From db68a177bafae8f26d00b9eeb63c892d06abd986 Mon Sep 17 00:00:00 2001
From: spastorelli <spastorelli@users.noreply.github.com>
Date: Mon, 2 Dec 2024 15:03:58 +0100
Subject: [PATCH] Add support to VA Auth0 integration to include claims from
 backend in VA token (#629)

* Add support to VA Auth0 integration to include user claims from backend in VA token

* review: rename include_claims_in_va_token & change description of config toggle

* review: remove sanitizeJWTTokenClaims

* Move privateKey check out of try/catch block

* review: Be more defensive when parsing error response

* Add changeset

* Revert "Add changeset"

This reverts commit 712dbdcf937b0e3d95ab78f8a71c05523c67cecb.

* Add changeset
---
 .changeset/gorgeous-beds-compare.md |   5 +
 bun.lockb                           | Bin 381832 -> 382192 bytes
 integrations/va-auth0/package.json  |   2 +-
 integrations/va-auth0/src/index.tsx | 353 +++++++++++++++++-----------
 4 files changed, 222 insertions(+), 138 deletions(-)
 create mode 100644 .changeset/gorgeous-beds-compare.md

diff --git a/.changeset/gorgeous-beds-compare.md b/.changeset/gorgeous-beds-compare.md
new file mode 100644
index 000000000..a40059f15
--- /dev/null
+++ b/.changeset/gorgeous-beds-compare.md
@@ -0,0 +1,5 @@
+---
+'@gitbook/integration-va-auth0': minor
+---
+
+Add support to VA Auth0 integration to include claims from backend in token
diff --git a/bun.lockb b/bun.lockb
index cdd6e8eaabcfc481a7374337c539698c194d17da..298aa4422012c0cb658a29e1232c030545353050 100755
GIT binary patch
delta 28432
zcmeIbd3;Uh*Z;luKKsZyh&hvpStUqFB2FTbm<b6r3ylauLIx2-f;cf%Le+4vC^3{8
ztE#G@sIe`rm^ukHR!g+0YHKR$_gQ;iJMvY%@8A8rUeELVbDx)GUF&_VYaaHs_c^xQ
zO>Vz!aa-u;^DyvQSnX*}x8A$rS1an5?|Z&&f7bDbj`yA|I=`S*VBxC$L%%jl{8_(f
zKplma@5~%qxtqx%Nmfb9S(`6OUeGmGOOgllVrWn3DbQ|gBfb)JE_8Y5_~B{eQjwP(
zHm9GM@3>IK&n~|$Nws1AxK5I4L4O8a2YL%MXP*aM7kWbKh@|03l9ZJ;VR$04iQgbe
z6~MPbbM|+kt3k(S_>PYsmYk6LjwIE9Jv=RKOj3d*jY=5rJ2q|H_`akUKRhjUB(iBB
z-PkBeRpD3!%^9X7r6dja9hrJc*vB?H>Q@PG+ucZ)i2O#xj~kZ|KVn4ExUnJNTy91}
z%EW|mlC*cLBss(00nPOqo*17z1_e2Cs@AR7d70kG4dwJkW<b}3)BJZOsWSAeU3;rG
zm+ePC)Xh=j;>RYYCrcr_C8-{wn?ZBl^`N<`?$F$oYJpxBs-ECGVwiOABR&0ba2|sA
zjI7k*W0J=2MZR38H}~lIj7S@wkUCM4-UM$7F3Pp%7zGyY)eG7L{R$lF?Uy8P=v~lm
z(6<gqQbp*C&|I<O&|IONpXhw#u+bT4yEOcuZVwQ8?6|a)q>Kb9J|liC$9Dtg^kJIr
zAmyAzMqJZ_BEwP1X~WoY-C;?p0=^8Idtg2^7npuTZ}B(KobGdnPmMbE50RR^hGp=`
zNK(=<J$5}f5BX3LKRP2VH3;#e5>mORqzxzZF(t%v^Dcd%+ee^zisyp!aB;2TlQX2H
z@Mn7pI5%SqG-_$j8J&@kF&r5iYvl4tz28n0N|Fm4=O7^uP$G04=*y?{0**lQV(0?S
z1D`rTZ)R3}a&l6}cq!tHUa?kZCCL@>KG0mS3p7u9D|AK4jsb%sudd3_JWB(RAs2k=
zxFj`$UJmU8o%FRn5hufDf7>^b6ad{r`1wL}Mdo}eN$${v-|BuQ@FuV?e6HuS2f9A&
zCD0A+2=pt`TXGkg3;YtAXHqg8yrEk|b3rws>q6iAOp+Qwe+SJK*#XUdsVLY3daj6%
zgXSsQ7Mgp`Q}7b_`N94S+TIv}H3+bdgl+^~7n)oA2y=mX^mV-j_xI^tm%CTb(6GM)
z=dsPZq0c-!G|#XJLMKC8VaG%BT<ZmmvCrvp1NCRe)&M*<zCza*j$<9yT;1%$Z|bpw
zpgEhK(40*tXf3s{>p}BW^o8c!+(i7FKj{85g&v=goHPtGuDn>GKcV_uofFVJ)874A
zFXs+4nq|*fFTir>3UJu}i>}Qjy6yqZ3GL_?uAtFBM!y&Zj>R6r1NP!pVf5pH-}H))
z$VeEE`bl~|n4(5a^X}*~qcOB67xcTX6JR%l-5$CDbY*Csg5H1X89x41AGp_0fg0d>
z_jSKP_w*_MC2Cb2JmrDD_F6yGdt@=R2TxHi1iYYY!hsz}Ap@Sn6H=2hlSXDqo=x>0
znERJL1s^}s*HBmZ@znDX`q#($6dv_NZ-_HEFXAar^%;~gd_vL)w0v|Lc0ShN_Ns8m
z{#zgGK>$2fQPAAw=g|V5^KO!?Rmky7Z}BqNJU8yc=0$k{nhRPB&FNDT#-;JLYg{hA
zm1V7Gjv}6S?QD~tKG7uGwcWr;)g5{vf*pdOIm7pnfP3UFD#G?bQK3!HJOqoOU7+pI
z>{n1u*0!T@2`LF9lCW0^KGruG7uE67DJNN*W5&>=Jc!V1^o>Q<GWZO-GBO%FAvJ4w
z+K7ZC*gU4j81@%_`^(E(5AAaJ*K`Y54U4OhCv+5w<^Fr|;xIaCd=htjyL*nwHD9Uv
zu#&7Tsg9LpZDyA^cGh&W-T>u!e$jEZ=77kH)pVc0>Ux)DLGv;^3(iAe@Z+#K)mYyY
z?TWUwhTf3!F0!^<pE=S!N41Y}m9+ut0nKaeDKzJnF+P6$1Y9caz~+jNNEpi#MM{j%
zNc7E^kYWSpaq)I_)U5T2y?jks+sX!e=$X5E>b+!!=J}Ke&e=${^x?>d?F#!I(((NG
z1)TkU6!tl29=_Y~s|#HS?FGFHnolREYwL~8g^hl;=S)O^uO|L=^^82Bxq!!Y^b9UT
za|U~%d7fOTr)TswY;H$Sq~~^Ds;{T-*+AANdJE_};3owi&`?irT>k!Y=lB|!>9W2z
z7)z;dqg}ndHdc15^}XtN*es{Ys6%sOJtLZbT)z%^c-8Mc&ynft?O5nn*U~U`Q&p#K
zEy8!b@7HFIquIVT%7J{x=zZae?`p@^ec{&at0k#7Y9KrAPO({^!RiLf<k;EQW{q4U
zNgZKHj`W^3W&Rq+*8Snixiya4`@^l~wUX3YPuIz2jS!aNNN;DeX2A;9(?!|LJ7EPl
zQldhwKX3?Kb)?7HtS;;H3nbDEv{|EIg=zWu@3UF!ye&y_rPef9gG;R<Sn-BsZoOWT
zVjU%)w6P#C+`!6T>m5xFg<G3%&`UHq{6lR@@&?D&L*dGY8yvS0XL?7HqL4sw>}+RK
zdcNZreK=fM^^Rlf;c#;a;#xXNri5DSZPeRRPV12vSbD4dyV$G_SpLYNyd%AX&3q45
zH%Cg>P;0~{NeTx?I}>cyY*^eICdXa$)NT={IQ%=<tbf32gE-ld9%ZvO-)xkH+%2PE
zwL~2C@=#hhuC}&VR|=x#WH}A1l@>ookGGh&=;cx`gLL=@nGV9WDfO}L1>rVXwHfe-
zh*url!lqkwZ&<5>Eikyl&@2q{XRx?><sANK)?cvN!;-l(&26@!Sq|S{+BhM=Bd(V=
z)M0gOIr4zpVs84bB*i#V1_nCT9?g|kIed;qSg(U|O(e%%yG^OJeb?4w;j%o)QT%Cy
zdGU5h>hCD|G}L?xp=d1>^qwU3)k1ltp-ZJ9{~bo`Y%P@XMH>}?-dcjD?@Lmo78;Mx
zt6Jz-X{g3dN$R1oVWpw>OGAH`hN3<&{N6$+N=xxmX((Wq!KNY9O^ZElgp_I@?i&5&
zG{t)ELrLn4Mw@vOSqJTwBpa+M+y&M}u%cm^D805EZ23s<W2-)`VDTiwQaxm|?t{f$
zXL6)33ziEUqfdt`-3uIBPlual6rcb{%IHwbw+Qiirn6^dZAO`E?!ovvO6G=Idn3d%
zv7DCqN?1Ic7Dswln|#UPb2h?S4d<a0-2)Xp4~wf^PMg)WKNc0`M#x_|e9lG4367+5
z5lZBK$JTS<)@ldPQ*f`y*<1dE)fQH1MXW79k)#erymb;RZVi^^aGUi2EcV70HP>c!
zJ}5~oU|~ro+vKT^q^~2a2f%a>FzZuTyfB;`=^KJAhje#j)yHNX4vX8RI_}=pqS(;p
zto0_M^rh%OFIYb8X!32iHTJNc*vWAh`R;_(Rr9|)C)f!FcmMMy*p3)OfW1@BaU^{g
zVZ8#znM&Gf@;s{dKML#`Y=OZG5e6zouy{4;b@>t&w^48LV_002wozF_ju{QY24c>D
z)kYh@9SC)U7dD5vHu*0{aZ!Y|@Pxkn6t2Jg%#m~<!qVmoeHE8(E9P8~){c^#P|KYc
z<CM@Z9iuOXn;l=GgV_aRTYND>sc_QK<oj^*(34u}IicoN2(@Pi>)#0RlE=25Y*Shk
zI+|Pxx7rK!%3)<Mw^=X4;<<xe4?AzeQ;yp?;pSndBx$Ilq$t$<2%&+Fl+~f;UZ*8#
zkQUm8&<KvTc0Z$cvsv3fXT##L#%#dE+vnJFCBhnY77Jg?p4k?M&(#R|7e~_72qo;C
zW9!v$^Q?1{G{li|F;u?p@VORY_5Mn)531b7CZ{^KT#GQ@0~@auJ@aecdEjj>LI~+l
zv7~P#>2)o12cgM2`&LxZ{4+wmH5T@rkzyr66E#-#ypi*4ghp!YXM{#;q4XkdvhVky
zX0Hoc&M21<O4VY`7bR(&R+mW#={0zY&@k>AInI&vQ-t};?~O8jF0nUv=}Lt9YB}6N
zC|S#4@MTHL)Yw-D4R!cl3pEE`;aDzx4MNkjSg)&+G?qj1d`I!E2>FS_r#M1RawOsJ
zOO7qY5#~wPxot>qEkURqx*l5;E)jk|NK!von0||F))lbY!@{0&&L&@U6yJ`puDGEu
zDSc{RgT<>wx4eGTEo^CBZPplAVoN~I4p_V-WNlrYg~ba~Pv`Md*<AX;;!^cE`VXrJ
z7U!apzZbUGn?`v%N7<|&!Q$nK?G@Iqu=HuhR>NC*o~T(`umuKJOm|!hi?h@ZP?uqG
zgY>wX#ii?bl+8R4R$IsRQK8o52yqp4uM4m^jjA0uTyKjiYTI&OVPRjuRdz8f9ISeV
zT8|;r1!=VXLaFexWAxo{Yu}$scN;kGhSl2P+W`v{q0VrYP(ZNd7rpjan7wS4X|TBV
zrJI`N^M8;kB`^3`UjykVGPGIO!s7nW4?h=R@f6VdLuvl2qsgD))``CwTZDgSn{_j+
zK3W2t(X2b}=*KuLZyYPC{f1{)h;!1$c?vA<D4e%2pS}>5J_jn^)we~A336!zi;Fe$
z=vfxQ;_fNk@~r1UhJ)ZbfK4j&cgOAf;nr_|*Dqp#D7wKP`VrLZxO?Abo&gKT%=@9%
zD+om*sa|Z*pL&(hS{&de!HUp|<teM&Gc25mto!ck`B}IrithtQlSkp!Sq~(sCla7V
z34Gn$@+iXG?IC8fV|(9F>o$Z2l@?`wWNd5P!WdYc5T{>RR>O*gWpV8MIN0egaWFJ4
z^VZHFJVN@Rb3H6QTW;r5SRD|jcX8Xtk~Bceh>w3%YVi@h(i0rn^g<@u%=2NTYCHa8
zgnH?Glue%NNO~G!J^NH2V$4XCVftGi91O==n>7$tH@!q$Rp-Fs`Hu2&tT+m*t7f6k
z%oU#Dra<fUt_XG4%Rpa-;CTQy7Z(uJaxE;L7C1qn6R$gppG8=k$g;R)K>6m`uzER4
z(n77b5z<HRE>2B>imY9$^n4OvaZgm>e9W6+b#!d+6Dt2gTVy%HJO|GRaH;JTYCVb&
zcV~I+((Q?73HqMrk3oM8mcA7I(eU-KxNEH1F7hX=wpu!WG`yu*kJBcEbv7)$ft<@3
zSOeiHlfNr=COl=}60jwpQ<7lyaBN@IMnwRd`sh$|Jv?Rz=8!c8A)bMl2<WHfu=H&U
zy<jPV6^=MMyUe8DP`Kgg0()Z;<=NzH@+l`rSZ@JxX}Ie{O?<4fajnJ_NQ1?@B08+6
z&AJKJtFW}YE9(PTJz(iYcfz9y?juZqDK_~FDt1B_R;nQLNn?4awJSm`^`z*Esj#@7
z$abJj{(y=ta)kVtP<Dj1V?{k9%pKg4UV_yco>o5nS>2rV%3)sP!ktJy<&j_oAU6}4
z;ZE{9VQGun;(})#T;u0mkO0Eo7V<AA+vN3>Q~`OYctXM>g&v=1Q=%)=?Fw?ZH5Zh9
z(KDlQ0|bjFu6|#qRMD%cS?12LTJzRy$>9*ZO7FMik15F+Mf`>ceQeS(?_a4ZYbQRO
zSyAc!u>6n+GrFhEG7A=WW$CVLJr2?gL~E4%ClyyhhTeE0BgO`^WGF1$!A6H#mvBgP
z<}UjK7Pk!7WK4-LJl)|ol-ABN8-(MZ@0FhlAALiY@tlWKXqFOIgPK%D&t!t~p-=bO
z3yZHXde6AwiBS8}xENU6hd67!5p03c0){@FJ{K0MmSK}06cksJ?TR%CkAiqd(B_6^
