authelia crypto rand --characters 0123456789ABCDEF
 ### Options
 
 ```
-      --characters string   Sets the explicit characters for the random string
-  -c, --charset string      Sets the charset for the random string, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex' (default "alphanumeric")
+      --characters string   sets the explicit characters for the random string
+  -c, --charset string      sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986' (default "alphanumeric")
   -h, --help                help for rand
-  -n, --length int          Sets the length of the random output (default 72)
+  -n, --length int          sets the character length for the random string (default 72)
 ```
 
 ### SEE ALSO
diff --git a/internal/commands/const.go b/internal/commands/const.go
index 549643ef0..fad673679 100644
--- a/internal/commands/const.go
+++ b/internal/commands/const.go
@@ -547,9 +547,13 @@ const (
 	cmdFlagNameSHA512           = "sha512"
 	cmdFlagNameConfig           = "config"
 
-	cmdFlagNameCharSet    = "charset"
-	cmdFlagNameCharacters = "characters"
-	cmdFlagNameLength     = "length"
+	cmdFlagNameCharSet     = "charset"
+	cmdFlagValueCharSet    = "alphanumeric"
+	cmdFlagUsageCharset    = "sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', and 'rfc3986'"
+	cmdFlagNameCharacters  = "characters"
+	cmdFlagUsageCharacters = "sets the explicit characters for the random string"
+	cmdFlagNameLength      = "length"
+	cmdFlagUsageLength     = "sets the character length for the random string"
 )
 
 const (
diff --git a/internal/commands/crypto.go b/internal/commands/crypto.go
index d401b61d5..642f442d4 100644
--- a/internal/commands/crypto.go
+++ b/internal/commands/crypto.go
@@ -60,9 +60,9 @@ func newCryptoRandCmd() (cmd *cobra.Command) {
 		DisableAutoGenTag: true,
 	}
 
-	cmd.Flags().StringP(cmdFlagNameCharSet, "c", "alphanumeric", "Sets the charset for the random string, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex'")
-	cmd.Flags().String(cmdFlagNameCharacters, "", "Sets the explicit characters for the random string")
-	cmd.Flags().IntP(cmdFlagNameLength, "n", 72, "Sets the length of the random output")
+	cmd.Flags().StringP(cmdFlagNameCharSet, "c", cmdFlagValueCharSet, cmdFlagUsageCharset)
+	cmd.Flags().String(cmdFlagNameCharacters, "", cmdFlagUsageCharacters)
+	cmd.Flags().IntP(cmdFlagNameLength, "n", 72, cmdFlagUsageLength)
 
 	return cmd
 }
diff --git a/internal/commands/crypto_hash.go b/internal/commands/crypto_hash.go
index ce45da15a..ec5ce26eb 100644
--- a/internal/commands/crypto_hash.go
+++ b/internal/commands/crypto_hash.go
@@ -497,9 +497,9 @@ func cmdFlagPassword(cmd *cobra.Command, noConfirm bool) {
 
 func cmdFlagRandomPassword(cmd *cobra.Command) {
 	cmd.PersistentFlags().Bool(cmdFlagNameRandom, false, "uses a randomly generated password")
-	cmd.PersistentFlags().Int(cmdFlagNameRandomLength, 72, "when using a randomly generated password it configures the length")
-	cmd.PersistentFlags().String(cmdFlagNameRandomCharSet, "alphanumeric", "sets the charset for the random password, options are 'ascii', 'alphanumeric', 'alphabetic', 'numeric', and 'numeric-hex'")
-	cmd.PersistentFlags().String(cmdFlagNameRandomCharacters, "", "sets the explicit characters for the random string")
+	cmd.PersistentFlags().String(cmdFlagNameRandomCharSet, cmdFlagValueCharSet, cmdFlagUsageCharset)
+	cmd.PersistentFlags().String(cmdFlagNameRandomCharacters, "", cmdFlagUsageCharacters)
+	cmd.PersistentFlags().Int(cmdFlagNameRandomLength, 72, cmdFlagUsageLength)
 }
 
 func cmdFlagIterations(cmd *cobra.Command, value int) {
diff --git a/internal/commands/util.go b/internal/commands/util.go
index 9aa63e78e..e4af026b4 100644
--- a/internal/commands/util.go
+++ b/internal/commands/util.go
@@ -34,6 +34,7 @@ func configFilterExisting(configs []string) (finalConfigs []string) {
 	return finalConfigs
 }
 
+//nolint:gocyclo
 func flagsGetRandomCharacters(flags *pflag.FlagSet, flagNameLength, flagNameCharSet, flagNameCharacters string) (r string, err error) {
 	var (
 		n       int
@@ -67,14 +68,28 @@ func flagsGetRandomCharacters(flags *pflag.FlagSet, flagNameLength, flagNameChar
 			charset = utils.CharSetASCII
 		case "alphanumeric":
 			charset = utils.CharSetAlphaNumeric
+		case "alphanumeric-lower":
+			charset = utils.CharSetAlphabeticLower + utils.CharSetNumeric
+		case "alphanumeric-upper":
+			charset = utils.CharSetAlphabeticUpper + utils.CharSetNumeric
 		case "alphabetic":
 			charset = utils.CharSetAlphabetic
+		case "alphabetic-lower":
+			charset = utils.CharSetAlphabeticLower
+		case "alphabetic-upper":
+			charset = utils.CharSetAlphabeticUpper
 		case "numeric-hex":
 			charset = utils.CharSetNumericHex
 		case "numeric":
 			charset = utils.CharSetNumeric
+		case "rfc3986":
+			charset = utils.CharSetRFC3986Unreserved
+		case "rfc3986-lower":
+			charset = utils.CharSetAlphabeticLower + utils.CharSetNumeric + utils.CharSetSymbolicRFC3986Unreserved
+		case "rfc3986-upper":
+			charset = utils.CharSetAlphabeticUpper + utils.CharSetNumeric + utils.CharSetSymbolicRFC3986Unreserved
 		default:
-			return "", fmt.Errorf("flag '--%s' with value '%s' is invalid, must be one of 'ascii', 'alphanumeric', 'alphabetic', 'numeric', or 'numeric-hex'", flagNameCharSet, c)
+			return "", fmt.Errorf("flag '--%s' with value '%s' is invalid, must be one of 'ascii', 'alphanumeric', 'alphabetic', 'numeric', 'numeric-hex', or 'rfc3986'", flagNameCharSet, c)
 		}
 	case useCharacters:
 		if charset, err = flags.GetString(flagNameCharacters); err != nil {
diff --git a/internal/utils/const.go b/internal/utils/const.go
index d55fab0f8..56686af64 100644
--- a/internal/utils/const.go
+++ b/internal/utils/const.go
@@ -111,8 +111,14 @@ const (
 )
 
 const (
+	// CharSetAlphabeticLower are literally just valid alphabetic lowercase printable ASCII chars.
+	CharSetAlphabeticLower = "abcdefghijklmnopqrstuvwxyz"
+
+	// CharSetAlphabeticUpper are literally just valid alphabetic uppercase printable ASCII chars.
+	CharSetAlphabeticUpper = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+
 	// CharSetAlphabetic are literally just valid alphabetic printable ASCII chars.
-	CharSetAlphabetic = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
+	CharSetAlphabetic = CharSetAlphabeticLower + CharSetAlphabeticUpper
 
 	// CharSetNumeric are literally just valid numeric chars.
 	CharSetNumeric = "0123456789"
@@ -123,11 +129,19 @@ const (
 	// CharSetSymbolic are literally just valid symbolic printable ASCII chars.
 	CharSetSymbolic = "!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~"
 
+	// CharSetSymbolicRFC3986Unreserved are RFC3986 unreserved symbol characters.
+	// See https://www.rfc-editor.org/rfc/rfc3986#section-2.3.
+	CharSetSymbolicRFC3986Unreserved = "-._~"
+
 	// CharSetAlphaNumeric are literally just valid alphanumeric printable ASCII chars.
 	CharSetAlphaNumeric = CharSetAlphabetic + CharSetNumeric
 
 	// CharSetASCII are literally just valid printable ASCII chars.
 	CharSetASCII = CharSetAlphabetic + CharSetNumeric + CharSetSymbolic
+
+	// CharSetRFC3986Unreserved are RFC3986 unreserved characters.
+	// See https://www.rfc-editor.org/rfc/rfc3986#section-2.3.
+	CharSetRFC3986Unreserved = CharSetAlphabetic + CharSetSymbolicRFC3986Unreserved
 )
 
 var htmlEscaper = strings.NewReplacer(

From e97a84860044cd88f0d63ec139945a6df8761828 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 4 Nov 2022 13:42:28 +1100
Subject: [PATCH 241/263] refactor: ldap filter (#4329)

---
 .../en/configuration/first-factor/ldap.md     |  4 +-
 .../en/integration/ldap/introduction.md       | 38 +++++++++----------
 docs/content/en/reference/guides/ldap.md      | 21 ++++++----
 .../configuration/schema/authentication.go    |  2 +-
 4 files changed, 36 insertions(+), 29 deletions(-)

diff --git a/docs/content/en/configuration/first-factor/ldap.md b/docs/content/en/configuration/first-factor/ldap.md
index a46710169..9fb9127f3 100644
--- a/docs/content/en/configuration/first-factor/ldap.md
+++ b/docs/content/en/configuration/first-factor/ldap.md
@@ -97,12 +97,12 @@ authentication_backend:
         DO NOT USE==
         -----END RSA PRIVATE KEY-----
     base_dn: DC=example,DC=com
-    additional_users_dn: ou=users
+    additional_users_dn: OU=users
     users_filter: (&({username_attribute}={input})(objectClass=person))
     username_attribute: uid
     mail_attribute: mail
     display_name_attribute: displayName
-    additional_groups_dn: ou=groups
+    additional_groups_dn: OU=groups
     groups_filter: (&(member={dn})(objectClass=groupOfNames))
     group_name_attribute: cn
     permit_referrals: false
diff --git a/docs/content/en/integration/ldap/introduction.md b/docs/content/en/integration/ldap/introduction.md
index 1ce1172b3..596caa125 100644
--- a/docs/content/en/integration/ldap/introduction.md
+++ b/docs/content/en/integration/ldap/introduction.md
@@ -37,8 +37,8 @@ In your Authelia configuration you will need to enter and update the following v
 * url `ldap://OpenLDAP:1389` - servers dns name & port.
   *tip: if you have Authelia on a container network that is routable, you can just use the container name*
 * server_name `ldap01.example.com` - servers name
-* base_dn `dc=example,dc=com` - common name of domain root.
-* groups_filter `dc=example,dc=com` - replace relevant section with your own domain in common name format, same as base_dn.
+* base_dn `DC=example,DC=com` - common name of domain root.
+* groups_filter `DC=example,DC=com` - replace relevant section with your own domain in common name format, same as base_dn.
 * user `authelia` - username for Authelia service account
 * password `SUPER_COMPLEX_PASSWORD` - password for Authelia service account
 
@@ -52,16 +52,16 @@ In your Authelia configuration you will need to enter and update the following v
       server_name: ldap01.example.com
       skip_verify: true
       minimum_version: TLS1.2
-    base_dn: dc=example,dc=com
-    additional_users_dn: ou=users
+    base_dn: DC=example,DC=com
+    additional_users_dn: OU=users
     users_filter: (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
     username_attribute: uid
     mail_attribute: mail
     display_name_attribute: displayName
-    additional_groups_dn: ou=groups
-    groups_filter: (&(member=uid={input},ou=users,dc=example,dc=com)(objectclass=groupofnames))
+    additional_groups_dn: OU=groups
+    groups_filter: (&(member=UID={input},OU=users,DC=example,DC=com)(objectClass=groupOfNames))
     group_name_attribute: cn
-    user: uid=authelia,ou=service accounts,dc=example,dc=com
+    user: UID=authelia,OU=service accounts,DC=example,DC=com
     password: "SUPER_COMPLEX_PASSWORD"
 ```
 Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with
@@ -84,8 +84,8 @@ login, and reference it within the filters below.
 In your Authelia configuration you will need to enter and update the following variables -
 * url `ldap://ldap` - servers dns name. Port will assume 389 as standard. Specify custom port with `:port` if needed.
 * server_name `ldap01.example.com` - servers name
-* base_dn `dc=example,dc=com` - common name of domain root.
-* groups_filter `dc=example,dc=com` - replace relevant section with your own domain in common name format, same as base_dn.
+* base_dn `DC=example,DC=com` - common name of domain root.
+* groups_filter `DC=example,DC=com` - replace relevant section with your own domain in common name format, same as base_dn.
 * user `authelia` - username for Authelia service account
 * password `SUPER_COMPLEX_PASSWORD` - password for Authelia service account
 
@@ -99,16 +99,16 @@ In your Authelia configuration you will need to enter and update the following v
       server_name: ldap.example.com
       skip_verify: true
       minimum_version: TLS1.2
-    base_dn: dc=example,dc=com
+    base_dn: dc=example,DC=com
     username_attribute: uid
-    additional_users_dn: cn=users,cn=accounts
+    additional_users_dn: CN=users,CN=accounts
     users_filter: (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
-    additional_groups_dn: ou=groups
-    groups_filter: (&(member=uid={input},cn=users,cn=accounts,dc=example,dc=com)(objectclass=groupofnames))
+    additional_groups_dn: OU=groups
+    groups_filter: (&(member=UID={input},CN=users,CN=accounts,DC=example,DC=com)(objectClass=groupOfNames))
     group_name_attribute: cn
     mail_attribute: mail
     display_name_attribute: displayName
-    user: uid=authelia,cn=users,cn=accounts,dc=example,dc=com
+    user: UID=authelia,CN=users,CN=accounts,DC=example,DC=com
     password: "SUPER_COMPLEX_PASSWORD"
 ```
 Following this, restart Authelia, and you should be able to begin using LDAP integration for your user logins, with
@@ -128,7 +128,7 @@ within the filters below.
 In your Authelia configuration you will need to enter and update the following variables -
 * url `ldap://OpenLDAP:1389` - servers dns name & port.
   *tip: if you have Authelia on a container network that is routable, you can just use the container name*
-* base_dn `dc=example,dc=com` - common name of domain root.
+* base_dn `DC=example,DC=com` - common name of domain root.
 * user `authelia` - username for Authelia service account.
 * password `SUPER_COMPLEX_PASSWORD` - password for Authelia service account,
 
