From 106d70c0540c634d6811da87c74f11fc521c939e Mon Sep 17 00:00:00 2001 From: zio Date: Sat, 11 Jul 2026 10:38:40 +0900 Subject: [PATCH] =?UTF-8?q?chore(deploy):=20CMS=20=ED=81=B4=EB=A6=B0=20?= =?UTF-8?q?=EC=9E=AC=EB=8F=99=EA=B8=B0=ED=99=94=20+=20Claude=20provider=20?= =?UTF-8?q?flip?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - workspace/guardia-cms 정본을 repos에 클린 재동기화(부분 auto-sync 발산 해소, 컴파일 가능 상태 회복) - AI provider flip: db/105_ai_provider_claude.sql (cms_setting UPSERT ai.provider=claude, 멱등) - application.yml schema-locations 에 105 등재 (104 시드 이후 실행) - stale 프론트 번들 2종 정리(빌드 재생성분) - Claude 키 미설정/실패 시 AiTextRouter Ollama 자동 폴백(무중단·무회귀) Co-Authored-By: Claude Opus 4.8 (1M context) --- backend/pom.xml | 6 + .../zioinfo/cms/admin/AdminController.java | 6 + .../zioinfo/cms/admin/AdminUserService.java | 11 + .../cms/admin/mapper/AdminUserMapper.java | 3 + .../java/com/zioinfo/cms/ai/AiService.java | 16 +- .../java/com/zioinfo/cms/ai/OllamaClient.java | 21 +- .../com/zioinfo/cms/auth/AuthController.java | 79 ++- .../com/zioinfo/cms/auth/AuthService.java | 193 ++++++- .../java/com/zioinfo/cms/auth/CmsUser.java | 20 + .../java/com/zioinfo/cms/auth/JwtFilter.java | 5 +- .../java/com/zioinfo/cms/auth/JwtUtil.java | 41 ++ .../zioinfo/cms/auth/mapper/UserMapper.java | 62 +++ .../zioinfo/cms/config/SecurityConfig.java | 9 + backend/src/main/resources/application.yml | 44 +- .../resources/db/105_ai_provider_claude.sql | 34 ++ .../main/resources/mapper/AdminUserMapper.xml | 5 + .../src/main/resources/mapper/UserMapper.xml | 82 ++- .../static/assets/index-DzayOpa6.css | 1 - .../resources/static/assets/index-qhjCbNFY.js | 487 ------------------ backend/src/main/resources/static/index.html | 5 +- frontend/index.html | 1 + frontend/src/App.tsx | 51 ++ frontend/src/api/client.ts | 21 + frontend/src/components/Header.tsx | 6 +- frontend/src/components/Sidebar.tsx | 49 +- frontend/src/main.tsx | 11 +- frontend/src/pages/Login.tsx | 189 ++++++- frontend/src/pages/UserManagement.tsx | 8 +- 28 files changed, 921 insertions(+), 545 deletions(-) create mode 100644 backend/src/main/resources/db/105_ai_provider_claude.sql delete mode 100644 backend/src/main/resources/static/assets/index-DzayOpa6.css delete mode 100644 backend/src/main/resources/static/assets/index-qhjCbNFY.js diff --git a/backend/pom.xml b/backend/pom.xml index fa51181..8fc8009 100644 --- a/backend/pom.xml +++ b/backend/pom.xml @@ -42,6 +42,9 @@ org.postgresqlpostgresql${postgresql.version} + + dev.samstevens.totptotp1.7.1 + io.jsonwebtokenjjwt-api${jjwt.version} io.jsonwebtokenjjwt-impl${jjwt.version}runtime @@ -60,6 +63,9 @@ org.springframework.bootspring-boot-starter-webflux + + org.duckdbduckdb_jdbc1.1.3 + org.springframework.bootspring-boot-starter-testtest org.springframework.securityspring-security-testtest diff --git a/backend/src/main/java/com/zioinfo/cms/admin/AdminController.java b/backend/src/main/java/com/zioinfo/cms/admin/AdminController.java index 1b0254e..0ecaac0 100644 --- a/backend/src/main/java/com/zioinfo/cms/admin/AdminController.java +++ b/backend/src/main/java/com/zioinfo/cms/admin/AdminController.java @@ -56,6 +56,12 @@ public class AdminController { return ApiResponse.ok(userService.resetPassword(id, req.password())); } + /** 관리자 OTP 초기화(사용자 관리 화면 버튼) — OTP 시크릿 NULL → 다음 로그인 시 QR 재등록 유도. */ + @PostMapping("/users/{id}/otp-reset") + public ApiResponse resetOtp(@PathVariable Long id) { + return ApiResponse.ok(userService.resetOtp(id)); + } + @DeleteMapping("/users/{id}") public ApiResponse deleteUser(@PathVariable Long id, Authentication auth) { String currentUsername = auth != null ? auth.getName() : null; diff --git a/backend/src/main/java/com/zioinfo/cms/admin/AdminUserService.java b/backend/src/main/java/com/zioinfo/cms/admin/AdminUserService.java index 99bb365..0cfb1ff 100644 --- a/backend/src/main/java/com/zioinfo/cms/admin/AdminUserService.java +++ b/backend/src/main/java/com/zioinfo/cms/admin/AdminUserService.java @@ -85,6 +85,17 @@ public class AdminUserService { return UserDto.from(user); } + /** + * 관리자 OTP 초기화(사용자 관리 화면 버튼). 시크릿 폐기 + otp_enabled=false → + * 대상 사용자는 다음 로그인부터 OTP_SETUP(QR 재등록) 플로우를 탄다. 시크릿은 응답/로그 미노출. + */ + public UserDto resetOtp(Long id) { + CmsUser user = require(id); + mapper.resetOtp(id); + auditService.log("USER_OTP_RESET", user.getUsername(), "OTP 초기화(재등록 유도)"); + return UserDto.from(user); + } + public void delete(Long id, String currentUsername) { CmsUser user = require(id); if (user.getUsername().equals(currentUsername)) { diff --git a/backend/src/main/java/com/zioinfo/cms/admin/mapper/AdminUserMapper.java b/backend/src/main/java/com/zioinfo/cms/admin/mapper/AdminUserMapper.java index fc77e8e..109e00d 100644 --- a/backend/src/main/java/com/zioinfo/cms/admin/mapper/AdminUserMapper.java +++ b/backend/src/main/java/com/zioinfo/cms/admin/mapper/AdminUserMapper.java @@ -31,5 +31,8 @@ public interface AdminUserMapper { /** 활성 SUPERADMIN 계정 수 (마지막 관리자 삭제/강등 방지용). */ int countSuperAdmins(); + /** 관리자 OTP 초기화: 시크릿 폐기 + otp_enabled=false → 다음 로그인 시 QR 재등록 유도. */ + int resetOtp(@Param("id") Long id); + int countByUsername(@Param("username") String username); } diff --git a/backend/src/main/java/com/zioinfo/cms/ai/AiService.java b/backend/src/main/java/com/zioinfo/cms/ai/AiService.java index 495e1cc..ff993ab 100644 --- a/backend/src/main/java/com/zioinfo/cms/ai/AiService.java +++ b/backend/src/main/java/com/zioinfo/cms/ai/AiService.java @@ -1,5 +1,6 @@ package com.zioinfo.cms.ai; +import com.zioinfo.cms.ai.service.AiTextRouter; import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.springframework.stereotype.Service; @@ -23,7 +24,8 @@ import java.util.regex.Pattern; @RequiredArgsConstructor public class AiService { - private final OllamaClient ollama; + private final OllamaClient ollama; // 비전(vision) 경로 전용 + 가용성 핑 유지 + private final AiTextRouter aiRouter; // 텍스트 생성은 provider 라우팅(Claude↔Ollama) 경유 // 욕설/스팸 폴백 사전 (규칙기반) private static final Set PROFANITY = Set.of( @@ -41,7 +43,7 @@ public class AiService { "당신은 e-커머스 콘텐츠 작가입니다. 유형: %s, 주제: %s, 톤: %s. " + "한국어로 자연스러운 마케팅 초안을 200자 내외로 작성하세요. 설명 없이 본문만 출력.", kind, topic, tone == null ? "친근함" : tone); - String out = ollama.generate(prompt); + String out = aiRouter.generateText(prompt); if (out != null && !out.isBlank()) { return out; } @@ -85,7 +87,7 @@ public class AiService { "다음 콘텐츠의 SEO를 개선하세요. 제목: %s\\n본문: %s\\n" + "'META: ...\\nKEYWORDS: a,b,c\\nSCORE: 0~100' 형식으로 한국어 출력.", title, truncate(body, 800)); - String out = ollama.generate(prompt); + String out = aiRouter.generateText(prompt); if (out != null && !out.isBlank()) { result.put("metaDescription", firstNonBlank(extractLine(out, "META:"), truncate(body, 150))); String kw = extractLine(out, "KEYWORDS:"); @@ -108,7 +110,7 @@ public class AiService { String prompt = String.format( "다음 텍스트를 %s 로케일 언어로 자연스럽게 번역하세요. 번역문만 출력:\\n%s", targetLocale, truncate(text, 1500)); - String out = ollama.generate(prompt); + String out = aiRouter.generateText(prompt); if (out != null && !out.isBlank()) { return out; } @@ -136,7 +138,7 @@ public class AiService { String joined = truncate(String.join("\\n- ", reviews), 1500); String prompt = "다음 리뷰들을 한 문장으로 요약하고 감성(POSITIVE/NEGATIVE/NEUTRAL)을 판정하세요. " + "'SUMMARY: ...\\nSENTIMENT: ...' 형식:\\n- " + joined; - String out = ollama.generate(prompt); + String out = aiRouter.generateText(prompt); if (out != null && !out.isBlank()) { result.put("summary", firstNonBlank(extractLine(out, "SUMMARY:"), out)); String s = extractLine(out, "SENTIMENT:").toUpperCase(); @@ -162,7 +164,7 @@ public class AiService { public List searchKeywords(String naturalQuery) { if (naturalQuery == null || naturalQuery.isBlank()) return List.of(); String prompt = "다음 검색 의도에서 핵심 키워드 3~5개를 쉼표로만 출력:\\n" + naturalQuery; - String out = ollama.generate(prompt); + String out = aiRouter.generateText(prompt); if (out != null && !out.isBlank()) { String line = out.replaceAll("[\\n\\r]", " ").trim(); List kws = new ArrayList<>(); @@ -190,7 +192,7 @@ public class AiService { } String prompt = "다음 UGC가 욕설/스팸/부적절한지 판정하세요. " + "'DECISION: APPROVE|REJECT|REVIEW\\nRISK: 0~1\\nREASON: ...' 형식 한국어:\\n" + truncate(text, 800); - String out = ollama.generate(prompt); + String out = aiRouter.generateText(prompt); if (out != null && !out.isBlank()) { String d = extractLine(out, "DECISION:").toUpperCase(); String decision = d.contains("REJECT") ? "REJECT" : d.contains("REVIEW") ? "REVIEW" : "APPROVE"; diff --git a/backend/src/main/java/com/zioinfo/cms/ai/OllamaClient.java b/backend/src/main/java/com/zioinfo/cms/ai/OllamaClient.java index ca25db7..5d31027 100644 --- a/backend/src/main/java/com/zioinfo/cms/ai/OllamaClient.java +++ b/backend/src/main/java/com/zioinfo/cms/ai/OllamaClient.java @@ -34,17 +34,28 @@ public class OllamaClient { this.visionModel = visionModel; } - /** 프롬프트로 텍스트 생성. 실패 시 빈 문자열 반환(예외 없음). */ - @SuppressWarnings("unchecked") + /** 프롬프트로 텍스트 생성(기본 텍스트 모델). 실패 시 빈 문자열 반환(예외 없음). */ public String generate(String prompt) { + return generate(prompt, textModel); + } + + /** + * 지정 모델로 텍스트 생성. 실패 시 빈 문자열 반환(예외 없음). + * + *