zCoE2`SFi46tHn*Puf82e!s0&ACWLi5EPW38Zwz*V!DW>;%yLgSmlCTl9=GszjLdM`
zGnJCuWV^hNilM9?c!a~_r7c2hb38#B4a?baHyTG9SRt_VhXhUVREj5=lVfK}umuKh
zc32~$G=n=2siJIFS3H%9g5|2+`3-}`8vt&oy4kGTVe!huK?=+6DJ<^7^4cC5;bp9G
z-Z7`a;tPR(9zF^yPP1@fv)0FREZ*rWXvglUu=qlYwbRKa7m-gb%o<lbq2dh@mBsRk
zgQZ^#P^{9vF5Rxh^BzyTxN7<m{0bHqp>Nm$^<?d$px+11gT)=FSLRPxT%hjRrM|4)
z%woSowU@x+k*cg+Aby3#4Rq!W-JFQ0V%V-bg<AI_q+i!~qjznn?@W4rX|M(&4Q3LK
z`Ja<dT{K5&Bx{eeP}P$*+FVy|E03XK#K@}(eCo-=tJ*6{k~GsK;hG^yv!E5|*P;3I
zGR=N-MEuJ%r_U4dtl59Auvwd7FAz2~c?QZ=saBv|C7wMOB8DR!_=|H|Dl{>~hc){x
z7xsUp%fs(&;m2C0*@1E$J12ifVAgDJ6nYah7rRBov*!4%!e-6(Hes_a2YaWmU#2;~
zU5IDB8x3ySQpVCL2x}?FdH!$j|Nqqc(Y@rH-DIw$bSHNw#hGFeQtrsKwUW}Gjx%wt
z402bdL6t!=Eg%P&{2^2MDj?ogkd!JQ_hkB*$$2JTRY4xeG`cECZh4SGCXZyQSq&t(
z0!Vf>kjFB80irySseX0nr!q}u{kKf#SU;1gNe!jHEYb8D$^coWA}D(3jPzkHN_W{r
zc`g8(D*==+FjI&tz`)7?`K|y?RLsCq1t8iDMOqa)QVx~a!=#ZDNCkz)Ie{cr1^I@F
zvqJSPAnw&bW?MiiD|C*@aV9}lkg5vJu%e396uQ8=x<Ucvp=&5Km$i#R*P-cr4W#H)
z0V&)RT3i7n*9GJri0nZt+)%k-SAeHnIZuV!SA@$gCht@P@lxn_Cd=JG`Z*&}9a`tC
z3@GU8t|ZIt)VDnso~*A-?)vee>f2W~*>Gm@xK|!!?vJ*2HlJK~E@Nea?bC;|gZ8?8
zwCtl=>2KFL)461n-E;5ueaR_}`%WFadBIJ(=b@z0YaU9J+?Zl&a#wkxqysfkk`Gxu
zQPLhyrG~7#_|f577>DNgIsvK$rL*#<6RZNLUTvsA%3{@$&aw(3pE^*jXgVt!6|o8?
z|GH2il*g(yU1JqWA@!iz&>~i0RLm-z+SP}OpcSmz(p^^VD6#=mds@e;13hBZk$N>$
z27J^=IjLw>C3kN$qp&fW(UUy9(XQhRvb_O%(Fq2bJ^;Qx0DUOS2f(`tz$FI#$fpUw
zc?R>F01Tia2DwcE!kPlaP+n7j;AQ|N3<gt3Gk{wR@|yv~QZa+&z5vm_0CBX!7oe*j
zz*7eC6zK=>kim98fZ_Cr!RF=wvCRPzXiIZ|fh_=>TL6rrm=*vQe}DrFlE~^0u!lj4
zKfoB;%OEiTz$*YCg^~gQ+yem$8KjX%Ai!}3*?|D*bb>)<O90=N02!3k62LnM;1Yug
z<P!vNp27SefJs!uAh#7jSSx@m%4-D>Yy&7^Foi;F0Jj+A+W@kun8EU3faqWVJFN%?
z=o$j>l)-e03;}q^V0#F_OnSs%b8CRu)&R3<OKX6Ep#aXI0COlN6u{C3-~fX>vbF)(
z!yu&%z&zT^ATbQUD-2*hC4~XFhXWKcSU?`(0LK|*;{mz6h)yubi~#VB0B}%N1b}y2
zfJ+RPl22QJ^9<&<1t2P7klPL*tR27#%4-J@+#aBW!Ac5g4{(b?etUp?DrT^}13+{K
zfHkzD13=e~08bgLqsWc`4;gIl2(X?WG1%M*Ahr|0JG7+}z`)J`&Yb}^QA}q5OBa9x
z47QN93&0)*DO~`z(Ow3LT>-qh0&J(Gt^n?l0EG;8kVhoIaR%9u06XafgUoIKzTE(J
zQC2qqZ|szGiNS92=?-w7!Tjz31ysZ!Hwqvu3SckgMF9jy1C%h>M<LMww;1F{100}Y
z2FrT@ME3wVNGo~(bnOZ7l)+(&><RFY!S<d2N9hrR&94H)z6$UuZFv=7U@rjYUI3p{
zOfLXSZ-4^~PLQ=Xz#axEy#c<Yy$llj0C@EQD5Ru50PcMO3K^UxkG=rM8D#ebI7=rO
zWcCB_?FaA`W%UE_?hkN@!8hd7AK*NL`TYUDqap^m0|3GX02EQ)0D$0u03{4AQpiAn
zTMY6C0$ieE2FqgrqGJHA(25v<u7d!cGPp*Og8&{f*ggp02YSR{^I(A3!2mzfmcal6
zUjuM{4d5olyar&21vtQ<n5?k?dl;m|0{l#S86*w?@EQV8LP<ja+~WWW8QdX{IDq2}
zvf}{m(g_BcLjin;0{lT)Ljk<w0WLAPM?UcY=NZh82Y5h5404A7gbf3DM0vvif`<c?
zFnCNM!vStF$R7^yl!_TF9{~_O0^k{~7y-~V0pKYEnIaPa9x~XT0AQj=3^tDhh#d)F
zrY$1@295%79tGe;F{1!1i2w%}Sjn0Qu!liPB0vS&%OEicz$*#BnUazK+(!cxGN?=*
zqXCXH$Q}()l}<3o90TAx2B11+jREjZ2Drq)g?y3$&NG;w4B$pZ402Nd!cqV{C@%#d
zI2E9TfhUEe0^DMdp9<hb#SE6G0Ys+()S(q=0A0rdJY`UiBF6$eWUzfKKm&TjU~@V^
zY&t+A+L8`1a2$a1IDp0!GY-I#0dRnU4_Pw+_Ap4v0BA~k86=Je@EQ-`OG)Da+$R7O
zGH6a769A4g$esY;PbU~;P6Y6s2oOkF69K#@0bF7bL_U)M&NG-l3BX20401C8!ZHCu
zC@&KrI18YJK`4b}0o-Dcp9K&`#SE5D28f;v5J4*@19Y7N@RUJ2ikt%QkiqsT03GNN
zgUwR`Vy6OhqAgPa24({|X9IMhm}~&cG=KvPBFQ=pU=M?oX#m}6FM~uofR`O0nv(1Q
z?l}O340@7B4#05+**O5c=mdkz=>Wdd0s2tZbO7%e0GAl_BcB-n=NZhO0Wg4y805|b
z2%8BILwPd+f@cAgFc?fBvjA=}$e#reOT`S9&jyH|4G>2wW&?D69pEX0c#3=-;Nj~^
zMSAyjC92@nIok1QjuJ(QbK&JR7hWlpG#6g(^8gANq>;xwfa46Z=K-YC2?m*O0QkNE
zkU?2*0C>+w#^1kzqvZsCl!W#$cw;`mBpu|wi6mifB1snIy$O%t1pp-srclTNfLjdm
z7XV~aF@xm`0iqWI*lEQ=fUb)Go-&wDk&6HxGT6QdU?x3cuz4{+>|%h~v}G~CKnH-c
z17HrtH~=h501hz7BkK}?Jq%Ko0L-Jk3=)?Dcr68(Pf1Gw+?N3qGFU(!%K(lu$X*7p
zh)yubBmiFma8MQjcrORI#9%4;EC)ExVE%Fdq9O*lE6_o0R-l7c=p7XN7CcH;z+)wa
zyoJN~t+y15LUqr{7WwUhb*q%GUcnD1RI2r<vc!C14St(Qz4DbQ%*szn8#g9l+z6@N
zx`H10%0vZgXzwv4j?S!C-r&C$7Gxe*s;JJt@7I4PCLO>p1vz;HC&yL4=%muv+4#+J
z+Clv4u3+az<)BO_Pbn7j(G&Q&9=ornh5bybx%)}{3XbhMoZM>s=Jy`$Jgt1?YW!4p
zcyf{-{}`H|1GG9@@YWfnwX+;su;{9?Qqfv6{;E<-2cD_acD~}zxewDS?Whvr#MZIW
zCTQ*W_rHt;_x?wz{%>>tUq5{w{d@oaf8Rs1d8A)D+>V?C7rMF>Qwe`L{-4!sQUTKL
zlda-;+l}?KflO`b8krW@8)8E9r#2pP@#7o|q&Wk8>VWaHF)JjWXFfjlg&#kkdzB;c
zX&_hyg!_qbL!tQzWsLA^B$zXpn~J~qyW3X)IldCaU5Ap7aI6gGAy^aPR|TxLV7|hy
zD%D$IsvcGiQNME|@aZU`sw4bNuug*2U<c8j&R`sLp>$+ncSW$0h>8^MZeS%Mi*ACs
zgZV?aySjsMIu8iGH_%wT@T&<sP_SWOoV6ze-=b)r5n%Ykzt5FI^-jP)WDtqHsOnp2
zR&B&>6LlIRqUwOH<%IYo3sx6lE`vWQg4LsV&Z0ihZ9Kf?p3e|b4G{j7AL!yUUa*D;
z|0dW3!5Yy{&f*nB{Vt*=iKxb4_XNun%p2^XU|E9skh~IEG(pr~B5DevcodsLo(N_a
z?#;loC$msFg85P}&H`T~Ny~)$3=zfCb%kKY!*F~#BE2OTKN#oX^QU#31rO0G5yj8Q
zIf{qKAJyRr$Ir#NxA8TT6d+h07(XfwqPxh#j;~InA!0=Mp*Lq?gZK!xNHBaSAT<?i
zF&O^vS1VFOFc)ZkK+b7-HdF!QS+op{lVCPTcM!?5j~6cc;p-OZEn}9f5HO4utwOW#
zMUsRIsrFeZq9S0e)seJHu(q(*3zjcfJGzD}?CpWy5mD<zR0r6b1bbVsj<78VdqJ-k
ztP{dk!8Sni*y3w5sf62t&t~C=ual(@1luAQz7dl?RJ0vHe_GFNjil-MXcoS1l2$n3
zFMQq={`mSv+AH$dE?5-UKEd7-ESk=87Wf`lDkrjdA5rYp6XGP;2f`g+b4iyl%Jrc6
znLjt77u8#hEP5mOlZe_Q-1~st6l||xeZfB9bohKMSU*Zf7WV!?QE=z=u^&-f3;Z}i
z>IKH1PXxoaK+<9`ALv7Z;fD%ROE6wQM+6&$uo;XO%Q3+Qb68C6&%n4JUxUmt<6jf;
z9RFN6;%g|WJ?hDG{Dg2Ef^Y}Hz7Q-9tdn40inK$)hN1RB(1pS;9^nu$UIeEE8-{Q*
zFkS?wO<1H{o8ge^fIQ>R2*(i!AA+=loE0pAcCJCEjRdLy#Ix%wXrz=zK`ILNjc`u{
zJIRswd@EQI!W$9h&v$~2MtF%}=LH)Bb`)uORuu`BjPOB48p2;`N*4r7LHKhxMnhi|
zEEVBOm`6Ovz85SF;mU$t5^OBk?-(tfW0%3WuIaRHE!sE^!N!Q<&o$wmf$&H$o*>tS
z`*?)6h{3%f*aWaH7#|*|pG4Y;2)9K3!=P^pHVI*FCx31UmWePfphKht1d0XBLf9Q)
z?)ck+O-7hA<c|MYuqg=FLYUkCi(pd`eh9yG=n^pek+NygI<#>bf`oeV=Po$BFe7nV
z5bO_;MGn|tFmCIgU>rRi!dY?~9tyu1!iJI_2{seqC&-wq@t0t;5PqtlD29&(oQ?2t
z<jj?NBG~H)r+{&#o(eVxVV-<B(0@a7rE?)X`IvF-cuwbW7;Gk#EZAIxUlD_)s8|B*
zI1j>|%Nd)5;~NNb=W@oXU{!bn#i!wiRC|}H{<8I^t1f)j>ILZy=>zEt>0fYfz3D4C
zXdA-3H}bx>1F{ve9Ku%!z7(v2@K(PXvIepivW|Q<ng*NsN}ff|8%=e}O-FEssbI!N
z(>Nu1Ck);fd!cGR&`lssA<ZECy(=FWxR!kNTLj^&8-Fo87cvj>24p_uO~{;rc3VuJ
zD;~#@7au8kQ92;J5c43j3hKRU8Z0}XK>Q}y1X)^;w;fHx6NT6vCQp}xKz!WdYd7y>
z@51$c%G+UTOdswrJ;6QY&i75*WHVo7mQnl%rd{P<{SaY%HhjgM*u;k~UVKsG#&aid
zXK<%*=Ws`HPw<gv45jQcHBh4Qtrz;<#TO;<F2<MfCXiPkjS32PnYLB*iNT=aOFqdH
z%md;MsQ@Vt!B9$8=-G%bp>>B$Q|!Due+%<Zh=M2?@)+R<ko%B(kUt=Ng#8u5SO2?^
z-yodk5#%A{F9=UYKGyyXc?x*~X$))u=gq(bT@Io`%n+<yyX1txE;#ZA><6b?2v<dT
zH8dYTDnpzh6(M{GX5VViH6Sh!H;5|)zZjEhLf3)RhTKA4UeE#HwV+2qzXvITbU@rU
z(0%YF>Jd|YrJ+LMM@+9+`KaU#X-p|cOrcf%5ah1x2jQrWwEKu@0983^8gFM?&q9y?
z3O;N<0xyQV28n?f>3bsF1JVc58^Uw=RS0ty{t>}I=>CwtkbaN>5WaW~h8_grCf$Pm
zkvET@5Eu&K#Bq>V2xrVkKqFHg7!F^6Ad%*G3Hk`+d&ptPMaUsYJcNC5h0(60M%rnx
z^B}np{K`O@4Lw7_mXwXac7Vyyqab4;X^;d+Dr5v?IAp!31p9CtXEG9cF*H{=1;TbR
zWHclRk_Z_C$%0IR{EC)mK#zl@L&o#&G!ZfZ!cLh&ra(`H9DwYH?1SurY=C@B{-2sW
z@#DAXPfc$2Eg+jAn;;t@>mhGL)<RZ8@*&*zRgeX!D)+%+4ny9AaDU8!=>35!0>Zo)
za-i*yT98?gMPM_bjXXp;J33KM@H#YyIf9)y%<=|g9%L@WSaI_O<JHH7v)>}fLe^kh
z8Ll*QqhhRALf(Qbg*YI!cmS6mumZ9iLXc&U5y(V_u%l6dH3)O2tk;RKQGgNm4mekY
zZSHH1H_{jtGJG{{7tV&$R*`^f`z~agu#JLPb3$$@4}p=ctmffiAI`(zMunO4L@>DB
z2(ad^WCsp&ON@-TQk)qNQCWY(_un*kw~@!k2=hGS^q)XPn%-JL+)8dO7sNH?!g%7a
zGcQ16hu{S~3w9CodB_pSVF)i+W1*fT|Kp~{b~gVz`3}jxfqV-&1^F6s8uAt79ONwI
z45Sdkd9e>`_F;YE1^Xy$;bSj#G7@n?WfQZrk<l@Pxj>F*;r3jET!mbQT!CDNbVl3{
z&^I72_Qg%GgAh)OA1nkMH@#xNg)k55L&z_X`w;H<-ywG(Lm>Ace?sm;ZbLXdr~45S
z2jPv9^Zp*fdHe?9v_C`GcNm1ZQSV<xxP*6SE`Xglk~1wkc$_IGG~!ts1sfH7u|j{q
z=MKc+9OgVYUD@=U_Z?o`hNF=&JD1Ji0c@k@%#DnO;j|GC;hml1V<G)u^U;nEz<kW>
z2x$i10lFQeEri!+FR(TU&#}Yc{n8HxAJDuZT!F^WuR!>jTXjf7NCikS;<yqPgq<J?
z<S*FI@Zr|UusQu>h*9aM2tR>Hh>L{!Tf{wsw)54roJiz@Fefs>=FC)Rvxwspu#q7b
z@S?BvU-Fm+-&{y}#Pgcv)^mE1m)%(9S}QrC8XURy+^u|-7>sZ%q$+r2NF~k)oac!%
z!kiHw>AAvHpg9eT5$0nX``{lyNG^!?fN=iYQw>ZQe=gJu1|RL+AT=PI8FNnL3Y!yh
zCY%|^mDOc4=QKvzT1dkMc|z9|>A7%@=i#c4a6LQz;zKnj<OH=LoFO~0<^**`ypi#X