@@ -138,19 +138,19 @@ ldap:
     url: ldap://lldap:3890
     timeout: 5s
     start_tls: false
-    base_dn: dc=example,dc=com
+    base_dn: dc=example,DC=com
     username_attribute: uid
-    additional_users_dn: ou=people
+    additional_users_dn: OU=people
     # To allow sign in both with username and email, one can use a filter like
     # (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
     users_filter: (&({username_attribute}={input})(objectClass=person))
-    additional_groups_dn: ou=groups
+    additional_groups_dn: OU=groups
     groups_filter: (member={dn})
     group_name_attribute: cn
     mail_attribute: mail
     display_name_attribute: displayName
     # The username and password of the admin or service user.
-    user: uid=authelia,ou=people,dc=example,dc=com
+    user: UID=authelia,OU=people,DC=example,DC=com
     password: "SUPER_COMPLEX_PASSWORD"
 ```
 Following this, restart Authelia, and you should be able to begin using lldap integration for your user logins, with
diff --git a/docs/content/en/reference/guides/ldap.md b/docs/content/en/reference/guides/ldap.md
index 0867471b8..1e581b23e 100644
--- a/docs/content/en/reference/guides/ldap.md
+++ b/docs/content/en/reference/guides/ldap.md
@@ -94,11 +94,18 @@ accounts. The active directory example has two attribute filters that accomplish
 be appreciated). The userAccountControl filter checks that the account is not disabled and the pwdLastSet makes sure that
 value is not 0 which means the password requires changing at the next login.
 
-| Implementation  |                                                                          Users Filter                                                                           |                       Groups Filter                       |
-|:---------------:|:---------------------------------------------------------------------------------------------------------------------------------------------------------------:|:---------------------------------------------------------:|
-|     custom      |                                                                               N/A                                                                               |                            N/A                            |
-| activedirectory | (&(&#124;({username_attribute}={input})({mail_attribute}={input}))(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(pwdLastSet=0))) | (&(member={dn})(objectClass=group)(objectCategory=group)) |
+| Implementation  |                                                                          Users Filter                                                                           |                         Groups Filter                         |
+|:---------------:|:---------------------------------------------------------------------------------------------------------------------------------------------------------------:|:-------------------------------------------------------------:|
+|     custom      |                                                                               N/A                                                                               |                              N/A                              |
+| activedirectory | (&(&#124;({username_attribute}={input})({mail_attribute}={input}))(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(pwdLastSet=0))) | (&(member={dn})(objectClass=group)(sAMAccountType=268435456)) |
 
-*__Note:__* The Active Directory filter `(sAMAccountType=805306368)` is exactly the same as
-`(&(objectCategory=person)(objectClass=user))` except that the former is more performant, you can read more about this
-and other Active Directory filters on the [TechNet wiki](https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx).
+##### Microsoft Active Directory sAMAccountType
+
+| Account Type Value |        Description         |               Equivalent Filter                |
+|:------------------:|:--------------------------:|:----------------------------------------------:|
+|     268435456      |    Normal Group Objects    |                      N/A                       |
+|     805306368      |    Normal User Accounts    | `(&(objectCategory=person)(objectClass=user))` |
+
+*__References:__*
+- Account Type Values: [Microsoft Learn](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-samr/e742be45-665d-4576-b872-0bc99d1e1fbe).
+- LDAP Syntax Filters: [Microsoft TechNet Wiki](https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx)
diff --git a/internal/configuration/schema/authentication.go b/internal/configuration/schema/authentication.go
index e070a503a..9d118c091 100644
--- a/internal/configuration/schema/authentication.go
+++ b/internal/configuration/schema/authentication.go
@@ -191,7 +191,7 @@ var DefaultLDAPAuthenticationBackendConfigurationImplementationActiveDirectory =
 	UsernameAttribute:    "sAMAccountName",
 	MailAttribute:        "mail",
 	DisplayNameAttribute: "displayName",
-	GroupsFilter:         "(&(member={dn})(objectClass=group))",
+	GroupsFilter:         "(&(member={dn})(sAMAccountType=268435456))",
 	GroupNameAttribute:   "cn",
 	Timeout:              time.Second * 5,
 	TLS: &TLSConfig{

From 705b34d44a4c5d4fc6fc8f4ecf3427806da07cf5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 4 Nov 2022 06:33:17 +0000
Subject: [PATCH 242/263] build(deps): update dependency vite-plugin-istanbul
 to v3.0.2 (#4327)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/web/package.json b/web/package.json
index d19f103fb..94c265028 100644
--- a/web/package.json
+++ b/web/package.json
@@ -178,7 +178,7 @@
     "typescript": "4.8.4",
     "vite": "3.2.2",
     "vite-plugin-eslint": "1.8.1",
-    "vite-plugin-istanbul": "3.0.1",
+    "vite-plugin-istanbul": "3.0.2",
     "vite-plugin-svgr": "2.2.2",
     "vite-tsconfig-paths": "3.5.2"
   }
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 483dddb22..3b86c29c5 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -60,7 +60,7 @@ specifiers:
   typescript: 4.8.4
   vite: 3.2.2
   vite-plugin-eslint: 1.8.1
-  vite-plugin-istanbul: 3.0.1
+  vite-plugin-istanbul: 3.0.2
   vite-plugin-svgr: 2.2.2
   vite-tsconfig-paths: 3.5.2
   zxcvbn: 4.4.2
@@ -128,7 +128,7 @@ devDependencies:
   typescript: 4.8.4
   vite: 3.2.2
   vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.2
-  vite-plugin-istanbul: 3.0.1
+  vite-plugin-istanbul: 3.0.2
   vite-plugin-svgr: 2.2.2_vite@3.2.2
   vite-tsconfig-paths: 3.5.2_vite@3.2.2
 
@@ -3513,7 +3513,7 @@ packages:
   /@types/babel__core/7.1.19:
     resolution: {integrity: sha512-WEOTgRsbYkvA/KCsDwVEGkd7WAr1e3g31VHQ8zy5gul/V1qKullU/BU5I68X5v7V3GnB9eotmom4v5a5gjxorw==}
     dependencies:
-      '@babel/parser': 7.18.11
+      '@babel/parser': 7.19.6
       '@babel/types': 7.19.0
       '@types/babel__generator': 7.6.4
       '@types/babel__template': 7.4.1
@@ -6699,7 +6699,7 @@ packages:
     engines: {node: '>=8'}
     dependencies:
       '@babel/core': 7.19.6
-      '@babel/parser': 7.18.11
+      '@babel/parser': 7.19.6
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.0
       semver: 6.3.0
@@ -9382,8 +9382,8 @@ packages:
       vite: 3.2.2
     dev: true
 
-  /vite-plugin-istanbul/3.0.1:
-    resolution: {integrity: sha512-b6yBg7WHXHTaULcyb/d17/YXFcYrV6nHTiqYxOIhhbIFjgp8CgVkuP3iGQU1vRxeutrIwTa4pFNmS4uZSAKhGA==}
+  /vite-plugin-istanbul/3.0.2:
+    resolution: {integrity: sha512-eOKedaeciqJTLEAUo7mkMqXjjeAXGhHUYuiLLBUaBwj8AdO31uVOsZvKeVViRqHKyhi5YlarmGh8r7jJVlX0VQ==}
     dependencies:
       '@istanbuljs/load-nyc-config': 1.1.0
       istanbul-lib-instrument: 5.2.0

From 02920c18be961166f3679a6ad0df0b3c02bb1773 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Fri, 4 Nov 2022 22:24:10 +1100
Subject: [PATCH 243/263] refactor: few misc issues (#4330)

---
 docs/content/en/reference/guides/ldap.md | 8 ++++----
 internal/utils/const.go                  | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/content/en/reference/guides/ldap.md b/docs/content/en/reference/guides/ldap.md
index 1e581b23e..80a5eccb2 100644
--- a/docs/content/en/reference/guides/ldap.md
+++ b/docs/content/en/reference/guides/ldap.md
@@ -94,10 +94,10 @@ accounts. The active directory example has two attribute filters that accomplish
 be appreciated). The userAccountControl filter checks that the account is not disabled and the pwdLastSet makes sure that
 value is not 0 which means the password requires changing at the next login.
 
-| Implementation  |                                                                          Users Filter                                                                           |                         Groups Filter                         |
-|:---------------:|:---------------------------------------------------------------------------------------------------------------------------------------------------------------:|:-------------------------------------------------------------:|
-|     custom      |                                                                               N/A                                                                               |                              N/A                              |
-| activedirectory | (&(&#124;({username_attribute}={input})({mail_attribute}={input}))(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(pwdLastSet=0))) | (&(member={dn})(objectClass=group)(sAMAccountType=268435456)) |
+| Implementation  |                                                                          Users Filter                                                                           |               Groups Filter                |
+|:---------------:|:---------------------------------------------------------------------------------------------------------------------------------------------------------------:|:------------------------------------------:|
+|     custom      |                                                                               N/A                                                                               |                    N/A                     |
+| activedirectory | (&(&#124;({username_attribute}={input})({mail_attribute}={input}))(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(pwdLastSet=0))) | (&(member={dn})(sAMAccountType=268435456)) |
 
 ##### Microsoft Active Directory sAMAccountType
 
diff --git a/internal/utils/const.go b/internal/utils/const.go
index 56686af64..1188b5f9c 100644
--- a/internal/utils/const.go
+++ b/internal/utils/const.go
@@ -141,7 +141,7 @@ const (
 
 	// CharSetRFC3986Unreserved are RFC3986 unreserved characters.
 	// See https://www.rfc-editor.org/rfc/rfc3986#section-2.3.
-	CharSetRFC3986Unreserved = CharSetAlphabetic + CharSetSymbolicRFC3986Unreserved
+	CharSetRFC3986Unreserved = CharSetAlphabetic + CharSetNumeric + CharSetSymbolicRFC3986Unreserved
 )
 
 var htmlEscaper = strings.NewReplacer(

From b570e2987980f00b22a6acd6afde517a904d05c8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 4 Nov 2022 16:58:46 +0000
Subject: [PATCH 244/263] build(deps): update dependency @types/react to
 v18.0.25 (#4331)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 94 +++++++++++++++++++++++-----------------------
 2 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/web/package.json b/web/package.json
index 94c265028..d8c960852 100644
--- a/web/package.json
+++ b/web/package.json
@@ -150,7 +150,7 @@
     "@types/jest": "29.2.1",
     "@types/node": "18.11.9",
     "@types/qrcode.react": "1.0.2",
-    "@types/react": "18.0.24",
+    "@types/react": "18.0.25",
     "@types/react-dom": "18.0.8",
     "@types/zxcvbn": "4.4.1",
     "@typescript-eslint/eslint-plugin": "5.42.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 3b86c29c5..ec2b96a0c 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -18,7 +18,7 @@ specifiers:
   '@types/jest': 29.2.1
   '@types/node': 18.11.9
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.24
+  '@types/react': 18.0.25
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.42.0
@@ -67,15 +67,15 @@ specifiers:
 
 dependencies:
   '@emotion/cache': 11.10.5
-  '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
-  '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
+  '@emotion/react': 11.10.5_fan5qbzahqtxlm5dzefqlqx5ia
+  '@emotion/styled': 11.10.5_otcjdfkheatawhug6fwk7ldzni
   '@fortawesome/fontawesome-svg-core': 6.2.0
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_5n7l3nqogz2ltkpvtlyqobxizm
-  '@mui/material': 5.10.12_gs4twfomdgooimayvnfrqgiwam
-  '@mui/styles': 5.10.10_bbvjflvjoibwhtpmedigb26h6y
+  '@mui/icons-material': 5.10.9_pyu3bnv7xtproabsf64djpmivq
+  '@mui/material': 5.10.12_thp4wrxo45nyllusrnt46mid4u
+  '@mui/styles': 5.10.10_fan5qbzahqtxlm5dzefqlqx5ia
   axios: 0.27.2
   broadcast-channel: 4.18.1
   classnames: 2.3.2
@@ -100,7 +100,7 @@ devDependencies:
   '@types/jest': 29.2.1
   '@types/node': 18.11.9
   '@types/qrcode.react': 1.0.2
-  '@types/react': 18.0.24
+  '@types/react': 18.0.25
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
@@ -2381,7 +2381,7 @@ packages:
     resolution: {integrity: sha512-G/YwXTkv7Den9mXDO7AhLWkE3q+I92B+VqAE+dYG4NGPaHZGvt3G8Q0p9vmE+sq7rTGphUbAvmQ9YpbfMQGGlA==}
     dev: false
 
-  /@emotion/react/11.10.5_bbvjflvjoibwhtpmedigb26h6y:
+  /@emotion/react/11.10.5_fan5qbzahqtxlm5dzefqlqx5ia:
     resolution: {integrity: sha512-TZs6235tCJ/7iF6/rvTaOH4oxQg2gMAcdHemjwLKIjKz4rRuYe1HJ2TQJKnAcRAfOUDdU8XoDadCe1rl72iv8A==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2400,7 +2400,7 @@ packages:
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
       '@emotion/weak-memoize': 0.3.0
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       hoist-non-react-statics: 3.3.2
       react: 18.2.0
     dev: false
@@ -2419,7 +2419,7 @@ packages:
     resolution: {integrity: sha512-zxRBwl93sHMsOj4zs+OslQKg/uhF38MB+OMKoCrVuS0nyTkqnau+BM3WGEoOptg9Oz45T/aIGs1qbVAsEFo3nA==}
     dev: false
 
-  /@emotion/styled/11.10.5_wm6ohc3abj5yburmg6pjdgzp24:
+  /@emotion/styled/11.10.5_otcjdfkheatawhug6fwk7ldzni:
     resolution: {integrity: sha512-8EP6dD7dMkdku2foLoruPCNkRevzdcBaY6q0l0OsbyJK+x8D9HWjX27ARiSIKNF634hY9Zdoedh8bJCiva8yZw==}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -2435,11 +2435,11 @@ packages:
       '@babel/runtime': 7.19.4
       '@emotion/babel-plugin': 11.10.5
       '@emotion/is-prop-valid': 1.2.0
-      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
+      '@emotion/react': 11.10.5_fan5qbzahqtxlm5dzefqlqx5ia
       '@emotion/serialize': 1.1.1
       '@emotion/use-insertion-effect-with-fallbacks': 1.0.0_react@18.2.0
       '@emotion/utils': 1.2.0
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       react: 18.2.0
     dev: false
 
@@ -2901,7 +2901,7 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.104_knhnagtyfncgg2hpin7s37uixq:
+  /@mui/base/5.0.0-alpha.104_2zx2umvpluuhvlq44va5bta2da:
     resolution: {integrity: sha512-tQPxZTzfYMwxYfKhEwufbTfdLpNjFdW7bXq6dK0j8651AAyZL4M8wynWUQ98hH1362R26mZFhVxHB2UD9t7VuA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2914,10 +2914,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@emotion/is-prop-valid': 1.2.0
-      '@mui/types': 7.2.0_@types+react@18.0.24
+      '@mui/types': 7.2.0_@types+react@18.0.25
       '@mui/utils': 5.10.9_react@18.2.0
       '@popperjs/core': 2.11.6
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       clsx: 1.2.1
       prop-types: 15.8.1
       react: 18.2.0
@@ -2929,7 +2929,7 @@ packages:
     resolution: {integrity: sha512-cR8lOS606G++iVHR8I6ySgMAEiPoA3DxO/nLeqiv7w7d1707kvKoV4/7SWjh4ui+kHb052xlf/G196q2EKx31w==}
     dev: false
 
-  /@mui/icons-material/5.10.9_5n7l3nqogz2ltkpvtlyqobxizm:
+  /@mui/icons-material/5.10.9_pyu3bnv7xtproabsf64djpmivq:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2941,12 +2941,12 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.12_gs4twfomdgooimayvnfrqgiwam
-      '@types/react': 18.0.24
+      '@mui/material': 5.10.12_thp4wrxo45nyllusrnt46mid4u
+      '@types/react': 18.0.25
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.12_gs4twfomdgooimayvnfrqgiwam:
+  /@mui/material/5.10.12_thp4wrxo45nyllusrnt46mid4u:
     resolution: {integrity: sha512-rG9ZTkG9qUwujyAY1I+uQAa9pkGdsWY3KN+wvS/6H6ZbYIA06QRwmig6ySC6LbeB3WL/I/1ngwJqWX7nfINSbA==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2964,14 +2964,14 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.4
-      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
-      '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
-      '@mui/base': 5.0.0-alpha.104_knhnagtyfncgg2hpin7s37uixq
+      '@emotion/react': 11.10.5_fan5qbzahqtxlm5dzefqlqx5ia
+      '@emotion/styled': 11.10.5_otcjdfkheatawhug6fwk7ldzni
+      '@mui/base': 5.0.0-alpha.104_2zx2umvpluuhvlq44va5bta2da
       '@mui/core-downloads-tracker': 5.10.12
-      '@mui/system': 5.10.12_3ccit3vaizg4wqqen3724viway
-      '@mui/types': 7.2.0_@types+react@18.0.24
+      '@mui/system': 5.10.12_v64nlmo6pkqfmpmxge6otzlg54
+      '@mui/types': 7.2.0_@types+react@18.0.25
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       '@types/react-transition-group': 4.4.5
       clsx: 1.2.1
       csstype: 3.1.1
@@ -2982,7 +2982,7 @@ packages:
       react-transition-group: 4.4.5_biqbaboplfbrettd7655fr4n2y
     dev: false
 
-  /@mui/private-theming/5.10.9_bbvjflvjoibwhtpmedigb26h6y:
+  /@mui/private-theming/5.10.9_fan5qbzahqtxlm5dzefqlqx5ia:
     resolution: {integrity: sha512-BN7/CnsVPVyBaQpDTij4uV2xGYHHHhOgpdxeYLlIu+TqnsVM7wUeF+37kXvHovxM6xmL5qoaVUD98gDC0IZnHg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2994,7 +2994,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
@@ -3014,14 +3014,14 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.4
       '@emotion/cache': 11.10.5
-      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
-      '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
+      '@emotion/react': 11.10.5_fan5qbzahqtxlm5dzefqlqx5ia
+      '@emotion/styled': 11.10.5_otcjdfkheatawhug6fwk7ldzni
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/styles/5.10.10_bbvjflvjoibwhtpmedigb26h6y:
+  /@mui/styles/5.10.10_fan5qbzahqtxlm5dzefqlqx5ia:
     resolution: {integrity: sha512-utr87q/euocRdc2ekFX7DL1gqTVfogSVeu74Nspr8rtK/afC9QwF3ScP/XThVXWPcQKjBWHMKWtAO9BSVE4KDg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3033,10 +3033,10 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       '@emotion/hash': 0.9.0
-      '@mui/private-theming': 5.10.9_bbvjflvjoibwhtpmedigb26h6y
-      '@mui/types': 7.2.0_@types+react@18.0.24
+      '@mui/private-theming': 5.10.9_fan5qbzahqtxlm5dzefqlqx5ia
+      '@mui/types': 7.2.0_@types+react@18.0.25
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       clsx: 1.2.1
       csstype: 3.1.1
       hoist-non-react-statics: 3.3.2
@@ -3052,7 +3052,7 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.12_3ccit3vaizg4wqqen3724viway:
+  /@mui/system/5.10.12_v64nlmo6pkqfmpmxge6otzlg54:
     resolution: {integrity: sha512-9DcN3hF2KTTTpZ0K5Tn20B+Tz7tIqDmJLk1M6P0CYoAGUN/xrcF/6dn1zZ829rxE5tmauoDUekTfomrvPsvlSQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -3069,20 +3069,20 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.4
-      '@emotion/react': 11.10.5_bbvjflvjoibwhtpmedigb26h6y
-      '@emotion/styled': 11.10.5_wm6ohc3abj5yburmg6pjdgzp24
-      '@mui/private-theming': 5.10.9_bbvjflvjoibwhtpmedigb26h6y
+      '@emotion/react': 11.10.5_fan5qbzahqtxlm5dzefqlqx5ia
+      '@emotion/styled': 11.10.5_otcjdfkheatawhug6fwk7ldzni
+      '@mui/private-theming': 5.10.9_fan5qbzahqtxlm5dzefqlqx5ia
       '@mui/styled-engine': 5.10.8_dovxhg2tvkkxkdnqyoum6wzcxm
-      '@mui/types': 7.2.0_@types+react@18.0.24
+      '@mui/types': 7.2.0_@types+react@18.0.25
       '@mui/utils': 5.10.9_react@18.2.0
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
       clsx: 1.2.1
       csstype: 3.1.1
       prop-types: 15.8.1
       react: 18.2.0
     dev: false
 
-  /@mui/types/7.2.0_@types+react@18.0.24:
+  /@mui/types/7.2.0_@types+react@18.0.25:
     resolution: {integrity: sha512-lGXtFKe5lp3UxTBGqKI1l7G8sE2xBik8qCfrLHD5olwP/YU0/ReWoWT7Lp1//ri32dK39oPMrJN8TgbkCSbsNA==}
     peerDependencies:
       '@types/react': '*'
@@ -3090,7 +3090,7 @@ packages:
       '@types/react':
         optional: true
     dependencies:
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
     dev: false
 
   /@mui/utils/5.10.9_react@18.2.0:
@@ -3624,29 +3624,29 @@ packages:
   /@types/qrcode.react/1.0.2:
     resolution: {integrity: sha512-I9Oq5Cjlkgy3Tw7krCnCXLw2/zMhizkTere49OOcta23tkvH0xBTP0yInimTh0gstLRtb8Ki9NZVujE5UI6ffQ==}
     dependencies:
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
     dev: true
 
   /@types/react-dom/18.0.8:
     resolution: {integrity: sha512-C3GYO0HLaOkk9dDAz3Dl4sbe4AKUGTCfFIZsz3n/82dPNN8Du533HzKatDxeUYWu24wJgMP1xICqkWk1YOLOIw==}
     dependencies:
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
     dev: true
 
   /@types/react-is/17.0.3:
     resolution: {integrity: sha512-aBTIWg1emtu95bLTLx0cpkxwGW3ueZv71nE2YFBpL8k/z5czEW8yYpOo8Dp+UUAFAtKwNaOsh/ioSeQnWlZcfw==}
     dependencies:
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
     dev: false
 
   /@types/react-transition-group/4.4.5:
     resolution: {integrity: sha512-juKD/eiSM3/xZYzjuzH6ZwpP+/lejltmiS3QEzV/vmb/Q8+HfDmxu+Baga8UEMGBqV88Nbg4l2hY/K2DkyaLLA==}
     dependencies:
-      '@types/react': 18.0.24
+      '@types/react': 18.0.25
     dev: false
 
-  /@types/react/18.0.24:
-    resolution: {integrity: sha512-wRJWT6ouziGUy+9uX0aW4YOJxAY0bG6/AOk5AW5QSvZqI7dk6VBIbXvcVgIw/W5Jrl24f77df98GEKTJGOLx7Q==}
+  /@types/react/18.0.25:
+    resolution: {integrity: sha512-xD6c0KDT4m7n9uD4ZHi02lzskaiqcBxf4zi+tXZY98a04wvc0hi/TcCPC2FOESZi51Nd7tlUeOJY8RofL799/g==}
     dependencies:
       '@types/prop-types': 15.7.5
       '@types/scheduler': 0.16.2

From 908d7e02f76cecaaba0bd508959f7b67cc1d5aa1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 5 Nov 2022 14:36:35 +1100
Subject: [PATCH 245/263] build(deps): update dependency axios to v1 (#4131)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 13 +++++++++----
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index d8c960852..e816eafd7 100644
--- a/web/package.json
+++ b/web/package.json
@@ -28,7 +28,7 @@
     "@mui/icons-material": "5.10.9",
     "@mui/material": "5.10.12",
     "@mui/styles": "5.10.10",
-    "axios": "0.27.2",
+    "axios": "1.1.3",
     "broadcast-channel": "4.18.1",
     "classnames": "2.3.2",
     "i18next": "22.0.4",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index ec2b96a0c..544411352 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -24,7 +24,7 @@ specifiers:
   '@typescript-eslint/eslint-plugin': 5.42.0
   '@typescript-eslint/parser': 5.42.0
   '@vitejs/plugin-react': 2.2.0
-  axios: 0.27.2
+  axios: 1.1.3
   broadcast-channel: 4.18.1
   classnames: 2.3.2
   esbuild: 0.15.12
@@ -76,7 +76,7 @@ dependencies:
   '@mui/icons-material': 5.10.9_pyu3bnv7xtproabsf64djpmivq
   '@mui/material': 5.10.12_thp4wrxo45nyllusrnt46mid4u
   '@mui/styles': 5.10.10_fan5qbzahqtxlm5dzefqlqx5ia
-  axios: 0.27.2
+  axios: 1.1.3
   broadcast-channel: 4.18.1
   classnames: 2.3.2
   i18next: 22.0.4
@@ -4163,11 +4163,12 @@ packages:
     engines: {node: '>=4'}
     dev: true
 
-  /axios/0.27.2:
-    resolution: {integrity: sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==}
+  /axios/1.1.3:
+    resolution: {integrity: sha512-00tXVRwKx/FZr/IDVFt4C+f9FYairX517WoGCL6dpOntqLkZofjhu43F/Xl44UOpqa+9sLFDrG/XAnFsUYgkDA==}
     dependencies:
       follow-redirects: 1.15.1
       form-data: 4.0.0
+      proxy-from-env: 1.1.0
     transitivePeerDependencies:
       - debug
     dev: false
@@ -8177,6 +8178,10 @@ packages:
       object-assign: 4.1.1
       react-is: 16.13.1
 
+  /proxy-from-env/1.1.0:
+    resolution: {integrity: sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==}
+    dev: false
+
   /psl/1.9.0:
     resolution: {integrity: sha512-E/ZsdU4HLs/68gYzgGTkMicWTLPdAftJLfJFlLUAAKZGkStNU72sZjT66SnMDVOfOWY/YAoiD7Jxa9iHvngcag==}
     dev: true

From 606875ea3944de6ca44dbe44012b9fe1051b4f41 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 5 Nov 2022 16:00:35 +1100
Subject: [PATCH 246/263] build(deps): update dependency esbuild to v0.15.13
 (#4323)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 148 ++++++++++++++++++++++-----------------------
 2 files changed, 75 insertions(+), 75 deletions(-)

diff --git a/web/package.json b/web/package.json
index e816eafd7..69cf65b06 100644
--- a/web/package.json
+++ b/web/package.json
@@ -156,7 +156,7 @@
     "@typescript-eslint/eslint-plugin": "5.42.0",
     "@typescript-eslint/parser": "5.42.0",
     "@vitejs/plugin-react": "2.2.0",
-    "esbuild": "0.15.12",
+    "esbuild": "0.15.13",
     "esbuild-jest": "0.5.0",
     "eslint": "8.26.0",
     "eslint-config-prettier": "8.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 544411352..6dfddadaa 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -27,7 +27,7 @@ specifiers:
   axios: 1.1.3
   broadcast-channel: 4.18.1
   classnames: 2.3.2
-  esbuild: 0.15.12
+  esbuild: 0.15.13
   esbuild-jest: 0.5.0
   eslint: 8.26.0
   eslint-config-prettier: 8.5.0
@@ -106,8 +106,8 @@ devDependencies:
   '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
   '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
   '@vitejs/plugin-react': 2.2.0_vite@3.2.2
-  esbuild: 0.15.12
-  esbuild-jest: 0.5.0_esbuild@0.15.12
+  esbuild: 0.15.13
+  esbuild-jest: 0.5.0_esbuild@0.15.13
   eslint: 8.26.0
   eslint-config-prettier: 8.5.0_eslint@8.26.0
   eslint-config-react-app: 7.0.1_2kc4q5r3nphyswrf6yds6ub5nq
@@ -2463,8 +2463,8 @@ packages:
     resolution: {integrity: sha512-AHPmaAx+RYfZz0eYu6Gviiagpmiyw98ySSlQvCUhVGDRtDFe4DBS0x1bSjdF3gqUDYOczB+yYvBTtEylYSdRhg==}
     dev: false
 
-  /@esbuild/android-arm/0.15.12:
-    resolution: {integrity: sha512-IC7TqIqiyE0MmvAhWkl/8AEzpOtbhRNDo7aph47We1NbE5w2bt/Q+giAhe0YYeVpYnIhGMcuZY92qDK6dQauvA==}
+  /@esbuild/android-arm/0.15.13:
+    resolution: {integrity: sha512-RY2fVI8O0iFUNvZirXaQ1vMvK0xhCcl0gqRj74Z6yEiO1zAUa7hbsdwZM1kzqbxHK7LFyMizipfXT3JME+12Hw==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [android]
@@ -2472,8 +2472,8 @@ packages:
     dev: true
     optional: true
 
-  /@esbuild/linux-loong64/0.15.12:
-    resolution: {integrity: sha512-tZEowDjvU7O7I04GYvWQOS4yyP9E/7YlsB0jjw1Ycukgr2ycEzKyIk5tms5WnLBymaewc6VmRKnn5IJWgK4eFw==}
+  /@esbuild/linux-loong64/0.15.13:
+    resolution: {integrity: sha512-+BoyIm4I8uJmH/QDIH0fu7MG0AEx9OXEDXnqptXCwKOlOqZiS4iraH1Nr7/ObLMokW3sOCeBNyD68ATcV9b9Ag==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
@@ -5122,8 +5122,8 @@ packages:
       is-symbol: 1.0.4
     dev: true
 
-  /esbuild-android-64/0.15.12:
-    resolution: {integrity: sha512-MJKXwvPY9g0rGps0+U65HlTsM1wUs9lbjt5CU19RESqycGFDRijMDQsh68MtbzkqWSRdEtiKS1mtPzKneaAI0Q==}
+  /esbuild-android-64/0.15.13:
+    resolution: {integrity: sha512-yRorukXBlokwTip+Sy4MYskLhJsO0Kn0/Fj43s1krVblfwP+hMD37a4Wmg139GEsMLl+vh8WXp2mq/cTA9J97g==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
@@ -5131,8 +5131,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-android-arm64/0.15.12:
-    resolution: {integrity: sha512-Hc9SEcZbIMhhLcvhr1DH+lrrec9SFTiRzfJ7EGSBZiiw994gfkVV6vG0sLWqQQ6DD7V4+OggB+Hn0IRUdDUqvA==}
+  /esbuild-android-arm64/0.15.13:
+    resolution: {integrity: sha512-TKzyymLD6PiVeyYa4c5wdPw87BeAiTXNtK6amWUcXZxkV51gOk5u5qzmDaYSwiWeecSNHamFsaFjLoi32QR5/w==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
@@ -5140,8 +5140,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-64/0.15.12:
-    resolution: {integrity: sha512-qkmqrTVYPFiePt5qFjP8w/S+GIUMbt6k8qmiPraECUWfPptaPJUGkCKrWEfYFRWB7bY23FV95rhvPyh/KARP8Q==}
+  /esbuild-darwin-64/0.15.13:
+    resolution: {integrity: sha512-WAx7c2DaOS6CrRcoYCgXgkXDliLnFv3pQLV6GeW1YcGEZq2Gnl8s9Pg7ahValZkpOa0iE/ojRVQ87sbUhF1Cbg==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
@@ -5149,8 +5149,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-darwin-arm64/0.15.12:
-    resolution: {integrity: sha512-z4zPX02tQ41kcXMyN3c/GfZpIjKoI/BzHrdKUwhC/Ki5BAhWv59A9M8H+iqaRbwpzYrYidTybBwiZAIWCLJAkw==}
+  /esbuild-darwin-arm64/0.15.13:
+    resolution: {integrity: sha512-U6jFsPfSSxC3V1CLiQqwvDuj3GGrtQNB3P3nNC3+q99EKf94UGpsG9l4CQ83zBs1NHrk1rtCSYT0+KfK5LsD8A==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
@@ -5158,8 +5158,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-64/0.15.12:
-    resolution: {integrity: sha512-XFL7gKMCKXLDiAiBjhLG0XECliXaRLTZh6hsyzqUqPUf/PY4C6EJDTKIeqqPKXaVJ8+fzNek88285krSz1QECw==}
+  /esbuild-freebsd-64/0.15.13:
+    resolution: {integrity: sha512-whItJgDiOXaDG/idy75qqevIpZjnReZkMGCgQaBWZuKHoElDJC1rh7MpoUgupMcdfOd+PgdEwNQW9DAE6i8wyA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
@@ -5167,8 +5167,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-freebsd-arm64/0.15.12:
-    resolution: {integrity: sha512-jwEIu5UCUk6TjiG1X+KQnCGISI+ILnXzIzt9yDVrhjug2fkYzlLbl0K43q96Q3KB66v6N1UFF0r5Ks4Xo7i72g==}
+  /esbuild-freebsd-arm64/0.15.13:
+    resolution: {integrity: sha512-6pCSWt8mLUbPtygv7cufV0sZLeylaMwS5Fznj6Rsx9G2AJJsAjQ9ifA+0rQEIg7DwJmi9it+WjzNTEAzzdoM3Q==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
@@ -5176,7 +5176,7 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-jest/0.5.0_esbuild@0.15.12:
+  /esbuild-jest/0.5.0_esbuild@0.15.13:
     resolution: {integrity: sha512-AMZZCdEpXfNVOIDvURlqYyHwC8qC1/BFjgsrOiSL1eyiIArVtHL8YAC83Shhn16cYYoAWEW17yZn0W/RJKJKHQ==}
     peerDependencies:
       esbuild: '>=0.8.50'
@@ -5184,13 +5184,13 @@ packages:
       '@babel/core': 7.18.6
       '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.18.6
       babel-jest: 26.6.3_@babel+core@7.18.6
-      esbuild: 0.15.12
+      esbuild: 0.15.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /esbuild-linux-32/0.15.12:
-    resolution: {integrity: sha512-uSQuSEyF1kVzGzuIr4XM+v7TPKxHjBnLcwv2yPyCz8riV8VUCnO/C4BF3w5dHiVpCd5Z1cebBtZJNlC4anWpwA==}
+  /esbuild-linux-32/0.15.13:
+    resolution: {integrity: sha512-VbZdWOEdrJiYApm2kkxoTOgsoCO1krBZ3quHdYk3g3ivWaMwNIVPIfEE0f0XQQ0u5pJtBsnk2/7OPiCFIPOe/w==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
@@ -5198,8 +5198,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-64/0.15.12:
-    resolution: {integrity: sha512-QcgCKb7zfJxqT9o5z9ZUeGH1k8N6iX1Y7VNsEi5F9+HzN1OIx7ESxtQXDN9jbeUSPiRH1n9cw6gFT3H4qbdvcA==}
+  /esbuild-linux-64/0.15.13:
+    resolution: {integrity: sha512-rXmnArVNio6yANSqDQlIO4WiP+Cv7+9EuAHNnag7rByAqFVuRusLbGi2697A5dFPNXoO//IiogVwi3AdcfPC6A==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
@@ -5207,8 +5207,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm/0.15.12:
-    resolution: {integrity: sha512-Wf7T0aNylGcLu7hBnzMvsTfEXdEdJY/hY3u36Vla21aY66xR0MS5I1Hw8nVquXjTN0A6fk/vnr32tkC/C2lb0A==}
+  /esbuild-linux-arm/0.15.13:
+    resolution: {integrity: sha512-Ac6LpfmJO8WhCMQmO253xX2IU2B3wPDbl4IvR0hnqcPrdfCaUa2j/lLMGTjmQ4W5JsJIdHEdW12dG8lFS0MbxQ==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
@@ -5216,8 +5216,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-arm64/0.15.12:
-    resolution: {integrity: sha512-HtNq5xm8fUpZKwWKS2/YGwSfTF+339L4aIA8yphNKYJckd5hVdhfdl6GM2P3HwLSCORS++++7++//ApEwXEuAQ==}
+  /esbuild-linux-arm64/0.15.13:
+    resolution: {integrity: sha512-alEMGU4Z+d17U7KQQw2IV8tQycO6T+rOrgW8OS22Ua25x6kHxoG6Ngry6Aq6uranC+pNWNMB6aHFPh7aTQdORQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
@@ -5225,8 +5225,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-mips64le/0.15.12:
-    resolution: {integrity: sha512-Qol3+AvivngUZkTVFgLpb0H6DT+N5/zM3V1YgTkryPYFeUvuT5JFNDR3ZiS6LxhyF8EE+fiNtzwlPqMDqVcc6A==}
+  /esbuild-linux-mips64le/0.15.13:
+    resolution: {integrity: sha512-47PgmyYEu+yN5rD/MbwS6DxP2FSGPo4Uxg5LwIdxTiyGC2XKwHhHyW7YYEDlSuXLQXEdTO7mYe8zQ74czP7W8A==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
@@ -5234,8 +5234,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-ppc64le/0.15.12:
-    resolution: {integrity: sha512-4D8qUCo+CFKaR0cGXtGyVsOI7w7k93Qxb3KFXWr75An0DHamYzq8lt7TNZKoOq/Gh8c40/aKaxvcZnTgQ0TJNg==}
+  /esbuild-linux-ppc64le/0.15.13:
+    resolution: {integrity: sha512-z6n28h2+PC1Ayle9DjKoBRcx/4cxHoOa2e689e2aDJSaKug3jXcQw7mM+GLg+9ydYoNzj8QxNL8ihOv/OnezhA==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
@@ -5243,8 +5243,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-riscv64/0.15.12:
-    resolution: {integrity: sha512-G9w6NcuuCI6TUUxe6ka0enjZHDnSVK8bO+1qDhMOCtl7Tr78CcZilJj8SGLN00zO5iIlwNRZKHjdMpfFgNn1VA==}
+  /esbuild-linux-riscv64/0.15.13:
+    resolution: {integrity: sha512-+Lu4zuuXuQhgLUGyZloWCqTslcCAjMZH1k3Xc9MSEJEpEFdpsSU0sRDXAnk18FKOfEjhu4YMGaykx9xjtpA6ow==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
@@ -5252,8 +5252,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-linux-s390x/0.15.12:
-    resolution: {integrity: sha512-Lt6BDnuXbXeqSlVuuUM5z18GkJAZf3ERskGZbAWjrQoi9xbEIsj/hEzVnSAFLtkfLuy2DE4RwTcX02tZFunXww==}
+  /esbuild-linux-s390x/0.15.13:
+    resolution: {integrity: sha512-BMeXRljruf7J0TMxD5CIXS65y7puiZkAh+s4XFV9qy16SxOuMhxhVIXYLnbdfLrsYGFzx7U9mcdpFWkkvy/Uag==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
@@ -5261,8 +5261,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-netbsd-64/0.15.12:
-    resolution: {integrity: sha512-jlUxCiHO1dsqoURZDQts+HK100o0hXfi4t54MNRMCAqKGAV33JCVvMplLAa2FwviSojT/5ZG5HUfG3gstwAG8w==}
+  /esbuild-netbsd-64/0.15.13:
+    resolution: {integrity: sha512-EHj9QZOTel581JPj7UO3xYbltFTYnHy+SIqJVq6yd3KkCrsHRbapiPb0Lx3EOOtybBEE9EyqbmfW1NlSDsSzvQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
@@ -5270,8 +5270,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-openbsd-64/0.15.12:
-    resolution: {integrity: sha512-1o1uAfRTMIWNOmpf8v7iudND0L6zRBYSH45sofCZywrcf7NcZA+c7aFsS1YryU+yN7aRppTqdUK1PgbZVaB1Dw==}
+  /esbuild-openbsd-64/0.15.13:
+    resolution: {integrity: sha512-nkuDlIjF/sfUhfx8SKq0+U+Fgx5K9JcPq1mUodnxI0x4kBdCv46rOGWbuJ6eof2n3wdoCLccOoJAbg9ba/bT2w==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
@@ -5279,8 +5279,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-sunos-64/0.15.12:
-    resolution: {integrity: sha512-nkl251DpoWoBO9Eq9aFdoIt2yYmp4I3kvQjba3jFKlMXuqQ9A4q+JaqdkCouG3DHgAGnzshzaGu6xofGcXyPXg==}
+  /esbuild-sunos-64/0.15.13:
+    resolution: {integrity: sha512-jVeu2GfxZQ++6lRdY43CS0Tm/r4WuQQ0Pdsrxbw+aOrHQPHV0+LNOLnvbN28M7BSUGnJnHkHm2HozGgNGyeIRw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
@@ -5288,8 +5288,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-32/0.15.12:
-    resolution: {integrity: sha512-WlGeBZHgPC00O08luIp5B2SP4cNCp/PcS+3Pcg31kdcJPopHxLkdCXtadLU9J82LCfw4TVls21A6lilQ9mzHrw==}
+  /esbuild-windows-32/0.15.13:
+    resolution: {integrity: sha512-XoF2iBf0wnqo16SDq+aDGi/+QbaLFpkiRarPVssMh9KYbFNCqPLlGAWwDvxEVz+ywX6Si37J2AKm+AXq1kC0JA==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
@@ -5297,8 +5297,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-64/0.15.12:
-    resolution: {integrity: sha512-VActO3WnWZSN//xjSfbiGOSyC+wkZtI8I4KlgrTo5oHJM6z3MZZBCuFaZHd8hzf/W9KPhF0lY8OqlmWC9HO5AA==}
+  /esbuild-windows-64/0.15.13:
+    resolution: {integrity: sha512-Et6htEfGycjDrtqb2ng6nT+baesZPYQIW+HUEHK4D1ncggNrDNk3yoboYQ5KtiVrw/JaDMNttz8rrPubV/fvPQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
@@ -5306,8 +5306,8 @@ packages:
     dev: true
     optional: true
 
-  /esbuild-windows-arm64/0.15.12:
-    resolution: {integrity: sha512-Of3MIacva1OK/m4zCNIvBfz8VVROBmQT+gRX6pFTLPngFYcj6TFH/12VveAqq1k9VB2l28EoVMNMUCcmsfwyuA==}
+  /esbuild-windows-arm64/0.15.13:
+    resolution: {integrity: sha512-3bv7tqntThQC9SWLRouMDmZnlOukBhOCTlkzNqzGCmrkCJI7io5LLjwJBOVY6kOUlIvdxbooNZwjtBvj+7uuVg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
@@ -5315,34 +5315,34 @@ packages:
     dev: true
     optional: true
 
-  /esbuild/0.15.12:
-    resolution: {integrity: sha512-PcT+/wyDqJQsRVhaE9uX/Oq4XLrFh0ce/bs2TJh4CSaw9xuvI+xFrH2nAYOADbhQjUgAhNWC5LKoUsakm4dxng==}
+  /esbuild/0.15.13:
+    resolution: {integrity: sha512-Cu3SC84oyzzhrK/YyN4iEVy2jZu5t2fz66HEOShHURcjSkOSAVL8C/gfUT+lDJxkVHpg8GZ10DD0rMHRPqMFaQ==}
     engines: {node: '>=12'}
     hasBin: true
     requiresBuild: true
     optionalDependencies:
-      '@esbuild/android-arm': 0.15.12
-      '@esbuild/linux-loong64': 0.15.12
-      esbuild-android-64: 0.15.12
-      esbuild-android-arm64: 0.15.12
-      esbuild-darwin-64: 0.15.12
-      esbuild-darwin-arm64: 0.15.12
-      esbuild-freebsd-64: 0.15.12
-      esbuild-freebsd-arm64: 0.15.12
-      esbuild-linux-32: 0.15.12
-      esbuild-linux-64: 0.15.12
-      esbuild-linux-arm: 0.15.12
-      esbuild-linux-arm64: 0.15.12
-      esbuild-linux-mips64le: 0.15.12
-      esbuild-linux-ppc64le: 0.15.12
-      esbuild-linux-riscv64: 0.15.12
-      esbuild-linux-s390x: 0.15.12
-      esbuild-netbsd-64: 0.15.12
-      esbuild-openbsd-64: 0.15.12
-      esbuild-sunos-64: 0.15.12
-      esbuild-windows-32: 0.15.12
-      esbuild-windows-64: 0.15.12
-      esbuild-windows-arm64: 0.15.12
+      '@esbuild/android-arm': 0.15.13
+      '@esbuild/linux-loong64': 0.15.13
+      esbuild-android-64: 0.15.13
+      esbuild-android-arm64: 0.15.13
+      esbuild-darwin-64: 0.15.13
+      esbuild-darwin-arm64: 0.15.13
+      esbuild-freebsd-64: 0.15.13
+      esbuild-freebsd-arm64: 0.15.13
+      esbuild-linux-32: 0.15.13
+      esbuild-linux-64: 0.15.13
+      esbuild-linux-arm: 0.15.13
+      esbuild-linux-arm64: 0.15.13
+      esbuild-linux-mips64le: 0.15.13
+      esbuild-linux-ppc64le: 0.15.13
+      esbuild-linux-riscv64: 0.15.13
+      esbuild-linux-s390x: 0.15.13
+      esbuild-netbsd-64: 0.15.13
+      esbuild-openbsd-64: 0.15.13
+      esbuild-sunos-64: 0.15.13
+      esbuild-windows-32: 0.15.13
+      esbuild-windows-64: 0.15.13
+      esbuild-windows-arm64: 0.15.13
     dev: true
 
   /escalade/3.1.1:
@@ -9448,7 +9448,7 @@ packages:
       terser:
         optional: true
     dependencies:
-      esbuild: 0.15.12
+      esbuild: 0.15.13
       postcss: 8.4.18
       resolve: 1.22.1
       rollup: 2.79.1

From 548bdce8ba92f9762ba32d9ed2a38550458060ce Mon Sep 17 00:00:00 2001
From: Stephen Kent <smkent@smkent.net>
Date: Sat, 5 Nov 2022 14:10:13 -0700
Subject: [PATCH 247/263] ci: fix pre-commit scripts compatibility with posix
 shells (#4243)

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 .github/pre-commit    |  5 ++---
 .github/required-apps | 16 ++++++++--------
 2 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/.github/pre-commit b/.github/pre-commit
index d38e39af9..8ed8ea753 100755
--- a/.github/pre-commit
+++ b/.github/pre-commit
@@ -1,7 +1,6 @@
 #!/bin/sh
 
-if [[ ! -z "$NO_HOOK" ]]
-then
+if [ -n "$NO_HOOK" ]; then
   exit 0
 fi
 
@@ -9,4 +8,4 @@ fi
 . "$(dirname "$0")/required-apps"
 
 golangci-lint run -v --fix && \
-cd web && ${PMGR} lint
+cd web && "${PMGR}" lint
diff --git a/.github/required-apps b/.github/required-apps
index 2de152a46..f4d8368db 100644
--- a/.github/required-apps
+++ b/.github/required-apps
@@ -1,19 +1,19 @@
 #!/bin/sh
 
-PMGR=pnpm
+export PMGR=pnpm
 
-if [[ ! -x "$(command -v golangci-lint)" ]]; then
+if [ ! -x "$(command -v golangci-lint)" ]; then
   echo "You must install golangci-lint."
   exit 1
 fi
 
-if [[ ! -x "$(command -v pnpm)" ]]; then
-  PMGR=yarn
-  if [[ ! -x "$(command -v yarn)" ]]; then
-    PMGR=npm
-    if [[ ! -x "$(command -v npm)" ]]; then
+if [ ! -x "$(command -v pnpm)" ]; then
+  export PMGR=yarn
+  if [ ! -x "$(command -v yarn)" ]; then
+    export PMGR=npm
+    if [ ! -x "$(command -v npm)" ]; then
       echo "You must install a node package manager."
       exit 1
     fi
   fi
-fi
\ No newline at end of file
+fi

From d75eb886e2efca2e2f343b47f951327a98e67079 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 6 Nov 2022 10:24:15 +0000
Subject: [PATCH 248/263] build(deps): update dependency eslint to v8.27.0
 (#4335)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   2 +-
 web/pnpm-lock.yaml | 162 ++++++++++++++++++++++-----------------------
 2 files changed, 82 insertions(+), 82 deletions(-)

diff --git a/web/package.json b/web/package.json
index 69cf65b06..534496fee 100644
--- a/web/package.json
+++ b/web/package.json
@@ -158,7 +158,7 @@
     "@vitejs/plugin-react": "2.2.0",
     "esbuild": "0.15.13",
     "esbuild-jest": "0.5.0",
-    "eslint": "8.26.0",
+    "eslint": "8.27.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-config-react-app": "7.0.1",
     "eslint-formatter-rdjson": "1.0.5",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 6dfddadaa..fd60fb0f6 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -29,7 +29,7 @@ specifiers:
   classnames: 2.3.2
   esbuild: 0.15.13
   esbuild-jest: 0.5.0
-  eslint: 8.26.0
+  eslint: 8.27.0
   eslint-config-prettier: 8.5.0
   eslint-config-react-app: 7.0.1
   eslint-formatter-rdjson: 1.0.5
@@ -103,21 +103,21 @@ devDependencies:
   '@types/react': 18.0.25
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
-  '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+  '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
+  '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
   '@vitejs/plugin-react': 2.2.0_vite@3.2.2
   esbuild: 0.15.13
   esbuild-jest: 0.5.0_esbuild@0.15.13
-  eslint: 8.26.0
-  eslint-config-prettier: 8.5.0_eslint@8.26.0
-  eslint-config-react-app: 7.0.1_2kc4q5r3nphyswrf6yds6ub5nq
+  eslint: 8.27.0
+  eslint-config-prettier: 8.5.0_eslint@8.27.0
+  eslint-config-react-app: 7.0.1_oljhfaj3ggvddo7rittzbyeh3a
   eslint-formatter-rdjson: 1.0.5
-  eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
-  eslint-plugin-import: 2.26.0_goironxpvhcmocjenyhcuwtawi
-  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
-  eslint-plugin-prettier: 4.2.1_aniwkeyvlpmwkidetuytnokvcm
-  eslint-plugin-react: 7.31.10_eslint@8.26.0
-  eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
+  eslint-import-resolver-typescript: 3.5.2_dcpv4nbdr5ks2h5677xdltrk6e
+  eslint-plugin-import: 2.26.0_kz72iuqidfi7igifoeyyxfa2au
+  eslint-plugin-jsx-a11y: 6.6.1_eslint@8.27.0
+  eslint-plugin-prettier: 4.2.1_v7o5sx5x3wbs57ifz6wc4f76we
+  eslint-plugin-react: 7.31.10_eslint@8.27.0
+  eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
   husky: 8.0.1
   jest: 29.2.2_@types+node@18.11.9
   jest-environment-jsdom: 29.2.2
@@ -127,7 +127,7 @@ devDependencies:
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
   vite: 3.2.2
-  vite-plugin-eslint: 1.8.1_eslint@8.26.0+vite@3.2.2
+  vite-plugin-eslint: 1.8.1_eslint@8.27.0+vite@3.2.2
   vite-plugin-istanbul: 3.0.2
   vite-plugin-svgr: 2.2.2_vite@3.2.2
   vite-tsconfig-paths: 3.5.2_vite@3.2.2
@@ -208,7 +208,7 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/eslint-parser/7.18.2_wxy5unzcco5r76nfxbzwrmhnca:
+  /@babel/eslint-parser/7.18.2_chvycicpad5erj2yemazgxq6vy:
     resolution: {integrity: sha512-oFQYkE8SuH14+uR51JVAmdqwKYXGRjEXx7s+WiagVjqQ+HPE+nnwyF2qlVG8evUsUHmPcA+6YXMEDbIhEyQc5A==}
     engines: {node: ^10.13.0 || ^12.13.0 || >=14.0.0}
     peerDependencies:
@@ -219,7 +219,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      eslint: 8.26.0
+      eslint: 8.27.0
       eslint-scope: 5.1.1
       eslint-visitor-keys: 2.1.0
       semver: 6.3.0
@@ -3693,7 +3693,7 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.42.0_6xw5wg2354iw4zujk2f3vyfrzu:
+  /@typescript-eslint/eslint-plugin/5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34:
     resolution: {integrity: sha512-5TJh2AgL6+wpL8H/GTSjNb4WrjKoR2rqvFxR/DDTqYNk6uXn8BJMEcncLSpMbf/XV1aS0jAjYwn98uvVCiAywQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3704,12 +3704,12 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
       '@typescript-eslint/scope-manager': 5.42.0
-      '@typescript-eslint/type-utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
-      '@typescript-eslint/utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/type-utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
       debug: 4.3.4
-      eslint: 8.26.0
+      eslint: 8.27.0
       ignore: 5.2.0
       natural-compare-lite: 1.4.0
       regexpp: 3.2.0
@@ -3720,20 +3720,20 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/experimental-utils/5.30.6_wyqvi574yv7oiwfeinomdzmc3m:
+  /@typescript-eslint/experimental-utils/5.30.6_rmayb2veg2btbq6mbmnyivgasy:
     resolution: {integrity: sha512-bqvT+0L8IjtW7MCrMgm9oVNxs4g7mESro1mm5c1/SNfTnHuFTf9OUX1WzVkTz75M9cp//UrTrSmGvK48NEKshQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
-      eslint: 8.26.0
+      '@typescript-eslint/utils': 5.30.6_rmayb2veg2btbq6mbmnyivgasy
+      eslint: 8.27.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.42.0_wyqvi574yv7oiwfeinomdzmc3m:
+  /@typescript-eslint/parser/5.42.0_rmayb2veg2btbq6mbmnyivgasy:
     resolution: {integrity: sha512-Ixh9qrOTDRctFg3yIwrLkgf33AHyEIn6lhyf5cCfwwiGtkWhNpVKlEZApi3inGQR/barWnY7qY8FbGKBO7p3JA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3747,7 +3747,7 @@ packages:
       '@typescript-eslint/types': 5.42.0
       '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
       debug: 4.3.4
-      eslint: 8.26.0
+      eslint: 8.27.0
       typescript: 4.8.4
     transitivePeerDependencies:
       - supports-color
@@ -3769,7 +3769,7 @@ packages:
       '@typescript-eslint/visitor-keys': 5.42.0
     dev: true
 
-  /@typescript-eslint/type-utils/5.42.0_wyqvi574yv7oiwfeinomdzmc3m:
+  /@typescript-eslint/type-utils/5.42.0_rmayb2veg2btbq6mbmnyivgasy:
     resolution: {integrity: sha512-HW14TXC45dFVZxnVW8rnUGnvYyRC0E/vxXShFCthcC9VhVTmjqOmtqj6H5rm9Zxv+ORxKA/1aLGD7vmlLsdlOg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3780,9 +3780,9 @@ packages:
         optional: true
     dependencies:
       '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
-      '@typescript-eslint/utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
       debug: 4.3.4
-      eslint: 8.26.0
+      eslint: 8.27.0
       tsutils: 3.21.0_typescript@4.8.4
       typescript: 4.8.4
     transitivePeerDependencies:
@@ -3841,7 +3841,7 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/utils/5.30.6_wyqvi574yv7oiwfeinomdzmc3m:
+  /@typescript-eslint/utils/5.30.6_rmayb2veg2btbq6mbmnyivgasy:
     resolution: {integrity: sha512-xFBLc/esUbLOJLk9jKv0E9gD/OH966M40aY9jJ8GiqpSkP2xOV908cokJqqhVd85WoIvHVHYXxSFE4cCSDzVvA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3851,15 +3851,15 @@ packages:
       '@typescript-eslint/scope-manager': 5.30.6
       '@typescript-eslint/types': 5.30.6
       '@typescript-eslint/typescript-estree': 5.30.6_typescript@4.8.4
-      eslint: 8.26.0
+      eslint: 8.27.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.26.0
+      eslint-utils: 3.0.0_eslint@8.27.0
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.42.0_wyqvi574yv7oiwfeinomdzmc3m:
+  /@typescript-eslint/utils/5.42.0_rmayb2veg2btbq6mbmnyivgasy:
     resolution: {integrity: sha512-JZ++3+h1vbeG1NUECXQZE3hg0kias9kOtcQr3+JVQ3whnjvKuMyktJAAIj6743OeNPnGBmjj7KEmiDL7qsdnCQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
@@ -3870,9 +3870,9 @@ packages:
       '@typescript-eslint/scope-manager': 5.42.0
       '@typescript-eslint/types': 5.42.0
       '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
-      eslint: 8.26.0
+      eslint: 8.27.0
       eslint-scope: 5.1.1
-      eslint-utils: 3.0.0_eslint@8.26.0
+      eslint-utils: 3.0.0_eslint@8.27.0
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -5376,16 +5376,16 @@ packages:
       source-map: 0.6.1
     dev: true
 
-  /eslint-config-prettier/8.5.0_eslint@8.26.0:
+  /eslint-config-prettier/8.5.0_eslint@8.27.0:
     resolution: {integrity: sha512-obmWKLUNCnhtQRKc+tmnYuQl0pFU1ibYJQ5BGhTVB08bHe9wC8qUeG7c08dj9XX+AuPj1YSGSQIHl1pnDHZR0Q==}
     hasBin: true
     peerDependencies:
       eslint: '>=7.0.0'
     dependencies:
-      eslint: 8.26.0
+      eslint: 8.27.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_2kc4q5r3nphyswrf6yds6ub5nq:
+  /eslint-config-react-app/7.0.1_oljhfaj3ggvddo7rittzbyeh3a:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5396,20 +5396,20 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.18.6
-      '@babel/eslint-parser': 7.18.2_wxy5unzcco5r76nfxbzwrmhnca
+      '@babel/eslint-parser': 7.18.2_chvycicpad5erj2yemazgxq6vy
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
-      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
+      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
-      eslint: 8.26.0
-      eslint-plugin-flowtype: 8.0.3_eslint@8.26.0
-      eslint-plugin-import: 2.26.0_goironxpvhcmocjenyhcuwtawi
-      eslint-plugin-jest: 25.7.0_vg4o634kebbkmy67d6ljsnmtoy
-      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.26.0
-      eslint-plugin-react: 7.31.10_eslint@8.26.0
-      eslint-plugin-react-hooks: 4.6.0_eslint@8.26.0
-      eslint-plugin-testing-library: 5.5.1_wyqvi574yv7oiwfeinomdzmc3m
+      eslint: 8.27.0
+      eslint-plugin-flowtype: 8.0.3_eslint@8.27.0
+      eslint-plugin-import: 2.26.0_kz72iuqidfi7igifoeyyxfa2au
+      eslint-plugin-jest: 25.7.0_mo2lami4yy66jkzk2pp2s2sft4
+      eslint-plugin-jsx-a11y: 6.6.1_eslint@8.27.0
+      eslint-plugin-react: 7.31.10_eslint@8.27.0
+      eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
+      eslint-plugin-testing-library: 5.5.1_rmayb2veg2btbq6mbmnyivgasy
       typescript: 4.8.4
     transitivePeerDependencies:
       - '@babel/plugin-syntax-flow'
@@ -5433,7 +5433,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-import-resolver-typescript/3.5.2_mynvxvmq5qtyojffiqgev4x7mm:
+  /eslint-import-resolver-typescript/3.5.2_dcpv4nbdr5ks2h5677xdltrk6e:
     resolution: {integrity: sha512-zX4ebnnyXiykjhcBvKIf5TNvt8K7yX6bllTRZ14MiurKPjDpCAZujlszTdB8pcNXhZcOf+god4s9SjQa5GnytQ==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -5442,8 +5442,8 @@ packages:
     dependencies:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
-      eslint: 8.26.0
-      eslint-plugin-import: 2.26.0_goironxpvhcmocjenyhcuwtawi
+      eslint: 8.27.0
+      eslint-plugin-import: 2.26.0_kz72iuqidfi7igifoeyyxfa2au
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5471,16 +5471,16 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
-      eslint-import-resolver-typescript: 3.5.2_mynvxvmq5qtyojffiqgev4x7mm
+      eslint-import-resolver-typescript: 3.5.2_dcpv4nbdr5ks2h5677xdltrk6e
       find-up: 2.1.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /eslint-plugin-flowtype/8.0.3_eslint@8.26.0:
+  /eslint-plugin-flowtype/8.0.3_eslint@8.27.0:
     resolution: {integrity: sha512-dX8l6qUL6O+fYPtpNRideCFSpmWOUVx5QcaGLVqe/vlDiBSe4vYljDWDETwnyFzpl7By/WVIu6rcrniCgH9BqQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5493,12 +5493,12 @@ packages:
       '@babel/plugin-transform-react-jsx':
         optional: true
     dependencies:
-      eslint: 8.26.0
+      eslint: 8.27.0
       lodash: 4.17.21
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_goironxpvhcmocjenyhcuwtawi:
+  /eslint-plugin-import/2.26.0_kz72iuqidfi7igifoeyyxfa2au:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5508,12 +5508,12 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
+      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
-      eslint: 8.26.0
+      eslint: 8.27.0
       eslint-import-resolver-node: 0.3.6
       eslint-module-utils: 2.7.3_sxk65rprkegpqfhvolrvhmfthi
       has: 1.0.3
@@ -5529,7 +5529,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_vg4o634kebbkmy67d6ljsnmtoy:
+  /eslint-plugin-jest/25.7.0_mo2lami4yy66jkzk2pp2s2sft4:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5542,16 +5542,16 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.42.0_6xw5wg2354iw4zujk2f3vyfrzu
-      '@typescript-eslint/experimental-utils': 5.30.6_wyqvi574yv7oiwfeinomdzmc3m
-      eslint: 8.26.0
+      '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
+      '@typescript-eslint/experimental-utils': 5.30.6_rmayb2veg2btbq6mbmnyivgasy
+      eslint: 8.27.0
       jest: 29.2.2_@types+node@18.11.9
     transitivePeerDependencies:
       - supports-color
       - typescript
     dev: true
 
-  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.26.0:
+  /eslint-plugin-jsx-a11y/6.6.1_eslint@8.27.0:
     resolution: {integrity: sha512-sXgFVNHiWffBq23uiS/JaP6eVR622DqwB4yTzKvGZGcPq6/yZ3WmOZfuBks/vHWo9GaFOqC2ZK4i6+C35knx7Q==}
     engines: {node: '>=4.0'}
     peerDependencies:
@@ -5565,7 +5565,7 @@ packages:
       axobject-query: 2.2.0
       damerau-levenshtein: 1.0.8
       emoji-regex: 9.2.2
-      eslint: 8.26.0
+      eslint: 8.27.0
       has: 1.0.3
       jsx-ast-utils: 3.3.2
       language-tags: 1.0.5
@@ -5573,7 +5573,7 @@ packages:
       semver: 6.3.0
     dev: true
 
-  /eslint-plugin-prettier/4.2.1_aniwkeyvlpmwkidetuytnokvcm:
+  /eslint-plugin-prettier/4.2.1_v7o5sx5x3wbs57ifz6wc4f76we:
     resolution: {integrity: sha512-f/0rXLXUt0oFYs8ra4w49wYZBG5GKZpAYsJSm6rnYL5uVDjd+zowwMwVZHnAjf4edNrKpCDYfXDgmRE/Ak7QyQ==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -5584,22 +5584,22 @@ packages:
       eslint-config-prettier:
         optional: true
     dependencies:
-      eslint: 8.26.0
-      eslint-config-prettier: 8.5.0_eslint@8.26.0
+      eslint: 8.27.0
+      eslint-config-prettier: 8.5.0_eslint@8.27.0
       prettier: 2.7.1
       prettier-linter-helpers: 1.0.0
     dev: true
 
-  /eslint-plugin-react-hooks/4.6.0_eslint@8.26.0:
+  /eslint-plugin-react-hooks/4.6.0_eslint@8.27.0:
     resolution: {integrity: sha512-oFc7Itz9Qxh2x4gNHStv3BqJq54ExXmfC+a1NjAta66IAN87Wu0R/QArgIS9qKzX3dXKPI9H5crl9QchNMY9+g==}
     engines: {node: '>=10'}
     peerDependencies:
       eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0
     dependencies:
-      eslint: 8.26.0
+      eslint: 8.27.0
     dev: true
 
-  /eslint-plugin-react/7.31.10_eslint@8.26.0:
+  /eslint-plugin-react/7.31.10_eslint@8.27.0:
     resolution: {integrity: sha512-e4N/nc6AAlg4UKW/mXeYWd3R++qUano5/o+t+wnWxIf+bLsOaH3a4q74kX3nDjYym3VBN4HyO9nEn1GcAqgQOA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5608,7 +5608,7 @@ packages:
       array-includes: 3.1.5
       array.prototype.flatmap: 1.3.0
       doctrine: 2.1.0
-      eslint: 8.26.0
+      eslint: 8.27.0
       estraverse: 5.3.0
       jsx-ast-utils: 3.3.2
       minimatch: 3.1.2
@@ -5622,14 +5622,14 @@ packages:
       string.prototype.matchall: 4.0.7
     dev: true
 
-  /eslint-plugin-testing-library/5.5.1_wyqvi574yv7oiwfeinomdzmc3m:
+  /eslint-plugin-testing-library/5.5.1_rmayb2veg2btbq6mbmnyivgasy:
     resolution: {integrity: sha512-plLEkkbAKBjPxsLj7x4jNapcHAg2ernkQlKKrN2I8NrQwPISZHyCUNvg5Hv3EDqOQReToQb5bnqXYbkijJPE/g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0, npm: '>=6'}
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.42.0_wyqvi574yv7oiwfeinomdzmc3m
-      eslint: 8.26.0
+      '@typescript-eslint/utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      eslint: 8.27.0
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5651,13 +5651,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.26.0:
+  /eslint-utils/3.0.0_eslint@8.27.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.26.0
+      eslint: 8.27.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -5671,8 +5671,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.26.0:
-    resolution: {integrity: sha512-kzJkpaw1Bfwheq4VXUezFriD1GxszX6dUekM7Z3aC2o4hju+tsR/XyTC3RcoSD7jmy9VkPU3+N6YjVU2e96Oyg==}
+  /eslint/8.27.0:
+    resolution: {integrity: sha512-0y1bfG2ho7mty+SiILVf9PfuRA49ek4Nc60Wmmu62QlobNR+CeXa4xXIJgcuwSQgZiWaPH+5BDsctpIW0PR/wQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
@@ -5687,7 +5687,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.26.0
+      eslint-utils: 3.0.0_eslint@8.27.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -9374,7 +9374,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.26.0+vite@3.2.2:
+  /vite-plugin-eslint/1.8.1_eslint@8.27.0+vite@3.2.2:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9382,7 +9382,7 @@ packages:
     dependencies:
       '@rollup/pluginutils': 4.2.1
       '@types/eslint': 8.4.5
-      eslint: 8.26.0
+      eslint: 8.27.0
       rollup: 2.78.0
       vite: 3.2.2
     dev: true

From e70e4dcafe2156ed18fe798a2dfd6d3174c7a6e0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 6 Nov 2022 21:16:29 +0000
Subject: [PATCH 249/263] build(deps): update dependency @types/jest to v29.2.2
 (#4333)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/package.json b/web/package.json
index 534496fee..1b271b1a2 100644
--- a/web/package.json
+++ b/web/package.json
@@ -147,7 +147,7 @@
     "@commitlint/config-conventional": "17.2.0",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "13.4.0",
-    "@types/jest": "29.2.1",
+    "@types/jest": "29.2.2",
     "@types/node": "18.11.9",
     "@types/qrcode.react": "1.0.2",
     "@types/react": "18.0.25",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index fd60fb0f6..0c43cc37a 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -15,7 +15,7 @@ specifiers:
   '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
-  '@types/jest': 29.2.1
+  '@types/jest': 29.2.2
   '@types/node': 18.11.9
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.25
@@ -97,7 +97,7 @@ devDependencies:
   '@commitlint/config-conventional': 17.2.0
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0_biqbaboplfbrettd7655fr4n2y
-  '@types/jest': 29.2.1
+  '@types/jest': 29.2.2
   '@types/node': 18.11.9
   '@types/qrcode.react': 1.0.2
   '@types/react': 18.0.25
@@ -3572,8 +3572,8 @@ packages:
       '@types/istanbul-lib-report': 3.0.0
     dev: true
 
-  /@types/jest/29.2.1:
-    resolution: {integrity: sha512-nKixEdnGDqFOZkMTF74avFNr3yRqB1ZJ6sRZv5/28D5x2oLN14KApv7F9mfDT/vUic0L3tRCsh3XWpWjtJisUQ==}
+  /@types/jest/29.2.2:
+    resolution: {integrity: sha512-og1wAmdxKoS71K2ZwSVqWPX6OVn3ihZ6ZT2qvZvZQm90lJVDyXIjYcu4Khx2CNIeaFv12rOU/YObOsI3VOkzog==}
     dependencies:
       expect: 29.2.2
       pretty-format: 29.2.1
@@ -3666,7 +3666,7 @@ packages:
   /@types/testing-library__jest-dom/5.14.5:
     resolution: {integrity: sha512-SBwbxYoyPIvxHbeHxTZX2Pe/74F/tX2/D3mMvzabdeJ25bBojfW0TyB8BHrbq/9zaaKICJZjLP+8r6AeZMFCuQ==}
     dependencies:
-      '@types/jest': 29.2.1
+      '@types/jest': 29.2.2
     dev: true
 
   /@types/tough-cookie/4.0.2:

From abafe01b80f5ce5c5e0cfb1bd9b88f8e62b4a674 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 7 Nov 2022 12:27:30 +0000
Subject: [PATCH 250/263] build(deps): update dependency vite to v3.2.3 (#4337)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 36 ++++++++++++++++++++----------------
 2 files changed, 21 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 1b271b1a2..6b83cc7ca 100644
--- a/web/package.json
+++ b/web/package.json
@@ -176,7 +176,7 @@
     "prettier": "2.7.1",
     "react-test-renderer": "18.2.0",
     "typescript": "4.8.4",
-    "vite": "3.2.2",
+    "vite": "3.2.3",
     "vite-plugin-eslint": "1.8.1",
     "vite-plugin-istanbul": "3.0.2",
     "vite-plugin-svgr": "2.2.2",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 0c43cc37a..a18a1b46f 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -58,7 +58,7 @@ specifiers:
   react-router-dom: 6.4.3
   react-test-renderer: 18.2.0
   typescript: 4.8.4
-  vite: 3.2.2
+  vite: 3.2.3
   vite-plugin-eslint: 1.8.1
   vite-plugin-istanbul: 3.0.2
   vite-plugin-svgr: 2.2.2
@@ -105,7 +105,7 @@ devDependencies:
   '@types/zxcvbn': 4.4.1
   '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
   '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
-  '@vitejs/plugin-react': 2.2.0_vite@3.2.2
+  '@vitejs/plugin-react': 2.2.0_vite@3.2.3
   esbuild: 0.15.13
   esbuild-jest: 0.5.0_esbuild@0.15.13
   eslint: 8.27.0
@@ -126,11 +126,11 @@ devDependencies:
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
-  vite: 3.2.2
-  vite-plugin-eslint: 1.8.1_eslint@8.27.0+vite@3.2.2
+  vite: 3.2.3_@types+node@18.11.9
+  vite-plugin-eslint: 1.8.1_eslint@8.27.0+vite@3.2.3
   vite-plugin-istanbul: 3.0.2
-  vite-plugin-svgr: 2.2.2_vite@3.2.2
-  vite-tsconfig-paths: 3.5.2_vite@3.2.2
+  vite-plugin-svgr: 2.2.2_vite@3.2.3
+  vite-tsconfig-paths: 3.5.2_vite@3.2.3
 
 packages:
 
@@ -3895,7 +3895,7 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@vitejs/plugin-react/2.2.0_vite@3.2.2:
+  /@vitejs/plugin-react/2.2.0_vite@3.2.3:
     resolution: {integrity: sha512-FFpefhvExd1toVRlokZgxgy2JtnBOdp4ZDsq7ldCWaqGSGn9UhWMAVm/1lxPL14JfNS5yGz+s9yFrQY6shoStA==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
@@ -3908,7 +3908,7 @@ packages:
       '@babel/plugin-transform-react-jsx-source': 7.19.6_@babel+core@7.19.6
       magic-string: 0.26.7
       react-refresh: 0.14.0
-      vite: 3.2.2
+      vite: 3.2.3_@types+node@18.11.9
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -9374,7 +9374,7 @@ packages:
       spdx-expression-parse: 3.0.1
     dev: true
 
-  /vite-plugin-eslint/1.8.1_eslint@8.27.0+vite@3.2.2:
+  /vite-plugin-eslint/1.8.1_eslint@8.27.0+vite@3.2.3:
     resolution: {integrity: sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==}
     peerDependencies:
       eslint: '>=7'
@@ -9384,7 +9384,7 @@ packages:
       '@types/eslint': 8.4.5
       eslint: 8.27.0
       rollup: 2.78.0
-      vite: 3.2.2
+      vite: 3.2.3_@types+node@18.11.9
     dev: true
 
   /vite-plugin-istanbul/3.0.2:
@@ -9398,21 +9398,21 @@ packages:
       - supports-color
     dev: true
 
-  /vite-plugin-svgr/2.2.2_vite@3.2.2:
+  /vite-plugin-svgr/2.2.2_vite@3.2.3:
     resolution: {integrity: sha512-u8Ac27uZmDHTVGawpAhvLMJMuzbGeZGhe61TGeHoRQLxVhmQfIYCefa0iLbjC0ui1zFo6XZnS8EkzPITCYp85g==}
     peerDependencies:
       vite: ^2.6.0 || 3
     dependencies:
       '@rollup/pluginutils': 5.0.1
       '@svgr/core': 6.4.0
-      vite: 3.2.2
+      vite: 3.2.3_@types+node@18.11.9
     transitivePeerDependencies:
       - '@babel/core'
       - rollup
       - supports-color
     dev: true
 
-  /vite-tsconfig-paths/3.5.2_vite@3.2.2:
+  /vite-tsconfig-paths/3.5.2_vite@3.2.3:
     resolution: {integrity: sha512-xJMgHA2oJ28QCG2f+hXrcqzo7IttrSRK4A//Tp94CfuX5eetOx33qiwXHUdi3FwkHP2ocpxHuvE45Ix67gwEmQ==}
     peerDependencies:
       vite: '>2.0.0-0'
@@ -9421,22 +9421,25 @@ packages:
       globrex: 0.1.2
       recrawl-sync: 2.2.2
       tsconfig-paths: 4.0.0
-      vite: 3.2.2
+      vite: 3.2.3_@types+node@18.11.9
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /vite/3.2.2:
-    resolution: {integrity: sha512-pLrhatFFOWO9kS19bQ658CnRYzv0WLbsPih6R+iFeEEhDOuYgYCX2rztUViMz/uy/V8cLCJvLFeiOK7RJEzHcw==}
+  /vite/3.2.3_@types+node@18.11.9:
+    resolution: {integrity: sha512-h8jl1TZ76eGs3o2dIBSsvXDLb1m/Ec1iej8ZMdz+PsaFUsftZeWe2CZOI3qogEsMNaywc17gu0q6cQDzh/weCQ==}
     engines: {node: ^14.18.0 || >=16.0.0}
     hasBin: true
     peerDependencies:
+      '@types/node': '>= 14'
       less: '*'
       sass: '*'
       stylus: '*'
       sugarss: '*'
       terser: ^5.4.0
     peerDependenciesMeta:
+      '@types/node':
+        optional: true
       less:
         optional: true
       sass:
@@ -9448,6 +9451,7 @@ packages:
       terser:
         optional: true
     dependencies:
+      '@types/node': 18.11.9
       esbuild: 0.15.13
       postcss: 8.4.18
       resolve: 1.22.1

From 9814cf331b332cada1bf56bd53393150765b67cf Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Nov 2022 10:42:37 +1100
Subject: [PATCH 251/263] build(deps): update dependency @mui/material to
 v5.10.13 (#4339)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 32 ++++++++++++++++----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/web/package.json b/web/package.json
index 6b83cc7ca..474bea02d 100644
--- a/web/package.json
+++ b/web/package.json
@@ -26,7 +26,7 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@fortawesome/react-fontawesome": "0.2.0",
     "@mui/icons-material": "5.10.9",
-    "@mui/material": "5.10.12",
+    "@mui/material": "5.10.13",
     "@mui/styles": "5.10.10",
     "axios": "1.1.3",
     "broadcast-channel": "4.18.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index a18a1b46f..2c180864d 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -11,7 +11,7 @@ specifiers:
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0
