From e5d4d4ad00d43bf1c1e9b19745329e212816b6cb Mon Sep 17 00:00:00 2001
From: Ike <137194738+ike-kottlowski@users.noreply.github.com>
Date: Wed, 14 Feb 2024 09:06:04 -0800
Subject: [PATCH] [PM-4612] [PM-6218] [PM-6219] Enable Duo redirect on Desktop
 Client (#7798)

* enable duo for desktop

* added missing return path in main.ts

* updated logic in component

* removed switch added await; updated logic in main.

* addressed subscription concerns in main; updated formatting in 2fa component

* Update Duo case in locales
---
 apps/browser/src/_locales/en/messages.json    |   6 +-
 .../src/auth/two-factor.component.html        | 325 ++++++++++--------
 apps/desktop/src/auth/two-factor.component.ts |  29 +-
 apps/desktop/src/images/yubikey.avif          | Bin 0 -> 5340 bytes
 apps/desktop/src/images/yubikey.webp          | Bin 0 -> 12884 bytes
 apps/desktop/src/locales/en/messages.json     |   9 +
 apps/desktop/src/main.ts                      |  19 +-
 apps/web/src/locales/en/messages.json         |   6 +-
 8 files changed, 234 insertions(+), 160 deletions(-)
 create mode 100644 apps/desktop/src/images/yubikey.avif
 create mode 100644 apps/desktop/src/images/yubikey.webp

diff --git a/apps/browser/src/_locales/en/messages.json b/apps/browser/src/_locales/en/messages.json
index 988c9b0a247..31b02def8a9 100644
--- a/apps/browser/src/_locales/en/messages.json
+++ b/apps/browser/src/_locales/en/messages.json
@@ -2696,10 +2696,10 @@
     }
   },
   "launchDuoAndFollowStepsToFinishLoggingIn": {
-    "message": "Launch DUO and follow the steps to finish logging in."
+    "message": "Launch Duo and follow the steps to finish logging in."
   },
   "duoRequiredByOrgForAccount": {
-    "message": "DUO two-step login is required for your account."
+    "message": "Duo two-step login is required for your account."
   },
   "openExtensionInNewWindowToCompleteLogin": {
     "message": "Open the extension in a new window to complete login"
@@ -2708,7 +2708,7 @@
     "message": "Popout extension"
   },
   "launchDuo": {
-    "message": "Launch DUO"
+    "message": "Launch Duo"
   },
   "importFormatError": {
     "message": "Data is not formatted correctly. Please check your import file and try again."
diff --git a/apps/desktop/src/auth/two-factor.component.html b/apps/desktop/src/auth/two-factor.component.html
index 44c4b1b60f6..afd866e1d54 100644
--- a/apps/desktop/src/auth/two-factor.component.html
+++ b/apps/desktop/src/auth/two-factor.component.html
@@ -1,157 +1,186 @@
-<form
-  id="two-factor-page"
-  #form
-  (ngSubmit)="submit()"
-  [appApiAction]="formPromise"
-  attr.aria-hidden="{{ showingModal }}"
->
-  <div id="content" class="content">
-    <h1>{{ title }}</h1>
-    <p *ngIf="selectedProviderType === providerType.Authenticator">
-      {{ "enterVerificationCodeApp" | i18n }}
-    </p>
-    <p *ngIf="selectedProviderType === providerType.Email">
-      {{ "enterVerificationCodeEmail" | i18n: twoFactorEmail }}
-    </p>
-    <div
-      class="box last"
-      *ngIf="
-        selectedProviderType === providerType.Email ||
-        selectedProviderType === providerType.Authenticator
-      "
-    >
-      <div class="box-content">
-        <div class="box-content-row" appBoxRow>
-          <label for="code">{{ "verificationCode" | i18n }}</label>
+<div class="page-top-padding">
+  <form
+    #form
+    (ngSubmit)="submit()"
+    [appApiAction]="formPromise"
+    class="container"
+    autocomplete="off"
+    id="two-factor-page"
+    attr.aria-hidden="{{ showingModal }}"
+  >
+    <div id="content" class="content tw-mt-5">
+      <img class="logo-image" alt="Bitwarden" />
+      <p class="lead text-center mb-4">{{ title }}</p>
+      <!-- Providers -->
+      <div class="box last">
+        <!-- Authenticator / Email TOTP -->
+        <ng-container
+          *ngIf="
