├── TinyTodo.Web
    ├── Views
    │   ├── _ViewStart.cshtml
    │   ├── Admin
    │   │   └── UserAdmin.cshtml
    │   ├── _ViewImports.cshtml
    │   ├── Account
    │   │   ├── Details.cshtml
    │   │   └── AccessDenied.cshtml
    │   ├── Home
    │   │   ├── Privacy.cshtml
    │   │   └── Index.cshtml
    │   ├── Shared
    │   │   ├── _ValidationScriptsPartial.cshtml
    │   │   ├── Error.cshtml
    │   │   ├── _Layout.cshtml.css
    │   │   └── _Layout.cshtml
    │   ├── Auth
    │   │   └── login.cshtml
    │   └── TodoList
    │   │   ├── _AddTodoItem.cshtml
    │   │   ├── _EditTodoList.cshtml
    │   │   ├── _ShareTodoList.cshtml
    │   │   └── List.cshtml
    ├── Database
    │   ├── Models
    │   │   ├── IEntity.cs
    │   │   ├── User.cs
    │   │   ├── TodoListShare.cs
    │   │   ├── TodoItem.cs
    │   │   └── TodoList.cs
    │   └── TinyTodoDBContext.cs
    ├── wwwroot
    │   ├── favicon.ico
    │   ├── js
    │   │   └── site.js
    │   ├── lib
    │   │   ├── jquery-validation-unobtrusive
    │   │   │   ├── LICENSE.txt
    │   │   │   ├── jquery.validate.unobtrusive.min.js
    │   │   │   └── jquery.validate.unobtrusive.js
    │   │   ├── jquery-validation
    │   │   │   ├── LICENSE.md
    │   │   │   └── dist
    │   │   │   │   ├── additional-methods.min.js
    │   │   │   │   └── jquery.validate.min.js
    │   │   ├── bootstrap
    │   │   │   ├── LICENSE
    │   │   │   └── dist
    │   │   │   │   └── css
    │   │   │   │       ├── bootstrap-reboot.min.css
    │   │   │   │       ├── bootstrap-reboot.rtl.min.css
    │   │   │   │       ├── bootstrap-reboot.rtl.css
    │   │   │   │       └── bootstrap-reboot.css
    │   │   └── jquery
    │   │   │   └── LICENSE.txt
    │   └── css
    │   │   └── site.css
    ├── appsettings.Development.json
    ├── Models
    │   ├── ErrorViewModel.cs
    │   └── LoginViewModel.cs
    ├── Controllers
    │   ├── AdminController.cs
    │   ├── AccountController.cs
    │   ├── HomeController.cs
    │   ├── AuthController.cs
    │   └── TodoListController.cs
    ├── IAppConfig.cs
    ├── Authorization
    │   ├── HasPermissionOnActionAttribute.cs
    │   ├── IVerifiedPermissionsUtil.cs
    │   ├── HasPermissionRequirement.cs
    │   ├── CustomAuthorizationPolicyProvider.cs
    │   ├── HasPermissionRequirementHandler.cs
    │   └── VerifiedPermissionsUtil.cs
    ├── appsettings.json
    ├── TinyTodo.Web.csproj
    ├── Properties
    │   └── launchSettings.json
    ├── Constants.cs
    ├── AppConfig.cs
    └── Program.cs
├── Media
    ├── AppSettings.PNG
    ├── Architecture.JPG
    └── CDK-Output.png
├── TinyTodo.CDK
    ├── PolicyStore
    │   ├── PolicyTemplates
    │   │   ├── TodoListSharedAccessPolicyTemplate.cedar
    │   │   ├── TodoListSharedAccessWithResharePolicyTemplate.cedar
    │   │   ├── TodoListSharedAccessPolicyTemplate.cs
    │   │   └── TodoListSharedAccessWithResharePolicyTemplate.cs
    │   ├── StaticPolicies
    │   │   ├── AdminModuleAccessPolicy.cedar
    │   │   ├── AllowActionsOnApplicationPolicy.cedar
    │   │   ├── AllowActionsOnUserTodoListsPolicy.cedar
    │   │   ├── AdminModuleAccessPolicy.cs
    │   │   ├── AllowActionsOnApplicationPolicy.cs
    │   │   └── AllowActionsOnUserTodoListsPolicy.cs
    │   ├── PolicyStore.cs
    │   └── TinyTodoList.cedarschema.json
    ├── GlobalSuppressions.cs
    ├── TinyTodo.CDK.csproj
    ├── Program.cs
    ├── cdk.json
    └── TinyTodoStack.cs
├── .vscode
    ├── extensions.json
    ├── settings.json
    ├── tasks.json
    └── launch.json
├── CODE_OF_CONDUCT.md
├── .gitignore
├── LICENSE.txt
├── LICENSE
├── CustomAuthPolicyProviderDemo.sln
├── THIRD-PARTY-LICENSES_4532ff69-61e7-4e2b-ad49-353b5ad8cca5.txt
├── CONTRIBUTING.md
└── README.md


/TinyTodo.Web/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Admin/UserAdmin.cshtml:
--------------------------------------------------------------------------------
1 | <h1 class="display-4">Admin Module</h1>


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using TinyTodo.Web
2 | @using TinyTodo.Web.Models
3 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
4 | 


--------------------------------------------------------------------------------
/Media/AppSettings.PNG:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/HEAD/Media/AppSettings.PNG


--------------------------------------------------------------------------------
/Media/Architecture.JPG:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/HEAD/Media/Architecture.JPG


--------------------------------------------------------------------------------
/Media/CDK-Output.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/HEAD/Media/CDK-Output.png


--------------------------------------------------------------------------------
/TinyTodo.Web/Database/Models/IEntity.cs:
--------------------------------------------------------------------------------
1 | namespace TinyTodo.Web.Database.Models;
2 | 
3 | public interface IEntity
4 | {
5 |     public Guid Id { get; set; }
6 | }
7 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/HEAD/TinyTodo.Web/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Account/Details.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     ViewData["Title"] = "Account Details";
3 | }
4 | 
5 | <div class="text-center">
6 |     <h2 class="display-4">Account Details</h2>
7 | </div>


--------------------------------------------------------------------------------
/TinyTodo.Web/appsettings.Development.json:
--------------------------------------------------------------------------------
1 | {
2 |   "Logging": {
3 |     "LogLevel": {
4 |       "Default": "Information",
5 |       "Microsoft.AspNetCore": "Warning"
6 |     }
7 |   }
8 | }
9 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Home/Privacy.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     ViewData["Title"] = "Privacy Policy";
3 | }
4 | <h1>@ViewData["Title"]</h1>
5 | 
6 | <p>Use this page to detail your site's privacy policy.</p>
7 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessPolicyTemplate.cedar:
--------------------------------------------------------------------------------
1 | permit (
2 |     principal in ?principal,
3 |     action in [TinyTodoList::Action::"AddTodoItem"],
4 |     resource in ?resource
5 | );


--------------------------------------------------------------------------------
/.vscode/extensions.json:
--------------------------------------------------------------------------------
1 | {
2 | 	// See http://go.microsoft.com/fwlink/?LinkId=827846
3 | 	// for the documentation about the extensions.json format
4 | 	"recommendations": [
5 | 		"cedar-policy.vscode-cedar"
6 | 	]
7 | }
8 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
1 | <script src="~/lib/jquery-validation/dist/jquery.validate.min.js"></script>
2 | <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"></script>
3 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Database/Models/User.cs:
--------------------------------------------------------------------------------
1 | namespace TinyTodo.Web.Database.Models;
2 | 
3 | public class User : IEntity
4 | {
5 |     public Guid Id { get; set; }
6 |     public string Email { get; set; }
7 |     public string? Team { get; set; }
8 | }


--------------------------------------------------------------------------------
/TinyTodo.Web/Models/ErrorViewModel.cs:
--------------------------------------------------------------------------------
1 | namespace TinyTodo.Web.Models;
2 | 
3 | public class ErrorViewModel
4 | {
5 |     public string? RequestId { get; set; }
6 | 
7 |     public bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
8 | }
9 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Models/LoginViewModel.cs:
--------------------------------------------------------------------------------
1 | namespace TinyTodo.Web.Models;
2 | 
3 | public class LoginViewModel
4 | {
5 |     public string ReturnUrl { get; set; }
6 |     public string Email { get; set; }
7 |     public string Password { get; set; }
8 | }
9 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/GlobalSuppressions.cs:
--------------------------------------------------------------------------------
1 | [assembly: System.Diagnostics.CodeAnalysis.SuppressMessage("Potential Code Quality Issues", "RECS0026:Possible unassigned object created by 'new'", Justification = "Constructs add themselves to the scope in which they are created")]


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/StaticPolicies/AdminModuleAccessPolicy.cedar:
--------------------------------------------------------------------------------
1 | permit (
2 |     principal,
3 |     action in [TinyTodoList::Action::"UserAdmin"],
4 |     resource == TinyTodoList::Application::"TinyTodoListApp"
5 | )
6 | when { principal.Role == "Administrator" };


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Account/AccessDenied.cshtml:
--------------------------------------------------------------------------------
1 | <div class="text-center">
2 |     <h1 class="display-8">Access Denied</h1>
3 |     <h3>You don't have permissions to access that page</h3>
4 |     <h5>Click <a href="/TodoList">here</a> to return to Todo List</h3>
5 | </div>


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessWithResharePolicyTemplate.cedar:
--------------------------------------------------------------------------------
1 | permit (
2 |     principal in ?principal,
3 |     action in
4 |         [TinyTodoList::Action::"AddTodoItem",
5 |          TinyTodoList::Action::"ShareTodoList"],
6 |     resource in ?resource
7 | );


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/StaticPolicies/AllowActionsOnApplicationPolicy.cedar:
--------------------------------------------------------------------------------
1 | permit (
2 |     principal,
3 |     action in
4 |         [TinyTodoList::Action::"GetTodoLists",
5 |          TinyTodoList::Action::"CreateTodoList"],
6 |     resource == TinyTodoList::Application::"TinyTodoListApp"
7 | );


--------------------------------------------------------------------------------
/.vscode/settings.json:
--------------------------------------------------------------------------------
1 | {
2 |   "[cedar]": {
3 |     "editor.tabSize": 4,
4 |     "editor.wordWrapColumn": 80,
5 |     "editor.formatOnSave": true,
6 |     "editor.defaultFormatter": "cedar-policy.vscode-cedar",
7 |   },
8 |   "cedar.schemaFile": "TinyTodo.CDK/PolicyStore/TinyTodoList.cedarschema.json"
9 | }


--------------------------------------------------------------------------------
/CODE_OF_CONDUCT.md:
--------------------------------------------------------------------------------
1 | ## Code of Conduct
2 | This project has adopted the [Amazon Open Source Code of Conduct](https://aws.github.io/code-of-conduct). 
3 | For more information see the [Code of Conduct FAQ](https://aws.github.io/code-of-conduct-faq) or contact 
4 | opensource-codeofconduct@amazon.com with any additional questions or comments.
5 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Controllers/AdminController.cs:
--------------------------------------------------------------------------------
 1 | using TinyTodo.Web.Authorization;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | 
 4 | namespace TinyTodo.Web.Controllers;
 5 | 
 6 | public class AdminController : Controller
 7 | {
 8 |     [HasPermissionOnAction(Constants.Actions.UserAdmin)]
 9 |     public IActionResult UserAdmin(int id)
10 |     {
11 |         return View();
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/StaticPolicies/AllowActionsOnUserTodoListsPolicy.cedar:
--------------------------------------------------------------------------------
 1 | permit (
 2 |     principal,
 3 |     action in
 4 |         [TinyTodoList::Action::"AddTodoItem",
 5 |          TinyTodoList::Action::"ShareTodoList",
 6 |          TinyTodoList::Action::"DeleteTodoList",
 7 |          TinyTodoList::Action::"MakeTodoListPrivate"],
 8 |     resource
 9 | )
10 | when { resource.Owner == principal.Email };


--------------------------------------------------------------------------------
/TinyTodo.Web/Database/Models/TodoListShare.cs:
--------------------------------------------------------------------------------
 1 | namespace TinyTodo.Web.Database.Models;
 2 | 
 3 | public class TodoListShare : IEntity
 4 | {
 5 |     public Guid Id { get; set; }
 6 |     public Guid TodoListId { get; set; }
 7 |     public string Email { get; set; }
 8 |     public bool AllowReshare { get; set; }
 9 |     public TodoList TodoList { get; set; }
10 |     public DateTime Created {get; set; }
11 | }
12 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/IAppConfig.cs:
--------------------------------------------------------------------------------
 1 | namespace TinyTodo.Web;
 2 | 
 3 | public interface IAppConfig
 4 | {
 5 |     string PolicyStoreId { get; }
 6 |     string PolicyStoreSchemaNamespace { get; }
 7 |     string TodoListSharedAccessPolicyTemplateId { get; }
 8 |     string TodoListSharedAccessWithResharePolicyTemplateId { get; }
 9 |     string ActionType { get; }
10 | 
11 |     string GetConnectionString(string name);
12 | }
13 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Database/Models/TodoItem.cs:
--------------------------------------------------------------------------------
 1 | using System.ComponentModel.DataAnnotations.Schema;
 2 | 
 3 | namespace TinyTodo.Web.Database.Models;
 4 | 
 5 | public class TodoItem : IEntity
 6 | {
 7 |     public Guid Id { get; set; }
 8 |     public string Title { get; set; }
 9 |     public bool IsDone { get; set; }
10 |     public DateTime Created { get; set; }
11 |     public Guid? TodoListId { get; set; }
12 |     public TodoList? TodoList { get; set; }   
13 | }
14 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Controllers/AccountController.cs:
--------------------------------------------------------------------------------
 1 | using System.Diagnostics;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | using TinyTodo.Web.Models;
 4 | using Microsoft.AspNetCore.Authorization;
 5 | 
 6 | namespace TinyTodo.Web.Controllers;
 7 | 
 8 | public class AccountController : Controller
 9 | {
10 |     [Authorize]
11 |     public IActionResult Details()
12 |     {
13 |         return View();
14 |     }
15 | 
16 |     public IActionResult AccessDenied()
17 |     {
18 |         return View();
19 |     }
20 | }


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/PolicyStore.cs:
--------------------------------------------------------------------------------
 1 | using System.IO;
 2 | 
 3 | namespace TinyTodo.CDK.PolicyStore;
 4 | 
 5 | public static class PolicyStoreDetails
 6 | {
 7 |     public const string Name = "TinyTodoPolicyStore";
 8 |     
 9 |     public const string SchemaJsonFilePath = @"PolicyStore/TinyTodoList.cedarschema.json";
10 | 
11 |     public static string SchemaJson
12 |     {
13 |         get
14 |         {
15 |             return File.ReadAllText(SchemaJsonFilePath);
16 |         }
17 |     }   
18 | }
19 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Home";
 3 | }
 4 | 
 5 | <div class="text-center">
 6 |     <h1 class="display-4">Welcome</h1>
 7 |     <p>
 8 |         @if(!User.Identity.IsAuthenticated)
 9 |         {
10 |             <a href="/auth/login">Signin</a>    
11 |         }
12 |         else
13 |         {
14 |             <h3>Hello</h3>
15 |             <h2>@User.Identity.Name</h2>
16 |             <a href="/auth/logout">Signout</a>    
17 |         }
18 |     </p>
19 | </div>
20 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | using System.Diagnostics;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | using TinyTodo.Web.Models;
 4 | 
 5 | namespace TinyTodo.Web.Controllers;
 6 | 
 7 | public class HomeController : Controller
 8 | {
 9 |     private readonly ILogger<HomeController> _logger;
10 | 
11 |     public HomeController(ILogger<HomeController> logger)
12 |     {
13 |         _logger = logger;
14 |     }
15 | 
16 |     public IActionResult Index()
17 |     {
18 |         return View();
19 |     }
20 | }
21 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Authorization/HasPermissionOnActionAttribute.cs:
--------------------------------------------------------------------------------
 1 | namespace TinyTodo.Web.Authorization;
 2 | using Microsoft.AspNetCore.Authorization;
 3 | 
 4 | public class HasPermissionOnActionAttribute : AuthorizeAttribute
 5 | {
 6 |     public HasPermissionOnActionAttribute(string actionName, string resourceType = "", string resourceIdFormElementName = "")
 7 |     {
 8 |         Policy = $"{Constants.PolicyPrefixes.HasPermissionOnAction}{actionName}_{resourceType}_{resourceIdFormElementName}";
 9 |     }
10 | }
11 | 
12 | 
13 | 
14 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | # See http://help.github.com/ignore-files/ for more about ignoring files.
 2 | 
 3 | # Compiled output
 4 | /*/bin
 5 | /*/obj
 6 | /*/cdk.out
 7 | /*/node_modules
 8 | 
 9 | # Database
10 | /*/TinyTodoDatabase.db
11 | /*/*.db*
12 | 
13 | # Visual Studio Code
14 | .vscode/*
15 | !.vscode/tasks.json
16 | !.vscode/launch.json
17 | !.vscode/settings.json
18 | !.vscode/extensions.json
19 | .history/*
20 | 
21 | # System files
22 | .DS_Store
23 | Thumbs.db
24 | 
25 | # Misc
26 | *.bak
27 | /*/*.bak
28 | /TinyTodo.CDK/cdk-outputs.json


--------------------------------------------------------------------------------
/TinyTodo.CDK/TinyTodo.CDK.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 |   <PropertyGroup>
 3 |     <OutputType>Exe</OutputType>
 4 |     <TargetFramework>net6.0</TargetFramework>
 5 |     <ImplicitUsings>enable</ImplicitUsings>
 6 |     <Nullable>enable</Nullable>
 7 |   </PropertyGroup>
 8 |   <ItemGroup>
 9 |     <PackageReference Include="Amazon.CDK.Lib" Version="2.89.0" />
10 |     <PackageReference Include="AWSSDK.VerifiedPermissions" Version="3.7.200.8" />
11 |     <PackageReference Include="Constructs" Version="10.2.69" />
12 |   </ItemGroup>
13 | </Project>


--------------------------------------------------------------------------------
/TinyTodo.Web/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft.AspNetCore": "Warning"
 6 |     }
 7 |   },
 8 |   "ConnectionStrings": {
 9 |     "TinyTodoDatabase": "Filename=./TinyTodoDatabase.db"
10 |   },
11 |   "VerifiedPermissions": {
12 |     "PolicyStoreId": "XXXXXXXXXXXXX",
13 |     "PolicyStoreSchemaNamespace": "TinyTodoList",
14 |     "TodoListSharedAccessPolicyTemplateId": "XXXXXXXXXXXXX",
15 |     "TodoListSharedAccessWithResharePolicyTemplateId": "XXXXXXXXXXXXX"    
16 |   }, 
17 |   "AllowedHosts": "*"
18 | }
19 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Auth/login.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Login";
 3 | }
 4 | <div class="text-center">
 5 | <h1 class="display-4">Signin</h1>
 6 | <form action="/auth/login" method="post">
 7 | <p>Username: <input type="email" name="email" value="" placeholder="Any email address" required></p>
 8 | <p>Password: <input type="password" name="password" placeholder="Any password" required></p>
 9 | <input type="hidden" value="/" name="returnUrl"/>
10 | <p><input type="submit"/></p>
11 | <p style="color: gray;">To test admin module access login as @Constants.AdminUserEmail</p>
12 | </form>
13 | </div>


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessPolicyTemplate.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK.AwsVerifiedpermissions;
 2 | 
 3 | namespace TinyTodo.CDK.PolicyStore.PolicyTemplates;
 4 | 
 5 | public class TodoListSharedAccessPolicyTemplate : CfnPolicyTemplateProps
 6 | {
 7 |     public const string PolicyTemplateFilePath = @"PolicyStore/PolicyTemplates/TodoListSharedAccessPolicyTemplate.cedar";
 8 | 
 9 |     public TodoListSharedAccessPolicyTemplate(string policyStoreId)
10 |     {
11 |         PolicyStoreId = policyStoreId;
12 |         Description = "User can add items to the shared todo list"; 
13 |         Statement = File.ReadAllText(PolicyTemplateFilePath);
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Authorization/IVerifiedPermissionsUtil.cs:
--------------------------------------------------------------------------------
 1 | using System.Security.Claims;
 2 | using Amazon.VerifiedPermissions.Model;
 3 | using TinyTodo.Web.Database.Models;
 4 | 
 5 | namespace TinyTodo.Web.Authorization;
 6 | 
 7 | public interface IVerifiedPermissionsUtil
 8 | {
 9 |     Task<IsAuthorizedResponse> IsAuthorizedAsync(ClaimsPrincipal user, string action, IEntity? entity);
10 |     Task CreateSharePolicyAsync(string policyTemplateId, EntityIdentifier principal, EntityIdentifier resource);
11 |     Task DeleteSharePoliciesAsync(string policyTemplateId, EntityIdentifier resource);
12 |     EntityItem ToEntityItem(IEntity resource);
13 |     EntityItem ToEntityItem(ClaimsPrincipal? user);
14 | }
15 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/TinyTodo.Web.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 |   <PropertyGroup>
 3 |     <TargetFramework>net6.0</TargetFramework>
 4 |     <Nullable>enable</Nullable>
 5 |     <ImplicitUsings>enable</ImplicitUsings>
 6 |   </PropertyGroup>
 7 |   <ItemGroup>
 8 |     <PackageReference Include="AWSSDK.VerifiedPermissions" Version="3.7.100.5" />
 9 |     <PackageReference Include="Microsoft.EntityFrameworkCore" Version="7.0.9" />
10 |     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="7.0.9" />
11 |     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
12 |     <PackageReference Include="System.Configuration.ConfigurationManager" Version="7.0.0" />
13 |   </ItemGroup>
14 | </Project>


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessWithResharePolicyTemplate.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK.AwsVerifiedpermissions;
 2 | 
 3 | namespace TinyTodo.CDK.PolicyStore.PolicyTemplates;
 4 | 
 5 | public class TodoListSharedAccessWithResharePolicyTemplate : CfnPolicyTemplateProps
 6 | {
 7 |     public const string PolicyTemplateFilePath = @"PolicyStore/PolicyTemplates/TodoListSharedAccessWithResharePolicyTemplate.cedar";
 8 | 
 9 |     public TodoListSharedAccessWithResharePolicyTemplate(string policyStoreId)
10 |     {
11 |         PolicyStoreId = policyStoreId;
12 |         Description = "User can add items to and reshare the shared todo list";
13 |         Statement = File.ReadAllText(PolicyTemplateFilePath);
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Authorization/HasPermissionRequirement.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | 
 3 | namespace TinyTodo.Web.Authorization;
 4 | 
 5 | public class HasPermissionRequirement : IAuthorizationRequirement
 6 | {
 7 |     public HasPermissionRequirement(string action) =>
 8 |         Action = action;
 9 | 
10 |     public HasPermissionRequirement(string action, string resourceType, string resourceIdFormElementName)
11 |     {
12 |         Action = action;
13 |         ResourceType = resourceType;
14 |         ResourceIdFormElementName = resourceIdFormElementName;
15 |     }       
16 | 
17 |     public string Action { get; }
18 |     public string ResourceType { get; set; }
19 |     public string ResourceIdFormElementName { get; set; }
20 | }


--------------------------------------------------------------------------------
/TinyTodo.Web/Database/Models/TodoList.cs:
--------------------------------------------------------------------------------
 1 | 
 2 | using System.ComponentModel.DataAnnotations;
 3 | using System.ComponentModel.DataAnnotations.Schema;
 4 | using Newtonsoft.Json;
 5 | 
 6 | namespace TinyTodo.Web.Database.Models;
 7 | 
 8 | public class TodoList : IEntity
 9 | {
10 |     [Key]
11 |     [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
12 |     public Guid Id { get; set; }
13 |     public string Title { get; set; } = "";
14 |     public string Owner { get; set; } = "";
15 |     public DateTime Created { get; set; }
16 | 
17 |     [JsonIgnore]
18 |     public ICollection<TodoItem> TodoItems { get; set; } = new List<TodoItem>();
19 | 
20 |     [JsonIgnore]
21 |     public ICollection<TodoListShare> Shares  { get; set; } = new List<TodoListShare>();
22 | }


--------------------------------------------------------------------------------
/TinyTodo.Web/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:34935",
 7 |       "sslPort": 44396
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "TinyTodo.Web": {
12 |       "commandName": "Project",
13 |       "dotnetRunMessages": true,
14 |       "launchBrowser": true,
15 |       "applicationUrl": "https://localhost:7091;http://localhost:5214",
16 |       "environmentVariables": {
17 |         "ASPNETCORE_ENVIRONMENT": "Development"
18 |       }
19 |     },
20 |     "IIS Express": {
21 |       "commandName": "IISExpress",
22 |       "launchBrowser": true,
23 |       "environmentVariables": {
24 |         "ASPNETCORE_ENVIRONMENT": "Development"
25 |       }
26 |     }
27 |   }
28 | }
29 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/StaticPolicies/AdminModuleAccessPolicy.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK.AwsVerifiedpermissions;
 2 | 
 3 | using static Amazon.CDK.AwsVerifiedpermissions.CfnPolicy;
 4 | 
 5 | namespace TinyTodo.CDK.PolicyStore.StaticPolicies;
 6 | 
 7 | public class AdminModuleAccessPolicy : CfnPolicyProps
 8 | {
 9 |     public const string PolicyFilePath = @"PolicyStore/StaticPolicies/AdminModuleAccessPolicy.cedar";
10 | 
11 |     public AdminModuleAccessPolicy(string policyStoreId)
12 |     {
13 |         PolicyStoreId = policyStoreId;
14 |         Definition = new PolicyDefinitionProperty
15 |         {
16 |             Static = new StaticPolicyDefinitionProperty 
17 |             {
18 |                 Description = "Users with Administrator role can access UserAdmin module", 
19 |                 Statement = File.ReadAllText(PolicyFilePath)
20 |             }
21 |         };
22 |     }
23 | }