{@code AiTextRouter}·{@code AiConfigService} 가 provider(qwen3/deepseek/glm/ollama)별 소형 모델을 + * 지정 호출하기 위한 진입점. model 이 비었으면 서버 기본 텍스트 모델로 폴백한다. + */ + @SuppressWarnings("unchecked") + public String generate(String prompt, String model) { + String useModel = (model == null || model.isBlank()) ? textModel : model.trim(); try { - Map body = Map.of("model", textModel, "prompt", prompt, "stream", false); + Map body = Map.of("model", useModel, "prompt", prompt, "stream", false); Map res = builder.baseUrl(ollamaUrl).build() .post().uri("/api/generate") .bodyValue(body) .retrieve() .bodyToMono(Map.class) - .timeout(Duration.ofSeconds(30)) + .timeout(Duration.ofSeconds(120)) .map(m -> (Map) m) .block(); if (res == null) return ""; @@ -70,7 +81,7 @@ public class OllamaClient { .bodyValue(body) .retrieve() .bodyToMono(Map.class) - .timeout(Duration.ofSeconds(45)) + .timeout(Duration.ofSeconds(120)) .map(m -> (Map) m) .block(); if (res == null) return ""; diff --git a/backend/src/main/java/com/zioinfo/cms/auth/AuthController.java b/backend/src/main/java/com/zioinfo/cms/auth/AuthController.java index 6ee58c6..44d5959 100644 --- a/backend/src/main/java/com/zioinfo/cms/auth/AuthController.java +++ b/backend/src/main/java/com/zioinfo/cms/auth/AuthController.java @@ -1,22 +1,52 @@ package com.zioinfo.cms.auth; +import com.zioinfo.cms.auth.dto.ChangePasswordRequest; +import com.zioinfo.cms.auth.dto.OtpConfirmRequest; +import com.zioinfo.cms.auth.dto.OtpSetupResponse; +import com.zioinfo.cms.auth.dto.OtpVerifyRequest; import com.zioinfo.cms.common.ApiResponse; +import com.zioinfo.cms.uiws.auth.OtpAuthService; +import com.zioinfo.cms.uiws.auth.TwoFactorService; +import com.zioinfo.cms.uiws.common.UiwsApiException; +import com.zioinfo.cms.uiws.common.UiwsErrorCode; +import jakarta.validation.Valid; import lombok.RequiredArgsConstructor; import org.springframework.web.bind.annotation.*; import java.util.Map; +/** + * CMS 인증 컨트롤러. + * - /login: 2FA off 면 { twofa:"false", token }, OTP on 이면 { twofa:"true", verifyToken, verifyMethod, secret?, qrImage? }. + * - /verify: (UIWS 이메일 2FA 이식) verify-token + 인증코드 → access/refresh 발급. + * - /verify-otp: (TOTP 이식) verify-token + 6자리 → access/refresh 발급(최초 로그인이면 등록 확정). + * 기존 클라이언트(2FA off)는 token 응답 보존 → 회귀 0. + */ @RestController @RequestMapping("/api/cms/auth") @RequiredArgsConstructor public class AuthController { private final AuthService authService; + private final TwoFactorService twoFactorService; + private final OtpAuthService otpAuthService; + private final JwtUtil jwtUtil; @PostMapping("/login") public ApiResponse> login(@RequestBody LoginRequest req) { - String token = authService.login(req.username(), req.password()); - return ApiResponse.ok(Map.of("token", token, "type", "Bearer")); + return ApiResponse.ok(authService.login(req.username(), req.password())); + } + + /** UIWS 이메일 2FA 이식: 2차 인증 코드 검증 → access/refresh 발급. */ + @PostMapping("/verify") + public ApiResponse> verify(@RequestBody VerifyRequest req) { + return ApiResponse.ok(twoFactorService.verify(req.verifyToken(), req.code())); + } + + /** TOTP 이식: 로그인 2단계 6자리 검증 → access/refresh 발급(최초 로그인이면 등록 확정). */ + @PostMapping("/verify-otp") + public ApiResponse> verifyOtp(@Valid @RequestBody OtpVerifyRequest req) { + return ApiResponse.ok(otpAuthService.verifyOtp(req.verifyToken(), req.code())); } @GetMapping("/me") @@ -25,5 +55,50 @@ public class AuthController { return ApiResponse.ok(authService.me(token)); } + // ── 마이페이지: OTP 등록/재설정/해제 + 비밀번호 변경 (본인, access 토큰 필요) ────────── + + /** 마이페이지 OTP 등록/재설정 시작 → { secret, otpAuthUri, qrImage }(이 응답에서만 시크릿/QR 노출). */ + @PostMapping("/otp/setup") + public ApiResponse otpSetup(@RequestHeader("Authorization") String header) { + return ApiResponse.ok(otpAuthService.setup(requireUser(header))); + } + + /** 마이페이지 OTP 확인·활성화(앱 6자리 코드). */ + @PostMapping("/otp/confirm") + public ApiResponse> otpConfirm(@RequestHeader("Authorization") String header, + @Valid @RequestBody OtpConfirmRequest req) { + otpAuthService.confirm(requireUser(header), req.code()); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** 마이페이지 OTP 해제. */ + @PostMapping("/otp/disable") + public ApiResponse> otpDisable(@RequestHeader("Authorization") String header) { + otpAuthService.disable(requireUser(header)); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** 마이페이지 비밀번호 변경(현재 비번 검증 + BCrypt). 새 비번은 응답/로그 미포함. */ + @PostMapping("/change-password") + public ApiResponse> changePassword(@RequestHeader("Authorization") String header, + @Valid @RequestBody ChangePasswordRequest req) { + authService.changePassword(requireUser(header), req); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** + * Authorization 헤더에서 인증 사용자를 해석한다. verify-token(2fa 단계용)은 거부. + * (/api/cms/auth/** 는 permitAll 이라 필터 인증이 없으므로 여기서 access 토큰을 명시 검증.) + */ + private String requireUser(String header) { + String token = header == null ? "" : header.replace("Bearer ", "").trim(); + if (token.isEmpty() || jwtUtil.isVerifyToken(token) || !jwtUtil.isValid(token)) { + throw new UiwsApiException(UiwsErrorCode.UNAUTHORIZED); + } + return jwtUtil.getUsername(token); + } + record LoginRequest(String username, String password) {} + + record VerifyRequest(String verifyToken, String code) {} } diff --git a/backend/src/main/java/com/zioinfo/cms/auth/AuthService.java b/backend/src/main/java/com/zioinfo/cms/auth/AuthService.java index 16c5ccf..0435de4 100644 --- a/backend/src/main/java/com/zioinfo/cms/auth/AuthService.java +++ b/backend/src/main/java/com/zioinfo/cms/auth/AuthService.java @@ -1,30 +1,102 @@ package com.zioinfo.cms.auth; +import com.zioinfo.cms.admin.AuditService; +import com.zioinfo.cms.auth.dto.AuthHelperResult; +import com.zioinfo.cms.auth.dto.ChangePasswordRequest; +import com.zioinfo.cms.auth.dto.FindIdRequest; +import com.zioinfo.cms.auth.dto.FindIdResponse; +import com.zioinfo.cms.auth.dto.ResetPasswordRequest; +import com.zioinfo.cms.auth.dto.SignupRequest; import com.zioinfo.cms.auth.mapper.UserMapper; +import com.zioinfo.cms.uiws.auth.OtpAuthService; +import com.zioinfo.cms.uiws.auth.TwoFactorService; +import com.zioinfo.cms.uiws.common.UiwsApiException; +import com.zioinfo.cms.uiws.common.UiwsErrorCode; +import com.zioinfo.cms.uiws.common.mail.MailSender; import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.stereotype.Service; +import org.springframework.transaction.annotation.Transactional; +import java.security.SecureRandom; import java.util.HashMap; import java.util.Map; +/** + * CMS 인증 서비스. + * - 기존 단일 JWT 로그인 보존(2FA off 또는 미설정 시 회귀 0). + * - UIWS 2FA 레이어(이메일 코드) 추가: 2FA on 이면 1차 통과 후 verify-token + 이메일코드 발급. + * 실패 누적 max-login-fail 회 시 계정 잠금. + */ +@Slf4j @Service @RequiredArgsConstructor public class AuthService { + private static final SecureRandom RANDOM = new SecureRandom(); + /** 임시 비밀번호 문자셋(혼동 문자 0/O/1/l/I 제외). */ + private static final String TMP_PW_CHARS = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnpqrstuvwxyz23456789@#$%"; + private final UserMapper userMapper; private final PasswordEncoder passwordEncoder; private final JwtUtil jwtUtil; + private final TwoFactorService twoFactorService; + private final OtpAuthService otpAuthService; + private final MailSender mailSender; + private final AuditService auditService; - public String login(String username, String password) { + /** + * 1차 로그인. 2FA 활성 시 verify-token + 이메일코드 흐름으로 분기, + * 비활성 시 기존처럼 access 토큰 즉시 발급. + * + * @return 2FA off: { twofa:"false", token, type } + * 2FA on : { twofa:"true", verifyToken, step:"EMAIL", maskedEmail } + */ + public Map login(String username, String password) { CmsUser user = userMapper.findByUsername(username); + + // 잠금 우선 차단(존재하는 계정에 한해 잠금 메시지 — 존재 여부 누설 최소화) + if (user != null && twoFactorService.isLocked(user)) { + throw new UiwsApiException(UiwsErrorCode.ACCOUNT_LOCKED); + } if (user == null || !user.isActive()) { throw new RuntimeException("ERR-AUTH-001: 존재하지 않거나 비활성 계정"); } + // 회원가입 승인 게이트(로그인 보조 이식): 미승인 계정은 비번 일치 전에 차단. + if (Boolean.FALSE.equals(user.getApproved())) { + throw new RuntimeException("ERR-AUTH-003: 승인 대기 중인 계정입니다. 관리자 승인 후 이용 가능합니다."); + } if (!passwordEncoder.matches(password, user.getPasswordHash())) { + // 2FA(OTP 또는 이메일) 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지. + if (otpAuthService.isEnabled() || twoFactorService.isEnabled()) { + twoFactorService.recordLoginFailure(username); + CmsUser after = userMapper.findByUsername(username); + if (after != null && Boolean.TRUE.equals(after.getLocked())) { + throw new UiwsApiException(UiwsErrorCode.ACCOUNT_LOCKED); + } + } throw new RuntimeException("ERR-AUTH-002: 비밀번호 불일치"); } - return jwtUtil.generate(username, user.getRole()); + + // 비밀번호 검증 통과 — 2단계 우선순위: OTP > 이메일코드 > 단일 로그인 + if (otpAuthService.isEnabled()) { + // { twofa:true, verifyToken, verifyMethod:(OTP|OTP_SETUP), secret?, otpAuthUri?, qrImage? } + return otpAuthService.beginOtp(user); + } + if (twoFactorService.isEnabled()) { + Map step1 = twoFactorService.beginTwoFactor(user); + return Map.of( + "twofa", "true", + "verifyToken", step1.get("verifyToken"), + "step", step1.get("step"), + "maskedEmail", step1.getOrDefault("maskedEmail", "")); + } + + // 2FA 비활성 — 기존 단일 로그인 흐름(회귀 0) + userMapper.resetLoginFail(username); + String token = jwtUtil.generate(username, user.getRole()); + return Map.of("twofa", "false", "token", token, "type", "Bearer"); } public Map me(String token) { @@ -37,4 +109,121 @@ public class AuthService { m.put("displayName", u != null ? u.getDisplayName() : username); return m; } + + // ── 로그인 보조 이식: 회원가입 / 아이디찾기 / 비밀번호 초기화 ─────────────────── + + /** + * 운영자 회원가입(승인 대기). username/email 중복 검사 후 approved=false·role=VIEWER 로 INSERT. + * 비밀번호는 BCrypt 저장. 활성/승인 전까지 로그인 차단(AuthService.login 의 승인 게이트). + */ + @Transactional + public AuthHelperResult signup(SignupRequest req) { + if (req.username() == null || req.username().isBlank() + || req.password() == null || req.password().length() < 4 + || req.email() == null || req.email().isBlank()) { + return new AuthHelperResult(false, "아이디·비밀번호(4자 이상)·이메일은 필수입니다."); + } + if (userMapper.countByUsername(req.username()) > 0) { + return new AuthHelperResult(false, "이미 사용 중인 아이디입니다."); + } + if (userMapper.countByEmail(req.email()) > 0) { + return new AuthHelperResult(false, "이미 등록된 이메일입니다."); + } + CmsUser u = new CmsUser(); + u.setUsername(req.username()); + u.setPasswordHash(passwordEncoder.encode(req.password())); + u.setDisplayName(req.displayName() != null && !req.displayName().isBlank() + ? req.displayName() : req.username()); + u.setEmail(req.email()); + userMapper.signup(u); + log.info("[auth-helper] signup pending approval: username={}", req.username()); + return new AuthHelperResult(true, "가입 신청이 접수되었습니다. 관리자 승인 후 로그인할 수 있습니다."); + } + + /** + * 아이디 찾기: 표시명+이메일 동시 일치 운영자 1건 조회. username 은 부분 마스킹 후 반환. + * 미발견 시 found=false(원문 username 절대 미노출). + */ + public FindIdResponse findId(FindIdRequest req) { + if (req.displayName() == null || req.displayName().isBlank() + || req.email() == null || req.email().isBlank()) { + return new FindIdResponse(false, ""); + } + CmsUser u = userMapper.findByDisplayNameAndEmail(req.displayName(), req.email()); + if (u == null) { + return new FindIdResponse(false, ""); + } + return new FindIdResponse(true, maskUsername(u.getUsername())); + } + + /** + * 비밀번호 초기화: username+email 일치 검증 → 임시비번 생성·BCrypt 저장·잠금/실패카운트 해제. + * 임시비번은 메일(미설정 시 LogMailSender 로그)로만 전달. API 응답·로그 메시지에 비번 미노출. + * 대상 미존재여도 success=true(계정 열거 방지). + */ + @Transactional + public AuthHelperResult resetPassword(ResetPasswordRequest req) { + final String okMsg = "임시 비밀번호를 등록된 이메일로 발송했습니다. 메일을 확인하세요."; + if (req.username() == null || req.username().isBlank() + || req.email() == null || req.email().isBlank()) { + return new AuthHelperResult(false, "아이디와 이메일을 모두 입력하세요."); + } + CmsUser u = userMapper.findByUsernameAndEmail(req.username(), req.email()); + if (u == null) { + // 존재 여부 누설 방지 — 동일 성공 메시지 반환(실제 발송 없음). + log.info("[auth-helper] reset-password no match (suppressed): username={}", req.username()); + return new AuthHelperResult(true, okMsg); + } + String tempPw = generateTempPassword(); + userMapper.updatePasswordHash(req.username(), passwordEncoder.encode(tempPw)); + + String subject = "[GUARDiA CMS] 임시 비밀번호 안내"; + String body = String.format( + "안녕하세요 %s 님,\n임시 비밀번호는 [%s] 입니다.\n로그인 후 즉시 비밀번호를 변경하세요.", + u.getDisplayName() != null ? u.getDisplayName() : u.getUsername(), tempPw); + // 메일 본문에만 임시비번 포함. mailSender 미설정 환경은 LogMailSender 폴백(서버 로그). + mailSender.send(u.getEmail(), subject, body); + log.info("[auth-helper] reset-password issued temp pw (sent via mail/log): username={}", req.username()); + return new AuthHelperResult(true, okMsg); + } + + /** + * 마이페이지 비밀번호 변경(현재 비밀번호 검증 + BCrypt 저장). UIWS changePassword 미러. + * 현재 비번 불일치 → PASSWORD_MISMATCH, 기존과 동일 → PASSWORD_SAME_AS_OLD. + * 새 비밀번호 평문은 로그/응답/감사에 절대 기록하지 않는다(보안 불변규칙). + */ + @Transactional + public void changePassword(String username, ChangePasswordRequest req) { + CmsUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + if (!passwordEncoder.matches(req.currentPassword(), user.getPasswordHash())) { + throw new UiwsApiException(UiwsErrorCode.PASSWORD_MISMATCH); + } + if (passwordEncoder.matches(req.newPassword(), user.getPasswordHash())) { + throw new UiwsApiException(UiwsErrorCode.PASSWORD_SAME_AS_OLD); + } + userMapper.updatePasswordHash(username, passwordEncoder.encode(req.newPassword())); + auditService.log(username, "PASSWORD_CHANGE", username, "본인 비밀번호 변경"); + } + + private static String generateTempPassword() { + StringBuilder sb = new StringBuilder(10); + for (int i = 0; i < 10; i++) { + sb.append(TMP_PW_CHARS.charAt(RANDOM.nextInt(TMP_PW_CHARS.length()))); + } + return sb.toString(); + } + + /** username 부분 마스킹: 앞 2자만 노출(예: admin → ad***). 2자 이하는 첫 글자만. */ + private static String maskUsername(String username) { + if (username == null || username.isBlank()) { + return ""; + } + if (username.length() <= 2) { + return username.charAt(0) + "*"; + } + return username.substring(0, 2) + "*".repeat(Math.max(1, username.length() - 2)); + } } diff --git a/backend/src/main/java/com/zioinfo/cms/auth/CmsUser.java b/backend/src/main/java/com/zioinfo/cms/auth/CmsUser.java index e040ce7..36a1c87 100644 --- a/backend/src/main/java/com/zioinfo/cms/auth/CmsUser.java +++ b/backend/src/main/java/com/zioinfo/cms/auth/CmsUser.java @@ -18,4 +18,24 @@ public class CmsUser { private String role; private boolean active; private LocalDateTime createdAt; + + // ── UIWS 2FA 이식 컬럼 (cms_user ALTER, 91_uiws_port.sql) ─────────────────── + /** 운영자 이메일(2FA 인증코드 발송 대상). 기존 cms_user 미보유 → ALTER 로 추가. */ + private String email; + /** 이메일 인증코드(6자리). 발급 후 verify 단계에서 검증. API 응답에는 절대 미포함. */ + private String emailVerifyCode; + /** 인증코드 만료시각. */ + private LocalDateTime emailVerifyExpire; + /** 로그인 실패 누적 횟수(기본 0). max-login-fail 도달 시 locked. */ + private Integer loginFailCount; + /** 계정 잠금 여부(기본 false). */ + private Boolean locked; + /** TOTP 시크릿(UIWS OTP 경로). 등록 확정 전 보류 시크릿도 여기 저장. API 응답에 절대 미포함. */ + private String otpSecret; + /** OTP 등록 확정 여부(기본 false). 최초 로그인 verify 성공 시 true 로 확정(멱등). */ + private Boolean otpEnabled; + + // ── 로그인 보조 이식(회원가입 승인 게이트) cms_user.approved ─────────────── + /** 회원가입 승인 여부(기본 true). 신규 가입자는 false → SUPERADMIN 승인 전 로그인 차단. */ + private Boolean approved; } diff --git a/backend/src/main/java/com/zioinfo/cms/auth/JwtFilter.java b/backend/src/main/java/com/zioinfo/cms/auth/JwtFilter.java index f4b1c8c..a70bc1d 100644 --- a/backend/src/main/java/com/zioinfo/cms/auth/JwtFilter.java +++ b/backend/src/main/java/com/zioinfo/cms/auth/JwtFilter.java @@ -26,7 +26,10 @@ public class JwtFilter extends OncePerRequestFilter { String header = req.getHeader("Authorization"); if (header != null && header.startsWith("Bearer ")) { String token = header.substring(7); - if (jwtUtil.isValid(token)) { + // 보안(UIWS 2FA): purpose=2fa verify-token 은 access 토큰이 아니다. + // 동일 서명키라 isValid()는 통과하므로 별도 차단하지 않으면 2차 인증 전 API 접근(2FA 우회)이 가능. + // → verify-token 은 인증 컨텍스트를 세우지 않고 무시한다(/api/cms/auth/verify 에서만 사용). + if (jwtUtil.isValid(token) && !jwtUtil.isVerifyToken(token)) { String username = jwtUtil.getUsername(token); String role = jwtUtil.getRole(token); var auth = new UsernamePasswordAuthenticationToken( diff --git a/backend/src/main/java/com/zioinfo/cms/auth/JwtUtil.java b/backend/src/main/java/com/zioinfo/cms/auth/JwtUtil.java index 81cd2f9..d683abb 100644 --- a/backend/src/main/java/com/zioinfo/cms/auth/JwtUtil.java +++ b/backend/src/main/java/com/zioinfo/cms/auth/JwtUtil.java @@ -34,6 +34,47 @@ public class JwtUtil { .compact(); } + /** + * UIWS 2FA 이식: 1차 로그인 통과 후 발급하는 단기 verify-token. + * purpose=2fa 클레임으로 access 토큰과 구분(verify-token 으로는 API 접근 불가). + */ + public String generateVerifyToken(String username, long validitySeconds) { + return Jwts.builder() + .subject(username) + .claim("purpose", "2fa") + .issuedAt(new Date()) + .expiration(new Date(System.currentTimeMillis() + validitySeconds * 1000L)) + .signWith(key()) + .compact(); + } + + /** verify-token 검증 후 username 반환. 유효하지 않거나 purpose!=2fa 면 null. */ + public String parseVerifyTokenUsername(String token) { + try { + Claims c = parse(token); + if (!"2fa".equals(c.get("purpose", String.class))) { + return null; + } + return c.getSubject(); + } catch (JwtException | IllegalArgumentException e) { + log.debug("verify-token 검증 실패: {}", e.getMessage()); + return null; + } + } + + /** + * 보안: 토큰이 2FA verify-token(purpose=2fa)인지 판별. + * JwtFilter 가 access 토큰만 인증 컨텍스트로 인정하도록 verify-token 을 걸러내는 데 사용. + * (2차 코드 검증 전 verify-token 으로 보호 API 접근 = 2FA 완전 우회 → 반드시 차단.) + */ + public boolean isVerifyToken(String token) { + try { + return "2fa".equals(parse(token).get("purpose", String.class)); + } catch (JwtException | IllegalArgumentException e) { + return false; + } + } + public Claims parse(String token) { return Jwts.parser().verifyWith(key()).build() .parseSignedClaims(token).getPayload(); diff --git a/backend/src/main/java/com/zioinfo/cms/auth/mapper/UserMapper.java b/backend/src/main/java/com/zioinfo/cms/auth/mapper/UserMapper.java index 3893a1d..f5e1873 100644 --- a/backend/src/main/java/com/zioinfo/cms/auth/mapper/UserMapper.java +++ b/backend/src/main/java/com/zioinfo/cms/auth/mapper/UserMapper.java @@ -3,6 +3,9 @@ package com.zioinfo.cms.auth.mapper; import com.zioinfo.cms.auth.CmsUser; import org.apache.ibatis.annotations.Mapper; import org.apache.ibatis.annotations.Param; +import org.apache.ibatis.annotations.Update; + +import java.time.LocalDateTime; @Mapper public interface UserMapper { @@ -10,4 +13,63 @@ public interface UserMapper { CmsUser findByUsername(@Param("username") String username); int insert(CmsUser user); + + // ── UIWS 2FA 이식: 실패 카운트/잠금/인증코드 갱신 (멱등 UPDATE) ─────────────── + + /** 로그인 성공 시 실패 카운트 초기화. */ + int resetLoginFail(@Param("username") String username); + + /** 로그인 실패 누적(+1) 및 임계 도달 시 잠금. */ + int incrementLoginFail(@Param("username") String username, @Param("maxFail") int maxFail); + + /** 1차 통과 시 이메일 인증코드/만료 저장(verify 단계에서 검증). */ + int saveEmailCode(@Param("username") String username, + @Param("code") String code, + @Param("expire") LocalDateTime expire); + + /** 2차 검증 성공 시 코드 폐기. */ + int clearEmailCode(@Param("username") String username); + + /** 관리자 잠금 해제(실패 카운트/잠금 초기화). */ + int unlock(@Param("username") String username); + + // ── 로그인 보조 이식: 회원가입 / 아이디찾기 / 비밀번호 초기화 ─────────────── + + /** username 존재 여부(회원가입 중복 검사). */ + int countByUsername(@Param("username") String username); + + /** email 존재 여부(회원가입 중복 검사 — 운영자 계정 한정). */ + int countByEmail(@Param("email") String email); + + /** + * 회원가입(승인 대기). approved=false·is_active=true·role=VIEWER 고정. + * 관리자 화면에서 활성/승인 전까지 로그인 차단. + */ + int signup(CmsUser user); + + /** 아이디찾기: 표시명(display_name)+이메일 일치 운영자 1건. */ + CmsUser findByDisplayNameAndEmail(@Param("displayName") String displayName, + @Param("email") String email); + + /** 비밀번호 초기화 대상 검증: username+email 동시 일치 운영자 1건. */ + CmsUser findByUsernameAndEmail(@Param("username") String username, + @Param("email") String email); + + /** 임시 비밀번호 적용 + 잠금/실패카운트 해제(초기화 시). */ + int updatePasswordHash(@Param("username") String username, + @Param("passwordHash") String passwordHash); + + // ── TOTP(OTP 2차 인증) 이식 (멱등 UPDATE, @Update — XML 미정의 신규 메서드) ───────── + + /** 보류 시크릿 저장(등록 확정 전). otp_enabled 은 건드리지 않는다(verify/confirm 에서 확정). */ + @Update("UPDATE cms_user SET otp_secret = #{secret} WHERE username = #{username}") + int updateOtpSecret(@Param("username") String username, @Param("secret") String secret); + + /** 등록 확정: otp_enabled=true (시크릿은 유지). */ + @Update("UPDATE cms_user SET otp_enabled = true WHERE username = #{username}") + int enableOtp(@Param("username") String username); + + /** 해제/초기화: 시크릿 폐기 + otp_enabled=false. (마이페이지 해제) */ + @Update("UPDATE cms_user SET otp_secret = NULL, otp_enabled = false WHERE username = #{username}") + int disableOtp(@Param("username") String username); } diff --git a/backend/src/main/java/com/zioinfo/cms/config/SecurityConfig.java b/backend/src/main/java/com/zioinfo/cms/config/SecurityConfig.java index 126987c..9643955 100644 --- a/backend/src/main/java/com/zioinfo/cms/config/SecurityConfig.java +++ b/backend/src/main/java/com/zioinfo/cms/config/SecurityConfig.java @@ -45,6 +45,9 @@ public class SecurityConfig { .