+            selectedProviderType === providerType.Email ||
+            selectedProviderType === providerType.Authenticator
+          "
+        >
+          <p *ngIf="selectedProviderType === providerType.Authenticator">
+            {{ "enterVerificationCodeApp" | i18n }}
+          </p>
+          <p *ngIf="selectedProviderType === providerType.Email">
+            {{ "enterVerificationCodeEmail" | i18n: twoFactorEmail }}
+          </p>
+          <div class="box-content">
+            <div class="box-content-row" appBoxRow>
+              <label for="code">{{ "verificationCode" | i18n }}</label>
+              <input
+                id="code"
+                type="text"
+                name="Code"
+                [(ngModel)]="token"
+                required
+                appAutofocus
+                appInputVerbatim
+              />
+            </div>
+          </div>
+          <small class="form-text" *ngIf="selectedProviderType === providerType.Email">
+            <a
+              href="#"
+              appStopClick
+              (click)="sendEmail(true)"
+              [appApiAction]="emailPromise"
+              *ngIf="selectedProviderType === providerType.Email"
+            >
+              {{ "sendVerificationCodeEmailAgain" | i18n }}
+            </a>
+          </small>
+        </ng-container>
+
+        <!-- Yubikey -->
+        <ng-container *ngIf="selectedProviderType === providerType.Yubikey">
+          <p>{{ "insertYubiKey" | i18n }}</p>
+          <picture>
+            <source srcset="images/yubikey.avif" type="image/avif" />
+            <source srcset="images/yubikey.webp" type="image/webp" />
+            <img src="images/yubikey.jpg" class="rounded img-fluid mb-3" alt="" />
+          </picture>
+          <div class="box last">
+            <div class="box-content">
+              <div class="box-content-row" appBoxRow>
+                <label for="code" class="sr-only">{{ "verificationCode" | i18n }}</label>
+                <input
+                  id="code"
+                  type="password"
+                  name="Code"
+                  [(ngModel)]="token"
+                  required
+                  appAutofocus
+                  appInputVerbatim
+                />
+              </div>
+            </div>
+          </div>
+        </ng-container>
+
+        <!-- WebAuthn -->
+        <ng-container *ngIf="selectedProviderType === providerType.WebAuthn">
+          <div class="tw-flex tw-justify-center">
+            <div id="web-authn-frame">
+              <iframe id="webauthn_iframe" sandbox="allow-scripts allow-same-origin"></iframe>
+            </div>
+          </div>
+        </ng-container>
+
+        <!-- Duo -->
+        <ng-container *ngIf="isDuoProvider">
+          <ng-container *ngIf="duoFrameless">
+            <div>
+              <span *ngIf="selectedProviderType === providerType.OrganizationDuo" class="tw-mb-0">
+                {{ "duoRequiredByOrgForAccount" | i18n }}
+              </span>
+              {{ "launchDuoAndFollowStepsToFinishLoggingIn" | i18n }}
+            </div>
+          </ng-container>
+          <ng-container id="duo-frame" *ngIf="!duoFrameless">
+            <iframe
+              id="duo_iframe"
+              sandbox="allow-scripts allow-forms allow-same-origin allow-popups allow-popups-to-escape-sandbox"
+            ></iframe>
+          </ng-container>
+        </ng-container>
+      </div>
+
+      <div class="box last" *ngIf="selectedProviderType == null">
+        <div class="box-content">
+          <div class="box-content-row">
+            <p>{{ "noTwoStepProviders" | i18n }}</p>
+            <p>{{ "noTwoStepProviders2" | i18n }}</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="box last" [hidden]="!showCaptcha()">
+        <div class="box-content">