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/StaticPolicies/AllowActionsOnApplicationPolicy.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK.AwsVerifiedpermissions;
 2 | using static Amazon.CDK.AwsVerifiedpermissions.CfnPolicy;
 3 | 
 4 | namespace TinyTodo.CDK.PolicyStore.StaticPolicies;
 5 | public class AllowActionsOnApplicationPolicy : CfnPolicyProps
 6 | {
 7 |     public const string PolicyFilePath = @"PolicyStore/StaticPolicies/AllowActionsOnApplicationPolicy.cedar";
 8 | 
 9 |     public AllowActionsOnApplicationPolicy(string policyStoreId)
10 |     {
11 |         PolicyStoreId = policyStoreId;
12 |         Definition =  new PolicyDefinitionProperty 
13 |         {
14 |             Static = new StaticPolicyDefinitionProperty
15 |             {
16 |                 Description = "Allow all generic actions on application", 
17 |                 Statement = File.ReadAllText(PolicyFilePath)
18 |             }
19 |         };
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/StaticPolicies/AllowActionsOnUserTodoListsPolicy.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK.AwsVerifiedpermissions;
 2 | 
 3 | using static Amazon.CDK.AwsVerifiedpermissions.CfnPolicy;
 4 | 
 5 | namespace TinyTodo.CDK.PolicyStore.StaticPolicies;
 6 | 
 7 | public class AllowActionsOnUserTodoListsPolicy : CfnPolicyProps
 8 | {
 9 |     public const string PolicyFilePath = @"PolicyStore/StaticPolicies/AllowActionsOnUserTodoListsPolicy.cedar";
10 |     public AllowActionsOnUserTodoListsPolicy(string policyStoreId)
11 |     {
12 |         PolicyStoreId = policyStoreId;
13 |         Definition =  new PolicyDefinitionProperty 
14 |         {
15 |             Static = new StaticPolicyDefinitionProperty
16 |             {
17 |                 Description = "Allow all actions for users on their own todo lists", 
18 |                 Statement = File.ReadAllText(PolicyFilePath)
19 |             }
20 |         };
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Constants.cs:
--------------------------------------------------------------------------------
 1 | public static class Constants 
 2 | {
 3 |     public const string AdminUserEmail = "admin@example.com";
 4 | 
 5 |     public static class Roles
 6 |     {
 7 |         public const string Administrator = "Administrator";
 8 |         public const string User = "User";
 9 |     }
10 | 
11 |     public static class Actions
12 |     {
13 |         public const string GetTodoLists = "GetTodoLists";
14 |         public const string CreateTodoList = "CreateTodoList";
15 |         public const string AddTodoItem = "AddTodoItem";
16 |         public const string ShareTodoList = "ShareTodoList";
17 |         public const string DeleteTodoList = "DeleteTodoList";
18 |         public const string MakeTodoListPrivate = "MakeTodoListPrivate";
19 |         public const string UserAdmin = "UserAdmin";
20 |     }
21 | 
22 |     public static class PolicyPrefixes
23 |     {
24 |         public const string HasPermissionOnAction = "HasPermissionOnAction_";
25 |     }
26 | }


--------------------------------------------------------------------------------
/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright 2023 Amazon.com, Inc. or its affiliates. All Rights Reserved.
 2 | 
 3 | Permission is hereby granted, free of charge, to any person obtaining a copy of this
 4 | software and associated documentation files (the "Software"), to deal in the Software
 5 | without restriction, including without limitation the rights to use, copy, modify,
 6 | merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
 7 | permit persons to whom the Software is furnished to do so.
 8 | 
 9 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
10 | INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
11 | PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
12 | HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
13 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
14 | SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
15 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Shared/Error.cshtml:
--------------------------------------------------------------------------------
 1 | @model ErrorViewModel
 2 | @{
 3 |     ViewData["Title"] = "Error";
 4 | }
 5 | 
 6 | <h1 class="text-danger">Error.</h1>
 7 | <h2 class="text-danger">An error occurred while processing your request.</h2>
 8 | 
 9 | @if (Model.ShowRequestId)
10 | {
11 |     <p>
12 |         <strong>Request ID:</strong> <code>@Model.RequestId</code>
13 |     </p>
14 | }
15 | 
16 | <h3>Development Mode</h3>
17 | <p>
18 |     Swapping to <strong>Development</strong> environment will display more detailed information about the error that occurred.
19 | </p>
20 | <p>
21 |     <strong>The Development environment shouldn't be enabled for deployed applications.</strong>
22 |     It can result in displaying sensitive information from exceptions to end users.
23 |     For local debugging, enable the <strong>Development</strong> environment by setting the <strong>ASPNETCORE_ENVIRONMENT</strong> environment variable to <strong>Development</strong>
24 |     and restarting the app.
25 | </p>
26 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Database/TinyTodoDBContext.cs:
--------------------------------------------------------------------------------
 1 | using System.Collections;
 2 | using TinyTodo.Web.Database.Models;
 3 | using Microsoft.EntityFrameworkCore;
 4 | using ConfigurationManager = System.Configuration.ConfigurationManager;
 5 | 
 6 | namespace TinyTodo.Web.Database;
 7 | 
 8 | public class TinyTodoDBContext : DbContext
 9 | {
10 |     public DbSet<TodoItem> TodoItems { get; set; }
11 | 
12 |     public DbSet<TodoList> TodoLists { get; set; }
13 | 
14 |     public DbSet<TodoListShare> TodoListShares { get; set; }
15 | 
16 |     public DbSet<User> Users { get; set; }
17 | 
18 |     private IAppConfig _appConfig;
19 | 
20 |     public TinyTodoDBContext(IAppConfig appConfig):
21 |             base(new DbContextOptions<TinyTodoDBContext>())
22 |     {
23 |         _appConfig = appConfig;        
24 |     }
25 | 
26 |     protected override void OnConfiguring(DbContextOptionsBuilder optionsBuilder)
27 |     {
28 |         optionsBuilder.UseSqlite(_appConfig.GetConnectionString("TinyTodoDatabase"));
29 |     }
30 | }


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT No Attribution
 2 | 
 3 | Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy of
 6 | this software and associated documentation files (the "Software"), to deal in
 7 | the Software without restriction, including without limitation the rights to
 8 | use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
 9 | the Software, and to permit persons to whom the Software is furnished to do so.
10 | 
11 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
12 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
13 | FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
14 | COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
15 | IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
16 | CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
17 | 
18 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/TodoList/_AddTodoItem.cshtml:
--------------------------------------------------------------------------------
 1 | <div class="modal fade" id="divAddTodoItem" tabindex="-1" role="dialog" aria-labelledby="divAddTodoItemLabel" aria-hidden="true">
 2 |   <div class="modal-dialog" role="document">
 3 |     <div class="modal-content">
 4 |       <div class="modal-header">
 5 |         <h5 class="modal-title" id="divAddTodoItemLabel">New To-Do Item</h5>
 6 |         <button type="button" class="close" data-bs-dismiss="modal" aria-label="Close">
 7 |           <span aria-hidden="true">&times;</span>
 8 |         </button>
 9 |       </div>
10 |       <div class="modal-body">
11 |         <form id="frmNewToDoItem" method="post" action="/TodoList/Create">
12 |             <div class="alert"></div>
13 |             <p>Title: <input type="text" name="title"></p>
14 |         </form>        
15 |       </div>
16 |       <div class="modal-footer">
17 |         <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
18 |         <button id="btnCreateTodoItem" type="button" class="btn btn-primary">Add</button>
19 |       </div>
20 |     </div>
21 |   </div>
22 | </div>


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/TodoList/_EditTodoList.cshtml:
--------------------------------------------------------------------------------
 1 | <div class="modal fade" id="divEditTodoList" tabindex="-1" role="dialog" aria-labelledby="divEditTodoListLabel" aria-hidden="true">
 2 |   <div class="modal-dialog" role="document">
 3 |     <div class="modal-content">
 4 |       <div class="modal-header">
 5 |         <h5 class="modal-title" id="divEditTodoListLabel">New To-Do list</h5>
 6 |         <button type="button" class="close" data-bs-dismiss="modal" aria-label="Close">
 7 |           <span aria-hidden="true">&times;</span>
 8 |         </button>
 9 |       </div>
10 |       <div class="modal-body">
11 |         <form id="frmNewToDoList" method="post" action="/TodoList/Create">
12 |             <div class="alert"></div>
13 |             <p>Title: <input type="text" name="title"></p>
14 |         </form>        
15 |       </div>
16 |       <div class="modal-footer">
17 |         <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
18 |         <button id="btnCreateTodoList" type="button" class="btn btn-primary">Add</button>
19 |       </div>
20 |     </div>
21 |   </div>
22 | </div>


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Shared/_Layout.cshtml.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | a {
11 |   color: #0077cc;
12 | }
13 | 
14 | .btn-primary {
15 |   color: #fff;
16 |   background-color: #1b6ec2;
17 |   border-color: #1861ac;
18 | }
19 | 
20 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
21 |   color: #fff;
22 |   background-color: #1b6ec2;
23 |   border-color: #1861ac;
24 | }
25 | 
26 | .border-top {
27 |   border-top: 1px solid #e5e5e5;
28 | }
29 | .border-bottom {
30 |   border-bottom: 1px solid #e5e5e5;
31 | }
32 | 
33 | .box-shadow {
34 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
35 | }
36 | 
37 | button.accept-policy {
38 |   font-size: 1rem;
39 |   line-height: inherit;
40 | }
41 | 
42 | .footer {
43 |   position: absolute;
44 |   bottom: 0;
45 |   width: 100%;
46 |   white-space: nowrap;
47 |   line-height: 60px;
48 | }
49 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/TodoList/_ShareTodoList.cshtml:
--------------------------------------------------------------------------------
 1 | <div class="modal fade" id="divShareTodoList" tabindex="-1" role="dialog" aria-labelledby="divShareTodoListLabel" aria-hidden="true">
 2 |   <div class="modal-dialog" role="document">
 3 |     <div class="modal-content">
 4 |       <div class="modal-header">
 5 |         <h5 class="modal-title" id="divShareTodoListLabel">Share To-Do List</h5>
 6 |         <button type="button" class="close" data-bs-dismiss="modal" aria-label="Close">
 7 |           <span aria-hidden="true">&times;</span>
 8 |         </button>
 9 |       </div>
10 |       <div class="modal-body">        
11 |         <form id="frmShareTodoList" method="post" action="/TodoList/Share">
12 |             <div class="alert"></div>
13 |             <p>Email: <input type="text" name="email"></p>
14 |             <p>Allow Reshare?: <input type="checkbox" name="allowReshare" onchange="this.value=this.checked"></p>
15 |         </form>        
16 |       </div>
17 |       <div class="modal-footer">
18 |         <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
19 |         <button id="btnShareTodoList" type="button" class="btn btn-primary">Add</button>
20 |       </div>
21 |     </div>
22 |   </div>
23 | </div>


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2021 Twitter, Inc.
 4 | Copyright (c) 2011-2021 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/Program.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK;
 2 | using System;
 3 | using System.Collections.Generic;
 4 | using System.Linq;
 5 | using TinyTodo.CDK;
 6 | 
 7 | var app = new App();
 8 | var stk = new TinyTodoCdkStack(app, "TinyTodoCdkStack", new StackProps
 9 | {
10 |     // If you don't specify 'env', this stack will be environment-agnostic.
11 |     // Account/Region-dependent features and context lookups will not work,
12 |     // but a single synthesized template can be deployed anywhere.
13 | 
14 |     // Uncomment the next block to specialize this stack for the AWS Account
15 |     // and Region that are implied by the current CLI configuration.
16 |     /*
17 |     Env = new Amazon.CDK.Environment
18 |     {
19 |         Account = System.Environment.GetEnvironmentVariable("CDK_DEFAULT_ACCOUNT"),
20 |         Region = System.Environment.GetEnvironmentVariable("CDK_DEFAULT_REGION"),
21 |     }
22 |     */
23 | 
24 |     // Uncomment the next block if you know exactly what Account and Region you
25 |     // want to deploy the stack to.
26 |     /*
27 |     Env = new Amazon.CDK.Environment
28 |     {
29 |         Account = "123456789012",
30 |         Region = "us-east-1",
31 |     }
32 |     */
33 | 
34 |     // For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
35 | });
36 | app.Synth();


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | html {
 2 |   font-size: 14px;
 3 | }
 4 | 
 5 | @media (min-width: 768px) {
 6 |   html {
 7 |     font-size: 16px;
 8 |   }
 9 | }
10 | 
11 | html {
12 |   position: relative;
13 |   min-height: 100%;
14 | }
15 | 
16 | body {
17 |   margin-bottom: 60px;
18 | }
19 | 
20 | .todo-list-title
21 | {
22 |     /* This is the code responsible for the centering of content */
23 |     display: -webkit-box;
24 |     display: -moz-box;
25 |     display: -ms-flexbox;
26 |     display: -webkit-flex;
27 |     display: flex;
28 |     
29 |     -webkit-flex-pack:center;
30 | 	-webkit-justify-content:center;
31 | 	-moz-justify-content:center;
32 | 	-ms-flex-pack:center;
33 | 	justify-content:center;
34 |     
35 |     -webkit-flex-line-pack:center;
36 | 	-ms-flex-line-pack:center;
37 | 	-webkit-align-content:center;
38 | 	align-content:center;
39 |     
40 |     -webkit-flex-direction:column;
41 | 	-moz-flex-direction:column;
42 | 	-ms-flex-direction:column;
43 | 	flex-direction:column;
44 |     
45 |     text-align: center;
46 |     width: 100%;
47 |     height: 200px;
48 | 
49 |     margin: 0 1em 1em 0;
50 |     padding: 0;
51 | 
52 |     
53 |     background: #333;
54 |     border: 1px solid #333;
55 |     color: #fff;
56 |     font-size: 1.5em;
57 |     font-weight: bold;
58 | }
59 | 
60 | .modal-dialog
61 | {
62 |   margin-top: 70px;
63 | }


--------------------------------------------------------------------------------
/.vscode/tasks.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "version": "2.0.0",
 3 |     "tasks": [
 4 |         {
 5 |             "label": "build",
 6 |             "command": "dotnet",
 7 |             "type": "process",
 8 |             "args": [
 9 |                 "build",
10 |                 "${workspaceFolder}/CustomAuthPolicyProviderDemo.sln",
11 |                 "/property:GenerateFullPaths=true",
12 |                 "/consoleloggerparameters:NoSummary"
13 |             ],
14 |             "problemMatcher": "$msCompile"
15 |         },
16 |         {
17 |             "label": "publish",
18 |             "command": "dotnet",
19 |             "type": "process",
20 |             "args": [
21 |                 "publish",
22 |                 "${workspaceFolder}/CustomAuthPolicyProviderDemo.sln",
23 |                 "/property:GenerateFullPaths=true",
24 |                 "/consoleloggerparameters:NoSummary"
25 |             ],
26 |             "problemMatcher": "$msCompile"
27 |         },
28 |         {
29 |             "label": "watch",
30 |             "command": "dotnet",
31 |             "type": "process",
32 |             "args": [
33 |                 "watch",
34 |                 "run",
35 |                 "--project",
36 |                 "${workspaceFolder}/CustomAuthPolicyProviderDemo.sln"
37 |             ],
38 |             "problemMatcher": "$msCompile"
39 |         }
40 |     ]
41 | }


--------------------------------------------------------------------------------
/.vscode/launch.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "version": "0.2.0",
 3 |     "configurations": [
 4 |         {
 5 |             // Use IntelliSense to find out which attributes exist for C# debugging
 6 |             // Use hover for the description of the existing attributes
 7 |             // For further information visit https://github.com/dotnet/vscode-csharp/blob/main/debugger-launchjson.md
 8 |             "name": ".NET Core Launch (web)",
 9 |             "type": "coreclr",
10 |             "request": "launch",
11 |             "preLaunchTask": "build",
12 |             // If you have changed target frameworks, make sure to update the program path.
13 |             "program": "${workspaceFolder}/TinyTodo.Web/bin/Debug/net6.0/TinyTodo.Web.dll",
14 |             "args": [],
15 |             "cwd": "${workspaceFolder}/TinyTodo.Web",
16 |             "stopAtEntry": false,
17 |             // Enable launching a web browser when ASP.NET Core starts. For more information: https://aka.ms/VSCode-CS-LaunchJson-WebBrowser
18 |             "serverReadyAction": {
19 |                 "action": "openExternally",
20 |                 "pattern": "\\bNow listening on:\\s+(https?://\\S+)"
21 |             },
22 |             "env": {
23 |                 "ASPNETCORE_ENVIRONMENT": "Development"
24 |             },
25 |             "sourceFileMap": {
26 |                 "/Views": "${workspaceFolder}/Views"
27 |             }
28 |         },
29 |         {
30 |             "name": ".NET Core Attach",
31 |             "type": "coreclr",
32 |             "request": "attach"
33 |         }
34 |     ]
35 | }


--------------------------------------------------------------------------------
/TinyTodo.Web/AppConfig.cs:
--------------------------------------------------------------------------------
 1 | namespace TinyTodo.Web;
 2 | 
 3 | public class AppConfig : IAppConfig
 4 | {
 5 |     private readonly IConfiguration _configuration;
 6 | 
 7 |     public AppConfig(IConfiguration configuration)
 8 |     {
 9 |         _configuration = configuration;
10 |     }
11 | 
12 |     private IConfigurationSection VerifiedPermissions => _configuration.GetSection("VerifiedPermissions");
13 | 
14 |     public string PolicyStoreId
15 |     {
16 |         get
17 |         {
18 |             return VerifiedPermissions.GetValue<string>(nameof(PolicyStoreId));
19 |         }
20 |     }
21 | 
22 |     public string PolicyStoreSchemaNamespace
23 |     {
24 |         get
25 |         {
26 |             return VerifiedPermissions.GetValue<string>(nameof(PolicyStoreSchemaNamespace));
27 |         }
28 |     }
29 | 
30 |     public string TodoListSharedAccessPolicyTemplateId
31 |     {
32 |         get
33 |         {
34 |             return VerifiedPermissions.GetValue<string>(nameof(TodoListSharedAccessPolicyTemplateId));
35 |         }
36 |     }
37 | 
38 |     public string TodoListSharedAccessWithResharePolicyTemplateId
39 |     {
40 |         get
41 |         {
42 |             return VerifiedPermissions.GetValue<string>(nameof(TodoListSharedAccessWithResharePolicyTemplateId));
43 |         }
44 |     }
45 | 
46 |     public string GetConnectionString(string name)
47 |     {
48 |         return _configuration.GetConnectionString(name);
49 |     }
50 | 
51 |     public string ActionType
52 |     {
53 |         get
54 |         {
55 |             return $"{PolicyStoreSchemaNamespace}::Action";
56 |         }
57 |     }
58 | }
59 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/CustomAuthPolicyProviderDemo.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.30114.105
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "TinyTodo.Web", "TinyTodo.Web\TinyTodo.Web.csproj", "{8B31E152-B11F-4FAB-8603-85726B1230A3}"
 7 | EndProject
 8 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "TinyTodo.CDK", "TinyTodo.CDK\TinyTodo.CDK.csproj", "{AB0F831D-2AC1-460A-B1E5-82C685258D98}"
 9 | EndProject
10 | Global
11 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
12 | 		Debug|Any CPU = Debug|Any CPU
13 | 		Release|Any CPU = Release|Any CPU
14 | 	EndGlobalSection
15 | 	GlobalSection(SolutionProperties) = preSolution
16 | 		HideSolutionNode = FALSE
17 | 	EndGlobalSection
18 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
19 | 		{8B31E152-B11F-4FAB-8603-85726B1230A3}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
20 | 		{8B31E152-B11F-4FAB-8603-85726B1230A3}.Debug|Any CPU.Build.0 = Debug|Any CPU
21 | 		{8B31E152-B11F-4FAB-8603-85726B1230A3}.Release|Any CPU.ActiveCfg = Release|Any CPU
22 | 		{8B31E152-B11F-4FAB-8603-85726B1230A3}.Release|Any CPU.Build.0 = Release|Any CPU
23 | 		{B52F6F44-303C-47B5-A505-D5E1F40BCB37}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
24 | 		{B52F6F44-303C-47B5-A505-D5E1F40BCB37}.Debug|Any CPU.Build.0 = Debug|Any CPU
25 | 		{B52F6F44-303C-47B5-A505-D5E1F40BCB37}.Release|Any CPU.ActiveCfg = Release|Any CPU
26 | 		{B52F6F44-303C-47B5-A505-D5E1F40BCB37}.Release|Any CPU.Build.0 = Release|Any CPU
27 | 		{AB0F831D-2AC1-460A-B1E5-82C685258D98}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
28 | 		{AB0F831D-2AC1-460A-B1E5-82C685258D98}.Debug|Any CPU.Build.0 = Debug|Any CPU
29 | 		{AB0F831D-2AC1-460A-B1E5-82C685258D98}.Release|Any CPU.ActiveCfg = Release|Any CPU
30 | 		{AB0F831D-2AC1-460A-B1E5-82C685258D98}.Release|Any CPU.Build.0 = Release|Any CPU
31 | 	EndGlobalSection
32 | EndGlobal
33 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Program.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.VerifiedPermissions;
 2 | using TinyTodo.Web;
 3 | using TinyTodo.Web.Authorization;
 4 | using TinyTodo.Web.Database;
 5 | using Microsoft.AspNetCore.Authentication.Cookies;
 6 | using Microsoft.AspNetCore.Authorization;
 7 | using Microsoft.EntityFrameworkCore;
 8 | 
 9 | var builder = WebApplication.CreateBuilder(args);
10 | 
11 | // Add services to the container.
12 | builder.Services.AddControllersWithViews();
13 | 
14 | builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
15 |     .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, 
16 |         o => { o.LoginPath = "/Auth/Login"; });
17 | 
18 | var appConfig = new AppConfig(builder.Configuration);
19 | 
20 | builder.Services.AddHttpContextAccessor();
21 | builder.Services.AddSingleton<IAppConfig>(appConfig);
22 | builder.Services.AddTransient<IAmazonVerifiedPermissions, AmazonVerifiedPermissionsClient>();
23 | builder.Services.AddTransient<IVerifiedPermissionsUtil, VerifiedPermissionsUtil>();
24 | builder.Services.AddSingleton<IAuthorizationPolicyProvider, CustomAuthorizationPolicyProvider>();
25 | builder.Services.AddTransient<IAuthorizationHandler, HasPermissionRequirementHandler>();
26 | 
27 | using (var db = new TinyTodoDBContext(appConfig))
28 | {
29 |     db.Database.EnsureCreated();
30 |     db.Database.Migrate();
31 | }
32 | 
33 | var app = builder.Build();
34 | 
35 | app.UseAuthentication();
36 | 
37 | // Configure the HTTP request pipeline.
38 | if (!app.Environment.IsDevelopment())
39 | {
40 |     app.UseExceptionHandler("/Home/Error");
41 |     // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
42 |     app.UseHsts();
43 | }
44 | 
45 | app.UseHttpsRedirection();
46 | app.UseStaticFiles();
47 | 
48 | app.UseRouting();
49 | 
50 | app.UseAuthorization();
51 | 
52 | app.MapControllerRoute(
53 |     name: "default",
54 |     pattern: "{controller=Home}/{action=Index}/{id?}");
55 | 
56 | app.Run();
57 | 
58 | 
59 | 
60 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Authorization/CustomAuthorizationPolicyProvider.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.VerifiedPermissions;
 2 | using Amazon.VerifiedPermissions.Model;
 3 | using Microsoft.AspNetCore.Authorization;
 4 | using Microsoft.Extensions.Options;
 5 | 
 6 | namespace TinyTodo.Web.Authorization;
 7 | 
 8 | public class CustomAuthorizationPolicyProvider : IAuthorizationPolicyProvider
 9 | {
10 |     private readonly DefaultAuthorizationPolicyProvider _defaultPolicyProvider;
11 | 
12 |     public CustomAuthorizationPolicyProvider(IOptions<AuthorizationOptions> options)  
13 |     {  
14 |         _defaultPolicyProvider = new DefaultAuthorizationPolicyProvider(options); 
15 |     }  
16 | 
17 |     public async Task<AuthorizationPolicy> GetDefaultPolicyAsync()
18 |     {
19 |         return await _defaultPolicyProvider.GetDefaultPolicyAsync();
20 |     }
21 | 
22 |     public async Task<AuthorizationPolicy?> GetFallbackPolicyAsync()
23 |     {
24 |         return await _defaultPolicyProvider.GetDefaultPolicyAsync();
25 |     }
26 | 
27 |     public async Task<AuthorizationPolicy?> GetPolicyAsync(string policyName)
28 |     {
29 |         var policyRequirements = await GetPolicyRequirements(policyName);
30 |         var policyBuilder = new AuthorizationPolicyBuilder();   
31 |         policyBuilder.AddRequirements(policyRequirements);
32 |         return policyBuilder.Build();
33 |     }
34 | 
35 |     private async Task<IAuthorizationRequirement[]> GetPolicyRequirements(string policyName)
36 |     {
37 |         if(policyName.StartsWith(Constants.PolicyPrefixes.HasPermissionOnAction))
38 |         {
39 |             var action = policyName.Replace(Constants.PolicyPrefixes.HasPermissionOnAction, "");
40 |             var actionParts = action.Split("_");
41 |             return new [] {new HasPermissionRequirement(action: actionParts[0], 
42 |                                                     resourceType: actionParts[1], 
43 |                                                     resourceIdFormElementName: actionParts[2])};
44 |         }        
45 | 
46 |         throw new NotImplementedException("Unknown policy type");
47 |     }
48 | }
49 | 


--------------------------------------------------------------------------------
/TinyTodo.CDK/cdk.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "app": "dotnet run --project TinyTodo.CDK.csproj",
 3 |     "watch": {
 4 |       "include": [
 5 |         "**"
 6 |       ],
 7 |       "exclude": [
 8 |         "README.md",
 9 |         "cdk*.json",
10 |         "./*/obj",
11 |         "./*/bin",
12 |         "./*.sln",
13 |         "./*/GlobalSuppressions.cs",
14 |         "./*/*.csproj"
15 |       ]
16 |     },
17 |     "context": {
18 |       "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
19 |       "@aws-cdk/core:checkSecretUsage": true,
20 |       "@aws-cdk/core:target-partitions": [
21 |         "aws",
22 |         "aws-cn"
23 |       ],
24 |       "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
25 |       "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
26 |       "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
27 |       "@aws-cdk/aws-iam:minimizePolicies": true,
28 |       "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
29 |       "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
30 |       "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
31 |       "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
32 |       "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
33 |       "@aws-cdk/core:enablePartitionLiterals": true,
34 |       "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
35 |       "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
36 |       "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
37 |       "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
38 |       "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
39 |       "@aws-cdk/aws-route53-patters:useCertificate": true,
40 |       "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
41 |       "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
42 |       "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
43 |       "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
44 |       "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
45 |       "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
46 |       "@aws-cdk/aws-redshift:columnId": true,
47 |       "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
48 |       "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
49 |       "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
50 |       "@aws-cdk/aws-kms:aliasNameRef": true,
51 |       "@aws-cdk/core:includePrefixInUniqueNameGeneration": true
52 |     },
53 |     "outputsFile": "cdk-outputs.json"
54 |   }
55 |   