z@kUx>C9!SfV-&~@G|DmZ<^1g24cu~L{J6$t9SqJhnrAY{8S~=~e2q+vRl#=}J`ncf
zyA7@k`*2~nUDYOF5OhmOpb6{0IRfm=Gt(boo}DeA10bQ0)({(neOi@a!DTqdu}_Hb
zW4mlTuM%D@yu!FQc|~!>@?;#kBVdF<c)4*xV=0Bh=7SSY#P*bb3MZkSKs_Lgc>YBr
z90lnP=?2*b))l%MbQkDO5dLW`{z-w<8R19>pW68W<PvBut``{RcN=1)<*nix>{p@N
zLwZASup2F12K*6;Z$O3ua%EnFa3uyqMj}22x<7>5F#wt?z(@Ll2oHlcDme%?SFmhc
zEbKVQ5UO|1<VItUnk@J({=jL|;Ba1t#xZ_8TrwcWk$oJ(DUf6cAMewl`5-zLIt`L)
zqDn_hu6E92B5Wg{<p>*je2sLRHWO?SWHKZhk_X9!*deb&W<zE{vLGDKelsC6AUP2B
zV?Gr!1u{+8(|NKPksQHJtT~YpHVQTL9K><hNN3m!!QO<-7x8aE&x7#&Gv~>6*~;kY
zvDqv@1Ur^3^hKL}IP<bTOJN&@agT5>aHSVRmO!`w2ZSKZIW1R&xl!3=yd;cT8AGrV
z?7th%w|F*Wlt2F!eDRsQreO6s(`y}M3q5vGJ)p8(HPsx-%OVd6@@wUXTm5?Qt%wrG
z)^7jXn#h7RN;wx=H(zxV2|VH1!q2~@U(0}fc;;3Co-ywozmfjz`ZEjd)N}k2iv2{6
z-@~sG{Nk>qwcmXw;Fdzq*iR|&a8qNedRod&a?;-|<wpAJXa-lhc4p~;f|eFq<gI$x
zkyC&lmnrQ;PUVr)nnpRzn$Aub_PmUj)LOK|c-hzw&V6RjoB#NsA`fZl7vP5n8^gtG
z$&5E&XfY@UI|C|WMLFMA3Q4UN?9x3FQ6Wf#FF3?I(4-$OOo;C6y|Nx+{E-GdXS^lt
z>gl97zhUdPC^W?f{Qw8V+x-0fjn}Dt|IMYDX%7mYDYOF)^xJsV+|8f!HeM5V^;2nj
z^oo#$3VxTNeSMUZHZGpWP^#GYOZV6{>*^v?3>K&1*Mf~5pCRq7?tf!Y+|De8o+48#
z90L6U0{wz%=T%dUg1{!~HibI=XmTNHuG*E+`Q+Y0t=np1zTVKyv&XwM+nL!L$pZAw
zF<v>>p#HT4xy6WWi19}=QDSaBrM6JrTNy8_i+DJ;>Bmkbx$tP=*OI%>c+H(hSb3$D
zQ&xFJZs8Zq5qPN=?MK>L#tZL;Mh>q~Kd;{ft-3Az@RVusYWl5(nq$vfhfN<t5O$)`
zcOBL&8m`KtQCFUrTM&aUL2^!A4~?5S?$aNh$9#sEI*8eGwr14u>Eq&_$NY$xT8NQ4
zB(10!G~N4ojQln(yNKBtuJpPUX<92{=#IbIONrk=?E}<+TE+|Wu18$IxhHaCq1H_p
z)d1=423iOY598H&Kh;YLpHqKJN3FZi9RZZqQ1zsT&D0snv5hp<7mYXGlJ`}k$Wd46
zhjcABbS`dxHq!g>P;P9bFMQQo^nHL@lm2X~R<{OX0if@9Y^76vYJjqLD=E#@9Qxp@
zsXAE$)k3V!MM2tfz8lDEi>kI!J%W^S1F*EJpn1ky^o*CeC~_c1lb`AhTc)pKziZ=7
z4|*-Y58Mv~s_FD<D>adRou}56XHhigJilO6kXqm*zeaV!khSsdsyUW3+gGU5qrG`q
z1#*tYoAJU2?Re+h75^l}h`G9#Qo__xwTxHw<tKXk4(<D7b$#9`wC1_*rr*NQ{(8IV
zlaA;q<84d@Ei-rQ9JKfldMZTs4B1WL;c7?A<=y%}TcsXjRd;$jT&;!Q4;~CxJruQo
zE`+NA@^NyGP^0BHX)r50-5G&JX}po^%CQDr25x)nPh>25coTlKt2VV7`4&>uwrKoO
zY6@l4OF`*F+o~PSV?M^C96CEfb)iq%sx{5k_TdJCZTE65dALMr#w!7HZeN(Zd+2GN
z9N2((F`c01?U4O<6gNtBt=$seCm;tNugJtVoR$_2xd&IwGj_dC*>LqVUi}qNZi+M}
ztjGcfj3XD8OFQA9)Z0%d+o?@TTX3KJhp9EnX*=F7@@TJiYVgH={RMHxyZk<URQtlh
zoYi}f7xpQx`52ns9`%|+E8DAqaxSgwhAgxgqQl7uYs0mkOdSyYA=x^p(VoV82LpTD
z+CK1=X5orFEzr;Ahf~vWTGIhj#&|(tgDQi@EZv&+kydqW-W%^i{3-dP3-3Qk!*<}$
zJ3bn9i%L4EqcDh^1EqGveB4QQJ0e`Iu3D}9(@*s75);N#e;Fe08l$JJx$xWHS`k`C
zdMc&cL8{mZ3uwSWYTHS5$FJyPI;qp~JFSbI(7DSF>ubS$b7`y8<?mH|o_rlu?hJ?Y
zBih&1IWY%+HLto{;w_qhhnSz!m|5ttZz#4i@=KyCaBpS2Ft6*d1@3>weVq(<o8B(t
zm3oIa<hYJad9C^Ln8;7buZ!yLX}rDfeBi!<bBVQ;=N@w?z6*+4LsOtUKl@aB2%Xc;
ze^UOEGj;kt_bZ_ta0oJ9^B3&&=3Ylo{prsgj28huIg{DsShZCjK97l`r<}L(=D^M$
z?|2aW$6?<0ME!S=e^+hdc898Eyn%4(=9+8w)~(<4xnIrCDW|LI9%Q_;@WHFG`M3Md
z{Oq}h@m9lLMe&DhCxbRUk6D7Bn4^q6ls?dyaTiFA#2hyrr&^KNAB<NlPF)h5?v%3P
z+ViwMj?=5~=xMy1F(`h)>|x)oa)0h&yvFg9tdSq?+S=j#^BChrkJjv?50h6qzEkAG
z$MwtbP^#BU<sZ=moS<`&*j%)AQo|_#`<K+^1l8?^rW!A%jG4UQz&)4C?`avsBS4yS
zLO%#~xt`pq$>D;%MobH73Z-;IQ<sw5Uv)8aZrYmjz;FF{xzXuvs#)GZ-*i(u$sdtt
zcQsT#LIb*E@m->Mtn`YMLou!N%-l?^q%zrweCkE1Ax55QQOHv-nBI)S!V*hc%cE@g
zGF^&7r{miFFbYd&%4%vBjZIp=QoEX3Vi${x#w;-2*qL>A_xXzv`=_CKxTO09v=kS0
z_p<FPTfh;zhV=4fy3z*=yG9SxMKoXUa2#Mo{p<8bow3pNfcrm@Quz#>?16b<yu$P6
zZ3*wJKDUN<8XM~27mT-nF6*g|Y-K&GpCtkp51)KEe{HrRKRKfhvGF?4pF`v0PXzSf
zgOtA?1}|9hIZLa0qTQ{|(nmejC{N>8ifPMFSDuy|MOEar$d!+cdWU)bdw(QRuUF9m
zt#uyQEZ9<P-_Y7uu_X!m&*lk7!=aFR_D3e7^O7jOFDz|uz;55t&t~+QHh2D`C?kim
zMZBy^hTqHLlzv6@eedVh)dtMXtA+Gs5pK%S39kjt%-g;E*%_nnZPHzGjxk#8Ryw9!
z*I-QdMHu`47*o+AeO7qBd{uGMmo`l#*5ed?Y1S~ayNJ>2Yx4ik<S!0_?)>t-SnK2e
zzHoig8>4J=sXln3V(u7O9zE{U)&0?@dgbU;e;j8@OVGx*)cWTHdhWSyfYHsOSX{et
z{SVX=*D_vg`&q5(f9Drh*7wAK7Jflu3#(ynf!U)Cy34W=s_JRH5B5yLpKBN2{^N-@
zq``dF)AnX#B6~((*WU|U$$GU<?O*rBYJUE~*pjr&Pzw%=CWz^)Pl{UqK5Imul#Yz(
zn>S*NzHy^N2=kc?C&DIX?Qo-=!Kl$7wGMvQ-E<VX<4uYi1f`#}RGhT*^Ax>1NUesQ
z=ineUu)J|Ds(*u?48ltHy+Jv{pj+Rd7K5>^bio50zWqGaGUNQ87nb~r_VF<VH_g3n
z&?$K0SMu3|QA#q&!=Wb7PPXh6I}|F9?he8B_V-}*b}Qpmv|$zKt0py09zagGbJA|V
zZ|XZ!>vrw?|FUD%Yly+=&kq&$y-BrWvH!NdNxh+K8Lzv2|I2qTG`WH=RP{3~JbT`x
zwXwJo8867)bK|487SwP4?Q;*~6}o>-{B>cM4cX0}$Bd<tSaqe+<p#|iqK?!ny<4ew
zlQzd0rU!WsRa=T?DWWi1I8^OyHF|J4T|twBj2Go9eHLa+3@hLR2D*#Sb;dh&ziYd>
zC~ZL^A7lA08uvhV$TuFnwV%4gtAUESgr>%02zr#zvUoM>WuxgKYe(Fs<&87@|J%b?
zjn+n}7UN>ZYvnQi)e-7^pVAX>YBJuoyD=c4@lUZ0`Q*k!h*p<bQ^qTMcelQOrTNxQ
zya;jd_QMYqb16Pmbq&Ti8m|-&3|qQl!=2;T`KC?lJ;`{nuXkVn5yRJXtER{zv6Mh5
ze1l`W8Ti*JIZgg>th=OTAHYj?6RjJeHr1!Rhu)I^(QS%{=YMsN!X2QL-%oEOXxkXK
z#Eh2UrsPn9+N6OoM8?a|-<bdHleQIilsWL<r*;`Q<a|MWM&gijfEJ8IhW}XGF4T5{
zYN7ihF%Ms|z>T4x#cfMh_w$Xx%eV{t@5X?)iA@xl_|op;V@M(fT_3LJuGaOxYd@FC
z(IQG~5|yMjdr7D38`3{>d6}y|z5Y>P>Ad&;lRh4;b}U_ldIhNN7%sUWdW;$)d$z-O
zBmB&+yk8A_*T_CowYh2Id7&K!0zHiv0Y6;y>BgN!AMhOx-<)HQ(@vAx9`4^lJ8rs|
z@lYpl5LF$I<9RU8?_`Qi!Q?aEZT#KqKh)e9+F*oM2%anPrppsVUQFBAZxbrxj><G{
z-lB4y0}W<se%J=^eJ5RkLo4HL&hOi14E%mr$8~T(Ib4$QdgbDn@JV04dT;3S80Y)s
zmx}wR7avf-gP;4M5_-QVKKE%VJ9fRVKQ%hzz2*15{;T)~L=-ZLcBJxJf<psT^U}fn
z_l~OJ{3uK~yh}f%s?Rr`nh$8zM9h2aM`>uK)-xXTQ8pgpT*YOkbYN2OkMFRzc|D|4
zX}qC7q{}&YdQo#M4!(;iXsjCOX}mD|<4=N<JmhAb6`60m&@<@5b?Isr7Rb}FYCU-_
z)k)WO9xjo3r<d7-b;r`1edATz2aiqK`0N%Rd2t2j?hrYa)@~>r9EZKzcrkzF4xKMn
z4l4;ptMPE46;4p2p6DmM0VRuaO?@`6&|+|Y5H~HDBJ8EjCl@mZ^)+2uz<-?0JpW~k
zwaLPb@-$xU{lS}`Mw$B^;%gOec9;ZO2agJR@p%#)S_y}z`s0BBw|8He>_2smR#PqM
zXxctrU5VSD$O(AbV_def@oy0EkSLqJoPe8n2Srar->xM&TXn-pQ6Eo5jIyWkrtgmj
z9t&_@SHRDZ@FbX*ia!3H#=FB4z1ucBGHYOo;m}gLKs~dyQS+LldYJI8atfKG`jl4V
zKHbe!-Dt)n9C4P>8u*C1(1<k5rC%ng&BSijD^smbEi!TZsUuU5Otr63X_3X(nQD#y
z%+^ExmMUZ+N70&QyQys!F05KBn_^n+%~I<rK_>b>3v0u8yZN|brzb@eUf>&Se%ge2
zm`If;Yfa#)dbPxF?DQ9ES5ACV>FDXs{EUmAsNv~PHu+Cg{b=4~)$REntZ(3YsUC`x
zN>?Xq3kTbS3sst;x|XT6#@bI&Tl`CMtT(O%ZbbE_@#W&i6g&bmhE=Rbts;S<rKRiQ
z-$yBt4%)RQY8ALXRjn=3mL3$11+R~%=RcR2u~GbUM|iOs|4jRQd1`Arc$zx7v_<0D
zq78zZi60K~zDnXE6J*EEP(TChn9HJMtu4<d`YHOujvc7Kg}ig{7$b=W=b)u2G$BWg
zu4TMYeqhams(bAm-VpiGKdupCr@~XN2RV4?kVo66V}Tm)l8+ftGNWhtjKjhoPsevr
z+;nVa#;fPQ$jZO}{pYS*Gzaa1q30m4rqAJrR|T*;`OUySsD)iAZiYHWaJ<h#+m8Qz
zzt%55Vm7(d#t!i>n+sy@)AX6>p80foCR)CUif5t%x#Tqq+rgTO`YXcHsTV)f`@8^;
z_QuGb7xAJuzP)!{5>qi_&iIpJiX*cdba%Eo%CiIxd~t2MV5PLZ{?eoTy$8Pez!v+E
zGG14sm5!AQj=Zj>DtMmhpNEbyUWvb8$hg%Hy2OVdN3peCBzqpNEI09;G=Jw2Se-u1
z!z#@pc`gbvUZLMEE~1ONZRMTk=^oO|xoC*y7btI~pXcJi%(EJLy)1bhoUW{YI}GmP
z@oIUOg1Yn6ai&_{uKLUOePq{;?=NaF1rP1Tnbqb>@4cyxRC>5lvz1t*G1Pnkp2*%I
zT7ZI{7JRutHOcZ{bb29f8+v+B@*?aT#%uOXJ4V)+)MyF50W!AaL^|xi60hq}Re2(<
zTaNi7-jSc<(=>3;65BWLz*#(H%%{7H@mw4|Y`j;$YR7H;Yh4Tpg^&0qppfb<#vt9M
zP$*C1J^x<z-R3%#PvC`&L;Uq8`-!w@3H%0A{8IQC@9$stLA$~$P4P~e((fRCqywCh
z@#6n+RU`7<K8W4@yg;o|9(Y$^X+vrm|BJwA7yH6-AJtw3XD$@iFjr4%>p+JX|F6Je
zxp~y+-->I)BY?kYYk`flG#|Vta=rs~EL(zyf-I^mLC2SIG}wPp%NM-45~A(Ms7z0k
z%@%L3xPm_V$LLil9X)+OR18R&{6#V&`?qNddRX2|KNF4-#{X;Z`~FKsx1^je6!~l&
z{l8%N_c`*Ix-Y}2-?J|Ly%e|I#($X*ncF4pUW>JS8;gS{7FM9>UA+H+6TG}P_`4G+
zpW3~py1rQNvi&Tk<OMoQxMjfwPLz(XlRVLmvfaeJ&;4ms@a5%d$BZ()WTcX{B8>j|
zpQZIQ{+EZT-M9L=ZSTxq9g3xLnNoNyy|h!c2MhXQ!y8Mq<x-|%c!Ye1lN$e%#F`s!
zvr}fI?a&X1=sffumZ68zvjK&#z||rV|7sIGa*yUgl{QQ7;t=$l@n2S~9Q#?cSKdT?
z5ya!g!(ja97A_6Xd*mc9Y=D>`J!U{ds`M7t$xD}=cJ0yfk5>9NqJ?n$pKe%z1(_?=
z-<9&m*Wl?rK8bG^j9;yeSL`4CsXx<suS&@;U9xiQhhSI6j{DZT&C1;`yj}an_|u55
zj`+CI%9JC`wl}{n(%*Dlm>V~BSHUl^T@n9B)~J;6r#7B?G5zwl^$JWsuKhz5i&VbN
zgy8VH{`CGilY7COb!uy(Q^Dqj6|jQ@v<PU~A|xPa*=uI60_PC(K{KsBrn(k9?qI%d
zp|Rb~YQdRs^BEIei87}atZr}aB2(SQW+&<!ZH}WZck#t@k6?3<S^KKDU`Mn$E35n=
zy<F+H6ZF?<bEATRpPO6A<%7S_|JlsIvjvNfn};}+&poSyGv^B6mMWKb|4Ii#zb+Ve
I*6gbMA22oLK>z>%