   '@mui/icons-material': 5.10.9
-  '@mui/material': 5.10.12
+  '@mui/material': 5.10.13
   '@mui/styles': 5.10.10
   '@testing-library/jest-dom': 5.16.5
   '@testing-library/react': 13.4.0
@@ -73,8 +73,8 @@ dependencies:
   '@fortawesome/free-regular-svg-icons': 6.2.0
   '@fortawesome/free-solid-svg-icons': 6.2.0
   '@fortawesome/react-fontawesome': 0.2.0_6j2wdqxompc6mcokhxkpep2gqu
-  '@mui/icons-material': 5.10.9_pyu3bnv7xtproabsf64djpmivq
-  '@mui/material': 5.10.12_thp4wrxo45nyllusrnt46mid4u
+  '@mui/icons-material': 5.10.9_4tcfjhohj57yvze6zkot3vymie
+  '@mui/material': 5.10.13_thp4wrxo45nyllusrnt46mid4u
   '@mui/styles': 5.10.10_fan5qbzahqtxlm5dzefqlqx5ia
   axios: 1.1.3
   broadcast-channel: 4.18.1
@@ -2901,8 +2901,8 @@ packages:
       '@jridgewell/sourcemap-codec': 1.4.14
     dev: true
 
-  /@mui/base/5.0.0-alpha.104_2zx2umvpluuhvlq44va5bta2da:
-    resolution: {integrity: sha512-tQPxZTzfYMwxYfKhEwufbTfdLpNjFdW7bXq6dK0j8651AAyZL4M8wynWUQ98hH1362R26mZFhVxHB2UD9t7VuA==}
+  /@mui/base/5.0.0-alpha.105_2zx2umvpluuhvlq44va5bta2da:
+    resolution: {integrity: sha512-4IPBcJQIgVVXQvN6DQMoCHed52GBtwSqYs0jD0dDcMR3o76AodQtpEeWFz3p7mJoc6f/IHBl9U6jEfL1r/kM4g==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@types/react': ^17.0.0 || ^18.0.0 || 18
@@ -2925,11 +2925,11 @@ packages:
       react-is: 18.2.0
     dev: false
 
-  /@mui/core-downloads-tracker/5.10.12:
-    resolution: {integrity: sha512-cR8lOS606G++iVHR8I6ySgMAEiPoA3DxO/nLeqiv7w7d1707kvKoV4/7SWjh4ui+kHb052xlf/G196q2EKx31w==}
+  /@mui/core-downloads-tracker/5.10.13:
+    resolution: {integrity: sha512-zWkWPV/SaNdsIdxAWiuVGZ+Ue3BkfSIlU/BFIrJmuUcwiIa7gQsbI/DOpj1KzLvqZhdEe2wC1aG4nCHfzgc1Hg==}
     dev: false
 
-  /@mui/icons-material/5.10.9_pyu3bnv7xtproabsf64djpmivq:
+  /@mui/icons-material/5.10.9_4tcfjhohj57yvze6zkot3vymie:
     resolution: {integrity: sha512-sqClXdEM39WKQJOQ0ZCPTptaZgqwibhj2EFV9N0v7BU1PO8y4OcX/a2wIQHn4fNuDjIZktJIBrmU23h7aqlGgg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
@@ -2941,13 +2941,13 @@ packages:
         optional: true
     dependencies:
       '@babel/runtime': 7.19.0
-      '@mui/material': 5.10.12_thp4wrxo45nyllusrnt46mid4u
+      '@mui/material': 5.10.13_thp4wrxo45nyllusrnt46mid4u
       '@types/react': 18.0.25
       react: 18.2.0
     dev: false
 
-  /@mui/material/5.10.12_thp4wrxo45nyllusrnt46mid4u:
-    resolution: {integrity: sha512-rG9ZTkG9qUwujyAY1I+uQAa9pkGdsWY3KN+wvS/6H6ZbYIA06QRwmig6ySC6LbeB3WL/I/1ngwJqWX7nfINSbA==}
+  /@mui/material/5.10.13_thp4wrxo45nyllusrnt46mid4u:
+    resolution: {integrity: sha512-TkkT1rNc0/hhL4/+zv4gYcA6egNWBH/1Tz+azoTnQIUdZ32fgwFI2pFX2KVJNTt30xnLznxDWtTv7ilmJQ52xw==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0
@@ -2966,9 +2966,9 @@ packages:
       '@babel/runtime': 7.19.4
       '@emotion/react': 11.10.5_fan5qbzahqtxlm5dzefqlqx5ia
       '@emotion/styled': 11.10.5_otcjdfkheatawhug6fwk7ldzni
-      '@mui/base': 5.0.0-alpha.104_2zx2umvpluuhvlq44va5bta2da
-      '@mui/core-downloads-tracker': 5.10.12
-      '@mui/system': 5.10.12_v64nlmo6pkqfmpmxge6otzlg54
+      '@mui/base': 5.0.0-alpha.105_2zx2umvpluuhvlq44va5bta2da
+      '@mui/core-downloads-tracker': 5.10.13
+      '@mui/system': 5.10.13_v64nlmo6pkqfmpmxge6otzlg54
       '@mui/types': 7.2.0_@types+react@18.0.25
       '@mui/utils': 5.10.9_react@18.2.0
       '@types/react': 18.0.25
@@ -3052,8 +3052,8 @@ packages:
       react: 18.2.0
     dev: false
 
-  /@mui/system/5.10.12_v64nlmo6pkqfmpmxge6otzlg54:
-    resolution: {integrity: sha512-9DcN3hF2KTTTpZ0K5Tn20B+Tz7tIqDmJLk1M6P0CYoAGUN/xrcF/6dn1zZ829rxE5tmauoDUekTfomrvPsvlSQ==}
+  /@mui/system/5.10.13_v64nlmo6pkqfmpmxge6otzlg54:
+    resolution: {integrity: sha512-Xzx26Asu5fVlm0ucm+gnJmeX4Y1isrpVDvqxX4yJaOT7Fzmd8Lfq9ih3QMfZajns5LMtUiOuCQlVFRtUG5IY7A==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
       '@emotion/react': ^11.5.0

From efb79e2bcdf4b37607be36975e995b9e438eff99 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Nov 2022 11:10:26 +1100
Subject: [PATCH 252/263] build(deps): update module golang.org/x/term to
 v0.2.0 (#4342)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 4 ++--
 go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/go.mod b/go.mod
index be85f6dc2..6f7f18ab4 100644
--- a/go.mod
+++ b/go.mod
@@ -38,7 +38,7 @@ require (
 	github.com/trustelem/zxcvbn v1.0.1
 	github.com/valyala/fasthttp v1.41.0
 	golang.org/x/sync v0.1.0
-	golang.org/x/term v0.1.0
+	golang.org/x/term v0.2.0
 	golang.org/x/text v0.4.0
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gopkg.in/yaml.v3 v3.0.1
@@ -104,7 +104,7 @@ require (
 	golang.org/x/crypto v0.1.0 // indirect
 	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
 	golang.org/x/net v0.1.0 // indirect
-	golang.org/x/sys v0.1.0 // indirect
+	golang.org/x/sys v0.2.0 // indirect
 	golang.org/x/tools v0.1.12 // indirect
 	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
 	google.golang.org/grpc v1.42.0 // indirect
diff --git a/go.sum b/go.sum
index 3e058770a..441ea743f 100644
--- a/go.sum
+++ b/go.sum
@@ -1708,13 +1708,13 @@ golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.1.0 h1:kunALQeHf1/185U1i0GOB/fy1IPRDDpuoOOqRReG57U=
-golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.2.0 h1:ljd4t30dBnAvMZaQCevtY0xLLD0A+bRZXbgLMLU1F/A=
+golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.1.0 h1:g6Z6vPFA9dYBAF7DWcH6sCcOntplXsDKcliusYijMlw=
-golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.2.0 h1:z85xZCsEl7bi/KwbNADeBYoOP0++7W1ipu+aGnpwzRM=
+golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=

From a3420dc13d745bd254ab8c84398a6ff6f1f39001 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Nov 2022 03:33:53 +0000
Subject: [PATCH 253/263] build(deps): update typescript-eslint monorepo to
 v5.42.1 (#4340)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 102 ++++++++++++++++++++++-----------------------
 2 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/web/package.json b/web/package.json
index 474bea02d..11f59ebfe 100644
--- a/web/package.json
+++ b/web/package.json
@@ -153,8 +153,8 @@
     "@types/react": "18.0.25",
     "@types/react-dom": "18.0.8",
     "@types/zxcvbn": "4.4.1",
-    "@typescript-eslint/eslint-plugin": "5.42.0",
-    "@typescript-eslint/parser": "5.42.0",
+    "@typescript-eslint/eslint-plugin": "5.42.1",
+    "@typescript-eslint/parser": "5.42.1",
     "@vitejs/plugin-react": "2.2.0",
     "esbuild": "0.15.13",
     "esbuild-jest": "0.5.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 2c180864d..66c50c379 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -21,8 +21,8 @@ specifiers:
   '@types/react': 18.0.25
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.42.0
-  '@typescript-eslint/parser': 5.42.0
+  '@typescript-eslint/eslint-plugin': 5.42.1
+  '@typescript-eslint/parser': 5.42.1
   '@vitejs/plugin-react': 2.2.0
   axios: 1.1.3
   broadcast-channel: 4.18.1
@@ -103,8 +103,8 @@ devDependencies:
   '@types/react': 18.0.25
   '@types/react-dom': 18.0.8
   '@types/zxcvbn': 4.4.1
-  '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
-  '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+  '@typescript-eslint/eslint-plugin': 5.42.1_2udltptbznfmezdozpdoa2aemq
+  '@typescript-eslint/parser': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
   '@vitejs/plugin-react': 2.2.0_vite@3.2.3
   esbuild: 0.15.13
   esbuild-jest: 0.5.0_esbuild@0.15.13
@@ -113,7 +113,7 @@ devDependencies:
   eslint-config-react-app: 7.0.1_oljhfaj3ggvddo7rittzbyeh3a
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.2_dcpv4nbdr5ks2h5677xdltrk6e
-  eslint-plugin-import: 2.26.0_kz72iuqidfi7igifoeyyxfa2au
+  eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
   eslint-plugin-jsx-a11y: 6.6.1_eslint@8.27.0
   eslint-plugin-prettier: 4.2.1_v7o5sx5x3wbs57ifz6wc4f76we
   eslint-plugin-react: 7.31.10_eslint@8.27.0
@@ -3693,8 +3693,8 @@ packages:
     resolution: {integrity: sha512-3NoqvZC2W5gAC5DZbTpCeJ251vGQmgcWIHQJGq2J240HY6ErQ9aWKkwfoKJlHLx+A83WPNTZ9+3cd2ILxbvr1w==}
     dev: true
 
-  /@typescript-eslint/eslint-plugin/5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34:
-    resolution: {integrity: sha512-5TJh2AgL6+wpL8H/GTSjNb4WrjKoR2rqvFxR/DDTqYNk6uXn8BJMEcncLSpMbf/XV1aS0jAjYwn98uvVCiAywQ==}
+  /@typescript-eslint/eslint-plugin/5.42.1_2udltptbznfmezdozpdoa2aemq:
+    resolution: {integrity: sha512-LyR6x784JCiJ1j6sH5Y0K6cdExqCCm8DJUTcwG5ThNXJj/G8o5E56u5EdG4SLy+bZAwZBswC+GYn3eGdttBVCg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       '@typescript-eslint/parser': ^5.0.0
@@ -3704,10 +3704,10 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
-      '@typescript-eslint/scope-manager': 5.42.0
-      '@typescript-eslint/type-utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
-      '@typescript-eslint/utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/parser': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/scope-manager': 5.42.1
+      '@typescript-eslint/type-utils': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/utils': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
       debug: 4.3.4
       eslint: 8.27.0
       ignore: 5.2.0
@@ -3733,8 +3733,8 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/parser/5.42.0_rmayb2veg2btbq6mbmnyivgasy:
-    resolution: {integrity: sha512-Ixh9qrOTDRctFg3yIwrLkgf33AHyEIn6lhyf5cCfwwiGtkWhNpVKlEZApi3inGQR/barWnY7qY8FbGKBO7p3JA==}
+  /@typescript-eslint/parser/5.42.1_rmayb2veg2btbq6mbmnyivgasy:
+    resolution: {integrity: sha512-kAV+NiNBWVQDY9gDJDToTE/NO8BHi4f6b7zTsVAJoTkmB/zlfOpiEVBzHOKtlgTndCKe8vj9F/PuolemZSh50Q==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -3743,9 +3743,9 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/scope-manager': 5.42.0
-      '@typescript-eslint/types': 5.42.0
-      '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.42.1
+      '@typescript-eslint/types': 5.42.1
+      '@typescript-eslint/typescript-estree': 5.42.1_typescript@4.8.4
       debug: 4.3.4
       eslint: 8.27.0
       typescript: 4.8.4
@@ -3761,16 +3761,16 @@ packages:
       '@typescript-eslint/visitor-keys': 5.30.6
     dev: true
 
-  /@typescript-eslint/scope-manager/5.42.0:
-    resolution: {integrity: sha512-l5/3IBHLH0Bv04y+H+zlcLiEMEMjWGaCX6WyHE5Uk2YkSGAMlgdUPsT/ywTSKgu9D1dmmKMYgYZijObfA39Wow==}
+  /@typescript-eslint/scope-manager/5.42.1:
+    resolution: {integrity: sha512-QAZY/CBP1Emx4rzxurgqj3rUinfsh/6mvuKbLNMfJMMKYLRBfweus8brgXF8f64ABkIZ3zdj2/rYYtF8eiuksQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.42.0
-      '@typescript-eslint/visitor-keys': 5.42.0
+      '@typescript-eslint/types': 5.42.1
+      '@typescript-eslint/visitor-keys': 5.42.1
     dev: true
 
-  /@typescript-eslint/type-utils/5.42.0_rmayb2veg2btbq6mbmnyivgasy:
-    resolution: {integrity: sha512-HW14TXC45dFVZxnVW8rnUGnvYyRC0E/vxXShFCthcC9VhVTmjqOmtqj6H5rm9Zxv+ORxKA/1aLGD7vmlLsdlOg==}
+  /@typescript-eslint/type-utils/5.42.1_rmayb2veg2btbq6mbmnyivgasy:
+    resolution: {integrity: sha512-WWiMChneex5w4xPIX56SSnQQo0tEOy5ZV2dqmj8Z371LJ0E+aymWD25JQ/l4FOuuX+Q49A7pzh/CGIQflxMVXg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: '*'
@@ -3779,8 +3779,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
-      '@typescript-eslint/utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/typescript-estree': 5.42.1_typescript@4.8.4
+      '@typescript-eslint/utils': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
       debug: 4.3.4
       eslint: 8.27.0
       tsutils: 3.21.0_typescript@4.8.4
@@ -3794,8 +3794,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /@typescript-eslint/types/5.42.0:
-    resolution: {integrity: sha512-t4lzO9ZOAUcHY6bXQYRuu+3SSYdD9TS8ooApZft4WARt4/f2Cj/YpvbTe8A4GuhT4bNW72goDMOy7SW71mZwGw==}
+  /@typescript-eslint/types/5.42.1:
+    resolution: {integrity: sha512-Qrco9dsFF5lhalz+lLFtxs3ui1/YfC6NdXu+RAGBa8uSfn01cjO7ssCsjIsUs484vny9Xm699FSKwpkCcqwWwA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
@@ -3820,8 +3820,8 @@ packages:
       - supports-color
     dev: true
 
-  /@typescript-eslint/typescript-estree/5.42.0_typescript@4.8.4:
-    resolution: {integrity: sha512-2O3vSq794x3kZGtV7i4SCWZWCwjEtkWfVqX4m5fbUBomOsEOyd6OAD1qU2lbvV5S8tgy/luJnOYluNyYVeOTTg==}
+  /@typescript-eslint/typescript-estree/5.42.1_typescript@4.8.4:
+    resolution: {integrity: sha512-qElc0bDOuO0B8wDhhW4mYVgi/LZL+igPwXtV87n69/kYC/7NG3MES0jHxJNCr4EP7kY1XVsRy8C/u3DYeTKQmw==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       typescript: '*'
@@ -3829,8 +3829,8 @@ packages:
       typescript:
         optional: true
     dependencies:
-      '@typescript-eslint/types': 5.42.0
-      '@typescript-eslint/visitor-keys': 5.42.0
+      '@typescript-eslint/types': 5.42.1
+      '@typescript-eslint/visitor-keys': 5.42.1
       debug: 4.3.4
       globby: 11.1.0
       is-glob: 4.0.3
@@ -3859,17 +3859,17 @@ packages:
       - typescript
     dev: true
 
-  /@typescript-eslint/utils/5.42.0_rmayb2veg2btbq6mbmnyivgasy:
-    resolution: {integrity: sha512-JZ++3+h1vbeG1NUECXQZE3hg0kias9kOtcQr3+JVQ3whnjvKuMyktJAAIj6743OeNPnGBmjj7KEmiDL7qsdnCQ==}
+  /@typescript-eslint/utils/5.42.1_rmayb2veg2btbq6mbmnyivgasy:
+    resolution: {integrity: sha512-Gxvf12xSp3iYZd/fLqiQRD4uKZjDNR01bQ+j8zvhPjpsZ4HmvEFL/tC4amGNyxN9Rq+iqvpHLhlqx6KTxz9ZyQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     peerDependencies:
       eslint: ^6.0.0 || ^7.0.0 || ^8.0.0
     dependencies:
       '@types/json-schema': 7.0.11
       '@types/semver': 7.3.12
-      '@typescript-eslint/scope-manager': 5.42.0
-      '@typescript-eslint/types': 5.42.0
-      '@typescript-eslint/typescript-estree': 5.42.0_typescript@4.8.4
+      '@typescript-eslint/scope-manager': 5.42.1
+      '@typescript-eslint/types': 5.42.1
+      '@typescript-eslint/typescript-estree': 5.42.1_typescript@4.8.4
       eslint: 8.27.0
       eslint-scope: 5.1.1
       eslint-utils: 3.0.0_eslint@8.27.0
@@ -3887,11 +3887,11 @@ packages:
       eslint-visitor-keys: 3.3.0
     dev: true
 
-  /@typescript-eslint/visitor-keys/5.42.0:
-    resolution: {integrity: sha512-QHbu5Hf/2lOEOwy+IUw0GoSCuAzByTAWWrOTKzTzsotiUnWFpuKnXcAhC9YztAf2EElQ0VvIK+pHJUPkM0q7jg==}
+  /@typescript-eslint/visitor-keys/5.42.1:
+    resolution: {integrity: sha512-LOQtSF4z+hejmpUvitPlc4hA7ERGoj2BVkesOcG91HCn8edLGUXbTrErmutmPbl8Bo9HjAvOO/zBKQHExXNA2A==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dependencies:
-      '@typescript-eslint/types': 5.42.0
+      '@typescript-eslint/types': 5.42.1
       eslint-visitor-keys: 3.3.0
     dev: true
 
@@ -5398,14 +5398,14 @@ packages:
       '@babel/core': 7.18.6
       '@babel/eslint-parser': 7.18.2_chvycicpad5erj2yemazgxq6vy
       '@rushstack/eslint-patch': 1.1.4
-      '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
-      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/eslint-plugin': 5.42.1_2udltptbznfmezdozpdoa2aemq
+      '@typescript-eslint/parser': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
       babel-preset-react-app: 10.0.1
       confusing-browser-globals: 1.0.11
       eslint: 8.27.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.27.0
-      eslint-plugin-import: 2.26.0_kz72iuqidfi7igifoeyyxfa2au
-      eslint-plugin-jest: 25.7.0_mo2lami4yy66jkzk2pp2s2sft4
+      eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
+      eslint-plugin-jest: 25.7.0_iokx7ekx3swgvwius64h34smqy
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.27.0
       eslint-plugin-react: 7.31.10_eslint@8.27.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
@@ -5443,7 +5443,7 @@ packages:
       debug: 4.3.4
       enhanced-resolve: 5.10.0
       eslint: 8.27.0
-      eslint-plugin-import: 2.26.0_kz72iuqidfi7igifoeyyxfa2au
+      eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
       get-tsconfig: 4.2.0
       globby: 13.1.2
       is-core-module: 2.10.0
@@ -5453,7 +5453,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-module-utils/2.7.3_sxk65rprkegpqfhvolrvhmfthi:
+  /eslint-module-utils/2.7.3_go6mpysrr6ruih3ko533i3mldm:
     resolution: {integrity: sha512-088JEC7O3lDZM9xGe0RerkOMd0EjFl+Yvd1jPWIkMT5u3H9+HC34mWWPnqPrN13gieT9pBOO+Qt07Nb/6TresQ==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5471,7 +5471,7 @@ packages:
       eslint-import-resolver-webpack:
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/parser': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
       debug: 3.2.7
       eslint-import-resolver-node: 0.3.6
       eslint-import-resolver-typescript: 3.5.2_dcpv4nbdr5ks2h5677xdltrk6e
@@ -5498,7 +5498,7 @@ packages:
       string-natural-compare: 3.0.1
     dev: true
 
-  /eslint-plugin-import/2.26.0_kz72iuqidfi7igifoeyyxfa2au:
+  /eslint-plugin-import/2.26.0_gbipkkcbnjmysmpjttq6vkmfqq:
     resolution: {integrity: sha512-hYfi3FXaM8WPLf4S1cikh/r4IxnO6zrhZbEGz2b660EJRbuxgpDS5gkCuYgGWg2xxh2rBuIr4Pvhve/7c31koA==}
     engines: {node: '>=4'}
     peerDependencies:
@@ -5508,14 +5508,14 @@ packages:
       '@typescript-eslint/parser':
         optional: true
     dependencies:
-      '@typescript-eslint/parser': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/parser': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
       array-includes: 3.1.5
       array.prototype.flat: 1.3.0
       debug: 2.6.9
       doctrine: 2.1.0
       eslint: 8.27.0
       eslint-import-resolver-node: 0.3.6
-      eslint-module-utils: 2.7.3_sxk65rprkegpqfhvolrvhmfthi
+      eslint-module-utils: 2.7.3_go6mpysrr6ruih3ko533i3mldm
       has: 1.0.3
       is-core-module: 2.9.0
       is-glob: 4.0.3
@@ -5529,7 +5529,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_mo2lami4yy66jkzk2pp2s2sft4:
+  /eslint-plugin-jest/25.7.0_iokx7ekx3swgvwius64h34smqy:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5542,7 +5542,7 @@ packages:
       jest:
         optional: true
     dependencies:
-      '@typescript-eslint/eslint-plugin': 5.42.0_ofgjrzjuekeo7s3hdyz2yuzw34
+      '@typescript-eslint/eslint-plugin': 5.42.1_2udltptbznfmezdozpdoa2aemq
       '@typescript-eslint/experimental-utils': 5.30.6_rmayb2veg2btbq6mbmnyivgasy
       eslint: 8.27.0
       jest: 29.2.2_@types+node@18.11.9
@@ -5628,7 +5628,7 @@ packages:
     peerDependencies:
       eslint: ^7.5.0 || ^8.0.0
     dependencies:
-      '@typescript-eslint/utils': 5.42.0_rmayb2veg2btbq6mbmnyivgasy
+      '@typescript-eslint/utils': 5.42.1_rmayb2veg2btbq6mbmnyivgasy
       eslint: 8.27.0
     transitivePeerDependencies:
       - supports-color

From f3c43ac5f5ab234f37e04ac5397d8cc178523241 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Nov 2022 06:35:03 +0000
Subject: [PATCH 254/263] build(deps): update jest monorepo to v29.3.0 (#4341)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 348 ++++++++++++++++++++-------------------------
 2 files changed, 153 insertions(+), 199 deletions(-)

diff --git a/web/package.json b/web/package.json
index 11f59ebfe..8536aedd0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.1",
-    "jest": "29.2.2",
-    "jest-environment-jsdom": "29.2.2",
+    "jest": "29.3.0",
+    "jest-environment-jsdom": "29.3.0",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 66c50c379..73604bf08 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -43,8 +43,8 @@ specifiers:
   i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
-  jest: 29.2.2
-  jest-environment-jsdom: 29.2.2
+  jest: 29.3.0
+  jest-environment-jsdom: 29.3.0
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.13
   eslint: 8.27.0
   eslint-config-prettier: 8.5.0_eslint@8.27.0
-  eslint-config-react-app: 7.0.1_oljhfaj3ggvddo7rittzbyeh3a
+  eslint-config-react-app: 7.0.1_ocwcv7zkgiwgrlr5e2rfs6lx3m
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.2_dcpv4nbdr5ks2h5677xdltrk6e
   eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.27.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
   husky: 8.0.1
-  jest: 29.2.2_@types+node@18.11.9
-  jest-environment-jsdom: 29.2.2
+  jest: 29.3.0_@types+node@18.11.9
+  jest-environment-jsdom: 29.3.0
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.2.2
+  jest-watch-typeahead: 2.2.0_jest@29.3.0
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -228,15 +228,6 @@ packages:
   /@babel/generator/7.18.12:
     resolution: {integrity: sha512-dfQ8ebCN98SvyL7IxNMCUtZQSq5R7kxgN+r8qYTGDmmSion1hX2C0zq2yo1bsCDhXixokv1SAWTZUMYbO/V5zg==}
     engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/types': 7.19.0
-      '@jridgewell/gen-mapping': 0.3.2
-      jsesc: 2.5.2
-    dev: true
-
-  /@babel/generator/7.19.0:
-    resolution: {integrity: sha512-S1ahxf1gZ2dpoiFgA+ohK9DIpz50bJ0CWs7Zlzb54Z4sG8qmdIrGrVqmy1sAtTVRb+9CU6U8VqT9L0Zj7hxHVg==}
-    engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/types': 7.19.4
       '@jridgewell/gen-mapping': 0.3.2
@@ -405,8 +396,8 @@ packages:
       '@babel/helper-split-export-declaration': 7.18.6
       '@babel/helper-validator-identifier': 7.18.6
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -541,8 +532,8 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/traverse': 7.19.6
+      '@babel/types': 7.19.4
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -571,7 +562,7 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
     dependencies:
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/parser/7.19.0:
@@ -2066,30 +2057,12 @@ packages:
     dependencies:
       '@babel/code-frame': 7.18.6
       '@babel/parser': 7.19.0
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
     dev: true
 
   /@babel/traverse/7.18.11:
     resolution: {integrity: sha512-TG9PiM2R/cWCAy6BPJKeHzNbu4lPzOSZpeMfeNErskGpTJx6trEvFaVCbDvpcxwy49BKWmEPwiW8mrysNiDvIQ==}
     engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.19.0
-      '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-function-name': 7.19.0
-      '@babel/helper-hoist-variables': 7.18.6
-      '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.19.0
-      '@babel/types': 7.19.0
-      debug: 4.3.4
-      globals: 11.12.0
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/traverse/7.19.0:
-    resolution: {integrity: sha512-4pKpFRDh+utd2mbRC8JLnlsMUii3PMHjpL6a0SZ4NMZy7YFP9aXORxEhdMVOc9CpWtDF09IkciQLEhK7Ml7gRA==}
-    engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
       '@babel/generator': 7.19.6
@@ -2097,7 +2070,7 @@ packages:
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.19.6
+      '@babel/parser': 7.19.0
       '@babel/types': 7.19.4
       debug: 4.3.4
       globals: 11.12.0
@@ -2575,18 +2548,6 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /@jest/console/29.1.2:
-    resolution: {integrity: sha512-ujEBCcYs82BTmRxqfHMQggSlkUZP63AE5YEaTPj7eFyJOzukkTorstOUC7L6nE3w5SYadGVAnTsQ/ZjTGL0qYQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/types': 29.1.2
-      '@types/node': 18.11.9
-      chalk: 4.1.2
-      jest-message-util: 29.2.1
-      jest-util: 29.2.1
-      slash: 3.0.0
-    dev: true
-
   /@jest/console/29.2.1:
     resolution: {integrity: sha512-MF8Adcw+WPLZGBiNxn76DOuczG3BhODTcMlDCA4+cFi41OkaY/lyI0XUUhi73F88Y+7IHoGmD80pN5CtxQUdSw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -2599,8 +2560,8 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.2.2:
-    resolution: {integrity: sha512-susVl8o2KYLcZhhkvSB+b7xX575CX3TmSvxfeDjpRko7KmT89rHkXj6XkDkNpSeFMBzIENw5qIchO9HC9Sem+A==}
+  /@jest/core/29.3.0:
+    resolution: {integrity: sha512-5DyNvV8452bwqcYyXHCYaAD8UrTiWosrhBY+rc0MBMyXyDzcIL+w5gdlCYhlHbNsHoWnf4nUbRmg++LWfWVtMQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2609,9 +2570,9 @@ packages:
         optional: true
     dependencies:
       '@jest/console': 29.2.1
-      '@jest/reporters': 29.2.2
+      '@jest/reporters': 29.3.0
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.2
+      '@jest/transform': 29.3.0
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
       ansi-escapes: 4.3.2
@@ -2620,15 +2581,15 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.2.2_@types+node@18.11.9
-      jest-haste-map: 29.2.1
+      jest-config: 29.3.0_@types+node@18.11.9
+      jest-haste-map: 29.3.0
       jest-message-util: 29.2.1
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.2
-      jest-resolve-dependencies: 29.2.2
-      jest-runner: 29.2.2
-      jest-runtime: 29.2.2
-      jest-snapshot: 29.2.2
+      jest-resolve: 29.3.0
+      jest-resolve-dependencies: 29.3.0
+      jest-runner: 29.3.0
+      jest-runtime: 29.3.0
+      jest-snapshot: 29.3.0
       jest-util: 29.2.1
       jest-validate: 29.2.2
       jest-watcher: 29.2.2
@@ -2641,14 +2602,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.2.2:
-    resolution: {integrity: sha512-OWn+Vhu0I1yxuGBJEFFekMYc8aGBGrY4rt47SOh/IFaI+D7ZHCk7pKRiSoZ2/Ml7b0Ony3ydmEHRx/tEOC7H1A==}
+  /@jest/environment/29.3.0:
+    resolution: {integrity: sha512-8wgn3br51bx+7rgC8FOKmAD62Q39iswdiy5/p6acoekp/9Bb/IQbh3zydOrnGp74LwStSrKgpQSKBlOKlAQq0g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.2.2
+      '@jest/fake-timers': 29.3.0
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
-      jest-mock: 29.2.2
+      jest-mock: 29.3.0
     dev: true
 
   /@jest/expect-utils/29.2.2:
@@ -2658,42 +2619,42 @@ packages:
       jest-get-type: 29.2.0
     dev: true
 
-  /@jest/expect/29.2.2:
-    resolution: {integrity: sha512-zwblIZnrIVt8z/SiEeJ7Q9wKKuB+/GS4yZe9zw7gMqfGf4C5hBLGrVyxu1SzDbVSqyMSlprKl3WL1r80cBNkgg==}
+  /@jest/expect/29.3.0:
+    resolution: {integrity: sha512-Lz/3x4Se5g6nBuLjTO+xE8D4OXY9fFmosZPwkXXZUJUsp9r9seN81cJa54wOGr1QjCQnhngMqclblhM4X/hcCg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.2.2
-      jest-snapshot: 29.2.2
+      expect: 29.3.0
+      jest-snapshot: 29.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.2.2:
-    resolution: {integrity: sha512-nqaW3y2aSyZDl7zQ7t1XogsxeavNpH6kkdq+EpXncIDvAkjvFD7hmhcIs1nWloengEWUoWqkqSA6MSbf9w6DgA==}
+  /@jest/fake-timers/29.3.0:
+    resolution: {integrity: sha512-SzmWtN6Rld+xebMRGuWeMGhytc7qHnYfFk1Zd/1QavQWsFOmA9SgtvGHCBue1wXQhdDMaSIm1aPGj2Zmyrr1Zg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.11.9
       jest-message-util: 29.2.1
-      jest-mock: 29.2.2
+      jest-mock: 29.3.0
       jest-util: 29.2.1
     dev: true
 
-  /@jest/globals/29.2.2:
-    resolution: {integrity: sha512-/nt+5YMh65kYcfBhj38B3Hm0Trk4IsuMXNDGKE/swp36yydBWfz3OXkLqkSvoAtPW8IJMSJDFCbTM2oj5SNprw==}
+  /@jest/globals/29.3.0:
+    resolution: {integrity: sha512-okYDVzYNrt/4ysR8XnX6u0I1bGG4kmfdXtUu7kwWHZ9OP13RCjmphgve0tfOrNluwksWvOPYS1f/HOrFTHLygQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.2
-      '@jest/expect': 29.2.2
+      '@jest/environment': 29.3.0
+      '@jest/expect': 29.3.0
       '@jest/types': 29.2.1
-      jest-mock: 29.2.2
+      jest-mock: 29.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.2.2:
-    resolution: {integrity: sha512-AzjL2rl2zJC0njIzcooBvjA4sJjvdoq98sDuuNs4aNugtLPSQ+91nysGKRF0uY1to5k0MdGMdOBggUsPqvBcpA==}
+  /@jest/reporters/29.3.0:
+    resolution: {integrity: sha512-MV76tB3Kd80vcv2yMDZfQpMkwkHaY9hlvVhCtHXkVRCWwN+SX3EOmCdX8pT/X4Xh+NusA7l2Rc3yhx4q5p3+Fg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2704,7 +2665,7 @@ packages:
       '@bcoe/v8-coverage': 0.2.3
       '@jest/console': 29.2.1
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.2
+      '@jest/transform': 29.3.0
       '@jest/types': 29.2.1
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.11.9
@@ -2720,7 +2681,7 @@ packages:
       istanbul-reports: 3.1.5
       jest-message-util: 29.2.1
       jest-util: 29.2.1
-      jest-worker: 29.2.1
+      jest-worker: 29.3.0
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
@@ -2745,16 +2706,6 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /@jest/test-result/29.1.2:
-    resolution: {integrity: sha512-jjYYjjumCJjH9hHCoMhA8PCl1OxNeGgAoZ7yuGYILRJX9NjgzTN0pCT5qAoYR4jfOP8htIByvAlz9vfNSSBoVg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/console': 29.1.2
-      '@jest/types': 29.1.2
-      '@types/istanbul-lib-coverage': 2.0.4
-      collect-v8-coverage: 1.0.1
-    dev: true
-
   /@jest/test-result/29.2.1:
     resolution: {integrity: sha512-lS4+H+VkhbX6z64tZP7PAUwPqhwj3kbuEHcaLuaBuB+riyaX7oa1txe0tXgrFj5hRWvZKvqO7LZDlNWeJ7VTPA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -2765,13 +2716,13 @@ packages:
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.2.2:
-    resolution: {integrity: sha512-Cuc1znc1pl4v9REgmmLf0jBd3Y65UXJpioGYtMr/JNpQEIGEzkmHhy6W6DLbSsXeUA13TDzymPv0ZGZ9jH3eIw==}
+  /@jest/test-sequencer/29.3.0:
+    resolution: {integrity: sha512-XQlTP/S6Yf6NKV0Mt4oopFKyDxiEkDMD7hIFcCTeltKQszE0Z+LI5KLukwNW6Qxr1YzaZ/s6PlKJusiCLJNTcw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/test-result': 29.2.1
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.1
+      jest-haste-map: 29.3.0
       slash: 3.0.0
     dev: true
 
@@ -2798,8 +2749,8 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.2.2:
-    resolution: {integrity: sha512-aPe6rrletyuEIt2axxgdtxljmzH8O/nrov4byy6pDw9S8inIrTV+2PnjyP/oFHMSynzGxJ2s6OHowBNMXp/Jzg==}
+  /@jest/transform/29.3.0:
+    resolution: {integrity: sha512-4T8h61ItCakAlJkdYa7XVWP3r39QldlCeOSNmRpiJisi5PrrlzwZdpJDIH13ZZjh+MlSPQ2cq8YbUs3TuH+tRA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.6
@@ -2807,10 +2758,10 @@ packages:
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
-      convert-source-map: 1.8.0
+      convert-source-map: 2.0.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.1
+      jest-haste-map: 29.3.0
       jest-regex-util: 29.2.0
       jest-util: 29.2.1
       micromatch: 4.0.5
@@ -2832,18 +2783,6 @@ packages:
       chalk: 4.1.2
     dev: true
 
-  /@jest/types/29.1.2:
-    resolution: {integrity: sha512-DcXGtoTykQB5jiwCmVr8H4vdg2OJhQex3qPkG+ISyDO7xQXbt/4R6dowcRyPemRnkH7JoHvZuxPBdlq+9JxFCg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    dependencies:
-      '@jest/schemas': 29.0.0
-      '@types/istanbul-lib-coverage': 2.0.4
-      '@types/istanbul-reports': 3.0.1
-      '@types/node': 18.11.9
-      '@types/yargs': 17.0.10
-      chalk: 4.1.2
-    dev: true
-
   /@jest/types/29.2.1:
     resolution: {integrity: sha512-O/QNDQODLnINEPAI0cl9U6zUIDXEWXt6IC1o2N2QENuos7hlGUIthlKyV4p6ki3TvXFX071blj8HUhgLGquPjw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -3514,7 +3453,7 @@ packages:
     resolution: {integrity: sha512-WEOTgRsbYkvA/KCsDwVEGkd7WAr1e3g31VHQ8zy5gul/V1qKullU/BU5I68X5v7V3GnB9eotmom4v5a5gjxorw==}
     dependencies:
       '@babel/parser': 7.19.6
-      '@babel/types': 7.19.0
+      '@babel/types': 7.19.4
       '@types/babel__generator': 7.6.4
       '@types/babel__template': 7.4.1
       '@types/babel__traverse': 7.17.1
@@ -4199,8 +4138,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.2.2_@babel+core@7.19.6:
-    resolution: {integrity: sha512-kkq2QSDIuvpgfoac3WZ1OOcHsQQDU5xYk2Ql7tLdJ8BVAYbefEXal+NfS45Y5LVZA7cxC8KYcQMObpCt1J025w==}
+  /babel-jest/29.3.0_@babel+core@7.19.6:
+    resolution: {integrity: sha512-LzQWdGm6hUugVeyGpIKI/T4SVT+PgAA5WFPqBDbneK7C/PqfckNb0tc4KvcKXq/PLA1yY6wTvB8Bc/REQdUxFg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -4209,7 +4148,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.6
-      '@jest/transform': 29.2.2
+      '@jest/transform': 29.3.0
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.2.0_@babel+core@7.19.6
@@ -4230,7 +4169,7 @@ packages:
     resolution: {integrity: sha512-Y1IQok9821cC9onCx5otgFfRm7Lm+I+wwxOx738M/WLPZ9Q42m4IG5W0FNX8WLL2gYMZo3JkuXIH2DOpWM+qwA==}
     engines: {node: '>=8'}
     dependencies:
-      '@babel/helper-plugin-utils': 7.18.9
+      '@babel/helper-plugin-utils': 7.19.0
       '@istanbuljs/load-nyc-config': 1.1.0
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-instrument: 5.2.0
@@ -4735,6 +4674,10 @@ packages:
     dependencies:
       safe-buffer: 5.1.2
 
+  /convert-source-map/2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+    dev: true
+
   /copy-descriptor/0.1.1:
     resolution: {integrity: sha512-XgZ0pFcakEUlbwQEVNg3+QAis1FyTL3Qel9FYy8pSkQqoG3PNoT0bOCQtOXcOkur21r2Eq2kI+IE+gsmAEVlYw==}
     engines: {node: '>=0.10.0'}
@@ -5385,7 +5328,7 @@ packages:
       eslint: 8.27.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_oljhfaj3ggvddo7rittzbyeh3a:
+  /eslint-config-react-app/7.0.1_ocwcv7zkgiwgrlr5e2rfs6lx3m:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5405,7 +5348,7 @@ packages:
       eslint: 8.27.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.27.0
       eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
-      eslint-plugin-jest: 25.7.0_iokx7ekx3swgvwius64h34smqy
+      eslint-plugin-jest: 25.7.0_oyhdxdxe4qakybjbdlayychnea
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.27.0
       eslint-plugin-react: 7.31.10_eslint@8.27.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
@@ -5529,7 +5472,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_iokx7ekx3swgvwius64h34smqy:
+  /eslint-plugin-jest/25.7.0_oyhdxdxe4qakybjbdlayychnea:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5545,7 +5488,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.42.1_2udltptbznfmezdozpdoa2aemq
       '@typescript-eslint/experimental-utils': 5.30.6_rmayb2veg2btbq6mbmnyivgasy
       eslint: 8.27.0
-      jest: 29.2.2_@types+node@18.11.9
+      jest: 29.3.0_@types+node@18.11.9
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5834,6 +5777,17 @@ packages:
       jest-util: 29.2.1
     dev: true
 
+  /expect/29.3.0:
+    resolution: {integrity: sha512-bms139btnQNZh4uxCPmzbWz46YOjtEpYIZ847OfY9GCeSBEfzedHWH0CkdR20Sy+XBs8/FI2lFJPZiuH0NGv+w==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/expect-utils': 29.2.2
+      jest-get-type: 29.2.0
+      jest-matcher-utils: 29.2.2
+      jest-message-util: 29.2.1
+      jest-util: 29.2.1
+    dev: true
+
   /extend-shallow/2.0.1:
     resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==}
     engines: {node: '>=0.10.0'}
@@ -6744,12 +6698,12 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.2.2:
-    resolution: {integrity: sha512-upSdWxx+Mh4DV7oueuZndJ1NVdgtTsqM4YgywHEx05UMH5nxxA2Qu9T9T9XVuR021XxqSoaKvSmmpAbjwwwxMw==}
+  /jest-circus/29.3.0:
+    resolution: {integrity: sha512-xL1cmbUGBGy923KBZpZ2LRKspHlIhrltrwGaefJ677HXCPY5rTF758BtweamBype2ogcSEK/oqcp1SmYZ/ATig==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.2
-      '@jest/expect': 29.2.2
+      '@jest/environment': 29.3.0
+      '@jest/expect': 29.3.0
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
@@ -6760,8 +6714,8 @@ packages:
       jest-each: 29.2.1
       jest-matcher-utils: 29.2.2
       jest-message-util: 29.2.1
-      jest-runtime: 29.2.2
-      jest-snapshot: 29.2.2
+      jest-runtime: 29.3.0
+      jest-snapshot: 29.3.0
       jest-util: 29.2.1
       p-limit: 3.1.0
       pretty-format: 29.2.1
@@ -6771,8 +6725,8 @@ packages:
       - supports-color
     dev: true
 
-  /jest-cli/29.2.2_@types+node@18.11.9:
-    resolution: {integrity: sha512-R45ygnnb2CQOfd8rTPFR+/fls0d+1zXS6JPYTBBrnLPrhr58SSuPTiA5Tplv8/PXpz4zXR/AYNxmwIj6J6nrvg==}
+  /jest-cli/29.3.0_@types+node@18.11.9:
+    resolution: {integrity: sha512-rDb9iasZvqTkgrlwzVGemR5i20T0/XN1ug46Ch2vxTRa0zS5PHaVXQXYzYbuLFHs1xpc+XsB9xPfEkkwbnLJBg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6781,14 +6735,14 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.2.2
+      '@jest/core': 29.3.0
       '@jest/test-result': 29.2.1
       '@jest/types': 29.2.1
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.2.2_@types+node@18.11.9
+      jest-config: 29.3.0_@types+node@18.11.9
       jest-util: 29.2.1
       jest-validate: 29.2.2
       prompts: 2.4.2
@@ -6799,8 +6753,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.2.2_@types+node@18.11.9:
-    resolution: {integrity: sha512-Q0JX54a5g1lP63keRfKR8EuC7n7wwny2HoTRDb8cx78IwQOiaYUVZAdjViY3WcTxpR02rPUpvNVmZ1fkIlZPcw==}
+  /jest-config/29.3.0_@types+node@18.11.9:
+    resolution: {integrity: sha512-sTSDs/M+//njznsytxiBxwfDnSWRb6OqiNSlO/B2iw1HUaa1YLsdWmV4AWLXss1XKzv1F0yVK+kA4XOhZ0I1qQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6812,21 +6766,21 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.6
-      '@jest/test-sequencer': 29.2.2
+      '@jest/test-sequencer': 29.3.0
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
-      babel-jest: 29.2.2_@babel+core@7.19.6
+      babel-jest: 29.3.0_@babel+core@7.19.6
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.2.2
-      jest-environment-node: 29.2.2
+      jest-circus: 29.3.0
+      jest-environment-node: 29.3.0
       jest-get-type: 29.2.0
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.2
-      jest-runner: 29.2.2
+      jest-resolve: 29.3.0
+      jest-runner: 29.3.0
       jest-util: 29.2.1
       jest-validate: 29.2.2
       micromatch: 4.0.5
@@ -6866,8 +6820,8 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-environment-jsdom/29.2.2:
-    resolution: {integrity: sha512-5mNtTcky1+RYv9kxkwMwt7fkzyX4EJUarV7iI+NQLigpV4Hz4sgfOdP4kOpCHXbkRWErV7tgXoXLm2CKtucr+A==}
+  /jest-environment-jsdom/29.3.0:
+    resolution: {integrity: sha512-xFLbMR4OF4lntNcO9LthJdPRbI9WgfFlG73aQS6wQ54+v4oSAp8T4FKUw0add+Z+Ghu/dirRxuvc4FzzN5kRxw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       canvas: ^2.5.0
@@ -6875,12 +6829,12 @@ packages:
       canvas:
         optional: true
     dependencies:
-      '@jest/environment': 29.2.2
-      '@jest/fake-timers': 29.2.2
+      '@jest/environment': 29.3.0
+      '@jest/fake-timers': 29.3.0
       '@jest/types': 29.2.1
       '@types/jsdom': 20.0.0
       '@types/node': 18.11.9
-      jest-mock: 29.2.2
+      jest-mock: 29.3.0
       jest-util: 29.2.1
       jsdom: 20.0.0
     transitivePeerDependencies:
@@ -6889,15 +6843,15 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.2.2:
-    resolution: {integrity: sha512-B7qDxQjkIakQf+YyrqV5dICNs7tlCO55WJ4OMSXsqz1lpI/0PmeuXdx2F7eU8rnPbRkUR/fItSSUh0jvE2y/tw==}
+  /jest-environment-node/29.3.0:
+    resolution: {integrity: sha512-oikVE5pyiBUMrqi7J/kFGd1zeT14+EnJulyqzopDNijLX13ygwjiOF/GVpVKSGyBrrAwSkaj/ohEQJCcjkCtOA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.2
-      '@jest/fake-timers': 29.2.2
+      '@jest/environment': 29.3.0
+      '@jest/fake-timers': 29.3.0
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
-      jest-mock: 29.2.2
+      jest-mock: 29.3.0
       jest-util: 29.2.1
     dev: true
 
@@ -6929,8 +6883,8 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.2.1:
-    resolution: {integrity: sha512-wF460rAFmYc6ARcCFNw4MbGYQjYkvjovb9GBT+W10Um8q5nHq98jD6fHZMDMO3tA56S8XnmNkM8GcA8diSZfnA==}
+  /jest-haste-map/29.3.0:
+    resolution: {integrity: sha512-ugdLIreycMRRg3+6AjiExECmuFI2D9PS+BmNU7eGvBt3fzVMKybb9USAZXN6kw4Q6Mn8DSK+7OFCloY2rN820Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
@@ -6941,7 +6895,7 @@ packages:
       graceful-fs: 4.2.10
       jest-regex-util: 29.2.0
       jest-util: 29.2.1
-      jest-worker: 29.2.1
+      jest-worker: 29.3.0
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
@@ -6981,8 +6935,8 @@ packages:
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.2.2:
-    resolution: {integrity: sha512-1leySQxNAnivvbcx0sCB37itu8f4OX2S/+gxLAV4Z62shT4r4dTG9tACDywUAEZoLSr36aYUTsVp3WKwWt4PMQ==}
+  /jest-mock/29.3.0:
+    resolution: {integrity: sha512-BRKfsAaeP3pTWeog+1D0ILeJF96SzB6y3k0JDxY63kssxiUy9nDLHmNUoVkBGILjMbpHULhbzVTsb3harPXuUQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/types': 29.2.1
@@ -6990,7 +6944,7 @@ packages:
       jest-util: 29.2.1
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.2.2:
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.3.0:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6999,7 +6953,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.2.2
+      jest-resolve: 29.3.0
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -7017,24 +6971,24 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.2.2:
-    resolution: {integrity: sha512-wWOmgbkbIC2NmFsq8Lb+3EkHuW5oZfctffTGvwsA4JcJ1IRk8b2tg+hz44f0lngvRTeHvp3Kyix9ACgudHH9aQ==}
+  /jest-resolve-dependencies/29.3.0:
+    resolution: {integrity: sha512-ykSbDbWmIaHprOBig57AExw7i6Fj0y69M6baiAd75Ivx1UMQt4wsM6A+SNqIhycV6Zy8XV3L40Ac3HYSrDSq7w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.2.0
-      jest-snapshot: 29.2.2
+      jest-snapshot: 29.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.2.2:
-    resolution: {integrity: sha512-3gaLpiC3kr14rJR3w7vWh0CBX2QAhfpfiQTwrFPvVrcHe5VUBtIXaR004aWE/X9B2CFrITOQAp5gxLONGrk6GA==}
+  /jest-resolve/29.3.0:
+    resolution: {integrity: sha512-xH6C6loDlOWEWHdCgioLDlbpmsolNdNsV/UR35ChuK217x0ttHuhyEPdh5wa6CTQ/Eq4OGW2/EZTlh0ay5aojQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.1
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.2.2
+      jest-haste-map: 29.3.0
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.3.0
       jest-util: 29.2.1
       jest-validate: 29.2.2
       resolve: 1.22.1
@@ -7042,45 +6996,45 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.2.2:
-    resolution: {integrity: sha512-1CpUxXDrbsfy9Hr9/1zCUUhT813kGGK//58HeIw/t8fa/DmkecEwZSWlb1N/xDKXg3uCFHQp1GCvlSClfImMxg==}
+  /jest-runner/29.3.0:
+    resolution: {integrity: sha512-E/ROzAVj7gy44FvIe+Tbz0xGWG1sa8WLkhUg/hsXHewPC0Z48kqWySdfYRtXkB7RmMn4OcWE+hIBfsRAMVV+sQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@jest/console': 29.2.1
-      '@jest/environment': 29.2.2
+      '@jest/environment': 29.3.0
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.2
+      '@jest/transform': 29.3.0
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
       chalk: 4.1.2
       emittery: 0.13.1
       graceful-fs: 4.2.10
       jest-docblock: 29.2.0
-      jest-environment-node: 29.2.2
-      jest-haste-map: 29.2.1
+      jest-environment-node: 29.3.0
+      jest-haste-map: 29.3.0
       jest-leak-detector: 29.2.1
       jest-message-util: 29.2.1
-      jest-resolve: 29.2.2
-      jest-runtime: 29.2.2
+      jest-resolve: 29.3.0
+      jest-runtime: 29.3.0
       jest-util: 29.2.1
       jest-watcher: 29.2.2
-      jest-worker: 29.2.1
+      jest-worker: 29.3.0
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.2.2:
-    resolution: {integrity: sha512-TpR1V6zRdLynckKDIQaY41od4o0xWL+KOPUCZvJK2bu5P1UXhjobt5nJ2ICNeIxgyj9NGkO0aWgDqYPVhDNKjA==}
+  /jest-runtime/29.3.0:
+    resolution: {integrity: sha512-ufgX/hbpa7MLnjWRW82T5mVF73FBk3W38dGCLPXWtYZ5Zr1ZFh8QnaAtITKJt0p3kGXR8ZqlIjadSiBTk/QJ/A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.2.2
-      '@jest/fake-timers': 29.2.2
-      '@jest/globals': 29.2.2
+      '@jest/environment': 29.3.0
+      '@jest/fake-timers': 29.3.0
+      '@jest/globals': 29.3.0
       '@jest/source-map': 29.2.0
       '@jest/test-result': 29.2.1
-      '@jest/transform': 29.2.2
+      '@jest/transform': 29.3.0
       '@jest/types': 29.2.1
       '@types/node': 18.11.9
       chalk: 4.1.2
@@ -7088,12 +7042,12 @@ packages:
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.2.1
+      jest-haste-map: 29.3.0
       jest-message-util: 29.2.1
-      jest-mock: 29.2.2
+      jest-mock: 29.3.0
       jest-regex-util: 29.2.0
-      jest-resolve: 29.2.2
-      jest-snapshot: 29.2.2
+      jest-resolve: 29.3.0
+      jest-snapshot: 29.3.0
       jest-util: 29.2.1
       slash: 3.0.0
       strip-bom: 4.0.0
@@ -7109,8 +7063,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.2.2:
-    resolution: {integrity: sha512-GfKJrpZ5SMqhli3NJ+mOspDqtZfJBryGA8RIBxF+G+WbDoC7HCqKaeAss4Z/Sab6bAW11ffasx8/vGsj83jyjA==}
+  /jest-snapshot/29.3.0:
+    resolution: {integrity: sha512-+4mX3T8XI3ABbZFzBd/AM74mfwOb6gMpYVFNTc0Cgg2F2fGYvHii8D6jWWka99a3wyNFmni3ov8meEVTF8n13Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.6
@@ -7120,17 +7074,17 @@ packages:
       '@babel/traverse': 7.19.6
       '@babel/types': 7.19.4
       '@jest/expect-utils': 29.2.2
-      '@jest/transform': 29.2.2
+      '@jest/transform': 29.3.0
       '@jest/types': 29.2.1
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.6
       chalk: 4.1.2
-      expect: 29.2.2
+      expect: 29.3.0
       graceful-fs: 4.2.10
       jest-diff: 29.2.1
       jest-get-type: 29.2.0
-      jest-haste-map: 29.2.1
+      jest-haste-map: 29.3.0
       jest-matcher-utils: 29.2.2
       jest-message-util: 29.2.1
       jest-util: 29.2.1
@@ -7181,7 +7135,7 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.2.2:
+  /jest-watch-typeahead/2.2.0_jest@29.3.0:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -7189,7 +7143,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.2.2_@types+node@18.11.9
+      jest: 29.3.0_@types+node@18.11.9
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7201,8 +7155,8 @@ packages:
     resolution: {integrity: sha512-tQX9lU91A+9tyUQKUMp0Ns8xAcdhC9fo73eqA3LFxP2bSgiF49TNcc+vf3qgGYYK9qRjFpXW9+4RgF/mbxyOOw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.1.2
-      '@jest/types': 29.1.2
+      '@jest/test-result': 29.2.1
+      '@jest/types': 29.2.1
       '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
@@ -7234,8 +7188,8 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.2.1:
-    resolution: {integrity: sha512-ROHTZ+oj7sBrgtv46zZ84uWky71AoYi0vEV9CdEtc1FQunsoAGe5HbQmW76nI5QWdvECVPrSi1MCVUmizSavMg==}
+  /jest-worker/29.3.0:
+    resolution: {integrity: sha512-rP8LYClB5NCWW0p8GdQT9vRmZNrDmjypklEYZuGCIU5iNviVWCZK5MILS3rQwD0FY1u96bY7b+KoU17DdZy6Ww==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 18.11.9
@@ -7244,8 +7198,8 @@ packages:
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.2.2_@types+node@18.11.9:
-    resolution: {integrity: sha512-r+0zCN9kUqoON6IjDdjbrsWobXM/09Nd45kIPRD8kloaRh1z5ZCMdVsgLXGxmlL7UpAJsvCYOQNO+NjvG/gqiQ==}
+  /jest/29.3.0_@types+node@18.11.9:
+    resolution: {integrity: sha512-lWmHtOcJSjR6FYRw+4oo7456QUe6LN73Lw6HLwOWKTPLcyQF60cMh0EoIHi67dV74SY5tw/kL+jYC+Ji43ScUg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7254,10 +7208,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.2.2
+      '@jest/core': 29.3.0
       '@jest/types': 29.2.1
       import-local: 3.1.0
-      jest-cli: 29.2.2_@types+node@18.11.9
+      jest-cli: 29.3.0_@types+node@18.11.9
     transitivePeerDependencies:
       - '@types/node'
       - supports-color

From efe986db341d6921ff801b8132c1926de3a451ca Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Nov 2022 09:19:20 +0000
Subject: [PATCH 255/263] build(deps): update dependency husky to v8.0.2
 (#4343)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   | 2 +-
 web/pnpm-lock.yaml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package.json b/web/package.json
index 8536aedd0..2716442a0 100644
--- a/web/package.json
+++ b/web/package.json
@@ -168,7 +168,7 @@
     "eslint-plugin-prettier": "4.2.1",
     "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
-    "husky": "8.0.1",
+    "husky": "8.0.2",
     "jest": "29.3.0",
     "jest-environment-jsdom": "29.3.0",
     "jest-transform-stub": "2.0.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 73604bf08..c196cbc43 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -39,7 +39,7 @@ specifiers:
   eslint-plugin-prettier: 4.2.1
   eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
-  husky: 8.0.1
+  husky: 8.0.2
   i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
@@ -118,7 +118,7 @@ devDependencies:
   eslint-plugin-prettier: 4.2.1_v7o5sx5x3wbs57ifz6wc4f76we
   eslint-plugin-react: 7.31.10_eslint@8.27.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
-  husky: 8.0.1
+  husky: 8.0.2
   jest: 29.3.0_@types+node@18.11.9
   jest-environment-jsdom: 29.3.0
   jest-transform-stub: 2.0.0
@@ -6276,8 +6276,8 @@ packages:
     engines: {node: '>=10.17.0'}
     dev: true
 
-  /husky/8.0.1:
-    resolution: {integrity: sha512-xs7/chUH/CKdOCs7Zy0Aev9e/dKOMZf3K1Az1nar3tzlv0jfqnYtu235bstsWTmXOR0EfINrPa97yy4Lz6RiKw==}
+  /husky/8.0.2:
+    resolution: {integrity: sha512-Tkv80jtvbnkK3mYWxPZePGFpQ/tT3HNSs/sasF9P2YfkMezDl3ON37YN6jUUI4eTg5LcyVynlb6r4eyvOmspvg==}
     engines: {node: '>=14'}
     hasBin: true
     dev: true

From abcfadad5a75b414d4284cd6b60b2455097c0bae Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Nov 2022 12:24:00 +0000
Subject: [PATCH 256/263] build(deps): update module
 github.com/prometheus/client_golang to v1.14.0 (#4344)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 4 ++--
 go.sum | 7 ++++---
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/go.mod b/go.mod
index 6f7f18ab4..6ba0eccd3 100644
--- a/go.mod
+++ b/go.mod
@@ -30,7 +30,7 @@ require (
 	github.com/otiai10/copy v1.7.0
 	github.com/pkg/errors v0.9.1
 	github.com/pquerna/otp v1.3.0
-	github.com/prometheus/client_golang v1.13.1
+	github.com/prometheus/client_golang v1.14.0
 	github.com/sirupsen/logrus v1.9.0
 	github.com/spf13/cobra v1.6.1
 	github.com/spf13/pflag v1.0.5
@@ -84,7 +84,7 @@ require (
 	github.com/pelletier/go-toml v1.9.4 // indirect
 	github.com/philhofer/fwd v1.1.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/prometheus/client_model v0.2.0 // indirect
+	github.com/prometheus/client_model v0.3.0 // indirect
 	github.com/prometheus/common v0.37.0 // indirect
 	github.com/prometheus/procfs v0.8.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
diff --git a/go.sum b/go.sum
index 441ea743f..8e6758aa1 100644
--- a/go.sum
+++ b/go.sum
@@ -1143,15 +1143,16 @@ github.com/prometheus/client_golang v1.9.0/go.mod h1:FqZLKOZnGdFAhOK4nqGHa7D66Id
 github.com/prometheus/client_golang v1.11.0/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
 github.com/prometheus/client_golang v1.11.1/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
 github.com/prometheus/client_golang v1.12.1/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
-github.com/prometheus/client_golang v1.13.1 h1:3gMjIY2+/hzmqhtUC/aQNYldJA6DtH3CgQvwS+02K1c=
-github.com/prometheus/client_golang v1.13.1/go.mod h1:vTeo+zgvILHsnnj/39Ou/1fPN5nJFOEMgftOUOmlvYQ=
+github.com/prometheus/client_golang v1.14.0 h1:nJdhIvne2eSX/XRAFV9PcvFFRbrjbcTUj0VP62TMhnw=
+github.com/prometheus/client_golang v1.14.0/go.mod h1:8vpkKitgIVNcqrRBWh1C4TIUQgYNtG/XQE4E/Zae36Y=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.1.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
-github.com/prometheus/client_model v0.2.0 h1:uq5h0d+GuxiXLJLNABMgp2qUWDPiLvgCzz2dUR+/W/M=
 github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/prometheus/client_model v0.3.0 h1:UBgGFHqYdG/TPFD1B1ogZywDqEkwp3fBMvqdiQ7Xew4=
+github.com/prometheus/client_model v0.3.0/go.mod h1:LDGWKZIo7rky3hgvBe+caln+Dr3dPggB5dvjtD7w9+w=
 github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
 github.com/prometheus/common v0.2.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.4.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=

From dee5e323b411e852bb36d8b1c3e2568bfe75001d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 9 Nov 2022 03:18:58 +0000
Subject: [PATCH 257/263] build(deps): update jest monorepo to v29.3.1 (#4347)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |   4 +-
 web/pnpm-lock.yaml | 532 ++++++++++++++++++++++++++-------------------
 2 files changed, 308 insertions(+), 228 deletions(-)

diff --git a/web/package.json b/web/package.json
index 2716442a0..e53f8982b 100644
--- a/web/package.json
+++ b/web/package.json
@@ -169,8 +169,8 @@
     "eslint-plugin-react": "7.31.10",
     "eslint-plugin-react-hooks": "4.6.0",
     "husky": "8.0.2",
-    "jest": "29.3.0",
-    "jest-environment-jsdom": "29.3.0",
+    "jest": "29.3.1",
+    "jest-environment-jsdom": "29.3.1",
     "jest-transform-stub": "2.0.0",
     "jest-watch-typeahead": "2.2.0",
     "prettier": "2.7.1",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index c196cbc43..3427013da 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -43,8 +43,8 @@ specifiers:
   i18next: 22.0.4
   i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
-  jest: 29.3.0
-  jest-environment-jsdom: 29.3.0
+  jest: 29.3.1
+  jest-environment-jsdom: 29.3.1
   jest-transform-stub: 2.0.0
   jest-watch-typeahead: 2.2.0
   prettier: 2.7.1
@@ -110,7 +110,7 @@ devDependencies:
   esbuild-jest: 0.5.0_esbuild@0.15.13
   eslint: 8.27.0
   eslint-config-prettier: 8.5.0_eslint@8.27.0
-  eslint-config-react-app: 7.0.1_ocwcv7zkgiwgrlr5e2rfs6lx3m
+  eslint-config-react-app: 7.0.1_ar3kwoulcryci6535wcfvjpsqy
   eslint-formatter-rdjson: 1.0.5
   eslint-import-resolver-typescript: 3.5.2_dcpv4nbdr5ks2h5677xdltrk6e
   eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
@@ -119,10 +119,10 @@ devDependencies:
   eslint-plugin-react: 7.31.10_eslint@8.27.0
   eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
   husky: 8.0.2
-  jest: 29.3.0_@types+node@18.11.9
-  jest-environment-jsdom: 29.3.0
+  jest: 29.3.1_@types+node@18.11.9
+  jest-environment-jsdom: 29.3.1
   jest-transform-stub: 2.0.0
-  jest-watch-typeahead: 2.2.0_jest@29.3.0
+  jest-watch-typeahead: 2.2.0_jest@29.3.1
   prettier: 2.7.1
   react-test-renderer: 18.2.0_react@18.2.0
   typescript: 4.8.4
@@ -2548,20 +2548,20 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /@jest/console/29.2.1:
-    resolution: {integrity: sha512-MF8Adcw+WPLZGBiNxn76DOuczG3BhODTcMlDCA4+cFi41OkaY/lyI0XUUhi73F88Y+7IHoGmD80pN5CtxQUdSw==}
+  /@jest/console/29.3.1:
+    resolution: {integrity: sha512-IRE6GD47KwcqA09RIWrabKdHPiKDGgtAL31xDxbi/RjQMsr+lY+ppxmHwY0dUEV3qvvxZzoe5Hl0RXZJOjQNUg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       chalk: 4.1.2
-      jest-message-util: 29.2.1
-      jest-util: 29.2.1
+      jest-message-util: 29.3.1
+      jest-util: 29.3.1
       slash: 3.0.0
     dev: true
 
-  /@jest/core/29.3.0:
-    resolution: {integrity: sha512-5DyNvV8452bwqcYyXHCYaAD8UrTiWosrhBY+rc0MBMyXyDzcIL+w5gdlCYhlHbNsHoWnf4nUbRmg++LWfWVtMQ==}
+  /@jest/core/29.3.1:
+    resolution: {integrity: sha512-0ohVjjRex985w5MmO5L3u5GR1O30DexhBSpuwx2P+9ftyqHdJXnk7IUWiP80oHMvt7ubHCJHxV0a0vlKVuZirw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2569,11 +2569,11 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/console': 29.2.1
-      '@jest/reporters': 29.3.0
-      '@jest/test-result': 29.2.1
-      '@jest/transform': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/console': 29.3.1
+      '@jest/reporters': 29.3.1
+      '@jest/test-result': 29.3.1
+      '@jest/transform': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
@@ -2581,20 +2581,20 @@ packages:
       exit: 0.1.2
       graceful-fs: 4.2.10
       jest-changed-files: 29.2.0
-      jest-config: 29.3.0_@types+node@18.11.9
-      jest-haste-map: 29.3.0
-      jest-message-util: 29.2.1
+      jest-config: 29.3.1_@types+node@18.11.9
+      jest-haste-map: 29.3.1
+      jest-message-util: 29.3.1
       jest-regex-util: 29.2.0
-      jest-resolve: 29.3.0
-      jest-resolve-dependencies: 29.3.0
-      jest-runner: 29.3.0
-      jest-runtime: 29.3.0
-      jest-snapshot: 29.3.0
-      jest-util: 29.2.1
-      jest-validate: 29.2.2
-      jest-watcher: 29.2.2
+      jest-resolve: 29.3.1
+      jest-resolve-dependencies: 29.3.1
+      jest-runner: 29.3.1
+      jest-runtime: 29.3.1
+      jest-snapshot: 29.3.1
+      jest-util: 29.3.1
+      jest-validate: 29.3.1
+      jest-watcher: 29.3.1
       micromatch: 4.0.5
-      pretty-format: 29.2.1
+      pretty-format: 29.3.1
       slash: 3.0.0
       strip-ansi: 6.0.1
     transitivePeerDependencies:
@@ -2602,14 +2602,14 @@ packages:
       - ts-node
     dev: true
 
-  /@jest/environment/29.3.0:
-    resolution: {integrity: sha512-8wgn3br51bx+7rgC8FOKmAD62Q39iswdiy5/p6acoekp/9Bb/IQbh3zydOrnGp74LwStSrKgpQSKBlOKlAQq0g==}
+  /@jest/environment/29.3.1:
+    resolution: {integrity: sha512-pMmvfOPmoa1c1QpfFW0nXYtNLpofqo4BrCIk6f2kW4JFeNlHV2t3vd+3iDLf31e2ot2Mec0uqZfmI+U0K2CFag==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/fake-timers': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/fake-timers': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
-      jest-mock: 29.3.0
+      jest-mock: 29.3.1
     dev: true
 
   /@jest/expect-utils/29.2.2:
@@ -2619,42 +2619,49 @@ packages:
       jest-get-type: 29.2.0
     dev: true
 
-  /@jest/expect/29.3.0:
-    resolution: {integrity: sha512-Lz/3x4Se5g6nBuLjTO+xE8D4OXY9fFmosZPwkXXZUJUsp9r9seN81cJa54wOGr1QjCQnhngMqclblhM4X/hcCg==}
+  /@jest/expect-utils/29.3.1:
+    resolution: {integrity: sha512-wlrznINZI5sMjwvUoLVk617ll/UYfGIZNxmbU+Pa7wmkL4vYzhV9R2pwVqUh4NWWuLQWkI8+8mOkxs//prKQ3g==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      expect: 29.3.0
-      jest-snapshot: 29.3.0
+      jest-get-type: 29.2.0
+    dev: true
+
+  /@jest/expect/29.3.1:
+    resolution: {integrity: sha512-QivM7GlSHSsIAWzgfyP8dgeExPRZ9BIe2LsdPyEhCGkZkoyA+kGsoIzbKAfZCvvRzfZioKwPtCZIt5SaoxYCvg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      expect: 29.3.1
+      jest-snapshot: 29.3.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/fake-timers/29.3.0:
-    resolution: {integrity: sha512-SzmWtN6Rld+xebMRGuWeMGhytc7qHnYfFk1Zd/1QavQWsFOmA9SgtvGHCBue1wXQhdDMaSIm1aPGj2Zmyrr1Zg==}
+  /@jest/fake-timers/29.3.1:
+    resolution: {integrity: sha512-iHTL/XpnDlFki9Tq0Q1GGuVeQ8BHZGIYsvCO5eN/O/oJaRzofG9Xndd9HuSDBI/0ZS79pg0iwn07OMTQ7ngF2A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.1
+      '@jest/types': 29.3.1
       '@sinonjs/fake-timers': 9.1.2
       '@types/node': 18.11.9
-      jest-message-util: 29.2.1
-      jest-mock: 29.3.0
-      jest-util: 29.2.1
+      jest-message-util: 29.3.1
+      jest-mock: 29.3.1
+      jest-util: 29.3.1
     dev: true
 
-  /@jest/globals/29.3.0:
-    resolution: {integrity: sha512-okYDVzYNrt/4ysR8XnX6u0I1bGG4kmfdXtUu7kwWHZ9OP13RCjmphgve0tfOrNluwksWvOPYS1f/HOrFTHLygQ==}
+  /@jest/globals/29.3.1:
+    resolution: {integrity: sha512-cTicd134vOcwO59OPaB6AmdHQMCtWOe+/DitpTZVxWgMJ+YvXL1HNAmPyiGbSHmF/mXVBkvlm8YYtQhyHPnV6Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.3.0
-      '@jest/expect': 29.3.0
-      '@jest/types': 29.2.1
-      jest-mock: 29.3.0
+      '@jest/environment': 29.3.1
+      '@jest/expect': 29.3.1
+      '@jest/types': 29.3.1
+      jest-mock: 29.3.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@jest/reporters/29.3.0:
-    resolution: {integrity: sha512-MV76tB3Kd80vcv2yMDZfQpMkwkHaY9hlvVhCtHXkVRCWwN+SX3EOmCdX8pT/X4Xh+NusA7l2Rc3yhx4q5p3+Fg==}
+  /@jest/reporters/29.3.1:
+    resolution: {integrity: sha512-GhBu3YFuDrcAYW/UESz1JphEAbvUjaY2vShRZRoRY1mxpCMB3yGSJ4j9n0GxVlEOdCf7qjvUfBCrTUUqhVfbRA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
@@ -2663,10 +2670,10 @@ packages:
         optional: true
     dependencies:
       '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.2.1
-      '@jest/test-result': 29.2.1
-      '@jest/transform': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/console': 29.3.1
+      '@jest/test-result': 29.3.1
+      '@jest/transform': 29.3.1
+      '@jest/types': 29.3.1
       '@jridgewell/trace-mapping': 0.3.15
       '@types/node': 18.11.9
       chalk: 4.1.2
@@ -2679,9 +2686,9 @@ packages:
       istanbul-lib-report: 3.0.0
       istanbul-lib-source-maps: 4.0.1
       istanbul-reports: 3.1.5
-      jest-message-util: 29.2.1
-      jest-util: 29.2.1
-      jest-worker: 29.3.0
+      jest-message-util: 29.3.1
+      jest-util: 29.3.1
+      jest-worker: 29.3.1
       slash: 3.0.0
       string-length: 4.0.2
       strip-ansi: 6.0.1
@@ -2706,23 +2713,23 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /@jest/test-result/29.2.1:
-    resolution: {integrity: sha512-lS4+H+VkhbX6z64tZP7PAUwPqhwj3kbuEHcaLuaBuB+riyaX7oa1txe0tXgrFj5hRWvZKvqO7LZDlNWeJ7VTPA==}
+  /@jest/test-result/29.3.1:
+    resolution: {integrity: sha512-qeLa6qc0ddB0kuOZyZIhfN5q0e2htngokyTWsGriedsDhItisW7SDYZ7ceOe57Ii03sL988/03wAcBh3TChMGw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.2.1
-      '@jest/types': 29.2.1
+      '@jest/console': 29.3.1
+      '@jest/types': 29.3.1
       '@types/istanbul-lib-coverage': 2.0.4
       collect-v8-coverage: 1.0.1
     dev: true
 
-  /@jest/test-sequencer/29.3.0:
-    resolution: {integrity: sha512-XQlTP/S6Yf6NKV0Mt4oopFKyDxiEkDMD7hIFcCTeltKQszE0Z+LI5KLukwNW6Qxr1YzaZ/s6PlKJusiCLJNTcw==}
+  /@jest/test-sequencer/29.3.1:
+    resolution: {integrity: sha512-IqYvLbieTv20ArgKoAMyhLHNrVHJfzO6ARZAbQRlY4UGWfdDnLlZEF0BvKOMd77uIiIjSZRwq3Jb3Fa3I8+2UA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.2.1
+      '@jest/test-result': 29.3.1
       graceful-fs: 4.2.10
-      jest-haste-map: 29.3.0
+      jest-haste-map: 29.3.1
       slash: 3.0.0
     dev: true
 
@@ -2749,21 +2756,21 @@ packages:
       - supports-color
     dev: true
 
-  /@jest/transform/29.3.0:
-    resolution: {integrity: sha512-4T8h61ItCakAlJkdYa7XVWP3r39QldlCeOSNmRpiJisi5PrrlzwZdpJDIH13ZZjh+MlSPQ2cq8YbUs3TuH+tRA==}
+  /@jest/transform/29.3.1:
+    resolution: {integrity: sha512-8wmCFBTVGYqFNLWfcOWoVuMuKYPUBTnTMDkdvFtAYELwDOl9RGwOsvQWGPFxDJ8AWY9xM/8xCXdqmPK3+Q5Lug==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.6
-      '@jest/types': 29.2.1
+      '@jest/types': 29.3.1
       '@jridgewell/trace-mapping': 0.3.15
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 2.0.0
       fast-json-stable-stringify: 2.1.0
       graceful-fs: 4.2.10
-      jest-haste-map: 29.3.0
+      jest-haste-map: 29.3.1
       jest-regex-util: 29.2.0
-      jest-util: 29.2.1
+      jest-util: 29.3.1
       micromatch: 4.0.5
       pirates: 4.0.5
       slash: 3.0.0
@@ -2795,6 +2802,18 @@ packages:
       chalk: 4.1.2
     dev: true
 
+  /@jest/types/29.3.1:
+    resolution: {integrity: sha512-d0S0jmmTpjnhCmNpApgX3jrUZgZ22ivKJRvL2lli5hpCRoNnp1f85r2/wpKfXuYu8E7Jjh1hGfhPyup1NM5AmA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/schemas': 29.0.0
+      '@types/istanbul-lib-coverage': 2.0.4
+      '@types/istanbul-reports': 3.0.1
+      '@types/node': 18.11.9
+      '@types/yargs': 17.0.10
+      chalk: 4.1.2
+    dev: true
+
   /@jridgewell/gen-mapping/0.1.1:
     resolution: {integrity: sha512-sQXCasFk+U8lWYEe66WxRDOE9PjVz4vSM51fTu3Hw+ClTpUSQb718772vH3pyS5pShp6lvQM7SxgIDXXXmOX7w==}
     engines: {node: '>=6.0.0'}
@@ -4138,8 +4157,8 @@ packages:
       - supports-color
     dev: true
 
-  /babel-jest/29.3.0_@babel+core@7.19.6:
-    resolution: {integrity: sha512-LzQWdGm6hUugVeyGpIKI/T4SVT+PgAA5WFPqBDbneK7C/PqfckNb0tc4KvcKXq/PLA1yY6wTvB8Bc/REQdUxFg==}
+  /babel-jest/29.3.1_@babel+core@7.19.6:
+    resolution: {integrity: sha512-aard+xnMoxgjwV70t0L6wkW/3HQQtV+O0PEimxKgzNqCJnbYmroPojdP2tqKSOAt8QAKV/uSZU8851M7B5+fcA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@babel/core': ^7.8.0
@@ -4148,7 +4167,7 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.6
-      '@jest/transform': 29.3.0
+      '@jest/transform': 29.3.1
       '@types/babel__core': 7.1.19
       babel-plugin-istanbul: 6.1.1
       babel-preset-jest: 29.2.0_@babel+core@7.19.6
@@ -4920,6 +4939,11 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
+  /diff-sequences/29.3.1:
+    resolution: {integrity: sha512-hlM3QR272NXCi4pq+N4Kok4kOp6EsgOM3ZSpJI7Da3UAs+Ttsi8MRmB6trM/lhyzUxGfOgnpkHtgqm5Q/CTcfQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dev: true
+
   /diff/4.0.2:
     resolution: {integrity: sha512-58lmxKSA4BNyLz+HHMUzlOEpg09FV+ev6ZMe3vJihgdxzgcwZ8VoEEPmALCZG9LmqfVoNMMKpttIYTVG6uDY7A==}
     engines: {node: '>=0.3.1'}
@@ -5328,7 +5352,7 @@ packages:
       eslint: 8.27.0
     dev: true
 
-  /eslint-config-react-app/7.0.1_ocwcv7zkgiwgrlr5e2rfs6lx3m:
+  /eslint-config-react-app/7.0.1_ar3kwoulcryci6535wcfvjpsqy:
     resolution: {integrity: sha512-K6rNzvkIeHaTd8m/QEh1Zko0KI7BACWkkneSs6s9cKZC/J27X3eZR6Upt1jkmZ/4FK+XUOPPxMEN7+lbUXfSlA==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -5348,7 +5372,7 @@ packages:
       eslint: 8.27.0
       eslint-plugin-flowtype: 8.0.3_eslint@8.27.0
       eslint-plugin-import: 2.26.0_gbipkkcbnjmysmpjttq6vkmfqq
-      eslint-plugin-jest: 25.7.0_oyhdxdxe4qakybjbdlayychnea
+      eslint-plugin-jest: 25.7.0_kdswgjmqcx7mthqz7ow2zlfevy
       eslint-plugin-jsx-a11y: 6.6.1_eslint@8.27.0
       eslint-plugin-react: 7.31.10_eslint@8.27.0
       eslint-plugin-react-hooks: 4.6.0_eslint@8.27.0
@@ -5472,7 +5496,7 @@ packages:
       - supports-color
     dev: true
 
-  /eslint-plugin-jest/25.7.0_oyhdxdxe4qakybjbdlayychnea:
+  /eslint-plugin-jest/25.7.0_kdswgjmqcx7mthqz7ow2zlfevy:
     resolution: {integrity: sha512-PWLUEXeeF7C9QGKqvdSbzLOiLTx+bno7/HC9eefePfEb257QFHg7ye3dh80AZVkaa/RQsBB1Q/ORQvg2X7F0NQ==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