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .authorizeHttpRequests(auth -> auth .requestMatchers("/api/cms/auth/**").permitAll() + // 로그인 보조 이식(회원가입/아이디찾기/비번초기화) — 로그인 전 무인증. + // 회원가입은 승인대기로 INSERT, 비번초기화는 임시비번을 메일/로그로만 전달(응답 무노출). + .requestMatchers("/api/auth/signup", "/api/auth/find-id", "/api/auth/reset-password").permitAll() .requestMatchers("/actuator/health").permitAll() .requestMatchers("/swagger-ui/**", "/v3/api-docs/**", "/api/cms/docs/**", "/api/cms/swagger/**").permitAll() @@ -62,6 +65,12 @@ public class SecurityConfig { .requestMatchers("/api/admin/audit").hasAnyRole("SUPERADMIN", "EDITOR") .requestMatchers("/api/admin/**").hasRole("SUPERADMIN") + // UIWS PublicLookup(가입화면 부서/회사 셀렉트박스용 공개 조회) — 로그인 전 GET 무인증. + // 조회 전용(부서명/회사명만) — 민감정보·자격증명 미포함. + .requestMatchers(HttpMethod.GET, "/api/public/**").permitAll() + // UIWS system(시스템관리·권한관리) 이식 — SUPERADMIN 전용. + .requestMatchers("/api/system/**").hasRole("SUPERADMIN") + // 콘텐츠/리소스 작성·수정·삭제 — AUTHOR 이상 (게시 승인/발행은 서비스 메서드에서 EDITOR+ 추가 가드) .requestMatchers(HttpMethod.POST, "/api/cms/**").hasAnyRole("SUPERADMIN", "EDITOR", "AUTHOR") .requestMatchers(HttpMethod.PUT, "/api/cms/**").hasAnyRole("SUPERADMIN", "EDITOR", "AUTHOR") diff --git a/backend/src/main/resources/application.yml b/backend/src/main/resources/application.yml index 9c2e494..8dbe7f0 100644 --- a/backend/src/main/resources/application.yml +++ b/backend/src/main/resources/application.yml @@ -9,10 +9,19 @@ spring: username: ${DB_USER:cms_user} password: ${DB_PASS:cms_pass2026} driver-class-name: org.postgresql.Driver + hikari: + # 공유 PostgreSQL max_connections 포화 방지(형제 솔루션 다수 동거) — 풀 캡 3. + maximum-pool-size: ${DB_POOL_MAX:3} sql: init: - mode: ${SQL_INIT_MODE:never} - schema-locations: classpath:db/schema.sql + # UIWS 이식: 91_uiws_port.sql(신규 tb_uiws_* + cms_user 2FA ALTER, 전부 멱등)만 부팅 시 적용. + # 기존 schema.sql 은 deploy_server 가 psql 로 별도 적용(비멱등 cms_setting/cms_i18n 시드 충돌 회피). + # 91_uiws_port.sql 단독은 완전 멱등 → mode:always 안전. continue-on-error 로 부분 실패 격리. + mode: ${SQL_INIT_MODE:always} + # 91=업무모듈+2FA ALTER, 92=system(시스템관리·권한관리) 이식, 93=OTP otp_enabled ALTER, 104=AI 플랫폼 설정 시드. 전부 멱등. + # 105_ai_provider_claude.sql: AI provider flip → claude (멱등 UPSERT, 104 이후 실행). + schema-locations: classpath:db/91_uiws_port.sql,classpath:db/92_uiws_system.sql,classpath:db/93_auth_otp.sql,classpath:db/104_seed_ai_config.sql,classpath:db/105_ai_provider_claude.sql + continue-on-error: true servlet: multipart: max-file-size: 20MB @@ -38,14 +47,41 @@ guardia: bi-url: ${BI_URL:http://localhost:8006} # 보안 불변 규칙: Ollama 온프레미스만 허용. 외부 AI API 절대 금지. ollama-url: ${OLLAMA_URL:http://localhost:11434} - ollama-text-model: ${OLLAMA_TEXT_MODEL:llama3} - ollama-vision-model: ${OLLAMA_VISION_MODEL:llava} + ollama-text-model: ${OLLAMA_TEXT_MODEL:llama3.2:1b} + ollama-vision-model: ${OLLAMA_VISION_MODEL:moondream} + # 로컬 임베디드 DuckDB — AI 피드백/추론 학습 저장소(솔루션별 격리). 서버 기본 경로. + duckdb: + path: ${CMS_DUCKDB_PATH:/opt/guardia-cms/data/cms_learning.duckdb} + # 중앙 guardia-rag 연동 (최신 AI 기법 배선 — 별개 레이어, 미가용 시 CMS 로컬 폴백). + # 보안 불변: 온프레미스(서버 내부 루프백) 전용. 외부 엔드포인트 지정 금지. + rag: + base-url: ${RAG_URL:http://127.0.0.1:8020} + timeout-ms: ${RAG_TIMEOUT_MS:120000} + enabled: ${RAG_ENABLED:true} + solution: cms crypto: secret: ${CMS_CRYPTO_SECRET:guardia-cms-aes-256-gcm-master-key-2026-zioinfo} jwt: secret: ${JWT_SECRET:guardia-cms-jwt-secret-2026-minimum-256bit-key-zioinfo} expiration: 86400000 +# UIWS 이식 모듈 설정 (com.zioinfo.cms.uiws.config.UiwsProperties = prefix cms.uiws) +cms: + uiws: + auth: + # 2FA 레이어 on/off. 기본 on. off 면 기존 단일 JWT 로그인 흐름 유지(회귀 0). + twofa-enabled: ${CMS_TWOFA_ENABLED:true} + # TOTP(OTP 2차 인증) on/off. 기본 on. 활성 시 로그인 2단계가 OTP(등록/검증) 경로 사용(이메일코드보다 우선). + otp-enabled: ${CMS_OTP_ENABLED:true} + verify-token-validity-seconds: 300 # 1차 통과 후 verify-token 5분 + email-code-validity-seconds: 300 # 이메일 인증코드 5분 + max-login-fail: 5 # 실패 5회 시 계정 잠금 + upload: + upload-dir: ${CMS_UIWS_UPLOAD_DIR:./uploads/uiws} + mail: + # 메일 발송 모드. log=LogMailSender 폴백(외부 호출 0, 코드는 로그에만). smtp 운영 시 별도 빈. + mode: ${CMS_MAIL_MODE:log} + logging: level: com.zioinfo.cms: DEBUG diff --git a/backend/src/main/resources/db/105_ai_provider_claude.sql b/backend/src/main/resources/db/105_ai_provider_claude.sql new file mode 100644 index 0000000..717e691 --- /dev/null +++ b/backend/src/main/resources/db/105_ai_provider_claude.sql @@ -0,0 +1,34 @@ +-- ===================================================================== +-- GUARDiA CMS — 105. AI provider flip → claude (멱등 UPSERT) +-- 대상 DB : cms_db (테이블 cms_setting — schema.sql 에서 생성, PK=key) +-- 적용 : application.yml spring.sql.init.mode=always + schema-locations 에 본 파일 등재 +-- (104_seed_ai_config.sql 이후 실행 — cms_setting 테이블 선행 생성 보장). +-- mode:always 재실행 안전(ON CONFLICT DO UPDATE — 멱등). +-- 설명 : 런타임 AI provider 를 claude 로 전환(활성화 스위치). +-- 104 시드는 provider 기본값을 'ollama' 로만 INSERT(ON CONFLICT DO NOTHING)하므로, +-- 서버에 ai.provider 행이 'ollama' 인 상태에서 Claude 경로가 실효되지 않는다. +-- 본 파일이 UPSERT 로 provider='claude' 를 강제 → AiConfigService.isClaudeActive() +-- 3조건(provider=claude · ANTHROPIC_API_KEY 설정 · ai.enabled=true) 충족. +-- 폴백 : Claude 키 미설정/실패 시 AiTextRouter 가 Ollama 로 자동 폴백(무중단·무회귀). +-- provider=claude 는 '활성화'일 뿐 강제 아님 — 키 없으면 기존 Ollama 동작 유지. +-- 보안 : Claude API 키/시크릿/IP/비밀번호 일절 미포함(키는 서버 env ANTHROPIC_API_KEY 로만). +-- 근거 : _workspace/portall/{03_claude_switch_delta.md,04_server_check.md} +-- (cms 설정테이블 컬럼 key/value — crm 의 setting_key/setting_value 와 상이). +-- ===================================================================== + +SET client_encoding = 'UTF8'; + +-- cms_setting 은 schema.sql/104 에서 선행 생성됨. 안전을 위해 존재 보장(멱등, schema.sql 정의와 동일). +CREATE TABLE IF NOT EXISTS cms_setting ( + key VARCHAR(200) PRIMARY KEY, + value TEXT, + updated_at TIMESTAMP DEFAULT NOW() +); + +-- 행 없으면 INSERT, 있으면(ollama 등) UPDATE — 멱등 flip. +INSERT INTO cms_setting (key, value, updated_at) +VALUES ('ai.provider', 'claude', NOW()) +ON CONFLICT (key) +DO UPDATE SET value = 'claude', updated_at = NOW(); + +-- end 105_ai_provider_claude.sql diff --git a/backend/src/main/resources/mapper/AdminUserMapper.xml b/backend/src/main/resources/mapper/AdminUserMapper.xml index e2afc31..4efbfbc 100644 --- a/backend/src/main/resources/mapper/AdminUserMapper.xml +++ b/backend/src/main/resources/mapper/AdminUserMapper.xml @@ -53,4 +53,9 @@ SELECT COUNT(*) FROM cms_user WHERE username = #{username} + + + UPDATE cms_user SET otp_secret = NULL, otp_enabled = false WHERE id = #{id} + + diff --git a/backend/src/main/resources/mapper/UserMapper.xml b/backend/src/main/resources/mapper/UserMapper.xml index ef862ef..1c356d1 100644 --- a/backend/src/main/resources/mapper/UserMapper.xml +++ b/backend/src/main/resources/mapper/UserMapper.xml @@ -11,10 +11,21 @@ + + + + + + + + + + @@ -25,4 +36,73 @@ VALUES (#{username}, #{passwordHash}, #{displayName}, #{role}, #{active}) + + + + UPDATE cms_user SET login_fail_count = 0 WHERE username = #{username} + + + + UPDATE cms_user + SET login_fail_count = COALESCE(login_fail_count, 0) + 1, + locked = (COALESCE(login_fail_count, 0) + 1 >= #{maxFail}) + WHERE username = #{username} + + + + UPDATE cms_user + SET email_verify_code = #{code}, email_verify_expire = #{expire}, login_fail_count = 0 + WHERE username = #{username} + + + + UPDATE cms_user SET email_verify_code = NULL, email_verify_expire = NULL WHERE username = #{username} + + + + UPDATE cms_user SET locked = false, login_fail_count = 0 WHERE username = #{username} + + + + + + + + + + + INSERT INTO cms_user (username, password_hash, display_name, role, email, + is_active, approved, login_fail_count, locked) + VALUES (#{username}, #{passwordHash}, #{displayName}, 'VIEWER', #{email}, + true, false, 0, false) + + + + + + + + + UPDATE cms_user + SET password_hash = #{passwordHash}, locked = false, login_fail_count = 0 + WHERE username = #{username} + + diff --git a/backend/src/main/resources/static/assets/index-DzayOpa6.css b/backend/src/main/resources/static/assets/index-DzayOpa6.css deleted file mode 100644 index 5852e16..0000000 --- a/backend/src/main/resources/static/assets/index-DzayOpa6.css +++ /dev/null @@ -1 +0,0 @@ -*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.inset-0{top:0;right:0;bottom:0;left:0}.left-2\.5{left:.625rem}.top-2\.5{top:.625rem}.z-50{z-index:50}.col-span-1{grid-column:span 1 / span 1}.col-span-2{grid-column:span 2 / span 2}.col-span-3{grid-column:span 3 / span 3}.mb-1{margin-bottom:.25rem}.mb-1\.5{margin-bottom:.375rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.ml-1{margin-left:.25rem}.ml-2{margin-left:.5rem}.ml-auto{margin-left:auto}.mr-1{margin-right:.25rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-1\.5{margin-top:.375rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.line-clamp-2{overflow:hidden;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.contents{display:contents}.aspect-\[16\/6\]{aspect-ratio:16/6}.aspect-video{aspect-ratio:16 / 9}.h-1\.5{height:.375rem}.h-16{height:4rem}.h-6{height:1.5rem}.h-\[240px\]{height:240px}.h-full{height:100%}.h-screen{height:100vh}.max-h-48{max-height:12rem}.max-h-72{max-height:18rem}.max-h-\[50vh\]{max-height:50vh}.max-h-\[60vh\]{max-height:60vh}.max-h-\[90vh\]{max-height:90vh}.min-h-\[60px\]{min-height:60px}.min-h-screen{min-height:100vh}.w-1\.5{width:.375rem}.w-3\.5{width:.875rem}.w-32{width:8rem}.w-36{width:9rem}.w-40{width:10rem}.w-44{width:11rem}.w-52{width:13rem}.w-56{width:14rem}.w-6{width:1.5rem}.w-60{width:15rem}.w-\[360px\]{width:360px}.w-\[480px\]{width:480px}.w-\[760px\]{width:760px}.w-full{width:100%}.min-w-0{min-width:0px}.max-w-\[280px\]{max-width:280px}.max-w-\[360px\]{max-width:360px}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.cursor-pointer{cursor:pointer}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-12{grid-template-columns:repeat(12,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-5{grid-template-columns:repeat(5,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-0\.5{gap:.125rem}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.space-y-1\.5>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.375rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.375rem * var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem * var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.divide-y>:not([hidden])~:not([hidden]){--tw-divide-y-reverse: 0;border-top-width:calc(1px * calc(1 - var(--tw-divide-y-reverse)));border-bottom-width:calc(1px * var(--tw-divide-y-reverse))}.divide-edge\/50>:not([hidden])~:not([hidden]){border-color:#26304a80}.self-start{align-self:flex-start}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-wrap{white-space:pre-wrap}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-r{border-right-width:1px}.border-r-2{border-right-width:2px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-accent\/30{border-color:#3ddc974d}.border-amber-500\/30{border-color:#f59e0b4d}.border-brand{--tw-border-opacity: 1;border-color:rgb(0 160 200 / var(--tw-border-opacity, 1))}.border-brand\/30{border-color:#00a0c84d}.border-edge{--tw-border-opacity: 1;border-color:rgb(38 48 74 / var(--tw-border-opacity, 1))}.border-edge\/50{border-color:#26304a80}.border-emerald-500\/30{border-color:#10b9814d}.border-rose-500\/30{border-color:#f43f5e4d}.border-rose-500\/40{border-color:#f43f5e66}.border-sky-500\/30{border-color:#0ea5e94d}.border-slate-500\/30{border-color:#64748b4d}.border-slate-600\/30{border-color:#4755694d}.border-violet-500\/30{border-color:#8b5cf64d}.bg-accent{--tw-bg-opacity: 1;background-color:rgb(61 220 151 / var(--tw-bg-opacity, 1))}.bg-accent\/10{background-color:#3ddc971a}.bg-accent\/15{background-color:#3ddc9726}.bg-amber-500\/10{background-color:#f59e0b1a}.bg-amber-500\/15{background-color:#f59e0b26}.bg-black\/50{background-color:#00000080}.bg-brand{--tw-bg-opacity: 1;background-color:rgb(0 160 200 / var(--tw-bg-opacity, 1))}.bg-brand\/10{background-color:#00a0c81a}.bg-brand\/15{background-color:#00a0c826}.bg-card{--tw-bg-opacity: 1;background-color:rgb(26 34 52 / var(--tw-bg-opacity, 1))}.bg-emerald-500\/15{background-color:#10b98126}.bg-ink{--tw-bg-opacity: 1;background-color:rgb(11 15 23 / var(--tw-bg-opacity, 1))}.bg-panel{--tw-bg-opacity: 1;background-color:rgb(19 25 39 / var(--tw-bg-opacity, 1))}.bg-rose-500\/10{background-color:#f43f5e1a}.bg-rose-500\/15{background-color:#f43f5e26}.bg-rose-500\/90{background-color:#f43f5ee6}.bg-sky-500\/15{background-color:#0ea5e926}.bg-slate-500{--tw-bg-opacity: 1;background-color:rgb(100 116 139 / var(--tw-bg-opacity, 1))}.bg-slate-500\/15{background-color:#64748b26}.bg-slate-600\/15{background-color:#47556926}.bg-violet-500\/15{background-color:#8b5cf626}.object-cover{-o-object-fit:cover;object-fit:cover}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.p-8{padding:2rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-10{padding-top:2.5rem;padding-bottom:2.5rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pb-1\.5{padding-bottom:.375rem}.pl-8{padding-left:2rem}.pt-4{padding-top:1rem}.text-left{text-align:left}.text-center{text-align:center}.text-right{text-align:right}.align-top{vertical-align:top}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.font-sans{font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji"}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-5xl{font-size:3rem;line-height:1}.text-\[10px\]{font-size:10px}.text-\[11px\]{font-size:11px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.leading-tight{line-height:1.25}.tracking-wider{letter-spacing:.05em}.text-accent{--tw-text-opacity: 1;color:rgb(61 220 151 / var(--tw-text-opacity, 1))}.text-amber-300{--tw-text-opacity: 1;color:rgb(252 211 77 / var(--tw-text-opacity, 1))}.text-amber-400{--tw-text-opacity: 1;color:rgb(251 191 36 / var(--tw-text-opacity, 1))}.text-amber-400\/80{color:#fbbf24cc}.text-brand{--tw-text-opacity: 1;color:rgb(0 160 200 / var(--tw-text-opacity, 1))}.text-emerald-400{--tw-text-opacity: 1;color:rgb(52 211 153 / var(--tw-text-opacity, 1))}.text-ink{--tw-text-opacity: 1;color:rgb(11 15 23 / var(--tw-text-opacity, 1))}.text-rose-300{--tw-text-opacity: 1;color:rgb(253 164 175 / var(--tw-text-opacity, 1))}.text-rose-400{--tw-text-opacity: 1;color:rgb(251 113 133 / var(--tw-text-opacity, 1))}.text-sky-400{--tw-text-opacity: 1;color:rgb(56 189 248 / var(--tw-text-opacity, 1))}.text-slate-200{--tw-text-opacity: 1;color:rgb(226 232 240 / var(--tw-text-opacity, 1))}.text-slate-300{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.text-slate-400{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-slate-600{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.text-violet-400{--tw-text-opacity: 1;color:rgb(167 139 250 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.outline-none{outline:2px solid transparent;outline-offset:2px}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}:root{color-scheme:dark}body{margin:0;font-family:Pretendard,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,sans-serif;background:#0b0f17;color:#e6edf6}*{box-sizing:border-box}.inp{width:100%;padding:8px 12px;border-radius:8px;background:#0b1220;border:1px solid #26304a;font-size:13px;color:#e2e8f0;outline:none}.inp:focus{border-color:#00a0c8}textarea.inp{resize:vertical;min-height:80px;font-family:inherit}.hover\:border-brand:hover{--tw-border-opacity: 1;border-color:rgb(0 160 200 / var(--tw-border-opacity, 1))}.hover\:bg-brand\/90:hover{background-color:#00a0c8e6}.hover\:bg-card\/60:hover{background-color:#1a223499}.hover\:bg-panel\/40:hover{background-color:#13192766}.hover\:bg-rose-500:hover{--tw-bg-opacity: 1;background-color:rgb(244 63 94 / var(--tw-bg-opacity, 1))}.hover\:text-accent\/80:hover{color:#3ddc97cc}.hover\:text-brand:hover{--tw-text-opacity: 1;color:rgb(0 160 200 / var(--tw-text-opacity, 1))}.hover\:text-emerald-300:hover{--tw-text-opacity: 1;color:rgb(110 231 183 / var(--tw-text-opacity, 1))}.hover\:text-rose-300:hover{--tw-text-opacity: 1;color:rgb(253 164 175 / var(--tw-text-opacity, 1))}.hover\:text-slate-200:hover{--tw-text-opacity: 1;color:rgb(226 232 240 / var(--tw-text-opacity, 1))}.hover\:underline:hover{text-decoration-line:underline}.focus\:border-brand:focus{--tw-border-opacity: 1;border-color:rgb(0 160 200 / var(--tw-border-opacity, 1))}.disabled\:opacity-50:disabled{opacity:.5}.disabled\:opacity-60:disabled{opacity:.6}@media (min-width: 768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width: 1024px){.lg\:col-span-1{grid-column:span 1 / span 1}.lg\:col-span-2{grid-column:span 2 / span 2}.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:grid-cols-5{grid-template-columns:repeat(5,minmax(0,1fr))}} diff --git a/backend/src/main/resources/static/assets/index-qhjCbNFY.js b/backend/src/main/resources/static/assets/index-qhjCbNFY.js deleted file mode 100644 index 3676def..0000000 --- a/backend/src/main/resources/static/assets/index-qhjCbNFY.js +++ /dev/null @@ -1,487 +0,0 @@ -var e1=e=>{throw TypeError(e)};var hm=(e,t,n)=>t.has(e)||e1("Cannot "+n);var U=(e,t,n)=>(hm(e,t,"read from private field"),n?n.call(e):t.get(e)),we=(e,t,n)=>t.has(e)?e1("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,n),he=(e,t,n,r)=>(hm(e,t,"write to private field"),r?r.call(e,n):t.set(e,n),n),Rt=(e,t,n)=>(hm(e,t,"access private method"),n);var Zc=(e,t,n,r)=>({set _(a){he(e,t,a,n)},get _(){return U(e,t,r)}});(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const a of document.querySelectorAll('link[rel="modulepreload"]'))r(a);new MutationObserver(a=>{for(const i of a)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(a){const i={};return a.integrity&&(i.integrity=a.integrity),a.referrerPolicy&&(i.referrerPolicy=a.referrerPolicy),a.crossOrigin==="use-credentials"?i.credentials="include":a.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(a){if(a.ep)return;a.ep=!0;const i=n(a);fetch(a.href,i)}})();var Jc=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function Ne(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var A2={exports:{}},qh={};/** - * @license React - * react-jsx-runtime.production.js - * - * Copyright (c) Meta Platforms, Inc. and affiliates. - * - * This source code is licensed under the MIT license found in the - * LICENSE file in the root directory of this source tree. - */var zP=Symbol.for("react.transitional.element"),LP=Symbol.for("react.fragment");function E2(e,t,n){var r=null;if(n!==void 0&&(r=""+n),t.key!==void 0&&(r=""+t.key),"key"in t){n={};for(var a in t)a!=="key"&&(n[a]=t[a])}else n=t;return t=n.ref,{$$typeof:zP,type:e,key:r,ref:t!==void 0?t:null,props:n}}qh.Fragment=LP;qh.jsx=E2;qh.jsxs=E2;A2.exports=qh;var c=A2.exports,_2={exports:{}},ye={};/** - * @license React - * react.production.js - * - * Copyright (c) Meta Platforms, Inc. and affiliates. - * - * This source code is licensed under the MIT license found in the - * LICENSE file in the root directory of this source tree. - */var Sb=Symbol.for("react.transitional.element"),BP=Symbol.for("react.portal"),UP=Symbol.for("react.fragment"),IP=Symbol.for("react.strict_mode"),HP=Symbol.for("react.profiler"),qP=Symbol.for("react.consumer"),FP=Symbol.for("react.context"),GP=Symbol.for("react.forward_ref"),VP=Symbol.for("react.suspense"),KP=Symbol.for("react.memo"),T2=Symbol.for("react.lazy"),YP=Symbol.for("react.activity"),t1=Symbol.iterator;function XP(e){return e===null||typeof e!="object"?null:(e=t1&&e[t1]||e["@@iterator"],typeof e=="function"?e:null)}var N2={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},C2=Object.assign,M2={};function ns(e,t,n){this.props=e,this.context=t,this.refs=M2,this.updater=n||N2}ns.prototype.isReactComponent={};ns.prototype.setState=function(e,t){if(typeof e!="object"&&typeof e!="function"&&e!=null)throw Error("takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};ns.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")};function $2(){}$2.prototype=ns.prototype;function wb(e,t,n){this.props=e,this.context=t,this.refs=M2,this.updater=n||N2}var Ob=wb.prototype=new $2;Ob.constructor=wb;C2(Ob,ns.prototype);Ob.isPureReactComponent=!0;var n1=Array.isArray;function Ry(){}var Ye={H:null,A:null,T:null,S:null},P2=Object.prototype.hasOwnProperty;function jb(e,t,n){var r=n.ref;return{$$typeof:Sb,type:e,key:t,ref:r!==void 0?r:null,props:n}}function WP(e,t){return jb(e.type,t,e.props)}function Ab(e){return typeof e=="object"&&e!==null&&e.$$typeof===Sb}function QP(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,function(n){return t[n]})}var r1=/\/+/g;function pm(e,t){return typeof e=="object"&&e!==null&&e.key!=null?QP(""+e.key):t.toString(36)}function ZP(e){switch(e.status){case"fulfilled":return e.value;case"rejected":throw e.reason;default:switch(typeof e.status=="string"?e.then(Ry,Ry):(e.status="pending",e.then(function(t){e.status==="pending"&&(e.status="fulfilled",e.value=t)},function(t){e.status==="pending"&&(e.status="rejected",e.reason=t)})),e.status){case"fulfilled":return e.value;case"rejected":throw e.reason}}throw e}function Po(e,t,n,r,a){var i=typeof e;(i==="undefined"||i==="boolean")&&(e=null);var o=!1;if(e===null)o=!0;else switch(i){case"bigint":case"string":case"number":o=!0;break;case"object":switch(e.