delta 27772
zcmeIbd018D_y4{3KKsZyDB=u=IN$^-$fO4(K%7x=PC-RQL_t9iPyt22AvHCJqb^9v
zAv4F)9FWwCvck$7vQpE^@>5zlrIwb|@4fcEH}En0ey`tkJ<mVS^_;8ay4UMo_dM)-
z?{nDQ+3B+6RhL!1-jU<yx3#Q&P*|_CZG>M>&)H+5=GwmB``X1j_U^GQcb*>d@SIuV
z&(_tWS|~5l{_J$;Zc`GoeA3f0vf@dStddlakT!iX`}|TON%di0g{}>qnw*-P;4^vp
z7sCFe#IDp2&yNww`am~;TV`VFti%jS8oEW2oM88bc7#qyicgt_Y)uxun6j;s<N@yU
zvLv}d?}m1VUJLEQHsb3-Z-M6Y@d;@e(~-UiHdk|{uI;vZ-uX>mm89lie{GkfX3*b2
zw}5^Zn#<S<-4c4{^hwDH$&!?lHZvg!dFAfZoAw?wm*KceZ$o^hPgeZIl*BEt8-XXJ
zrA<ptl%#|t=t=Pz8Hw?eCM9R2cSM^}NBiRXZf@IZ>1Ad@H$|GDJ(A=M-SI$q{myd!
z)PuS?B_lpPX-10lE$mi^{tTMCsREjN`E6)!-tNPCmC);nK9eR&8)0*HX{CC%#AoJA
zPnedRH39xy^)5&Bd?ux3B~G6uNnOA@f{SwV3ycD@%JhN;LAQfL#ZgJ}f*yTL@As9*
zC8-YV`OsXkG-$3+%v(C2JaK9!x=wO@TetrbJUt^VH90d;iqDKs=lHweoc@}odrAe_
z$cSq?S!6gRC2b-*_A8g9df;Ku+yg<-T%hZ_dW+{mbGqqv|3)oZjX`SmnwZIx3@K0O
zvHih$wmR5nG;+xwa8e)0a8Pc{!jE)28JZ_qXK?OKu0woErt}Q_+4cnIN;iP!I!(<?
z%uGNj#w1<ziQY-+rzEK{;(d{hC#f?uPq;;&YWe3EBqP8x@m7UC%+p8djmn8nNlDJk
zl72X?SM16eNooSWGtgY{G3Z9n`=Ghv74T~geHfZo*G1&V1<!=;1RVkG4PEcNKI>Y+
zZZ73Z1z!UMAmYJ?y5o6ho^QVIOOh*e))#ulyTCiZE`;Wc#zT8TheEf3etbc1NYO<-
zpA2Z8HVqN)1%34cy_|CBmasQMx6Maj9s*qRk<jee7zMjQ`?CXdEoh#gKZ0v(6`J{4
zXkX}5==RWkgua7;=J*exxuTn)IsX1ty#Xbd$J}$BF|YGELj%l11dpxXHGNFmLGyfS
zCUiq+D{Koi&#Z^v>wdSO+3zYe56yX@PeQYw%a3|IR-8{ld}iYGG)+m4KcfFRfeZ)E
z__rVQ1iwIQ849}sn#cG&H2c3L;=70fItZPWnUc&aWj`9iJL3xIdeG_6Jo$$Ite3MM
znj6~xXY@Z8909;JP54FEdxU-f%?aC~tJsgbjC;)JDWgD_gZdCYxm6fFJL!&I@kyD9
zS*V|6<g-6t)YR{`K3P7!C6?W<x~>D>1_j;#Zw-AInkVJydwPajVe?p;PyyC{zv+JR
z1AP^IjEU6{ywUG^k6eZ39tnA<&$0R^06YN7k&qqh+E=@}g!uoVM{j+kFQVJXj@x}k
z=yiYUbGYtfz1j!Cc@cZsue!SA*RRxfm^Odu!zjb%Lhr%5E_6P;-Jsw4TVFxlpm|us
zBv~8w64<-~3!ypJzR;XLH8CTNcU0p_kSEJpqo*RChr5kQOP^ohj6h?6*Pyvq9xAft
za2c929EAkj*dkHw$)ZAopt*NLpc_NCgJ!>RwPbDY$w*91oRl1&(opbppA=l`v!t00
zvNnD6UdNtdboX3~tYwf2%@Zzt=JcF|v`LBeU~|Qc;i*IhTu_3eto6`nXr6EJnbZCG
zB9cC9W>zwG-`?O{F+ZX2-Pe2czpez_l~a?ml6j(Czi*%4w4MK^y0W%_eun0J*Fy7r
zpIM}j(8&#YKFdV>eEY?wqoU?F&{JK4=H=M3p>Agj+u&)iIoEWbRPBm3w2|K0{m@*Q
z?e-k^DXpX?vNnnj8tY|mgUyRNGb=u8Caxaq?Q%00$FC8~V|lu<-LqM{{QYjSwwEc;
zoYnEBddKa7=8Kp!I8Uip-SrXb1)HxD8xhY_#@<Z#TQ2MzXzu9M@M{U31<licG&G+@
zW;NHF+8H)FI={dJ0lu7EXrX8HE;JXg6`C_x1kD*tfaa-F*h<eR3O2XnH&?xt3qAGp
zzd`fd{}Q?dbf(~cwbs)cm%lAY*Fv)Q@o1p@+2+7#kL}L(Z+!~v>AqfTe7>zW<(=o_
z+#@=_>DhwZJUoXjvlsccJn)Y1GmFi^$g`Hce1y#!Um{7}V9EB#zBcOySpKja?S(yU
z)=F6YVL904{lS)(Bq<z*YA?^VSr@_LOiXsUkIi~q#3}YjB>NNAGl-Mzg#&F?+a}$!
z78hVigB650+V7_L+3$3-SYH-I%gOR3tgc%8V#KGPw>oUri>3VxkiatFze$qj!gZ-~
zv6jPy8)dc2b5S2y17WH5!bqES+!nnCs84U3bq%Z@h?DK*h&vBUuX*I3!46yXD{)n}
zN{_AfKMsW}Uu?B^I~=a`dD)(OINbWd%aSxq%Yn;s-KKY$N$cE+uzDd*vKJ1vDciT%
zb4$aOpSRiHEDg6df5qr{?!g#gDOw%Zz~UAm-9Vf9BUl0Uyn&(C#~cDjOUB!*zT5R9
z1k%LVtckF~^m-h&nS)=Ir1AE=H=nT}Fvh^vUtz^pS;KcoQe2g_4_1O<DGhhp|9CUp
z+Ha>`qRAc^YEu^NwC5fTS5ED;zj-v=+H9BJuL}2_lC;a-?O3>SXqP?rSh%^?ZuGLf
za!#nV8$#R`RhwWL)mDD6z3koJ?RVZ=BKNfCoQSY4-J|!2WS0wU%6oeb{Ba^&mSua$
z2NC9wy^=K29`-?~c_l*8TIe!DBeam;Yer~cRp>%hsMG64Yym>Uv=rwMiqb;v`y^?I
z7MfNSI*QOBjal~_p;1+#SE@qyszQ-(pf9u(E3{DMhtH^0sO<qv3N13t2q|R;4!rsC
zJjI%GP?Gwfd(7I3lMhLf4OTtw0&6g=XjtfcEUWKe@l>^H3$V>$eO;LBg-31XiLkoa
z!}^9QhYs7{JRPq5df5KQ>2R}mDRQ^xO%1i=A;eRW{LjhSIx?4o1lud054Ao*h^IYv
z1T5_yNAz+m_QHNPd7(Y$Y=pH8ELHR1eIXy`8?JLLZSlVkORpv3<Xn5sxd^$Az3g0s
za_6Z1k8|PHvSa8&xYw~qz8&mvT#~xOsH%tcE0CUAG?(7|EqxMTQYF}|lVGv8Y?qhW
ztOsHF!9ste*yPssvhxwvNpBk-ktx9z7`%HpXlwftEOtj$!);c_cl2gq9-;{Yg{80i
z7hs8X-_xdi^o~9Ei*T!2t|!Otmx=`ntDjaA-o`e=3Wue)BAu)j0N!!5buYKKmwg#w
zdG1|3S329?<Y)IAWwikC80dx8dQV>%uu#2lSiCXnaT&0<>Uz7k!s61jg=YO$#A%zY
zx#<ZMqK)E6gm|~cM!L)<Z?T75im+y#)R(WqZIHLy%PvJ&z6ay&P~U?6j#|}^c=A*h
zgj&`kR2_xQR{8ED`<q{do4b9CUS=1JZ^-2c<&BT+xtGJu4xea+7lfL7BGiK&tgj%%
zdlYu16r1wpC-&Sc;nsGi^txeb7vtgqi{}q65ZE|AK4t%-Alz*IRFWpx!!CuIHzO2d
z&wDA<{1BnhT4>m5Nt(p5)?X3go;GXa*y)Tu;@T3CC)yu<6JfmvHbToDBP|cH=X@I>
z+wEoFMkv?L+W+`A+}!b;B#pBl|0+~oYR|bEVLc6->w_vE2(~}E8e!h}nIvUt1$Q{l
z8xMTV1qhAPSiR3B={YU59-&;FeIY7nUW3puja@@XPtoH`Nt&gxBM9j^ce)@+lQp&m
zp{ZKP^`h3`%c15I2<2+!hF_AT>00a_gfcYN{41jd+Yp+_9V6GWm;Df7&bVxpc?O{j
ztwVcU;SG>GbUi{TS`NzBl9a8nT!bdr^R9-PFCmm-&qL{bzLBJPTI>mg(m5mt*+Xtb
z$S>P-@NYeP8U9^pe{>_l-26MOZC69BYY~b>KU%em*ypgG)p}K4W3zVu-q=;j&)MYp
z_K=?=tlh8aYf7KjOJMOL#Jrvo%r}p0V0-Ilvr7M|+7u#f=5DaU?P2deV?lt|q@MmA
zSbBQCls|^mqbe@^hniLaEM8AI%HRal3b&PdQRP!?);L(fTET3sgT)&PmNl%8VR4?i
z<#fGj$s?{WEY4HE@GpW@ooBg-Lp`V1%zwk`Za+RH)EaT4W`2dRIE`Mb<FG^>u`B*5
zEbIq8Z03-ku*B?ngF~&;5bBFG+CHJY@ss_{yW!S90efkXJ7Vn5dNn0``RBnF7(CNq
zpyfYTMajc#mbSm>C06asmg)Z>rB4#8>85eS;T-$I;>D>S5({DR4AA;S`QoNM_kOt5
z<Cd{MMB>~t7}jttLFD9M%WeGxf~Ae4SsAQkL}4@UYqNUZ(fbM~)73WX3}NY~)&sEo
zv~mhVZPxE$aj9nRZA<W7y@#p~ocSOLT9McjmGAD_yZs(+&HGiqh~ermGS~uRyp}`c
z?>4jdJ)Dy4VZVo3pF=1LTrc%9ES?QGjNzEu{JtbbXlZ!D?yRzS2qylf=V#%TDCd8(
z=ROLzcKltE1|xwZUv#mpK6(^kz6;jRetblzb=X5}1XV@tfi*(2&_IjyNRoQP(yuFg
zhVBg#2ci{VDTT$8wrU`)H$iwt=;!nPe;9f5$#Wa5o`}=C`A1lzjGV0De;O8_Fb~0s
z)#A!$*~~$Yd0XNge=9;mbw0%=``gPZBdpn#`Y2;!qKsXzcz`e@n{C!hu=>M7i77b6
z{-sZQShy}vh1E}sL&urlfEA{7{cVH>=w+Zozx~@dxEA)cnfu~_Ko9%zTx{p-LgWbR
zS=eLXtCel;gxmk2_R6$S>uQAb;VVCiTEGg>ydp;hTNGLAgxWk9=E1Of*^dtomF@IM
zmLtr*ctU`S?9fo_RD`%EF>1JIzY9y>@FFqjCRG-Tk*9BeSllZ(u3>xF0E-VYj#`_)
z5^>siSv#3!(KgOyHmn%EUYPc$VQ~pqP-u5OJYg85#bLpkvtVIcpBieeKq#0)Rtb*?
zcp6$X{|H$6_JvWf6u=5c9K{#mJi_zlE#WQMBbVCbHk4Bf-M11?9k@u`e4sjKVDXND
zYc-}o6DtbRt-&_yAXr0SX*UPfmtb+_^rC-(#T|t~m}`?~P>2QncnA+9aMCCWwcbW3
zNKcA6(7Lu>PpuF+mO`v@guIn<psYV5jx)mC!3MLi4sw8H)%x)*SX?>G>%KPGnQ|PF
zpu3aaOsvwwHtRfLsXP%a$6#@dtGl2Mo@H>SSg5d;Y?J#_S#9L88<d9&-9F2v+^<XB
z>d4{N&d$0odS<H4nhHzb<9UkjgvHg=Zez_iVRhpj+S0zBUg4^{NI9O$oKOTILLVC(
zo2{o{@e08zK&2~T`NG0Y!C;%EV|_jA>h+uk(n+fxik3G}h%+)g4JgJ2OUD6ETW|vw
z9cm5bkmk(G?L}DJGMos}AJ<@U8>(t&>4c{@9ACX(rhu@IzNhb~X(`tlQf__pOba~2
z;l-r;On}A1qCXsX3s#S+I0;W~xW94MLbJnRakDY-m`~G%g}P<g<d;fA8p`>KwH}@T
z@s^-X4oeIyZ4y^KK-dSuHP(0KJFvJH6pB>kV2g_}3sIUS1s0d4wT;qS$yNst_O5R2
zc@W-~ksI!QT2q;eoG(wL5LY?h`VOA9@Q|UESd3rbna@;MPIh?^&Np~u6aq_ss&W<<
z&oc*m;Typ!o;vlnACJW48X@jVB#FjT6IcUbHPO1lif2%~!{MfCfXzAr7O!I*rLgR_
z!Qw8&?txDGLBwJAfYsJR)~*Knd3Y+U@$fWjH!UY&jfPcQJ9f9mQ!BpKV(s*{$pw_t
z4727qAa9Be+VZM}=TZ8_0L3adT2MC+p7$;Fs$mJ<47R}F67>E0A}qcp=(mCac&x>p
zr`KfzEG`c>P|pWjU_`^f?(k`_#Z&KgXYJ~+4i>l0$<DjEb8BtC?j35KfRKJw1GgTB
z#oLlzZj(0pE~!l;c{=5^L|b+O4ucCCzsg1rTgu(#1{Bf?dr8mIoK|u|{d@_Z*(Uy1
z*N)JI!e%YQo-b_HY%dTtYql2(n>E{ugnkZMfxSe;v*!4v!iH9)S`-~9w}@rG)!=oY
zON8G`(9Aar|EForZ;Ob3npWrvvTtRE+fL#3R81a1vP&d;?8QG^>gz)97s*(2X>SO-
zre=PCIi&{4?Mn|1m2cH9eZIRq)%pMLVA1jaPj_(6Av#r089><%iW9Z1uMALb%al=H
z8A)Cikk6UimC3UK$OR^g8i3rB=^T?KR*)_YK_197zadDlBglW4{4P^KBarJ%)-?io
zB-3|HifV)OZVd9LOluk|BbCQ8{lvObreB*t|0Pp@7wErb+6pa8^vFdSCCfC_RT)Jw
zb&=l30qIQ&<vJioi!;a-CT4{?SU`?2Sz!TjQ0Nkqq<SD>RuHQ~&s#xU>x0~6Qd^;J
zjvy6GN*qC)6#9utb_0;;+91vfy;vK>t071wllltvuY+1PP-rXbh6??`x{*S|oKWk=
zw9^UI4Q`ACPIZ+5vJ1u51-Q=OI0HAbIs+6n0Z4TQaHlc`{agS%FfOtOCD#LZ$RN52