+          <div class="box-content-row">
+            <iframe
+              id="hcaptcha_iframe"
+              height="80"
+              sandbox="allow-scripts allow-same-origin"
+            ></iframe>
+            <button class="btn block" type="button" routerLink="/accessibility-cookie">
+              <i class="bwi bwi-universal-access" aria-hidden="true"></i>
+              {{ "loadAccessibilityCookie" | i18n }}
+            </button>
+          </div>
+        </div>
+      </div>
+
+      <!-- Remember me -->
+      <div class="checkbox tw-mb-2">
+        <label for="remember" class="flex align-items-center flex-fill">
           <input
-            id="code"
-            type="text"
-            name="Code"
-            [(ngModel)]="token"
-            required
-            appAutofocus
-            appInputVerbatim
+            id="remember"
+            type="checkbox"
+            name="Remember"
+            class="tw-mr-2"
+            [(ngModel)]="remember"
           />
+          {{ "rememberMe" | i18n }}
+        </label>
+      </div>
+
+      <!-- Submit Buttons -->
+      <div class="buttons with-rows">
+        <div
+          class="buttons-row"
+          *ngIf="duoFrameless && selectedProviderType != null && isDuoProvider"
+        >
+          <button
+            (click)="launchDuoFrameless()"
+            type="button"
+            class="btn primary block"
+            [disabled]="form.loading"
+          >
+            <b> {{ "launchDuo" | i18n }} </b>
+          </button>
         </div>
-        <div class="box-content-row box-content-row-checkbox" appBoxRow>
-          <label for="remember">{{ "rememberMe" | i18n }}</label>
-          <input id="remember" type="checkbox" name="Remember" [(ngModel)]="remember" />
+        <div class="buttons-row" *ngIf="selectedProviderType != null && !isDuoProvider">
+          <button type="submit" class="btn primary block" [disabled]="form.loading">
+            <span [hidden]="form.loading"
+              ><i class="bwi bwi-sign-in" aria-hidden="true"></i> {{ "continue" | i18n }}</span
+            >
+            <i class="bwi bwi-spinner bwi-spin" [hidden]="!form.loading" aria-hidden="true"></i>
+          </button>
         </div>
-      </div>
-    </div>
-    <ng-container *ngIf="selectedProviderType === providerType.Yubikey">
-      <p>{{ "insertYubiKey" | i18n }}</p>
-      <img src="../../images/yubikey.jpg" alt="" />
-      <div class="box last">
-        <div class="box-content">
-          <div class="box-content-row" appBoxRow>
-            <label for="code" class="sr-only">{{ "verificationCode" | i18n }}</label>
-            <input
-              id="code"
-              type="password"
-              name="Code"
-              [(ngModel)]="token"
-              required
-              appAutofocus
-              appInputVerbatim
-            />
-          </div>
-          <div class="box-content-row box-content-row-checkbox" appBoxRow>
-            <label for="remember">{{ "rememberMe" | i18n }}</label>
-            <input id="remember" type="checkbox" name="Remember" [(ngModel)]="remember" />
-          </div>
-        </div>
-      </div>
-    </ng-container>
-    <ng-container *ngIf="selectedProviderType === providerType.WebAuthn">
-      <div id="web-authn-frame">
-        <iframe id="webauthn_iframe" sandbox="allow-scripts allow-same-origin"></iframe>
-      </div>
-      <div class="box first">
-        <div class="box-content">
-          <div class="box-content-row box-content-row-checkbox" appBoxRow>
-            <label for="remember">{{ "rememberMe" | i18n }}</label>
-            <input id="remember" type="checkbox" name="Remember" [(ngModel)]="remember" />
-          </div>
-        </div>
-      </div>
-    </ng-container>
-    <ng-container
-      *ngIf="
-        selectedProviderType === providerType.Duo ||