--------------------------------------------------------------------------------
/TinyTodo.Web/Controllers/AuthController.cs:
--------------------------------------------------------------------------------
 1 | using System.Diagnostics;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | using TinyTodo.Web.Models;
 4 | using System.Security.Claims;
 5 | using Microsoft.AspNetCore.Authentication.Cookies;
 6 | using Microsoft.AspNetCore.Authentication;
 7 | using TinyTodo.Web.Database;
 8 | using TinyTodo.Web.Database.Models;
 9 | using Microsoft.AspNetCore.Authorization;
10 | 
11 | namespace TinyTodo.Web.Controllers;
12 | 
13 | public class AuthController : Controller
14 | {
15 |     private IAppConfig _appConfig;
16 | 
17 |     public AuthController(IAppConfig appConfig)
18 |     {
19 |         _appConfig = appConfig;
20 |     }
21 |     
22 |     [AllowAnonymous]
23 |     [HttpGet]
24 |     [Route("/auth/login")]
25 |     [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
26 |     public IActionResult Login(string returnUrl = null)
27 |     {
28 |         return View(new LoginViewModel
29 |         {
30 |             ReturnUrl = returnUrl
31 |         });
32 |     }
33 | 
34 |     [AllowAnonymous]
35 |     [HttpPost]
36 |     [Route("/auth/login")]
37 |     public async Task<IActionResult> Login(LoginViewModel model)
38 |     {
39 |         if (ModelState.IsValid)
40 |         {
41 |             using(var dbContext = new TinyTodoDBContext(_appConfig))
42 |             {
43 |                 if(!dbContext.Users.Any(u => u.Email == model.Email))
44 |                 {
45 |                     dbContext.Users.Add(new User{Email = model.Email});
46 |                     dbContext.SaveChanges();
47 |                 }
48 |             }
49 | 
50 |             var claims = new List<Claim>
51 |             {
52 |                 new Claim(ClaimTypes.Name, model.Email),
53 |                 new Claim(ClaimTypes.Email, model.Email),
54 |                 new Claim(ClaimTypes.Role,
55 |                     model.Email.ToLower().Equals(Constants.AdminUserEmail)
56 |                     ? Constants.Roles.Administrator
57 |                     : Constants.Roles.User)
58 |             };
59 | 
60 |             var claimsIdentity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
61 |             var authProperties = new AuthenticationProperties{};
62 | 
63 |             await HttpContext.SignInAsync(
64 |                 CookieAuthenticationDefaults.AuthenticationScheme, 
65 |                 new ClaimsPrincipal(claimsIdentity), 
66 |                 authProperties);
67 | 
68 |             return RedirectToAction("Index", "TodoList");
69 |         }
70 | 
71 |         return View(model);
72 |     }
73 | 
74 |     [HttpGet]
75 |     [Route("/auth/logout")]
76 |     [DebuggerStepThrough]
77 |     public async Task<IActionResult> Logout()
78 |     {
79 |         await HttpContext.SignOutAsync();
80 |         return RedirectToAction("Index", "Home");
81 |     }
82 | }


--------------------------------------------------------------------------------
/TinyTodo.CDK/TinyTodoStack.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.CDK;
 2 | using Amazon.CDK.AwsVerifiedpermissions;
 3 | using Constructs;
 4 | using TinyTodo.CDK.PolicyStore;
 5 | using TinyTodo.CDK.PolicyStore.PolicyTemplates;
 6 | using TinyTodo.CDK.PolicyStore.StaticPolicies;
 7 | using static Amazon.CDK.AwsVerifiedpermissions.CfnPolicyStore;
 8 | 
 9 | namespace TinyTodo.CDK;
10 | 
11 | public class TinyTodoCdkStack : Stack
12 | {
13 |     public TinyTodoCdkStack(Construct? scope = null, string? id = null, IStackProps? props = null) 
14 |             : base(scope, id, props)
15 |     {
16 |         var tinyTodoPolicyStore = new CfnPolicyStore(this, PolicyStoreDetails.Name, 
17 |             new CfnPolicyStoreProps 
18 |             {
19 |                 ValidationSettings = new ValidationSettingsProperty 
20 |                 {
21 |                     Mode = "STRICT"                
22 |                 },
23 |                 Schema = new SchemaDefinitionProperty 
24 |                 {
25 |                     CedarJson = PolicyStoreDetails.SchemaJson
26 |                 }
27 |             });
28 | 
29 |         var policyStoreId = tinyTodoPolicyStore.AttrPolicyStoreId;
30 | 
31 |         var allowActionsOnApplicationPolicy 
32 |                 = new CfnPolicy(this, nameof(AllowActionsOnApplicationPolicy), 
33 |                         new AllowActionsOnApplicationPolicy(policyStoreId));
34 | 
35 |         var allowActionsOnUserTodoLists 
36 |                 = new CfnPolicy(this, nameof(AllowActionsOnUserTodoListsPolicy), 
37 |                         new AllowActionsOnUserTodoListsPolicy(policyStoreId));
38 | 
39 |         var adminModuleAccessPolicy 
40 |                 = new CfnPolicy(this, nameof(AdminModuleAccessPolicy), 
41 |                         new AdminModuleAccessPolicy(policyStoreId));
42 | 
43 |         var sharedAccessPolicyTemplate 
44 |                 = new CfnPolicyTemplate(this, nameof(TodoListSharedAccessPolicyTemplate), 
45 |                         new TodoListSharedAccessPolicyTemplate(policyStoreId));
46 | 
47 |         var sharedAccessWithResharePolicyTemplate 
48 |                 = new CfnPolicyTemplate(this, nameof(TodoListSharedAccessWithResharePolicyTemplate), 
49 |                         new TodoListSharedAccessWithResharePolicyTemplate(policyStoreId));
50 | 
51 |         new CfnOutput(this, "PolicyStoreId", new CfnOutputProps {Value = policyStoreId});
52 |         new CfnOutput(this, "PolicyStoreSchemaNamespace", new CfnOutputProps {Value = "TinyTodoList"});
53 |         new CfnOutput(this, "TodoListSharedAccessPolicyTemplateId", 
54 |                 new CfnOutputProps {Value = sharedAccessPolicyTemplate.AttrPolicyTemplateId});
55 |         new CfnOutput(this, "TodoListSharedAccessWithResharePolicyTemplateId", 
56 |                 new CfnOutputProps {Value = sharedAccessWithResharePolicyTemplate.AttrPolicyTemplateId});
57 |     }
58 | }
59 | 


--------------------------------------------------------------------------------
/THIRD-PARTY-LICENSES_4532ff69-61e7-4e2b-ad49-353b5ad8cca5.txt:
--------------------------------------------------------------------------------
 1 | ** jQuery Unobtrusive Validation; version 3.2.11 -- https://github.com/aspnet/jquery-validation-unobtrusive
 2 |  
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | * For jQuery Unobtrusive Validation see also this required NOTICE:
14 |     Copyright (c) .NET Foundation. All rights reserved.
15 | 
16 | ------
17 | 
18 | ** bootstrap ; version 5.1.10 -- https://github.com/twbs/bootstrap
19 | Code and documentation copyright 2011–2021 the Bootstrap Authors and Twitter,
20 | Inc. Code released under the MIT License. Docs released under Creative Commons.
21 |  
22 | The MIT License (MIT)
23 | 
24 | Copyright (c) 2011-2021 Twitter, Inc.
25 | Copyright (c) 2011-2021 The Bootstrap Authors
26 | 
27 | Permission is hereby granted, free of charge, to any person obtaining a copy
28 | of this software and associated documentation files (the "Software"), to deal
29 | in the Software without restriction, including without limitation the rights
30 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
31 | copies of the Software, and to permit persons to whom the Software is
32 | furnished to do so, subject to the following conditions:
33 | 
34 | The above copyright notice and this permission notice shall be included in
35 | all copies or substantial portions of the Software.
36 | 
37 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
38 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
39 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
40 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
41 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
42 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
43 | THE SOFTWARE.
44 | 
45 | ------
46 | 
47 | ** JQuery 3.3; version 3.5.1 -- https://github.com/jquery/jquery
48 | Copyright OpenJS Foundation and other contributors, https://openjsf.org/
49 | ** jquery - validation; version 1.17.0 -- https://github.com/jquery-validation/jquery-validation
50 | Copyright Jörn Zaefferer
51 |  
52 | Permission is hereby granted, free of charge, to any person obtaining
53 | a copy of this software and associated documentation files (the
54 | "Software"), to deal in the Software without restriction, including
55 | without limitation the rights to use, copy, modify, merge, publish,
56 | distribute, sublicense, and/or sell copies of the Software, and to
57 | permit persons to whom the Software is furnished to do so, subject to
58 | the following conditions:
59 | 
60 | The above copyright notice and this permission notice shall be
61 | included in all copies or substantial portions of the Software.
62 | 
63 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
64 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
65 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
66 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
67 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
68 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
69 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
70 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Authorization/HasPermissionRequirementHandler.cs:
--------------------------------------------------------------------------------
 1 | using Amazon.VerifiedPermissions;
 2 | using Amazon.VerifiedPermissions.Model;
 3 | using TinyTodo.Web.Database.Models;
 4 | using Microsoft.AspNetCore.Authorization;
 5 | using Microsoft.Extensions.Primitives;
 6 | using TinyTodo.Web.Database;
 7 | using System.ComponentModel;
 8 | 
 9 | 
10 | namespace TinyTodo.Web.Authorization;
11 | 
12 | public class HasPermissionRequirementHandler : AuthorizationHandler<HasPermissionRequirement>
13 | {
14 |     private readonly IAmazonVerifiedPermissions _verifiedPermissionsClient;
15 |     private readonly IAppConfig _appConfig;
16 |     private readonly IVerifiedPermissionsUtil _verifiedPermissionsUtil;
17 |     private readonly IHttpContextAccessor _httpContextAccessor;
18 | 
19 |     public HasPermissionRequirementHandler(IAmazonVerifiedPermissions verifiedPermissionsClient, 
20 |                     IAppConfig appConfig,
21 |                     IVerifiedPermissionsUtil verifiedPermissionsUtil,
22 |                     IHttpContextAccessor httpContextAccessor)
23 |     {
24 |         _verifiedPermissionsClient = verifiedPermissionsClient;
25 |         _appConfig = appConfig;
26 |         _verifiedPermissionsUtil = verifiedPermissionsUtil;
27 |         _httpContextAccessor = httpContextAccessor;
28 |     }
29 | 
30 |     protected override async Task HandleRequirementAsync(AuthorizationHandlerContext context, HasPermissionRequirement requirement)
31 |     {
32 |         if (string.IsNullOrWhiteSpace(context.User.Identity?.Name))
33 |         {
34 |             context.Fail();
35 |             return;
36 |         }
37 | 
38 |         IEntity? resource = null;
39 |         if(!string.IsNullOrWhiteSpace(requirement.ResourceType) && 
40 |                 !string.IsNullOrWhiteSpace(requirement.ResourceIdFormElementName))
41 |         {
42 |             var resourceId = GetResourceIdFromForm(requirement.ResourceIdFormElementName);
43 |             resource = GetResource(requirement.ResourceType, resourceId);
44 |         }        
45 | 
46 |         var isAuthorizedResponse = await _verifiedPermissionsUtil.IsAuthorizedAsync(context.User, requirement.Action, resource);
47 | 
48 |         if (isAuthorizedResponse.Decision == Decision.ALLOW)
49 |         {
50 |             context.Succeed(requirement);
51 |         }
52 |         else
53 |         {
54 |             context.Fail();
55 |         }
56 |     }
57 | 
58 |     private IEntity? GetResource(string resourceType, string resourceId)
59 |     {
60 |         var allowedResourceTypes = new List<string> { nameof(TodoList) };
61 | 
62 |         if (!allowedResourceTypes.Contains(resourceType))
63 |         {
64 |             throw new InvalidEnumArgumentException("Unknown resource type");
65 |         }
66 | 
67 |         IEntity? resource = null;
68 |         if (resourceType == nameof(TodoList))
69 |         {
70 |             using (var db = new TinyTodoDBContext(_appConfig))
71 |             {
72 |                 resource = db.TodoLists.FirstOrDefault(x => x.Id == Guid.Parse(resourceId));
73 |             }
74 |         }
75 |         return resource;
76 |     }
77 | 
78 |     private string? GetResourceIdFromForm(string formElementName)
79 |     {
80 |         if(!string.IsNullOrWhiteSpace(formElementName))
81 |         {
82 |             var request = _httpContextAccessor.HttpContext?.Request;
83 |             StringValues formValues = new();
84 |             var formElementNameKey = request?.Form.Keys.FirstOrDefault(k => k.ToLower() == formElementName.ToLower());
85 |             request?.Form.TryGetValue(formElementNameKey, out formValues);
86 |             var resourceId = formValues.FirstOrDefault();
87 |             if (!string.IsNullOrWhiteSpace(resourceId))
88 |             {
89 |                 return resourceId;
90 |             }
91 |         }        
92 |         throw new InvalidEnumArgumentException("Invalid form element name");
93 |     }
94 | }
95 | 


--------------------------------------------------------------------------------
/CONTRIBUTING.md:
--------------------------------------------------------------------------------
 1 | # Contributing Guidelines
 2 | 
 3 | Thank you for your interest in contributing to our project. Whether it's a bug report, new feature, correction, or additional 
 4 | documentation, we greatly value feedback and contributions from our community.
 5 | 
 6 | Please read through this document before submitting any issues or pull requests to ensure we have all the necessary 
 7 | information to effectively respond to your bug report or contribution.
 8 | 
 9 | 
10 | ## Reporting Bugs/Feature Requests
11 | 
12 | We welcome you to use the GitHub issue tracker to report bugs or suggest features.
13 | 
14 | When filing an issue, please check [existing open](https://github.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/issues), or [recently closed](https://github.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aclosed%20), issues to make sure somebody else hasn't already 
15 | reported the issue. Please try to include as much information as you can. Details like these are incredibly useful:
16 | 
17 | * A reproducible test case or series of steps
18 | * The version of our code being used
19 | * Any modifications you've made relevant to the bug
20 | * Anything unusual about your environment or deployment
21 | 
22 | 
23 | ## Contributing via Pull Requests
24 | Contributions via pull requests are much appreciated. Before sending us a pull request, please ensure that:
25 | 
26 | 1. You are working against the latest source on the *master* branch.
27 | 2. You check existing open, and recently merged, pull requests to make sure someone else hasn't addressed the problem already.
28 | 3. You open an issue to discuss any significant work - we would hate for your time to be wasted.
29 | 
30 | To send us a pull request, please:
31 | 
32 | 1. Fork the repository.
33 | 2. Modify the source; please focus on the specific change you are contributing. If you also reformat all the code, it will be hard for us to focus on your change.
34 | 3. Ensure local tests pass.
35 | 4. Commit to your fork using clear commit messages.
36 | 5. Send us a pull request, answering any default questions in the pull request interface.
37 | 6. Pay attention to any automated CI failures reported in the pull request, and stay involved in the conversation.
38 | 
39 | GitHub provides additional document on [forking a repository](https://help.github.com/articles/fork-a-repo/) and 
40 | [creating a pull request](https://help.github.com/articles/creating-a-pull-request/).
41 | 
42 | 
43 | ## Finding contributions to work on
44 | Looking at the existing issues is a great way to find something to contribute on. As our projects, by default, use the default GitHub issue labels ((enhancement/bug/duplicate/help wanted/invalid/question/wontfix), looking at any ['help wanted'](https://github.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/labels/help%20wanted) issues is a great place to start. 
45 | 
46 | 
47 | ## Code of Conduct
48 | This project has adopted the [Amazon Open Source Code of Conduct](https://aws.github.io/code-of-conduct). 
49 | For more information see the [Code of Conduct FAQ](https://aws.github.io/code-of-conduct-faq) or contact 
50 | opensource-codeofconduct@amazon.com with any additional questions or comments.
51 | 
52 | 
53 | ## Security issue notifications
54 | If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue.
55 | 
56 | 
57 | ## Licensing
58 | 
59 | See the [LICENSE](https://github.com/aws-samples/amazon-verified-permissions-asp-dotnet-core-custom-auth-policy-provider/blob/master/LICENSE) file for our project's licensing. We will ask you to confirm the licensing of your contribution.
60 | 
61 | We may ask you to sign a [Contributor License Agreement (CLA)](http://en.wikipedia.org/wiki/Contributor_License_Agreement) for larger changes.
62 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/Shared/_Layout.cshtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="utf-8" />
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 6 |     <title>TinyTodo - @ViewData["Title"]</title>
 7 |     <link rel="stylesheet" href="~/lib/bootstrap/dist/css/bootstrap.min.css" />
 8 |     <link rel="stylesheet" href="~/css/site.css" asp-append-version="true" />
 9 |     <link rel="stylesheet" href="~/TinyTodo.Web.styles.css" asp-append-version="true" />
10 | </head>
11 | <body>
12 |     <header>
13 |         <nav class="navbar navbar-expand-sm navbar-toggleable-sm navbar-light bg-white border-bottom box-shadow mb-3">
14 |             <div class="container-fluid">
15 |                 <a class="navbar-brand" asp-area="" asp-controller="Home" asp-action="Index">TinyTodo</a>
16 |                 <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target=".navbar-collapse" aria-controls="navbarSupportedContent"
17 |                         aria-expanded="false" aria-label="Toggle navigation">
18 |                     <span class="navbar-toggler-icon"></span>
19 |                 </button>
20 |                 <div class="navbar-collapse collapse d-sm-inline-flex justify-content-between">
21 |                     <ul class="navbar-nav flex-grow-1">
22 |                         <li class="nav-item">
23 |                             <a class="nav-link text-dark" asp-area="" asp-controller="Home" asp-action="Index">Home</a>
24 |                         </li>
25 |                         @if(User.Identity != null && User.Identity.IsAuthenticated)
26 |                         {
27 |                             <li class="nav-item">
28 |                                 <a class="nav-link text-dark" asp-area="" asp-controller="TodoList" asp-action="Index">My Todo Lists</a>
29 |                             </li>
30 |                             <li class="nav-item">
31 |                                 <a class="nav-link text-dark" asp-area="" asp-controller="Account" asp-action="Details">My Account</a>
32 |                             </li>
33 |                             <li class="nav-item">
34 |                                 <a class="nav-link text-dark" asp-area="" asp-controller="Admin" asp-action="UserAdmin">Admin</a>
35 |                             </li>
36 |                         }
37 |                         @if(!User.Identity.IsAuthenticated)
38 |                         {
39 |                             <li class="nav-item">
40 |                                 <a class="nav-link" href="/auth/login" style="text-decoration: underline;color: blue!important;">Signin</a>    
41 |                             </li>
42 |                         }
43 |                         else
44 |                         {
45 |                             <li class="nav-item">
46 |                                 <span class="nav-link" style="color: red!important;" >@User.Identity.Name &nbsp;</span>
47 |                             </li>
48 |                             <li class="nav-item"><a class="nav-link" href="/auth/logout" style="text-decoration: underline;color: blue!important;">Signout</a></li>    
49 |                         }                       
50 |                     </ul>
51 |                 </div>
52 |             </div>
53 |         </nav>
54 |     </header>
55 |     <div class="container">
56 |         <main role="main" class="pb-3">
57 |             @RenderBody()
58 |         </main>
59 |     </div>
60 | 
61 |     <footer class="border-top footer text-muted">
62 |         <div class="container">
63 |             &copy; 2023 - TinyTodo - <a asp-area="" asp-controller="Home" asp-action="Privacy">Privacy</a>
64 |         </div>
65 |     </footer>
66 |     <script src="~/lib/jquery/dist/jquery.min.js"></script>
67 |     <script src="~/lib/bootstrap/dist/js/bootstrap.bundle.min.js"></script>
68 |     <script src="~/js/site.js" asp-append-version="true"></script>
69 |     <script>
70 |         if('@ViewData["Message"]')
71 |         {
72 |             setTimeout('alert("' + @ViewData["Message"] +'")', 100);
73 |         }
74 |     </script>
75 |     @await RenderSectionAsync("Scripts", required: false)
76 | </body>
77 | </html>
78 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v5.1.0 (https://getbootstrap.com/)
3 |  * Copyright 2011-2021 The Bootstrap Authors
4 |  * Copyright 2011-2021 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font-weight);line-height:var(--bs-body-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}hr{margin:1rem 0;color:inherit;background-color:currentColor;border:0;opacity:.25}hr:not([size]){height:1px}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2}h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width:1200px){h1{font-size:2.5rem}}h2{font-size:calc(1.325rem + .9vw)}@media (min-width:1200px){h2{font-size:2rem}}h3{font-size:calc(1.3rem + .6vw)}@media (min-width:1200px){h3{font-size:1.75rem}}h4{font-size:calc(1.275rem + .3vw)}@media (min-width:1200px){h4{font-size:1.5rem}}h5{font-size:1.25rem}h6{font-size:1rem}p{margin-top:0;margin-bottom:1rem}abbr[data-bs-original-title],abbr[title]{-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}ol,ul{padding-left:2rem}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:.875em}mark{padding:.2em;background-color:#fcf8e3}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#0d6efd;text-decoration:underline}a:hover{color:#0a58ca}a:not([href]):not([class]),a:not([href]):not([class]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em;direction:ltr;unicode-bidi:bidi-override}pre{display:block;margin-top:0;margin-bottom:1rem;overflow:auto;font-size:.875em}pre code{font-size:inherit;color:inherit;word-break:normal}code{font-size:.875em;color:#d63384;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:.875em;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:1em;font-weight:700}figure{margin:0 0 1rem}img,svg{vertical-align:middle}table{caption-side:bottom;border-collapse:collapse}caption{padding-top:.5rem;padding-bottom:.5rem;color:#6c757d;text-align:left}th{text-align:inherit;text-align:-webkit-match-parent}tbody,td,tfoot,th,thead,tr{border-color:inherit;border-style:solid;border-width:0}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}select:disabled{opacity:1}[list]::-webkit-calendar-picker-indicator{display:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}textarea{resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{float:left;width:100%;padding:0;margin-bottom:.5rem;font-size:calc(1.275rem + .3vw);line-height:inherit}@media (min-width:1200px){legend{font-size:1.5rem}}legend+*{clear:left}::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-fields-wrapper,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-minute,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-text,::-webkit-datetime-edit-year-field{padding:0}::-webkit-inner-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:textfield}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-color-swatch-wrapper{padding:0}::file-selector-button{font:inherit}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}iframe{border:0}summary{display:list-item;cursor:pointer}progress{vertical-align:baseline}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v5.1.0 (https://getbootstrap.com/)
3 |  * Copyright 2011-2021 The Bootstrap Authors
4 |  * Copyright 2011-2021 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font-weight);line-height:var(--bs-body-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}hr{margin:1rem 0;color:inherit;background-color:currentColor;border:0;opacity:.25}hr:not([size]){height:1px}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2}h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width:1200px){h1{font-size:2.5rem}}h2{font-size:calc(1.325rem + .9vw)}@media (min-width:1200px){h2{font-size:2rem}}h3{font-size:calc(1.3rem + .6vw)}@media (min-width:1200px){h3{font-size:1.75rem}}h4{font-size:calc(1.275rem + .3vw)}@media (min-width:1200px){h4{font-size:1.5rem}}h5{font-size:1.25rem}h6{font-size:1rem}p{margin-top:0;margin-bottom:1rem}abbr[data-bs-original-title],abbr[title]{-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}ol,ul{padding-right:2rem}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-right:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:.875em}mark{padding:.2em;background-color:#fcf8e3}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#0d6efd;text-decoration:underline}a:hover{color:#0a58ca}a:not([href]):not([class]),a:not([href]):not([class]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em;direction:ltr;unicode-bidi:bidi-override}pre{display:block;margin-top:0;margin-bottom:1rem;overflow:auto;font-size:.875em}pre code{font-size:inherit;color:inherit;word-break:normal}code{font-size:.875em;color:#d63384;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:.875em;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:1em;font-weight:700}figure{margin:0 0 1rem}img,svg{vertical-align:middle}table{caption-side:bottom;border-collapse:collapse}caption{padding-top:.5rem;padding-bottom:.5rem;color:#6c757d;text-align:right}th{text-align:inherit;text-align:-webkit-match-parent}tbody,td,tfoot,th,thead,tr{border-color:inherit;border-style:solid;border-width:0}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}select:disabled{opacity:1}[list]::-webkit-calendar-picker-indicator{display:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}textarea{resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{float:right;width:100%;padding:0;margin-bottom:.5rem;font-size:calc(1.275rem + .3vw);line-height:inherit}@media (min-width:1200px){legend{font-size:1.5rem}}legend+*{clear:right}::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-fields-wrapper,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-minute,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-text,::-webkit-datetime-edit-year-field{padding:0}::-webkit-inner-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:textfield}[type=email],[type=number],[type=tel],[type=url]{direction:ltr}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-color-swatch-wrapper{padding:0}::file-selector-button{font:inherit}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}iframe{border:0}summary{display:list-item;cursor:pointer}progress{vertical-align:baseline}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.rtl.min.css.map */