zKnp5vqKqot;i{y_bj(c|NE4bWlc<@yGEi<$$?kAYa)<LNcQ||V^=DM6Ycr*hObb2W
z;!9^e(373XyE&8}6|(ZDi>w03zXenvEoBu%S6OwTkd{zgX*DYw-Cz|=k*%OYsF+nZ
zy2~n*qCBCVp)IV!=n<=M8rm8vf_Ad%PI4QlNQ!0EgZ8uPN!GSdz4W?HXsdjp&_XXX
zEZYn1xZ;I&3?^@HG|bBzV1+lpP`b$A0)wy)0K;i%2Y@9V0B$mPmO?rL1a|}|=?E~2
zZZNpcAi5JkEERVGDCz`I$zTjc`2h6u0odyU5J!&~JY*2(3oxE``U33m1#s#N5Kpn4
z0b)7>9A}U~RzCoXA3&-fKq8efIKsfgA7Bb4`vWBT1Ds-zOl|=Ht^ojf0RYqJB!dbD
zK7jzKloJS$9SCrRK^l1n0eA%gtOx>_K^GZZU=Y>?Ad{AM0a(%n;3k8a6w(zSxGO+O
zSAf}cgTZwM(Kdh_Dz*U>*#IgT%%P}YfPTRMdxHV;=n;d54B|on@@Z!Xz>W|Ar)~g+
z6x$6TrW?R<1`Eg<3SbEZNDT#8L}d()Fz|Q=U@;{>1CaC#z$pex$t?`PH4Gpx3}6|Z
zWKhAtCmdh}<%9!dhXY(;u#&tZ0K6gqRzv`-ri%<NFbL}oV5g<s0hV+JxXEB0g+u}b
zM*@^Y0ubF`aGgPP4}fAS?g3EL1E7+@28!wl(61-J-kty@^oYSj264RrHqp*r06TgC
zIQ0hDLb1I8VtNA{XYevv`v6$_0HpQ-c!kOs9AV(m7vNP&?hBCA7vL0wo#fUJz_lMh
zUO#}{bdo^@1D_~>y_6FLkR1hZg~99O-5<cKKfsFq0Q>18g9{A81^^tOr2_z#V5g&-
z3=UDqK!D(Z03`zfO6dlJ>kOi!0m`U28lWf|ppwB+iW&saZxF!VK>)|;5rc;e;syh}
zO*;nz>=+E-Gz6fWVut|43;{UK;61Vq1+WYSNF56BK9w;z!oXt~z=xDP3?OM3z$peN
z$!$1*>u`X);Q$}gNd^@Rd`1AAqMQ)`*&_h1FgQ)#&jNTo3$Wr@fU|Uw!373kBLP06
zr6U2Bj0CvJ;ByKY1rR(6pkx%lmvn={bq3Kf02iq^2B0VgppwB?6cr25FBV{LEWj0d
z#NZ)=xX}RL(9Y2SJ4ORIjRCkyv10&Y#sC~=@I6__0$9cZq>csn50x=E!oVXA;73Z1
z14xPkIK|)wxs3yG9S4v%4&Y}x$)JLP&v<~FlrtV6dpy7u2Diz30)W>9fE5z}?$SjD
z7Z`-a1Kgvf@c>KW0d6vQKp_(Wf+qr$Oa%CyZZNpcAUXly5fvu@6eR#uGWe6CCIR%D
z1h97!KqWn5@Q^`VBCeo+E3_*S*VG+}AWoCvB2(;SxWr5bIL^RC)+qp%DFCTc0L)az
z;0ObcBmf6WP69|u0yxFMN^Z#juE_v-$pE$KB!dbDK2rglC}%1__Edl?44lb(8i3a{
zfECjK>eEFA7Z`-405qhfDF91S0B$m9Od+WN!KnZxsQ@l?gTZwM(bECksCYU+(R6@H
z2JRG<2GB1JU~d|L2R&l&kU?BJKnvQL4zME~z-b0RD~g=~5HkbdID^(?%>b}u0HkIB
zw52izM;Lfy0<@>(On{_JfKv>-$t?@OH47jw3!o#NWKhAtXC{CT<;(=go(XV;L1*%w
z1>iLcV8tu|f4a!v0)w#G0D-i0Ho%hE05=(Qp^$8V;B0`BYycbGU~rv5bPhlW73TmH
z<p5MN2&Jf8fPT3EdvgK8=n;d54C3YhM9|JT06XRYIL!r!q}aItF>?WqGw4ayJOE1`
zKx!U9Zz^MOgn`FAfWDMG4<KnCz$pe%<dzTMnh%hd4={jEGN@qSQveW6IRyaO1prqV
z3?}bF0Ix!T6@>sp=^}#*48rCE45y{@0hY`MxXIvI3RwUUya1qN0l+A_!QeWB=!F2W
zRJ;(NXdyr)gE17f2%z60fW3<V;^+~BhYaGL0~k*`p99$O9DvhefOv{s3=p$esYAyW
zD+5dSE#~vn`R8$ds(2n=KFi>hN;%8mmAwq$3WGHAUJl^39AL$AfEjd=!373kD*!TS
z=?Z`)D@4Y8fOr8Q_yq&ZrW*{dzknpsE0H9JidO;@tpuoKFo&X60rXo1uy++e9zA04
zkU`vPfPC7y8eqq20H-wog%rC6AZ87~aRv*>Y6q~`0aEP%i>Qpj5e6P>0Txs8T7aar
z0H+u%CAW0|uIm8u)&VS|lME^t_^bz5K{@LIveyG#VX%_C3BZd0RuI5yy2#)HgRmk1
zJ1s2&SW*OVlfgO)DFz5G1}G^8AiBZeda=<##Z>$vK+%ivsC*F~8~Ab9sM3BL6pKRR
zN17Uy9xGAO+m#l)qjZ<?;8d0S(8&*#@f;+-6UtiiciZsGKN`A4nZwL+c3Q@?#EePO
z=<TK9`<1Q=!_vnk%3Otz$7L<u=1-J^j>X6HUsSz%jK-Z(`p7Z#$|<G2lkr>NCU4^>
zZ>5p@m7`j*)~T6k)4Slldn#=?t?X8Q{g?)wQGDf%ly^q?tcmd(*o2g1U;a55-_~C_
zQ#$#q(#=U$OSgQj9949^LE*N1B6DrdtRHIf*UkU${Y!rhF$Ge=QpLZt<tWol7j7$U
z-mLT}4e4%*aEAGS(#dq9X3M!#PM3nVmrL)AH0_AAlKu?j%vRb`Wa>`WicHJ%JEL>?
z(;RUeZGn_<kK@w{fS-|AA;a{vlBZz&#A&1mw-&lKSgi1CBN#s!a#8UQK5fA`+6m&S
zv*wbQaI6dHCLF!NIOt5RUNkiftB2qvAbuR=3*7{|KIB)f96r5777Y;oTd>}OHKZBH
zBEJ!$RMD({BC0W1UBRLR<E(FrEcy%P0_G2KfD8a*A6Ez-6l*MA__@Ij6l@|GXWbNn
z=lt9_e6J3O|0H*+zX8o^hM<{ke3C?z2g18Wou+|tRhmQcg<pzbEhwI|Xo;vFxm)m=
zjwlYcg8YO4_k5;s_eA)X@XHdcHSOmt+92w#h?*s$+JgNm7(Zs@TC{^a5G-4;_9Sma
z7G8*YB%*RflsDKPg3STr;p_l;EEqS4v+YPjIg3sRt`Sj%BFYDBy<o;eOnjRl6$@rO
z$m~p8kVQV8h)Wwpl<_Q+hi#)^{9Kbu<YDtib$Cn`gK=;3umuRV6s#6(eAgh25ks+3
zq~%R(oM5X2!;^H$TM<Ld4@0>S8%36&S$HNdwShlRzjY!CPuHb-U_AZSgK>74BGPT7
z<Ed37{6c9pXMyMJ(nbh>UKCMb2yfB|nk*Q;OprDUwo$MMx{56Fy8~|%QT%ik|M4Se
z=@r4Y2=^YaUlnYtU_D`55a!AHvS7UswhFcl8Xd=v?xmaD6nu6FKYVv0y`f0sG`Leh
ze9bQ%6pp(D!`C9x6omP+TQEG#mx_7G;j>4u{s@<ewEV!AdwKw!eF<$Gh@e@x^D|(M
z!gG45mSFq9IOQOSgJAqDnEmjmU%G-JZwbxMgSkEU)<e3=(*U1R;fJq5r5}Xf5y9}B
zUiz^XM!zKjWdaVT8Jke25kMP69!EvgvtR?k+Cv`$<2sFm3>AKF35GAPr8Qu@w%!pe
z2H_wuUR&=9hA%B7GgwFH6N2HZ66u5)e{H~@4*<E5_$FCeh^4^O|3l$87U3RfEl>ZG
z!Vlk6NIeDnNH8A3-hzEB(vAn4h}!cqIVJoiARGe5OX5=#%IAXPA)Nqi(5HptM1&iH
z@me?|SOUWDK)OTD3N{JhmI(9boM4Fv*G9M(^k>k>Mw$$%BiQG{Zwkp<FbGMAdJTv_
zUy7(?gn5hL&jrDzBK#im;yHFvuxSXt4TkTtv<nb7Ck65$7*DvbgkLJcbup=U!d(_@
zI>OElnEVW{2$+WOuNW<!abJUR-P0kza{!-jh2IQ>+ry7PR|U&JcrqBzmhVK`OuEZ$
z%mV6*@!@g$LAcLEI0)Ht_x~u^EQGmD{JAdJY=nIf=B~aWST@402y<8eBv=l@oF8}f
z&w}M5+{}cD#vSmBfO8Oj2uE($O)&f?&4sK*1^IJF_~ju?g53q<E|>>-R<L`*kEih%
zFq{OX`(PYh0O3C320b(;S|JQ>4Sybq#Pbn;jGVbre+ae!;Yz{&6l@__1#;#}Jr-;c
z!l__fsY=0~LzpKYSL!cluJmFyc=oa8>hUyL!eKD3fGpTjgxg^W@<$Qud4##EIb)Mx
z%Mj+SUJR`Yrft5k8}SB(kK;2l0|UZa2DQvg&RxIF)QIYBGkx255F!Ud__Q`0G6M2!
zsrePtXL4`e?fCL!hpdJ0^@y)Od@3x06hrs|!xxl|kfo64A<H2vAbb$WrqowWEvVkB
zrkK*TubR@8Xx_qiL-s&;i|6aXE0FDwS0Q{Y;Oh&2JIGg2zG@Cd+q|JWKsrJ?K^8)?
zN{8+;eW<wYMVOZ?UvKz&wFy#zG%ZT~_nOAYPWxf=9)A+-xzgg-&^mb}rS3Di*XIj9
z?{K`M?LqVlRI(2T;4W0Y&-AxkSX#c{v|Bdw#b7bbIAA*9*j@DJ+H>T4(A0s(9yGZ+
zaTjox@OdbU3J;oED-%t${h-Oytrs%o-K-;|0|ZxosV$^U>6L?~-F5Ia2gVi>i%Ebl
zlB7z=V+dc}Z$U7e+5vMB?JqaY$v*(}JA}_Q*P$OkUV_|*+=JYO+=1{>mwkVOJcK-g
z{0aF3VuHvhk|*PJC_VxQK>mVEfxHIc-Tw<{D|}oaO&~ag<V$rBs10$1SRf7%6NC@T
zwIF5)C*p&$6T}(P7}5yBJ9q;~eF$IAJfO!zyF$A|+#pRMQ^1-*w}4zkC3?dC9D2A+
z9o{o}(u5NxFRK?K+e6w>-g~A{Cm#g4|DJ_-(aHBrqwrml#|hKye0J1R>#?7~gKge(
zu0#0D76UO-4?;K^G7Q2qZwO>CggHw-(vE_D7BU<%0x}Z9*Q?Rc{3SPc>yOaa6kOZ>
zgTQzQC+5T8SO{kv2Qf0`uHx`T2og!-Xz2Ucs4pSN7nBJQj(!Ug4>8>H5MBaV48hMb
zq=nFhkhze(uydd%L((AAA(J4fkOT-{j9-Qi=gU4E$9W_|uYpDt^Q9CR45mSnAxV%a
zkg1St$SlY$G&Tcz1|%Jl37HAWg0RnQA-T|VAjcp_A#Xx(+>>60ltGR_N+E|Khad+P
zET;n$|AEORpV#IN$g7a;kXImEAzL7uASIBE5blr-kd<fvcg$+Y3y>8M?xg1+Mkf^@
zTo;lLnFrzdzW{nQ^n7R|52VZ25^~RSf<+JxbB651VU}f(=OIfWwIF85atJdHbK&f_
z3bGQy1#xA#(#(yDv3?O!3|R|Vqu@%xwX?%0f)HdqWF2G@xC~)OqXI7>%$c&@EW$<s
zM%*@Vt_a&a0vvCoF)C#EzQkQrGm;~A3dXhF4cR4ZqafDo$1UX{crrcPJUr~fc^L6V
zg_-m8V4ly0;lP@^(qP;YBO|U9XU0QR)8Fv@H_hE`<iT^1=NYFz4ndk>n!yEeE4j5?
z5Z9Co<Dp?^UX{j9agpP|FF=0@DTllR83fT*FC~9uYM=kEFd6+%@&)40Lq3O`f_w(~
z6mkx77IFr18uAH*^I;#>?8Ca^37gA>5B|Uy0mBJEv$>#}oShAy_Ymd+Ii6(@<Xgx$
zkSma{Ay*-N(Dv`3zlS{87e9c#1sSB!)Q?Q<v`+XDHV^9Wke?wBAUs%iA-5oLko%B(
zkUNkY5H6e3U4x8+T!wJoUqLvJ+YnCs6NG)^A<T_>-_*nT(k}>b0qn$)oN3L$<4ifB
z5zpEv*r?!>75WuEw;%@RFz3PPYNr2z7k5oZBV%^1$$x`w)SS7IQ9O3Z2@u}zIX(`W
z&vAU7<AXk*?Rr8wf%ky!4vB#9`Wy-t%8ypK>v_NAlRY1^+C#Vk?V#I2+CUmWT0<Nm
z*Ad5+a6q^gM20+q{Wm^?pe5Lx{tt*z>Bk8F3Hcksck7iRF8?nC_^N6aiM$c!M7;lV
zW+rG=#PMO-$dC(o(wCn-JdNkUcQM3@cwV#IdiFzJ`C1`7+1QC&$r1ITx%S+xb)iQ?
z#zN|W*M&Gi79o!32_NRUQhd_q3Ohq{8WtnWCo1-N0Nn`je2C}#CB7Z;gu#X4=16jZ
zG=VgPaAwRoQDfMgkTc=TIIgCynK`F1(z+uJ7t|EmO{C|-Ii82B6_0;QNOK4$<OCiN
z&XAp0bAlEk-pKgLcq6T`lGrx#F$&}c8s!-I=5vNTVYubS_;HO52aY#5&uE^>9B0gr
zTL>GO8mofu7rY?s$M+0e8TR44`2K+>U=Va5-;M?#;0s}Aj_^a6XJ=<<e@Hh-2&5~7
zeY(_Owi=w{*e6){v0XEsR|&5cUSZsu`dsUX69ZZl4)6?wmm4QEmQon(nXq{xM$+EX
zI1TY_TQr0b&%c2P4}kQCL_v0g^@VN#-3PiCBpzY>q+IHaa6bs&J@9jvwa{GL5HQZ~
zCy0@jw~DK<2SZ0fhC*=Kn<{+`_#Y&`1{n{?l^Fx!N{og~MtltPvk-2_NNBDA-(HMD
zcp|h>$ynH2!J2VnVUL5vk^g5V7b-YmvdCU^>WpbjIIlzFIG+iZ42W@bpMh`+WEzBz
z`RUMnI!%L~4oNjp^Y=_m@;Q&0u#J2OVIz<8NXKbsgRO$(K;}Z0Ko&#hK^8$4LKZ->
zAso+s^C5*0UQz7Fd=4ZRk|*o}o^VDaN3auXPGp3QLJj>K;y7%iGwhXMD<I27{4(h0