     peerDependencies:
@@ -5488,7 +5512,7 @@ packages:
       '@typescript-eslint/eslint-plugin': 5.42.1_2udltptbznfmezdozpdoa2aemq
       '@typescript-eslint/experimental-utils': 5.30.6_rmayb2veg2btbq6mbmnyivgasy
       eslint: 8.27.0
-      jest: 29.3.0_@types+node@18.11.9
+      jest: 29.3.1_@types+node@18.11.9
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -5777,15 +5801,15 @@ packages:
       jest-util: 29.2.1
     dev: true
 
-  /expect/29.3.0:
-    resolution: {integrity: sha512-bms139btnQNZh4uxCPmzbWz46YOjtEpYIZ847OfY9GCeSBEfzedHWH0CkdR20Sy+XBs8/FI2lFJPZiuH0NGv+w==}
+  /expect/29.3.1:
+    resolution: {integrity: sha512-gGb1yTgU30Q0O/tQq+z30KBWv24ApkMgFUpvKBkyLUBL68Wv8dHdJxTBZFl/iT8K/bqDHvUYRH6IIN3rToopPA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/expect-utils': 29.2.2
+      '@jest/expect-utils': 29.3.1
       jest-get-type: 29.2.0
-      jest-matcher-utils: 29.2.2
-      jest-message-util: 29.2.1
-      jest-util: 29.2.1
+      jest-matcher-utils: 29.3.1
+      jest-message-util: 29.3.1
+      jest-util: 29.3.1
     dev: true
 
   /extend-shallow/2.0.1:
@@ -6698,35 +6722,35 @@ packages:
       p-limit: 3.1.0
     dev: true
 
-  /jest-circus/29.3.0:
-    resolution: {integrity: sha512-xL1cmbUGBGy923KBZpZ2LRKspHlIhrltrwGaefJ677HXCPY5rTF758BtweamBype2ogcSEK/oqcp1SmYZ/ATig==}
+  /jest-circus/29.3.1:
+    resolution: {integrity: sha512-wpr26sEvwb3qQQbdlmei+gzp6yoSSoSL6GsLPxnuayZSMrSd5Ka7IjAvatpIernBvT2+Ic6RLTg+jSebScmasg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.3.0
-      '@jest/expect': 29.3.0
-      '@jest/test-result': 29.2.1
-      '@jest/types': 29.2.1
+      '@jest/environment': 29.3.1
+      '@jest/expect': 29.3.1
+      '@jest/test-result': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       chalk: 4.1.2
       co: 4.6.0
       dedent: 0.7.0
       is-generator-fn: 2.1.0
-      jest-each: 29.2.1
-      jest-matcher-utils: 29.2.2
-      jest-message-util: 29.2.1
-      jest-runtime: 29.3.0
-      jest-snapshot: 29.3.0
-      jest-util: 29.2.1
+      jest-each: 29.3.1
+      jest-matcher-utils: 29.3.1
+      jest-message-util: 29.3.1
+      jest-runtime: 29.3.1
+      jest-snapshot: 29.3.1
+      jest-util: 29.3.1
       p-limit: 3.1.0
-      pretty-format: 29.2.1
+      pretty-format: 29.3.1
       slash: 3.0.0
       stack-utils: 2.0.5
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-cli/29.3.0_@types+node@18.11.9:
-    resolution: {integrity: sha512-rDb9iasZvqTkgrlwzVGemR5i20T0/XN1ug46Ch2vxTRa0zS5PHaVXQXYzYbuLFHs1xpc+XsB9xPfEkkwbnLJBg==}
+  /jest-cli/29.3.1_@types+node@18.11.9:
+    resolution: {integrity: sha512-TO/ewvwyvPOiBBuWZ0gm04z3WWP8TIK8acgPzE4IxgsLKQgb377NYGrQLc3Wl/7ndWzIH2CDNNsUjGxwLL43VQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -6735,16 +6759,16 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.3.0
-      '@jest/test-result': 29.2.1
-      '@jest/types': 29.2.1
+      '@jest/core': 29.3.1
+      '@jest/test-result': 29.3.1
+      '@jest/types': 29.3.1
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.10
       import-local: 3.1.0
-      jest-config: 29.3.0_@types+node@18.11.9
-      jest-util: 29.2.1
-      jest-validate: 29.2.2
+      jest-config: 29.3.1_@types+node@18.11.9
+      jest-util: 29.3.1
+      jest-validate: 29.3.1
       prompts: 2.4.2
       yargs: 17.5.1
     transitivePeerDependencies:
@@ -6753,8 +6777,8 @@ packages:
       - ts-node
     dev: true
 
-  /jest-config/29.3.0_@types+node@18.11.9:
-    resolution: {integrity: sha512-sTSDs/M+//njznsytxiBxwfDnSWRb6OqiNSlO/B2iw1HUaa1YLsdWmV4AWLXss1XKzv1F0yVK+kA4XOhZ0I1qQ==}
+  /jest-config/29.3.1_@types+node@18.11.9:
+    resolution: {integrity: sha512-y0tFHdj2WnTEhxmGUK1T7fgLen7YK4RtfvpLFBXfQkh2eMJAQq24Vx9472lvn5wg0MAO6B+iPfJfzdR9hJYalg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       '@types/node': '*'
@@ -6766,26 +6790,26 @@ packages:
         optional: true
     dependencies:
       '@babel/core': 7.19.6
-      '@jest/test-sequencer': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/test-sequencer': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
-      babel-jest: 29.3.0_@babel+core@7.19.6
+      babel-jest: 29.3.1_@babel+core@7.19.6
       chalk: 4.1.2
       ci-info: 3.3.2
       deepmerge: 4.2.2
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-circus: 29.3.0
-      jest-environment-node: 29.3.0
+      jest-circus: 29.3.1
+      jest-environment-node: 29.3.1
       jest-get-type: 29.2.0
       jest-regex-util: 29.2.0
-      jest-resolve: 29.3.0
-      jest-runner: 29.3.0
-      jest-util: 29.2.1
-      jest-validate: 29.2.2
+      jest-resolve: 29.3.1
+      jest-runner: 29.3.1
+      jest-util: 29.3.1
+      jest-validate: 29.3.1
       micromatch: 4.0.5
       parse-json: 5.2.0
-      pretty-format: 29.2.1
+      pretty-format: 29.3.1
       slash: 3.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -6802,6 +6826,16 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
+  /jest-diff/29.3.1:
+    resolution: {integrity: sha512-vU8vyiO7568tmin2lA3r2DP8oRvzhvRcD4DjpXc6uGveQodyk7CKLhQlCSiwgx3g0pFaE88/KLZ0yaTWMc4Uiw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      diff-sequences: 29.3.1
+      jest-get-type: 29.2.0
+      pretty-format: 29.3.1
+    dev: true
+
   /jest-docblock/29.2.0:
     resolution: {integrity: sha512-bkxUsxTgWQGbXV5IENmfiIuqZhJcyvF7tU4zJ/7ioTutdz4ToB5Yx6JOFBpgI+TphRY4lhOyCWGNH/QFQh5T6A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6809,19 +6843,19 @@ packages:
       detect-newline: 3.1.0
     dev: true
 
-  /jest-each/29.2.1:
-    resolution: {integrity: sha512-sGP86H/CpWHMyK3qGIGFCgP6mt+o5tu9qG4+tobl0LNdgny0aitLXs9/EBacLy3Bwqy+v4uXClqJgASJWcruYw==}
+  /jest-each/29.3.1:
+    resolution: {integrity: sha512-qrZH7PmFB9rEzCSl00BWjZYuS1BSOH8lLuC0azQE9lQrAx3PWGKHTDudQiOSwIy5dGAJh7KA0ScYlCP7JxvFYA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.1
+      '@jest/types': 29.3.1
       chalk: 4.1.2
       jest-get-type: 29.2.0
-      jest-util: 29.2.1
-      pretty-format: 29.2.1
+      jest-util: 29.3.1
+      pretty-format: 29.3.1
     dev: true
 
-  /jest-environment-jsdom/29.3.0:
-    resolution: {integrity: sha512-xFLbMR4OF4lntNcO9LthJdPRbI9WgfFlG73aQS6wQ54+v4oSAp8T4FKUw0add+Z+Ghu/dirRxuvc4FzzN5kRxw==}
+  /jest-environment-jsdom/29.3.1:
+    resolution: {integrity: sha512-G46nKgiez2Gy4zvYNhayfMEAFlVHhWfncqvqS6yCd0i+a4NsSUD2WtrKSaYQrYiLQaupHXxCRi8xxVL2M9PbhA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
       canvas: ^2.5.0
@@ -6829,13 +6863,13 @@ packages:
       canvas:
         optional: true
     dependencies:
-      '@jest/environment': 29.3.0
-      '@jest/fake-timers': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/environment': 29.3.1
+      '@jest/fake-timers': 29.3.1
+      '@jest/types': 29.3.1
       '@types/jsdom': 20.0.0
       '@types/node': 18.11.9
-      jest-mock: 29.3.0
-      jest-util: 29.2.1
+      jest-mock: 29.3.1
+      jest-util: 29.3.1
       jsdom: 20.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -6843,16 +6877,16 @@ packages:
       - utf-8-validate
     dev: true
 
-  /jest-environment-node/29.3.0:
-    resolution: {integrity: sha512-oikVE5pyiBUMrqi7J/kFGd1zeT14+EnJulyqzopDNijLX13ygwjiOF/GVpVKSGyBrrAwSkaj/ohEQJCcjkCtOA==}
+  /jest-environment-node/29.3.1:
+    resolution: {integrity: sha512-xm2THL18Xf5sIHoU7OThBPtuH6Lerd+Y1NLYiZJlkE3hbE+7N7r8uvHIl/FkZ5ymKXJe/11SQuf3fv4v6rUMag==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.3.0
-      '@jest/fake-timers': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/environment': 29.3.1
+      '@jest/fake-timers': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
-      jest-mock: 29.3.0
-      jest-util: 29.2.1
+      jest-mock: 29.3.1
+      jest-util: 29.3.1
     dev: true
 
   /jest-get-type/29.2.0:
@@ -6883,31 +6917,31 @@ packages:
       - supports-color
     dev: true
 
-  /jest-haste-map/29.3.0:
-    resolution: {integrity: sha512-ugdLIreycMRRg3+6AjiExECmuFI2D9PS+BmNU7eGvBt3fzVMKybb9USAZXN6kw4Q6Mn8DSK+7OFCloY2rN820Q==}
+  /jest-haste-map/29.3.1:
+    resolution: {integrity: sha512-/FFtvoG1xjbbPXQLFef+WSU4yrc0fc0Dds6aRPBojUid7qlPqZvxdUBA03HW0fnVHXVCnCdkuoghYItKNzc/0A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.1
+      '@jest/types': 29.3.1
       '@types/graceful-fs': 4.1.5
       '@types/node': 18.11.9
       anymatch: 3.1.2
       fb-watchman: 2.0.1
       graceful-fs: 4.2.10
       jest-regex-util: 29.2.0
-      jest-util: 29.2.1
-      jest-worker: 29.3.0
+      jest-util: 29.3.1
+      jest-worker: 29.3.1
       micromatch: 4.0.5
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.2
     dev: true
 
-  /jest-leak-detector/29.2.1:
-    resolution: {integrity: sha512-1YvSqYoiurxKOJtySc+CGVmw/e1v4yNY27BjWTVzp0aTduQeA7pdieLiW05wTYG/twlKOp2xS/pWuikQEmklug==}
+  /jest-leak-detector/29.3.1:
+    resolution: {integrity: sha512-3DA/VVXj4zFOPagGkuqHnSQf1GZBmmlagpguxEERO6Pla2g84Q1MaVIB3YMxgUaFIaYag8ZnTyQgiZ35YEqAQA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-get-type: 29.2.0
-      pretty-format: 29.2.1
+      pretty-format: 29.3.1
     dev: true
 
   /jest-matcher-utils/29.2.2:
@@ -6920,6 +6954,16 @@ packages:
       pretty-format: 29.2.1
     dev: true
 
+  /jest-matcher-utils/29.3.1:
+    resolution: {integrity: sha512-fkRMZUAScup3txIKfMe3AIZZmPEjWEdsPJFK3AIy5qRohWqQFg1qrmKfYXR9qEkNc7OdAu2N4KPHibEmy4HPeQ==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      chalk: 4.1.2
+      jest-diff: 29.3.1
+      jest-get-type: 29.2.0
+      pretty-format: 29.3.1
+    dev: true
+
   /jest-message-util/29.2.1:
     resolution: {integrity: sha512-Dx5nEjw9V8C1/Yj10S/8ivA8F439VS8vTq1L7hEgwHFn9ovSKNpYW/kwNh7UglaEgXO42XxzKJB+2x0nSglFVw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6935,16 +6979,31 @@ packages:
       stack-utils: 2.0.5
     dev: true
 
-  /jest-mock/29.3.0:
-    resolution: {integrity: sha512-BRKfsAaeP3pTWeog+1D0ILeJF96SzB6y3k0JDxY63kssxiUy9nDLHmNUoVkBGILjMbpHULhbzVTsb3harPXuUQ==}
+  /jest-message-util/29.3.1:
+    resolution: {integrity: sha512-lMJTbgNcDm5z+6KDxWtqOFWlGQxD6XaYwBqHR8kmpkP+WWWG90I35kdtQHY67Ay5CSuydkTBbJG+tH9JShFCyA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.1
-      '@types/node': 18.11.9
-      jest-util: 29.2.1
+      '@babel/code-frame': 7.18.6
+      '@jest/types': 29.3.1
+      '@types/stack-utils': 2.0.1
+      chalk: 4.1.2
+      graceful-fs: 4.2.10
+      micromatch: 4.0.5
+      pretty-format: 29.3.1
+      slash: 3.0.0
+      stack-utils: 2.0.5
     dev: true
 
-  /jest-pnp-resolver/1.2.2_jest-resolve@29.3.0:
+  /jest-mock/29.3.1:
+    resolution: {integrity: sha512-H8/qFDtDVMFvFP4X8NuOT3XRDzOUTz+FeACjufHzsOIBAxivLqkB1PoLCaJx9iPPQ8dZThHPp/G3WRWyMgA3JA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.3.1
+      '@types/node': 18.11.9
+      jest-util: 29.3.1
+    dev: true
+
+  /jest-pnp-resolver/1.2.2_jest-resolve@29.3.1:
     resolution: {integrity: sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==}
     engines: {node: '>=6'}
     peerDependencies:
@@ -6953,7 +7012,7 @@ packages:
       jest-resolve:
         optional: true
     dependencies:
-      jest-resolve: 29.3.0
+      jest-resolve: 29.3.1
     dev: true
 
   /jest-regex-util/26.0.0:
@@ -6971,84 +7030,84 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dev: true
 
-  /jest-resolve-dependencies/29.3.0:
-    resolution: {integrity: sha512-ykSbDbWmIaHprOBig57AExw7i6Fj0y69M6baiAd75Ivx1UMQt4wsM6A+SNqIhycV6Zy8XV3L40Ac3HYSrDSq7w==}
+  /jest-resolve-dependencies/29.3.1:
+    resolution: {integrity: sha512-Vk0cYq0byRw2WluNmNWGqPeRnZ3p3hHmjJMp2dyyZeYIfiBskwq4rpiuGFR6QGAdbj58WC7HN4hQHjf2mpvrLA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       jest-regex-util: 29.2.0
-      jest-snapshot: 29.3.0
+      jest-snapshot: 29.3.1
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-resolve/29.3.0:
-    resolution: {integrity: sha512-xH6C6loDlOWEWHdCgioLDlbpmsolNdNsV/UR35ChuK217x0ttHuhyEPdh5wa6CTQ/Eq4OGW2/EZTlh0ay5aojQ==}
+  /jest-resolve/29.3.1:
+    resolution: {integrity: sha512-amXJgH/Ng712w3Uz5gqzFBBjxV8WFLSmNjoreBGMqxgCz5cH7swmBZzgBaCIOsvb0NbpJ0vgaSFdJqMdT+rADw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       chalk: 4.1.2
       graceful-fs: 4.2.10
-      jest-haste-map: 29.3.0
-      jest-pnp-resolver: 1.2.2_jest-resolve@29.3.0
-      jest-util: 29.2.1
-      jest-validate: 29.2.2
+      jest-haste-map: 29.3.1
+      jest-pnp-resolver: 1.2.2_jest-resolve@29.3.1
+      jest-util: 29.3.1
+      jest-validate: 29.3.1
       resolve: 1.22.1
       resolve.exports: 1.1.0
       slash: 3.0.0
     dev: true
 
-  /jest-runner/29.3.0:
-    resolution: {integrity: sha512-E/ROzAVj7gy44FvIe+Tbz0xGWG1sa8WLkhUg/hsXHewPC0Z48kqWySdfYRtXkB7RmMn4OcWE+hIBfsRAMVV+sQ==}
+  /jest-runner/29.3.1:
+    resolution: {integrity: sha512-oFvcwRNrKMtE6u9+AQPMATxFcTySyKfLhvso7Sdk/rNpbhg4g2GAGCopiInk1OP4q6gz3n6MajW4+fnHWlU3bA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/console': 29.2.1
-      '@jest/environment': 29.3.0
-      '@jest/test-result': 29.2.1
-      '@jest/transform': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/console': 29.3.1
+      '@jest/environment': 29.3.1
+      '@jest/test-result': 29.3.1
+      '@jest/transform': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       chalk: 4.1.2
       emittery: 0.13.1
       graceful-fs: 4.2.10
       jest-docblock: 29.2.0
-      jest-environment-node: 29.3.0
-      jest-haste-map: 29.3.0
-      jest-leak-detector: 29.2.1
-      jest-message-util: 29.2.1
-      jest-resolve: 29.3.0
-      jest-runtime: 29.3.0
-      jest-util: 29.2.1
-      jest-watcher: 29.2.2
-      jest-worker: 29.3.0
+      jest-environment-node: 29.3.1
+      jest-haste-map: 29.3.1
+      jest-leak-detector: 29.3.1
+      jest-message-util: 29.3.1
+      jest-resolve: 29.3.1
+      jest-runtime: 29.3.1
+      jest-util: 29.3.1
+      jest-watcher: 29.3.1
+      jest-worker: 29.3.1
       p-limit: 3.1.0
       source-map-support: 0.5.13
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /jest-runtime/29.3.0:
-    resolution: {integrity: sha512-ufgX/hbpa7MLnjWRW82T5mVF73FBk3W38dGCLPXWtYZ5Zr1ZFh8QnaAtITKJt0p3kGXR8ZqlIjadSiBTk/QJ/A==}
+  /jest-runtime/29.3.1:
+    resolution: {integrity: sha512-jLzkIxIqXwBEOZx7wx9OO9sxoZmgT2NhmQKzHQm1xwR1kNW/dn0OjxR424VwHHf1SPN6Qwlb5pp1oGCeFTQ62A==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/environment': 29.3.0
-      '@jest/fake-timers': 29.3.0
-      '@jest/globals': 29.3.0
+      '@jest/environment': 29.3.1
+      '@jest/fake-timers': 29.3.1
+      '@jest/globals': 29.3.1
       '@jest/source-map': 29.2.0
-      '@jest/test-result': 29.2.1
-      '@jest/transform': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/test-result': 29.3.1
+      '@jest/transform': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       chalk: 4.1.2
       cjs-module-lexer: 1.2.2
       collect-v8-coverage: 1.0.1
       glob: 7.2.3
       graceful-fs: 4.2.10
-      jest-haste-map: 29.3.0
-      jest-message-util: 29.2.1
-      jest-mock: 29.3.0
+      jest-haste-map: 29.3.1
+      jest-message-util: 29.3.1
+      jest-mock: 29.3.1
       jest-regex-util: 29.2.0
-      jest-resolve: 29.3.0
-      jest-snapshot: 29.3.0
-      jest-util: 29.2.1
+      jest-resolve: 29.3.1
+      jest-snapshot: 29.3.1
+      jest-util: 29.3.1
       slash: 3.0.0
       strip-bom: 4.0.0
     transitivePeerDependencies:
@@ -7063,8 +7122,8 @@ packages:
       graceful-fs: 4.2.10
     dev: true
 
-  /jest-snapshot/29.3.0:
-    resolution: {integrity: sha512-+4mX3T8XI3ABbZFzBd/AM74mfwOb6gMpYVFNTc0Cgg2F2fGYvHii8D6jWWka99a3wyNFmni3ov8meEVTF8n13Q==}
+  /jest-snapshot/29.3.1:
+    resolution: {integrity: sha512-+3JOc+s28upYLI2OJM4PWRGK9AgpsMs/ekNryUV0yMBClT9B1DF2u2qay8YxcQd338PPYSFNb0lsar1B49sLDA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@babel/core': 7.19.6
@@ -7073,23 +7132,23 @@ packages:
       '@babel/plugin-syntax-typescript': 7.18.6_@babel+core@7.19.6
       '@babel/traverse': 7.19.6
       '@babel/types': 7.19.4
-      '@jest/expect-utils': 29.2.2
-      '@jest/transform': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/expect-utils': 29.3.1
+      '@jest/transform': 29.3.1
+      '@jest/types': 29.3.1
       '@types/babel__traverse': 7.17.1
       '@types/prettier': 2.6.3
       babel-preset-current-node-syntax: 1.0.1_@babel+core@7.19.6
       chalk: 4.1.2
-      expect: 29.3.0
+      expect: 29.3.1
       graceful-fs: 4.2.10
-      jest-diff: 29.2.1
+      jest-diff: 29.3.1
       jest-get-type: 29.2.0
-      jest-haste-map: 29.3.0
-      jest-matcher-utils: 29.2.2
-      jest-message-util: 29.2.1
-      jest-util: 29.2.1
+      jest-haste-map: 29.3.1
+      jest-matcher-utils: 29.3.1
+      jest-message-util: 29.3.1
+      jest-util: 29.3.1
       natural-compare: 1.4.0
-      pretty-format: 29.2.1
+      pretty-format: 29.3.1
       semver: 7.3.7
     transitivePeerDependencies:
       - supports-color
@@ -7123,19 +7182,31 @@ packages:
       picomatch: 2.3.1
     dev: true
 
-  /jest-validate/29.2.2:
-    resolution: {integrity: sha512-eJXATaKaSnOuxNfs8CLHgdABFgUrd0TtWS8QckiJ4L/QVDF4KVbZFBBOwCBZHOS0Rc5fOxqngXeGXE3nGQkpQA==}
+  /jest-util/29.3.1:
+    resolution: {integrity: sha512-7YOVZaiX7RJLv76ZfHt4nbNEzzTRiMW/IiOG7ZOKmTXmoGBxUDefgMAxQubu6WPVqP5zSzAdZG0FfLcC7HOIFQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/types': 29.2.1
+      '@jest/types': 29.3.1
+      '@types/node': 18.11.9
+      chalk: 4.1.2
+      ci-info: 3.3.2
+      graceful-fs: 4.2.10
+      picomatch: 2.3.1
+    dev: true
+
+  /jest-validate/29.3.1:
+    resolution: {integrity: sha512-N9Lr3oYR2Mpzuelp1F8negJR3YE+L1ebk1rYA5qYo9TTY3f9OWdptLoNSPP9itOCBIRBqjt/S5XHlzYglLN67g==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/types': 29.3.1
       camelcase: 6.3.0
       chalk: 4.1.2
       jest-get-type: 29.2.0
       leven: 3.1.0
-      pretty-format: 29.2.1
+      pretty-format: 29.3.1
     dev: true
 
-  /jest-watch-typeahead/2.2.0_jest@29.3.0:
+  /jest-watch-typeahead/2.2.0_jest@29.3.1:
     resolution: {integrity: sha512-cM3Qbw9P+jUYxqUSt53KdDDFRVBG96XA6bsIAG0zffl/gUkNK/kjWcCX7R559BgPWs2/UDrsJHPIw2f6b0qZCw==}
     engines: {node: ^14.17.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
@@ -7143,7 +7214,7 @@ packages:
     dependencies:
       ansi-escapes: 5.0.0
       chalk: 4.1.2
-      jest: 29.3.0_@types+node@18.11.9
+      jest: 29.3.1_@types+node@18.11.9
       jest-regex-util: 29.0.0
       jest-watcher: 29.0.3
       slash: 4.0.0
@@ -7155,27 +7226,27 @@ packages:
     resolution: {integrity: sha512-tQX9lU91A+9tyUQKUMp0Ns8xAcdhC9fo73eqA3LFxP2bSgiF49TNcc+vf3qgGYYK9qRjFpXW9+4RgF/mbxyOOw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.2.1
-      '@jest/types': 29.2.1
+      '@jest/test-result': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.10.2
-      jest-util: 29.2.1
+      jest-util: 29.3.1
       string-length: 4.0.2
     dev: true
 
-  /jest-watcher/29.2.2:
-    resolution: {integrity: sha512-j2otfqh7mOvMgN2WlJ0n7gIx9XCMWntheYGlBK7+5g3b1Su13/UAK7pdKGyd4kDlrLwtH2QPvRv5oNIxWvsJ1w==}
+  /jest-watcher/29.3.1:
+    resolution: {integrity: sha512-RspXG2BQFDsZSRKGCT/NiNa8RkQ1iKAjrO0//soTMWx/QUt+OcxMqMSBxz23PYGqUuWm2+m2mNNsmj0eIoOaFg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
-      '@jest/test-result': 29.2.1
-      '@jest/types': 29.2.1
+      '@jest/test-result': 29.3.1
+      '@jest/types': 29.3.1
       '@types/node': 18.11.9
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       emittery: 0.13.1
-      jest-util: 29.2.1
+      jest-util: 29.3.1
       string-length: 4.0.2
     dev: true
 
@@ -7188,18 +7259,18 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /jest-worker/29.3.0:
-    resolution: {integrity: sha512-rP8LYClB5NCWW0p8GdQT9vRmZNrDmjypklEYZuGCIU5iNviVWCZK5MILS3rQwD0FY1u96bY7b+KoU17DdZy6Ww==}
+  /jest-worker/29.3.1:
+    resolution: {integrity: sha512-lY4AnnmsEWeiXirAIA0c9SDPbuCBq8IYuDVL8PMm0MZ2PEs2yPvRA/J64QBXuZp7CYKrDM/rmNrc9/i3KJQncw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     dependencies:
       '@types/node': 18.11.9
-      jest-util: 29.2.1
+      jest-util: 29.3.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
     dev: true
 
-  /jest/29.3.0_@types+node@18.11.9:
-    resolution: {integrity: sha512-lWmHtOcJSjR6FYRw+4oo7456QUe6LN73Lw6HLwOWKTPLcyQF60cMh0EoIHi67dV74SY5tw/kL+jYC+Ji43ScUg==}
+  /jest/29.3.1_@types+node@18.11.9:
+    resolution: {integrity: sha512-6iWfL5DTT0Np6UYs/y5Niu7WIfNv/wRTtN5RSXt2DIEft3dx3zPuw/3WJQBCJfmEzvDiEKwoqMbGD9n49+qLSA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
@@ -7208,10 +7279,10 @@ packages:
       node-notifier:
         optional: true
     dependencies:
-      '@jest/core': 29.3.0
-      '@jest/types': 29.2.1
+      '@jest/core': 29.3.1
+      '@jest/types': 29.3.1
       import-local: 3.1.0
-      jest-cli: 29.3.0_@types+node@18.11.9
+      jest-cli: 29.3.1_@types+node@18.11.9
     transitivePeerDependencies:
       - '@types/node'
       - supports-color
@@ -8117,6 +8188,15 @@ packages:
       react-is: 18.2.0
     dev: true
 
+  /pretty-format/29.3.1:
+    resolution: {integrity: sha512-FyLnmb1cYJV8biEIiRyzRFvs2lry7PPIvOqKVe1GCUEYg4YGmlx1qG9EJNMxArYm7piII4qb8UV1Pncq5dxmcg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    dependencies:
+      '@jest/schemas': 29.0.0
+      ansi-styles: 5.2.0
+      react-is: 18.2.0
+    dev: true
+
   /prompts/2.4.2:
     resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
     engines: {node: '>= 6'}

From eef5b30ee6ecd8ceab2753686cb91b8fc5c81657 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 9 Nov 2022 06:49:54 +0000
Subject: [PATCH 258/263] build(deps): update module github.com/otiai10/copy to
 v1.7.1 (#4348)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/go.mod b/go.mod
index 6ba0eccd3..e5450a737 100644
--- a/go.mod
+++ b/go.mod
@@ -27,7 +27,7 @@ require (
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
 	github.com/ory/fosite v0.42.2
 	github.com/ory/herodot v0.9.13
-	github.com/otiai10/copy v1.7.0
+	github.com/otiai10/copy v1.7.1
 	github.com/pkg/errors v0.9.1
 	github.com/pquerna/otp v1.3.0
 	github.com/prometheus/client_golang v1.14.0
diff --git a/go.sum b/go.sum
index 8e6758aa1..4ec87fed1 100644
--- a/go.sum
+++ b/go.sum
@@ -1090,13 +1090,13 @@ github.com/ory/x v0.0.205/go.mod h1:A1s4iwmFIppRXZLF3J9GGWeY/HpREVm0Dk5z/787iek=
 github.com/ory/x v0.0.214/go.mod h1:aRl57gzyD4GF0HQCekovXhv0xTZgAgiht3o8eVhsm9Q=
 github.com/ory/x v0.0.288 h1:WoEEgDg2QrJeNpPRXV9J19ZkHfxXEjO5oJA5Fm/tPs0=
 github.com/ory/x v0.0.288/go.mod h1:APpShLyJcVzKw1kTgrHI+j/L9YM+8BRjHlcYObc7C1U=
-github.com/otiai10/copy v1.7.0 h1:hVoPiN+t+7d2nzzwMiDHPSOogsWAStewq3TwU05+clE=
-github.com/otiai10/copy v1.7.0/go.mod h1:rmRl6QPdJj6EiUqXQ/4Nn2lLXoNQjFCQbbNrxgc/t3U=
+github.com/otiai10/copy v1.7.1 h1:SOSQHrLZhfpeL5djcKMDPVdYQbEiNYFNPdmdffR8tXs=
+github.com/otiai10/copy v1.7.1/go.mod h1:hsfX19wcn0UWIHUQ3/4fHuehhk2UyArQ9dVFAn3FczI=
 github.com/otiai10/curr v0.0.0-20150429015615-9b4961190c95/go.mod h1:9qAhocn7zKJG+0mI8eUu6xqkFDYS2kb2saOteoSB3cE=
 github.com/otiai10/curr v1.0.0/go.mod h1:LskTG5wDwr8Rs+nNQ+1LlxRjAtTZZjtJW4rMXl6j4vs=
 github.com/otiai10/mint v1.3.0/go.mod h1:F5AjcsTsWUqX+Na9fpHb52P8pcRX2CI6A3ctIT91xUo=
-github.com/otiai10/mint v1.3.3 h1:7JgpsBaN0uMkyju4tbYHu0mnM55hNKVYLsXmwr15NQI=
-github.com/otiai10/mint v1.3.3/go.mod h1:/yxELlJQ0ufhjUwhshSj+wFjZ78CnZ48/1wtmBH1OTc=
+github.com/otiai10/mint v1.4.0 h1:umwcf7gbpEwf7WFzqmWwSv0CzbeMsae2u9ZvpP8j2q4=
+github.com/otiai10/mint v1.4.0/go.mod h1:gifjb2MYOoULtKLqUAEILUG/9KONW6f7YsJ6vQLTlFI=
 github.com/pact-foundation/pact-go v1.0.4/go.mod h1:uExwJY4kCzNPcHRj+hCR/HBbOOIwwtUjcrb0b5/5kLM=
 github.com/parnurzeal/gorequest v0.2.15/go.mod h1:3Kh2QUMJoqw3icWAecsyzkpY7UzRfDhbRdTjtNwNiUE=
 github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=

From 7a305faab8cf7b19ec9dbf7e3c72493ca74e5bee Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 9 Nov 2022 08:54:21 +0000
Subject: [PATCH 259/263] build(deps): update module github.com/otiai10/copy to
 v1.9.0 (#4349)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index e5450a737..4afe02097 100644
--- a/go.mod
+++ b/go.mod
@@ -27,7 +27,7 @@ require (
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
 	github.com/ory/fosite v0.42.2
 	github.com/ory/herodot v0.9.13
-	github.com/otiai10/copy v1.7.1
+	github.com/otiai10/copy v1.9.0
 	github.com/pkg/errors v0.9.1
 	github.com/pquerna/otp v1.3.0
 	github.com/prometheus/client_golang v1.14.0
diff --git a/go.sum b/go.sum
index 4ec87fed1..ee6a1f735 100644
--- a/go.sum
+++ b/go.sum
@@ -1090,8 +1090,8 @@ github.com/ory/x v0.0.205/go.mod h1:A1s4iwmFIppRXZLF3J9GGWeY/HpREVm0Dk5z/787iek=
 github.com/ory/x v0.0.214/go.mod h1:aRl57gzyD4GF0HQCekovXhv0xTZgAgiht3o8eVhsm9Q=
 github.com/ory/x v0.0.288 h1:WoEEgDg2QrJeNpPRXV9J19ZkHfxXEjO5oJA5Fm/tPs0=
 github.com/ory/x v0.0.288/go.mod h1:APpShLyJcVzKw1kTgrHI+j/L9YM+8BRjHlcYObc7C1U=
-github.com/otiai10/copy v1.7.1 h1:SOSQHrLZhfpeL5djcKMDPVdYQbEiNYFNPdmdffR8tXs=
-github.com/otiai10/copy v1.7.1/go.mod h1:hsfX19wcn0UWIHUQ3/4fHuehhk2UyArQ9dVFAn3FczI=
+github.com/otiai10/copy v1.9.0 h1:7KFNiCgZ91Ru4qW4CWPf/7jqtxLagGRmIxWldPP9VY4=
+github.com/otiai10/copy v1.9.0/go.mod h1:hsfX19wcn0UWIHUQ3/4fHuehhk2UyArQ9dVFAn3FczI=
 github.com/otiai10/curr v0.0.0-20150429015615-9b4961190c95/go.mod h1:9qAhocn7zKJG+0mI8eUu6xqkFDYS2kb2saOteoSB3cE=
 github.com/otiai10/curr v1.0.0/go.mod h1:LskTG5wDwr8Rs+nNQ+1LlxRjAtTZZjtJW4rMXl6j4vs=
 github.com/otiai10/mint v1.3.0/go.mod h1:F5AjcsTsWUqX+Na9fpHb52P8pcRX2CI6A3ctIT91xUo=

From 296f24032479b2d14e69b66728c59f6e98f40123 Mon Sep 17 00:00:00 2001
From: Amir Zarrinkafsh <nightah@me.com>
Date: Fri, 11 Nov 2022 13:44:55 +1100
Subject: [PATCH 260/263] ci: fix docker tag manifest hashes (#4354)

---
 cmd/authelia-scripts/cmd/docker.go         | 27 ++++++++++++----------
 cmd/authelia-scripts/cmd/helpers_docker.go |  9 ++++++--
 2 files changed, 22 insertions(+), 14 deletions(-)

diff --git a/cmd/authelia-scripts/cmd/docker.go b/cmd/authelia-scripts/cmd/docker.go
index c06385a80..57456f4ca 100644
--- a/cmd/authelia-scripts/cmd/docker.go
+++ b/cmd/authelia-scripts/cmd/docker.go
@@ -100,15 +100,14 @@ func cmdDockerPushManifestRun(_ *cobra.Command, _ []string) {
 			log.Infof("Detected tags: '%s' | '%s' | '%s'", tags[1], tags[2], tags[3])
 			login(docker, dockerhub)
 			login(docker, ghcr)
-			deployManifest(docker, tags[1])
-			publishDockerReadme(docker)
 
-			if !ignoredSuffixes.MatchString(ciTag) {
-				deployManifest(docker, tags[2])
-				deployManifest(docker, tags[3])
-				deployManifest(docker, "latest")
-				publishDockerReadme(docker)
+			if ignoredSuffixes.MatchString(ciTag) {
+				deployManifest(docker, tags[1])
+			} else {
+				deployManifest(docker, tags[1], tags[2], tags[3], "latest")
 			}
+
+			publishDockerReadme(docker)
 		} else {
 			log.Fatal("Docker manifest will not be published, the specified tag does not conform to the standard")
 		}
@@ -182,13 +181,17 @@ func login(docker *Docker, registry string) {
 	}
 }
 
-func deployManifest(docker *Docker, tag string) {
-	log.Infof("Docker manifest %s:%s will be deployed on %s and %s", DockerImageName, tag, dockerhub, ghcr)
+func deployManifest(docker *Docker, tag ...string) {
+	tags = make([]string, 0)
 
-	dockerhub := dockerhub + "/" + DockerImageName + ":" + tag
-	ghcr := ghcr + "/" + DockerImageName + ":" + tag
+	log.Infof("The following Docker manifest(s) will be deployed on %s and %s", dockerhub, ghcr)
 
-	if err := docker.Manifest(dockerhub, ghcr); err != nil {
+	for _, t := range tag {
+		log.Infof("- %s:%s", DockerImageName, t)
+		tags = append(tags, dockerhub+"/"+DockerImageName+":"+t, ghcr+"/"+DockerImageName+":"+t)
+	}
+
+	if err := docker.Manifest(tags); err != nil {
 		log.Fatal(err)
 	}
 }
diff --git a/cmd/authelia-scripts/cmd/helpers_docker.go b/cmd/authelia-scripts/cmd/helpers_docker.go
index 11fd93fe8..f05eba9ac 100644
--- a/cmd/authelia-scripts/cmd/helpers_docker.go
+++ b/cmd/authelia-scripts/cmd/helpers_docker.go
@@ -42,8 +42,13 @@ func (d *Docker) Login(username, password, registry string) error {
 }
 
 // Manifest push a docker manifest to dockerhub.
-func (d *Docker) Manifest(tag1, tag2 string) error {
-	args := []string{"build", "-t", tag1, "-t", tag2}
+func (d *Docker) Manifest(tags []string) error {
+	args := []string{"build"}
+
+	for _, tag := range tags {
+		args = append(args, "-t", tag)
+	}
+
 	annotations := ""
 
 	buildMetaData, err := getBuild(ciBranch, os.Getenv("BUILDKITE_BUILD_NUMBER"), "")

From 909deafebab1aa19d1f6d803616aafed4de8514e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 11 Nov 2022 07:20:15 +0000
Subject: [PATCH 261/263] build(deps): update mariadb docker tag to v10.9.4
 (#4355)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 internal/suites/example/compose/mariadb/docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/suites/example/compose/mariadb/docker-compose.yml b/internal/suites/example/compose/mariadb/docker-compose.yml
index 6d914b82f..72e1661d2 100644
--- a/internal/suites/example/compose/mariadb/docker-compose.yml
+++ b/internal/suites/example/compose/mariadb/docker-compose.yml
@@ -2,7 +2,7 @@
 version: '3'
 services:
   mariadb:
-    image: mariadb:10.9.3
+    image: mariadb:10.9.4
     environment:
       - MYSQL_ROOT_PASSWORD=rootpassword
       - MYSQL_USER=admin

From c7a668c897cbda49d858a19e40705dca88e1ca3e Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Sat, 12 Nov 2022 09:58:10 +1100
Subject: [PATCH 262/263] docs: adjust csp (#4361)

* docs: adjust csp

* docs: bump deps
---
 docs/layouts/index.headers |    2 +-
 docs/package.json          |   18 +-
 docs/pnpm-lock.yaml        | 1043 +++++++++++++++++-------------------
 3 files changed, 507 insertions(+), 556 deletions(-)

diff --git a/docs/layouts/index.headers b/docs/layouts/index.headers
index 0497a1a72..796227e08 100644
--- a/docs/layouts/index.headers
+++ b/docs/layouts/index.headers
@@ -3,7 +3,7 @@
   Strict-Transport-Security: max-age=31536000; includeSubDomains
   X-Content-Type-Options: nosniff
   X-XSS-Protection: 1; mode=block
-  Content-Security-Policy: default-src 'self'; script-src 'self' https://*.netlify.app 'unsafe-inline' 'sha512-RGGByJUOP98hE4wFZM78RM/3MijWJs0Tm0DbfrFhCDCXKXfDx60fii+syp5iMs3UcNX/1H4zJNgmqSejfhHrYw==' 'sha512-+T2H7TEv2U6umnIOWYijvTIrzdCZUYhm/FZo4YYQzKAHf8NWs+38cn3t9fdz2rCm2HqHDkthZZXnY4EWPdWnMA==' 'sha512-okYuGnNmmUuCX64AD7FVra0445z43U8riOY3jZue+WZ2KeVOWLo17hE/wZXGUIJh9WBiSHZ2epTd36MMP6R66w==' 'sha512-bv9WRsSROhTW5djDurORNUCGITVeRfjDXkhqg4Ez/4vTY6FcaVBPy4MXpn4EGC3J3oZNcxpfQIScElDKlmiLhw==' 'sha512-RBYr6Ld4w1yVqaACrgrBLQfPgGhj/1jyacA74WxJ1KM6KVcSWymwrdDwb3HDcdpwiNJ5yssot1He0U9vXoQVlg==' 'sha256-aWZ3y/RxbBYKHXH0z8+8ljrHG1mSBvyzSfxSMjBSaXk=' 'sha256-vOgyKS2vkH4n5TxBJpeh9SgzrE6LVGsAeOAvEST6oCc='; style-src 'self' https://*.netlify.app 'unsafe-inline'; img-src 'self' https://*.netlify.app data:; connect-src 'self' https://*.netlify.app; font-src 'self' https://*.netlify.app; manifest-src 'self' https://*.netlify.app; object-src 'none'; frame-src https://app.netlify.com; frame-ancestors 'none'; base-uri 'none'; require-trusted-types-for 'script'
+  Content-Security-Policy: default-src 'self'; script-src 'self' https://*.netlify.app 'unsafe-inline' 'sha512-RGGByJUOP98hE4wFZM78RM/3MijWJs0Tm0DbfrFhCDCXKXfDx60fii+syp5iMs3UcNX/1H4zJNgmqSejfhHrYw==' 'sha512-+T2H7TEv2U6umnIOWYijvTIrzdCZUYhm/FZo4YYQzKAHf8NWs+38cn3t9fdz2rCm2HqHDkthZZXnY4EWPdWnMA==' 'sha512-okYuGnNmmUuCX64AD7FVra0445z43U8riOY3jZue+WZ2KeVOWLo17hE/wZXGUIJh9WBiSHZ2epTd36MMP6R66w==' 'sha512-bv9WRsSROhTW5djDurORNUCGITVeRfjDXkhqg4Ez/4vTY6FcaVBPy4MXpn4EGC3J3oZNcxpfQIScElDKlmiLhw==' 'sha512-RBYr6Ld4w1yVqaACrgrBLQfPgGhj/1jyacA74WxJ1KM6KVcSWymwrdDwb3HDcdpwiNJ5yssot1He0U9vXoQVlg==' 'sha256-aWZ3y/RxbBYKHXH0z8+8ljrHG1mSBvyzSfxSMjBSaXk=' 'sha256-vOgyKS2vkH4n5TxBJpeh9SgzrE6LVGsAeOAvEST6oCc='; style-src 'self' https://*.netlify.app 'unsafe-inline'; img-src 'self' https://*.netlify.app data:; connect-src 'self' https://*.netlify.app; font-src 'self' https://*.netlify.app; manifest-src 'self' https://*.netlify.app; object-src 'none'; frame-src https://app.netlify.com; frame-ancestors 'none'; base-uri 'none'