-        selectedProviderType === providerType.OrganizationDuo
-      "
-    >
-      <div id="duo-frame">
-        <iframe
-          id="duo_iframe"
-          sandbox="allow-scripts allow-forms allow-same-origin allow-popups allow-popups-to-escape-sandbox"
-        ></iframe>
-      </div>
-      <div class="box last">
-        <div class="box-content">
-          <div class="box-content-row box-content-row-checkbox" appBoxRow>
-            <label for="remember">{{ "rememberMe" | i18n }}</label>
-            <input id="remember" type="checkbox" name="Remember" [(ngModel)]="remember" />
-          </div>
-        </div>
-      </div>
-    </ng-container>
-    <div class="box last" *ngIf="selectedProviderType == null">
-      <div class="box-content">
-        <div class="box-content-row">
-          <p>{{ "noTwoStepProviders" | i18n }}</p>
-          <p>{{ "noTwoStepProviders2" | i18n }}</p>
-        </div>
-      </div>
-    </div>
-    <div class="box last" [hidden]="!showCaptcha()">
-      <div class="box-content">
-        <div class="box-content-row">
-          <iframe
-            id="hcaptcha_iframe"
-            height="80"
-            sandbox="allow-scripts allow-same-origin"
-          ></iframe>
-          <button class="btn block" type="button" routerLink="/accessibility-cookie">
-            <i class="bwi bwi-universal-access" aria-hidden="true"></i>
-            {{ "loadAccessibilityCookie" | i18n }}
+        <div class="buttons-row">
+          <button type="button" routerLink="/login" class="btn block">
+            {{ "cancel" | i18n }}
           </button>
         </div>
       </div>
+      <div class="sub-options">
+        <button type="button" class="text text-primary" appStopClick (click)="anotherMethod()">
+          <b>{{ "useAnotherTwoStepMethod" | i18n }}</b>
+        </button>
+      </div>
     </div>
-    <div class="buttons">
-      <button
-        type="submit"
-        class="btn primary block"
-        [disabled]="form.loading"
-        *ngIf="
-          selectedProviderType != null &&
-          selectedProviderType !== providerType.Duo &&
-          selectedProviderType !== providerType.OrganizationDuo
-        "
-      >
-        <span [hidden]="form.loading"
-          ><i class="bwi bwi-sign-in" aria-hidden="true"></i> {{ "continue" | i18n }}</span
-        >
-        <i class="bwi bwi-spinner bwi-spin" [hidden]="!form.loading" aria-hidden="true"></i>
-      </button>
-      <button type="button" routerLink="/login" class="btn block">{{ "cancel" | i18n }}</button>
-    </div>
-    <div class="sub-options">
-      <button type="button" appStopClick (click)="anotherMethod()">
-        {{ "useAnotherTwoStepMethod" | i18n }}
-      </button>
-      <button
-        type="button"
-        appStopClick
-        (click)="sendEmail(true)"
-        [appApiAction]="emailPromise"
-        *ngIf="selectedProviderType === providerType.Email"
-      >
-        {{ "sendVerificationCodeEmailAgain" | i18n }}
-      </button>
-    </div>
-  </div>
-</form>
+  </form>
+</div>
 <ng-template #twoFactorOptions></ng-template>
diff --git a/apps/desktop/src/auth/two-factor.component.ts b/apps/desktop/src/auth/two-factor.component.ts
index 00cb7f52ac2..531e4fb13c7 100644
--- a/apps/desktop/src/auth/two-factor.component.ts
+++ b/apps/desktop/src/auth/two-factor.component.ts
@@ -1,4 +1,4 @@
-import { Component, Inject, ViewChild, ViewContainerRef } from "@angular/core";
+import { Component, Inject, NgZone, ViewChild, ViewContainerRef } from "@angular/core";
 import { ActivatedRoute, Router } from "@angular/router";
 
 import { TwoFactorComponent as BaseTwoFactorComponent } from "@bitwarden/angular/auth/components/two-factor.component";
@@ -11,6 +11,7 @@ import { SsoLoginServiceAbstraction } from "@bitwarden/common/auth/abstractions/