$$typeof){case Sb:case BP:o=!0;break;case T2:return o=e._init,Po(o(e._payload),t,n,r,a)}}if(o)return a=a(e),o=r===""?"."+pm(e,0):r,n1(a)?(n="",o!=null&&(n=o.replace(r1,"$&/")+"/"),Po(a,t,n,"",function(u){return u})):a!=null&&(Ab(a)&&(a=WP(a,n+(a.key==null||e&&e.key===a.key?"":(""+a.key).replace(r1,"$&/")+"/")+o)),t.push(a)),1;o=0;var l=r===""?".":r+":";if(n1(e))for(var s=0;s>>1,V=M[F];if(0>>1;Fa(ie,B))Da(W,ie)?(M[F]=W,M[D]=B,F=D):(M[F]=ie,M[X]=B,F=X);else if(Da(W,B))M[F]=W,M[D]=B,F=D;else break e}}return z}function a(M,z){var B=M.sortIndex-z.sortIndex;return B!==0?B:M.id-z.id}if(e.unstable_now=void 0,typeof performance=="object"&&typeof performance.now=="function"){var i=performance;e.unstable_now=function(){return i.now()}}else{var o=Date,l=o.now();e.unstable_now=function(){return o.now()-l}}var s=[],u=[],d=1,f=null,h=3,p=!1,y=!1,m=!1,b=!1,g=typeof setTimeout=="function"?setTimeout:null,S=typeof clearTimeout=="function"?clearTimeout:null,x=typeof setImmediate<"u"?setImmediate:null;function v(M){for(var z=n(u);z!==null;){if(z.callback===null)r(u);else if(z.startTime<=M)r(u),z.sortIndex=z.expirationTime,t(s,z);else break;z=n(u)}}function w(M){if(m=!1,v(M),!y)if(n(s)!==null)y=!0,O||(O=!0,C());else{var z=n(u);z!==null&&R(w,z.startTime-M)}}var O=!1,j=-1,_=5,E=-1;function N(){return b?!0:!(e.unstable_now()-E<_)}function $(){if(b=!1,O){var M=e.unstable_now();E=M;var z=!0;try{e:{y=!1,m&&(m=!1,S(j),j=-1),p=!0;var B=h;try{t:{for(v(M),f=n(s);f!==null&&!(f.expirationTime>M&&N());){var F=f.callback;if(typeof F=="function"){f.callback=null,h=f.priorityLevel;var V=F(f.expirationTime<=M);if(M=e.unstable_now(),typeof V=="function"){f.callback=V,v(M),z=!0;break t}f===n(s)&&r(s),v(M)}else r(s);f=n(s)}if(f!==null)z=!0;else{var ee=n(u);ee!==null&&R(w,ee.startTime-M),z=!1}}break e}finally{f=null,h=B,p=!1}z=void 0}}finally{z?C():O=!1}}}var C;if(typeof x=="function")C=function(){x($)};else if(typeof MessageChannel<"u"){var L=new MessageChannel,k=L.port2;L.port1.onmessage=$,C=function(){k.postMessage(null)}}else C=function(){g($,0)};function R(M,z){j=g(function(){M(e.unstable_now())},z)}e.unstable_IdlePriority=5,e.unstable_ImmediatePriority=1,e.unstable_LowPriority=4,e.unstable_NormalPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.unstable_cancelCallback=function(M){M.callback=null},e.unstable_forceFrameRate=function(M){0>M||125F?(M.sortIndex=B,t(u,M),n(s)===null&&M===n(u)&&(m?(S(j),j=-1):m=!0,R(w,B-F))):(M.sortIndex=V,t(s,M),y||p||(y=!0,O||(O=!0,C()))),M},e.unstable_shouldYield=N,e.unstable_wrapCallback=function(M){var z=h;return function(){var B=h;h=z;try{return M.apply(this,arguments)}finally{h=B}}}})(k2);D2.exports=k2;var tR=D2.exports,z2={exports:{}},tn={};/** - * @license React - * react-dom.production.js - * - * Copyright (c) Meta Platforms, Inc. and affiliates. - * - * This source code is licensed under the MIT license found in the - * LICENSE file in the root directory of this source tree. - */var nR=A;function L2(e){var t="https://react.dev/errors/"+e;if(1"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(B2)}catch(e){console.error(e)}}B2(),z2.exports=tn;var iR=z2.exports;/** - * @license React - * react-dom-client.production.js - * - * Copyright (c) Meta Platforms, Inc. and affiliates. - * - * This source code is licensed under the MIT license found in the - * LICENSE file in the root directory of this source tree. - */var At=tR,U2=A,oR=iR;function H(e){var t="https://react.dev/errors/"+e;if(1zo||(e.current=Uy[zo],Uy[zo]=null,zo--)}function Ie(e,t){zo++,Uy[zo]=e.current,e.current=t}var _r=$r(null),Su=$r(null),Ga=$r(null),id=$r(null);function od(e,t){switch(Ie(Ga,t),Ie(Su,e),Ie(_r,null),t.nodeType){case 9:case 11:e=(e=t.documentElement)&&(e=e.namespaceURI)?dS(e):0;break;default:if(e=t.tagName,t=t.namespaceURI)t=dS(t),e=dT(t,e);else switch(e){case"svg":e=1;break;case"math":e=2;break;default:e=0}}$t(_r),Ie(_r,e)}function gl(){$t(_r),$t(Su),$t(Ga)}function Iy(e){e.memoizedState!==null&&Ie(id,e);var t=_r.current,n=dT(t,e.type);t!==n&&(Ie(Su,e),Ie(_r,n))}function ld(e){Su.current===e&&($t(_r),$t(Su)),id.current===e&&($t(id),$u._currentValue=Hi)}var mm,l1;function wi(e){if(mm===void 0)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);mm=t&&t[1]||"",l1=-1)":-1a||s[r]!==u[a]){var d=` -`+s[r].replace(" at new "," at ");return e.displayName&&d.includes("")&&(d=d.replace("",e.displayName)),d}while(1<=r&&0<=a);break}}}finally{ym=!1,Error.prepareStackTrace=n}return(n=e?e.displayName||e.name:"")?wi(n):""}function fR(e,t){switch(e.tag){case 26:case 27:case 5:return wi(e.type);case 16:return wi("Lazy");case 13:return e.child!==t&&t!==null?wi("Suspense Fallback"):wi("Suspense");case 19:return wi("SuspenseList");case 0:case 15:return vm(e.type,!1);case 11:return vm(e.type.render,!1);case 1:return vm(e.type,!0);case 31:return wi("Activity");default:return""}}function s1(e){try{var t="",n=null;do t+=fR(e,n),n=e,e=e.return;while(e);return t}catch(r){return` -Error generating stack: `+r.message+` -`+r.stack}}var Hy=Object.prototype.hasOwnProperty,Tb=At.unstable_scheduleCallback,gm=At.unstable_cancelCallback,dR=At.unstable_shouldYield,hR=At.unstable_requestPaint,jn=At.unstable_now,pR=At.unstable_getCurrentPriorityLevel,K2=At.unstable_ImmediatePriority,Y2=At.unstable_UserBlockingPriority,sd=At.unstable_NormalPriority,mR=At.unstable_LowPriority,X2=At.unstable_IdlePriority,yR=At.log,vR=At.unstable_setDisableYieldValue,Oc=null,An=null;function La(e){if(typeof yR=="function"&&vR(e),An&&typeof An.setStrictMode=="function")try{An.setStrictMode(Oc,e)}catch{}}var En=Math.clz32?Math.clz32:xR,gR=Math.log,bR=Math.LN2;function xR(e){return e>>>=0,e===0?32:31-(gR(e)/bR|0)|0}var nf=256,rf=262144,af=4194304;function Oi(e){var t=e&42;if(t!==0)return t;switch(e&-e){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:return 64;case 128:return 128;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:return e&261888;case 262144:case 524288:case 1048576:case 2097152:return e&3932160;case 4194304:case 8388608:case 16777216:case 33554432:return e&62914560;case 67108864:return 67108864;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 0;default:return e}}function Vh(e,t,n){var r=e.pendingLanes;if(r===0)return 0;var a=0,i=e.suspendedLanes,o=e.pingedLanes;e=e.warmLanes;var l=r&134217727;return l!==0?(r=l&~i,r!==0?a=Oi(r):(o&=l,o!==0?a=Oi(o):n||(n=l&~e,n!==0&&(a=Oi(n))))):(l=r&~i,l!==0?a=Oi(l):o!==0?a=Oi(o):n||(n=r&~e,n!==0&&(a=Oi(n)))),a===0?0:t!==0&&t!==a&&!(t&i)&&(i=a&-a,n=t&-t,i>=n||i===32&&(n&4194048)!==0)?t:a}function jc(e,t){return(e.pendingLanes&~(e.suspendedLanes&~e.pingedLanes)&t)===0}function SR(e,t){switch(e){case 1:case 2:case 4:case 8:case 64:return t+250;case 16:case 32:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return t+5e3;case 4194304:case 8388608:case 16777216:case 33554432:return-1;case 67108864:case 134217728:case 268435456:case 536870912:case 1073741824:return-1;default:return-1}}function W2(){var e=af;return af<<=1,!(af&62914560)&&(af=4194304),e}function bm(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function Ac(e,t){e.pendingLanes|=t,t!==268435456&&(e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0)}function wR(e,t,n,r,a,i){var o=e.pendingLanes;e.pendingLanes=n,e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0,e.expiredLanes&=n,e.entangledLanes&=n,e.errorRecoveryDisabledLanes&=n,e.shellSuspendCounter=0;var l=e.entanglements,s=e.expirationTimes,u=e.hiddenUpdates;for(n=o&~n;0"u")return null;try{return e.activeElement||e.body}catch{return e.body}}var TR=/[\n"\\]/g;function Fn(e){return e.replace(TR,function(t){return"\\"+t.charCodeAt(0).toString(16)+" "})}function Gy(e,t,n,r,a,i,o,l){e.name="",o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"?e.type=o:e.removeAttribute("type"),t!=null?o==="number"?(t===0&&e.value===""||e.value!=t)&&(e.value=""+In(t)):e.value!==""+In(t)&&(e.value=""+In(t)):o!=="submit"&&o!=="reset"||e.removeAttribute("value"),t!=null?Vy(e,o,In(t)):n!=null?Vy(e,o,In(n)):r!=null&&e.removeAttribute("value"),a==null&&i!=null&&(e.defaultChecked=!!i),a!=null&&(e.checked=a&&typeof a!="function"&&typeof a!="symbol"),l!=null&&typeof l!="function"&&typeof l!="symbol"&&typeof l!="boolean"?e.name=""+In(l):e.removeAttribute("name")}function iE(e,t,n,r,a,i,o,l){if(i!=null&&typeof i!="function"&&typeof i!="symbol"&&typeof i!="boolean"&&(e.type=i),t!=null||n!=null){if(!(i!=="submit"&&i!=="reset"||t!=null)){Fy(e);return}n=n!=null?""+In(n):"",t=t!=null?""+In(t):n,l||t===e.value||(e.value=t),e.defaultValue=t}r=r??a,r=typeof r!="function"&&typeof r!="symbol"&&!!r,e.checked=l?e.checked:!!r,e.defaultChecked=!!r,o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"&&(e.name=o),Fy(e)}function Vy(e,t,n){t==="number"&&ud(e.ownerDocument)===e||e.defaultValue===""+n||(e.defaultValue=""+n)}function el(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a"u"||typeof window.document>"u"||typeof window.document.createElement>"u"),Yy=!1;if(oa)try{var Cs={};Object.defineProperty(Cs,"passive",{get:function(){Yy=!0}}),window.addEventListener("test",Cs,Cs),window.removeEventListener("test",Cs,Cs)}catch{Yy=!1}var Ba=null,Rb=null,Bf=null;function cE(){if(Bf)return Bf;var e,t=Rb,n=t.length,r,a="value"in Ba?Ba.value:Ba.textContent,i=a.length;for(e=0;e=tu),b1=" ",x1=!1;function dE(e,t){switch(e){case"keyup":return nD.indexOf(t.keyCode)!==-1;case"keydown":return t.keyCode!==229;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function hE(e){return e=e.detail,typeof e=="object"&&"data"in e?e.data:null}var Uo=!1;function aD(e,t){switch(e){case"compositionend":return hE(t);case"keypress":return t.which!==32?null:(x1=!0,b1);case"textInput":return e=t.data,e===b1&&x1?null:e;default:return null}}function iD(e,t){if(Uo)return e==="compositionend"||!kb&&dE(e,t)?(e=cE(),Bf=Rb=Ba=null,Uo=!1,e):null;switch(e){case"paste":return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1=t)return{node:n,offset:t-e};e=r}e:{for(;n;){if(n.nextSibling){n=n.nextSibling;break e}n=n.parentNode}n=void 0}n=A1(n)}}function vE(e,t){return e&&t?e===t?!0:e&&e.nodeType===3?!1:t&&t.nodeType===3?vE(e,t.parentNode):"contains"in e?e.contains(t):e.compareDocumentPosition?!!(e.compareDocumentPosition(t)&16):!1:!1}function gE(e){e=e!=null&&e.ownerDocument!=null&&e.ownerDocument.defaultView!=null?e.ownerDocument.defaultView:window;for(var t=ud(e.document);t instanceof e.HTMLIFrameElement;){try{var n=typeof t.contentWindow.location.href=="string"}catch{n=!1}if(n)e=t.contentWindow;else break;t=ud(e.document)}return t}function zb(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&(t==="input"&&(e.type==="text"||e.type==="search"||e.type==="tel"||e.type==="url"||e.type==="password")||t==="textarea"||e.contentEditable==="true")}var hD=oa&&"documentMode"in document&&11>=document.documentMode,Io=null,Xy=null,ru=null,Wy=!1;function _1(e,t,n){var r=n.window===n?n.document:n.nodeType===9?n:n.ownerDocument;Wy||Io==null||Io!==ud(r)||(r=Io,"selectionStart"in r&&zb(r)?r={start:r.selectionStart,end:r.selectionEnd}:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection(),r={anchorNode:r.anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset}),ru&&ju(ru,r)||(ru=r,r=_d(Xy,"onSelect"),0>=o,a-=o,Sr=1<<32-En(t)+a|n<_?(E=j,j=null):E=j.sibling;var N=h(g,j,x[_],v);if(N===null){j===null&&(j=E);break}e&&j&&N.alternate===null&&t(g,j),S=i(N,S,_),O===null?w=N:O.sibling=N,O=N,j=E}if(_===x.length)return n(g,j),je&&Gr(g,_),w;if(j===null){for(;__?(E=j,j=null):E=j.sibling;var $=h(g,j,N.value,v);if($===null){j===null&&(j=E);break}e&&j&&$.alternate===null&&t(g,j),S=i($,S,_),O===null?w=$:O.sibling=$,O=$,j=E}if(N.done)return n(g,j),je&&Gr(g,_),w;if(j===null){for(;!N.done;_++,N=x.next())N=f(g,N.value,v),N!==null&&(S=i(N,S,_),O===null?w=N:O.sibling=N,O=N);return je&&Gr(g,_),w}for(j=r(j);!N.done;_++,N=x.next())N=p(j,g,_,N.value,v),N!==null&&(e&&N.alternate!==null&&j.delete(N.key===null?_:N.key),S=i(N,S,_),O===null?w=N:O.sibling=N,O=N);return e&&j.forEach(function(C){return t(g,C)}),je&&Gr(g,_),w}function b(g,S,x,v){if(typeof x=="object"&&x!==null&&x.type===ko&&x.key===null&&(x=x.props.children),typeof x=="object"&&x!==null){switch(x.$$typeof){case tf:e:{for(var w=x.key;S!==null;){if(S.key===w){if(w=x.type,w===ko){if(S.tag===7){n(g,S.sibling),v=a(S,x.props.children),v.return=g,g=v;break e}}else if(S.elementType===w||typeof w=="object"&&w!==null&&w.$$typeof===ja&&ji(w)===S.type){n(g,S.sibling),v=a(S,x.props),$s(v,x),v.return=g,g=v;break e}n(g,S);break}else t(g,S);S=S.sibling}x.type===ko?(v=qi(x.props.children,g.mode,v,x.key),v.return=g,g=v):(v=If(x.type,x.key,x.props,null,g.mode,v),$s(v,x),v.return=g,g=v)}return o(g);case Ys:e:{for(w=x.key;S!==null;){if(S.key===w)if(S.tag===4&&S.stateNode.containerInfo===x.containerInfo&&S.stateNode.implementation===x.implementation){n(g,S.sibling),v=a(S,x.children||[]),v.return=g,g=v;break e}else{n(g,S);break}else t(g,S);S=S.sibling}v=Tm(x,g.mode,v),v.return=g,g=v}return o(g);case ja:return x=ji(x),b(g,S,x,v)}if(Xs(x))return y(g,S,x,v);if(Ns(x)){if(w=Ns(x),typeof w!="function")throw Error(H(150));return x=w.call(x),m(g,S,x,v)}if(typeof x.then=="function")return b(g,S,uf(x),v);if(x.$$typeof===Yr)return b(g,S,sf(g,x),v);cf(g,x)}return typeof x=="string"&&x!==""||typeof x=="number"||typeof x=="bigint"?(x=""+x,S!==null&&S.tag===6?(n(g,S.sibling),v=a(S,x),v.return=g,g=v):(n(g,S),v=_m(x,g.mode,v),v.return=g,g=v),o(g)):n(g,S)}return function(g,S,x,v){try{_u=0;var w=b(g,S,x,v);return rl=null,w}catch(j){if(j===os||j===Zh)throw j;var O=Sn(29,j,null,g.mode);return O.lanes=v,O.return=g,O}finally{}}}var Ji=PE(!0),RE=PE(!1),Aa=!1;function Vb(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null,lanes:0,hiddenCallbacks:null},callbacks:null}}function rv(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,callbacks:null})}function Ka(e){return{lane:e,tag:0,payload:null,callback:null,next:null}}function Ya(e,t,n){var r=e.updateQueue;if(r===null)return null;if(r=r.shared,Ee&2){var a=r.pending;return a===null?t.next=t:(t.next=a.next,a.next=t),r.pending=t,t=fd(e),AE(e,null,n),t}return Qh(e,r,t,n),fd(e)}function iu(e,t,n){if(t=t.updateQueue,t!==null&&(t=t.shared,(n&4194048)!==0)){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,Z2(e,n)}}function Cm(e,t){var n=e.updateQueue,r=e.alternate;if(r!==null&&(r=r.updateQueue,n===r)){var a=null,i=null;if(n=n.firstBaseUpdate,n!==null){do{var o={lane:n.lane,tag:n.tag,payload:n.payload,callback:null,next:null};i===null?a=i=o:i=i.next=o,n=n.next}while(n!==null);i===null?a=i=t:i=i.next=t}else a=i=t;n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:i,shared:r.shared,callbacks:r.callbacks},e.updateQueue=n;return}e=n.lastBaseUpdate,e===null?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}var av=!1;function ou(){if(av){var e=nl;if(e!==null)throw e}}function lu(e,t,n,r){av=!1;var a=e.updateQueue;Aa=!1;var i=a.firstBaseUpdate,o=a.lastBaseUpdate,l=a.shared.pending;if(l!==null){a.shared.pending=null;var s=l,u=s.next;s.next=null,o===null?i=u:o.next=u,o=s;var d=e.alternate;d!==null&&(d=d.updateQueue,l=d.lastBaseUpdate,l!==o&&(l===null?d.firstBaseUpdate=u:l.next=u,d.lastBaseUpdate=s))}if(i!==null){var f=a.baseState;o=0,d=u=s=null,l=i;do{var h=l.lane&-536870913,p=h!==l.lane;if(p?(Oe&h)===h:(r&h)===h){h!==0&&h===Sl&&(av=!0),d!==null&&(d=d.next={lane:0,tag:l.tag,payload:l.payload,callback:null,next:null});e:{var y=e,m=l;h=t;var b=n;switch(m.tag){case 1:if(y=m.payload,typeof y=="function"){f=y.call(b,f,h);break e}f=y;break e;case 3:y.flags=y.flags&-65537|128;case 0:if(y=m.payload,h=typeof y=="function"?y.call(b,f,h):y,h==null)break e;f=Xe({},f,h);break e;case 2:Aa=!0}}h=l.callback,h!==null&&(e.flags|=64,p&&(e.flags|=8192),p=a.callbacks,p===null?a.callbacks=[h]:p.push(h))}else p={lane:h,tag:l.tag,payload:l.payload,callback:l.callback,next:null},d===null?(u=d=p,s=f):d=d.next=p,o|=h;if(l=l.next,l===null){if(l=a.shared.pending,l===null)break;p=l,l=p.next,p.next=null,a.lastBaseUpdate=p,a.shared.pending=null}}while(!0);d===null&&(s=f),a.baseState=s,a.firstBaseUpdate=u,a.lastBaseUpdate=d,i===null&&(a.shared.lanes=0),oi|=o,e.lanes=o,e.memoizedState=f}}function DE(e,t){if(typeof e!="function")throw Error(H(191,e));e.call(t)}function kE(e,t){var n=e.callbacks;if(n!==null)for(e.callbacks=null,e=0;ei?i:8;var o=de.T,l={};de.T=l,i0(e,!1,t,n);try{var s=a(),u=de.S;if(u!==null&&u(l,s),s!==null&&typeof s=="object"&&typeof s.then=="function"){var d=wD(s,r);su(e,t,d,_n(e))}else su(e,t,r,_n(e))}catch(f){su(e,t,{then:function(){},status:"rejected",reason:f},_n())}finally{_e.p=i,o!==null&&l.types!==null&&(o.types=l.types),de.T=o}}function TD(){}function uv(e,t,n,r){if(e.tag!==5)throw Error(H(476));var a=l_(e).queue;o_(e,a,t,Hi,n===null?TD:function(){return s_(e),n(r)})}function l_(e){var t=e.memoizedState;if(t!==null)return t;t={memoizedState:Hi,baseState:Hi,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:sa,lastRenderedState:Hi},next:null};var n={};return t.next={memoizedState:n,baseState:n,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:sa,lastRenderedState:n},next:null},e.memoizedState=t,e=e.alternate,e!==null&&(e.memoizedState=t),t}function s_(e){var t=l_(e);t.next===null&&(t=e.alternate.memoizedState),su(e,t.next.queue,{},_n())}function a0(){return Ut($u)}function u_(){return ut().memoizedState}function c_(){return ut().memoizedState}function ND(e){for(var t=e.return;t!==null;){switch(t.tag){case 24:case 3:var n=_n();e=Ka(n);var r=Ya(t,e,n);r!==null&&(un(r,t,n),iu(r,t,n)),t={cache:qb()},e.payload=t;return}t=t.return}}function CD(e,t,n){var r=_n();n={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null},np(e)?d_(t,n):(n=Bb(e,t,n,r),n!==null&&(un(n,e,r),h_(n,t,r)))}function f_(e,t,n){var r=_n();su(e,t,n,r)}function su(e,t,n,r){var a={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null};if(np(e))d_(t,a);else{var i=e.alternate;if(e.lanes===0&&(i===null||i.lanes===0)&&(i=t.lastRenderedReducer,i!==null))try{var o=t.lastRenderedState,l=i(o,n);if(a.hasEagerState=!0,a.eagerState=l,Mn(l,o))return Qh(e,t,a,0),Le===null&&Wh(),!1}catch{}finally{}if(n=Bb(e,t,a,r),n!==null)return un(n,e,r),h_(n,t,r),!0}return!1}function i0(e,t,n,r){if(r={lane:2,revertLane:p0(),gesture:null,action:r,hasEagerState:!1,eagerState:null,next:null},np(e)){if(t)throw Error(H(479))}else t=Bb(e,n,r,2),t!==null&&un(t,e,2)}function np(e){var t=e.alternate;return e===ve||t!==null&&t===ve}function d_(e,t){al=vd=!0;var n=e.pending;n===null?t.next=t:(t.next=n.next,n.next=t),e.pending=t}function h_(e,t,n){if(n&4194048){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,Z2(e,n)}}var Nu={readContext:Ut,use:ep,useCallback:nt,useContext:nt,useEffect:nt,useImperativeHandle:nt,useLayoutEffect:nt,useInsertionEffect:nt,useMemo:nt,useReducer:nt,useRef:nt,useState:nt,useDebugValue:nt,useDeferredValue:nt,useTransition:nt,useSyncExternalStore:nt,useId:nt,useHostTransitionStatus:nt,useFormState:nt,useActionState:nt,useOptimistic:nt,useMemoCache:nt,useCacheRefresh:nt};Nu.useEffectEvent=nt;var p_={readContext:Ut,use:ep,useCallback:function(e,t){return Kt().memoizedState=[e,t===void 0?null:t],e},useContext:Ut,useEffect:H1,useImperativeHandle:function(e,t,n){n=n!=null?n.concat([e]):null,Ff(4194308,4,t_.bind(null,t,e),n)},useLayoutEffect:function(e,t){return Ff(4194308,4,e,t)},useInsertionEffect:function(e,t){Ff(4,2,e,t)},useMemo:function(e,t){var n=Kt();t=t===void 0?null:t;var r=e();if(eo){La(!0);try{e()}finally{La(!1)}}return n.memoizedState=[r,t],r},useReducer:function(e,t,n){var r=Kt();if(n!==void 0){var a=n(t);if(eo){La(!0);try{n(t)}finally{La(!1)}}}else a=t;return r.memoizedState=r.baseState=a,e={pending:null,lanes:0,dispatch:null,lastRenderedReducer:e,lastRenderedState:a},r.queue=e,e=e.dispatch=CD.bind(null,ve,e),[r.memoizedState,e]},useRef:function(e){var t=Kt();return e={current:e},t.memoizedState=e},useState:function(e){e=lv(e);var t=e.queue,n=f_.bind(null,ve,t);return t.dispatch=n,[e.memoizedState,n]},useDebugValue:n0,useDeferredValue:function(e,t){var n=Kt();return r0(n,e,t)},useTransition:function(){var e=lv(!1);return e=o_.bind(null,ve,e.queue,!0,!1),Kt().memoizedState=e,[!1,e]},useSyncExternalStore:function(e,t,n){var r=ve,a=Kt();if(je){if(n===void 0)throw Error(H(407));n=n()}else{if(n=t(),Le===null)throw Error(H(349));Oe&127||IE(r,t,n)}a.memoizedState=n;var i={value:n,getSnapshot:t};return a.queue=i,H1(qE.bind(null,r,i,e),[e]),r.flags|=2048,Ol(9,{destroy:void 0},HE.bind(null,r,i,n,t),null),n},useId:function(){var e=Kt(),t=Le.identifierPrefix;if(je){var n=wr,r=Sr;n=(r&~(1<<32-En(r)-1)).toString(32)+n,t="_"+t+"R_"+n,n=gd++,0<\/script>",i=i.removeChild(i.firstChild);break;case"select":i=typeof r.is=="string"?o.createElement("select",{is:r.is}):o.createElement("select"),r.multiple?i.multiple=!0:r.size&&(i.size=r.size);break;default:i=typeof r.is=="string"?o.createElement(a,{is:r.is}):o.createElement(a)}}i[zt]=t,i[fn]=r;e:for(o=t.child;o!==null;){if(o.tag===5||o.tag===6)i.appendChild(o.stateNode);else if(o.tag!==4&&o.tag!==27&&o.child!==null){o.child.return=o,o=o.child;continue}if(o===t)break e;for(;o.sibling===null;){if(o.return===null||o.return===t)break e;o=o.return}o.sibling.return=o.return,o=o.sibling}t.stateNode=i;e:switch(It(i,a,r),a){case"button":case"input":case"select":case"textarea":r=!!r.autoFocus;break e;case"img":r=!0;break e;default:r=!1}r&&Lr(t)}}return Fe(t),Lm(t,t.type,e===null?null:e.memoizedProps,t.pendingProps,n),null;case 6:if(e&&t.stateNode!