   X-Frame-Options: SAMEORIGIN
   Referrer-Policy: strict-origin
   Feature-Policy: geolocation 'self'
diff --git a/docs/package.json b/docs/package.json
index a48b7366f..1e9c47f9d 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -39,17 +39,17 @@
   },
   "devDependencies": {
     "@babel/cli": "7.19.3",
-    "@babel/core": "7.19.6",
-    "@babel/preset-env": "7.19.4",
+    "@babel/core": "7.20.2",
+    "@babel/preset-env": "7.20.2",
     "@fullhuman/postcss-purgecss": "5.0.0",
-    "@hyas/images": "0.3.0",
+    "@hyas/images": "0.3.2",
     "@popperjs/core": "2.11.6",
     "auto-changelog": "2.4.0",
     "autoprefixer": "10.4.13",
     "bootstrap": "5.2.2",
-    "bootstrap-icons": "1.9.1",
+    "bootstrap-icons": "1.10.0",
     "clipboard": "2.0.11",
-    "eslint": "8.26.0",
+    "eslint": "8.27.0",
     "exec-bin": "1.0.0",
     "flexsearch": "0.7.31",
     "highlight.js": "11.6.0",
@@ -59,13 +59,13 @@
     "lazysizes": "5.3.2",
     "markdownlint-cli2": "0.5.1",
     "netlify-plugin-submit-sitemap": "0.4.0",
-    "node-fetch": "3.2.10",
-    "postcss": "8.4.18",
+    "node-fetch": "3.3.0",
+    "postcss": "8.4.19",
     "postcss-cli": "10.0.0",
     "purgecss-whitelister": "2.4.0",
     "shx": "0.3.4",
-    "stylelint": "14.14.0",
-    "stylelint-config-standard-scss": "6.0.0"
+    "stylelint": "14.14.1",
+    "stylelint-config-standard-scss": "6.1.0"
   },
   "otherDependencies": {
     "hugo": "0.105.0"
diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml
index 2f45b5082..acc309003 100644
--- a/docs/pnpm-lock.yaml
+++ b/docs/pnpm-lock.yaml
@@ -2,17 +2,17 @@ lockfileVersion: 5.4
 
 specifiers:
   '@babel/cli': 7.19.3
-  '@babel/core': 7.19.6
-  '@babel/preset-env': 7.19.4
+  '@babel/core': 7.20.2
+  '@babel/preset-env': 7.20.2
   '@fullhuman/postcss-purgecss': 5.0.0
-  '@hyas/images': 0.3.0
+  '@hyas/images': 0.3.2
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
   autoprefixer: 10.4.13
   bootstrap: 5.2.2
-  bootstrap-icons: 1.9.1
+  bootstrap-icons: 1.10.0
   clipboard: 2.0.11
-  eslint: 8.26.0
+  eslint: 8.27.0
   exec-bin: 1.0.0
   flexsearch: 0.7.31
   highlight.js: 11.6.0
@@ -22,27 +22,27 @@ specifiers:
   lazysizes: 5.3.2
   markdownlint-cli2: 0.5.1
   netlify-plugin-submit-sitemap: 0.4.0
-  node-fetch: 3.2.10
-  postcss: 8.4.18
+  node-fetch: 3.3.0
+  postcss: 8.4.19
   postcss-cli: 10.0.0
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.14.0
-  stylelint-config-standard-scss: 6.0.0
+  stylelint: 14.14.1
+  stylelint-config-standard-scss: 6.1.0
 
 devDependencies:
-  '@babel/cli': 7.19.3_@babel+core@7.19.6
-  '@babel/core': 7.19.6
-  '@babel/preset-env': 7.19.4_@babel+core@7.19.6
-  '@fullhuman/postcss-purgecss': 5.0.0_postcss@8.4.18
-  '@hyas/images': 0.3.0
+  '@babel/cli': 7.19.3_@babel+core@7.20.2
+  '@babel/core': 7.20.2
+  '@babel/preset-env': 7.20.2_@babel+core@7.20.2
+  '@fullhuman/postcss-purgecss': 5.0.0_postcss@8.4.19
+  '@hyas/images': 0.3.2
   '@popperjs/core': 2.11.6
   auto-changelog: 2.4.0
-  autoprefixer: 10.4.13_postcss@8.4.18
+  autoprefixer: 10.4.13_postcss@8.4.19
   bootstrap: 5.2.2_@popperjs+core@2.11.6
-  bootstrap-icons: 1.9.1
+  bootstrap-icons: 1.10.0
   clipboard: 2.0.11
-  eslint: 8.26.0
+  eslint: 8.27.0
   exec-bin: 1.0.0
   flexsearch: 0.7.31
   highlight.js: 11.6.0
@@ -52,13 +52,13 @@ devDependencies:
   lazysizes: 5.3.2
   markdownlint-cli2: 0.5.1
   netlify-plugin-submit-sitemap: 0.4.0
-  node-fetch: 3.2.10
-  postcss: 8.4.18
-  postcss-cli: 10.0.0_postcss@8.4.18
+  node-fetch: 3.3.0
+  postcss: 8.4.19
+  postcss-cli: 10.0.0_postcss@8.4.19
   purgecss-whitelister: 2.4.0
   shx: 0.3.4
-  stylelint: 14.14.0
-  stylelint-config-standard-scss: 6.0.0_mnalcscwzozovshmobozjae4pq
+  stylelint: 14.14.1
+  stylelint-config-standard-scss: 6.1.0_ave2i6l4ingtbwj4aquhd5witq
 
 packages:
 
@@ -70,14 +70,14 @@ packages:
       '@jridgewell/trace-mapping': 0.3.13
     dev: true
 
-  /@babel/cli/7.19.3_@babel+core@7.19.6:
+  /@babel/cli/7.19.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-643/TybmaCAe101m2tSVHi9UKpETXP9c/Ff4mD2tAwkdP6esKIfaauZFc67vGEM6r9fekbEGid+sZhbEnSe3dg==}
     engines: {node: '>=6.9.0'}
     hasBin: true
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@jridgewell/trace-mapping': 0.3.13
       commander: 4.1.1
       convert-source-map: 1.8.0
@@ -97,25 +97,25 @@ packages:
       '@babel/highlight': 7.18.6
     dev: true
 
-  /@babel/compat-data/7.20.0:
-    resolution: {integrity: sha512-Gt9jszFJYq7qzXVK4slhc6NzJXnOVmRECWcVjF/T23rNXD9NtWQ0W3qxdg+p9wWIB+VQw3GYV/U2Ha9bRTfs4w==}
+  /@babel/compat-data/7.20.1:
+    resolution: {integrity: sha512-EWZ4mE2diW3QALKvDMiXnbZpRvlj+nayZ112nK93SnhqOtpdsbVD4W+2tEoT3YNBAG9RBR0ISY758ZkOgsn6pQ==}
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/core/7.19.6:
-    resolution: {integrity: sha512-D2Ue4KHpc6Ys2+AxpIx1BZ8+UegLLLE2p3KJEuJRKmokHOtl49jQ5ny1773KsGLZs8MQvBidAF6yWUJxRqtKtg==}
+  /@babel/core/7.20.2:
+    resolution: {integrity: sha512-w7DbG8DtMrJcFOi4VrLm+8QM4az8Mo+PuLBKLp2zrYRCow8W/f9xiXm5sN53C8HksCyDQwCKha9JiDoIyPjT2g==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.20.0
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
-      '@babel/helper-module-transforms': 7.19.6
-      '@babel/helpers': 7.20.0
-      '@babel/parser': 7.20.0
+      '@babel/generator': 7.20.4
+      '@babel/helper-compilation-targets': 7.20.0_@babel+core@7.20.2
+      '@babel/helper-module-transforms': 7.20.2
+      '@babel/helpers': 7.20.1
+      '@babel/parser': 7.20.3
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/traverse': 7.20.1
+      '@babel/types': 7.20.2
       convert-source-map: 1.8.0
       debug: 4.3.4
       gensync: 1.0.0-beta.2
@@ -125,11 +125,11 @@ packages:
       - supports-color
     dev: true
 
-  /@babel/generator/7.20.0:
-    resolution: {integrity: sha512-GUPcXxWibClgmYJuIwC2Bc2Lg+8b9VjaJ+HlNdACEVt+Wlr1eoU1OPZjZRm7Hzl0gaTsUZNQfeihvZJhG7oc3w==}
+  /@babel/generator/7.20.4:
+    resolution: {integrity: sha512-luCf7yk/cm7yab6CAW1aiFnmEfBJplb/JojV56MYEK7ziWfGmFlTfmL9Ehwfy4gFhbjBfWO1wj7/TuSbVNEEtA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
       '@jridgewell/gen-mapping': 0.3.2
       jsesc: 2.5.2
     dev: true
@@ -138,7 +138,7 @@ packages:
     resolution: {integrity: sha512-duORpUiYrEpzKIop6iNbjnwKLAKnJ47csTyRACyEmWj0QdUrm5aqNJGHSSEQSUAvNW0ojX0dOmK9dZduvkfeXA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-builder-binary-assignment-operator-visitor/7.18.6:
@@ -146,59 +146,59 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-explode-assignable-expression': 7.18.6
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
-  /@babel/helper-compilation-targets/7.19.3_@babel+core@7.19.6:
-    resolution: {integrity: sha512-65ESqLGyGmLvgR0mst5AdW1FkNlj9rQsCKduzEoEPhBCDFGXvz2jW6bXFG6i0/MrV2s7hhXjjb2yAzcPuQlLwg==}
+  /@babel/helper-compilation-targets/7.20.0_@babel+core@7.20.2:
+    resolution: {integrity: sha512-0jp//vDGp9e8hZzBc6N/KwA5ZK3Wsm/pfm4CrY7vzegkVxc65SgSn6wYOnwHe9Js9HRQ1YTCKLGPzDtaS3RoLQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/compat-data': 7.20.0
-      '@babel/core': 7.19.6
+      '@babel/compat-data': 7.20.1
+      '@babel/core': 7.20.2
       '@babel/helper-validator-option': 7.18.6
       browserslist: 4.21.4
       semver: 6.3.0
     dev: true
 
-  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.19.6:
+  /@babel/helper-create-class-features-plugin/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-YfDzdnoxHGV8CzqHGyCbFvXg5QESPFkXlHtvdCkesLjjVMT2Adxe4FGUR5ChIb3DxSaXO12iIOCWoXdsUVwnqw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-member-expression-to-functions': 7.18.9
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/helper-replace-supers': 7.18.9
+      '@babel/helper-replace-supers': 7.19.1
       '@babel/helper-split-export-declaration': 7.18.6
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.19.6:
+  /@babel/helper-create-regexp-features-plugin/7.19.0_@babel+core@7.20.2:
     resolution: {integrity: sha512-htnV+mHX32DF81amCDrwIDr8nrp1PTm+3wfBN9/v8QJOLEioOCOG7qNyq0nHeFiWbT3Eb7gsPwEmV64UCQ1jzw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-annotate-as-pure': 7.18.6
       regexpu-core: 5.1.0
     dev: true
 
-  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.19.6:
+  /@babel/helper-define-polyfill-provider/0.3.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-z5aQKU4IzbqCC1XH0nAqfsFLMVSo22SBKUc0BxGrLkolTdPTructy0ToNnlO2zA4j9Q/7pjMZf0DSY+DSTYzww==}
     peerDependencies:
       '@babel/core': ^7.4.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-compilation-targets': 7.20.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       debug: 4.3.4
       lodash.debounce: 4.0.8
       resolve: 1.22.0
@@ -216,7 +216,7 @@ packages:
     resolution: {integrity: sha512-eyAYAsQmB80jNfg4baAtLeWAQHfHFiR483rzFK+BhETlGZaQC9bsfrugfXDCbRHLQbIA7U5NxhhOxN7p/dWIcg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-function-name/7.19.0:
@@ -224,42 +224,42 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-hoist-variables/7.18.6:
     resolution: {integrity: sha512-UlJQPkFqFULIcyW5sbzgbkxn2FKRgwWiRexcuaR8RNJRy8+LLveqPjwZV/bwrLZCN0eUHD/x8D0heK1ozuoo6Q==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-member-expression-to-functions/7.18.9:
     resolution: {integrity: sha512-RxifAh2ZoVU67PyKIO4AMi1wTenGfMR/O/ae0CCRqwgBAt5v7xjdtRw7UoSbsreKrQn5t7r89eruK/9JjYHuDg==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-module-imports/7.18.6:
     resolution: {integrity: sha512-0NFvs3VkuSYbFi1x2Vd6tKrywq+z/cLeYC/RJNFrIX/30Bf5aiGYbtvGXolEktzJH8o5E5KJ3tT+nkxuuZFVlA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
-  /@babel/helper-module-transforms/7.19.6:
-    resolution: {integrity: sha512-fCmcfQo/KYr/VXXDIyd3CBGZ6AFhPFy1TfSEJ+PilGVlQT6jcbqtHAM4C1EciRqMza7/TpOUZliuSH+U6HAhJw==}
+  /@babel/helper-module-transforms/7.20.2:
+    resolution: {integrity: sha512-zvBKyJXRbmK07XhMuujYoJ48B5yvvmM6+wcpv6Ivj4Yg6qO7NOZOSnvZN9CRl1zz1Z4cKf8YejmCMh8clOoOeA==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-simple-access': 7.19.4
+      '@babel/helper-simple-access': 7.20.2
       '@babel/helper-split-export-declaration': 7.18.6
       '@babel/helper-validator-identifier': 7.19.1
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/traverse': 7.20.1
+      '@babel/types': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -268,25 +268,25 @@ packages:
     resolution: {integrity: sha512-HP59oD9/fEHQkdcbgFCnbmgH5vIQTJbxh2yf+CdM89/glUNnuzr87Q8GIjGEnOktTROemO0Pe0iPAYbqZuOUiA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
-  /@babel/helper-plugin-utils/7.19.0:
-    resolution: {integrity: sha512-40Ryx7I8mT+0gaNxm8JGTZFUITNqdLAgdg0hXzeVZxVD6nFsdhQvip6v8dqkRHzsz1VFpFAaOCHNn0vKBL7Czw==}
+  /@babel/helper-plugin-utils/7.20.2:
+    resolution: {integrity: sha512-8RvlJG2mj4huQ4pZ+rU9lqKi9ZKiRmuvGuM2HlWmkmgOhbs6zEAw6IEiJ5cQqGbDzGZOhwuOQNtZMi/ENLjZoQ==}
     engines: {node: '>=6.9.0'}
     dev: true
 
-  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.19.6:
+  /@babel/helper-remap-async-to-generator/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-dI7q50YKd8BAv3VEfgg7PS7yD3Rtbi2J1XMXaalXO0W0164hYLnh8zpjRS0mte9MfVp/tltvr/cfdXPvJr1opA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-annotate-as-pure': 7.18.6
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-wrap-function': 7.18.11
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -298,38 +298,44 @@ packages:
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-member-expression-to-functions': 7.18.9
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/traverse': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/traverse': 7.20.1
+      '@babel/types': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/helper-simple-access/7.18.6:
-    resolution: {integrity: sha512-iNpIgTgyAvDQpDj76POqg+YEt8fPxx3yaNBg3S30dxNKm2SWfYhD0TGrK/Eu9wHpUW63VQU894TsTg+GLbUa1g==}
+  /@babel/helper-replace-supers/7.19.1:
+    resolution: {integrity: sha512-T7ahH7wV0Hfs46SFh5Jz3s0B6+o8g3c+7TMxu7xKfmHikg7EAZ3I2Qk9LFhjxXq8sL7UkP5JflezNwoZa8WvWw==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/helper-environment-visitor': 7.18.9
+      '@babel/helper-member-expression-to-functions': 7.18.9
+      '@babel/helper-optimise-call-expression': 7.18.6
+      '@babel/traverse': 7.20.1
+      '@babel/types': 7.20.2
+    transitivePeerDependencies:
+      - supports-color
     dev: true
 
-  /@babel/helper-simple-access/7.19.4:
-    resolution: {integrity: sha512-f9Xq6WqBFqaDfbCzn2w85hwklswz5qsKlh7f08w4Y9yhJHpnNC0QemtSkK5YyOY8kPGvyiwdzZksGUhnGdaUIg==}
+  /@babel/helper-simple-access/7.20.2:
+    resolution: {integrity: sha512-+0woI/WPq59IrqDYbVGfshjT5Dmk/nnbdpcF8SnMhhXObpTq2KNBdLFRFrkVdbDOyUmHBCxzm5FHV1rACIkIbA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-skip-transparent-expression-wrappers/7.18.9:
     resolution: {integrity: sha512-imytd2gHi3cJPsybLRbmFrF7u5BIEuI2cNheyKi3/iOBC63kNn3q8Crn2xVuESli0aM4KYsyEqKyS7lFL8YVtw==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-split-export-declaration/7.18.6:
     resolution: {integrity: sha512-bde1etTx6ZyTmobl9LLMMQsaizFVZrquTEHOqKeQESMKo4PlObf+8+JA25ZsIpZhT/WEd39+vOdLXAFG/nELpA==}
     engines: {node: '>=6.9.0'}
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
   /@babel/helper-string-parser/7.19.4:
@@ -353,19 +359,19 @@ packages:
     dependencies:
       '@babel/helper-function-name': 7.19.0
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/traverse': 7.20.1
+      '@babel/types': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/helpers/7.20.0:
-    resolution: {integrity: sha512-aGMjYraN0zosCEthoGLdqot1oRsmxVTQRHadsUPz5QM44Zej2PYRz7XiDE7GqnkZnNtLbOuxqoZw42vkU7+XEQ==}
+  /@babel/helpers/7.20.1:
+    resolution: {integrity: sha512-J77mUVaDTUJFZ5BpP6mMn6OIl3rEWymk2ZxDBQJUG3P+PbmyMcF3bYWvz0ma69Af1oobDqT/iAsvzhB58xhQUg==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/template': 7.18.10
-      '@babel/traverse': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/traverse': 7.20.1
+      '@babel/types': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -379,818 +385,815 @@ packages:
       js-tokens: 4.0.0
     dev: true
 
-  /@babel/parser/7.20.0:
-    resolution: {integrity: sha512-G9VgAhEaICnz8iiJeGJQyVl6J2nTjbW0xeisva0PK6XcKsga7BIaqm4ZF8Rg1Wbaqmy6znspNqhPaPkyukujzg==}
+  /@babel/parser/7.20.3:
+    resolution: {integrity: sha512-OP/s5a94frIPXwjzEcv5S/tpQfc6XhxYUnmWpgdqMWGgYCuErA3SzozaRAMQgSZWKeTJxht9aWAkUY+0UzvOFg==}
     engines: {node: '>=6.0.0'}
     hasBin: true
     dependencies:
-      '@babel/types': 7.20.0
+      '@babel/types': 7.20.2
     dev: true
 
-  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-Dgxsyg54Fx1d4Nge8UnvTrED63vrwOdPmyvPzlNN/boaliRP54pm3pGzZD1SJUwrBA+Cs/xdG8kXX6Mn/RfISQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-AHrP9jadvH7qlOj6PINbgSuphjQUAK7AOT7DPjBo9EHoLhQTnnK5u45e1Hd4DbSQEO9nqPWtQ89r+XEOWFScKg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.13.0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.6
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-async-generator-functions/7.19.1_@babel+core@7.19.6:
-    resolution: {integrity: sha512-0yu8vNATgLy4ivqMNBIwb1HebCelqN7YX8SL3FDXORv/RqT0zEEWUCH4GH44JsSrvCu6GqnAdR5EBFAPeNBB4Q==}
+  /@babel/plugin-proposal-async-generator-functions/7.20.1_@babel+core@7.20.2:
+    resolution: {integrity: sha512-Gh5rchzSwE4kC+o/6T8waD0WHEQIsDmjltY8WnWRXHUdH8axZhuH86Ov9M72YhJfDrZseQwuuWaaIT/TmePp3g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-environment-visitor': 7.18.9
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-class-properties/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-cumfXOF0+nzZrrN8Rf0t7M+tF6sZc7vhQwYQck9q1/5w2OExlD+b4v4RpMJFaV1Z7WcDRgO6FqvxqxGlwo+RHQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-class-static-block/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-+I3oIiNxrCpup3Gi8n5IGMwj0gOCAjcJUSQEcotNnCCPMEnixawOQ+KeJPlgfjzx+FKQ1QSyZOWe7wmoJp7vhw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.12.0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-dynamic-import/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-1auuwmK+Rz13SJj36R+jqFPMJWyKEDd7lLSdOj4oJK0UTgGueSAtkrCvz9ewmgyU/P941Rv2fQwZJN8s6QruXw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-proposal-export-namespace-from/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-k1NtHyOMvlDDFeb9G5PhUXuGj8m/wiwojgQVEhJ/fsVsMCpLyOP4h0uGEjYJKrRI+EVPlb5Jk+Gt9P97lOGwtA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-json-strings/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-lr1peyn9kOdbYc0xr0OdHTZ5FMqS6Di+H0Fz2I/JwMzGmzJETNeOFq2pBySw6X/KFL5EWDjlJuMsUGRFb8fQgQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-proposal-logical-assignment-operators/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-128YbMpjCrP35IOExw2Fq+x55LMP42DzhOhX2aNNIdI9avSWl2PI0yuBWarr3RYpZBSPtabfadkH2yeRiMD61Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-nullish-coalescing-operator/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-wQxQzxYeJqHcfppzBDnm1yAY0jSRkUXR2z8RePZYrKwMKgMlE8+Z6LUno+bd6LvbGh8Gltvy74+9pIYkr+XkKA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-numeric-separator/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-ozlZFogPqoLm8WBr5Z8UckIoE4YQ5KESVcNudyXOR8uqIkliTEgJ3RoketfG6pmzLdeZF0H/wjE9/cCEitBl7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-object-rest-spread/7.19.4_@babel+core@7.19.6:
-    resolution: {integrity: sha512-wHmj6LDxVDnL+3WhXteUBaoM1aVILZODAUjg11kHqG4cOlfgMQGxw6aCgvrXrmaJR3Bn14oZhImyCPZzRpC93Q==}
+  /@babel/plugin-proposal-object-rest-spread/7.20.2_@babel+core@7.20.2:
+    resolution: {integrity: sha512-Ks6uej9WFK+fvIMesSqbAto5dD8Dz4VuuFvGJFKgIGSkJuRGcrwGECPA1fDgQK3/DbExBJpEkTeYeB8geIFCSQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.20.0
-      '@babel/core': 7.19.6
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.6
+      '@babel/compat-data': 7.20.1
+      '@babel/core': 7.20.2
+      '@babel/helper-compilation-targets': 7.20.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-transform-parameters': 7.20.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-optional-catch-binding/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-Q40HEhs9DJQyaZfUjjn6vE8Cv4GmMHCYuMGIWUnlxH6400VGxOuwWsPt4FxXxJkC/5eOzgn0z21M9gMT4MOhbw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-proposal-optional-chaining/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-v5nwt4IqBXihxGsW2QmCWMDS3B3bzGIk/EQVZz2ei7f3NJl8NzAJVvUmpDW5q1CRNY+Beb/k58UAH1Km1N411w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.20.2
     dev: true
 
-  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-private-methods/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-nutsvktDItsNn4rpGItSNV2sz1XwS+nfU0Rg8aCx3W3NOKVzdMjJRu0O5OkgDp3ZGICSTbgRpxZoWsxoKRvbeA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-private-property-in-object/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-9Rysx7FOctvT5ouj5JODjAFAkgGoudQuLPamZb0v1TGLpapdNaftzifU8NTWQm0IRjqoYypdrSmyWgkocDQ8Dw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.6
+      '@babel/helper-create-class-features-plugin': 7.18.6_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-proposal-unicode-property-regex/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-2BShG/d5yoZyXZfVePH91urL5wTG6ASZU9M4o03lKK8u8UW1y08OMttBSOADTcJrnPMpvDXRG3G8fyLh4ovs8w==}
     engines: {node: '>=4'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.19.6:
+  /@babel/plugin-syntax-async-generators/7.8.4_@babel+core@7.20.2:
     resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.19.6:
+  /@babel/plugin-syntax-class-properties/7.12.13_@babel+core@7.20.2:
     resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.19.6:
+  /@babel/plugin-syntax-class-static-block/7.14.5_@babel+core@7.20.2:
     resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-dynamic-import/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-5gdGbFon+PszYzqs83S3E5mpi7/y/8M9eC90MRTZfduQOYW76ig6SOSPNe41IG5LoP3FGBn2N0RjVDSQiS94kQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-export-namespace-from/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-MXf5laXo6c1IbEbegDmzGPwGNTsHZmEy6QGznu5Sh2UCWvueywb2ee+CCE4zQiZstxU9BMoQO9i6zUFSY0Kj0Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-import-assertions/7.18.6_@babel+core@7.19.6:
-    resolution: {integrity: sha512-/DU3RXad9+bZwrgWJQKbr39gYbJpLJHezqEzRzi/BHRlJ9zsQb4CK2CA/5apllXNomwA1qHwzvHl+AdEmC5krQ==}
+  /@babel/plugin-syntax-import-assertions/7.20.0_@babel+core@7.20.2:
+    resolution: {integrity: sha512-IUh1vakzNoWalR8ch/areW7qFopR2AEw03JlG7BbrDqmQ4X3q9uuipQwSGrUn7oGiemKjtSLDhNtQHzMHr1JdQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-json-strings/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.19.6:
+  /@babel/plugin-syntax-logical-assignment-operators/7.10.4_@babel+core@7.20.2:
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-nullish-coalescing-operator/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.19.6:
+  /@babel/plugin-syntax-numeric-separator/7.10.4_@babel+core@7.20.2:
     resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-object-rest-spread/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-optional-catch-binding/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.19.6:
+  /@babel/plugin-syntax-optional-chaining/7.8.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.19.6:
+  /@babel/plugin-syntax-private-property-in-object/7.14.5_@babel+core@7.20.2:
     resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.19.6:
+  /@babel/plugin-syntax-top-level-await/7.14.5_@babel+core@7.20.2:
     resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-arrow-functions/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-9S9X9RUefzrsHZmKMbDXxweEH+YlE8JJEuat9FdvW9Qh1cw7W64jELCtWNkPBPX5En45uy28KGvA/AySqUh8CQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-async-to-generator/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-ARE5wZLKnTgPW7/1ftQmSi1CmkqqHo2DNmtztFhvgtOWSDfq0Cq9/9L+KnZNYSNrydBekhW3rwShduf59RoXag==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-module-imports': 7.18.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.19.6
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/helper-remap-async-to-generator': 7.18.9_@babel+core@7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-block-scoped-functions/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-ExUcOqpPWnliRcPqves5HJcJOvHvIIWfuS4sroBUenPuMdmW+SMHDakmtS7qOo13sVppmUijqeTv7qqGsvURpQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-block-scoping/7.20.0_@babel+core@7.19.6:
-    resolution: {integrity: sha512-sXOohbpHZSk7GjxK9b3dKB7CfqUD5DwOH+DggKzOQ7TXYP+RCSbRykfjQmn/zq+rBjycVRtLf9pYhAaEJA786w==}
+  /@babel/plugin-transform-block-scoping/7.20.2_@babel+core@7.20.2:
+    resolution: {integrity: sha512-y5V15+04ry69OV2wULmwhEA6jwSWXO1TwAtIwiPXcvHcoOQUqpyMVd2bDsQJMW8AurjulIyUV8kDqtjSwHy1uQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-classes/7.19.0_@babel+core@7.19.6:
-    resolution: {integrity: sha512-YfeEE9kCjqTS9IitkgfJuxjcEtLUHMqa8yUJ6zdz8vR7hKuo6mOy2C05P0F1tdMmDCeuyidKnlrw/iTppHcr2A==}
+  /@babel/plugin-transform-classes/7.20.2_@babel+core@7.20.2:
+    resolution: {integrity: sha512-9rbPp0lCVVoagvtEyQKSo5L8oo0nQS/iif+lwlAz29MccX2642vWDlSZK+2T2buxbopotId2ld7zZAzRfz9j1g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-annotate-as-pure': 7.18.6
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
+      '@babel/helper-compilation-targets': 7.20.0_@babel+core@7.20.2
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-optimise-call-expression': 7.18.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-replace-supers': 7.18.9
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/helper-replace-supers': 7.19.1
       '@babel/helper-split-export-declaration': 7.18.6
       globals: 11.12.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-transform-computed-properties/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-+i0ZU1bCDymKakLxn5srGHrsAPRELC2WIbzwjLhHW9SIE1cPYkLCL0NlnXMZaM1vhfgA2+M7hySk42VBvrkBRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-destructuring/7.20.0_@babel+core@7.19.6:
-    resolution: {integrity: sha512-1dIhvZfkDVx/zn2S1aFwlruspTt4189j7fEkH0Y0VyuDM6bQt7bD6kLcz3l4IlLG+e5OReaBz9ROAbttRtUHqA==}
+  /@babel/plugin-transform-destructuring/7.20.2_@babel+core@7.20.2:
+    resolution: {integrity: sha512-mENM+ZHrvEgxLTBXUiQ621rRXZes3KWUv6NdQlrnr1TkWVw+hUjQBZuP2X32qKlrlG2BzgR95gkuCRSkJl8vIw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-dotall-regex/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-6S3jpun1eEbAxq7TdjLotAsl4WpQI9DxfkycRcKrjhQYzU87qpXdknpBg/e+TdcMehqGnLFi7tnFUBR02Vq6wg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-transform-duplicate-keys/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-d2bmXCtZXYc59/0SanQKbiWINadaJXqtvIQIzd4+hNwkWBgyCd5F/2t1kXoUdvPMrxzPvhK6EMQRROxsue+mfw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-exponentiation-operator/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-wzEtc0+2c88FVR34aQmiz56dxEkxr2g8DQb/KfaFa1JYXOFVsbhvAonFN6PwVWj++fKmku8NP80plJ5Et4wqHw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-builder-binary-assignment-operator-visitor': 7.18.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.19.6:
+  /@babel/plugin-transform-for-of/7.18.8_@babel+core@7.20.2:
     resolution: {integrity: sha512-yEfTRnjuskWYo0k1mHUqrVWaZwrdq8AYbfrpqULOJOaucGSp4mNMVps+YtA8byoevxS/urwU75vyhQIxcCgiBQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-transform-function-name/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-WvIBoRPaJQ5yVHzcnJFor7oS5Ls0PYixlTYE63lCj2RtdQEl15M68FXQlxnG6wdraJIXRdR7KI+hQ7q/9QjrCQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-compilation-targets': 7.20.0_@babel+core@7.20.2
       '@babel/helper-function-name': 7.19.0
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-transform-literals/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-IFQDSRoTPnrAIrI5zoZv73IFeZu2dhu6irxQjY9rNjTT53VmKg9fenjvoiOWOkJ6mm4jKVPtdMzBY98Fp4Z4cg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-member-expression-literals/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-qSF1ihLGO3q+/g48k85tUjD033C29TNTVB2paCwZPVmOsjn9pClvYYrM2VeJpBY2bcNkuny0YUyTNRyRxJ54KA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-modules-amd/7.18.6_@babel+core@7.19.6:
-    resolution: {integrity: sha512-Pra5aXsmTsOnjM3IajS8rTaLCy++nGM4v3YR4esk5PCsyg9z8NA5oQLwxzMUtDBd8F+UmVza3VxoAaWCbzH1rg==}
+  /@babel/plugin-transform-modules-amd/7.19.6_@babel+core@7.20.2:
+    resolution: {integrity: sha512-uG3od2mXvAtIFQIh0xrpLH6r5fpSQN04gIVovl+ODLdUMANokxQLZnPBHcjmv3GxRjnqwLuHvppjjcelqUFZvg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-module-transforms': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      babel-plugin-dynamic-import-node: 2.3.3
+      '@babel/core': 7.20.2
+      '@babel/helper-module-transforms': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-commonjs/7.18.6_@babel+core@7.19.6:
-    resolution: {integrity: sha512-Qfv2ZOWikpvmedXQJDSbxNqy7Xr/j2Y8/KfijM0iJyKkBTmWuvCA1yeH1yDM7NJhBW/2aXxeucLj6i80/LAJ/Q==}
+  /@babel/plugin-transform-modules-commonjs/7.19.6_@babel+core@7.20.2:
+    resolution: {integrity: sha512-8PIa1ym4XRTKuSsOUXqDG0YaOlEuTVvHMe5JCfgBMOtHvJKw/4NGovEGN33viISshG/rZNVrACiBmPQLvWN8xQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-module-transforms': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/helper-simple-access': 7.18.6
-      babel-plugin-dynamic-import-node: 2.3.3
+      '@babel/core': 7.20.2
+      '@babel/helper-module-transforms': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/helper-simple-access': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-systemjs/7.19.0_@babel+core@7.19.6:
-    resolution: {integrity: sha512-x9aiR0WXAWmOWsqcsnrzGR+ieaTMVyGyffPVA7F8cXAGt/UxefYv6uSHZLkAFChN5M5Iy1+wjE+xJuPt22H39A==}
+  /@babel/plugin-transform-modules-systemjs/7.19.6_@babel+core@7.20.2:
+    resolution: {integrity: sha512-fqGLBepcc3kErfR9R3DnVpURmckXP7gj7bAlrTQyBxrigFqszZCkFkcoxzCp2v32XmwXLvbw+8Yq9/b+QqksjQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
+      '@babel/core': 7.20.2
       '@babel/helper-hoist-variables': 7.18.6
-      '@babel/helper-module-transforms': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/helper-module-transforms': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       '@babel/helper-validator-identifier': 7.19.1
-      babel-plugin-dynamic-import-node: 2.3.3
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-modules-umd/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-dcegErExVeXcRqNtkRU/z8WlBLnvD4MRnHgNs3MytRO1Mn1sHRyhbcpYbVMGclAqOjdW+9cfkdZno9dFdfKLfQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-module-transforms': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-module-transforms': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.19.6:
+  /@babel/plugin-transform-named-capturing-groups-regex/7.19.1_@babel+core@7.20.2:
     resolution: {integrity: sha512-oWk9l9WItWBQYS4FgXD4Uyy5kq898lvkXpXQxoJEY1RnvPk4R/Dvu2ebXU9q8lP+rlMwUQTFf2Ok6d78ODa0kw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-new-target/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-DjwFA/9Iu3Z+vrAn+8pBUGcjhxKguSMlsFqeCKbhb9BAV756v0krzVK04CRDi/4aqmk8BsHb4a/gFcaA5joXRw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-object-super/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-uvGz6zk+pZoS1aTZrOvrbj6Pp/kK2mp45t2B+bTDre2UgsZZ8EZLSJtUg7m/no0zOJUWgFONpB7Zv9W2tSaFlA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       '@babel/helper-replace-supers': 7.18.9
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/plugin-transform-parameters/7.18.8_@babel+core@7.19.6:
-    resolution: {integrity: sha512-ivfbE3X2Ss+Fj8nnXvKJS6sjRG4gzwPMsP+taZC+ZzEGjAYlvENixmt1sZ5Ca6tWls+BlKSGKPJ6OOXvXCbkFg==}
+  /@babel/plugin-transform-parameters/7.20.3_@babel+core@7.20.2:
+    resolution: {integrity: sha512-oZg/Fpx0YDrj13KsLyO8I/CX3Zdw7z0O9qOd95SqcoIzuqy/WTGWvePeHAnZCN54SfdyjHcb1S30gc8zlzlHcA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-property-literals/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-cYcs6qlgafTud3PAzrrRNbQtfpQ8+y/+M5tKmksS9+M1ckbH6kzY8MrexEM9mcA6JDsukE19iIRvAyYl463sMg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-regenerator/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-poqRI2+qiSdeldcz4wTSTXBRryoq3Gc70ye7m7UD5Ww0nE29IXqMl6r7Nd15WBgRd74vloEMlShtH6CKxVzfmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       regenerator-transform: 0.15.0
     dev: true
 
-  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-reserved-words/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-oX/4MyMoypzHjFrT1CdivfKZ+XvIPMFXwwxHp/r0Ddy2Vuomt4HDFGmft1TAY2yiTKiNSsh3kjBAzcM8kSdsjA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-shorthand-properties/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-eCLXXJqv8okzg86ywZJbRn19YJHU4XUa55oz2wbHhaQVn/MM+XhukiT7SYqp/7o00dg52Rj51Ny+Ecw4oyoygw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.19.6:
+  /@babel/plugin-transform-spread/7.19.0_@babel+core@7.20.2:
     resolution: {integrity: sha512-RsuMk7j6n+r752EtzyScnWkQyuJdli6LdO5Klv8Yx0OfPVTcQkIUfS8clx5e9yHXzlnhOZF3CbQ8C2uP5j074w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       '@babel/helper-skip-transparent-expression-wrappers': 7.18.9
     dev: true
 
-  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-sticky-regex/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-kfiDrDQ+PBsQDO85yj1icueWMfGfJFKN1KCkndygtu/C9+XUfydLC8Iv5UYJqRwy4zk8EcplRxEOeLyjq1gm6Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-transform-template-literals/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-S8cOWfT82gTezpYOiVaGHrCbhlHgKhQt8XH5ES46P2XWmX92yisoZywf5km75wv5sYcXDUCLMmMxOLCtthDgMA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.19.6:
+  /@babel/plugin-transform-typeof-symbol/7.18.9_@babel+core@7.20.2:
     resolution: {integrity: sha512-SRfwTtF11G2aemAZWivL7PD+C9z52v9EvMqH9BuYbabyPuKUvSWks3oCg6041pT925L4zVFqaVBeECwsmlguEw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.19.6:
+  /@babel/plugin-transform-unicode-escapes/7.18.10_@babel+core@7.20.2:
     resolution: {integrity: sha512-kKAdAI+YzPgGY/ftStBFXTI1LZFju38rYThnfMykS+IXy8BVx+res7s2fxf1l8I35DV2T97ezo6+SGrXz6B3iQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.19.6:
+  /@babel/plugin-transform-unicode-regex/7.18.6_@babel+core@7.20.2:
     resolution: {integrity: sha512-gE7A6Lt7YLnNOL3Pb9BNeZvi+d8l7tcRrG4+pwJjK9hD2xX4mEvjlQW60G9EEmfXVYRPv9VRQcyegIVHCql/AA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/core': 7.20.2
+      '@babel/helper-create-regexp-features-plugin': 7.19.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
     dev: true
 
-  /@babel/preset-env/7.19.4_@babel+core@7.19.6:
-    resolution: {integrity: sha512-5QVOTXUdqTCjQuh2GGtdd7YEhoRXBMVGROAtsBeLGIbIz3obCBIfRMT1I3ZKkMgNzwkyCkftDXSSkHxnfVf4qg==}
+  /@babel/preset-env/7.20.2_@babel+core@7.20.2:
+    resolution: {integrity: sha512-1G0efQEWR1EHkKvKHqbG+IN/QdgwfByUpM5V5QroDzGV2t3S/WXNQd693cHiHTlCFMpr9B6FkPFXDA2lQcKoDg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.20.0
-      '@babel/core': 7.19.6
-      '@babel/helper-compilation-targets': 7.19.3_@babel+core@7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
+      '@babel/compat-data': 7.20.1
+      '@babel/core': 7.20.2
+      '@babel/helper-compilation-targets': 7.20.0_@babel+core@7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
       '@babel/helper-validator-option': 7.18.6
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-proposal-async-generator-functions': 7.19.1_@babel+core@7.19.6
-      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-object-rest-spread': 7.19.4_@babel+core@7.19.6
-      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.19.6
-      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.19.6
-      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.19.6
-      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-import-assertions': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.19.6
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.19.6
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.19.6
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.19.6
-      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.19.6
-      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-block-scoping': 7.20.0_@babel+core@7.19.6
-      '@babel/plugin-transform-classes': 7.19.0_@babel+core@7.19.6
-      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-transform-destructuring': 7.20.0_@babel+core@7.19.6
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.19.6
-      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-modules-amd': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-modules-commonjs': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-modules-systemjs': 7.19.0_@babel+core@7.19.6
-      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.19.6
-      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-parameters': 7.18.8_@babel+core@7.19.6
-      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.19.6
-      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.19.6
-      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.19.6
-      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.19.6
-      '@babel/preset-modules': 0.1.5_@babel+core@7.19.6
-      '@babel/types': 7.20.0
-      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.19.6
-      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.19.6
-      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.19.6
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-proposal-async-generator-functions': 7.20.1_@babel+core@7.20.2
+      '@babel/plugin-proposal-class-properties': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-class-static-block': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-dynamic-import': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-export-namespace-from': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-proposal-json-strings': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-logical-assignment-operators': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-proposal-nullish-coalescing-operator': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-numeric-separator': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-object-rest-spread': 7.20.2_@babel+core@7.20.2
+      '@babel/plugin-proposal-optional-catch-binding': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-optional-chaining': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-proposal-private-methods': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-private-property-in-object': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-syntax-async-generators': 7.8.4_@babel+core@7.20.2
+      '@babel/plugin-syntax-class-properties': 7.12.13_@babel+core@7.20.2
+      '@babel/plugin-syntax-class-static-block': 7.14.5_@babel+core@7.20.2
+      '@babel/plugin-syntax-dynamic-import': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-export-namespace-from': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-import-assertions': 7.20.0_@babel+core@7.20.2
+      '@babel/plugin-syntax-json-strings': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4_@babel+core@7.20.2
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-numeric-separator': 7.10.4_@babel+core@7.20.2
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-optional-chaining': 7.8.3_@babel+core@7.20.2
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5_@babel+core@7.20.2
+      '@babel/plugin-syntax-top-level-await': 7.14.5_@babel+core@7.20.2
+      '@babel/plugin-transform-arrow-functions': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-async-to-generator': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-block-scoped-functions': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-block-scoping': 7.20.2_@babel+core@7.20.2
+      '@babel/plugin-transform-classes': 7.20.2_@babel+core@7.20.2
+      '@babel/plugin-transform-computed-properties': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-transform-destructuring': 7.20.2_@babel+core@7.20.2
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-duplicate-keys': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-transform-exponentiation-operator': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-for-of': 7.18.8_@babel+core@7.20.2
+      '@babel/plugin-transform-function-name': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-transform-literals': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-transform-member-expression-literals': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-modules-amd': 7.19.6_@babel+core@7.20.2
+      '@babel/plugin-transform-modules-commonjs': 7.19.6_@babel+core@7.20.2
+      '@babel/plugin-transform-modules-systemjs': 7.19.6_@babel+core@7.20.2
+      '@babel/plugin-transform-modules-umd': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.19.1_@babel+core@7.20.2
+      '@babel/plugin-transform-new-target': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-object-super': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-parameters': 7.20.3_@babel+core@7.20.2
+      '@babel/plugin-transform-property-literals': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-regenerator': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-reserved-words': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-shorthand-properties': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-spread': 7.19.0_@babel+core@7.20.2
+      '@babel/plugin-transform-sticky-regex': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-template-literals': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-transform-typeof-symbol': 7.18.9_@babel+core@7.20.2
+      '@babel/plugin-transform-unicode-escapes': 7.18.10_@babel+core@7.20.2
+      '@babel/plugin-transform-unicode-regex': 7.18.6_@babel+core@7.20.2
+      '@babel/preset-modules': 0.1.5_@babel+core@7.20.2
+      '@babel/types': 7.20.2
+      babel-plugin-polyfill-corejs2: 0.3.3_@babel+core@7.20.2
+      babel-plugin-polyfill-corejs3: 0.6.0_@babel+core@7.20.2
+      babel-plugin-polyfill-regenerator: 0.4.1_@babel+core@7.20.2
       core-js-compat: 3.25.2
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/preset-modules/0.1.5_@babel+core@7.19.6:
+  /@babel/preset-modules/0.1.5_@babel+core@7.20.2:
     resolution: {integrity: sha512-A57th6YRG7oR3cq/yt/Y84MvGgE0eJG2F1JLhKuyG+jFxEgrd/HAMJatiFtmOiZurz+0DkrvbheCLaV5f2JfjA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-plugin-utils': 7.19.0
-      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.19.6
-      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.19.6
-      '@babel/types': 7.20.0
+      '@babel/core': 7.20.2
+      '@babel/helper-plugin-utils': 7.20.2
+      '@babel/plugin-proposal-unicode-property-regex': 7.18.6_@babel+core@7.20.2
+      '@babel/plugin-transform-dotall-regex': 7.18.6_@babel+core@7.20.2
+      '@babel/types': 7.20.2
       esutils: 2.0.3
     dev: true
 
@@ -1206,30 +1209,30 @@ packages:
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/parser': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/parser': 7.20.3
+      '@babel/types': 7.20.2
     dev: true
 
-  /@babel/traverse/7.20.0:
-    resolution: {integrity: sha512-5+cAXQNARgjRUK0JWu2UBwja4JLSO/rBMPJzpsKb+oBF5xlUuCfljQepS4XypBQoiigL0VQjTZy6WiONtUdScQ==}
+  /@babel/traverse/7.20.1:
+    resolution: {integrity: sha512-d3tN8fkVJwFLkHkBN479SOsw4DMZnz8cdbL/gvuDuzy3TS6Nfw80HuQqhw1pITbIruHyh7d1fMA47kWzmcUEGA==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/code-frame': 7.18.6
-      '@babel/generator': 7.20.0
+      '@babel/generator': 7.20.4
       '@babel/helper-environment-visitor': 7.18.9
       '@babel/helper-function-name': 7.19.0
       '@babel/helper-hoist-variables': 7.18.6
       '@babel/helper-split-export-declaration': 7.18.6
-      '@babel/parser': 7.20.0
-      '@babel/types': 7.20.0
+      '@babel/parser': 7.20.3
+      '@babel/types': 7.20.2
       debug: 4.3.4
       globals: 11.12.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /@babel/types/7.20.0:
-    resolution: {integrity: sha512-Jlgt3H0TajCW164wkTOTzHkZb075tMQMULzrLUoUeKmO7eFL96GgDxf7/Axhc5CAuKE3KFyVW1p6ysKsi2oXAg==}
+  /@babel/types/7.20.2:
+    resolution: {integrity: sha512-FnnvsNWgZCr232sqtXggapvlkk/tuwR/qhGzcmxI0GXLCjmPYQPzio2FbdlWuY6y1sHFfQKk+rRbUZ9VStQMog==}
     engines: {node: '>=6.9.0'}
     dependencies:
       '@babel/helper-string-parser': 7.19.4
@@ -1237,14 +1240,14 @@ packages:
       to-fast-properties: 2.0.0
     dev: true
 
-  /@csstools/selector-specificity/2.0.2_dvkg4kkb622mvceygg47xxdz3a:
+  /@csstools/selector-specificity/2.0.2_45y636a2vqremknoajyxd5nkzy:
     resolution: {integrity: sha512-IkpVW/ehM1hWKln4fCA3NzJU8KwD+kIOvPZA4cqxoJHtE21CCzjyp+Kxbu0i5I4tBNOlXPL9mjwnWlL0VEG4Fg==}
     engines: {node: ^12 || ^14 || >=16}
     peerDependencies:
       postcss: ^8.2
       postcss-selector-parser: ^6.0.10
     dependencies:
-      postcss: 8.4.18
+      postcss: 8.4.19
       postcss-selector-parser: 6.0.10
     dev: true
 
@@ -1265,12 +1268,12 @@ packages:
       - supports-color
     dev: true
 
-  /@fullhuman/postcss-purgecss/5.0.0_postcss@8.4.18:
+  /@fullhuman/postcss-purgecss/5.0.0_postcss@8.4.19:
     resolution: {integrity: sha512-onDS/b/2pMRzqSoj4qOs2tYFmOpaspjTAgvACIHMPiicu1ptajiBruTrjBzTKdxWdX0ldaBb7wj8nEaTLyFkJw==}
     peerDependencies:
       postcss: ^8.0.0
     dependencies:
-      postcss: 8.4.18
+      postcss: 8.4.19
       purgecss: 5.0.0
     dev: true
 
@@ -1294,8 +1297,8 @@ packages:
     resolution: {integrity: sha512-ZnQMnLV4e7hDlUvw8H+U8ASL02SS2Gn6+9Ac3wGGLIe7+je2AeAOxPY+izIPJDfFDb7eDjev0Us8MO1iFRN8hA==}
     dev: true
 
-  /@hyas/images/0.3.0:
-    resolution: {integrity: sha512-8eBZN36N8Mc5xXNXNQDua37BbAY1AEi5Lg0wXq6iSIaY2wt/h3TzuXp64uxYWRZMpPmfTY0L0qY00AWjy9qc4Q==}
+  /@hyas/images/0.3.2:
+    resolution: {integrity: sha512-3khtRISGu4euI2JMViqsb25QtoqlIGAcHyKgSLSj9d3JP4aD//M+PfrzNnIi/NzGu4nTiBfOBtDmR+RijBNK7g==}
     dev: true
 
   /@jridgewell/gen-mapping/0.1.1:
@@ -1524,7 +1527,7 @@ packages:
       - encoding
     dev: true
 
-  /autoprefixer/10.4.13_postcss@8.4.18:
+  /autoprefixer/10.4.13_postcss@8.4.19:
     resolution: {integrity: sha512-49vKpMqcZYsJjwotvt4+h/BCjJVnhGwcLpDt5xkcaOG3eLrG/HUYLagrihYsQ+qrIBgIzX1Rw7a6L8I/ZA1Atg==}
     engines: {node: ^10 || ^12 || >=14}
     hasBin: true
@@ -1536,48 +1539,42 @@ packages:
       fraction.js: 4.2.0
       normalize-range: 0.1.2
       picocolors: 1.0.0
-      postcss: 8.4.18
+      postcss: 8.4.19
       postcss-value-parser: 4.2.0
     dev: true
 
-  /babel-plugin-dynamic-import-node/2.3.3:
-    resolution: {integrity: sha512-jZVI+s9Zg3IqA/kdi0i6UDCybUI3aSBLnglhYbSSjKlV7yF1F/5LWv8MakQmvYpnbJDS6fcBL2KzHSxNCMtWSQ==}
-    dependencies:
-      object.assign: 4.1.2
-    dev: true
-
-  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.19.6:
+  /babel-plugin-polyfill-corejs2/0.3.3_@babel+core@7.20.2:
     resolution: {integrity: sha512-8hOdmFYFSZhqg2C/JgLUQ+t52o5nirNwaWM2B9LWteozwIvM14VSwdsCAUET10qT+kmySAlseadmfeeSWFCy+Q==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/compat-data': 7.20.0
-      '@babel/core': 7.19.6
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.6
+      '@babel/compat-data': 7.20.1
+      '@babel/core': 7.20.2
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.20.2
       semver: 6.3.0
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.19.6:
+  /babel-plugin-polyfill-corejs3/0.6.0_@babel+core@7.20.2:
     resolution: {integrity: sha512-+eHqR6OPcBhJOGgsIar7xoAB1GcSwVUA3XjAd7HJNzOXT4wv6/H7KIdA/Nc60cvUlDbKApmqNvD1B1bzOt4nyA==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.20.2
       core-js-compat: 3.25.2
     transitivePeerDependencies:
       - supports-color
     dev: true
 
-  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.19.6:
+  /babel-plugin-polyfill-regenerator/0.4.1_@babel+core@7.20.2:
     resolution: {integrity: sha512-NtQGmyQDXjQqQ+IzRkBVwEOz9lQ4zxAQZgoAYEtU9dJjnl1Oc98qnN7jcp+bE7O7aYzVpavXE3/VKXNzUbh7aw==}
     peerDependencies:
       '@babel/core': ^7.0.0-0
     dependencies:
-      '@babel/core': 7.19.6
-      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.19.6
+      '@babel/core': 7.20.2
+      '@babel/helper-define-polyfill-provider': 0.3.3_@babel+core@7.20.2
     transitivePeerDependencies:
       - supports-color
     dev: true
@@ -1606,8 +1603,8 @@ packages:
       safe-buffer: 5.2.1
     dev: true
 
-  /bootstrap-icons/1.9.1:
-    resolution: {integrity: sha512-d4ZkO30MIkAhQ2nNRJqKXJVEQorALGbLWTuRxyCTJF96lRIV6imcgMehWGJUiJMJhglN0o2tqLIeDnMdiQEE9g==}
+  /bootstrap-icons/1.10.0:
+    resolution: {integrity: sha512-SNQ3EUv5cKuoqkS6tebZztusF1P8hKyCVVSlYjm6d5H2fa1v32w72oPjujrTlGy2g9LiZ0tR/uFMEZwO71GHPQ==}
     dev: true
 
   /bootstrap/5.2.2_@popperjs+core@2.11.6:
@@ -1693,13 +1690,6 @@ packages:
       responselike: 2.0.0
     dev: true
 
-  /call-bind/1.0.2:
-    resolution: {integrity: sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==}
-    dependencies:
-      function-bind: 1.1.1
-      get-intrinsic: 1.1.1
-    dev: true
-
   /callsites/3.1.0:
     resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
     engines: {node: '>=6'}
@@ -1999,14 +1989,6 @@ packages:
     engines: {node: '>=10'}
     dev: true
 
-  /define-properties/1.1.4:
-    resolution: {integrity: sha512-uckOqKcfaVvtBdsVkdPv3XjveQJsNQqmhXgRi8uhvWWuPYZCNlzT8qAyblUgNoXdHdjMTzAqeGjAoli8f+bzPA==}
-    engines: {node: '>= 0.4'}
-    dependencies:
-      has-property-descriptors: 1.0.0
-      object-keys: 1.1.1
-    dev: true
-
   /del/7.0.0:
     resolution: {integrity: sha512-tQbV/4u5WVB8HMJr08pgw0b6nG4RGt/tj+7Numvq+zqcvUFeMaIWWOUFltiU+6go8BSO2/ogsB4EasDaj0y68Q==}
     engines: {node: '>=14.16'}
@@ -2097,13 +2079,13 @@ packages:
       estraverse: 5.3.0
     dev: true
 
-  /eslint-utils/3.0.0_eslint@8.26.0:
+  /eslint-utils/3.0.0_eslint@8.27.0:
     resolution: {integrity: sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==}
     engines: {node: ^10.0.0 || ^12.0.0 || >= 14.0.0}
     peerDependencies:
       eslint: '>=5'
     dependencies:
-      eslint: 8.26.0
+      eslint: 8.27.0
       eslint-visitor-keys: 2.1.0
     dev: true
 
@@ -2117,8 +2099,8 @@ packages:
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     dev: true
 
-  /eslint/8.26.0:
-    resolution: {integrity: sha512-kzJkpaw1Bfwheq4VXUezFriD1GxszX6dUekM7Z3aC2o4hju+tsR/XyTC3RcoSD7jmy9VkPU3+N6YjVU2e96Oyg==}
+  /eslint/8.27.0:
+    resolution: {integrity: sha512-0y1bfG2ho7mty+SiILVf9PfuRA49ek4Nc60Wmmu62QlobNR+CeXa4xXIJgcuwSQgZiWaPH+5BDsctpIW0PR/wQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
     hasBin: true
     dependencies:
@@ -2133,7 +2115,7 @@ packages:
       doctrine: 3.0.0
       escape-string-regexp: 4.0.0
       eslint-scope: 7.1.1
-      eslint-utils: 3.0.0_eslint@8.26.0
+      eslint-utils: 3.0.0_eslint@8.27.0
       eslint-visitor-keys: 3.3.0
       espree: 9.4.0
       esquery: 1.4.0
@@ -2371,14 +2353,6 @@ packages:
     engines: {node: 6.* || 8.* || >= 10.*}
     dev: true
 
-  /get-intrinsic/1.1.1:
-    resolution: {integrity: sha512-kWZrnVM42QCiEA2Ig1bG8zjoIMOgxWwYCEeNdwY6Tv/cOSeGpcoX4pXHfKUxNKVoArnrEr2e9srnAxxGIraS9Q==}
-    dependencies:
-      function-bind: 1.1.1
-      has: 1.0.3
-      has-symbols: 1.0.3
-    dev: true
-
   /get-stdin/9.0.0:
     resolution: {integrity: sha512-dVKBjfWisLAicarI2Sf+JuBE/DghV4UzNAVe9yhEJuzeREd3JhOTE9cUaJTeSa77fsbQUK3pcOpJfM59+VKZaA==}
     engines: {node: '>=12'}
@@ -2571,17 +2545,6 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /has-property-descriptors/1.0.0:
-    resolution: {integrity: sha512-62DVLZGoiEBDHQyqG4w9xCuZ7eJEwNmJRWw2VY84Oedb7WFcA27fiEVe8oUQx9hAUJ4ekurquucTGwsyO1XGdQ==}
-    dependencies:
-      get-intrinsic: 1.1.1
-    dev: true
-
-  /has-symbols/1.0.3:
-    resolution: {integrity: sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==}
-    engines: {node: '>= 0.4'}
-    dev: true
-
   /has/1.0.3:
     resolution: {integrity: sha512-f2dvO0VU6Oej7RkWJGrehjbzMAjFp5/VKPp5tTpWIV4JHHZK1/BxbFRtf/siA2SWTe09caDmVtYYzWEIbBS4zw==}
     engines: {node: '>= 0.4.0'}
@@ -2867,8 +2830,8 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /known-css-properties/0.25.0:
-    resolution: {integrity: sha512-b0/9J1O9Jcyik1GC6KC42hJ41jKwdO/Mq8Mdo5sYN+IuRTXs2YFHZC3kZSx6ueusqa95x3wLYe/ytKjbAfGixA==}
+  /known-css-properties/0.26.0:
+    resolution: {integrity: sha512-5FZRzrZzNTBruuurWpvZnvP9pum+fe0HcK8z/ooo+U+Hmp4vtbyp1/QDsqmufirXy4egGzbaH/y2uCZf+6W5Kg==}
     dev: true
 
   /lazysizes/5.3.2:
@@ -3117,7 +3080,7 @@ packages:
   /netlify-plugin-submit-sitemap/0.4.0:
     resolution: {integrity: sha512-5ntDtSKZRHaCDrDXh4sH4V7lNEEsoi01lsmSUuqJ/ikPHf0XEErjsKba8TsM3iaZRYEHI9bQse3BWgguwuwIIQ==}
     dependencies:
-      node-fetch: 3.2.10
+      node-fetch: 3.3.0
     dev: true
 
   /node-domexception/1.0.0:
@@ -3137,8 +3100,8 @@ packages:
       whatwg-url: 5.0.0
     dev: true
 
-  /node-fetch/3.2.10:
-    resolution: {integrity: sha512-MhuzNwdURnZ1Cp4XTazr69K0BTizsBroX7Zx3UgDSVcZYKF/6p0CBe4EUb/hLqmzVhl0UpYfgRljQ4yxE+iCxA==}
+  /node-fetch/3.3.0:
+    resolution: {integrity: sha512-BKwRP/O0UvoMKp7GNdwPlObhYGB5DQqwhEDQlNKuoqwVYSxkSZCSbHjnFFmUEtwSKRPU4kNK8PbDYYitwaE3QA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     dependencies:
       data-uri-to-buffer: 4.0.0
@@ -3189,26 +3152,11 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /object-keys/1.1.1:
-    resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
-    engines: {node: '>= 0.4'}
-    dev: true
-
   /object-path/0.11.8:
     resolution: {integrity: sha512-YJjNZrlXJFM42wTBn6zgOJVar9KFJvzx6sTWDte8sWZF//cnjl0BxHNpfZx+ZffXX63A9q0b1zsFiBX4g4X5KA==}
     engines: {node: '>= 10.12.0'}
     dev: true
 
-  /object.assign/4.1.2:
-    resolution: {integrity: sha512-ixT2L5THXsApyiUPYKmW+2EHpXXe5Ii3M+f4e+aJFAHao5amFRW6J0OO6c/LU8Be47utCx2GL89hxGB6XSmKuQ==}
-    engines: {node: '>= 0.4'}
-    dependencies:
-      call-bind: 1.0.2
-      define-properties: 1.1.4
-      has-symbols: 1.0.3
-      object-keys: 1.1.1
-    dev: true
-
   /once/1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
     dependencies:
@@ -3359,7 +3307,7 @@ packages:
     engines: {node: '>=0.10.0'}
     dev: true
 
-  /postcss-cli/10.0.0_postcss@8.4.18:
+  /postcss-cli/10.0.0_postcss@8.4.19:
     resolution: {integrity: sha512-Wjy/00wBBEgQqnSToznxLWDnATznokFGXsHtF/3G8glRZpz5KYlfHcBW/VMJmWAeF2x49zjgy4izjM3/Wx1dKA==}
     engines: {node: '>=14'}
     hasBin: true
@@ -3372,9 +3320,9 @@ packages:
       get-stdin: 9.0.0
       globby: 13.1.2
       picocolors: 1.0.0
-      postcss: 8.4.18
-      postcss-load-config: 4.0.1_postcss@8.4.18
-      postcss-reporter: 7.0.5_postcss@8.4.18
+      postcss: 8.4.19
+      postcss-load-config: 4.0.1_postcss@8.4.19
+      postcss-reporter: 7.0.5_postcss@8.4.19
       pretty-hrtime: 1.0.3
       read-cache: 1.0.0
       slash: 4.0.0
@@ -3383,7 +3331,7 @@ packages:
       - ts-node
     dev: true
 
-  /postcss-load-config/4.0.1_postcss@8.4.18:
+  /postcss-load-config/4.0.1_postcss@8.4.19:
     resolution: {integrity: sha512-vEJIc8RdiBRu3oRAI0ymerOn+7rPuMvRXslTvZUKZonDHFIczxztIyJ1urxM1x9JXEikvpWWTUUqal5j/8QgvA==}
     engines: {node: '>= 14'}
     peerDependencies:
@@ -3396,7 +3344,7 @@ packages:
         optional: true
     dependencies:
       lilconfig: 2.0.5
-      postcss: 8.4.18
+      postcss: 8.4.19
       yaml: 2.1.1
     dev: true
 
@@ -3404,14 +3352,14 @@ packages:
     resolution: {integrity: sha512-3sOlxmbKcSHMjlUXQZKQ06jOswE7oVkXPxmZdoB1r5l0q6gTFTQSHxNxOrCccElbW7dxNytifNEo8qidX2Vsig==}
     dev: true
 
-  /postcss-reporter/7.0.5_postcss@8.4.18:
+  /postcss-reporter/7.0.5_postcss@8.4.19:
     resolution: {integrity: sha512-glWg7VZBilooZGOFPhN9msJ3FQs19Hie7l5a/eE6WglzYqVeH3ong3ShFcp9kDWJT1g2Y/wd59cocf9XxBtkWA==}
     engines: {node: '>=10'}
     peerDependencies:
       postcss: ^8.1.0
     dependencies:
       picocolors: 1.0.0
-      postcss: 8.4.18
+      postcss: 8.4.19
       thenby: 1.3.4
     dev: true
 
@@ -3419,22 +3367,22 @@ packages:
     resolution: {integrity: sha512-HvExULSwLqHLgUy1rl3ANIqCsvMS0WHss2UOsXhXnQaZ9VCc2oBvIpXrl00IUFT5ZDITME0o6oiXeiHr2SAIfw==}
     dev: true
 
-  /postcss-safe-parser/6.0.0_postcss@8.4.18:
+  /postcss-safe-parser/6.0.0_postcss@8.4.19:
     resolution: {integrity: sha512-FARHN8pwH+WiS2OPCxJI8FuRJpTVnn6ZNFiqAM2aeW2LwTHWWmWgIyKC6cUo0L8aeKiF/14MNvnpls6R2PBeMQ==}
     engines: {node: '>=12.0'}
     peerDependencies:
       postcss: ^8.3.3
     dependencies:
-      postcss: 8.4.18
+      postcss: 8.4.19
     dev: true
 
-  /postcss-scss/4.0.4_postcss@8.4.18:
+  /postcss-scss/4.0.4_postcss@8.4.19:
     resolution: {integrity: sha512-aBBbVyzA8b3hUL0MGrpydxxXKXFZc5Eqva0Q3V9qsBOLEMsjb6w49WfpsoWzpEgcqJGW4t7Rio8WXVU9Gd8vWg==}
     engines: {node: '>=12.0'}
     peerDependencies:
       postcss: ^8.3.3
     dependencies:
-      postcss: 8.4.18
+      postcss: 8.4.19
     dev: true
 
   /postcss-selector-parser/6.0.10:
@@ -3449,8 +3397,8 @@ packages:
     resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
     dev: true
 
-  /postcss/8.4.18:
-    resolution: {integrity: sha512-Wi8mWhncLJm11GATDaQKobXSNEYGUHeQLiQqDFG1qQ5UTDPTEvKw0Xt5NsTpktGTwLps3ByrWsBrG0rB8YQ9oA==}
+  /postcss/8.4.19:
+    resolution: {integrity: sha512-h+pbPsyhlYj6N2ozBmHhHrs9DzGmbaarbLvWipMRO7RLS+v4onj26MPFXA5OBYFxyqYhUJK456SwDcY9H2/zsA==}
     engines: {node: ^10 || ^12 || >=14}
     dependencies:
       nanoid: 3.3.4
@@ -3498,7 +3446,7 @@ packages:
     dependencies:
       commander: 9.4.1
       glob: 8.0.3
-      postcss: 8.4.18
+      postcss: 8.4.19
       postcss-selector-parser: 6.0.10
     dev: true
 
@@ -3881,7 +3829,7 @@ packages:
     resolution: {integrity: sha512-Dj1Okke1C3uKKwQcetra4jSuk0DqbzbYtXipzFlFMZtowbF1x7BKJwB9AayVMyFARvU8EDrZdcax4At/452cAg==}
     dev: true
 
-  /stylelint-config-recommended-scss/8.0.0_mnalcscwzozovshmobozjae4pq:
+  /stylelint-config-recommended-scss/8.0.0_ave2i6l4ingtbwj4aquhd5witq:
     resolution: {integrity: sha512-BxjxEzRaZoQb7Iinc3p92GS6zRdRAkIuEu2ZFLTxJK2e1AIcCb5B5MXY9KOXdGTnYFZ+KKx6R4Fv9zU6CtMYPQ==}
     peerDependencies:
       postcss: ^8.3.3
@@ -3890,43 +3838,46 @@ packages:
       postcss:
         optional: true
     dependencies:
-      postcss: 8.4.18
-      postcss-scss: 4.0.4_postcss@8.4.18
-      stylelint: 14.14.0
-      stylelint-config-recommended: 9.0.0_stylelint@14.14.0
-      stylelint-scss: 4.2.0_stylelint@14.14.0
+      postcss: 8.4.19
+      postcss-scss: 4.0.4_postcss@8.4.19
+      stylelint: 14.14.1
+      stylelint-config-recommended: 9.0.0_stylelint@14.14.1
+      stylelint-scss: 4.2.0_stylelint@14.14.1
     dev: true
 
-  /stylelint-config-recommended/9.0.0_stylelint@14.14.0:
+  /stylelint-config-recommended/9.0.0_stylelint@14.14.1:
     resolution: {integrity: sha512-9YQSrJq4NvvRuTbzDsWX3rrFOzOlYBmZP+o513BJN/yfEmGSr0AxdvrWs0P/ilSpVV/wisamAHu5XSk8Rcf4CQ==}
     peerDependencies:
       stylelint: ^14.10.0
     dependencies:
-      stylelint: 14.14.0
+      stylelint: 14.14.1
     dev: true
 
-  /stylelint-config-standard-scss/6.0.0_mnalcscwzozovshmobozjae4pq:
-    resolution: {integrity: sha512-aAWcQgiqsXg6Jyhq/Q/HPbVB7PHf4v/wdyFSDun/qlL/SPxtEcVeGMvJLzRVRaNf3tp3D93QP6N9QKwJa1L0Kw==}
+  /stylelint-config-standard-scss/6.1.0_ave2i6l4ingtbwj4aquhd5witq:
+    resolution: {integrity: sha512-iZ2B5kQT2G3rUzx+437cEpdcnFOQkwnwqXuY8Z0QUwIHQVE8mnYChGAquyKFUKZRZ0pRnrciARlPaR1RBtPb0Q==}
     peerDependencies:
+      postcss: ^8.3.3
       stylelint: ^14.14.0
+    peerDependenciesMeta:
+      postcss:
+        optional: true
     dependencies:
-      stylelint: 14.14.0
-      stylelint-config-recommended-scss: 8.0.0_mnalcscwzozovshmobozjae4pq
-      stylelint-config-standard: 29.0.0_stylelint@14.14.0
-    transitivePeerDependencies:
-      - postcss
+      postcss: 8.4.19
+      stylelint: 14.14.1
+      stylelint-config-recommended-scss: 8.0.0_ave2i6l4ingtbwj4aquhd5witq
+      stylelint-config-standard: 29.0.0_stylelint@14.14.1
     dev: true
 
-  /stylelint-config-standard/29.0.0_stylelint@14.14.0:
+  /stylelint-config-standard/29.0.0_stylelint@14.14.1:
     resolution: {integrity: sha512-uy8tZLbfq6ZrXy4JKu3W+7lYLgRQBxYTUUB88vPgQ+ZzAxdrvcaSUW9hOMNLYBnwH+9Kkj19M2DHdZ4gKwI7tg==}
     peerDependencies:
       stylelint: ^14.14.0
     dependencies:
-      stylelint: 14.14.0
-      stylelint-config-recommended: 9.0.0_stylelint@14.14.0
+      stylelint: 14.14.1
+      stylelint-config-recommended: 9.0.0_stylelint@14.14.1
     dev: true
 
-  /stylelint-scss/4.2.0_stylelint@14.14.0:
+  /stylelint-scss/4.2.0_stylelint@14.14.1:
     resolution: {integrity: sha512-HHHMVKJJ5RM9pPIbgJ/XA67h9H0407G68Rm69H4fzFbFkyDMcTV1Byep3qdze5+fJ3c0U7mJrbj6S0Fg072uZA==}
     peerDependencies:
       stylelint: ^14.5.1
@@ -3936,15 +3887,15 @@ packages:
       postcss-resolve-nested-selector: 0.1.1
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
-      stylelint: 14.14.0
+      stylelint: 14.14.1
     dev: true
 
-  /stylelint/14.14.0:
-    resolution: {integrity: sha512-yUI+4xXfPHVnueYddSQ/e1GuEA/2wVhWQbGj16AmWLtQJtn28lVxfS4b0CsWyVRPgd3Auzi0NXOthIEUhtQmmA==}
+  /stylelint/14.14.1:
+    resolution: {integrity: sha512-Jnftu+lSD8cSpcV/+Z2nfgfgFpTIS1FcujezXPngtoIQ6wtwutL22MsNE0dJuMiM1h1790g2qIjAyUZCMrX4sw==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     hasBin: true
     dependencies:
-      '@csstools/selector-specificity': 2.0.2_dvkg4kkb622mvceygg47xxdz3a
+      '@csstools/selector-specificity': 2.0.2_45y636a2vqremknoajyxd5nkzy
       balanced-match: 2.0.0
       colord: 2.9.3
       cosmiconfig: 7.0.1
@@ -3961,16 +3912,16 @@ packages:
       import-lazy: 4.0.0
       imurmurhash: 0.1.4
       is-plain-object: 5.0.0
-      known-css-properties: 0.25.0
+      known-css-properties: 0.26.0
       mathml-tag-names: 2.1.3
       meow: 9.0.0
       micromatch: 4.0.5
       normalize-path: 3.0.0
       picocolors: 1.0.0
-      postcss: 8.4.18
+      postcss: 8.4.19
       postcss-media-query-parser: 0.2.3
       postcss-resolve-nested-selector: 0.1.1
-      postcss-safe-parser: 6.0.0_postcss@8.4.18
+      postcss-safe-parser: 6.0.0_postcss@8.4.19
       postcss-selector-parser: 6.0.10
       postcss-value-parser: 4.2.0
       resolve-from: 5.0.0
@@ -3979,7 +3930,7 @@ packages:
       style-search: 0.1.0
       supports-hyperlinks: 2.3.0
       svg-tags: 1.0.0
-      table: 6.8.0
+      table: 6.8.1
       v8-compile-cache: 2.3.0
       write-file-atomic: 4.0.2
     transitivePeerDependencies:
@@ -4017,8 +3968,8 @@ packages:
     resolution: {integrity: sha512-ovssysQTa+luh7A5Weu3Rta6FJlFBBbInjOh722LIt6klpU2/HtdUbszju/G4devcvk8PGt7FCLv5wftu3THUA==}
     dev: true
 
-  /table/6.8.0:
-    resolution: {integrity: sha512-s/fitrbVeEyHKFa7mFdkuQMWlH1Wgw/yEXMt5xACT4ZpzWFluehAxRtUUQKPuWhaLAWhFcVx6w3oC8VKaUfPGA==}
+  /table/6.8.1:
+    resolution: {integrity: sha512-Y4X9zqrCftUhMeH2EptSSERdVKt/nEdijTOacGD/97EKjhQ/Qs8RTlEGABSJNNN8lac9kheH+af7yAkEWlgneA==}
     engines: {node: '>=10.0.0'}
     dependencies:
       ajv: 8.11.0

From 47261b45ba8e537bd7ffb871c281fcdcb8ede418 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 12 Nov 2022 21:38:15 +0000
Subject: [PATCH 263/263] build(deps): update dependency i18next to v22.0.5
 (#4364)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 web/package.json   |  2 +-
 web/pnpm-lock.yaml | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/package.json b/web/package.json
index e53f8982b..e3d9f6820 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "axios": "1.1.3",
     "broadcast-channel": "4.18.1",
     "classnames": "2.3.2",
-    "i18next": "22.0.4",
+    "i18next": "22.0.5",
     "i18next-browser-languagedetector": "7.0.1",
     "i18next-http-backend": "2.0.1",
     "qrcode.react": "3.1.0",
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 3427013da..3034b4346 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -40,7 +40,7 @@ specifiers:
   eslint-plugin-react: 7.31.10
   eslint-plugin-react-hooks: 4.6.0
   husky: 8.0.2
-  i18next: 22.0.4
+  i18next: 22.0.5
   i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
   jest: 29.3.1
@@ -79,14 +79,14 @@ dependencies:
   axios: 1.1.3
   broadcast-channel: 4.18.1
   classnames: 2.3.2
-  i18next: 22.0.4
+  i18next: 22.0.5
   i18next-browser-languagedetector: 7.0.1
   i18next-http-backend: 2.0.1
   qrcode.react: 3.1.0_react@18.2.0
   query-string: 7.1.1
   react: 18.2.0
   react-dom: 18.2.0_react@18.2.0
-  react-i18next: 12.0.0_n3kmhq4527torfjiti537juzwy
+  react-i18next: 12.0.0_e52s5leb62x5eudkmfoztpifde
   react-loading: 2.0.3_react@18.2.0
   react-otp-input: 2.4.0_biqbaboplfbrettd7655fr4n2y
   react-router-dom: 6.4.3_biqbaboplfbrettd7655fr4n2y
@@ -6324,8 +6324,8 @@ packages:
       - encoding
     dev: false
 
-  /i18next/22.0.4:
-    resolution: {integrity: sha512-TOp7BTMKDbUkOHMzDlVsCYWpyaFkKakrrO3HNXfSz4EeJaWwnBScRmgQSTaWHScXVHBUFXTvShrCW8uryBYFcg==}
+  /i18next/22.0.5:
+    resolution: {integrity: sha512-N2AXKCLHzv1ClfLqiwbAPJHClovfRv9iplySiZ/S3LfQ7PNjkVEkVpFbhCXDsPhQd6kLp6DKjbzpowniE8Mdiw==}
     dependencies:
       '@babel/runtime': 7.19.4
     dev: false
@@ -8273,7 +8273,7 @@ packages:
       react: 18.2.0
       scheduler: 0.23.0
 
-  /react-i18next/12.0.0_n3kmhq4527torfjiti537juzwy:
+  /react-i18next/12.0.0_e52s5leb62x5eudkmfoztpifde:
     resolution: {integrity: sha512-/O7N6aIEAl1FaWZBNvhdIo9itvF/MO/nRKr9pYqRc9LhuC1u21SlfwpiYQqvaeNSEW3g3qUXLREOWMt+gxrWbg==}
     peerDependencies:
       i18next: '>= 19.0.0'
@@ -8288,7 +8288,7 @@ packages:
     dependencies:
       '@babel/runtime': 7.19.0
       html-parse-stringify: 3.0.1
-      i18next: 22.0.4
+      i18next: 22.0.5
       react: 18.2.0
       react-dom: 18.2.0_react@18.2.0
     dev: false