--------------------------------------------------------------------------------
/TinyTodo.CDK/PolicyStore/TinyTodoList.cedarschema.json:
--------------------------------------------------------------------------------
  1 | {
  2 |     "TinyTodoList": {
  3 |         "actions": {
  4 |             "UserAdmin": {
  5 |                 "appliesTo": {
  6 |                     "context": {
  7 |                         "type": "Record",
  8 |                         "attributes": {}
  9 |                     },
 10 |                     "principalTypes": [
 11 |                         "User"
 12 |                     ],
 13 |                     "resourceTypes": [
 14 |                         "Application"
 15 |                     ]
 16 |                 }
 17 |             },
 18 |             "GetTodoLists": {
 19 |                 "appliesTo": {
 20 |                     "context": {
 21 |                         "type": "Record",
 22 |                         "attributes": {}
 23 |                     },
 24 |                     "principalTypes": [
 25 |                         "User"
 26 |                     ],
 27 |                     "resourceTypes": [
 28 |                         "Application"
 29 |                     ]
 30 |                 }
 31 |             },
 32 |             "CreateTodoList": {
 33 |                 "appliesTo": {
 34 |                     "principalTypes": [
 35 |                         "User"
 36 |                     ],
 37 |                     "resourceTypes": [
 38 |                         "Application"
 39 |                     ]
 40 |                 }
 41 |             },
 42 |             "ShareTodoList": {
 43 |                 "appliesTo": {
 44 |                     "resourceTypes": [
 45 |                         "TodoList"
 46 |                     ],
 47 |                     "principalTypes": [
 48 |                         "User"
 49 |                     ]
 50 |                 }
 51 |             },
 52 |             "AddTodoItem": {
 53 |                 "appliesTo": {
 54 |                     "context": {
 55 |                         "type": "Record",
 56 |                         "attributes": {}
 57 |                     },
 58 |                     "principalTypes": [
 59 |                         "User"
 60 |                     ],
 61 |                     "resourceTypes": [
 62 |                         "TodoList"
 63 |                     ]
 64 |                 }
 65 |             },
 66 |             "MakeTodoListPrivate": {
 67 |                 "appliesTo": {
 68 |                     "context": {
 69 |                         "type": "Record",
 70 |                         "attributes": {}
 71 |                     },
 72 |                     "principalTypes": [
 73 |                         "User"
 74 |                     ],
 75 |                     "resourceTypes": [
 76 |                         "TodoList"
 77 |                     ]
 78 |                 }
 79 |             },
 80 |             "DeleteTodoList": {
 81 |                 "appliesTo": {
 82 |                     "principalTypes": [
 83 |                         "User"
 84 |                     ],
 85 |                     "resourceTypes": [
 86 |                         "TodoList"
 87 |                     ]
 88 |                 }
 89 |             }
 90 |         },
 91 |         "entityTypes": {
 92 |             "Application": {
 93 |                 "memberOfTypes": [],
 94 |                 "shape": {
 95 |                     "attributes": {
 96 |                         "Id": {
 97 |                             "required": true,
 98 |                             "type": "String"
 99 |                         }
100 |                     },
101 |                     "type": "Record"
102 |                 }
103 |             },
104 |             "User": {
105 |                 "memberOfTypes": [],
106 |                 "shape": {
107 |                     "attributes": {
108 |                         "Role": {
109 |                             "type": "String",
110 |                             "required": true
111 |                         },
112 |                         "Email": {
113 |                             "required": true,
114 |                             "type": "String"
115 |                         },
116 |                         "Id": {
117 |                             "required": true,
118 |                             "type": "String"
119 |                         }
120 |                     },
121 |                     "type": "Record"
122 |                 }
123 |             },
124 |             "TodoList": {
125 |                 "shape": {
126 |                     "attributes": {
127 |                         "Id": {
128 |                             "required": true,
129 |                             "type": "String"
130 |                         },
131 |                         "Owner": {
132 |                             "required": true,
133 |                             "type": "String"
134 |                         },
135 |                         "Title": {
136 |                             "required": true,
137 |                             "type": "String"
138 |                         }
139 |                     },
140 |                     "type": "Record"
141 |                 }
142 |             }
143 |         }
144 |     }
145 | }


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js:
--------------------------------------------------------------------------------
1 | // Unobtrusive validation support library for jQuery and jQuery Validate
2 | // Copyright (c) .NET Foundation. All rights reserved.
3 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
4 | // @version v3.2.11
5 | !function(a){"function"==typeof define&&define.amd?define("jquery.validate.unobtrusive",["jquery-validation"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery-validation")):jQuery.validator.unobtrusive=a(jQuery)}(function(a){function e(a,e,n){a.rules[e]=n,a.message&&(a.messages[e]=a.message)}function n(a){return a.replace(/^\s+|\s+$/g,"").split(/\s*,\s*/g)}function t(a){return a.replace(/([!"#$%&'()*+,.\/:;<=>?@\[\\\]^`{|}~])/g,"\\$1")}function r(a){return a.substr(0,a.lastIndexOf(".")+1)}function i(a,e){return 0===a.indexOf("*.")&&(a=a.replace("*.",e)),a}function o(e,n){var r=a(this).find("[data-valmsg-for='"+t(n[0].name)+"']"),i=r.attr("data-valmsg-replace"),o=i?a.parseJSON(i)!==!1:null;r.removeClass("field-validation-valid").addClass("field-validation-error"),e.data("unobtrusiveContainer",r),o?(r.empty(),e.removeClass("input-validation-error").appendTo(r)):e.hide()}function d(e,n){var t=a(this).find("[data-valmsg-summary=true]"),r=t.find("ul");r&&r.length&&n.errorList.length&&(r.empty(),t.addClass("validation-summary-errors").removeClass("validation-summary-valid"),a.each(n.errorList,function(){a("<li />").html(this.message).appendTo(r)}))}function s(e){var n=e.data("unobtrusiveContainer");if(n){var t=n.attr("data-valmsg-replace"),r=t?a.parseJSON(t):null;n.addClass("field-validation-valid").removeClass("field-validation-error"),e.removeData("unobtrusiveContainer"),r&&n.empty()}}function l(e){var n=a(this),t="__jquery_unobtrusive_validation_form_reset";if(!n.data(t)){n.data(t,!0);try{n.data("validator").resetForm()}finally{n.removeData(t)}n.find(".validation-summary-errors").addClass("validation-summary-valid").removeClass("validation-summary-errors"),n.find(".field-validation-error").addClass("field-validation-valid").removeClass("field-validation-error").removeData("unobtrusiveContainer").find(">*").removeData("unobtrusiveContainer")}}function u(e){var n=a(e),t=n.data(v),r=a.proxy(l,e),i=f.unobtrusive.options||{},u=function(n,t){var r=i[n];r&&a.isFunction(r)&&r.apply(e,t)};return t||(t={options:{errorClass:i.errorClass||"input-validation-error",errorElement:i.errorElement||"span",errorPlacement:function(){o.apply(e,arguments),u("errorPlacement",arguments)},invalidHandler:function(){d.apply(e,arguments),u("invalidHandler",arguments)},messages:{},rules:{},success:function(){s.apply(e,arguments),u("success",arguments)}},attachValidation:function(){n.off("reset."+v,r).on("reset."+v,r).validate(this.options)},validate:function(){return n.validate(),n.valid()}},n.data(v,t)),t}var m,f=a.validator,v="unobtrusiveValidation";return f.unobtrusive={adapters:[],parseElement:function(e,n){var t,r,i,o=a(e),d=o.parents("form")[0];d&&(t=u(d),t.options.rules[e.name]=r={},t.options.messages[e.name]=i={},a.each(this.adapters,function(){var n="data-val-"+this.name,t=o.attr(n),s={};void 0!==t&&(n+="-",a.each(this.params,function(){s[this]=o.attr(n+this)}),this.adapt({element:e,form:d,message:t,params:s,rules:r,messages:i}))}),a.extend(r,{__dummy__:!0}),n||t.attachValidation())},parse:function(e){var n=a(e),t=n.parents().addBack().filter("form").add(n.find("form")).has("[data-val=true]");n.find("[data-val=true]").each(function(){f.unobtrusive.parseElement(this,!0)}),t.each(function(){var a=u(this);a&&a.attachValidation()})}},m=f.unobtrusive.adapters,m.add=function(a,e,n){return n||(n=e,e=[]),this.push({name:a,params:e,adapt:n}),this},m.addBool=function(a,n){return this.add(a,function(t){e(t,n||a,!0)})},m.addMinMax=function(a,n,t,r,i,o){return this.add(a,[i||"min",o||"max"],function(a){var i=a.params.min,o=a.params.max;i&&o?e(a,r,[i,o]):i?e(a,n,i):o&&e(a,t,o)})},m.addSingleVal=function(a,n,t){return this.add(a,[n||"val"],function(r){e(r,t||a,r.params[n])})},f.addMethod("__dummy__",function(a,e,n){return!0}),f.addMethod("regex",function(a,e,n){var t;return!!this.optional(e)||(t=new RegExp(n).exec(a),t&&0===t.index&&t[0].length===a.length)}),f.addMethod("nonalphamin",function(a,e,n){var t;return n&&(t=a.match(/\W/g),t=t&&t.length>=n),t}),f.methods.extension?(m.addSingleVal("accept","mimtype"),m.addSingleVal("extension","extension")):m.addSingleVal("extension","extension","accept"),m.addSingleVal("regex","pattern"),m.addBool("creditcard").addBool("date").addBool("digits").addBool("email").addBool("number").addBool("url"),m.addMinMax("length","minlength","maxlength","rangelength").addMinMax("range","min","max","range"),m.addMinMax("minlength","minlength").addMinMax("maxlength","minlength","maxlength"),m.add("equalto",["other"],function(n){var o=r(n.element.name),d=n.params.other,s=i(d,o),l=a(n.form).find(":input").filter("[name='"+t(s)+"']")[0];e(n,"equalTo",l)}),m.add("required",function(a){"INPUT"===a.element.tagName.toUpperCase()&&"CHECKBOX"===a.element.type.toUpperCase()||e(a,"required",!0)}),m.add("remote",["url","type","additionalfields"],function(o){var d={url:o.params.url,type:o.params.type||"GET",data:{}},s=r(o.element.name);a.each(n(o.params.additionalfields||o.element.name),function(e,n){var r=i(n,s);d.data[r]=function(){var e=a(o.form).find(":input").filter("[name='"+t(r)+"']");return e.is(":checkbox")?e.filter(":checked").val()||e.filter(":hidden").val()||"":e.is(":radio")?e.filter(":checked").val()||"":e.val()}}),e(o,"remote",d)}),m.add("password",["min","nonalphamin","regex"],function(a){a.params.min&&e(a,"minlength",a.params.min),a.params.nonalphamin&&e(a,"nonalphamin",a.params.nonalphamin),a.params.regex&&e(a,"regex",a.params.regex)}),m.add("fileextensions",["extensions"],function(a){e(a,"extension",a.params.extensions)}),a(function(){f.unobtrusive.parse(document)}),f.unobtrusive});
6 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | ## Implement custom authorization policy provider for ASP.NET Core apps using Amazon Verified Permissions
  2 | 
  3 | This is a sample asp.net core application with a custom authorization policy provider which makes use of Amazon Verified Permissions API to evaluate authorization requirements and obtain authorization result. 
  4 | 
  5 | Blog reference: [Implement custom authorization policy provider for ASP.NET Core apps using Amazon Verified Permissions](https://aws.amazon.com/blogs/dotnet/implement-a-custom-authorization-policy-provider-for-asp-net-core-apps-using-amazon-verified-permissions)
  6 | 
  7 | ### The Architecture
  8 | 
  9 | - The sample asp.net core application uses a SQLite database to store entities and uses Amazon Verified Permissions as the centralized authorization service and authorization policy repository.
 10 | 
 11 | - When a user shares a to-do list with another user, the application creates a template-linked policy based on the shared access policy templates ([TodoListSharedAccessPolicyTemplate](/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessPolicyTemplate.cs) / [TodoListSharedAccessWithResharePolicyTemplate](/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessWithResharePolicyTemplate.cs))
 12 | 
 13 | ![Architecture](/Media/Architecture.JPG)
 14 | 
 15 | 
 16 | ## Prerequisites
 17 | 
 18 | To test the sample application, you need:
 19 | - An [AWS](https://console.aws.amazon.com/) account
 20 | - Access to the following AWS services: Amazon Verified Permissions.
 21 | - Policy Store created on Amazon Verified Permissions
 22 | - [Node.js](https://nodejs.org/en/download/) installed
 23 | - [AWS CDK](https://docs.aws.amazon.com/cdk/v2/guide/getting_started.html#getting_started_install) installed
 24 | - .NET 6.0 SDK installed
 25 | - JetBrains Rider or Microsoft Visual Studio 2017 or later (or Visual Studio Code)
 26 | 
 27 | ## Deployment
 28 | 
 29 | To deploy the policy store on AWS:
 30 | 
 31 | - Build [TinyTodo.CDK](/TinyTodo.CDK/) project 
 32 | ```cmd
 33 | C:\Dev\customauthpolicyproviderdemo\TinyTodo.CDK>dotnet build
 34 | ```
 35 | - Deploy the CDK project
 36 | ```cmd 
 37 | C:\Dev\customauthpolicyproviderdemo\TinyTodo.CDK>cdk deploy
 38 | ```
 39 | 
 40 | - Copy the policy store and policy template ids from the CDK output
 41 | 
 42 | ![CDK-Output](/Media/CDK-Output.png)
 43 | 
 44 | - Update the [appsettings.json](/TinyTodo.Web/appsettings.json) file in [TinyTodo.Web](/TinyTodo.Web/) project
 45 | 
 46 | ![AppSettings](/Media/AppSettings.PNG)
 47 | 
 48 | ## Testing
 49 | 
 50 | 
 51 | Run [TinyTodo.Web](/TinyTodo.Web/) project
 52 | 
 53 | 
 54 | ### Resource based authorization
 55 | 
 56 | #### Create and share a sample todo list
 57 | * Login as user1@example.com (with any password), go to 'My Todo Lists' page.
 58 | * Create a to-do list
 59 | * Share it with user2@example.com (Leave 'Allow Reshare' option unchecked)
 60 | * Log out
 61 | 
 62 | #### Check the template-linked policy created
 63 | * Login to Amazon Verified Permissions Console
 64 | * Select the application's policy store
 65 | * You can see that a new template-linked policy is created (linked to the policy template [TodoListSharedAccessPolicyTemplate](/TinyTodo.CDK/PolicyStore/PolicyTemplates/TodoListSharedAccessPolicyTemplate.cs))
 66 | 
 67 | #### Verify the user permissions on the shared to-do list
 68 | * Login as user2@example.com (with any password), go to 'My Todo Lists' page.
 69 | * You can see the to-do list shared by user1@example.com
 70 | * Try resharing the to-do list with another user (user3@example.com), you should see an error message as the above mentioned template-linked policy grants permissions only to add items to the todo list.
 71 | 
 72 | ### Attribute-based authorization
 73 | 
 74 | * Login as user2@example.com (with any password), go to 'My Todo Lists' page.
 75 | * You can see the to-do list shared by user1@example.com
 76 | * Try deleting the to-do list or sharing with anothe user (user3@example.com), you should see an error message (as limited by the policy [AllowActionsOnUserTodoListsPolicy](/TinyTodo.CDK/PolicyStore/StaticPolicies/AllowActionsOnUserTodoListsPolicy.cs))
 77 | 
 78 | ### Role-based authorization
 79 | 
 80 | * Login as user1@example.com (with any password), try visiting 'Admin' page.
 81 | * You should see an error page (as limited by the policy [AdminModuleAccessPolicy](/TinyTodo.CDK/PolicyStore/StaticPolicies/AdminModuleAccessPolicy.cs))
 82 | * Logout
 83 | * Login as admin@example.com (with any password), try visiting 'Admin' page.
 84 | * You should see the admin page without any errors
 85 | 
 86 | ## Reset the sample application
 87 | 
 88 | * To reset the application, just rename/delete the TinyTodoDatabase.db file in [TinyTodo.Web](/TinyTodo.Web/) project 
 89 | 
 90 | ## Resources
 91 | 
 92 | * [Cedar policy language](https://docs.cedarpolicy.com/)
 93 | * [Amazon.CDK.AwsVerifiedpermissions](https://docs.aws.amazon.com/cdk/api/v2/dotnet/api/Amazon.CDK.AwsVerifiedpermissions.html)
 94 | 
 95 | ### References
 96 | 
 97 | * [Using Open Source Cedar to Write and Enforce Custom Authorization Policies](https://aws.amazon.com/blogs/opensource/using-open-source-cedar-to-write-and-enforce-custom-authorization-policies/) blog post
 98 | * [Policy-based access control in application development with Amazon Verified Permissions](https://aws.amazon.com/blogs/devops/policy-based-access-control-in-application-development-with-amazon-verified-permissions/) blog post
 99 | * [Custom Authorization Policy Providers using IAuthorizationPolicyProvider in ASP.NET Core](https://learn.microsoft.com/en-us/aspnet/core/security/authorization/iauthorizationpolicyprovider?view=aspnetcore-6.0)
100 | 
101 | ## Security
102 | 
103 | See [CONTRIBUTING](CONTRIBUTING.md#security-issue-notifications) for more information.
104 | 
105 | ## License
106 | 
107 | This library is licensed under the MIT-0 License. See the LICENSE file.


--------------------------------------------------------------------------------
/TinyTodo.Web/Authorization/VerifiedPermissionsUtil.cs:
--------------------------------------------------------------------------------
  1 | using System.Security.Claims;
  2 | using Amazon.VerifiedPermissions;
  3 | using Amazon.VerifiedPermissions.Model;
  4 | using TinyTodo.Web.Database.Models;
  5 | using Newtonsoft.Json;
  6 | 
  7 | namespace TinyTodo.Web.Authorization;
  8 | 
  9 | public class VerifiedPermissionsUtil : IVerifiedPermissionsUtil
 10 | {
 11 |     private readonly IAppConfig _appConfig;
 12 |     private readonly IAmazonVerifiedPermissions _verifiedPermissionsClient;
 13 | 
 14 |     public VerifiedPermissionsUtil(IAppConfig appConfig, IAmazonVerifiedPermissions verifiedPermissionsClient)
 15 |     {
 16 |         _appConfig = appConfig;
 17 |         _verifiedPermissionsClient = verifiedPermissionsClient;
 18 |     }
 19 | 
 20 |     public EntityItem ToEntityItem(ClaimsPrincipal? user)
 21 |     {
 22 |         return new EntityItem
 23 |         {
 24 |             Identifier = new EntityIdentifier
 25 |             {
 26 |                 EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::User",
 27 |                 EntityId = user?.Identity?.Name
 28 |             },
 29 |             Attributes = new Dictionary<string, AttributeValue>
 30 |             {
 31 |                 {"Email", new AttributeValue {String = user.FindFirstValue(ClaimTypes.Email)}},
 32 |                 {"Role", new AttributeValue {String = user.FindFirstValue(ClaimTypes.Role)}}
 33 |             },
 34 |         };
 35 |     }
 36 | 
 37 |     public EntityItem ToEntityItem(IEntity resource)
 38 |     {
 39 |         if (resource == null)
 40 |         {
 41 |             return null;
 42 |         }
 43 | 
 44 |         var entityItem = new EntityItem
 45 |         {
 46 |             Identifier = new EntityIdentifier
 47 |             {
 48 |                 EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::{resource.GetType().Name}",
 49 |                 EntityId = $"{resource.Id}"
 50 |             },
 51 |             Attributes = ToDictionary(resource)
 52 |         };
 53 |         return entityItem;
 54 |     }
 55 | 
 56 |     public EntityItem GetApplicationEntityItem()
 57 |     {
 58 |         return new EntityItem
 59 |         {
 60 |             Identifier = new EntityIdentifier
 61 |             {
 62 |                 EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::Application",
 63 |                 EntityId = "TinyTodoListApp"
 64 |             },
 65 |             Attributes = new()
 66 |         };
 67 |     }
 68 | 
 69 |     public async Task<IsAuthorizedResponse> IsAuthorizedAsync(ClaimsPrincipal user, string action, IEntity? entity)
 70 |     {
 71 |         var principal = ToEntityItem(user);
 72 | 
 73 |         var authorizationRequest = new IsAuthorizedRequest
 74 |         {
 75 |             PolicyStoreId = _appConfig.PolicyStoreId,
 76 |             Principal = principal.Identifier,
 77 |             Action = new ActionIdentifier { ActionType = _appConfig.ActionType, ActionId = action },
 78 |             Entities = new EntitiesDefinition
 79 |             {
 80 |                 EntityList = new List<EntityItem> { principal }
 81 |             }
 82 |         };
 83 | 
 84 |         var resource =  entity != null ? ToEntityItem(entity) : GetApplicationEntityItem();
 85 |         
 86 |         authorizationRequest.Resource = resource.Identifier;
 87 |         authorizationRequest.Entities.EntityList.Add(resource);
 88 | 
 89 |         var isAuthorizedResponse = await _verifiedPermissionsClient.IsAuthorizedAsync(authorizationRequest);
 90 |         return isAuthorizedResponse;
 91 |     }    
 92 | 
 93 |     public async Task CreateSharePolicyAsync(string policyTemplateId, EntityIdentifier principal, EntityIdentifier resource)
 94 |     {
 95 |         var listPoliciesResponse = await ListPoliciesByTemplate(policyTemplateId, principal, resource);
 96 | 
 97 |         if (listPoliciesResponse.Policies.Any())
 98 |         {
 99 |             return;
100 |         }
101 | 
102 |         var policyDefinition = new PolicyDefinition
103 |         {
104 |             TemplateLinked = new TemplateLinkedPolicyDefinition
105 |             {
106 |                 PolicyTemplateId = policyTemplateId,
107 |                 Principal = principal,
108 |                 Resource = resource
109 |             }
110 |         };
111 | 
112 |         await _verifiedPermissionsClient.CreatePolicyAsync(new CreatePolicyRequest
113 |         {
114 |             PolicyStoreId = _appConfig.PolicyStoreId,
115 |             Definition = policyDefinition
116 |         });
117 |     }
118 | 
119 |     public async Task DeleteSharePoliciesAsync(string policyTemplateId, EntityIdentifier resource)
120 |     {
121 |         var listPoliciesResponse = await ListPoliciesByTemplate(policyTemplateId, null, resource);
122 | 
123 |         foreach (var policy in listPoliciesResponse.Policies)
124 |         {
125 |             await _verifiedPermissionsClient.DeletePolicyAsync(new DeletePolicyRequest
126 |             {
127 |                 PolicyId = policy.PolicyId,
128 |                 PolicyStoreId = _appConfig.PolicyStoreId
129 |             });
130 |         }
131 |     }
132 | 
133 |     private async Task<ListPoliciesResponse> ListPoliciesByTemplate
134 |             (string policyTemplateId, EntityIdentifier? principal, EntityIdentifier resource)
135 |     {
136 |         return await _verifiedPermissionsClient.ListPoliciesAsync(new ListPoliciesRequest
137 |         {
138 |             PolicyStoreId = _appConfig.PolicyStoreId,
139 |             Filter = new PolicyFilter
140 |             {
141 |                 PolicyTemplateId = policyTemplateId,
142 |                 PolicyType = PolicyType.TEMPLATE_LINKED,
143 |                 Principal = principal != null  ? new EntityReference { Identifier = principal } : null,
144 |                 Resource = new EntityReference { Identifier = resource }
145 |             }
146 |         });
147 |     }
148 | 
149 |     private Dictionary<string, AttributeValue> ToDictionary(object obj)
150 |     {
151 |         var json = JsonConvert.SerializeObject(obj);
152 |         var dictionary = JsonConvert.DeserializeObject<Dictionary<string, string>>(json);
153 |         return dictionary.Select(x => new KeyValuePair<string, AttributeValue>(x.Key, new AttributeValue { String = x.Value }))
154 |                 .ToDictionary(x => x.Key, x => x.Value);
155 |     }
156 | }