=null)e.memoizedProps!==r&&Lr(t);else{if(typeof r!="string"&&t.stateNode===null)throw Error(H(166));if(e=Ga.current,Ao(t)){if(e=t.stateNode,n=t.memoizedProps,r=null,a=Lt,a!==null)switch(a.tag){case 27:case 5:r=a.memoizedProps}e[zt]=t,e=!!(e.nodeValue===n||r!==null&&r.suppressHydrationWarning===!0||fT(e.nodeValue,n)),e||ai(t,!0)}else e=Td(e).createTextNode(r),e[zt]=t,t.stateNode=e}return Fe(t),null;case 31:if(n=t.memoizedState,e===null||e.memoizedState!==null){if(r=Ao(t),n!==null){if(e===null){if(!r)throw Error(H(318));if(e=t.memoizedState,e=e!==null?e.dehydrated:null,!e)throw Error(H(557));e[zt]=t}else Qi(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;Fe(t),e=!1}else n=Nm(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=n),e=!0;if(!e)return t.flags&256?(xn(t),t):(xn(t),null);if(t.flags&128)throw Error(H(558))}return Fe(t),null;case 13:if(r=t.memoizedState,e===null||e.memoizedState!==null&&e.memoizedState.dehydrated!==null){if(a=Ao(t),r!==null&&r.dehydrated!==null){if(e===null){if(!a)throw Error(H(318));if(a=t.memoizedState,a=a!==null?a.dehydrated:null,!a)throw Error(H(317));a[zt]=t}else Qi(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;Fe(t),a=!1}else a=Nm(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=a),a=!0;if(!a)return t.flags&256?(xn(t),t):(xn(t),null)}return xn(t),t.flags&128?(t.lanes=n,t):(n=r!==null,e=e!==null&&e.memoizedState!==null,n&&(r=t.child,a=null,r.alternate!==null&&r.alternate.memoizedState!==null&&r.alternate.memoizedState.cachePool!==null&&(a=r.alternate.memoizedState.cachePool.pool),i=null,r.memoizedState!==null&&r.memoizedState.cachePool!==null&&(i=r.memoizedState.cachePool.pool),i!==a&&(r.flags|=2048)),n!==e&&n&&(t.child.flags|=8192),ff(t,t.updateQueue),Fe(t),null);case 4:return gl(),e===null&&m0(t.stateNode.containerInfo),Fe(t),null;case 10:return na(t.type),Fe(t),null;case 19:if($t(lt),r=t.memoizedState,r===null)return Fe(t),null;if(a=(t.flags&128)!==0,i=r.rendering,i===null)if(a)Ps(r,!1);else{if(it!==0||e!==null&&e.flags&128)for(e=t.child;e!==null;){if(i=yd(e),i!==null){for(t.flags|=128,Ps(r,!1),e=i.updateQueue,t.updateQueue=e,ff(t,e),t.subtreeFlags=0,e=n,n=t.child;n!==null;)EE(n,e),n=n.sibling;return Ie(lt,lt.current&1|2),je&&Gr(t,r.treeForkCount),t.child}e=e.sibling}r.tail!==null&&jn()>wd&&(t.flags|=128,a=!0,Ps(r,!1),t.lanes=4194304)}else{if(!a)if(e=yd(i),e!==null){if(t.flags|=128,a=!0,e=e.updateQueue,t.updateQueue=e,ff(t,e),Ps(r,!0),r.tail===null&&r.tailMode==="hidden"&&!i.alternate&&!je)return Fe(t),null}else 2*jn()-r.renderingStartTime>wd&&n!==536870912&&(t.flags|=128,a=!0,Ps(r,!1),t.lanes=4194304);r.isBackwards?(i.sibling=t.child,t.child=i):(e=r.last,e!==null?e.sibling=i:t.child=i,r.last=i)}return r.tail!==null?(e=r.tail,r.rendering=e,r.tail=e.sibling,r.renderingStartTime=jn(),e.sibling=null,n=lt.current,Ie(lt,a?n&1|2:n&1),je&&Gr(t,r.treeForkCount),e):(Fe(t),null);case 22:case 23:return xn(t),Kb(),r=t.memoizedState!==null,e!==null?e.memoizedState!==null!==r&&(t.flags|=8192):r&&(t.flags|=8192),r?n&536870912&&!(t.flags&128)&&(Fe(t),t.subtreeFlags&6&&(t.flags|=8192)):Fe(t),n=t.updateQueue,n!==null&&ff(t,n.retryQueue),n=null,e!==null&&e.memoizedState!==null&&e.memoizedState.cachePool!==null&&(n=e.memoizedState.cachePool.pool),r=null,t.memoizedState!==null&&t.memoizedState.cachePool!==null&&(r=t.memoizedState.cachePool.pool),r!==n&&(t.flags|=2048),e!==null&&$t(Fi),null;case 24:return n=null,e!==null&&(n=e.memoizedState.cache),t.memoizedState.cache!==n&&(t.flags|=2048),na(mt),Fe(t),null;case 25:return null;case 30:return null}throw Error(H(156,t.tag))}function DD(e,t){switch(Hb(t),t.tag){case 1:return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 3:return na(mt),gl(),e=t.flags,e&65536&&!(e&128)?(t.flags=e&-65537|128,t):null;case 26:case 27:case 5:return ld(t),null;case 31:if(t.memoizedState!==null){if(xn(t),t.alternate===null)throw Error(H(340));Qi()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 13:if(xn(t),e=t.memoizedState,e!==null&&e.dehydrated!==null){if(t.alternate===null)throw Error(H(340));Qi()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 19:return $t(lt),null;case 4:return gl(),null;case 10:return na(t.type),null;case 22:case 23:return xn(t),Kb(),e!==null&&$t(Fi),e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 24:return na(mt),null;case 25:return null;default:return null}}function E_(e,t){switch(Hb(t),t.tag){case 3:na(mt),gl();break;case 26:case 27:case 5:ld(t);break;case 4:gl();break;case 31:t.memoizedState!==null&&xn(t);break;case 13:xn(t);break;case 19:$t(lt);break;case 10:na(t.type);break;case 22:case 23:xn(t),Kb(),e!==null&&$t(Fi);break;case 24:na(mt)}}function Cc(e,t){try{var n=t.updateQueue,r=n!==null?n.lastEffect:null;if(r!==null){var a=r.next;n=a;do{if((n.tag&e)===e){r=void 0;var i=n.create,o=n.inst;r=i(),o.destroy=r}n=n.next}while(n!==a)}}catch(l){$e(t,t.return,l)}}function ii(e,t,n){try{var r=t.updateQueue,a=r!==null?r.lastEffect:null;if(a!==null){var i=a.next;r=i;do{if((r.tag&e)===e){var o=r.inst,l=o.destroy;if(l!==void 0){o.destroy=void 0,a=t;var s=n,u=l;try{u()}catch(d){$e(a,s,d)}}}r=r.next}while(r!==i)}}catch(d){$e(t,t.return,d)}}function __(e){var t=e.updateQueue;if(t!==null){var n=e.stateNode;try{kE(t,n)}catch(r){$e(e,e.return,r)}}}function T_(e,t,n){n.props=to(e.type,e.memoizedProps),n.state=e.memoizedState;try{n.componentWillUnmount()}catch(r){$e(e,t,r)}}function uu(e,t){try{var n=e.ref;if(n!==null){switch(e.tag){case 26:case 27:case 5:var r=e.stateNode;break;case 30:r=e.stateNode;break;default:r=e.stateNode}typeof n=="function"?e.refCleanup=n(r):n.current=r}}catch(a){$e(e,t,a)}}function Or(e,t){var n=e.ref,r=e.refCleanup;if(n!==null)if(typeof r=="function")try{r()}catch(a){$e(e,t,a)}finally{e.refCleanup=null,e=e.alternate,e!=null&&(e.refCleanup=null)}else if(typeof n=="function")try{n(null)}catch(a){$e(e,t,a)}else n.current=null}function N_(e){var t=e.type,n=e.memoizedProps,r=e.stateNode;try{e:switch(t){case"button":case"input":case"select":case"textarea":n.autoFocus&&r.focus();break e;case"img":n.src?r.src=n.src:n.srcSet&&(r.srcset=n.srcSet)}}catch(a){$e(e,e.return,a)}}function Bm(e,t,n){try{var r=e.stateNode;r3(r,e.type,n,t),r[fn]=t}catch(a){$e(e,e.return,a)}}function C_(e){return e.tag===5||e.tag===3||e.tag===26||e.tag===27&&ui(e.type)||e.tag===4}function Um(e){e:for(;;){for(;e.sibling===null;){if(e.return===null||C_(e.return))return null;e=e.return}for(e.sibling.return=e.return,e=e.sibling;e.tag!==5&&e.tag!==6&&e.tag!==18;){if(e.tag===27&&ui(e.type)||e.flags&2||e.child===null||e.tag===4)continue e;e.child.return=e,e=e.child}if(!(e.flags&2))return e.stateNode}}function pv(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?(n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n).insertBefore(e,t):(t=n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n,t.appendChild(e),n=n._reactRootContainer,n!=null||t.onclick!==null||(t.onclick=Xr));else if(r!==4&&(r===27&&ui(e.type)&&(n=e.stateNode,t=null),e=e.child,e!==null))for(pv(e,t,n),e=e.sibling;e!==null;)pv(e,t,n),e=e.sibling}function Sd(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?n.insertBefore(e,t):n.appendChild(e);else if(r!==4&&(r===27&&ui(e.type)&&(n=e.stateNode),e=e.child,e!==null))for(Sd(e,t,n),e=e.sibling;e!==null;)Sd(e,t,n),e=e.sibling}function M_(e){var t=e.stateNode,n=e.memoizedProps;try{for(var r=e.type,a=t.attributes;a.length;)t.removeAttributeNode(a[0]);It(t,r,n),t[zt]=e,t[fn]=n}catch(i){$e(e,e.return,i)}}var Kr=!1,pt=!1,Im=!1,tS=typeof WeakSet=="function"?WeakSet:Set,Nt=null;function kD(e,t){if(e=e.containerInfo,Sv=$d,e=gE(e),zb(e)){if("selectionStart"in e)var n={start:e.selectionStart,end:e.selectionEnd};else e:{n=(n=e.ownerDocument)&&n.defaultView||window;var r=n.getSelection&&n.getSelection();if(r&&r.rangeCount!==0){n=r.anchorNode;var a=r.anchorOffset,i=r.focusNode;r=r.focusOffset;try{n.nodeType,i.nodeType}catch{n=null;break e}var o=0,l=-1,s=-1,u=0,d=0,f=e,h=null;t:for(;;){for(var p;f!==n||a!==0&&f.nodeType!==3||(l=o+a),f!==i||r!==0&&f.nodeType!==3||(s=o+r),f.nodeType===3&&(o+=f.nodeValue.length),(p=f.firstChild)!==null;)h=f,f=p;for(;;){if(f===e)break t;if(h===n&&++u===a&&(l=o),h===i&&++d===r&&(s=o),(p=f.nextSibling)!==null)break;f=h,h=f.parentNode}f=p}n=l===-1||s===-1?null:{start:l,end:s}}else n=null}n=n||{start:0,end:0}}else n=null;for(wv={focusedElem:e,selectionRange:n},$d=!1,Nt=t;Nt!==null;)if(t=Nt,e=t.child,(t.subtreeFlags&1028)!==0&&e!==null)e.return=t,Nt=e;else for(;Nt!==null;){switch(t=Nt,i=t.alternate,e=t.flags,t.tag){case 0:if(e&4&&(e=t.updateQueue,e=e!==null?e.events:null,e!==null))for(n=0;n title"))),It(i,r,n),i[zt]=e,Ct(i),r=i;break e;case"link":var o=SS("link","href",a).get(r+(n.href||""));if(o){for(var l=0;lb&&(o=b,b=m,m=o);var g=E1(l,m),S=E1(l,b);if(g&&S&&(p.rangeCount!==1||p.anchorNode!==g.node||p.anchorOffset!==g.offset||p.focusNode!==S.node||p.focusOffset!==S.offset)){var x=f.createRange();x.setStart(g.node,g.offset),p.removeAllRanges(),m>b?(p.addRange(x),p.extend(S.node,S.offset)):(x.setEnd(S.node,S.offset),p.addRange(x))}}}}for(f=[],p=l;p=p.parentNode;)p.nodeType===1&&f.push({element:p,left:p.scrollLeft,top:p.scrollTop});for(typeof l.focus=="function"&&l.focus(),l=0;ln?32:n,de.T=null,n=vv,vv=null;var i=Wa,o=ra;if(Ot=0,Al=Wa=null,ra=0,Ee&6)throw Error(H(331));var l=Ee;if(Ee|=4,H_(i.current),B_(i,i.current,o,n),Ee=l,Mc(0,!1),An&&typeof An.onPostCommitFiberRoot=="function")try{An.onPostCommitFiberRoot(Oc,i)}catch{}return!0}finally{_e.p=a,de.T=r,rT(e,t)}}function iS(e,t,n){t=Gn(n,t),t=fv(e.stateNode,t,2),e=Ya(e,t,2),e!==null&&(Ac(e,2),Pr(e))}function $e(e,t,n){if(e.tag===3)iS(e,e,n);else for(;t!==null;){if(t.tag===3){iS(t,e,n);break}else if(t.tag===1){var r=t.stateNode;if(typeof t.type.getDerivedStateFromError=="function"||typeof r.componentDidCatch=="function"&&(Xa===null||!Xa.has(r))){e=Gn(n,e),n=b_(2),r=Ya(t,n,2),r!==null&&(x_(n,r,t,e),Ac(r,2),Pr(r));break}}t=t.return}}function qm(e,t,n){var r=e.pingCache;if(r===null){r=e.pingCache=new BD;var a=new Set;r.set(t,a)}else a=r.get(t),a===void 0&&(a=new Set,r.set(t,a));a.has(n)||(f0=!0,a.add(n),e=FD.bind(null,e,t,n),t.then(e,e))}function FD(e,t,n){var r=e.pingCache;r!==null&&r.delete(t),e.pingedLanes|=e.suspendedLanes&n,e.warmLanes&=~n,Le===e&&(Oe&n)===n&&(it===4||it===3&&(Oe&62914560)===Oe&&300>jn()-rp?!(Ee&2)&&El(e,0):d0|=n,jl===Oe&&(jl=0)),Pr(e)}function iT(e,t){t===0&&(t=W2()),e=mo(e,t),e!==null&&(Ac(e,t),Pr(e))}function GD(e){var t=e.memoizedState,n=0;t!==null&&(n=t.retryLane),iT(e,n)}function VD(e,t){var n=0;switch(e.tag){case 31:case 13:var r=e.stateNode,a=e.memoizedState;a!==null&&(n=a.retryLane);break;case 19:r=e.stateNode;break;case 22:r=e.stateNode._retryCache;break;default:throw Error(H(314))}r!==null&&r.delete(t),iT(e,n)}function KD(e,t){return Tb(e,t)}var Ad=null,Do=null,bv=!1,Ed=!1,Fm=!1,Ha=0;function Pr(e){e!==Do&&e.next===null&&(Do===null?Ad=Do=e:Do=Do.next=e),Ed=!0,bv||(bv=!0,XD())}function Mc(e,t){if(!Fm&&Ed){Fm=!0;do for(var n=!1,r=Ad;r!==null;){if(e!==0){var a=r.pendingLanes;if(a===0)var i=0;else{var o=r.suspendedLanes,l=r.pingedLanes;i=(1<<31-En(42|e)+1)-1,i&=a&~(o&~l),i=i&201326741?i&201326741|1:i?i|2:0}i!==0&&(n=!0,oS(r,i))}else i=Oe,i=Vh(r,r===Le?i:0,r.cancelPendingCommit!==null||r.timeoutHandle!==-1),!(i&3)||jc(r,i)||(n=!0,oS(r,i));r=r.next}while(n);Fm=!1}}function YD(){oT()}function oT(){Ed=bv=!1;var e=0;Ha!==0&&i3()&&(e=Ha);for(var t=jn(),n=null,r=Ad;r!==null;){var a=r.next,i=lT(r,t);i===0?(r.next=null,n===null?Ad=a:n.next=a,a===null&&(Do=n)):(n=r,(e!==0||i&3)&&(Ed=!0)),r=a}Ot!==0&&Ot!==5||Mc(e),Ha!==0&&(Ha=0)}function lT(e,t){for(var n=e.suspendedLanes,r=e.pingedLanes,a=e.expirationTimes,i=e.pendingLanes&-62914561;0l)break;var d=s.transferSize,f=s.initiatorType;d&&fS(f)&&(s=s.responseEnd,o+=d*(s"u"?null:document;function yT(e,t,n){var r=ss;if(r&&typeof t=="string"&&t){var a=Fn(t);a='link[rel="'+e+'"][href="'+a+'"]',typeof n=="string"&&(a+='[crossorigin="'+n+'"]'),gS.has(a)||(gS.add(a),e={rel:e,crossOrigin:n,href:t},r.querySelector(a)===null&&(t=r.createElement("link"),It(t,"link",e),Ct(t),r.head.appendChild(t)))}}function p3(e){ma.D(e),yT("dns-prefetch",e,null)}function m3(e,t){ma.C(e,t),yT("preconnect",e,t)}function y3(e,t,n){ma.L(e,t,n);var r=ss;if(r&&e&&t){var a='link[rel="preload"][as="'+Fn(t)+'"]';t==="image"&&n&&n.imageSrcSet?(a+='[imagesrcset="'+Fn(n.imageSrcSet)+'"]',typeof n.imageSizes=="string"&&(a+='[imagesizes="'+Fn(n.imageSizes)+'"]')):a+='[href="'+Fn(e)+'"]';var i=a;switch(t){case"style":i=_l(e);break;case"script":i=us(e)}Qn.has(i)||(e=Xe({rel:"preload",href:t==="image"&&n&&n.imageSrcSet?void 0:e,as:t},n),Qn.set(i,e),r.querySelector(a)!==null||t==="style"&&r.querySelector($c(i))||t==="script"&&r.querySelector(Pc(i))||(t=r.createElement("link"),It(t,"link",e),Ct(t),r.head.appendChild(t)))}}function v3(e,t){ma.m(e,t);var n=ss;if(n&&e){var r=t&&typeof t.as=="string"?t.as:"script",a='link[rel="modulepreload"][as="'+Fn(r)+'"][href="'+Fn(e)+'"]',i=a;switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":i=us(e)}if(!Qn.has(i)&&(e=Xe({rel:"modulepreload",href:e},t),Qn.set(i,e),n.querySelector(a)===null)){switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":if(n.querySelector(Pc(i)))return}r=n.createElement("link"),It(r,"link",e),Ct(r),n.head.appendChild(r)}}}function g3(e,t,n){ma.S(e,t,n);var r=ss;if(r&&e){var a=Jo(r).hoistableStyles,i=_l(e);t=t||"default";var o=a.get(i);if(!o){var l={loading:0,preload:null};if(o=r.querySelector($c(i)))l.loading=5;else{e=Xe({rel:"stylesheet",href:e,"data-precedence":t},n),(n=Qn.get(i))&&y0(e,n);var s=o=r.createElement("link");Ct(s),It(s,"link",e),s._p=new Promise(function(u,d){s.onload=u,s.onerror=d}),s.addEventListener("load",function(){l.loading|=1}),s.addEventListener("error",function(){l.loading|=2}),l.loading|=4,Yf(o,t,r)}o={type:"stylesheet",instance:o,count:1,state:l},a.set(i,o)}}}function b3(e,t){ma.X(e,t);var n=ss;if(n&&e){var r=Jo(n).hoistableScripts,a=us(e),i=r.get(a);i||(i=n.querySelector(Pc(a)),i||(e=Xe({src:e,async:!0},t),(t=Qn.get(a))&&v0(e,t),i=n.createElement("script"),Ct(i),It(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function x3(e,t){ma.M(e,t);var n=ss;if(n&&e){var r=Jo(n).hoistableScripts,a=us(e),i=r.get(a);i||(i=n.querySelector(Pc(a)),i||(e=Xe({src:e,async:!0,type:"module"},t),(t=Qn.get(a))&&v0(e,t),i=n.createElement("script"),Ct(i),It(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function bS(e,t,n,r){var a=(a=Ga.current)?Nd(a):null;if(!a)throw Error(H(446));switch(e){case"meta":case"title":return null;case"style":return typeof n.precedence=="string"&&typeof n.href=="string"?(t=_l(n.href),n=Jo(a).hoistableStyles,r=n.get(t),r||(r={type:"style",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};case"link":if(n.rel==="stylesheet"&&typeof n.href=="string"&&typeof n.precedence=="string"){e=_l(n.href);var i=Jo(a).hoistableStyles,o=i.get(e);if(o||(a=a.ownerDocument||a,o={type:"stylesheet",instance:null,count:0,state:{loading:0,preload:null}},i.set(e,o),(i=a.querySelector($c(e)))&&!i._p&&(o.instance=i,o.state.loading=5),Qn.has(e)||(n={rel:"preload",as:"style",href:n.href,crossOrigin:n.crossOrigin,integrity:n.integrity,media:n.media,hrefLang:n.hrefLang,referrerPolicy:n.referrerPolicy},Qn.set(e,n),i||S3(a,e,n,o.state))),t&&r===null)throw Error(H(528,""));return o}if(t&&r!==null)throw Error(H(529,""));return null;case"script":return t=n.async,n=n.src,typeof n=="string"&&t&&typeof t!="function"&&typeof t!="symbol"?(t=us(n),n=Jo(a).hoistableScripts,r=n.get(t),r||(r={type:"script",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};default:throw Error(H(444,e))}}function _l(e){return'href="'+Fn(e)+'"'}function $c(e){return'link[rel="stylesheet"]['+e+"]"}function vT(e){return Xe({},e,{"data-precedence":e.precedence,precedence:null})}function S3(e,t,n,r){e.querySelector('link[rel="preload"][as="style"]['+t+"]")?r.loading=1:(t=e.createElement("link"),r.preload=t,t.addEventListener("load",function(){return r.loading|=1}),t.addEventListener("error",function(){return r.loading|=2}),It(t,"link",n),Ct(t),e.head.appendChild(t))}function us(e){return'[src="'+Fn(e)+'"]'}function Pc(e){return"script[async]"+e}function xS(e,t,n){if(t.count++,t.instance===null)switch(t.type){case"style":var r=e.querySelector('style[data-href~="'+Fn(n.href)+'"]');if(r)return t.instance=r,Ct(r),r;var a=Xe({},n,{"data-href":n.href,"data-precedence":n.precedence,href:null,precedence:null});return r=(e.ownerDocument||e).createElement("style"),Ct(r),It(r,"style",a),Yf(r,n.precedence,e),t.instance=r;case"stylesheet":a=_l(n.href);var i=e.querySelector($c(a));if(i)return t.state.loading|=4,t.instance=i,Ct(i),i;r=vT(n),(a=Qn.get(a))&&y0(r,a),i=(e.ownerDocument||e).createElement("link"),Ct(i);var o=i;return o._p=new Promise(function(l,s){o.onload=l,o.onerror=s}),It(i,"link",r),t.state.loading|=4,Yf(i,n.precedence,e),t.instance=i;case"script":return i=us(n.src),(a=e.querySelector(Pc(i)))?(t.instance=a,Ct(a),a):(r=n,(a=Qn.get(i))&&(r=Xe({},n),v0(r,a)),e=e.ownerDocument||e,a=e.createElement("script"),Ct(a),It(a,"link",r),e.head.appendChild(a),t.instance=a);case"void":return null;default:throw Error(H(443,t.type))}else t.type==="stylesheet"&&!(t.state.loading&4)&&(r=t.instance,t.state.loading|=4,Yf(r,n.precedence,e));return t.instance}function Yf(e,t,n){for(var r=n.querySelectorAll('link[rel="stylesheet"][data-precedence],style[data-precedence]'),a=r.length?r[r.length-1]:null,i=a,o=0;o title"):null)}function w3(e,t,n){if(n===1||t.itemProp!=null)return!1;switch(e){case"meta":case"title":return!0;case"style":if(typeof t.precedence!="string"||typeof t.href!="string"||t.href==="")break;return!0;case"link":if(typeof t.rel!="string"||typeof t.href!="string"||t.href===""||t.onLoad||t.onError)break;switch(t.rel){case"stylesheet":return e=t.disabled,typeof t.precedence=="string"&&e==null;default:return!0}case"script":if(t.async&&typeof t.async!="function"&&typeof t.async!="symbol"&&!t.onLoad&&!t.onError&&t.src&&typeof t.src=="string")return!0}return!1}function gT(e){return!(e.type==="stylesheet"&&!(e.state.loading&3))}function O3(e,t,n,r){if(n.type==="stylesheet"&&(typeof r.media!="string"||matchMedia(r.media).matches!==!1)&&!(n.state.loading&4)){if(n.instance===null){var a=_l(r.href),i=t.querySelector($c(a));if(i){t=i._p,t!==null&&typeof t=="object"&&typeof t.then=="function"&&(e.count++,e=Cd.bind(e),t.then(e,e)),n.state.loading|=4,n.instance=i,Ct(i);return}i=t.ownerDocument||t,r=vT(r),(a=Qn.get(a))&&y0(r,a),i=i.createElement("link"),Ct(i);var o=i;o._p=new Promise(function(l,s){o.onload=l,o.onerror=s}),It(i,"link",r),n.instance=i}e.stylesheets===null&&(e.stylesheets=new Map),e.stylesheets.set(n,t),(t=n.state.preload)&&!(n.state.loading&3)&&(e.count++,n=Cd.bind(e),t.addEventListener("load",n),t.addEventListener("error",n))}}var Wm=0;function j3(e,t){return e.stylesheets&&e.count===0&&Wf(e,e.stylesheets),0Wm?50:800)+t);return e.unsuspend=n,function(){e.unsuspend=null,clearTimeout(r),clearTimeout(a)}}:null}function Cd(){if(this.count--,this.count===0&&(this.imgCount===0||!this.waitingForImages)){if(this.stylesheets)Wf(this,this.stylesheets);else if(this.unsuspend){var e=this.unsuspend;this.unsuspend=null,e()}}}var Md=null;function Wf(e,t){e.stylesheets=null,e.unsuspend!==null&&(e.count++,Md=new Map,t.forEach(A3,e),Md=null,Cd.call(e))}function A3(e,t){if(!(t.state.loading&4)){var n=Md.get(e);if(n)var r=n.get(null);else{n=new Map,Md.set(e,n);for(var a=e.querySelectorAll("link[data-precedence],style[data-precedence]"),i=0;i"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(ET)}catch(e){console.error(e)}}ET(),R2.exports=Fh;var P3=R2.exports;const R3=Ne(P3);/** - * react-router v7.17.0 - * - * Copyright (c) Remix Software Inc. - * - * This source code is licensed under the MIT license found in the - * LICENSE.md file in the root directory of this source tree. - * - * @license MIT - */var NS="popstate";function CS(e){return typeof e=="object"&&e!=null&&"pathname"in e&&"search"in e&&"hash"in e&&"state"in e&&"key"in e}function D3(e={}){function t(r,a){var u;let i=(u=a.state)==null?void 0:u.masked,{pathname:o,search:l,hash:s}=i||r.location;return Cv("",{pathname:o,search:l,hash:s},a.state&&a.state.usr||null,a.state&&a.state.key||"default",i?{pathname:r.location.pathname,search:r.location.search,hash:r.location.hash}:void 0)}function n(r,a){return typeof a=="string"?a:Du(a)}return z3(t,n,null,e)}function Je(e,t){if(e===!1||e===null||typeof e>"u")throw new Error(t)}function dr(e,t){if(!e){typeof console<"u"&&console.warn(t);try{throw new Error(t)}catch{}}}function k3(){return Math.random().toString(36).substring(2,10)}function MS(e,t){return{usr:e.state,key:e.key,idx:t,masked:e.mask?{pathname:e.pathname,search:e.search,hash:e.hash}:void 0}}function Cv(e,t,n=null,r,a){return{pathname:typeof e=="string"?e:e.pathname,search:"",hash:"",...typeof t=="string"?cs(t):t,state:n,key:t&&t.key||r||k3(),mask:a}}function Du({pathname:e="/",search:t="",hash:n=""}){return t&&t!=="?"&&(e+=t.charAt(0)==="?"?t:"?"+t),n&&n!