zAxj~gC)+hEqo>D)^8zB+v1Xx9+U&!b*YsHn+bE2CgnNN2y&7VNZ~<!|>mkfJEmwrO
zQQ398Jd9cyL+~Ql|2CY(JR33{E6%|epQ$gEzV?}EY)=O-xho!&IniA&)q@_})F#x+
zMQ!BhC6DXk+tnAh_f#)TZAwR8z&{+_ILJ3B;3$&R#*?Ag*D9{f`1`xRy{Ozpb;B(C
z3d+4Y?Pd7Yh2QwAX*~|z4!G_~&aUwDEcJF(<Lc8p%T>qvE`+TaK4a=$J+tn3X^<Cf
z@mAepkV$~ApRa#V)eE1DHxnQxh-0wrS#V84(r@3F3ZsidR(auP2xtq)eiZBoy{T<M
zr;dvfCstQUYfeYwMOoiF4PUfu#h(v7InMyj(|DEE7j;9XH)uQ{$`ijqM4RB?k229A
z#w)tMJ)Jz>cjA_vo-_jvvL`Kr8VtX#nwvB=(<diBHAQ;i;xgw)FYi&bBK&>v%}H8D
zyfy}P+JEdCw`ogDEe#rrHHY^%rDtVIWexqWjUK;0$CI2os%};|1o{R9`UX?^ReZ7B
zv!l8jUkbOyh)ncX=QsPLL~rZ|<&&1jK6g1zL0x@qoZlBE>jPBRX2#pY&Xx?RRr^v(
zI2^bK;qXfd1qG<rY3(Alp*2uveYeoCKs7)ax`mz#R14^qkGfV_u$312sx6zX+^To^
zjzw9GJMGUNhO7egjw{+q@A#^&UAMr4yS~-2Mn4YzA!0K;g5iO}b|Z#oL&U@Mj&C~L
zT!I)s-yrVvvaM9NGt&CJjLR%Ma_%0w@KwaId5Y}k8|cdquGb>Q1u+w%5^8%cefAR4
za&__OY4^)CwzFE0zjZsV#PA3^+4jqxn^q^N@&c4s2jpGEctC&pUFi4)8Sj5z9b>$s
z?8w=s0}~1}##hG}Z!wd4CKosDQs`A3W4z~Vf4DOAdX#Cih@mll>QE(jC%xvU1~fBX
zX7*jgcRwD9+I~vwCd{7z$#EAwhKI6c7y0?CuGB0L!}#u1Q$unKQcuz5u4+ta_h(d9
zroWb}P4RP{xUQI8L8Y_1s-+J2#Z>2T)vb&1QlQ0_Gkc5G!f0(t1afZ}uN(^>{rW5C
zzVS~+3|2As{shVkSEn>H-hoz<<mEGA#N(Gdd7*1_;q8O#BUD$V;vjw68<WO(6;5eT
z_UrpcuXzVe2+<wCJxGHh)LxcFhj5WWztXrFXviB8YBT(*;B<uQrtCgUKSihk_$i7<
zcQqPM1gEiTM}H?`DH(4l`sPIIzA?LByf20lRUCw$Z>k-wM!s3pDiUp<N}*6jy%dz5
z9;x;+H+U0IROo7=+L%6#RGXU1U=L^8wH78fKikquGhVe;@YAK-LlaK-(ni9c*I_zE
z^g#CWC@o2C(mV+J^-=w0Kv7A{9oC&1_W-UKGIlMY6>xPoUj7tNYmPK6>>~aE5DN{{
z5QiNqhl5galrHyBJ5;rxgd!8vMzyq!Wi)yBRC~9caZG;|7r)bhx6p%+nqOK~@X`_F
zWy5ZV%o@<@p4x`8yQdn6Uu*3jfGo6_a5|fcur^x#sbMcfkD<Q3)M$6(eQtq+uJ4U$
z*9j|pULdvroKe!~^<J1U#*5!t*Bd=;-LAC5TGjn|?HTWw`yu7<rG1anu(JGl<3*!Z
zQe`i73I>sLpn1J99b-uDgRo~SwSnWdxAg836UO}-Y~FjrPEMV->C&CQv?8>O^i;~-
zx2RbkO#Q#!q9J`$SJ{!0`>2KZG5XKQ(><(Q?-28k>$*-adaX`%@_y8!FC1Lo#SH=S
zkA3@=dE?hNy+jl6=x{pCS%e;&OR0U4Up=}F_pZjf$@)!P>3V<s`4qTgPvmwPZ!as~
zR?s9pb!_MAm^&vZyr1goZoDV$Lg3NTb4ksWY7bwU(GNxSp=D6+#{1DC{b!e~J=0=D
zwclEL8xCFGeII91)H&GUg)(~=&%$bl9}&|6F^|t=cR0~t<H72fTI3Xkyp4CX^?CF4
z--GX!^A;lNKawKhfQdT>s+sn(H)OPKN7Kz^Ej>F{`;~t{tD;obE>}O$p3@inJ|wQ>
zrx6Q2sP-^kAUE`4{5!T!y1ZH)6N(=jqm1!X7;DV9LaN^%b9~o_)TuxA2jgXSbJqsX
za7Zn_TAlX6hcp2mgZ1~|;kAhID;G`tVxw!dhw;X|w{j*QJg}?hh3XjNoqE>1_a3Hf
zuz#t@Nfr9Eav=X<D*w9WVg-HIADfG|P8vA`VEdA8Rgm8RG}U+qU~KNT;}05t{hF3B
zJOU)+ErET%OX=OAytK@S@sm6$ZvdM54Amc{Ha2r^+M092-#74bqi+VNX8ersKLga>
z_|aa+fodpz)<0z+7T-eJz)G)3EfmvL&&<WtRjQGl$j3ig4Keb}k4Bz)!Sqrz7M57r
zS{^mSi|A%FI^E}GvJAq~S^F|QGYAuOH!g?n81zT=6Q}(ZbgCGw@#jlv5O%e+L6{Z)
zypm!s!yzI_TrXW~wzp=1$#fU#@k_khBe2lh3`X5VcjyCv<D+O#=iz7rHon1d|0hxo
zpQg)$F;9%QC;q%U@s*d(ZQ`BBhI;r0<Nb?NZ-_d%tMQ)2z%>cE<t3Z*6#3;d`j{JU
zV*EKYKK^9DAgk6)jApQO<_zr_f~(b)GxWg_b)dWPJGQi<)6Vmj48$MG_C2egRP-Kn
z|Mw25NAW|^1g&{)*ge=%zCKU;hGLHr^q=h$j)p@PjUR<fMDNw38PCGfHVbV3LB2Ml
z)3nL-Uqu-?)GXp@RWkgZ7N<PEK)(#HuC6v>E*^eT#zkBRF;B(@E?9b~=<hQ|=i8(r
z@)&Kj+NEkxxvs&O|64Hl|23$hMf$XGfBG`xq)%;{NUX;x`dV#dW_J;z*Vp9#-^rgG
z1l{@Ro3qx(|9j#3tT#s4=u&;~M8#Y&vOId+r>~7dpX!yPuSem0Q&oaCzE##gCs4KL
z{ura1MX|V;<3JFoCvIlERP=*p4gV^+;jC|x0e-$+#Gcm3?1$N-4SHj$m#C`leQ@Q#
zH-H6a67O$b^V7Y@+L#9O;ZNJGjhXCz|0*7qz^|_L+u_Y`9p&2soG^m1Nol#E8XOjF
z5c5}`70v#A+K5i68XD0#8%G<R<3eW;=2IHZh#kz@aYs9qQI|1l3%LV@CZRvNP}&$M
z{p_XU?4_Tu=-3#w0rsBLW7I%L<D_)*d#W=QOa1)!v?>Am>i5(gcC%aG>o*#o24!Bj
ze`)P4w2u!ixMh9#J$(&N*+MJEqLhYIe-czPDrc)5rN%?~kvst#T-`YJr>@3JKf`L%
zXB`@SavV8fFXfz!*MoM8>@o6}*Efzu49<hTsPOq8$afre<f}i>MCfM5i$(W+yysGf
zZ}0`DeuDzf-+rKd<8W;<UPXH3+Tj;hdUpPz+5>MZ)lN=-%(}Iz@3y>7)iEwqIZoZ6
z-1?qg9IsB+D}6|*_<@d0FibZJj#q<3vlLMnZH`y_SdAWxpxbD2m;OKNJEAgtRpzX)
zQa*B^yZA(8yuI|x?mI4~txV#BE#K_obhw_vCZe|zXw*bCP}%bfEuV-Xc<>8tpQsLe
z+Gx7rFQ;(m?dWKn;{V?sz6P|fyJ|5mXS`Up;xAHA=MpNMjB}LnUeoOXiS2)gYr|(b
z9zwLb=Ats*j(VuuZ{Kv@)ti?g-y-AIvop;|Q=0^1AdR;-2ZpUH-gdj<J4MC?l{1oz
zcc^-e@Sl{hsec1S7Kx=gl*jix#!Fal%_-<`&%Wh~mVE%P*+H~FQSGSDc{jZ&|5tY|
zZtnlnZ438+vi~S;oUCnR+!8Zdg8P&+lhqEbjWIIbJH33x7mvHwdA-IxKnV@a!ntP#
zB}~D&XA*6if(-w$xEs@uS*nF<C1D~yWrZ7KL0coMmUs2e;9=Yt{%>Qz`@|rMO@3;3
z@kt~ZqplBEwX3!Nui7tE3bcr-nv9*Qc6v&u>pRjvb9tJpKEM7^VAaGweUCnxruM2@
zg?a_ZFNI4kjZ0BuW%uj%^_w0?-$wcUqK41aCZ~<(g?1bWbT?kZ`f&C8+xK65gKv8H
zb{$)jcEHp&aeqJU1lrgfjLV8lt!CoH9?bKyA*D{o<TKti`{i@rH{BlEdXiQMp4#xP
z%M%1o&5p94@s8T|o&B6!9B;iq^TR%XN78f~4qc76>+ZA7kGVXt*A_US94^Ut-R+Io
z@Y&~wJeW`&bMOI$r{To<<Rc4s@Dn#wLhl#l%mZ4^j#V!N_S*UD2>*?IPa+DbOK+#~
zTKY|Y5%HC`k3D!#4c}euFr4nC)!2E;f1^FKG4HV<rK6Qv&$!VC^YFms4z4p*1Jek9
zn1#*l#P9TVI`8Pe)2%{0(C9D&XWtO&Jwpw2H{MqK=3BwZZgQtSip=+7=oxh3{tPt-
z3&bfyZG}Ij>YSl%JzOG9%&4&m>yB0T|HgZc-##&W``_33(2GkrcZbNas&)=^Iuo0>
z@m6%_o_)S@4!aqQR^w{k6=x{pP06Efu3lmqzJu=taKPqa(Js!IBJ8Ejr^aRu>T9~H
zfd4w3x&O-;Ym<c=<$mw6{uJ+x7v3Lee)b){Sn+0uNuYJ`lrB#`VS+<f;ZUhRF$i$k
z(=OM4?qaQ`TGIM-e5SeqcSNzX@BqlTZneSRr{TF#8~SP%?(4fz+-&r1U#dS(b-`It
zA5TS$vb*u-<u_wa1UPLe<;O~RV#`ZKAAfh_UCv2f-8;RzFy^M=5F{1S_<7o>`DCkZ
zCcHbEqOw)*s%n&woU6LfnrxhL!svDQh`LZ#IzJW9Ry&E^EIvnVNZoUA{`o+naXIP;
zqtYUaYdLD8|IXG8e>dfxiyTF3K08Q5a&cwVTG<iP>SV6kO1Z4iFS%G74;5K^3YszT
z^z4XJm-wEWA3$LqI#Y`|S`)ac9zl}v0&C}_$93O3-G?80@$*tV5Nbn_d8#jMn4`K>
z@4@;8u9xbjyk??1bF_tn?V&L>pQ|>hQEQD2o2&Z$OLD9?u7nAd(3-}Vi~Do&RLmGw
zu^zRG1d5hct&4vjC1*Napfypez^{2~bCI^{q-ZR7eLUU&xx|c}<exjjlhycV+Un)0
zt?hpKYHn4F#I;2m1Q!!OFXVld#6_le0d|IQG^GG@S(L1`rFx>zBvT=Fph^b{F2s|K
zdNi#NEp0@L3f1Ul#v8t4n!c^NHZR}}5l1t=Mu?pX5564c<2i&M9iNW{YP`uicGAuH
zgB>%=g+HD>kES&Exf`zn|0t*Ax62<k*{L~b7YscI{F&vKoS*Ja;R~=2YT+i7wm_XG
zxGc8gf8Ve5%a52%jhkbK_?OKEF(tHmA-X4szFCNt528m4QGw3nvk2QkAH1<E95*tq
z6wi<OrkCPr-!$2MKHj&*-~KdN8(SxHan>hdiX*dSBrjH{xErq`@3?Y<wAXXpd;D#J
zAND`|>WvmGR-=`l>z1BdtWH<(h%@qebd2%#@s;B;Ui!Und<b$BTibkE`8=*HFW^gI
z{zl<a13K|MR%uJBzYGN#Z!3=+AJJFcz2SCsx=mzXhK6W<f%wDHKbPUz%yzuoiXZ)2
zmiBb`=H;zna2HQp_cto_Tdro9nw@T}zvtXrZqjSt>eh4c7+)M(ziv!#tyCu~4;s@m
z8?i<uidcn*wCm~BRVZj%=~t^%lZ<y0e6t$&4Zpe4+%?!YjCY)yUZ31(cH6a%C{b+5
z&UAJymbl+qeB<Cj`-?Gu#0$y`ygLRSS!?_J6*!9rkG)7<i$~??VdJId^?U6e+3c&3
zQ22;12eQcDjzL;Y1EAcEm#ll_A2PRaKA8wVf8K}uuwiXk2S0^otcRcR^7JilM4tMl
z<4F(riEkyA(<#o#c<Xvb{fH8mH{uRe7pPUrO|H?9X2vVrr#8-Cm2tTFMmTe!xP~2X
zN<-G7LyVWYuaP?soO<U*b9e;s_gGx7>JG6}$y(I0W(jTzvS_&u9bd!IVE;ocpYY~N
zh_)l68a+`nTX`1UMj!oS^y*cOo<1Nd2Bb#*BAJnW6fHv!%M<9&A{--(m&*To?8?RK
zQo%=xoZUiy|NXzuk*zd_aO!`z1=S_ocN_1kk6O|<?SbEBzK_Mh6ALR)^e*1Q#|fU^
z8~k;O)Qg60P@6ni@0$HAreq;qEy67eE^wlBe8bcc?WoyJ-22?0Mg^Z<u6E3*(Mv`u
z{8ciFF#6~JF0H%qiv76*cKN#O?K1;iA(qM_%Hy^4)K1l&Ea;0(7R#kZ#qd=5Z%+E9
zr~VrMP1jr&rOr=#T|XeA^U!-(hHlDlo;2u1TrHfb@I^FWBW-}HYL?!`A?P{d{}-?!
z{ex(arL*we5RVrRgYkbBXx!$4TS3aI)`;n%$Nbfrns2~5dFry$u02}*(fB_I&}KOP
z-)>lerAs!dzbdtlyu`oJ$G7fVRQmIzxoPR9O=_%?ABWo_{to%IdN+URn^TZK1vY>6
z^WvUPwSGJGQ}ZX|XCb~J;>S-_=Dgc!Z|9{V{f|vnEg3)eK&c&e6U5)knUb3I>Gn^b
zOuuA{UJcg|&0HG`|HVgecuRkJ=QERQDQ#7|krTF%0Kb4BzYzYyfzF1Q+mQWz)xFfC
zoB3^X>G^)<^QKbQXmf9wR=sXkOTUdU-?vcSDSUzO=0NjU^7Aq~(4;};@ukfMn`h=Y
z#^^;!ODbqXg}H6%+ZASi+3`$;RsreG>C!(=n#VafwmhSQq_eu);<M%`*>T@lojyEQ
Ldg+|GiSmB{Oal=L