 import { TwoFactorService } from "@bitwarden/common/auth/abstractions/two-factor.service";
 import { TwoFactorProviderType } from "@bitwarden/common/auth/enums/two-factor-provider-type";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { BroadcasterService } from "@bitwarden/common/platform/abstractions/broadcaster.service";
 import { ConfigServiceAbstraction } from "@bitwarden/common/platform/abstractions/config/config.service.abstraction";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
@@ -21,6 +22,8 @@ import { SyncService } from "@bitwarden/common/vault/abstractions/sync/sync.serv
 
 import { TwoFactorOptionsComponent } from "./two-factor-options.component";
 
+const BroadcasterSubscriptionId = "TwoFactorComponent";
+
 @Component({
   selector: "app-two-factor",
   templateUrl: "two-factor.component.html",
@@ -31,6 +34,7 @@ export class TwoFactorComponent extends BaseTwoFactorComponent {
   twoFactorOptionsModal: ViewContainerRef;
 
   showingModal = false;
+  duoCallbackSubscriptionEnabled: boolean = false;
 
   constructor(
     loginStrategyService: LoginStrategyServiceAbstraction,
@@ -40,8 +44,10 @@ export class TwoFactorComponent extends BaseTwoFactorComponent {
     platformUtilsService: PlatformUtilsService,
     syncService: SyncService,
     environmentService: EnvironmentService,
+    private broadcasterService: BroadcasterService,
     private modalService: ModalService,
     stateService: StateService,
+    private ngZone: NgZone,
     route: ActivatedRoute,
     logService: LogService,
     twoFactorService: TwoFactorService,
@@ -115,4 +121,25 @@ export class TwoFactorComponent extends BaseTwoFactorComponent {
       content.setAttribute("style", "width:335px");
     }
   }
+
+  protected override setupDuoResultListener() {
+    if (!this.duoCallbackSubscriptionEnabled) {
+      this.broadcasterService.subscribe(BroadcasterSubscriptionId, async (message: any) => {
+        await this.ngZone.run(async () => {
+          if (message.command === "duoCallback") {
+            this.token = message.code;
+            await this.submit();
+          }
+        });
+      });
+      this.duoCallbackSubscriptionEnabled = true;
+    }
+  }
+
+  ngOnDestroy(): void {
+    if (this.duoCallbackSubscriptionEnabled) {
+      this.broadcasterService.unsubscribe(BroadcasterSubscriptionId);
+      this.duoCallbackSubscriptionEnabled = false;
+    }
+  }
 }
diff --git a/apps/desktop/src/images/yubikey.avif b/apps/desktop/src/images/yubikey.avif
new file mode 100644
index 0000000000000000000000000000000000000000..ca67e1a25cb82f3ad09bed29d57c36564a144726
GIT binary patch
literal 5340
zcmXv|1ymGl*IXKw4rxK8k(SP-my%edL6%rpy1PM|rA1PZr9tUXL||#@?vxg!5fJ$C
z{m*yrId|sH%z5qu005rBJpEju-f$S;vHqbG946odhr%@F1mqv3Qzsiw=s)kVIP9z)
z-T$8g0IqN=&;Rj%=m@v`-!nw6a8IZIJhaEj0C#k;`nM?p0BDc>ZvxP00RZx@N6rC<
zJO6k4KZo{lu|fYAe#}6<`2`eQ99{l9X%BaGcYV~=;jUILk4ORcaJBgt1OU*DALA*H
zgv1r@3;(BJ;Ns#w0s+)pKp_l`;GaZp<>Kh>Y~|<+K!0rP&_{_1?&<{n=RMZr$1u^*
zBQPI>gHF~^Pci@yNDX7njZnnJr6m!pWmg0PHWB=qHeqO9VMc%sQ<%}a6TPy@843lD
z!~EYTnkc;HaO_!sxm5b70#55@Wp>6U1o9=>o5`;``C7`vS1!C#%%fl&+C*}MC_C{m
zAw5)ktg$m=abtH;ql^8y8eQP^lr_s@i?KCIMC$k=Qe9@GCkL=|e2Md`c$7!DINhB{
z(Ue{i&!mg$s24?|o(dFxl0y-cOM+{#F>fGl?R@*81ok|2Tkg~o2a>*+!t&MaXWEfS
zA6UvcEUw&${IKjUq3yZfg`9#ZxsTRDR>QL26BFyZv3eFMj%l@E1_K(I$XC|Uxkk6q
z`*7KZtki1(LWD9^n$d5%QwQYyyb4!-k&?-rT6hK_5tk5r4tIcx*zcFZd;cVjfpDip
zx1TIEyMnH_GRm1_AxUk~LcEY=jE~R{DPA%gE)}b)6Ow{~a|?~wM^k3Z<6YJB?L1Y}
zj2^KcDml7Tc$rqwm-F?(@7qdnFTeFWp3g7gP`~>6%i7ANfXar?_Y{MG&r{2zOtnn-
zaEsEo**u|RpPwTk1OIt1l~HZNhk>DG$39`MYCn<9pMs;UDY$|<_G=d7f~tiXj?!D3
zf_|IJej%lDHn_zNXm$v7*Aj+)98<8$Y9jYDp7zq6xe2J$)WAJu7-hAIAqT+r)hC08
zKe%;Ne$s3L7|K7eRL7H<*U0%uip-o3$`}?<kxo;sJnFKsod!ndh2b8Nkek)8+nQkW
z&Dn~w)VPYC;Vn+iPc&Zo-xjUD_-_hb=1y`DzO5LJ|Evv=lp@GT&nUrp_~j5qL(NC5
zlsr`sZUB4o`+Y2T^g8(khl?rK0()x&p$)*wna-nL?^m3uy7f1KoNozrOmO@#1MW`?