=="#"&&(e+=n.charAt(0)==="#"?n:"#"+n),e}function cs(e){let t={};if(e){let n=e.indexOf("#");n>=0&&(t.hash=e.substring(n),e=e.substring(0,n));let r=e.indexOf("?");r>=0&&(t.search=e.substring(r),e=e.substring(0,r)),e&&(t.pathname=e)}return t}function z3(e,t,n,r={}){let{window:a=document.defaultView,v5Compat:i=!1}=r,o=a.history,l="POP",s=null,u=d();u==null&&(u=0,o.replaceState({...o.state,idx:u},""));function d(){return(o.state||{idx:null}).idx}function f(){l="POP";let b=d(),g=b==null?null:b-u;u=b,s&&s({action:l,location:m.location,delta:g})}function h(b,g){l="PUSH";let S=CS(b)?b:Cv(m.location,b,g);u=d()+1;let x=MS(S,u),v=m.createHref(S.mask||S);try{o.pushState(x,"",v)}catch(w){if(w instanceof DOMException&&w.name==="DataCloneError")throw w;a.location.assign(v)}i&&s&&s({action:l,location:m.location,delta:1})}function p(b,g){l="REPLACE";let S=CS(b)?b:Cv(m.location,b,g);u=d();let x=MS(S,u),v=m.createHref(S.mask||S);o.replaceState(x,"",v),i&&s&&s({action:l,location:m.location,delta:0})}function y(b){return L3(a,b)}let m={get action(){return l},get location(){return e(a,o)},listen(b){if(s)throw new Error("A history only accepts one active listener");return a.addEventListener(NS,f),s=b,()=>{a.removeEventListener(NS,f),s=null}},createHref(b){return t(a,b)},createURL:y,encodeLocation(b){let g=y(b);return{pathname:g.pathname,search:g.search,hash:g.hash}},push:h,replace:p,go(b){return o.go(b)}};return m}function L3(e,t,n=!1){let r="http://localhost";e&&(r=e.location.origin!=="null"?e.location.origin:e.location.href),Je(r,"No window.location.(origin|href) available to create URL");let a=typeof t=="string"?t:Du(t);return a=a.replace(/ $/,"%20"),!n&&a.startsWith("//")&&(a=r+a),new URL(a,r)}function _T(e,t,n="/"){return B3(e,t,n,!1)}function B3(e,t,n,r,a){let i=typeof t=="string"?cs(t):t,o=fa(i.pathname||"/",n);if(o==null)return null;let l=U3(e),s=null,u=Z3(o);for(let d=0;s==null&&d{let d={relativePath:u===void 0?o.path||"":u,caseSensitive:o.caseSensitive===!0,childrenIndex:l,route:o};if(d.relativePath.startsWith("/")){if(!d.relativePath.startsWith(r)&&s)return;Je(d.relativePath.startsWith(r),`Absolute route path "${d.relativePath}" nested under path "${r}" is not valid. An absolute child route path must start with the combined path of all its parent routes.`),d.relativePath=d.relativePath.slice(r.length)}let f=cr([r,d.relativePath]),h=n.concat(d);o.children&&o.children.length>0&&(Je(o.index!==!0,`Index routes must not have child routes. Please remove all child routes from route path "${f}".`),TT(o.children,t,h,f,s)),!(o.path==null&&!o.index)&&t.push({path:f,score:Y3(f,o.index),routesMeta:h})};return e.forEach((o,l)=>{var s;if(o.path===""||!((s=o.path)!=null&&s.includes("?")))i(o,l);else for(let u of NT(o.path))i(o,l,!0,u)}),t}function NT(e){let t=e.split("/");if(t.length===0)return[];let[n,...r]=t,a=n.endsWith("?"),i=n.replace(/\?$/,"");if(r.length===0)return a?[i,""]:[i];let o=NT(r.join("/")),l=[];return l.push(...o.map(s=>s===""?i:[i,s].join("/"))),a&&l.push(...o),l.map(s=>e.startsWith("/")&&s===""?"/":s)}function I3(e){e.sort((t,n)=>t.score!==n.score?n.score-t.score:X3(t.routesMeta.map(r=>r.childrenIndex),n.routesMeta.map(r=>r.childrenIndex)))}var H3=/^:[\w-]+$/,q3=3,F3=2,G3=1,V3=10,K3=-2,$S=e=>e==="*";function Y3(e,t){let n=e.split("/"),r=n.length;return n.some($S)&&(r+=K3),t&&(r+=F3),n.filter(a=>!$S(a)).reduce((a,i)=>a+(H3.test(i)?q3:i===""?G3:V3),r)}function X3(e,t){return e.length===t.length&&e.slice(0,-1).every((r,a)=>r===t[a])?e[e.length-1]-t[t.length-1]:0}function W3(e,t,n=!1){let{routesMeta:r}=e,a={},i="/",o=[];for(let l=0;l{if(d==="*"){let y=l[h]||"";o=i.slice(0,i.length-y.length).replace(/(.)\/+$/,"$1")}const p=l[h];return f&&!p?u[d]=void 0:u[d]=(p||"").replace(/%2F/g,"/"),u},{}),pathname:i,pathnameBase:o,pattern:e}}function Q3(e,t=!1,n=!0){dr(e==="*"||!e.endsWith("*")||e.endsWith("/*"),`Route path "${e}" will be treated as if it were "${e.replace(/\*$/,"/*")}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${e.replace(/\*$/,"/*")}".`);let r=[],a="^"+e.replace(/\/*\*?$/,"").replace(/^\/*/,"/").replace(/[\\.*+^${}|()[\]]/g,"\\$&").replace(/\/:([\w-]+)(\?)?/g,(o,l,s,u,d)=>{if(r.push({paramName:l,isOptional:s!=null}),s){let f=d.charAt(u+o.length);return f&&f!=="/"?"/([^\\/]*)":"(?:/([^\\/]*))?"}return"/([^\\/]+)"}).replace(/\/([\w-]+)\?(\/|$)/g,"(/$1)?$2");return e.endsWith("*")?(r.push({paramName:"*"}),a+=e==="*"||e==="/*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):n?a+="\\/*$":e!==""&&e!=="/"&&(a+="(?:(?=\\/|$))"),[new RegExp(a,t?void 0:"i"),r]}function Z3(e){try{return e.split("/").map(t=>decodeURIComponent(t).replace(/\//g,"%2F")).join("/")}catch(t){return dr(!1,`The URL path "${e}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${t}).`),e}}function fa(e,t){if(t==="/")return e;if(!e.toLowerCase().startsWith(t.toLowerCase()))return null;let n=t.endsWith("/")?t.length-1:t.length,r=e.charAt(n);return r&&r!=="/"?null:e.slice(n)||"/"}var J3=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i;function ek(e,t="/"){let{pathname:n,search:r="",hash:a=""}=typeof e=="string"?cs(e):e,i;return n?(n=CT(n),n.startsWith("/")?i=PS(n.substring(1),"/"):i=PS(n,t)):i=t,{pathname:i,search:rk(r),hash:ak(a)}}function PS(e,t){let n=Dd(t).split("/");return e.split("/").forEach(a=>{a===".."?n.length>1&&n.pop():a!=="."&&n.push(a)}),n.length>1?n.join("/"):"/"}function Qm(e,t,n,r){return`Cannot include a '${e}' character in a manually specified \`to.${t}\` field [${JSON.stringify(r)}]. Please separate it out to the \`to.${n}\` field. Alternatively you may provide the full path as a string in and the router will parse it for you.`}function tk(e){return e.filter((t,n)=>n===0||t.route.path&&t.route.path.length>0)}function w0(e){let t=tk(e);return t.map((n,r)=>r===t.length-1?n.pathname:n.pathnameBase)}function sp(e,t,n,r=!1){let a;typeof e=="string"?a=cs(e):(a={...e},Je(!a.pathname||!a.pathname.includes("?"),Qm("?","pathname","search",a)),Je(!a.pathname||!a.pathname.includes("#"),Qm("#","pathname","hash",a)),Je(!a.search||!a.search.includes("#"),Qm("#","search","hash",a)));let i=e===""||a.pathname==="",o=i?"/":a.pathname,l;if(o==null)l=n;else{let f=t.length-1;if(!r&&o.startsWith("..")){let h=o.split("/");for(;h[0]==="..";)h.shift(),f-=1;a.pathname=h.join("/")}l=f>=0?t[f]:"/"}let s=ek(a,l),u=o&&o!=="/"&&o.endsWith("/"),d=(i||o===".")&&n.endsWith("/");return!s.pathname.endsWith("/")&&(u||d)&&(s.pathname+="/"),s}var CT=e=>e.replace(/\/\/+/g,"/"),cr=e=>CT(e.join("/")),Dd=e=>e.replace(/\/+$/,""),nk=e=>Dd(e).replace(/^\/*/,"/"),rk=e=>!e||e==="?"?"":e.startsWith("?")?e:"?"+e,ak=e=>!e||e==="#"?"":e.startsWith("#")?e:"#"+e,ik=class{constructor(e,t,n,r=!1){this.status=e,this.statusText=t||"",this.internal=r,n instanceof Error?(this.data=n.toString(),this.error=n):this.data=n}};function ok(e){return e!=null&&typeof e.status=="number"&&typeof e.statusText=="string"&&typeof e.internal=="boolean"&&"data"in e}function lk(e){let t=e.map(n=>n.route.path).filter(Boolean);return cr(t)||"/"}var MT=typeof window<"u"&&typeof window.document<"u"&&typeof window.document.createElement<"u";function $T(e,t){let n=e;if(typeof n!="string"||!J3.test(n))return{absoluteURL:void 0,isExternal:!1,to:n};let r=n,a=!1;if(MT)try{let i=new URL(window.location.href),o=n.startsWith("//")?new URL(i.protocol+n):new URL(n),l=fa(o.pathname,t);o.origin===i.origin&&l!=null?n=l+o.search+o.hash:a=!0}catch{dr(!1,` contains an invalid URL which will probably break when clicked - please update to a valid URL path.`)}return{absoluteURL:r,isExternal:a,to:n}}Object.getOwnPropertyNames(Object.prototype).sort().join("\0");var PT=["POST","PUT","PATCH","DELETE"];new Set(PT);var sk=["GET",...PT];new Set(sk);var fs=A.createContext(null);fs.displayName="DataRouter";var up=A.createContext(null);up.displayName="DataRouterState";var RT=A.createContext(!1);function uk(){return A.useContext(RT)}var DT=A.createContext({isTransitioning:!1});DT.displayName="ViewTransition";var ck=A.createContext(new Map);ck.displayName="Fetchers";var fk=A.createContext(null);fk.displayName="Await";var Pn=A.createContext(null);Pn.displayName="Navigation";var Rc=A.createContext(null);Rc.displayName="Location";var Jn=A.createContext({outlet:null,matches:[],isDataRoute:!1});Jn.displayName="Route";var O0=A.createContext(null);O0.displayName="RouteError";var kT="REACT_ROUTER_ERROR",dk="REDIRECT",hk="ROUTE_ERROR_RESPONSE";function pk(e){if(e.startsWith(`${kT}:${dk}:{`))try{let t=JSON.parse(e.slice(28));if(typeof t=="object"&&t&&typeof t.status=="number"&&typeof t.statusText=="string"&&typeof t.location=="string"&&typeof t.reloadDocument=="boolean"&&typeof t.replace=="boolean")return t}catch{}}function mk(e){if(e.startsWith(`${kT}:${hk}:{`))try{let t=JSON.parse(e.slice(40));if(typeof t=="object"&&t&&typeof t.status=="number"&&typeof t.statusText=="string")return new ik(t.status,t.statusText,t.data)}catch{}}function yk(e,{relative:t}={}){Je(ds(),"useHref() may be used only in the context of a component.");let{basename:n,navigator:r}=A.useContext(Pn),{hash:a,pathname:i,search:o}=Dc(e,{relative:t}),l=i;return n!=="/"&&(l=i==="/"?n:cr([n,i])),r.createHref({pathname:l,search:o,hash:a})}function ds(){return A.useContext(Rc)!=null}function Rr(){return Je(ds(),"useLocation() may be used only in the context of a component."),A.useContext(Rc).location}var zT="You should call navigate() in a React.useEffect(), not when your component is first rendered.";function LT(e){A.useContext(Pn).static||A.useLayoutEffect(e)}function hs(){let{isDataRoute:e}=A.useContext(Jn);return e?$k():vk()}function vk(){Je(ds(),"useNavigate() may be used only in the context of a component.");let e=A.useContext(fs),{basename:t,navigator:n}=A.useContext(Pn),{matches:r}=A.useContext(Jn),{pathname:a}=Rr(),i=JSON.stringify(w0(r)),o=A.useRef(!1);return LT(()=>{o.current=!0}),A.useCallback((s,u={})=>{if(dr(o.current,zT),!o.current)return;if(typeof s=="number"){n.go(s);return}let d=sp(s,JSON.parse(i),a,u.relative==="path");e==null&&t!=="/"&&(d.pathname=d.pathname==="/"?t:cr([t,d.pathname])),(u.replace?n.replace:n.push)(d,u.state,u)},[t,n,i,a,e])}var gk=A.createContext(null);function bk(e){let t=A.useContext(Jn).outlet;return A.useMemo(()=>t&&A.createElement(gk.Provider,{value:e},t),[t,e])}function xk(){let{matches:e}=A.useContext(Jn),t=e[e.length-1];return(t==null?void 0:t.params)??{}}function Dc(e,{relative:t}={}){let{matches:n}=A.useContext(Jn),{pathname:r}=Rr(),a=JSON.stringify(w0(n));return A.useMemo(()=>sp(e,JSON.parse(a),r,t==="path"),[e,a,r,t])}function Sk(e,t){return BT(e,t)}function BT(e,t,n){var b;Je(ds(),"useRoutes() may be used only in the context of a component.");let{navigator:r}=A.useContext(Pn),{matches:a}=A.useContext(Jn),i=a[a.length-1],o=i?i.params:{},l=i?i.pathname:"/",s=i?i.pathnameBase:"/",u=i&&i.route;{let g=u&&u.path||"";IT(l,!u||g.endsWith("*")||g.endsWith("*?"),`You rendered descendant (or called \`useRoutes()\`) at "${l}" (under ) but the parent route path has no trailing "*". This means if you navigate deeper, the parent won't match anymore and therefore the child routes will never render. - -Please change the parent to .`)}let d=Rr(),f;if(t){let g=typeof t=="string"?cs(t):t;Je(s==="/"||((b=g.pathname)==null?void 0:b.startsWith(s)),`When overriding the location using \`\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${s}" but pathname "${g.pathname}" was given in the \`location\` prop.`),f=g}else f=d;let h=f.pathname||"/",p=h;if(s!=="/"){let g=s.replace(/^\//,"").split("/");p="/"+h.replace(/^\//,"").split("/").slice(g.length).join("/")}let y=n&&n.state.matches.length?n.state.matches.map(g=>Object.assign(g,{route:n.manifest[g.route.id]||g.route})):_T(e,{pathname:p});dr(u||y!=null,`No routes matched location "${f.pathname}${f.search}${f.hash}" `),dr(y==null||y[y.length-1].route.element!==void 0||y[y.length-1].route.Component!==void 0||y[y.length-1].route.lazy!==void 0,`Matched leaf route at location "${f.pathname}${f.search}${f.hash}" does not have an element or Component. This means it will render an with a null value by default resulting in an "empty" page.`);let m=Ek(y&&y.map(g=>Object.assign({},g,{params:Object.assign({},o,g.params),pathname:cr([s,r.encodeLocation?r.encodeLocation(g.pathname.replace(/%/g,"%25").replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:g.pathname]),pathnameBase:g.pathnameBase==="/"?s:cr([s,r.encodeLocation?r.encodeLocation(g.pathnameBase.replace(/%/g,"%25").replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:g.pathnameBase])})),a,n);return t&&m?A.createElement(Rc.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",mask:void 0,...f},navigationType:"POP"}},m):m}function wk(){let e=Mk(),t=ok(e)?`${e.status} ${e.statusText}`:e instanceof Error?e.message:JSON.stringify(e),n=e instanceof Error?e.stack:null,r="rgba(200,200,200, 0.5)",a={padding:"0.5rem",backgroundColor:r},i={padding:"2px 4px",backgroundColor:r},o=null;return console.error("Error handled by React Router default ErrorBoundary:",e),o=A.createElement(A.Fragment,null,A.createElement("p",null,"💿 Hey developer 👋"),A.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",A.createElement("code",{style:i},"ErrorBoundary")," or"," ",A.createElement("code",{style:i},"errorElement")," prop on your route.")),A.createElement(A.Fragment,null,A.createElement("h2",null,"Unexpected Application Error!"),A.createElement("h3",{style:{fontStyle:"italic"}},t),n?A.createElement("pre",{style:a},n):null,o)}var Ok=A.createElement(wk,null),UT=class extends A.Component{constructor(e){super(e),this.state={location:e.location,revalidation:e.revalidation,error:e.error}}static getDerivedStateFromError(e){return{error:e}}static getDerivedStateFromProps(e,t){return t.location!==e.location||t.revalidation!=="idle"&&e.revalidation==="idle"?{error:e.error,location:e.location,revalidation:e.revalidation}:{error:e.error!==void 0?e.error:t.error,location:t.location,revalidation:e.revalidation||t.revalidation}}componentDidCatch(e,t){this.props.onError?this.props.onError(e,t):console.error("React Router caught the following error during render",e)}render(){let e=this.state.error;if(this.context&&typeof e=="object"&&e&&"digest"in e&&typeof e.digest=="string"){const n=mk(e.digest);n&&(e=n)}let t=e!==void 0?A.createElement(Jn.Provider,{value:this.props.routeContext},A.createElement(O0.Provider,{value:e,children:this.props.component})):this.props.children;return this.context?A.createElement(jk,{error:e},t):t}};UT.contextType=RT;var Zm=new WeakMap;function jk({children:e,error:t}){let{basename:n}=A.useContext(Pn);if(typeof t=="object"&&t&&"digest"in t&&typeof t.digest=="string"){let r=pk(t.digest);if(r){let a=Zm.get(t);if(a)throw a;let i=$T(r.location,n);if(MT&&!Zm.get(t))if(i.isExternal||r.reloadDocument)window.location.href=i.absoluteURL||i.to;else{const o=Promise.resolve().then(()=>window.__reactRouterDataRouter.navigate(i.to,{replace:r.replace}));throw Zm.set(t,o),o}return A.createElement("meta",{httpEquiv:"refresh",content:`0;url=${i.absoluteURL||i.to}`})}}return e}function Ak({routeContext:e,match:t,children:n}){let r=A.useContext(fs);return r&&r.static&&r.staticContext&&(t.route.errorElement||t.route.ErrorBoundary)&&(r.staticContext._deepestRenderedBoundaryId=t.route.id),A.createElement(Jn.Provider,{value:e},n)}function Ek(e,t=[],n){let r=n==null?void 0:n.state;if(e==null){if(!r)return null;if(r.errors)e=r.matches;else if(t.length===0&&!r.initialized&&r.matches.length>0)e=r.matches;else return null}let a=e,i=r==null?void 0:r.errors;if(i!=null){let d=a.findIndex(f=>f.route.id&&(i==null?void 0:i[f.route.id])!==void 0);Je(d>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(i).join(",")}`),a=a.slice(0,Math.min(a.length,d+1))}let o=!1,l=-1;if(n&&r){o=r.renderFallback;for(let d=0;d=0?a=a.slice(0,l+1):a=[a[0]];break}}}}let s=n==null?void 0:n.onError,u=r&&s?(d,f)=>{var h,p;s(d,{location:r.location,params:((p=(h=r.matches)==null?void 0:h[0])==null?void 0:p.params)??{},pattern:lk(r.matches),errorInfo:f})}:void 0;return a.reduceRight((d,f,h)=>{let p,y=!1,m=null,b=null;r&&(p=i&&f.route.id?i[f.route.id]:void 0,m=f.route.errorElement||Ok,o&&(l<0&&h===0?(IT("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),y=!0,b=null):l===h&&(y=!0,b=f.route.hydrateFallbackElement||null)));let g=t.concat(a.slice(0,h+1)),S=()=>{let x;return p?x=m:y?x=b:f.route.Component?x=A.createElement(f.route.Component,null):f.route.element?x=f.route.element:x=d,A.createElement(Ak,{match:f,routeContext:{outlet:d,matches:g,isDataRoute:r!=null},children:x})};return r&&(f.route.ErrorBoundary||f.route.errorElement||h===0)?A.createElement(UT,{location:r.location,revalidation:r.revalidation,component:m,error:p,children:S(),routeContext:{outlet:null,matches:g,isDataRoute:!0},onError:u}):S()},null)}function j0(e){return`${e} must be used within a data router. See https://reactrouter.com/en/main/routers/picking-a-router.`}function _k(e){let t=A.useContext(fs);return Je(t,j0(e)),t}function Tk(e){let t=A.useContext(up);return Je(t,j0(e)),t}function Nk(e){let t=A.useContext(Jn);return Je(t,j0(e)),t}function A0(e){let t=Nk(e),n=t.matches[t.matches.length-1];return Je(n.route.id,`${e} can only be used on routes that contain a unique "id"`),n.route.id}function Ck(){return A0("useRouteId")}function Mk(){var r;let e=A.useContext(O0),t=Tk("useRouteError"),n=A0("useRouteError");return e!==void 0?e:(r=t.errors)==null?void 0:r[n]}function $k(){let{router:e}=_k("useNavigate"),t=A0("useNavigate"),n=A.useRef(!1);return LT(()=>{n.current=!0}),A.useCallback(async(a,i={})=>{dr(n.current,zT),n.current&&(typeof a=="number"?await e.navigate(a):await e.navigate(a,{fromRouteId:t,...i}))},[e,t])}var RS={};function IT(e,t,n){!t&&!RS[e]&&(RS[e]=!0,dr(!1,n))}A.memo(Pk);function Pk({routes:e,manifest:t,future:n,state:r,isStatic:a,onError:i}){return BT(e,void 0,{manifest:t,state:r,isStatic:a,onError:i})}function HT({to:e,replace:t,state:n,relative:r}){Je(ds()," may be used only in the context of a component.");let{static:a}=A.useContext(Pn);dr(!a," must not be used on the initial render in a . This is a no-op, but you should modify your code so the is only ever rendered in response to some user interaction or state change.");let{matches:i}=A.useContext(Jn),{pathname:o}=Rr(),l=hs(),s=sp(e,w0(i),o,r==="path"),u=JSON.stringify(s);return A.useEffect(()=>{l(JSON.parse(u),{replace:t,state:n,relative:r})},[l,u,r,t,n]),null}function Rk(e){return bk(e.context)}function We(e){Je(!1,"A is only ever to be used as the child of element, never rendered directly. Please wrap your in a .")}function Dk({basename:e="/",children:t=null,location:n,navigationType:r="POP",navigator:a,static:i=!1,useTransitions:o}){Je(!ds(),"You cannot render a inside another . You should never have more than one in your app.");let l=e.replace(/^\/*/,"/"),s=A.useMemo(()=>({basename:l,navigator:a,static:i,useTransitions:o,future:{}}),[l,a,i,o]);typeof n=="string"&&(n=cs(n));let{pathname:u="/",search:d="",hash:f="",state:h=null,key:p="default",mask:y}=n,m=A.useMemo(()=>{let b=fa(u,l);return b==null?null:{location:{pathname:b,search:d,hash:f,state:h,key:p,mask:y},navigationType:r}},[l,u,d,f,h,p,r,y]);return dr(m!=null,` is not able to match the URL "${u}${d}${f}" because it does not start with the basename, so the won't render anything.`),m==null?null:A.createElement(Pn.Provider,{value:s},A.createElement(Rc.Provider,{children:t,value:m}))}function kk({children:e,location:t}){return Sk(Mv(e),t)}function Mv(e,t=[]){let n=[];return A.Children.forEach(e,(r,a)=>{if(!A.isValidElement(r))return;let i=[...t,a];if(r.type===A.Fragment){n.push.apply(n,Mv(r.props.children,i));return}Je(r.type===We,`[${typeof r.type=="string"?r.type:r.type.name}] is not a component. All component children of must be a or `),Je(!r.props.index||!r.props.children,"An index route cannot have child routes.");let o={id:r.props.id||i.join("-"),caseSensitive:r.props.caseSensitive,element:r.props.element,Component:r.props.Component,index:r.props.index,path:r.props.path,middleware:r.props.middleware,loader:r.props.loader,action:r.props.action,hydrateFallbackElement:r.props.hydrateFallbackElement,HydrateFallback:r.props.HydrateFallback,errorElement:r.props.errorElement,ErrorBoundary:r.props.ErrorBoundary,hasErrorBoundary:r.props.hasErrorBoundary===!0||r.props.ErrorBoundary!=null||r.props.errorElement!=null,shouldRevalidate:r.props.shouldRevalidate,handle:r.props.handle,lazy:r.props.lazy};r.props.children&&(o.children=Mv(r.props.children,i)),n.push(o)}),n}var Zf="get",Jf="application/x-www-form-urlencoded";function cp(e){return typeof HTMLElement<"u"&&e instanceof HTMLElement}function zk(e){return cp(e)&&e.tagName.toLowerCase()==="button"}function Lk(e){return cp(e)&&e.tagName.toLowerCase()==="form"}function Bk(e){return cp(e)&&e.tagName.toLowerCase()==="input"}function Uk(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}function Ik(e,t){return e.button===0&&(!t||t==="_self")&&!Uk(e)}var vf=null;function Hk(){if(vf===null)try{new FormData(document.createElement("form"),0),vf=!1}catch{vf=!0}return vf}var qk=new Set(["application/x-www-form-urlencoded","multipart/form-data","text/plain"]);function Jm(e){return e!=null&&!qk.has(e)?(dr(!1,`"${e}" is not a valid \`encType\` for \`