diff --git a/integrations/va-auth0/package.json b/integrations/va-auth0/package.json
index 6d18d3b38..14905242d 100644
--- a/integrations/va-auth0/package.json
+++ b/integrations/va-auth0/package.json
@@ -6,7 +6,7 @@
         "@gitbook/api": "*",
         "@gitbook/runtime": "*",
         "itty-router": "^4.0.14",
-        "@tsndr/cloudflare-worker-jwt": "2.3.2"
+        "@tsndr/cloudflare-worker-jwt": "3.1.3"
     },
     "devDependencies": {
         "@gitbook/cli": "workspace:*",
diff --git a/integrations/va-auth0/src/index.tsx b/integrations/va-auth0/src/index.tsx
index c42c53f94..2cc138adb 100644
--- a/integrations/va-auth0/src/index.tsx
+++ b/integrations/va-auth0/src/index.tsx
@@ -1,4 +1,4 @@
-import { sign } from '@tsndr/cloudflare-worker-jwt';
+import * as jwt from '@tsndr/cloudflare-worker-jwt';
 import { Router } from 'itty-router';
 
 import { IntegrationInstallationConfiguration } from '@gitbook/api';
@@ -22,6 +22,7 @@ type Auth0SiteInstallationConfiguration = {
     client_id?: string;
     issuer_base_url?: string;
     client_secret?: string;
+    enrich_session?: boolean;
 };
 