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css:
--------------------------------------------------------------------------------
  1 | /*!
  2 |  * Bootstrap Reboot v5.1.0 (https://getbootstrap.com/)
  3 |  * Copyright 2011-2021 The Bootstrap Authors
  4 |  * Copyright 2011-2021 Twitter, Inc.
  5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
  6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
  7 |  */
  8 | *,
  9 | *::before,
 10 | *::after {
 11 |   box-sizing: border-box;
 12 | }
 13 | 
 14 | @media (prefers-reduced-motion: no-preference) {
 15 |   :root {
 16 |     scroll-behavior: smooth;
 17 |   }
 18 | }
 19 | 
 20 | body {
 21 |   margin: 0;
 22 |   font-family: var(--bs-body-font-family);
 23 |   font-size: var(--bs-body-font-size);
 24 |   font-weight: var(--bs-body-font-weight);
 25 |   line-height: var(--bs-body-line-height);
 26 |   color: var(--bs-body-color);
 27 |   text-align: var(--bs-body-text-align);
 28 |   background-color: var(--bs-body-bg);
 29 |   -webkit-text-size-adjust: 100%;
 30 |   -webkit-tap-highlight-color: rgba(0, 0, 0, 0);
 31 | }
 32 | 
 33 | hr {
 34 |   margin: 1rem 0;
 35 |   color: inherit;
 36 |   background-color: currentColor;
 37 |   border: 0;
 38 |   opacity: 0.25;
 39 | }
 40 | 
 41 | hr:not([size]) {
 42 |   height: 1px;
 43 | }
 44 | 
 45 | h6, h5, h4, h3, h2, h1 {
 46 |   margin-top: 0;
 47 |   margin-bottom: 0.5rem;
 48 |   font-weight: 500;
 49 |   line-height: 1.2;
 50 | }
 51 | 
 52 | h1 {
 53 |   font-size: calc(1.375rem + 1.5vw);
 54 | }
 55 | @media (min-width: 1200px) {
 56 |   h1 {
 57 |     font-size: 2.5rem;
 58 |   }
 59 | }
 60 | 
 61 | h2 {
 62 |   font-size: calc(1.325rem + 0.9vw);
 63 | }
 64 | @media (min-width: 1200px) {
 65 |   h2 {
 66 |     font-size: 2rem;
 67 |   }
 68 | }
 69 | 
 70 | h3 {
 71 |   font-size: calc(1.3rem + 0.6vw);
 72 | }
 73 | @media (min-width: 1200px) {
 74 |   h3 {
 75 |     font-size: 1.75rem;
 76 |   }
 77 | }
 78 | 
 79 | h4 {
 80 |   font-size: calc(1.275rem + 0.3vw);
 81 | }
 82 | @media (min-width: 1200px) {
 83 |   h4 {
 84 |     font-size: 1.5rem;
 85 |   }
 86 | }
 87 | 
 88 | h5 {
 89 |   font-size: 1.25rem;
 90 | }
 91 | 
 92 | h6 {
 93 |   font-size: 1rem;
 94 | }
 95 | 
 96 | p {
 97 |   margin-top: 0;
 98 |   margin-bottom: 1rem;
 99 | }
100 | 
101 | abbr[title],
102 | abbr[data-bs-original-title] {
103 |   -webkit-text-decoration: underline dotted;
104 |   text-decoration: underline dotted;
105 |   cursor: help;
106 |   -webkit-text-decoration-skip-ink: none;
107 |   text-decoration-skip-ink: none;
108 | }
109 | 
110 | address {
111 |   margin-bottom: 1rem;
112 |   font-style: normal;
113 |   line-height: inherit;
114 | }
115 | 
116 | ol,
117 | ul {
118 |   padding-right: 2rem;
119 | }
120 | 
121 | ol,
122 | ul,
123 | dl {
124 |   margin-top: 0;
125 |   margin-bottom: 1rem;
126 | }
127 | 
128 | ol ol,
129 | ul ul,
130 | ol ul,
131 | ul ol {
132 |   margin-bottom: 0;
133 | }
134 | 
135 | dt {
136 |   font-weight: 700;
137 | }
138 | 
139 | dd {
140 |   margin-bottom: 0.5rem;
141 |   margin-right: 0;
142 | }
143 | 
144 | blockquote {
145 |   margin: 0 0 1rem;
146 | }
147 | 
148 | b,
149 | strong {
150 |   font-weight: bolder;
151 | }
152 | 
153 | small {
154 |   font-size: 0.875em;
155 | }
156 | 
157 | mark {
158 |   padding: 0.2em;
159 |   background-color: #fcf8e3;
160 | }
161 | 
162 | sub,
163 | sup {
164 |   position: relative;
165 |   font-size: 0.75em;
166 |   line-height: 0;
167 |   vertical-align: baseline;
168 | }
169 | 
170 | sub {
171 |   bottom: -0.25em;
172 | }
173 | 
174 | sup {
175 |   top: -0.5em;
176 | }
177 | 
178 | a {
179 |   color: #0d6efd;
180 |   text-decoration: underline;
181 | }
182 | a:hover {
183 |   color: #0a58ca;
184 | }
185 | 
186 | a:not([href]):not([class]), a:not([href]):not([class]):hover {
187 |   color: inherit;
188 |   text-decoration: none;
189 | }
190 | 
191 | pre,
192 | code,
193 | kbd,
194 | samp {
195 |   font-family: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
196 |   font-size: 1em;
197 |   direction: ltr ;
198 |   unicode-bidi: bidi-override;
199 | }
200 | 
201 | pre {
202 |   display: block;
203 |   margin-top: 0;
204 |   margin-bottom: 1rem;
205 |   overflow: auto;
206 |   font-size: 0.875em;
207 | }
208 | pre code {
209 |   font-size: inherit;
210 |   color: inherit;
211 |   word-break: normal;
212 | }
213 | 
214 | code {
215 |   font-size: 0.875em;
216 |   color: #d63384;
217 |   word-wrap: break-word;
218 | }
219 | a > code {
220 |   color: inherit;
221 | }
222 | 
223 | kbd {
224 |   padding: 0.2rem 0.4rem;
225 |   font-size: 0.875em;
226 |   color: #fff;
227 |   background-color: #212529;
228 |   border-radius: 0.2rem;
229 | }
230 | kbd kbd {
231 |   padding: 0;
232 |   font-size: 1em;
233 |   font-weight: 700;
234 | }
235 | 
236 | figure {
237 |   margin: 0 0 1rem;
238 | }
239 | 
240 | img,
241 | svg {
242 |   vertical-align: middle;
243 | }
244 | 
245 | table {
246 |   caption-side: bottom;
247 |   border-collapse: collapse;
248 | }
249 | 
250 | caption {
251 |   padding-top: 0.5rem;
252 |   padding-bottom: 0.5rem;
253 |   color: #6c757d;
254 |   text-align: right;
255 | }
256 | 
257 | th {
258 |   text-align: inherit;
259 |   text-align: -webkit-match-parent;
260 | }
261 | 
262 | thead,
263 | tbody,
264 | tfoot,
265 | tr,
266 | td,
267 | th {
268 |   border-color: inherit;
269 |   border-style: solid;
270 |   border-width: 0;
271 | }
272 | 
273 | label {
274 |   display: inline-block;
275 | }
276 | 
277 | button {
278 |   border-radius: 0;
279 | }
280 | 
281 | button:focus:not(:focus-visible) {
282 |   outline: 0;
283 | }
284 | 
285 | input,
286 | button,
287 | select,
288 | optgroup,
289 | textarea {
290 |   margin: 0;
291 |   font-family: inherit;
292 |   font-size: inherit;
293 |   line-height: inherit;
294 | }
295 | 
296 | button,
297 | select {
298 |   text-transform: none;
299 | }
300 | 
301 | [role=button] {
302 |   cursor: pointer;
303 | }
304 | 
305 | select {
306 |   word-wrap: normal;
307 | }
308 | select:disabled {
309 |   opacity: 1;
310 | }
311 | 
312 | [list]::-webkit-calendar-picker-indicator {
313 |   display: none;
314 | }
315 | 
316 | button,
317 | [type=button],
318 | [type=reset],
319 | [type=submit] {
320 |   -webkit-appearance: button;
321 | }
322 | button:not(:disabled),
323 | [type=button]:not(:disabled),
324 | [type=reset]:not(:disabled),
325 | [type=submit]:not(:disabled) {
326 |   cursor: pointer;
327 | }
328 | 
329 | ::-moz-focus-inner {
330 |   padding: 0;
331 |   border-style: none;
332 | }
333 | 
334 | textarea {
335 |   resize: vertical;
336 | }
337 | 
338 | fieldset {
339 |   min-width: 0;
340 |   padding: 0;
341 |   margin: 0;
342 |   border: 0;
343 | }
344 | 
345 | legend {
346 |   float: right;
347 |   width: 100%;
348 |   padding: 0;
349 |   margin-bottom: 0.5rem;
350 |   font-size: calc(1.275rem + 0.3vw);
351 |   line-height: inherit;
352 | }
353 | @media (min-width: 1200px) {
354 |   legend {
355 |     font-size: 1.5rem;
356 |   }
357 | }
358 | legend + * {
359 |   clear: right;
360 | }
361 | 
362 | ::-webkit-datetime-edit-fields-wrapper,
363 | ::-webkit-datetime-edit-text,
364 | ::-webkit-datetime-edit-minute,
365 | ::-webkit-datetime-edit-hour-field,
366 | ::-webkit-datetime-edit-day-field,
367 | ::-webkit-datetime-edit-month-field,
368 | ::-webkit-datetime-edit-year-field {
369 |   padding: 0;
370 | }
371 | 
372 | ::-webkit-inner-spin-button {
373 |   height: auto;
374 | }
375 | 
376 | [type=search] {
377 |   outline-offset: -2px;
378 |   -webkit-appearance: textfield;
379 | }
380 | 
381 | [type="tel"],
382 | [type="url"],
383 | [type="email"],
384 | [type="number"] {
385 |   direction: ltr;
386 | }
387 | ::-webkit-search-decoration {
388 |   -webkit-appearance: none;
389 | }
390 | 
391 | ::-webkit-color-swatch-wrapper {
392 |   padding: 0;
393 | }
394 | 
395 | ::file-selector-button {
396 |   font: inherit;
397 | }
398 | 
399 | ::-webkit-file-upload-button {
400 |   font: inherit;
401 |   -webkit-appearance: button;
402 | }
403 | 
404 | output {
405 |   display: inline-block;
406 | }
407 | 
408 | iframe {
409 |   border: 0;
410 | }
411 | 
412 | summary {
413 |   display: list-item;
414 |   cursor: pointer;
415 | }
416 | 
417 | progress {
418 |   vertical-align: baseline;
419 | }
420 | 
421 | [hidden] {
422 |   display: none !important;
423 | }
424 | /*# sourceMappingURL=bootstrap-reboot.rtl.css.map */


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css:
--------------------------------------------------------------------------------
  1 | /*!
  2 |  * Bootstrap Reboot v5.1.0 (https://getbootstrap.com/)
  3 |  * Copyright 2011-2021 The Bootstrap Authors
  4 |  * Copyright 2011-2021 Twitter, Inc.
  5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
  6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
  7 |  */
  8 | *,
  9 | *::before,
 10 | *::after {
 11 |   box-sizing: border-box;
 12 | }
 13 | 
 14 | @media (prefers-reduced-motion: no-preference) {
 15 |   :root {
 16 |     scroll-behavior: smooth;
 17 |   }
 18 | }
 19 | 
 20 | body {
 21 |   margin: 0;
 22 |   font-family: var(--bs-body-font-family);
 23 |   font-size: var(--bs-body-font-size);
 24 |   font-weight: var(--bs-body-font-weight);
 25 |   line-height: var(--bs-body-line-height);
 26 |   color: var(--bs-body-color);
 27 |   text-align: var(--bs-body-text-align);
 28 |   background-color: var(--bs-body-bg);
 29 |   -webkit-text-size-adjust: 100%;
 30 |   -webkit-tap-highlight-color: rgba(0, 0, 0, 0);
 31 | }
 32 | 
 33 | hr {
 34 |   margin: 1rem 0;
 35 |   color: inherit;
 36 |   background-color: currentColor;
 37 |   border: 0;
 38 |   opacity: 0.25;
 39 | }
 40 | 
 41 | hr:not([size]) {
 42 |   height: 1px;
 43 | }
 44 | 
 45 | h6, h5, h4, h3, h2, h1 {
 46 |   margin-top: 0;
 47 |   margin-bottom: 0.5rem;
 48 |   font-weight: 500;
 49 |   line-height: 1.2;
 50 | }
 51 | 
 52 | h1 {
 53 |   font-size: calc(1.375rem + 1.5vw);
 54 | }
 55 | @media (min-width: 1200px) {
 56 |   h1 {
 57 |     font-size: 2.5rem;
 58 |   }
 59 | }
 60 | 
 61 | h2 {
 62 |   font-size: calc(1.325rem + 0.9vw);
 63 | }
 64 | @media (min-width: 1200px) {
 65 |   h2 {
 66 |     font-size: 2rem;
 67 |   }
 68 | }
 69 | 
 70 | h3 {
 71 |   font-size: calc(1.3rem + 0.6vw);
 72 | }
 73 | @media (min-width: 1200px) {
 74 |   h3 {
 75 |     font-size: 1.75rem;
 76 |   }
 77 | }
 78 | 
 79 | h4 {
 80 |   font-size: calc(1.275rem + 0.3vw);
 81 | }
 82 | @media (min-width: 1200px) {
 83 |   h4 {
 84 |     font-size: 1.5rem;
 85 |   }
 86 | }
 87 | 
 88 | h5 {
 89 |   font-size: 1.25rem;
 90 | }
 91 | 
 92 | h6 {
 93 |   font-size: 1rem;
 94 | }
 95 | 
 96 | p {
 97 |   margin-top: 0;
 98 |   margin-bottom: 1rem;
 99 | }
100 | 
101 | abbr[title],
102 | abbr[data-bs-original-title] {
103 |   -webkit-text-decoration: underline dotted;
104 |   text-decoration: underline dotted;
105 |   cursor: help;
106 |   -webkit-text-decoration-skip-ink: none;
107 |   text-decoration-skip-ink: none;
108 | }
109 | 
110 | address {
111 |   margin-bottom: 1rem;
112 |   font-style: normal;
113 |   line-height: inherit;
114 | }
115 | 
116 | ol,
117 | ul {
118 |   padding-left: 2rem;
119 | }
120 | 
121 | ol,
122 | ul,
123 | dl {
124 |   margin-top: 0;
125 |   margin-bottom: 1rem;
126 | }
127 | 
128 | ol ol,
129 | ul ul,
130 | ol ul,
131 | ul ol {
132 |   margin-bottom: 0;
133 | }
134 | 
135 | dt {
136 |   font-weight: 700;
137 | }
138 | 
139 | dd {
140 |   margin-bottom: 0.5rem;
141 |   margin-left: 0;
142 | }
143 | 
144 | blockquote {
145 |   margin: 0 0 1rem;
146 | }
147 | 
148 | b,
149 | strong {
150 |   font-weight: bolder;
151 | }
152 | 
153 | small {
154 |   font-size: 0.875em;
155 | }
156 | 
157 | mark {
158 |   padding: 0.2em;
159 |   background-color: #fcf8e3;
160 | }
161 | 
162 | sub,
163 | sup {
164 |   position: relative;
165 |   font-size: 0.75em;
166 |   line-height: 0;
167 |   vertical-align: baseline;
168 | }
169 | 
170 | sub {
171 |   bottom: -0.25em;
172 | }
173 | 
174 | sup {
175 |   top: -0.5em;
176 | }
177 | 
178 | a {
179 |   color: #0d6efd;
180 |   text-decoration: underline;
181 | }
182 | a:hover {
183 |   color: #0a58ca;
184 | }
185 | 
186 | a:not([href]):not([class]), a:not([href]):not([class]):hover {
187 |   color: inherit;
188 |   text-decoration: none;
189 | }
190 | 
191 | pre,
192 | code,
193 | kbd,
194 | samp {
195 |   font-family: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
196 |   font-size: 1em;
197 |   direction: ltr /* rtl:ignore */;
198 |   unicode-bidi: bidi-override;
199 | }
200 | 
201 | pre {
202 |   display: block;
203 |   margin-top: 0;
204 |   margin-bottom: 1rem;
205 |   overflow: auto;
206 |   font-size: 0.875em;
207 | }
208 | pre code {
209 |   font-size: inherit;
210 |   color: inherit;
211 |   word-break: normal;
212 | }
213 | 
214 | code {
215 |   font-size: 0.875em;
216 |   color: #d63384;
217 |   word-wrap: break-word;
218 | }
219 | a > code {
220 |   color: inherit;
221 | }
222 | 
223 | kbd {
224 |   padding: 0.2rem 0.4rem;
225 |   font-size: 0.875em;
226 |   color: #fff;
227 |   background-color: #212529;
228 |   border-radius: 0.2rem;
229 | }
230 | kbd kbd {
231 |   padding: 0;
232 |   font-size: 1em;
233 |   font-weight: 700;
234 | }
235 | 
236 | figure {
237 |   margin: 0 0 1rem;
238 | }
239 | 
240 | img,
241 | svg {
242 |   vertical-align: middle;
243 | }
244 | 
245 | table {
246 |   caption-side: bottom;
247 |   border-collapse: collapse;
248 | }
249 | 
250 | caption {
251 |   padding-top: 0.5rem;
252 |   padding-bottom: 0.5rem;
253 |   color: #6c757d;
254 |   text-align: left;
255 | }
256 | 
257 | th {
258 |   text-align: inherit;
259 |   text-align: -webkit-match-parent;
260 | }
261 | 
262 | thead,
263 | tbody,
264 | tfoot,
265 | tr,
266 | td,
267 | th {
268 |   border-color: inherit;
269 |   border-style: solid;
270 |   border-width: 0;
271 | }
272 | 
273 | label {
274 |   display: inline-block;
275 | }
276 | 
277 | button {
278 |   border-radius: 0;
279 | }
280 | 
281 | button:focus:not(:focus-visible) {
282 |   outline: 0;
283 | }
284 | 
285 | input,
286 | button,
287 | select,
288 | optgroup,
289 | textarea {
290 |   margin: 0;
291 |   font-family: inherit;
292 |   font-size: inherit;
293 |   line-height: inherit;
294 | }
295 | 
296 | button,
297 | select {
298 |   text-transform: none;
299 | }
300 | 
301 | [role=button] {
302 |   cursor: pointer;
303 | }
304 | 
305 | select {
306 |   word-wrap: normal;
307 | }
308 | select:disabled {
309 |   opacity: 1;
310 | }
311 | 
312 | [list]::-webkit-calendar-picker-indicator {
313 |   display: none;
314 | }
315 | 
316 | button,
317 | [type=button],
318 | [type=reset],
319 | [type=submit] {
320 |   -webkit-appearance: button;
321 | }
322 | button:not(:disabled),
323 | [type=button]:not(:disabled),
324 | [type=reset]:not(:disabled),
325 | [type=submit]:not(:disabled) {
326 |   cursor: pointer;
327 | }
328 | 
329 | ::-moz-focus-inner {
330 |   padding: 0;
331 |   border-style: none;
332 | }
333 | 
334 | textarea {
335 |   resize: vertical;
336 | }
337 | 
338 | fieldset {
339 |   min-width: 0;
340 |   padding: 0;
341 |   margin: 0;
342 |   border: 0;
343 | }
344 | 
345 | legend {
346 |   float: left;
347 |   width: 100%;
348 |   padding: 0;
349 |   margin-bottom: 0.5rem;
350 |   font-size: calc(1.275rem + 0.3vw);
351 |   line-height: inherit;
352 | }
353 | @media (min-width: 1200px) {
354 |   legend {
355 |     font-size: 1.5rem;
356 |   }
357 | }
358 | legend + * {
359 |   clear: left;
360 | }
361 | 
362 | ::-webkit-datetime-edit-fields-wrapper,
363 | ::-webkit-datetime-edit-text,
364 | ::-webkit-datetime-edit-minute,
365 | ::-webkit-datetime-edit-hour-field,
366 | ::-webkit-datetime-edit-day-field,
367 | ::-webkit-datetime-edit-month-field,
368 | ::-webkit-datetime-edit-year-field {
369 |   padding: 0;
370 | }
371 | 
372 | ::-webkit-inner-spin-button {
373 |   height: auto;
374 | }
375 | 
376 | [type=search] {
377 |   outline-offset: -2px;
378 |   -webkit-appearance: textfield;
379 | }
380 | 
381 | /* rtl:raw:
382 | [type="tel"],
383 | [type="url"],
384 | [type="email"],
385 | [type="number"] {
386 |   direction: ltr;
387 | }
388 | */
389 | ::-webkit-search-decoration {
390 |   -webkit-appearance: none;
391 | }
392 | 
393 | ::-webkit-color-swatch-wrapper {
394 |   padding: 0;
395 | }
396 | 
397 | ::file-selector-button {
398 |   font: inherit;
399 | }
400 | 
401 | ::-webkit-file-upload-button {
402 |   font: inherit;
403 |   -webkit-appearance: button;
404 | }
405 | 
406 | output {
407 |   display: inline-block;
408 | }
409 | 
410 | iframe {
411 |   border: 0;
412 | }
413 | 
414 | summary {
415 |   display: list-item;
416 |   cursor: pointer;
417 | }
418 | 
419 | progress {
420 |   vertical-align: baseline;
421 | }
422 | 
423 | [hidden] {
424 |   display: none !important;
425 | }
426 | 
427 | /*# sourceMappingURL=bootstrap-reboot.css.map */