zXoj-8L$2uu3m|S>>TXo2m;90r@loYyk8DspjSrdz`_FA6he%^kRHU$3Kbw7TnNjF^
zTfak;MIHww{ov4Yg_Alry9HE;WO3p|B>8V!x8&DJSQ%GZ&B)TNY+)_s_d$8sfUT~I
zZ8VZ_1TS$$CiQf`!V;%74nHYg!j!}<9Y5HDfoe7-WvM5}i#tZCxZPTQ;bC^tmzE<;
zX~nOXZTZ>vw7Afx=O9b5{MWDiUiCLJLp-psqWbJc6z`j{S*KcZYKq%>wzywg>#<~H
znCDV|f+YA*zbFT*ADJ}THhl8EcgAd>TpOd}T;OcKoQxS|V%2>K@)#4qP6f)j#&H=0
zIz>Wy^#RjY5HWShCdybGNq^`0)-_YRbWcJC-b{uX`5l5Y-7f&KRpW-Cv!|p#6_2yC
zbv*jO^8-ZSb+;=s(5-QFojzDyngEmoz>EM`EZnFBDv($nAIU{6e-}<Mnf;k2r8hnx
zWLmCw^56-rW`<{Fl9E@eR7P2!Na&55KnPUdlxCR#?#c@aPW5#c48m|)n_R|8$B31;
z(%{HzkLkKg@U`bK0jeJ9NgGjWMry*Olg#@7oT@7zrFi;Fu6MQ9Qk)y@>)WKQ{<#}p
z@ygLuDYLKe_mmN(3witWiHf610yWm_FBPUcMTtd1-os_Me!Ai|enC+QFd(GDWbAh;
zCYyn~(!`xPE9LyV`XJNv)TyCpXB?vJn3ELq9{>>hVKOh&?{H(-Q{G3%*9;d^uKq4P
z=Q?#@3LTYTbVMjZY|Raa5zu1oa^)y%W$oxy%i0^jL+8{2K|kNG7;wdeUmY;DyaX?I
zk-IH^2`?qO9^VCV;lQGG2ER>W81sBD2ybAUg>(FQ`HG=ZhYi$MMZW~7+we&4%}^C|
zM!ZV6%j-A)R1UVdUO-65X)`9t<d(EGXLzV#LB2~wo~SFcuAE~UWLPr1N8S_D+*9Kk
z-fz;ie|cJy_|9*f_T_lIJ*qk!IvDbnFmm>(RK;FxqRuW1-<3BKZB}aUzG(NwP_}_8
zxW&PMH_T$?eq21{8SU@~ypKzb3vuu*q1T45#*e&>Ej?SEEjnUM^NZXIv9?&-RthZ+
zH_#5eBnM9}e;j-2RmPeKRd8Ubp(pNla{mZs9z5MK6MG3>V~=FP)LZW@V%VC;LoQaV
z%5%^Qg58eVBi9?dsYdq(WlXH%S(o;01D@n?`i=G~3hH>h7X&ti1BXm$@rB-ZTa6y!
zEhsA6W<AI<MmY~7h(mogs!~mu)2Qo!nsYCmTQHw}JahPlr7K}<U$5+2*K=^F;G1C;
zRR)dL`Y~Nj*Jr(E_!k7qIhdkKWQ9iS?yqc*ZrUB)3M6-{R%E_6L9w?_L1Y7~@Y0kp
zm?ovXoT_pneCysRGou4&dn8#D*^&`$A?|iRYfi?~mOwV~SaP2=&qB)ij<{l{sVeS+
zsH6bt#j2tK@08`7#qT;-D4|cpbQeLPu`Y;^@d#cZh)KM^ygzuf45<yy)e!2oKB{52
zLY;dk#xOLwaVFZLL1X^h@^@I-r~(d)8Qx8_kQZcd^7tAo#(}=ImfP#wn(9;2N%<WJ
zsuT8d(D)*sF(pdmr4Y)l`%_{W8A~s=2Ah8_AILv_tuCt8wUc?KeFLiy7?$7Uu?1`H
ze4qB1<<NTT-jTFBnrLHk^tI#13CernoON?}8&(yD(RPF1UW7{RHow$2pZRMToVQWR
zaO0B&mEP#>l<tjS(Yo37VhO@ofdm+!*M76G<&PP;K6<Xpo#d(geTn%-%O`~_QW@_u
zDpmhF-BfB1X_blLi0IL;87wAmx8RD0GJ4}Z*+sK%)BbChd(ytU=-P}8>F~M}3^+>L
zlz28xmHy{-iUr4kY24`P!wZEKA<8q@%dGDM_+L7PHFsZ-<$6Z$Xv;m!7*<o7Z+-)!