\`/\`\` and will default to "${Jf}"`),null):e}function Fk(e,t){let n,r,a,i,o;if(Lk(e)){let l=e.getAttribute("action");r=l?fa(l,t):null,n=e.getAttribute("method")||Zf,a=Jm(e.getAttribute("enctype"))||Jf,i=new FormData(e)}else if(zk(e)||Bk(e)&&(e.type==="submit"||e.type==="image")){let l=e.form;if(l==null)throw new Error('Cannot submit a diff --git a/frontend/src/components/Sidebar.tsx b/frontend/src/components/Sidebar.tsx index 6f1d7cb..68e84d0 100644 --- a/frontend/src/components/Sidebar.tsx +++ b/frontend/src/components/Sidebar.tsx @@ -4,8 +4,11 @@ import { LayoutDashboard, FileText, Image, Package, Megaphone, ListTree, Palette, Languages, Search, FileInput, MessageSquareWarning, Share2, UsersRound, Sparkles, BarChart3, ShieldCheck, ScrollText, Settings, FileStack, + BookOpen, CalendarDays, Mail, Smartphone, Cpu, + KeyRound, ListChecks, Hash, SquareMenu, Network, Building2, BrainCircuit, } from 'lucide-react' import { currentRole, hasRole } from './rbac' +import ThemeToggle from './uiws/ThemeToggle' interface Link { to: string; label: string; icon: any; min?: string } @@ -29,11 +32,33 @@ const engageLinks: Link[] = [ { to: '/members', label: '회원', icon: UsersRound }, { to: '/analytics', label: '콘텐츠 분석', icon: BarChart3 }, { to: '/ai-tools', label: 'AI 도구', icon: Sparkles }, + { to: '/ai-techniques', label: 'AI 기법 (RAG)', icon: Cpu }, ] const adminLinks: Link[] = [ { to: '/admin/users', label: '사용자/권한', icon: ShieldCheck, min: 'SUPERADMIN' }, { to: '/admin/audit', label: '감사 로그', icon: ScrollText, min: 'EDITOR' }, { to: '/admin/settings', label: '시스템 설정', icon: Settings, min: 'EDITOR' }, + { to: '/admin/ai-platform', label: 'AI 플랫폼', icon: Cpu, min: 'SUPERADMIN' }, +] +// 업무(UIWS 이식) — 업무일지·일정·쪽지·통계 (인증 사용자 전체) +const uiwsLinks: Link[] = [ + { to: '/uiws/worklog', label: '업무일지', icon: BookOpen }, + { to: '/uiws/schedule', label: '일정', icon: CalendarDays }, + { to: '/uiws/message', label: '쪽지', icon: Mail }, + { to: '/uiws/stats', label: '업무통계', icon: BarChart3 }, +] +// 시스템관리(권한) — UIWS RBAC/공통코드/메뉴/부서/거래처 (SUPERADMIN 전용) +const systemLinks: Link[] = [ + { to: '/uiws/system/roles', label: '권한 관리', icon: KeyRound, min: 'SUPERADMIN' }, + { to: '/uiws/system/role-menus', label: '역할-메뉴 권한', icon: ListChecks, min: 'SUPERADMIN' }, + { to: '/uiws/system/codes', label: '공통코드', icon: Hash, min: 'SUPERADMIN' }, + { to: '/uiws/system/menus', label: '메뉴 관리', icon: SquareMenu, min: 'SUPERADMIN' }, + { to: '/uiws/system/depts', label: '부서 관리', icon: Network, min: 'SUPERADMIN' }, + { to: '/uiws/system/companies', label: '거래처 관리', icon: Building2, min: 'SUPERADMIN' }, +] +// 통합 메신저 앱(읽기전용 QR 설치) — 인증 사용자 전체 +const appLinks: Link[] = [ + { to: '/admin/mobile-app', label: '모바일 앱 설치', icon: Smartphone }, ] const linkClass = ({ isActive }: { isActive: boolean }) => @@ -72,6 +97,7 @@ export default function Sidebar() { }, []) const visibleAdmin = adminLinks.filter(l => hasRole(l.min || 'VIEWER', role)) + const visibleSystem = systemLinks.filter(l => hasRole(l.min || 'VIEWER', role)) return ( diff --git a/frontend/src/main.tsx b/frontend/src/main.tsx index 4a1b150..9544805 100644 --- a/frontend/src/main.tsx +++ b/frontend/src/main.tsx @@ -2,9 +2,18 @@ import React from 'react' import ReactDOM from 'react-dom/client' import App from './App' import './index.css' +// UIWS 이식: 모듈 스코프 테마 토큰(다크/라이트). 전역 CMS 다크 셸은 index.css 유지 — 덮어쓰지 않음. +import './theme/theme.css' +import { ThemeProvider } from './theme/ThemeContext' + +// 초기 테마 적용(FOUC 방지) — ThemeProvider 마운트 전에 data-theme 세팅(uiws-scope 화면에만 영향) +const saved = localStorage.getItem('cms_theme') +document.documentElement.setAttribute('data-theme', saved === 'light' ? 'light' : 'dark') ReactDOM.createRoot(document.getElementById('root')!).render( - + + + ) diff --git a/frontend/src/pages/Login.tsx b/frontend/src/pages/Login.tsx index b314b9a..b657872 100644 --- a/frontend/src/pages/Login.tsx +++ b/frontend/src/pages/Login.tsx @@ -1,30 +1,72 @@ -import { useState } from 'react' +import { useState } from 'react' +import { ShieldCheck } from 'lucide-react' import { useNavigate } from 'react-router-dom' import { login, getMe } from '../api/client' +import { verify2fa, verifyOtp } from '../api/uiws' +import AuthHelperModals, { type AuthHelperKind } from './AuthHelperModals' + +/** + * CMS 로그인 — UIWS 2FA 레이어 + Authenticator(OTP) 확장. + * 1단계: 아이디/비밀번호 → /api/cms/auth/login. + * - twofa="false": 즉시 { token } 발급(기존 단일 로그인 회귀 0). + * - twofa="true": verifyMethod 로 2차 분기. + * · OTP : Authenticator 6자리 → /verify-otp + * · OTP_SETUP : QR(qrImage)+수동키(secret) 등록 후 6자리 → /verify-otp + * · EMAIL(기타): 이메일 인증코드 6자리 → /verify (하위호환) + * 2단계: verify-token + 코드 → access 발급 → getMe 로 역할 저장 → /dashboard. + * 보안: OTP secret/QR·인증코드는 화면 표시용만 — 로그/저장 절대 금지. + */ +type VerifyMethod = 'OTP' | 'OTP_SETUP' | 'EMAIL' export default function Login() { + const [step, setStep] = useState<'login' | 'verify'>('login') const [username, setUsername] = useState('admin') const [password, setPassword] = useState('') + const [code, setCode] = useState('') + const [verifyToken, setVerifyToken] = useState('') + const [verifyMethod, setVerifyMethod] = useState('EMAIL') + const [maskedEmail, setMaskedEmail] = useState('') + const [qrImage, setQrImage] = useState('') // OTP_SETUP 등록 순간만 존재 + const [secret, setSecret] = useState('') // OTP_SETUP 등록 순간만 존재 const [err, setErr] = useState('') const [busy, setBusy] = useState(false) + const [helper, setHelper] = useState(null) const nav = useNavigate() - const submit = async (e: React.FormEvent) => { + const isOtp = verifyMethod === 'OTP' || verifyMethod === 'OTP_SETUP' + const isSetup = verifyMethod === 'OTP_SETUP' + + // 토큰 저장 + 역할 선조회 후 대시보드 진입(공통) + const finishLogin = async (token: string) => { + localStorage.setItem('cms_token', token) + try { + const me = await getMe() + const d = me.data?.data || {} + if (d.role) localStorage.setItem('cms_role', d.role) + if (d.username) localStorage.setItem('cms_user', d.username) + } catch { /* noop */ } + nav('/dashboard') + } + + const submitLogin = async (e: React.FormEvent) => { e.preventDefault() setErr(''); setBusy(true) try { const res = await login(username, password) - const token = res.data?.data?.token - if (!token) throw new Error('no token') - localStorage.setItem('cms_token', token) - // 역할 선조회 (RBAC 메뉴 즉시 반영) - try { - const me = await getMe() - const d = me.data?.data || {} - if (d.role) localStorage.setItem('cms_role', d.role) - if (d.username) localStorage.setItem('cms_user', d.username) - } catch { /* noop */ } - nav('/dashboard') + const d = res.data?.data || {} + if (d.twofa === 'true') { + setVerifyToken(d.verifyToken || '') + setVerifyMethod((d.verifyMethod as VerifyMethod) || 'EMAIL') + setMaskedEmail(d.maskedEmail || '') + setQrImage(d.qrImage || '') + setSecret(d.secret || '') + setCode('') + setStep('verify') + } else { + const token = d.token + if (!token) throw new Error('no token') + await finishLogin(token) + } } catch { setErr('로그인 실패 — 아이디/비밀번호를 확인하세요.') } finally { @@ -32,26 +74,119 @@ export default function Login() { } } + const submitVerify = async (e: React.FormEvent) => { + e.preventDefault() + setErr(''); setBusy(true) + try { + // OTP·OTP_SETUP 은 /verify-otp, 이메일은 /verify(하위호환) + const res = isOtp + ? await verifyOtp(verifyToken, code.trim()) + : await verify2fa(verifyToken, code.trim()) + const token = res.data?.data?.token + if (!token) throw new Error('no token') + await finishLogin(token) + } catch { + setErr('인증 실패 — 코드가 올바르지 않거나 만료되었습니다.') + } finally { + setBusy(false) + } + } + + const backToLogin = () => { + setStep('login'); setCode(''); setErr('') + setQrImage(''); setSecret('') // 시크릿 잔존 방지 + } + return (
- +
- GUARDiA { (e.target as HTMLImageElement).style.display = 'none' }} /> + GUARDiA { (e.target as HTMLImageElement).style.display = 'none' }} /> GUARDiA CMS
-