--------------------------------------------------------------------------------
/TinyTodo.Web/Views/TodoList/List.cshtml:
--------------------------------------------------------------------------------
  1 | @using TinyTodo.Web.Database.Models
  2 | 
  3 | @model List<TodoList>
  4 | 
  5 | @{
  6 |     ViewData["Title"] = "Todo List";
  7 | }
  8 | 
  9 | <div class="container">
 10 |     <div class="row" style="text-align: right;">
 11 |         <div class="col-md-12" style="float: right">
 12 |             <button type="button" class="btn btn-primary btn-show-add-list-modal" data-bs-toggle="modal" data-bs-target="#divEditTodoList">Add To-Do List</button>
 13 |         </div>
 14 |     </div>
 15 |     <div class="row">
 16 |         @foreach (var todoList in Model)
 17 |         {
 18 |             <div class="col-md-4">
 19 |                 <div class="card mb-4 box-shadow">
 20 |                 <div class="card-img-top" style="height: 190px; width: 100%; display: block;">
 21 |                     <h4>@(todoList.Owner == User.Identity?.Name ? todoList.Title : todoList.Title + " (Shared)" )</h4>
 22 |                     <ul>
 23 |                       @foreach (var item in todoList.TodoItems)
 24 |                       {
 25 |                         <li>@item.Title</li>  
 26 |                       }
 27 |                     </ul>
 28 |                     @if(todoList.Owner == User.Identity?.Name && todoList.Shares.Any())
 29 |                     {
 30 |                         <p class="sharelist">
 31 |                             <b>Shared with: </b>
 32 |                             <span>@string.Join(',', todoList.Shares.Select(x => x.Email))</span>
 33 |                         </p>
 34 |                     }                    
 35 |                 </div>
 36 |                 <div class="card-body">
 37 |                     <p class="card-text"></p>
 38 |                     <div class="d-flex justify-content-between align-items-center">
 39 |                     <div class="btn-group">
 40 |                         <button type="button" class="btn btn-sm btn-outline-secondary btn-show-additem-modal" data-bs-toggle="modal" 
 41 |                             data-bs-target="#divAddTodoItem" data-todo-list-id="@todoList.Id">Add Item</button>
 42 |                         <button type="button" class="btn btn-sm btn-outline-secondary btn-show-share-list-modal" data-bs-toggle="modal"
 43 |                             data-bs-target="#divShareTodoList" data-todo-list-id="@todoList.Id">Share</button>
 44 |                         <button type="button" class="btn btn-sm btn-outline-secondary btn-delete-list"
 45 |                             data-todo-list-id="@todoList.Id">Delete</button>
 46 |                         @if(todoList.Owner == User.Identity?.Name && todoList.Shares.Any())
 47 |                         {
 48 |                             <button type="button" class="btn btn-sm btn-outline-secondary btn-mark-list-private"
 49 |                             data-todo-list-id="@todoList.Id">Mark as Private</button>
 50 |                         }
 51 |                     </div>
 52 |                     </div>
 53 |                 </div>
 54 |                 </div>
 55 |             </div>
 56 |         }
 57 |     </div>
 58 | </div>
 59 | 
 60 | @Html.Partial("_EditTodoList")
 61 | 
 62 | @Html.Partial("_AddTodoItem")
 63 | 
 64 | @Html.Partial("_ShareTodoList")
 65 | 
 66 | @section Scripts{
 67 | <script type="text/javascript">
 68 |     $(document).ready(function(){
 69 |         $('#btnCreateTodoList').click(function(event){
 70 |             let form = $('#frmNewToDoList');
 71 |             let msg = form.find('.alert');
 72 |             jQuery.post('/TodoList/Create', form.serialize(), function(result){
 73 |                 msg.removeClass('alert-success');
 74 |                 msg.removeClass('alert-danger');
 75 |                 if(result.success){
 76 |                     msg.addClass('alert-success');
 77 |                 }else{
 78 |                     msg.addClass('alert-danger');
 79 |                 }
 80 |                 msg.html(result.message);
 81 |             });
 82 |         });
 83 | 
 84 |         $('#btnShareTodoList').click(function(event){
 85 |             let form = $('#frmShareTodoList');
 86 |             let msg = form.find('.alert');
 87 |             let data = form.serialize() + '&todolistid=' + $(this).data('todo-list-id');
 88 |             jQuery.post('/TodoList/Share', data, function(result){
 89 |                 msg.removeClass('alert-success');
 90 |                 msg.removeClass('alert-danger');
 91 |                 if(result.success){
 92 |                     msg.addClass('alert-success');
 93 |                 }else{
 94 |                     msg.addClass('alert-danger');
 95 |                 }
 96 |                 msg.html(result.message);
 97 |             }).fail(function(res){
 98 |                 if(res.status === 403){
 99 |                     msg.addClass('alert-danger');
100 |                     msg.html("You don't have permissions to share the to-do list.");
101 |                 }
102 |             });
103 |         });
104 | 
105 |         $('.btn-mark-list-private').click(function(event){
106 |             if(confirm('Are you sure you want to mark this todo list as private?')){
107 |                 let data = 'id='+$(this).data('todo-list-id');
108 |                 jQuery.post('/TodoList/MakePrivate', data, function(result){
109 |                     if(result.success){
110 |                         alert(result.message);
111 |                         location.reload();
112 |                     }else{
113 |                         alert(result.message);
114 |                     }
115 |                     msg.html(result.message);
116 |                 }).fail(function(res){
117 |                     if(res.status === 403){
118 |                         msg.addClass('alert-danger');
119 |                         msg.html("You don't have permissions on the to-do list.");
120 |                     }
121 |                 });
122 |             }
123 |         });
124 | 
125 |         $('#btnCreateTodoItem').click(function(){
126 |             let form = $('#frmNewToDoItem');
127 |             let msg = form.find('.alert');
128 |             let data = form.serialize() + '&todolistid=' + $(this).data('todo-list-id');
129 |             jQuery.post('/TodoList/AddTodoItem', data, function(result){
130 |                 msg.removeClass('alert-success');
131 |                 msg.removeClass('alert-danger');
132 |                 if(result.success){
133 |                     msg.addClass('alert-success');
134 |                 }else{
135 |                     msg.addClass('alert-danger');
136 |                 }
137 |                 msg.html(result.message);
138 |             })
139 |             .fail(function(res){
140 |                 if(res.status === 403){
141 |                     msg.addClass('alert-danger');
142 |                     msg.html("You don't have permissions on the to-do list.");
143 |                 }
144 |             });
145 |         });
146 | 
147 |         $('.btn-delete-list').click(function(){
148 |           if(confirm('Are you sure you want to delete the to-do list?')){
149 |             let data = 'id='+$(this).data('todo-list-id');
150 |             jQuery.post('/TodoList/Delete', data, function(result){
151 |                 if(result.success){
152 |                     alert('To-do list deleted.');
153 |                     location.reload();
154 |                 }else{
155 |                     alert(result.message);
156 |                 }
157 |             })
158 |             .fail(function(res){
159 |                 if(res.status === 403){
160 |                     alert("You don't have permissions on the to-do list.");
161 |                 }
162 |             });
163 |           }
164 |         });
165 | 
166 |         $('.btn-show-add-list-modal').click(function(){
167 |           $('#frmNewToDoList').find('.alert').html('');
168 |         });
169 | 
170 |         $('.btn-show-additem-modal').click(function(){
171 |           $('#btnCreateTodoItem').data('todo-list-id', $(this).data('todo-list-id'));
172 |           $('#frmNewToDoItem').find('.alert').html('');
173 |         });
174 | 
175 |         $('.btn-show-share-list-modal').click(function(){
176 |           $('#btnShareTodoList').data('todo-list-id', $(this).data('todo-list-id'));
177 |           $('#frmShareTodoList').find('.alert').html('');
178 |         });
179 | 
180 |         $('#divEditTodoList,#divAddTodoItem,#divShareTodoList').on('hidden.bs.modal', function (e) {
181 |             document.location.reload();
182 |         })       
183 |     });
184 | 
185 | </script>
186 | }
187 | 
188 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/Controllers/TodoListController.cs:
--------------------------------------------------------------------------------
  1 | using Amazon.VerifiedPermissions;
  2 | using Amazon.VerifiedPermissions.Model;
  3 | using TinyTodo.Web.Authorization;
  4 | using TinyTodo.Web.Database;
  5 | using TinyTodo.Web.Database.Models;
  6 | using Microsoft.AspNetCore.Authorization;
  7 | using Microsoft.AspNetCore.Mvc;
  8 | using Microsoft.EntityFrameworkCore;
  9 | 
 10 | namespace TinyTodo.Web.Controllers;
 11 | 
 12 | [Authorize]
 13 | public class TodoListController : Controller
 14 | {
 15 |     private IAppConfig _appConfig;
 16 |     private IAuthorizationService _authorizationService;
 17 |     private readonly IAmazonVerifiedPermissions _verifiedPermissionsClient;
 18 |     private readonly IVerifiedPermissionsUtil _verifiedPermissionsUtil;
 19 | 
 20 |     public TodoListController(IAppConfig appConfig,
 21 |                         IVerifiedPermissionsUtil verifiedPermissionsUtil, 
 22 |                         IAuthorizationService authorizationService,
 23 |                         IAmazonVerifiedPermissions verifiedPermissionsClient)
 24 |     {
 25 |         _appConfig = appConfig;
 26 |         _authorizationService = authorizationService;
 27 |         _verifiedPermissionsClient = verifiedPermissionsClient;
 28 |         _verifiedPermissionsUtil = verifiedPermissionsUtil;
 29 |     }
 30 | 
 31 |     [HasPermissionOnAction(Constants.Actions.GetTodoLists)]
 32 |     public async Task<IActionResult> Index()
 33 |     {
 34 |         var todoLists = new List<TodoList>();
 35 |         using (var db = new TinyTodoDBContext(_appConfig))
 36 |         {
 37 |             todoLists = db.TodoLists.Where(x => x.Owner == User.Identity.Name)
 38 |                             .Include(t => t.TodoItems)
 39 |                             .Include(t => t.Shares)
 40 |                             .OrderByDescending(x => x.Created).ToList();
 41 | 
 42 |             var sharedTodoLists = db.TodoListShares.Where(x => x.Email == User.Identity.Name)
 43 |                             .Include(t => t.TodoList)
 44 |                             .Include(t => t.TodoList.TodoItems)                            
 45 |                             .Select(x => x.TodoList)                            
 46 |                             .OrderByDescending(x => x.Created).ToList();
 47 | 
 48 |             todoLists.AddRange(sharedTodoLists);
 49 | 
 50 |         }
 51 |         return View("List", todoLists);
 52 |     }
 53 | 
 54 |     [HttpPost]
 55 |     [HasPermissionOnAction(Constants.Actions.CreateTodoList)]    
 56 |     public async Task<IActionResult> CreateAsync(TodoList todoList)
 57 |     {
 58 |         using (var db = new TinyTodoDBContext(_appConfig))
 59 |         {
 60 |             if(db.TodoLists.Any(x => x.Title == todoList.Title))
 61 |             {
 62 |                 return new JsonResult(new { success = false, message = "To-do list already exists" });
 63 |             }
 64 |             todoList.Owner = User.Identity.Name;
 65 |             todoList.Created = DateTime.Now;
 66 | 
 67 |             db.TodoLists.Add(todoList);
 68 |             db.SaveChanges();
 69 |         }
 70 |         return new JsonResult(new { success = true, message = "To-do list created" });
 71 |     }
 72 | 
 73 |     [HttpPost]
 74 |     [HasPermissionOnAction(actionName: Constants.Actions.AddTodoItem,  
 75 |                             resourceType: nameof(TodoList), 
 76 |                             resourceIdFormElementName: nameof(TodoItem.TodoListId))]
 77 |     public async Task<IActionResult> AddTodoItem(TodoItem todoItem)
 78 |     {
 79 |         using (var db = new TinyTodoDBContext(_appConfig))
 80 |         {
 81 |             var todoList = db.TodoLists.FirstOrDefault(x => x.Id == todoItem.TodoListId);
 82 | 
 83 |             if(db.TodoItems.Any(x => x.TodoListId == todoItem.TodoListId 
 84 |                                             && x.Title == todoItem.Title))
 85 |             {
 86 |                 return new JsonResult(new { success = false, message = "To-do item already exists" });
 87 |             }
 88 |             todoItem.Created = DateTime.Now;
 89 |             db.TodoItems.Add(todoItem);
 90 |             db.SaveChanges();
 91 |         }
 92 |         return new JsonResult(new { success = true, message = "To-do item created" });
 93 |     }
 94 | 
 95 |     [HttpPost]
 96 |     [HasPermissionOnAction(actionName: Constants.Actions.ShareTodoList, 
 97 |                 resourceType: nameof(TodoList), 
 98 |                 resourceIdFormElementName: nameof(TodoListShare.TodoListId))]
 99 |     public async Task<IActionResult> ShareAsync(TodoListShare todoListShare)
100 |     {
101 |         if(todoListShare.Email.Equals(User.Identity.Name, StringComparison.OrdinalIgnoreCase))
102 |         {
103 |             return new JsonResult(new { success = false, message = "Invalid email address" });
104 |         }
105 |         using (var db = new TinyTodoDBContext(_appConfig))
106 |         {                        
107 |             if(db.TodoListShares.Any(x => x.Email == todoListShare.Email && x.TodoListId == todoListShare.TodoListId))
108 |             {
109 |                 return new JsonResult(new { success = false, message = "To-do list already shared with this email" });
110 |             }
111 | 
112 |             todoListShare.Created = DateTime.Now;
113 | 
114 |             db.TodoListShares.Add(todoListShare);
115 |             db.SaveChanges();
116 |         }
117 | 
118 |         var policyTemplateId = todoListShare.AllowReshare ? _appConfig.TodoListSharedAccessWithResharePolicyTemplateId 
119 |                                         : _appConfig.TodoListSharedAccessPolicyTemplateId;
120 |         
121 |         await _verifiedPermissionsUtil.CreateSharePolicyAsync(policyTemplateId, 
122 |             new EntityIdentifier { EntityId = todoListShare.Email,  EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::User" },
123 |             new EntityIdentifier { EntityId = $"{todoListShare.TodoListId}",  EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::{typeof(TodoList).Name}"}
124 |         );
125 | 
126 |         return new JsonResult(new { success = true, message = "To-do list shared with this email" });
127 |     }    
128 | 
129 |     [HttpPost]
130 |     [HasPermissionOnAction(actionName: Constants.Actions.DeleteTodoList, 
131 |                 resourceType: nameof(TodoList), 
132 |                 resourceIdFormElementName: nameof(TodoList.Id))]
133 |     public async Task<IActionResult> DeleteAsync(TodoList todoList)
134 |     {
135 |         using (var db = new TinyTodoDBContext(_appConfig))
136 |         {
137 |             todoList = await db.TodoLists
138 |                             .Include(t => t.TodoItems)
139 |                             .Include(t => t.Shares)
140 |                             .FirstOrDefaultAsync(x => x.Id == todoList.Id);
141 | 
142 |             db.TodoLists.Remove(todoList);
143 |             db.SaveChanges();
144 |         }
145 |         return new JsonResult(new { success = true, message = "To-do list deleted" });
146 |     }
147 | 
148 |     [HttpPost]
149 |     [HasPermissionOnAction(actionName: Constants.Actions.MakeTodoListPrivate, 
150 |             resourceType: nameof(TodoList), 
151 |             resourceIdFormElementName: nameof(TodoList.Id))]
152 |     public async Task<IActionResult> MakePrivateAsync(TodoList todoList)
153 |     {
154 |         using (var db = new TinyTodoDBContext(_appConfig))
155 |         {
156 |             var shares = db.TodoListShares.Where(x => x.TodoListId == todoList.Id);
157 |             if(!shares.Any())
158 |             {
159 |                 return new JsonResult(new { success = false, message = "Invalid to-do list or email" });
160 |             }
161 | 
162 |             db.TodoListShares.RemoveRange(shares);
163 |             db.SaveChanges();
164 |         }
165 |         
166 |         await _verifiedPermissionsUtil.DeleteSharePoliciesAsync(_appConfig.TodoListSharedAccessPolicyTemplateId, 
167 |             new EntityIdentifier { EntityId = $"{todoList.Id}",  
168 |                 EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::{typeof(TodoList).Name}"}
169 |         );
170 | 
171 |         await _verifiedPermissionsUtil.DeleteSharePoliciesAsync(_appConfig.TodoListSharedAccessWithResharePolicyTemplateId, 
172 |             new EntityIdentifier { EntityId = $"{todoList.Id}",  
173 |                 EntityType = $"{_appConfig.PolicyStoreSchemaNamespace}::{typeof(TodoList).Name}"}
174 |         );
175 | 
176 |         return new JsonResult(new { success = true, message = "To-do list is marked as private." });
177 |     }       
178 | }
179 | 
180 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery-validation/dist/additional-methods.min.js:
--------------------------------------------------------------------------------
1 | /*! jQuery Validation Plugin - v1.17.0 - 7/29/2017
2 |  * https://jqueryvalidation.org/
3 |  * Copyright (c) 2017 Jörn Zaefferer; Licensed MIT */
4 | !function(a){"function"==typeof define&&define.amd?define(["jquery","./jquery.validate.min"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){return function(){function b(a){return a.replace(/<.[^<>]*?>/g," ").replace(/&nbsp;|&#160;/gi," ").replace(/[.(),;:!?%#$'\"_+=\/\-“”’]*/g,"")}a.validator.addMethod("maxWords",function(a,c,d){return this.optional(c)||b(a).match(/\b\w+\b/g).length<=d},a.validator.format("Please enter {0} words or less.")),a.validator.addMethod("minWords",function(a,c,d){return this.optional(c)||b(a).match(/\b\w+\b/g).length>=d},a.validator.format("Please enter at least {0} words.")),a.validator.addMethod("rangeWords",function(a,c,d){var e=b(a),f=/\b\w+\b/g;return this.optional(c)||e.match(f).length>=d[0]&&e.match(f).length<=d[1]},a.validator.format("Please enter between {0} and {1} words."))}(),a.validator.addMethod("accept",function(b,c,d){var e,f,g,h="string"==typeof d?d.replace(/\s/g,""):"image/*",i=this.optional(c);if(i)return i;if("file"===a(c).attr("type")&&(h=h.replace(/[\-\[\]\/\{\}\(\)\+\?\.\\\^\$\|]/g,"\\$&").replace(/,/g,"|").replace(/\/\*/g,"/.*"),c.files&&c.files.length))for(g=new RegExp(".?("+h+")$","i"),e=0;e<c.files.length;e++)if(f=c.files[e],!f.type.match(g))return!1;return!0},a.validator.format("Please enter a value with a valid mimetype.")),a.validator.addMethod("alphanumeric",function(a,b){return this.optional(b)||/^\w+$/i.test(a)},"Letters, numbers, and underscores only please"),a.validator.addMethod("bankaccountNL",function(a,b){if(this.optional(b))return!0;if(!/^[0-9]{9}|([0-9]{2} ){3}[0-9]{3}$/.test(a))return!1;var c,d,e,f=a.replace(/ /g,""),g=0,h=f.length;for(c=0;c<h;c++)d=h-c,e=f.substring(c,c+1),g+=d*e;return g%11===0},"Please specify a valid bank account number"),a.validator.addMethod("bankorgiroaccountNL",function(b,c){return this.optional(c)||a.validator.methods.bankaccountNL.call(this,b,c)||a.validator.methods.giroaccountNL.call(this,b,c)},"Please specify a valid bank or giro account number"),a.validator.addMethod("bic",function(a,b){return this.optional(b)||/^([A-Z]{6}[A-Z2-9][A-NP-Z1-9])(X{3}|[A-WY-Z0-9][A-Z0-9]{2})?$/.test(a.toUpperCase())},"Please specify a valid BIC code"),a.validator.addMethod("cifES",function(a,b){"use strict";function c(a){return a%2===0}if(this.optional(b))return!0;var d,e,f,g,h=new RegExp(/^([ABCDEFGHJKLMNPQRSUVW])(\d{7})([0-9A-J])$/gi),i=a.substring(0,1),j=a.substring(1,8),k=a.substring(8,9),l=0,m=0,n=0;if(9!==a.length||!h.test(a))return!1;for(d=0;d<j.length;d++)e=parseInt(j[d],10),c(d)?(e*=2,n+=e<10?e:e-9):m+=e;return l=m+n,f=(10-l.toString().substr(-1)).toString(),f=parseInt(f,10)>9?"0":f,g="JABCDEFGHI".substr(f,1).toString(),i.match(/[ABEH]/)?k===f:i.match(/[KPQS]/)?k===g:k===f||k===g},"Please specify a valid CIF number."),a.validator.addMethod("cpfBR",function(a){if(a=a.replace(/([~!@#$%^&*()_+=`{}\[\]\-|\\:;'<>,.\/? ])+/g,""),11!==a.length)return!1;var b,c,d,e,f=0;if(b=parseInt(a.substring(9,10),10),c=parseInt(a.substring(10,11),10),d=function(a,b){var c=10*a%11;return 10!==c&&11!==c||(c=0),c===b},""===a||"00000000000"===a||"11111111111"===a||"22222222222"===a||"33333333333"===a||"44444444444"===a||"55555555555"===a||"66666666666"===a||"77777777777"===a||"88888888888"===a||"99999999999"===a)return!1;for(e=1;e<=9;e++)f+=parseInt(a.substring(e-1,e),10)*(11-e);if(d(f,b)){for(f=0,e=1;e<=10;e++)f+=parseInt(a.substring(e-1,e),10)*(12-e);return d(f,c)}return!1},"Please specify a valid CPF number"),a.validator.addMethod("creditcard",function(a,b){if(this.optional(b))return"dependency-mismatch";if(/[^0-9 \-]+/.test(a))return!1;var c,d,e=0,f=0,g=!1;if(a=a.replace(/\D/g,""),a.length<13||a.length>19)return!1;for(c=a.length-1;c>=0;c--)d=a.charAt(c),f=parseInt(d,10),g&&(f*=2)>9&&(f-=9),e+=f,g=!g;return e%10===0},"Please enter a valid credit card number."),a.validator.addMethod("creditcardtypes",function(a,b,c){if(/[^0-9\-]+/.test(a))return!1;a=a.replace(/\D/g,"");var d=0;return c.mastercard&&(d|=1),c.visa&&(d|=2),c.amex&&(d|=4),c.dinersclub&&(d|=8),c.enroute&&(d|=16),c.discover&&(d|=32),c.jcb&&(d|=64),c.unknown&&(d|=128),c.all&&(d=255),1&d&&/^(5[12345])/.test(a)?16===a.length:2&d&&/^(4)/.test(a)?16===a.length:4&d&&/^(3[47])/.test(a)?15===a.length:8&d&&/^(3(0[012345]|[68]))/.test(a)?14===a.length:16&d&&/^(2(014|149))/.test(a)?15===a.length:32&d&&/^(6011)/.test(a)?16===a.length:64&d&&/^(3)/.test(a)?16===a.length:64&d&&/^(2131|1800)/.test(a)?15===a.length:!!(128&d)},"Please enter a valid credit card number."),a.validator.addMethod("currency",function(a,b,c){var d,e="string"==typeof c,f=e?c:c[0],g=!!e||c[1];return f=f.replace(/,/g,""),f=g?f+"]":f+"]?",d="^["+f+"([1-9]{1}[0-9]{0,2}(\\,[0-9]{3})*(\\.[0-9]{0,2})?|[1-9]{1}[0-9]{0,}(\\.[0-9]{0,2})?|0(\\.[0-9]{0,2})?|(\\.[0-9]{1,2})?)$",d=new RegExp(d),this.optional(b)||d.test(a)},"Please specify a valid currency"),a.validator.addMethod("dateFA",function(a,b){return this.optional(b)||/^[1-4]\d{3}\/((0?[1-6]\/((3[0-1])|([1-2][0-9])|(0?[1-9])))|((1[0-2]|(0?[7-9]))\/(30|([1-2][0-9])|(0?[1-9]))))$/.test(a)},a.validator.messages.date),a.validator.addMethod("dateITA",function(a,b){var c,d,e,f,g,h=!1,i=/^\d{1,2}\/\d{1,2}\/\d{4}$/;return i.test(a)?(c=a.split("/"),d=parseInt(c[0],10),e=parseInt(c[1],10),f=parseInt(c[2],10),g=new Date(Date.UTC(f,e-1,d,12,0,0,0)),h=g.getUTCFullYear()===f&&g.getUTCMonth()===e-1&&g.getUTCDate()===d):h=!1,this.optional(b)||h},a.validator.messages.date),a.validator.addMethod("dateNL",function(a,b){return this.optional(b)||/^(0?[1-9]|[12]\d|3[01])[\.\/\-](0?[1-9]|1[012])[\.\/\-]([12]\d)?(\d\d)$/.test(a)},a.validator.messages.date),a.validator.addMethod("extension",function(a,b,c){return c="string"==typeof c?c.replace(/,/g,"|"):"png|jpe?g|gif",this.optional(b)||a.match(new RegExp("\\.("+c+")$","i"))},a.validator.format("Please enter a value with a valid extension.")),a.validator.addMethod("giroaccountNL",function(a,b){return this.optional(b)||/^[0-9]{1,7}$/.test(a)},"Please specify a valid giro account number"),a.validator.addMethod("iban",function(a,b){if(this.optional(b))return!0;var c,d,e,f,g,h,i,j,k,l=a.replace(/ /g,"").toUpperCase(),m="",n=!0,o="",p="",q=5;if(l.length<q)return!1;if(c=l.substring(0,2),h={AL:"\\d{8}[\\dA-Z]{16}",AD:"\\d{8}[\\dA-Z]{12}",AT:"\\d{16}",AZ:"[\\dA-Z]{4}\\d{20}",BE:"\\d{12}",BH:"[A-Z]{4}[\\dA-Z]{14}",BA:"\\d{16}",BR:"\\d{23}[A-Z][\\dA-Z]",BG:"[A-Z]{4}\\d{6}[\\dA-Z]{8}",CR:"\\d{17}",HR:"\\d{17}",CY:"\\d{8}[\\dA-Z]{16}",CZ:"\\d{20}",DK:"\\d{14}",DO:"[A-Z]{4}\\d{20}",EE:"\\d{16}",FO:"\\d{14}",FI:"\\d{14}",FR:"\\d{10}[\\dA-Z]{11}\\d{2}",GE:"[\\dA-Z]{2}\\d{16}",DE:"\\d{18}",GI:"[A-Z]{4}[\\dA-Z]{15}",GR:"\\d{7}[\\dA-Z]{16}",GL:"\\d{14}",GT:"[\\dA-Z]{4}[\\dA-Z]{20}",HU:"\\d{24}",IS:"\\d{22}",IE:"[\\dA-Z]{4}\\d{14}",IL:"\\d{19}",IT:"[A-Z]\\d{10}[\\dA-Z]{12}",KZ:"\\d{3}[\\dA-Z]{13}",KW:"[A-Z]{4}[\\dA-Z]{22}",LV:"[A-Z]{4}[\\dA-Z]{13}",LB:"\\d{4}[\\dA-Z]{20}",LI:"\\d{5}[\\dA-Z]{12}",LT:"\\d{16}",LU:"\\d{3}[\\dA-Z]{13}",MK:"\\d{3}[\\dA-Z]{10}\\d{2}",MT:"[A-Z]{4}\\d{5}[\\dA-Z]{18}",MR:"\\d{23}",MU:"[A-Z]{4}\\d{19}[A-Z]{3}",MC:"\\d{10}[\\dA-Z]{11}\\d{2}",MD:"[\\dA-Z]{2}\\d{18}",ME:"\\d{18}",NL:"[A-Z]{4}\\d{10}",NO:"\\d{11}",PK:"[\\dA-Z]{4}\\d{16}",PS:"[\\dA-Z]{4}\\d{21}",PL:"\\d{24}",PT:"\\d{21}",RO:"[A-Z]{4}[\\dA-Z]{16}",SM:"[A-Z]\\d{10}[\\dA-Z]{12}",SA:"\\d{2}[\\dA-Z]{18}",RS:"\\d{18}",SK:"\\d{20}",SI:"\\d{15}",ES:"\\d{20}",SE:"\\d{20}",CH:"\\d{5}[\\dA-Z]{12}",TN:"\\d{20}",TR:"\\d{5}[\\dA-Z]{17}",AE:"\\d{3}\\d{16}",GB:"[A-Z]{4}\\d{14}",VG:"[\\dA-Z]{4}\\d{16}"},g=h[c],"undefined"!=typeof g&&(i=new RegExp("^[A-Z]{2}\\d{2}"+g+"$",""),!i.test(l)))return!1;for(d=l.substring(4,l.length)+l.substring(0,4),j=0;j<d.length;j++)e=d.charAt(j),"0"!==e&&(n=!1),n||(m+="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ".indexOf(e));for(k=0;k<m.length;k++)f=m.charAt(k),p=""+o+f,o=p%97;return 1===o},"Please specify a valid IBAN"),a.validator.addMethod("integer",function(a,b){return this.optional(b)||/^-?\d+$/.test(a)},"A positive or negative non-decimal number please"),a.validator.addMethod("ipv4",function(a,b){return this.optional(b)||/^(25[0-5]|2[0-4]\d|[01]?\d\d?)\.(25[0-5]|2[0-4]\d|[01]?\d\d?)\.(25[0-5]|2[0-4]\d|[01]?\d\d?)\.(25[0-5]|2[0-4]\d|[01]?\d\d?)$/i.test(a)},"Please enter a valid IP v4 address."),a.validator.addMethod("ipv6",function(a,b){return this.optional(b)||/^((([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}:[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){5}:([0-9A-Fa-f]{1,4}:)?[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){4}:([0-9A-Fa-f]{1,4}:){0,2}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){3}:([0-9A-Fa-f]{1,4}:){0,3}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){2}:([0-9A-Fa-f]{1,4}:){0,4}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(([0-9A-Fa-f]{1,4}:){0,5}:((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(::([0-9A-Fa-f]{1,4}:){0,5}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|([0-9A-Fa-f]{1,4}::([0-9A-Fa-f]{1,4}:){0,5}[0-9A-Fa-f]{1,4})|(::([0-9A-Fa-f]{1,4}:){0,6}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){1,7}:))$/i.test(a)},"Please enter a valid IP v6 address."),a.validator.addMethod("lettersonly",function(a,b){return this.optional(b)||/^[a-z]+$/i.test(a)},"Letters only please"),a.validator.addMethod("letterswithbasicpunc",function(a,b){return this.optional(b)||/^[a-z\-.,()'"\s]+$/i.test(a)},"Letters or punctuation only please"),a.validator.addMethod("mobileNL",function(a,b){return this.optional(b)||/^((\+|00(\s|\s?\-\s?)?)31(\s|\s?\-\s?)?(\(0\)[\-\s]?)?|0)6((\s|\s?\-\s?)?[0-9]){8}$/.test(a)},"Please specify a valid mobile number"),a.validator.addMethod("mobileUK",function(a,b){return a=a.replace(/\(|\)|\s+|-/g,""),this.optional(b)||a.length>9&&a.match(/^(?:(?:(?:00\s?|\+)44\s?|0)7(?:[1345789]\d{2}|624)\s?\d{3}\s?\d{3})$/)},"Please specify a valid mobile number"),a.validator.addMethod("netmask",function(a,b){return this.optional(b)||/^(254|252|248|240|224|192|128)\.0\.0\.0|255\.(254|252|248|240|224|192|128|0)\.0\.0|255\.255\.(254|252|248|240|224|192|128|0)\.0|255\.255\.255\.(254|252|248|240|224|192|128|0)/i.test(a)},"Please enter a valid netmask."),a.validator.addMethod("nieES",function(a,b){"use strict";if(this.optional(b))return!0;var c,d=new RegExp(/^[MXYZ]{1}[0-9]{7,8}[TRWAGMYFPDXBNJZSQVHLCKET]{1}$/gi),e="TRWAGMYFPDXBNJZSQVHLCKET",f=a.substr(a.length-1).toUpperCase();return a=a.toString().toUpperCase(),!(a.length>10||a.length<9||!d.test(a))&&(a=a.replace(/^[X]/,"0").replace(/^[Y]/,"1").replace(/^[Z]/,"2"),c=9===a.length?a.substr(0,8):a.substr(0,9),e.charAt(parseInt(c,10)%23)===f)},"Please specify a valid NIE number."),a.validator.addMethod("nifES",function(a,b){"use strict";return!!this.optional(b)||(a=a.toUpperCase(),!!a.match("((^[A-Z]{1}[0-9]{7}[A-Z0-9]{1}$|^[T]{1}[A-Z0-9]{8}$)|^[0-9]{8}[A-Z]{1}$)")&&(/^[0-9]{8}[A-Z]{1}$/.test(a)?"TRWAGMYFPDXBNJZSQVHLCKE".charAt(a.substring(8,0)%23)===a.charAt(8):!!/^[KLM]{1}/.test(a)&&a[8]==="TRWAGMYFPDXBNJZSQVHLCKE".charAt(a.substring(8,1)%23)))},"Please specify a valid NIF number."),a.validator.addMethod("nipPL",function(a){"use strict";if(a=a.replace(/[^0-9]/g,""),10!==a.length)return!1;for(var b=[6,5,7,2,3,4,5,6,7],c=0,d=0;d<9;d++)c+=b[d]*a[d];var e=c%11,f=10===e?0:e;return f===parseInt(a[9],10)},"Please specify a valid NIP number."),a.validator.addMethod("notEqualTo",function(b,c,d){return this.optional(c)||!a.validator.methods.equalTo.call(this,b,c,d)},"Please enter a different value, values must not be the same."),a.validator.addMethod("nowhitespace",function(a,b){return this.optional(b)||/^\S+$/i.test(a)},"No white space please"),a.validator.addMethod("pattern",function(a,b,c){return!!this.optional(b)||("string"==typeof c&&(c=new RegExp("^(?:"+c+")$")),c.test(a))},"Invalid format."),a.validator.addMethod("phoneNL",function(a,b){return this.optional(b)||/^((\+|00(\s|\s?\-\s?)?)31(\s|\s?\-\s?)?(\(0\)[\-\s]?)?|0)[1-9]((\s|\s?\-\s?)?[0-9]){8}$/.test(a)},"Please specify a valid phone number."),a.validator.addMethod("phonesUK",function(a,b){return a=a.replace(/\(|\)|\s+|-/g,""),this.optional(b)||a.length>9&&a.match(/^(?:(?:(?:00\s?|\+)44\s?|0)(?:1\d{8,9}|[23]\d{9}|7(?:[1345789]\d{8}|624\d{6})))$/)},"Please specify a valid uk phone number"),a.validator.addMethod("phoneUK",function(a,b){return a=a.replace(/\(|\)|\s+|-/g,""),this.optional(b)||a.length>9&&a.match(/^(?:(?:(?:00\s?|\+)44\s?)|(?:\(?0))(?:\d{2}\)?\s?\d{4}\s?\d{4}|\d{3}\)?\s?\d{3}\s?\d{3,4}|\d{4}\)?\s?(?:\d{5}|\d{3}\s?\d{3})|\d{5}\)?\s?\d{4,5})$/)},"Please specify a valid phone number"),a.validator.addMethod("phoneUS",function(a,b){return a=a.replace(/\s+/g,""),this.optional(b)||a.length>9&&a.match(/^(\+?1-?)?(\([2-9]([02-9]\d|1[02-9])\)|[2-9]([02-9]\d|1[02-9]))-?[2-9]([02-9]\d|1[02-9])-?\d{4}$/)},"Please specify a valid phone number"),a.validator.addMethod("postalcodeBR",function(a,b){return this.optional(b)||/^\d{2}.\d{3}-\d{3}?$|^\d{5}-?\d{3}?$/.test(a)},"Informe um CEP válido."),a.validator.addMethod("postalCodeCA",function(a,b){return this.optional(b)||/^[ABCEGHJKLMNPRSTVXY]\d[ABCEGHJKLMNPRSTVWXYZ] *\d[ABCEGHJKLMNPRSTVWXYZ]\d$/i.test(a)},"Please specify a valid postal code"),a.validator.addMethod("postalcodeIT",function(a,b){return this.optional(b)||/^\d{5}$/.test(a)},"Please specify a valid postal code"),a.validator.addMethod("postalcodeNL",function(a,b){return this.optional(b)||/^[1-9][0-9]{3}\s?[a-zA-Z]{2}$/.test(a)},"Please specify a valid postal code"),a.validator.addMethod("postcodeUK",function(a,b){return this.optional(b)||/^((([A-PR-UWYZ][0-9])|([A-PR-UWYZ][0-9][0-9])|([A-PR-UWYZ][A-HK-Y][0-9])|([A-PR-UWYZ][A-HK-Y][0-9][0-9])|([A-PR-UWYZ][0-9][A-HJKSTUW])|([A-PR-UWYZ][A-HK-Y][0-9][ABEHMNPRVWXY]))\s?([0-9][ABD-HJLNP-UW-Z]{2})|(GIR)\s?(0AA))$/i.test(a)},"Please specify a valid UK postcode"),a.validator.addMethod("require_from_group",function(b,c,d){var e=a(d[1],c.form),f=e.eq(0),g=f.data("valid_req_grp")?f.data("valid_req_grp"):a.extend({},this),h=e.filter(function(){return g.elementValue(this)}).length>=d[0];return f.data("valid_req_grp",g),a(c).data("being_validated")||(e.data("being_validated",!0),e.each(function(){g.element(this)}),e.data("being_validated",!1)),h},a.validator.format("Please fill at least {0} of these fields.")),a.validator.addMethod("skip_or_fill_minimum",function(b,c,d){var e=a(d[1],c.form),f=e.eq(0),g=f.data("valid_skip")?f.data("valid_skip"):a.extend({},this),h=e.filter(function(){return g.elementValue(this)}).length,i=0===h||h>=d[0];return f.data("valid_skip",g),a(c).data("being_validated")||(e.data("being_validated",!0),e.each(function(){g.element(this)}),e.data("being_validated",!1)),i},a.validator.format("Please either skip these fields or fill at least {0} of them.")),a.validator.addMethod("stateUS",function(a,b,c){var d,e="undefined"==typeof c,f=!e&&"undefined"!=typeof c.caseSensitive&&c.caseSensitive,g=!e&&"undefined"!=typeof c.includeTerritories&&c.includeTerritories,h=!e&&"undefined"!=typeof c.includeMilitary&&c.includeMilitary;return d=g||h?g&&h?"^(A[AEKLPRSZ]|C[AOT]|D[CE]|FL|G[AU]|HI|I[ADLN]|K[SY]|LA|M[ADEINOPST]|N[CDEHJMVY]|O[HKR]|P[AR]|RI|S[CD]|T[NX]|UT|V[AIT]|W[AIVY])$":g?"^(A[KLRSZ]|C[AOT]|D[CE]|FL|G[AU]|HI|I[ADLN]|K[SY]|LA|M[ADEINOPST]|N[CDEHJMVY]|O[HKR]|P[AR]|RI|S[CD]|T[NX]|UT|V[AIT]|W[AIVY])$":"^(A[AEKLPRZ]|C[AOT]|D[CE]|FL|GA|HI|I[ADLN]|K[SY]|LA|M[ADEINOST]|N[CDEHJMVY]|O[HKR]|PA|RI|S[CD]|T[NX]|UT|V[AT]|W[AIVY])$":"^(A[KLRZ]|C[AOT]|D[CE]|FL|GA|HI|I[ADLN]|K[SY]|LA|M[ADEINOST]|N[CDEHJMVY]|O[HKR]|PA|RI|S[CD]|T[NX]|UT|V[AT]|W[AIVY])$",d=f?new RegExp(d):new RegExp(d,"i"),this.optional(b)||d.test(a)},"Please specify a valid state"),a.validator.addMethod("strippedminlength",function(b,c,d){return a(b).text().length>=d},a.validator.format("Please enter at least {0} characters")),a.validator.addMethod("time",function(a,b){return this.optional(b)||/^([01]\d|2[0-3]|[0-9])(:[0-5]\d){1,2}$/.test(a)},"Please enter a valid time, between 00:00 and 23:59"),a.validator.addMethod("time12h",function(a,b){return this.optional(b)||/^((0?[1-9]|1[012])(:[0-5]\d){1,2}(\ ?[AP]M))$/i.test(a)},"Please enter a valid time in 12-hour am/pm format"),a.validator.addMethod("url2",function(a,b){return this.optional(b)||/^(https?|ftp):\/\/(((([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(%[\da-f]{2})|[!\$&'\(\)\*\+,;=]|:)*@)?(((\d|[1-9]\d|1\d\d|2[0-4]\d|25[0-5])\.(\d|[1-9]\d|1\d\d|2[0-4]\d|25[0-5])\.(\d|[1-9]\d|1\d\d|2[0-4]\d|25[0-5])\.(\d|[1-9]\d|1\d\d|2[0-4]\d|25[0-5]))|((([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])*([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])))\.)*(([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])*([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])))\.?)(:\d*)?)(\/((([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(%[\da-f]{2})|[!\$&'\(\)\*\+,;=]|:|@)+(\/(([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(%[\da-f]{2})|[!\$&'\(\)\*\+,;=]|:|@)*)*)?)?(\?((([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(%[\da-f]{2})|[!\$&'\(\)\*\+,;=]|:|@)|[\uE000-\uF8FF]|\/|\?)*)?(#((([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(%[\da-f]{2})|[!\$&'\(\)\*\+,;=]|:|@)|\/|\?)*)?$/i.test(a)},a.validator.messages.url),a.validator.addMethod("vinUS",function(a){if(17!==a.length)return!1;var b,c,d,e,f,g,h=["A","B","C","D","E","F","G","H","J","K","L","M","N","P","R","S","T","U","V","W","X","Y","Z"],i=[1,2,3,4,5,6,7,8,1,2,3,4,5,7,9,2,3,4,5,6,7,8,9],j=[8,7,6,5,4,3,2,10,0,9,8,7,6,5,4,3,2],k=0;for(b=0;b<17;b++){if(e=j[b],d=a.slice(b,b+1),8===b&&(g=d),isNaN(d)){for(c=0;c<h.length;c++)if(d.toUpperCase()===h[c]){d=i[c],d*=e,isNaN(g)&&8===c&&(g=h[c]);break}}else d*=e;k+=d}return f=k%11,10===f&&(f="X"),f===g},"The specified vehicle identification number (VIN) is invalid."),a.validator.addMethod("zipcodeUS",function(a,b){return this.optional(b)||/^\d{5}(-\d{4})?$/.test(a)},"The specified US ZIP Code is invalid"),a.validator.addMethod("ziprange",function(a,b){return this.optional(b)||/^90[2-5]\d\{2\}-\d{4}$/.test(a)},"Your ZIP-code must be in the range 902xx-xxxx to 905xx-xxxx"),a});