 type Auth0State = Auth0SiteInstallationConfiguration;
@@ -35,6 +36,18 @@ type Auth0Props = {
     };
 };
 
+type Auth0TokenResponseData = {
+    access_token?: string;
+    refresh_token?: string;
+    token_type: 'Bearer';
+    expires_in: number;
+};
+
+type Auth0TokenResponseError = {
+    error: string;
+    error_description: string;
+};
+
 export type Auth0Action = { action: 'save.config' };
 
 const getDomainWithHttps = (url: string): string => {
@@ -55,6 +68,7 @@ const configBlock = createComponent<Auth0Props, Auth0State, Auth0Action, Auth0Ru
             client_id: siteInstallation?.configuration?.client_id || '',
             issuer_base_url: siteInstallation?.configuration?.issuer_base_url || '',
             client_secret: siteInstallation?.configuration?.client_secret || '',
+            enrich_session: siteInstallation?.configuration?.enrich_session || false,
         };
     },
     action: async (element, action, context) => {
@@ -68,6 +82,7 @@ const configBlock = createComponent<Auth0Props, Auth0State, Auth0Action, Auth0Ru
                     client_id: element.state.client_id,
                     client_secret: element.state.client_secret,
                     issuer_base_url: getDomainWithHttps(element.state.issuer_base_url ?? ''),
+                    enrich_session: element.state.enrich_session,
                 };
 
                 await api.integrations.updateIntegrationSiteInstallation(
@@ -89,83 +104,104 @@ const configBlock = createComponent<Auth0Props, Auth0State, Auth0Action, Auth0Ru
 
         const VACallbackURL = `${siteInstallation?.urls?.publicEndpoint}/visitor-auth/response`;
         return (
-            <block>
-                <input
-                    label="Client ID"
-                    hint={
-                        <text>
-                            The unique identifier of your Auth0 application.
-                            <link
-                                target={{
-                                    url: 'https://auth0.com/docs/get-started/applications/application-settings',
-                                }}
-                            >
-                                {' '}
-                                More Details
-                            </link>
-                        </text>
-                    }
-                    element={<textinput state="client_id" placeholder="Client ID" />}
-                />
-
-                <input
-                    label="Auth0 Domain"
-                    hint={
-                        <text>
-                            The Auth0 domain (also known as tenant).
-                            <link
-                                target={{
-                                    url: 'https://auth0.com/docs/get-started/applications/application-settings',
-                                }}
-                            >
-                                {' '}
-                                More Details
-                            </link>
-                        </text>
-                    }
-                    element={<textinput state="issuer_base_url" placeholder="Domain" />}
-                />
-
-                <input
-                    label="Client Secret"
-                    hint={
-                        <text>
-                            The secret used for signing and validating tokens.
-                            <link
-                                target={{
-                                    url: 'https://auth0.com/docs/get-started/applications/application-settings',
-                                }}
-                            >
-                                {' '}
-                                More Details
-                            </link>
-                        </text>
-                    }
-                    element={<textinput state="client_secret" placeholder="Client Secret" />}
-                />
-                <divider size="medium" />
-                <hint>
-                    <text style="bold">
-                        The following URL needs to be saved as an allowed callback URL in Auth0:
-                    </text>
-                </hint>
-                <codeblock content={VACallbackURL} />
-                <input
-                    label=""
-                    hint=""
-                    element={
-                        <button
-                            style="primary"
-                            disabled={false}
-                            label="Save"
-                            tooltip="Save configuration"
-                            onPress={{
-                                action: 'save.config',
-                            }}
+            <configuration>
+                <box>
+                    <markdown content="### Auth0 application" />
+                    <vstack>
+                        <input
+                            label="Auth0 Domain"
+                            hint={
+                                <text>
+                                    The Auth0 domain (also known as tenant).
+                                    <link
+                                        target={{
+                                            url: 'https://auth0.com/docs/get-started/applications/application-settings',
+                                        }}
+                                    >
+                                        {' '}
+                                        More Details
+                                    </link>
+                                </text>
+                            }
+                            element={<textinput state="issuer_base_url" placeholder="Domain" />}
                         />
-                    }
-                />
-            </block>
+
+                        <input
+                            label="Client ID"
+                            hint={
+                                <text>
+                                    The unique identifier of your Auth0 application.
+                                    <link
+                                        target={{
+                                            url: 'https://auth0.com/docs/get-started/applications/application-settings',
+                                        }}
+                                    >
+                                        {' '}
+                                        More Details
+                                    </link>
+                                </text>
+                            }
+                            element={<textinput state="client_id" placeholder="Client ID" />}
+                        />
+
+                        <input
+                            label="Client Secret"
+                            hint={
+                                <text>
+                                    The secret used for signing and validating tokens.
+                                    <link
+                                        target={{
+                                            url: 'https://auth0.com/docs/get-started/applications/application-settings',
+                                        }}
+                                    >
+                                        {' '}
+                                        More Details
+                                    </link>
+                                </text>
+                            }
+                            element={
+                                <textinput state="client_secret" placeholder="Client Secret" />
+                            }
+                        />
+
+                        <input
+                            label="Add Callback URL"
+                            hint={
+                                <text>
+                                    Add this URL to the{' '}
+                                    <text style="bold">Allowed Callback URLs</text> section in your
+                                    application's settings in Auth0.
+                                </text>
+                            }
+                            element={<codeblock content={VACallbackURL} />}
+                        />
+                    </vstack>
+                    <divider size="medium" />
+
+                    <markdown content="### Visitor authentication settings" />
+                    <input
+                        label="Include claims in JWT token"
+                        hint="Enhance the user's site navigation experience based on user information and attributes provided by your Auth0 authorization backend."
+                        element={<switch state="enrich_session" />}
+                    />
+
+                    <input
+                        label=""
+                        hint=""
+                        element={
+                            <button
+                                style="primary"
+                                disabled={false}
+                                label="Save"
+                                tooltip="Save configuration"
+                                onPress={{
+                                    action: 'save.config',
+                                }}
+                            />
+                        }
+                    />
+                </box>
+            </configuration>
         );
     },
 });
@@ -213,80 +249,120 @@ const handleFetchEvent: FetchEventCallback<Auth0RuntimeContext> = async (request
         router.get('/visitor-auth/response', async (request) => {
             if ('site' in siteInstallation && siteInstallation.site) {
                 const publishedContentUrls = await getPublishedContentUrls(context);
-                const privateKey = context.environment.signingSecrets.siteInstallation!;
-                let token;
-                try {
-                    token = await sign(
-                        { exp: Math.floor(Date.now() / 1000) + 1 * (60 * 60) },
-                        privateKey,
-                    );
-                } catch (e) {
-                    return new Response('Error: Could not sign JWT token', {
-                        status: 500,
-                    });
-                }
 
+                const includeClaimsInToken = siteInstallation?.configuration.enrich_session;
                 const issuerBaseUrl = siteInstallation?.configuration.issuer_base_url;
                 const clientId = siteInstallation?.configuration.client_id;
                 const clientSecret = siteInstallation?.configuration.client_secret;
-                if (clientId && clientSecret) {
-                    const searchParams = new URLSearchParams({
-                        grant_type: 'authorization_code',
-                        client_id: clientId,
-                        client_secret: clientSecret,
-                        code: `${request.query.code}`,
-                        redirect_uri: `${installationURL}/visitor-auth/response`,
-                    });
-                    const accessTokenURL = `${issuerBaseUrl}/oauth/token/`;
-                    const resp: any = await fetch(accessTokenURL, {
-                        method: 'POST',
-                        headers: { 'content-type': 'application/x-www-form-urlencoded' },
-                        body: searchParams,
-                    })
-                        .then((response) => response.json())
-                        .catch((err) => {
-                            return new Response('Error: Could not fetch access token from Auth0', {
-                                status: 401,
-                            });
-                        });
 
-                    if ('access_token' in resp) {
-                        let url;
-                        if (request.query.state) {
-                            url = new URL(
-                                `${publishedContentUrls?.published}${request.query.state}`,
-                            );
-                            url.searchParams.append('jwt_token', token);
-                        } else {
-                            url = new URL(publishedContentUrls?.published!);
-                            url.searchParams.append('jwt_token', token);
-                        }
-                        if (publishedContentUrls?.published && token) {
-                            return Response.redirect(url.toString());
-                        } else {
-                            return new Response(
-                                "Error: Either JWT token or space's published URL is missing",
-                                {
-                                    status: 500,
-                                },
-                            );
-                        }
-                    } else {
-                        logger.debug(JSON.stringify(resp, null, 2));
+                if (!clientId || !clientSecret || !issuerBaseUrl) {
+                    return new Response(
+                        'Error: Either client id, client secret or issuer base url is missing',
+                        {
+                            status: 400,
+                        },
+                    );
+                }
+
+                const searchParams = new URLSearchParams({
+                    grant_type: 'authorization_code',
+                    client_id: clientId,
+                    client_secret: clientSecret,
+                    code: `${request.query.code}`,
+                    redirect_uri: `${installationURL}/visitor-auth/response`,
+                });
+                const accessTokenURL = `${issuerBaseUrl}/oauth/token/`;
+                const auth0TokenResp = await fetch(accessTokenURL, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                    body: searchParams,
+                });
+
+                if (!auth0TokenResp.ok) {
+                    if (auth0TokenResp.headers.get('content-type')?.includes('application/json')) {
+                        const errorResponse = await auth0TokenResp.json<Auth0TokenResponseError>();
+                        logger.debug(JSON.stringify(errorResponse, null, 2));
                         logger.debug(
-                            `Did not receive access token. Error: ${(resp && resp.error) || ''} ${
-                                (resp && resp.error_description) || ''
-                            }`,
+                            `Did not receive access token. Error: ${
+                                (errorResponse && errorResponse.error) || ''
+                            } ${(errorResponse && errorResponse.error_description) || ''}`,
                         );
+                    }
+                    return new Response('Error: Could not fetch token from Auth0', {
+                        status: 401,
+                    });
+                }
+
+                let userInfo;
+                if (includeClaimsInToken) {
+                    // Auth0 returns an opaque access token (i.e., one that doesn't include user or custom claims) when
+                    // exchanging an authorization code for a token—unless an audience (aud parameter) is set to a valid
+                    // Auth0 API application during the authorization request.
+                    // In this case, since we only request a token to verify authentication and generate the VA,
+                    // there is no valid API target to specify as audience.
+                    // As a result, we must call the /userinfo endpoint (an OIDC-compliant endpoint) to retrieve user claims.
+                    //
+                    // An alternative approach would be to request an ID Token using the Implicit Grant flow (with form post).
+                    // However, many authentication providers discourage this method in favor of the Authorization Code flow.
+                    // Additionally, some customers may disable the Implicit Grant flow in their Auth0 application.
+                    // Therefore, retrieving user data via the /userinfo endpoint is a more robust solution.
+                    const auth0TokenData = await auth0TokenResp.json<Auth0TokenResponseData>();
+                    if (!auth0TokenData.access_token) {
                         return new Response('Error: No Access Token found in response from Auth0', {
                             status: 401,
                         });
                     }
-                } else {
-                    return new Response('Error: Either ClientId or Client Secret is missing', {
+
+                    const userInfoURL = `${issuerBaseUrl}/userinfo/`;
+                    const userInfoResp = await fetch(userInfoURL, {
+                        method: 'GET',
+                        headers: { Authorization: `Bearer ${auth0TokenData.access_token}` },
+                    });
+
+                    if (!userInfoResp.ok) {
+                        return new Response('Error: Unable to fetch user info from Auth0', {
+                            status: 401,
+                        });
+                    }
+
+                    userInfo = await userInfoResp.json<Record<string, any>>();
+                }
+
+                const privateKey = context.environment.signingSecrets.siteInstallation;
+                if (!privateKey) {
+                    return new Response('Error: Missing private key from site installation', {
                         status: 400,
                     });
                 }
+
+                try {
+                    const jwtToken = await jwt.sign(
+                        {
+                            ...(userInfo ?? {}),
+                            exp: Math.floor(Date.now() / 1000) + 1 * (60 * 60),
+                        },
+                        privateKey,
+                    );
+
+                    const publishedContentUrl = publishedContentUrls?.published;
+                    if (!publishedContentUrl || !jwtToken) {
+                        return new Response(
+                            "Error: Either JWT token or site's published URL is missing",
+                            {
+                                status: 500,
+                            },
+                        );
+                    }
+
+                    const url = new URL(`${publishedContentUrl}${request.query.state || ''}`);
+                    url.searchParams.append('jwt_token', jwtToken);
+
+                    return Response.redirect(url.toString());
+                } catch (e) {
+                    return new Response('Error: Could not sign JWT token', {
+                        status: 500,
+                    });
+                }
             }
         });
 
@@ -330,6 +406,9 @@ export default createIntegration({
         const url = new URL(`${issuerBaseUrl}/authorize`);
         url.searchParams.append('client_id', clientId);
         url.searchParams.append('response_type', 'code');
+        if (configuration.enrich_session) {
+            url.searchParams.append('scope', 'openid');
+        }
         url.searchParams.append('redirect_uri', `${installationURL}/visitor-auth/response`);
         url.searchParams.append('state', location);