AI 콘텐츠 관리 시스템

- - setUsername(e.target.value)} - className="w-full mb-4 px-3 py-2 rounded-lg bg-card border border-edge text-sm focus:border-brand outline-none" /> - - setPassword(e.target.value)} - className="w-full mb-4 px-3 py-2 rounded-lg bg-card border border-edge text-sm focus:border-brand outline-none" /> - {err &&

{err}

} - -

admin / editor / author · admin123

+ + {step === 'login' ? ( + <> +

AI 콘텐츠 관리 시스템

+ + setUsername(e.target.value)} autoComplete="username" + className="w-full mb-4 px-3 py-2 rounded-lg bg-card border border-edge text-sm focus:border-brand outline-none" /> + + setPassword(e.target.value)} autoComplete="current-password" + className="w-full mb-4 px-3 py-2 rounded-lg bg-card border border-edge text-sm focus:border-brand outline-none" /> + {err &&

{err}

} + +

admin / editor / author · admin123

+ {/* 로그인 보조 3링크(UIWS auth 패턴 이식) */} +
+ + | + + | + +
+ + ) : ( + <> +
+ + 2차 인증 +
+ + {isOtp ? ( + isSetup ? ( + <> +

+ 최초 로그인입니다. 아래 QR을 Authenticator 앱(Google·Microsoft)으로 스캔해 + 등록한 뒤 6자리 코드를 입력하세요. +

+ {qrImage && ( +
+ OTP QR +
+ )} + {secret && ( +
+
QR 스캔이 안 되면 수동 입력 키
+ + {secret} + +
+ )} + + ) : ( +

+ Authenticator 앱에 표시된 6자리 코드를 입력하세요. +

+ ) + ) : ( +

+ 이메일로 발송된 6자리 인증 코드를 입력하세요{maskedEmail ? ` (${maskedEmail})` : ''}. +

+ )} + + + setCode(e.target.value.replace(/\D/g, '').slice(0, 6))} + inputMode="numeric" autoComplete="one-time-code" maxLength={6} autoFocus placeholder="000000" + className="w-full mb-4 px-3 py-2 rounded-lg bg-card border border-edge text-sm tracking-[0.4em] text-center focus:border-brand outline-none" /> + {err &&

{err}

} + + + + )} + setHelper(null)} />
) } diff --git a/frontend/src/pages/UserManagement.tsx b/frontend/src/pages/UserManagement.tsx index cae867e..9bbdefa 100644 --- a/frontend/src/pages/UserManagement.tsx +++ b/frontend/src/pages/UserManagement.tsx @@ -1,8 +1,9 @@ import { useEffect, useState } from 'react' -import { Plus, Trash2, KeyRound, Power, ShieldCheck } from 'lucide-react' +import { Plus, Trash2, KeyRound, Power, ShieldCheck, RefreshCw } from 'lucide-react' import { CMS_ROLES } from '../components/rbac' import { getUsers, createUser, updateUserRole, updateUserActive, resetPassword, deleteUser, + adminOtpReset, } from '../api/client' interface User { id: number; username: string; displayName?: string; role: string; active: boolean; createdAt: string | null } @@ -35,6 +36,10 @@ export default function UserManagement() { const changeRole = (u: User, role: string) => wrap(() => updateUserRole(u.id, role)) const toggleActive = (u: User) => wrap(() => updateUserActive(u.id, !u.active)) const doReset = (u: User) => { const pw = window.prompt(`'${u.username}' 의 새 비밀번호`); if (pw) wrap(() => resetPassword(u.id, pw)) } + const otpReset = (u: User) => { + if (!window.confirm(`'${u.username}' 사용자의 OTP를 초기화하시겠습니까?\n초기화하면 다음 로그인 시 재등록해야 합니다.`)) return + wrap(() => adminOtpReset(u.id)) + } const remove = (u: User) => { if (window.confirm(`'${u.username}' 삭제?`)) wrap(() => deleteUser(u.id)) } return ( @@ -81,6 +86,7 @@ export default function UserManagement() {
+