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js:
--------------------------------------------------------------------------------
  1 | // Unobtrusive validation support library for jQuery and jQuery Validate
  2 | // Copyright (c) .NET Foundation. All rights reserved.
  3 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
  4 | // @version v3.2.11
  5 | 
  6 | /*jslint white: true, browser: true, onevar: true, undef: true, nomen: true, eqeqeq: true, plusplus: true, bitwise: true, regexp: true, newcap: true, immed: true, strict: false */
  7 | /*global document: false, jQuery: false */
  8 | 
  9 | (function (factory) {
 10 |     if (typeof define === 'function' && define.amd) {
 11 |         // AMD. Register as an anonymous module.
 12 |         define("jquery.validate.unobtrusive", ['jquery-validation'], factory);
 13 |     } else if (typeof module === 'object' && module.exports) {
 14 |         // CommonJS-like environments that support module.exports     
 15 |         module.exports = factory(require('jquery-validation'));
 16 |     } else {
 17 |         // Browser global
 18 |         jQuery.validator.unobtrusive = factory(jQuery);
 19 |     }
 20 | }(function ($) {
 21 |     var $jQval = $.validator,
 22 |         adapters,
 23 |         data_validation = "unobtrusiveValidation";
 24 | 
 25 |     function setValidationValues(options, ruleName, value) {
 26 |         options.rules[ruleName] = value;
 27 |         if (options.message) {
 28 |             options.messages[ruleName] = options.message;
 29 |         }
 30 |     }
 31 | 
 32 |     function splitAndTrim(value) {
 33 |         return value.replace(/^\s+|\s+$/g, "").split(/\s*,\s*/g);
 34 |     }
 35 | 
 36 |     function escapeAttributeValue(value) {
 37 |         // As mentioned on http://api.jquery.com/category/selectors/
 38 |         return value.replace(/([!"#$%&'()*+,./:;<=>?@\[\\\]^`{|}~])/g, "\\$1");
 39 |     }
 40 | 
 41 |     function getModelPrefix(fieldName) {
 42 |         return fieldName.substr(0, fieldName.lastIndexOf(".") + 1);
 43 |     }
 44 | 
 45 |     function appendModelPrefix(value, prefix) {
 46 |         if (value.indexOf("*.") === 0) {
 47 |             value = value.replace("*.", prefix);
 48 |         }
 49 |         return value;
 50 |     }
 51 | 
 52 |     function onError(error, inputElement) {  // 'this' is the form element
 53 |         var container = $(this).find("[data-valmsg-for='" + escapeAttributeValue(inputElement[0].name) + "']"),
 54 |             replaceAttrValue = container.attr("data-valmsg-replace"),
 55 |             replace = replaceAttrValue ? $.parseJSON(replaceAttrValue) !== false : null;
 56 | 
 57 |         container.removeClass("field-validation-valid").addClass("field-validation-error");
 58 |         error.data("unobtrusiveContainer", container);
 59 | 
 60 |         if (replace) {
 61 |             container.empty();
 62 |             error.removeClass("input-validation-error").appendTo(container);
 63 |         }
 64 |         else {
 65 |             error.hide();
 66 |         }
 67 |     }
 68 | 
 69 |     function onErrors(event, validator) {  // 'this' is the form element
 70 |         var container = $(this).find("[data-valmsg-summary=true]"),
 71 |             list = container.find("ul");
 72 | 
 73 |         if (list && list.length && validator.errorList.length) {
 74 |             list.empty();
 75 |             container.addClass("validation-summary-errors").removeClass("validation-summary-valid");
 76 | 
 77 |             $.each(validator.errorList, function () {
 78 |                 $("<li />").html(this.message).appendTo(list);
 79 |             });
 80 |         }
 81 |     }
 82 | 
 83 |     function onSuccess(error) {  // 'this' is the form element
 84 |         var container = error.data("unobtrusiveContainer");
 85 | 
 86 |         if (container) {
 87 |             var replaceAttrValue = container.attr("data-valmsg-replace"),
 88 |                 replace = replaceAttrValue ? $.parseJSON(replaceAttrValue) : null;
 89 | 
 90 |             container.addClass("field-validation-valid").removeClass("field-validation-error");
 91 |             error.removeData("unobtrusiveContainer");
 92 | 
 93 |             if (replace) {
 94 |                 container.empty();
 95 |             }
 96 |         }
 97 |     }
 98 | 
 99 |     function onReset(event) {  // 'this' is the form element
100 |         var $form = $(this),
101 |             key = '__jquery_unobtrusive_validation_form_reset';
102 |         if ($form.data(key)) {
103 |             return;
104 |         }
105 |         // Set a flag that indicates we're currently resetting the form.
106 |         $form.data(key, true);
107 |         try {
108 |             $form.data("validator").resetForm();
109 |         } finally {
110 |             $form.removeData(key);
111 |         }
112 | 
113 |         $form.find(".validation-summary-errors")
114 |             .addClass("validation-summary-valid")
115 |             .removeClass("validation-summary-errors");
116 |         $form.find(".field-validation-error")
117 |             .addClass("field-validation-valid")
118 |             .removeClass("field-validation-error")
119 |             .removeData("unobtrusiveContainer")
120 |             .find(">*")  // If we were using valmsg-replace, get the underlying error
121 |             .removeData("unobtrusiveContainer");
122 |     }
123 | 
124 |     function validationInfo(form) {
125 |         var $form = $(form),
126 |             result = $form.data(data_validation),
127 |             onResetProxy = $.proxy(onReset, form),
128 |             defaultOptions = $jQval.unobtrusive.options || {},
129 |             execInContext = function (name, args) {
130 |                 var func = defaultOptions[name];
131 |                 func && $.isFunction(func) && func.apply(form, args);
132 |             };
133 | 
134 |         if (!result) {
135 |             result = {
136 |                 options: {  // options structure passed to jQuery Validate's validate() method
137 |                     errorClass: defaultOptions.errorClass || "input-validation-error",
138 |                     errorElement: defaultOptions.errorElement || "span",
139 |                     errorPlacement: function () {
140 |                         onError.apply(form, arguments);
141 |                         execInContext("errorPlacement", arguments);
142 |                     },
143 |                     invalidHandler: function () {
144 |                         onErrors.apply(form, arguments);
145 |                         execInContext("invalidHandler", arguments);
146 |                     },
147 |                     messages: {},
148 |                     rules: {},
149 |                     success: function () {
150 |                         onSuccess.apply(form, arguments);
151 |                         execInContext("success", arguments);
152 |                     }
153 |                 },
154 |                 attachValidation: function () {
155 |                     $form
156 |                         .off("reset." + data_validation, onResetProxy)
157 |                         .on("reset." + data_validation, onResetProxy)
158 |                         .validate(this.options);
159 |                 },
160 |                 validate: function () {  // a validation function that is called by unobtrusive Ajax
161 |                     $form.validate();
162 |                     return $form.valid();
163 |                 }
164 |             };
165 |             $form.data(data_validation, result);
166 |         }
167 | 
168 |         return result;
169 |     }
170 | 
171 |     $jQval.unobtrusive = {
172 |         adapters: [],
173 | 
174 |         parseElement: function (element, skipAttach) {
175 |             /// <summary>
176 |             /// Parses a single HTML element for unobtrusive validation attributes.
177 |             /// </summary>
178 |             /// <param name="element" domElement="true">The HTML element to be parsed.</param>
179 |             /// <param name="skipAttach" type="Boolean">[Optional] true to skip attaching the
180 |             /// validation to the form. If parsing just this single element, you should specify true.
181 |             /// If parsing several elements, you should specify false, and manually attach the validation
182 |             /// to the form when you are finished. The default is false.</param>
183 |             var $element = $(element),
184 |                 form = $element.parents("form")[0],
185 |                 valInfo, rules, messages;
186 | 
187 |             if (!form) {  // Cannot do client-side validation without a form
188 |                 return;
189 |             }
190 | 
191 |             valInfo = validationInfo(form);
192 |             valInfo.options.rules[element.name] = rules = {};
193 |             valInfo.options.messages[element.name] = messages = {};
194 | 
195 |             $.each(this.adapters, function () {
196 |                 var prefix = "data-val-" + this.name,
197 |                     message = $element.attr(prefix),
198 |                     paramValues = {};
199 | 
200 |                 if (message !== undefined) {  // Compare against undefined, because an empty message is legal (and falsy)
201 |                     prefix += "-";
202 | 
203 |                     $.each(this.params, function () {
204 |                         paramValues[this] = $element.attr(prefix + this);
205 |                     });
206 | 
207 |                     this.adapt({
208 |                         element: element,
209 |                         form: form,
210 |                         message: message,
211 |                         params: paramValues,
212 |                         rules: rules,
213 |                         messages: messages
214 |                     });
215 |                 }
216 |             });
217 | 
218 |             $.extend(rules, { "__dummy__": true });
219 | 
220 |             if (!skipAttach) {
221 |                 valInfo.attachValidation();
222 |             }
223 |         },
224 | 
225 |         parse: function (selector) {
226 |             /// <summary>
227 |             /// Parses all the HTML elements in the specified selector. It looks for input elements decorated
228 |             /// with the [data-val=true] attribute value and enables validation according to the data-val-*
229 |             /// attribute values.
230 |             /// </summary>
231 |             /// <param name="selector" type="String">Any valid jQuery selector.</param>
232 | 
233 |             // $forms includes all forms in selector's DOM hierarchy (parent, children and self) that have at least one
234 |             // element with data-val=true
235 |             var $selector = $(selector),
236 |                 $forms = $selector.parents()
237 |                     .addBack()
238 |                     .filter("form")
239 |                     .add($selector.find("form"))
240 |                     .has("[data-val=true]");
241 | 
242 |             $selector.find("[data-val=true]").each(function () {
243 |                 $jQval.unobtrusive.parseElement(this, true);
244 |             });
245 | 
246 |             $forms.each(function () {
247 |                 var info = validationInfo(this);
248 |                 if (info) {
249 |                     info.attachValidation();
250 |                 }
251 |             });
252 |         }
253 |     };
254 | 
255 |     adapters = $jQval.unobtrusive.adapters;
256 | 
257 |     adapters.add = function (adapterName, params, fn) {
258 |         /// <summary>Adds a new adapter to convert unobtrusive HTML into a jQuery Validate validation.</summary>
259 |         /// <param name="adapterName" type="String">The name of the adapter to be added. This matches the name used
260 |         /// in the data-val-nnnn HTML attribute (where nnnn is the adapter name).</param>
261 |         /// <param name="params" type="Array" optional="true">[Optional] An array of parameter names (strings) that will
262 |         /// be extracted from the data-val-nnnn-mmmm HTML attributes (where nnnn is the adapter name, and
263 |         /// mmmm is the parameter name).</param>
264 |         /// <param name="fn" type="Function">The function to call, which adapts the values from the HTML
265 |         /// attributes into jQuery Validate rules and/or messages.</param>
266 |         /// <returns type="jQuery.validator.unobtrusive.adapters" />
267 |         if (!fn) {  // Called with no params, just a function
268 |             fn = params;
269 |             params = [];
270 |         }
271 |         this.push({ name: adapterName, params: params, adapt: fn });
272 |         return this;
273 |     };
274 | 
275 |     adapters.addBool = function (adapterName, ruleName) {
276 |         /// <summary>Adds a new adapter to convert unobtrusive HTML into a jQuery Validate validation, where
277 |         /// the jQuery Validate validation rule has no parameter values.</summary>
278 |         /// <param name="adapterName" type="String">The name of the adapter to be added. This matches the name used
279 |         /// in the data-val-nnnn HTML attribute (where nnnn is the adapter name).</param>
280 |         /// <param name="ruleName" type="String" optional="true">[Optional] The name of the jQuery Validate rule. If not provided, the value
281 |         /// of adapterName will be used instead.</param>
282 |         /// <returns type="jQuery.validator.unobtrusive.adapters" />
283 |         return this.add(adapterName, function (options) {
284 |             setValidationValues(options, ruleName || adapterName, true);
285 |         });
286 |     };
287 | 
288 |     adapters.addMinMax = function (adapterName, minRuleName, maxRuleName, minMaxRuleName, minAttribute, maxAttribute) {
289 |         /// <summary>Adds a new adapter to convert unobtrusive HTML into a jQuery Validate validation, where
290 |         /// the jQuery Validate validation has three potential rules (one for min-only, one for max-only, and
291 |         /// one for min-and-max). The HTML parameters are expected to be named -min and -max.</summary>
292 |         /// <param name="adapterName" type="String">The name of the adapter to be added. This matches the name used
293 |         /// in the data-val-nnnn HTML attribute (where nnnn is the adapter name).</param>
294 |         /// <param name="minRuleName" type="String">The name of the jQuery Validate rule to be used when you only
295 |         /// have a minimum value.</param>
296 |         /// <param name="maxRuleName" type="String">The name of the jQuery Validate rule to be used when you only
297 |         /// have a maximum value.</param>
298 |         /// <param name="minMaxRuleName" type="String">The name of the jQuery Validate rule to be used when you
299 |         /// have both a minimum and maximum value.</param>
300 |         /// <param name="minAttribute" type="String" optional="true">[Optional] The name of the HTML attribute that
301 |         /// contains the minimum value. The default is "min".</param>
302 |         /// <param name="maxAttribute" type="String" optional="true">[Optional] The name of the HTML attribute that
303 |         /// contains the maximum value. The default is "max".</param>
304 |         /// <returns type="jQuery.validator.unobtrusive.adapters" />
305 |         return this.add(adapterName, [minAttribute || "min", maxAttribute || "max"], function (options) {
306 |             var min = options.params.min,
307 |                 max = options.params.max;
308 | 
309 |             if (min && max) {
310 |                 setValidationValues(options, minMaxRuleName, [min, max]);
311 |             }
312 |             else if (min) {
313 |                 setValidationValues(options, minRuleName, min);
314 |             }
315 |             else if (max) {
316 |                 setValidationValues(options, maxRuleName, max);
317 |             }
318 |         });
319 |     };
320 | 
321 |     adapters.addSingleVal = function (adapterName, attribute, ruleName) {
322 |         /// <summary>Adds a new adapter to convert unobtrusive HTML into a jQuery Validate validation, where
323 |         /// the jQuery Validate validation rule has a single value.</summary>
324 |         /// <param name="adapterName" type="String">The name of the adapter to be added. This matches the name used
325 |         /// in the data-val-nnnn HTML attribute(where nnnn is the adapter name).</param>
326 |         /// <param name="attribute" type="String">[Optional] The name of the HTML attribute that contains the value.
327 |         /// The default is "val".</param>
328 |         /// <param name="ruleName" type="String" optional="true">[Optional] The name of the jQuery Validate rule. If not provided, the value
329 |         /// of adapterName will be used instead.</param>
330 |         /// <returns type="jQuery.validator.unobtrusive.adapters" />
331 |         return this.add(adapterName, [attribute || "val"], function (options) {
332 |             setValidationValues(options, ruleName || adapterName, options.params[attribute]);
333 |         });
334 |     };
335 | 
336 |     $jQval.addMethod("__dummy__", function (value, element, params) {
337 |         return true;
338 |     });
339 | 
340 |     $jQval.addMethod("regex", function (value, element, params) {
341 |         var match;
342 |         if (this.optional(element)) {
343 |             return true;
344 |         }
345 | 
346 |         match = new RegExp(params).exec(value);
347 |         return (match && (match.index === 0) && (match[0].length === value.length));
348 |     });
349 | 
350 |     $jQval.addMethod("nonalphamin", function (value, element, nonalphamin) {
351 |         var match;
352 |         if (nonalphamin) {
353 |             match = value.match(/\W/g);
354 |             match = match && match.length >= nonalphamin;
355 |         }
356 |         return match;
357 |     });
358 | 
359 |     if ($jQval.methods.extension) {
360 |         adapters.addSingleVal("accept", "mimtype");
361 |         adapters.addSingleVal("extension", "extension");
362 |     } else {
363 |         // for backward compatibility, when the 'extension' validation method does not exist, such as with versions
364 |         // of JQuery Validation plugin prior to 1.10, we should use the 'accept' method for
365 |         // validating the extension, and ignore mime-type validations as they are not supported.
366 |         adapters.addSingleVal("extension", "extension", "accept");
367 |     }
368 | 
369 |     adapters.addSingleVal("regex", "pattern");
370 |     adapters.addBool("creditcard").addBool("date").addBool("digits").addBool("email").addBool("number").addBool("url");
371 |     adapters.addMinMax("length", "minlength", "maxlength", "rangelength").addMinMax("range", "min", "max", "range");
372 |     adapters.addMinMax("minlength", "minlength").addMinMax("maxlength", "minlength", "maxlength");
373 |     adapters.add("equalto", ["other"], function (options) {
374 |         var prefix = getModelPrefix(options.element.name),
375 |             other = options.params.other,
376 |             fullOtherName = appendModelPrefix(other, prefix),
377 |             element = $(options.form).find(":input").filter("[name='" + escapeAttributeValue(fullOtherName) + "']")[0];
378 | 
379 |         setValidationValues(options, "equalTo", element);
380 |     });
381 |     adapters.add("required", function (options) {
382 |         // jQuery Validate equates "required" with "mandatory" for checkbox elements
383 |         if (options.element.tagName.toUpperCase() !== "INPUT" || options.element.type.toUpperCase() !== "CHECKBOX") {
384 |             setValidationValues(options, "required", true);
385 |         }
386 |     });
387 |     adapters.add("remote", ["url", "type", "additionalfields"], function (options) {
388 |         var value = {
389 |             url: options.params.url,
390 |             type: options.params.type || "GET",
391 |             data: {}
392 |         },
393 |             prefix = getModelPrefix(options.element.name);
394 | 
395 |         $.each(splitAndTrim(options.params.additionalfields || options.element.name), function (i, fieldName) {
396 |             var paramName = appendModelPrefix(fieldName, prefix);
397 |             value.data[paramName] = function () {
398 |                 var field = $(options.form).find(":input").filter("[name='" + escapeAttributeValue(paramName) + "']");
399 |                 // For checkboxes and radio buttons, only pick up values from checked fields.
400 |                 if (field.is(":checkbox")) {
401 |                     return field.filter(":checked").val() || field.filter(":hidden").val() || '';
402 |                 }
403 |                 else if (field.is(":radio")) {
404 |                     return field.filter(":checked").val() || '';
405 |                 }
406 |                 return field.val();
407 |             };
408 |         });
409 | 
410 |         setValidationValues(options, "remote", value);
411 |     });
412 |     adapters.add("password", ["min", "nonalphamin", "regex"], function (options) {
413 |         if (options.params.min) {
414 |             setValidationValues(options, "minlength", options.params.min);
415 |         }
416 |         if (options.params.nonalphamin) {
417 |             setValidationValues(options, "nonalphamin", options.params.nonalphamin);
418 |         }
419 |         if (options.params.regex) {
420 |             setValidationValues(options, "regex", options.params.regex);
421 |         }
422 |     });
423 |     adapters.add("fileextensions", ["extensions"], function (options) {
424 |         setValidationValues(options, "extension", options.params.extensions);
425 |     });
426 | 
427 |     $(function () {
428 |         $jQval.unobtrusive.parse(document);
429 |     });
430 | 
431 |     return $jQval.unobtrusive;
432 | }));
433 | 