z8;j%%DN#u>qE3IuMQgawO~kCCOKRx(+z=Hk+cPqjeZJm(UhJkGXQWmBgFBm-FMt(t
zAu*vE8aqc*Q5?C0rF5BvHTt`mx>6ool&IUvo#oU2tw6QNcr-CjjK|=u2&KuaajPSc
zs>J`(s+DMwNEYPv-`d|jttUNhqm;QV%B3B<9KAu=iM&`UxrXu6Cr)f12bPNwggOzw
zcvpH-gr54PYnbUUWz>s*m7gj$BnTob(J-Jl`I0Q{?m0KYc`RGqEsa{h+%nuA?+fl(
zZu1Rp;geVF9W+uaH{0%CKic5eQpI}0=er36WtNI@uOVW*J+1<&m|V!HRhj}m>&aEO
zkBvTcI|~+`NB_Lvq|UVTragDk!RQ?y@m`i%J)^B)9K|@Vef_rwpP{L%k;&@-ydp+D
zPMcg@ZD35_+<;;JcI?@}sOw&wF@||n$d5K2v#hlahGb+<_Vc~P=syu63`6s{%t2vY
zr*1z6EA0M`+e}JNqVt4zTwVC@6~K*eS3*btbQag^t03FoeW&i>qfh(z+C*B-*k^L=
zucK8RL34d5C;f_RzJV*U7MdCWy<%#{NLf{i_KdSZ<gDNo9b}7lFPxwGZ`!!uOOaHo
z!esK^=Lx0ar?Z!&A}>Gt+pK2hRw&e_e8AvQuNz`C8d(eXFfo%((kIz^eW^0HQN!2d
zD{4qjPoakqd7k-|`-8Zh1l_DLaR=v5rSAa{(L<Pgqz1c~BTf}`8H?FGiQm?134CX>
z1jJ+uJj939qQ~}NVAa5^DA#PXC8n$7#JMYThxp52$(VtV{kM*b^PPJ6m<K&Cnr07@
zGadv@12$;Y!<29BXcR&&gOUjp<(}27!e*=rxexJM8zkB5FI_*i1RwWd;A6d^F(BhS
z%s|iLnYPg=*g>+oD}`-1nrGG2$YRe?jSNJaxs}&-DXTBo*Oe}D&0HycMlx10`3jM8
zZ7aI`e2a;{27FF55%?TOysY(7qTK0IbuNRI{ZM#UfVb2nQ*7=2rSH`;f{~Y_CkaJ-
zWOs~;;4dC&U+YF|qE8;s_o?8vlN|7wLa^u^*d!f0Yi6C{r$kL%F^Hpiu+zrfnsg|R
zuTPV|cvBxk9FQrM*pjw0zflJY+^qxa;B5`=_Ov9@X6=wp2quzKQU4)Rct0YeyC4`?
zx6@rk<|o6izs~OUyB>28Jt`0`A;*9Gyx*<~88K%>A`H60*HGZ*&K`K-*IHu`0c;=5
zc4!Umd2+uhwET-!Sktq_F2`9lL+yywxGt#Bui@ioz=nlpjlyB}UKQK3Fw`>7y98y|
z&Xv@>x;ljir)`m5$mdrAr(f#T`}WfttrE+0yUdeYMyl@;fZnf^HHVg~Gja;42K+5(
z-;j}$2}A>fL*%nTA0~gieHYPz?MrLlEyeoeE^I|MZJs;mh{9;;45FDfGO_-wO#x3k
zd(Ag1iJOVkw)T6|C3ccekZ_?L(}DC~hPPU}@ot2o$7}~t&iPN$2~^y(J!KhlcP_#5
z2BLnLM1icBFJ+qi{R4?@=mgOWfAcc+>kqVvlOzrPs(ymZIs~F<yeKp$J-fyRnCKJU
z((<pQvOKg9+M680#3d8PmI{*gbxg3G4nyIgUfK*4l<r$u7a^{Zd`!2YA${TK7a;Nv
z_uq(U<Ds0JA6?Wxv{7?5{%K$Vd-49+ETR`g(|3B)fR&80$qRf+S7CHQ(wt9mSm}Ac
z{-PL(zzv^h=veSk*}<PzTOg8G8@9SrB7csVIehAY`%H0hrQgiWCl>%<-Obz&yym7p
zZ~16xA8-!yE+`DO_a&3)kJLD)KvGO6Z+*x&>tqlx{sZ>tKB=yppihN}410{NW6;I^
z);VlNE<`(hkQ7CZ^?c?)ECBZ0^(VWUE-^0WGuUx5+*S5;a17aM?DU|HO?sx!D!oqJ
zh6HHK5ZvdyncfWYZv8zV0-_bj$5Fk4ogs4z5;2x!P7Qb=5)!K0Qne<oQhBI;?=XY~
z2u8$7;Gz*h?V-ZQZ$o&@%Q75bYJwcn!VO;`t^gc!O<P7yG8$<r^*qH<IR2FJK%)-Z
zzQx}u0&{cU`JQ)6BMr|JpW!X12wAdC>r(MzY?wPqlS<i=t6hjOeYcib6sX(mog993
zzEqFE=k}`F7%nZwO1bP*ZZY|CpU@oMhiP=CBXa|MYsrumVo&rb6DhB9G~E@<xm5z4
zD}S9;6s|gJgQzxxs6n3!q$w7z#{T()OZ;^3n&0C*W%j~H19|i&_{Y6tbS$@HY)2?0
zP@_gT|1Gm^$?*AtvRIT+1Z0#iXW9GK$7>F~!HY|i0KveaNqQ+{v<hGqFLLD8M+HiR
zSdKebY?y^i9YGpFGH7+W$4|AMP~1E)HY#KOZ70Oif+1K(kKDA0rkf%AM3i4NCu|O{
z9A0>rDrOTSye(@bW|nmHKn?;(q_m4@*t5%ScHl?LOqaj9*Z9WL%J!!-bfbyto3gD>
zUG^G9jCcgta`mXOPnJXQ>(Urc#by*P+G+k0fcMWc9Tc3=@4A!uqF2CAG&FxM;=3^!