--------------------------------------------------------------------------------
/TinyTodo.Web/wwwroot/lib/jquery-validation/dist/jquery.validate.min.js:
--------------------------------------------------------------------------------
1 | /*! jQuery Validation Plugin - v1.17.0 - 7/29/2017
2 |  * https://jqueryvalidation.org/
3 |  * Copyright (c) 2017 Jörn Zaefferer; Licensed MIT */
4 | !function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler||c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.submitButton.name).val(a(c.submitButton).val()).appendTo(c.currentForm)),!c.settings.submitHandler||(e=c.settings.submitHandler.call(c,c.currentForm,b),d&&d.remove(),void 0!==e&&e)}return c.settings.debug&&b.preventDefault(),c.cancelSubmit?(c.cancelSubmit=!1,d()):c.form()?c.pendingRequest?(c.formSubmitted=!0,!1):d():(c.focusInvalid(),!1)})),c)},valid:function(){var b,c,d;return a(this[0]).is("form")?b=this.validate().form():(d=[],b=!0,c=a(this[0].form).validate(),this.each(function(){b=c.element(this)&&b,b||(d=d.concat(c.errorList))}),c.errorList=d),b},rules:function(b,c){var d,e,f,g,h,i,j=this[0];if(null!=j&&(!j.form&&j.hasAttribute("contenteditable")&&(j.form=this.closest("form")[0],j.name=this.attr("name")),null!=j.form)){if(b)switch(d=a.data(j.form,"validator").settings,e=d.rules,f=a.validator.staticRules(j),b){case"add":a.extend(f,a.validator.normalizeRule(c)),delete f.messages,e[j.name]=f,c.messages&&(d.messages[j.name]=a.extend(d.messages[j.name],c.messages));break;case"remove":return c?(i={},a.each(c.split(/\s/),function(a,b){i[b]=f[b],delete f[b]}),i):(delete e[j.name],f)}return g=a.validator.normalizeRules(a.extend({},a.validator.classRules(j),a.validator.attributeRules(j),a.validator.dataRules(j),a.validator.staticRules(j)),j),g.required&&(h=g.required,delete g.required,g=a.extend({required:h},g)),g.remote&&(h=g.remote,delete g.remote,g=a.extend(g,{remote:h})),g}}}),a.extend(a.expr.pseudos||a.expr[":"],{blank:function(b){return!a.trim(""+a(b).val())},filled:function(b){var c=a(b).val();return null!==c&&!!a.trim(""+c)},unchecked:function(b){return!a(b).prop("checked")}}),a.validator=function(b,c){this.settings=a.extend(!0,{},a.validator.defaults,b),this.currentForm=c,this.init()},a.validator.format=function(b,c){return 1===arguments.length?function(){var c=a.makeArray(arguments);return c.unshift(b),a.validator.format.apply(this,c)}:void 0===c?b:(arguments.length>2&&c.constructor!==Array&&(c=a.makeArray(arguments).slice(1)),c.constructor!==Array&&(c=[c]),a.each(c,function(a,c){b=b.replace(new RegExp("\\{"+a+"\\}","g"),function(){return c})}),b)},a.extend(a.validator,{defaults:{messages:{},groups:{},rules:{},errorClass:"error",pendingClass:"pending",validClass:"valid",errorElement:"label",focusCleanup:!1,focusInvalid:!0,errorContainer:a([]),errorLabelContainer:a([]),onsubmit:!0,ignore:":hidden",ignoreTitle:!1,onfocusin:function(a){this.lastActive=a,this.settings.focusCleanup&&(this.settings.unhighlight&&this.settings.unhighlight.call(this,a,this.settings.errorClass,this.settings.validClass),this.hideThese(this.errorsFor(a)))},onfocusout:function(a){this.checkable(a)||!(a.name in this.submitted)&&this.optional(a)||this.element(a)},onkeyup:function(b,c){var d=[16,17,18,20,35,36,37,38,39,40,45,144,225];9===c.which&&""===this.elementValue(b)||a.inArray(c.keyCode,d)!==-1||(b.name in this.submitted||b.name in this.invalid)&&this.element(b)},onclick:function(a){a.name in this.submitted?this.element(a):a.parentNode.name in this.submitted&&this.element(a.parentNode)},highlight:function(b,c,d){"radio"===b.type?this.findByName(b.name).addClass(c).removeClass(d):a(b).addClass(c).removeClass(d)},unhighlight:function(b,c,d){"radio"===b.type?this.findByName(b.name).removeClass(c).addClass(d):a(b).removeClass(c).addClass(d)}},setDefaults:function(b){a.extend(a.validator.defaults,b)},messages:{required:"This field is required.",remote:"Please fix this field.",email:"Please enter a valid email address.",url:"Please enter a valid URL.",date:"Please enter a valid date.",dateISO:"Please enter a valid date (ISO).",number:"Please enter a valid number.",digits:"Please enter only digits.",equalTo:"Please enter the same value again.",maxlength:a.validator.format("Please enter no more than {0} characters."),minlength:a.validator.format("Please enter at least {0} characters."),rangelength:a.validator.format("Please enter a value between {0} and {1} characters long."),range:a.validator.format("Please enter a value between {0} and {1}."),max:a.validator.format("Please enter a value less than or equal to {0}."),min:a.validator.format("Please enter a value greater than or equal to {0}."),step:a.validator.format("Please enter a multiple of {0}.")},autoCreateRanges:!1,prototype:{init:function(){function b(b){!this.form&&this.hasAttribute("contenteditable")&&(this.form=a(this).closest("form")[0],this.name=a(this).attr("name"));var c=a.data(this.form,"validator"),d="on"+b.type.replace(/^validate/,""),e=c.settings;e[d]&&!a(this).is(e.ignore)&&e[d].call(c,this,b)}this.labelContainer=a(this.settings.errorLabelContainer),this.errorContext=this.labelContainer.length&&this.labelContainer||a(this.currentForm),this.containers=a(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},this.valueCache={},this.pendingRequest=0,this.pending={},this.invalid={},this.reset();var c,d=this.groups={};a.each(this.settings.groups,function(b,c){"string"==typeof c&&(c=c.split(/\s/)),a.each(c,function(a,c){d[c]=b})}),c=this.settings.rules,a.each(c,function(b,d){c[b]=a.validator.normalizeRule(d)}),a(this.currentForm).on("focusin.validate focusout.validate keyup.validate",":text, [type='password'], [type='file'], select, textarea, [type='number'], [type='search'], [type='tel'], [type='url'], [type='email'], [type='datetime'], [type='date'], [type='month'], [type='week'], [type='time'], [type='datetime-local'], [type='range'], [type='color'], [type='radio'], [type='checkbox'], [contenteditable], [type='button']",b).on("click.validate","select, option, [type='radio'], [type='checkbox']",b),this.settings.invalidHandler&&a(this.currentForm).on("invalid-form.validate",this.settings.invalidHandler)},form:function(){return this.checkForm(),a.extend(this.submitted,this.errorMap),this.invalid=a.extend({},this.errorMap),this.valid()||a(this.currentForm).triggerHandler("invalid-form",[this]),this.showErrors(),this.valid()},checkForm:function(){this.prepareForm();for(var a=0,b=this.currentElements=this.elements();b[a];a++)this.check(b[a]);return this.valid()},element:function(b){var c,d,e=this.clean(b),f=this.validationTargetFor(e),g=this,h=!0;return void 0===f?delete this.invalid[e.name]:(this.prepareElement(f),this.currentElements=a(f),d=this.groups[f.name],d&&a.each(this.groups,function(a,b){b===d&&a!==f.name&&(e=g.validationTargetFor(g.clean(g.findByName(a))),e&&e.name in g.invalid&&(g.currentElements.push(e),h=g.check(e)&&h))}),c=this.check(f)!==!1,h=h&&c,c?this.invalid[f.name]=!1:this.invalid[f.name]=!0,this.numberOfInvalids()||(this.toHide=this.toHide.add(this.containers)),this.showErrors(),a(b).attr("aria-invalid",!c)),h},showErrors:function(b){if(b){var c=this;a.extend(this.errorMap,b),this.errorList=a.map(this.errorMap,function(a,b){return{message:a,element:c.findByName(b)[0]}}),this.successList=a.grep(this.successList,function(a){return!(a.name in b)})}this.settings.showErrors?this.settings.showErrors.call(this,this.errorMap,this.errorList):this.defaultShowErrors()},resetForm:function(){a.fn.resetForm&&a(this.currentForm).resetForm(),this.invalid={},this.submitted={},this.prepareForm(),this.hideErrors();var b=this.elements().removeData("previousValue").removeAttr("aria-invalid");this.resetElements(b)},resetElements:function(a){var b;if(this.settings.unhighlight)for(b=0;a[b];b++)this.settings.unhighlight.call(this,a[b],this.settings.errorClass,""),this.findByName(a[b].name).removeClass(this.settings.validClass);else a.removeClass(this.settings.errorClass).removeClass(this.settings.validClass)},numberOfInvalids:function(){return this.objectLength(this.invalid)},objectLength:function(a){var b,c=0;for(b in a)void 0!==a[b]&&null!==a[b]&&a[b]!==!1&&c++;return c},hideErrors:function(){this.hideThese(this.toHide)},hideThese:function(a){a.not(this.containers).text(""),this.addWrapper(a).hide()},valid:function(){return 0===this.size()},size:function(){return this.errorList.length},focusInvalid:function(){if(this.settings.focusInvalid)try{a(this.findLastActive()||this.errorList.length&&this.errorList[0].element||[]).filter(":visible").focus().trigger("focusin")}catch(b){}},findLastActive:function(){var b=this.lastActive;return b&&1===a.grep(this.errorList,function(a){return a.element.name===b.name}).length&&b},elements:function(){var b=this,c={};return a(this.currentForm).find("input, select, textarea, [contenteditable]").not(":submit, :reset, :image, :disabled").not(this.settings.ignore).filter(function(){var d=this.name||a(this).attr("name");return!d&&b.settings.debug&&window.console&&console.error("%o has no name assigned",this),this.hasAttribute("contenteditable")&&(this.form=a(this).closest("form")[0],this.name=d),!(d in c||!b.objectLength(a(this).rules()))&&(c[d]=!0,!0)})},clean:function(b){return a(b)[0]},errors:function(){var b=this.settings.errorClass.split(" ").join(".");return a(this.settings.errorElement+"."+b,this.errorContext)},resetInternals:function(){this.successList=[],this.errorList=[],this.errorMap={},this.toShow=a([]),this.toHide=a([])},reset:function(){this.resetInternals(),this.currentElements=a([])},prepareForm:function(){this.reset(),this.toHide=this.errors().add(this.containers)},prepareElement:function(a){this.reset(),this.toHide=this.errorsFor(a)},elementValue:function(b){var c,d,e=a(b),f=b.type;return"radio"===f||"checkbox"===f?this.findByName(b.name).filter(":checked").val():"number"===f&&"undefined"!=typeof b.validity?b.validity.badInput?"NaN":e.val():(c=b.hasAttribute("contenteditable")?e.text():e.val(),"file"===f?"C:\\fakepath\\"===c.substr(0,12)?c.substr(12):(d=c.lastIndexOf("/"),d>=0?c.substr(d+1):(d=c.lastIndexOf("\\"),d>=0?c.substr(d+1):c)):"string"==typeof c?c.replace(/\r/g,""):c)},check:function(b){b=this.validationTargetFor(this.clean(b));var c,d,e,f,g=a(b).rules(),h=a.map(g,function(a,b){return b}).length,i=!1,j=this.elementValue(b);if("function"==typeof g.normalizer?f=g.normalizer:"function"==typeof this.settings.normalizer&&(f=this.settings.normalizer),f){if(j=f.call(b,j),"string"!=typeof j)throw new TypeError("The normalizer should return a string value.");delete g.normalizer}for(d in g){e={method:d,parameters:g[d]};try{if(c=a.validator.methods[d].call(this,j,b,e.parameters),"dependency-mismatch"===c&&1===h){i=!0;continue}if(i=!1,"pending"===c)return void(this.toHide=this.toHide.not(this.errorsFor(b)));if(!c)return this.formatAndAdd(b,e),!1}catch(k){throw this.settings.debug&&window.console&&console.log("Exception occurred when checking element "+b.id+", check the '"+e.method+"' method.",k),k instanceof TypeError&&(k.message+=".  Exception occurred when checking element "+b.id+", check the '"+e.method+"' method."),k}}if(!i)return this.objectLength(g)&&this.successList.push(b),!0},customDataMessage:function(b,c){return a(b).data("msg"+c.charAt(0).toUpperCase()+c.substring(1).toLowerCase())||a(b).data("msg")},customMessage:function(a,b){var c=this.settings.messages[a];return c&&(c.constructor===String?c:c[b])},findDefined:function(){for(var a=0;a<arguments.length;a++)if(void 0!==arguments[a])return arguments[a]},defaultMessage:function(b,c){"string"==typeof c&&(c={method:c});var d=this.findDefined(this.customMessage(b.name,c.method),this.customDataMessage(b,c.method),!this.settings.ignoreTitle&&b.title||void 0,a.validator.messages[c.method],"<strong>Warning: No message defined for "+b.name+"</strong>"),e=/\$?\{(\d+)\}/g;return"function"==typeof d?d=d.call(this,c.parameters,b):e.test(d)&&(d=a.validator.format(d.replace(e,"{$1}"),c.parameters)),d},formatAndAdd:function(a,b){var c=this.defaultMessage(a,b);this.errorList.push({message:c,element:a,method:b.method}),this.errorMap[a.name]=c,this.submitted[a.name]=c},addWrapper:function(a){return this.settings.wrapper&&(a=a.add(a.parent(this.settings.wrapper))),a},defaultShowErrors:function(){var a,b,c;for(a=0;this.errorList[a];a++)c=this.errorList[a],this.settings.highlight&&this.settings.highlight.call(this,c.element,this.settings.errorClass,this.settings.validClass),this.showLabel(c.element,c.message);if(this.errorList.length&&(this.toShow=this.toShow.add(this.containers)),this.settings.success)for(a=0;this.successList[a];a++)this.showLabel(this.successList[a]);if(this.settings.unhighlight)for(a=0,b=this.validElements();b[a];a++)this.settings.unhighlight.call(this,b[a],this.settings.errorClass,this.settings.validClass);this.toHide=this.toHide.not(this.toShow),this.hideErrors(),this.addWrapper(this.toShow).show()},validElements:function(){return this.currentElements.not(this.invalidElements())},invalidElements:function(){return a(this.errorList).map(function(){return this.element})},showLabel:function(b,c){var d,e,f,g,h=this.errorsFor(b),i=this.idOrName(b),j=a(b).attr("aria-describedby");h.length?(h.removeClass(this.settings.validClass).addClass(this.settings.errorClass),h.html(c)):(h=a("<"+this.settings.errorElement+">").attr("id",i+"-error").addClass(this.settings.errorClass).html(c||""),d=h,this.settings.wrapper&&(d=h.hide().show().wrap("<"+this.settings.wrapper+"/>").parent()),this.labelContainer.length?this.labelContainer.append(d):this.settings.errorPlacement?this.settings.errorPlacement.call(this,d,a(b)):d.insertAfter(b),h.is("label")?h.attr("for",i):0===h.parents("label[for='"+this.escapeCssMeta(i)+"']").length&&(f=h.attr("id"),j?j.match(new RegExp("\\b"+this.escapeCssMeta(f)+"\\b"))||(j+=" "+f):j=f,a(b).attr("aria-describedby",j),e=this.groups[b.name],e&&(g=this,a.each(g.groups,function(b,c){c===e&&a("[name='"+g.escapeCssMeta(b)+"']",g.currentForm).attr("aria-describedby",h.attr("id"))})))),!c&&this.settings.success&&(h.text(""),"string"==typeof this.settings.success?h.addClass(this.settings.success):this.settings.success(h,b)),this.toShow=this.toShow.add(h)},errorsFor:function(b){var c=this.escapeCssMeta(this.idOrName(b)),d=a(b).attr("aria-describedby"),e="label[for='"+c+"'], label[for='"+c+"'] *";return d&&(e=e+", #"+this.escapeCssMeta(d).replace(/\s+/g,", #")),this.errors().filter(e)},escapeCssMeta:function(a){return a.replace(/([\\!"#$%&'()*+,.\/:;<=>?@\[\]^`{|}~])/g,"\\$1")},idOrName:function(a){return this.groups[a.name]||(this.checkable(a)?a.name:a.id||a.name)},validationTargetFor:function(b){return this.checkable(b)&&(b=this.findByName(b.name)),a(b).not(this.settings.ignore)[0]},checkable:function(a){return/radio|checkbox/i.test(a.type)},findByName:function(b){return a(this.currentForm).find("[name='"+this.escapeCssMeta(b)+"']")},getLength:function(b,c){switch(c.nodeName.toLowerCase()){case"select":return a("option:selected",c).length;case"input":if(this.checkable(c))return this.findByName(c.name).filter(":checked").length}return b.length},depend:function(a,b){return!this.dependTypes[typeof a]||this.dependTypes[typeof a](a,b)},dependTypes:{"boolean":function(a){return a},string:function(b,c){return!!a(b,c.form).length},"function":function(a,b){return a(b)}},optional:function(b){var c=this.elementValue(b);return!a.validator.methods.required.call(this,c,b)&&"dependency-mismatch"},startRequest:function(b){this.pending[b.name]||(this.pendingRequest++,a(b).addClass(this.settings.pendingClass),this.pending[b.name]=!0)},stopRequest:function(b,c){this.pendingRequest--,this.pendingRequest<0&&(this.pendingRequest=0),delete this.pending[b.name],a(b).removeClass(this.settings.pendingClass),c&&0===this.pendingRequest&&this.formSubmitted&&this.form()?(a(this.currentForm).submit(),this.submitButton&&a("input:hidden[name='"+this.submitButton.name+"']",this.currentForm).remove(),this.formSubmitted=!1):!c&&0===this.pendingRequest&&this.formSubmitted&&(a(this.currentForm).triggerHandler("invalid-form",[this]),this.formSubmitted=!1)},previousValue:function(b,c){return c="string"==typeof c&&c||"remote",a.data(b,"previousValue")||a.data(b,"previousValue",{old:null,valid:!0,message:this.defaultMessage(b,{method:c})})},destroy:function(){this.resetForm(),a(this.currentForm).off(".validate").removeData("validator").find(".validate-equalTo-blur").off(".validate-equalTo").removeClass("validate-equalTo-blur")}},classRuleSettings:{required:{required:!0},email:{email:!0},url:{url:!0},date:{date:!0},dateISO:{dateISO:!0},number:{number:!0},digits:{digits:!0},creditcard:{creditcard:!0}},addClassRules:function(b,c){b.constructor===String?this.classRuleSettings[b]=c:a.extend(this.classRuleSettings,b)},classRules:function(b){var c={},d=a(b).attr("class");return d&&a.each(d.split(" "),function(){this in a.validator.classRuleSettings&&a.extend(c,a.validator.classRuleSettings[this])}),c},normalizeAttributeRule:function(a,b,c,d){/min|max|step/.test(c)&&(null===b||/number|range|text/.test(b))&&(d=Number(d),isNaN(d)&&(d=void 0)),d||0===d?a[c]=d:b===c&&"range"!==b&&(a[c]=!0)},attributeRules:function(b){var c,d,e={},f=a(b),g=b.getAttribute("type");for(c in a.validator.methods)"required"===c?(d=b.getAttribute(c),""===d&&(d=!0),d=!!d):d=f.attr(c),this.normalizeAttributeRule(e,g,c,d);return e.maxlength&&/-1|2147483647|524288/.test(e.maxlength)&&delete e.maxlength,e},dataRules:function(b){var c,d,e={},f=a(b),g=b.getAttribute("type");for(c in a.validator.methods)d=f.data("rule"+c.charAt(0).toUpperCase()+c.substring(1).toLowerCase()),this.normalizeAttributeRule(e,g,c,d);return e},staticRules:function(b){var c={},d=a.data(b.form,"validator");return d.settings.rules&&(c=a.validator.normalizeRule(d.settings.rules[b.name])||{}),c},normalizeRules:function(b,c){return a.each(b,function(d,e){if(e===!1)return void delete b[d];if(e.param||e.depends){var f=!0;switch(typeof e.depends){case"string":f=!!a(e.depends,c.form).length;break;case"function":f=e.depends.call(c,c)}f?b[d]=void 0===e.param||e.param:(a.data(c.form,"validator").resetElements(a(c)),delete b[d])}}),a.each(b,function(d,e){b[d]=a.isFunction(e)&&"normalizer"!==d?e(c):e}),a.each(["minlength","maxlength"],function(){b[this]&&(b[this]=Number(b[this]))}),a.each(["rangelength","range"],function(){var c;b[this]&&(a.isArray(b[this])?b[this]=[Number(b[this][0]),Number(b[this][1])]:"string"==typeof b[this]&&(c=b[this].replace(/[\[\]]/g,"").split(/[\s,]+/),b[this]=[Number(c[0]),Number(c[1])]))}),a.validator.autoCreateRanges&&(null!=b.min&&null!=b.max&&(b.range=[b.min,b.max],delete b.min,delete b.max),null!=b.minlength&&null!=b.maxlength&&(b.rangelength=[b.minlength,b.maxlength],delete b.minlength,delete b.maxlength)),b},normalizeRule:function(b){if("string"==typeof b){var c={};a.each(b.split(/\s/),function(){c[this]=!0}),b=c}return b},addMethod:function(b,c,d){a.validator.methods[b]=c,a.validator.messages[b]=void 0!==d?d:a.validator.messages[b],c.length<3&&a.validator.addClassRules(b,a.validator.normalizeRule(b))},methods:{required:function(b,c,d){if(!this.depend(d,c))return"dependency-mismatch";if("select"===c.nodeName.toLowerCase()){var e=a(c).val();return e&&e.length>0}return this.checkable(c)?this.getLength(b,c)>0:b.length>0},email:function(a,b){return this.optional(b)||/^[a-zA-Z0-9.!#$%&'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/.test(a)},url:function(a,b){return this.optional(b)||/^(?:(?:(?:https?|ftp):)?\/\/)(?:\S+(?::\S*)?@)?(?:(?!(?:10|127)(?:\.\d{1,3}){3})(?!(?:169\.254|192\.168)(?:\.\d{1,3}){2})(?!172\.(?:1[6-9]|2\d|3[0-1])(?:\.\d{1,3}){2})(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z\u00a1-\uffff0-9]-*)*[a-z\u00a1-\uffff0-9]+)(?:\.(?:[a-z\u00a1-\uffff0-9]-*)*[a-z\u00a1-\uffff0-9]+)*(?:\.(?:[a-z\u00a1-\uffff]{2,})).?)(?::\d{2,5})?(?:[\/?#]\S*)?$/i.test(a)},date:function(a,b){return this.optional(b)||!/Invalid|NaN/.test(new Date(a).toString())},dateISO:function(a,b){return this.optional(b)||/^\d{4}[\/\-](0?[1-9]|1[012])[\/\-](0?[1-9]|[12][0-9]|3[01])$/.test(a)},number:function(a,b){return this.optional(b)||/^(?:-?\d+|-?\d{1,3}(?:,\d{3})+)?(?:\.\d+)?$/.test(a)},digits:function(a,b){return this.optional(b)||/^\d+$/.test(a)},minlength:function(b,c,d){var e=a.isArray(b)?b.length:this.getLength(b,c);return this.optional(c)||e>=d},maxlength:function(b,c,d){var e=a.isArray(b)?b.length:this.getLength(b,c);return this.optional(c)||e<=d},rangelength:function(b,c,d){var e=a.isArray(b)?b.length:this.getLength(b,c);return this.optional(c)||e>=d[0]&&e<=d[1]},min:function(a,b,c){return this.optional(b)||a>=c},max:function(a,b,c){return this.optional(b)||a<=c},range:function(a,b,c){return this.optional(b)||a>=c[0]&&a<=c[1]},step:function(b,c,d){var e,f=a(c).attr("type"),g="Step attribute on input type "+f+" is not supported.",h=["text","number","range"],i=new RegExp("\\b"+f+"\\b"),j=f&&!i.test(h.join()),k=function(a){var b=(""+a).match(/(?:\.(\d+))?$/);return b&&b[1]?b[1].length:0},l=function(a){return Math.round(a*Math.pow(10,e))},m=!0;if(j)throw new Error(g);return e=k(d),(k(b)>e||l(b)%l(d)!==0)&&(m=!1),this.optional(c)||m},equalTo:function(b,c,d){var e=a(d);return this.settings.onfocusout&&e.not(".validate-equalTo-blur").length&&e.addClass("validate-equalTo-blur").on("blur.validate-equalTo",function(){a(c).valid()}),b===e.val()},remote:function(b,c,d,e){if(this.optional(c))return"dependency-mismatch";e="string"==typeof e&&e||"remote";var f,g,h,i=this.previousValue(c,e);return this.settings.messages[c.name]||(this.settings.messages[c.name]={}),i.originalMessage=i.originalMessage||this.settings.messages[c.name][e],this.settings.messages[c.name][e]=i.message,d="string"==typeof d&&{url:d}||d,h=a.param(a.extend({data:b},d.data)),i.old===h?i.valid:(i.old=h,f=this,this.startRequest(c),g={},g[c.name]=b,a.ajax(a.extend(!0,{mode:"abort",port:"validate"+c.name,dataType:"json",data:g,context:f.currentForm,success:function(a){var d,g,h,j=a===!0||"true"===a;f.settings.messages[c.name][e]=i.originalMessage,j?(h=f.formSubmitted,f.resetInternals(),f.toHide=f.errorsFor(c),f.formSubmitted=h,f.successList.push(c),f.invalid[c.name]=!1,f.showErrors()):(d={},g=a||f.defaultMessage(c,{method:e,parameters:b}),d[c.name]=i.message=g,f.invalid[c.name]=!0,f.showErrors(d)),i.valid=j,f.stopRequest(c,j)}},d)),"pending")}}});var b,c={};return a.ajaxPrefilter?a.ajaxPrefilter(function(a,b,d){var e=a.port;"abort"===a.mode&&(c[e]&&c[e].abort(),c[e]=d)}):(b=a.ajax,a.ajax=function(d){var e=("mode"in d?d:a.ajaxSettings).mode,f=("port"in d?d:a.ajaxSettings).port;return"abort"===e?(c[f]&&c[f].abort(),c[f]=b.apply(this,arguments),c[f]):b.apply(this,arguments)}),a});


--------------------------------------------------------------------------------