zmIh|8iqlLP2F=R4lH><Se#9<{s3?Fn)kbpYp&hpmCgG6LWlGMkcA3o4M4JN4^F}n*
zX}I_}izKM-VZyZe4cPcf)>8uRS;Z9*@I5<foA^#1@8%Y0gqU2f%Gu`)<ge8vmr~DC
zK8vIm#Cdvm6Xd-s3go|7N;67~W8^E}5I)QqRs3$jc4cP@!Gz3SQfDS08+p{HNTi|)
ze$tdXr%$Y04X=6JBPMD3sFXy>4|>y&ls@nbUU1WG>5+ORlvz1;H+?9(7a`ZDRRg<j
z-is`K{j)RNu)krBa@|gdTluCf8Y6f#rjb|tN`v5acBNV&TEy2KmOJ0gdPCg4Hnzmu
zRhX5wCzo2ZfRXLnb(xfX<tWTnpuun3KQ8iFUqdRxT6@~CZ+i=^?286}Y?Ey(wG6RG
zPlVOFWgd?&TKNrgn7mJ3>ZiS5%@`EsvxpR$napVRRN$bd^}IfrT{;W=294SAgz~=2
z0d}Sjk(zw%R=@p7cJO^&gilnob7`=Xy2_rp>e>@E0~Ntb;Q7g7dDR*a6NzzvU3TZV
zQ2m?;{E^W|=Em>%h6@Nz!SjjYamBmvu(F*oy6j&hV3AeAY!}s7GhheHJ5%Ze838eE
z?{Fue;LR}l4OR}3<|ud{nUH`}wn9ieyZ8;UIwLFMGnErvwMX}q=?i!O#fo|G!ab-u
z!aIE-=0MVwZ}isz=WzBBQsBi3PW~=DLVKUqA>W6i6+i7tb(!ZT&pX#@TUTW1bpb`5
zaNXW<P*m5KxBye*7kQAF8x1z`+Ej&Qe9n3E@lRfw8S$A<y<6(b!2VDrf`rhL)G^c8
zs39&v8XC`4Uiyi8zeA(Y;~Y{TPOoH{$!^P!M9V+|gA3YhP!;<GyPi9AlwF#}un8h2
zH6|?PBB^H%G;dtoNUTioK*r~EzhAPA`fUBCh>R6a1k};0IQ*rOOU}z`$I6uB6eb$!
z9~zQsdIA+IDT&9}D&Q@p&6|-z$*B6iyAY42myg8IlER%`?XzG=QXyI}%dyMUlWY1r
z(YRl^7BXHt4|aIJgYZOy8t|apeASQW%V~+m2>W#H8cKk`ocRDT8QV@7v<CmnSwr0k
zX2z?L%1W(Z*<@=#sAaoDyzxhH%H9Q{A!tL~vLD}E7AeBWpSXiZ!Z!Nrx}gt07jik!
zKzRDv-wfR*D_XB?fg3|%Kiq>CbhzzHiH6Lf*m-R;SiJN~*YIM#m_e-)rRMG8+nmG$
zu~N4LC7zqtr+KfeF(FXAcCn{{As(Ue2WpPmajb_`fhTWJQYe1E@-x!y=sLA9W`|_X
e!SNreV4+hwh0@tgP`cAp%xhS$>yF9U)c*lWV&@6~

literal 0
HcmV?d00001

diff --git a/apps/desktop/src/images/yubikey.webp b/apps/desktop/src/images/yubikey.webp
new file mode 100644
index 0000000000000000000000000000000000000000..8d3908768246dfa9a2db318c3906c2fbda57d282
GIT binary patch
literal 12884
zcmV-aGONu}Nk&FYG5`QqMM6+kP&gn!G5`S3g#n!bDp~@O0X{Jpi9@0!qM;}>DVUH3
z31@Ch&9LnV4~aEi;Ddz|hg3wjTX;PqZ~8jqP&!z77t>hj=6%{3;rovsFXF%NJry(?
zJ#=~VbysvD`qX3I`_s}tRC$>GhxgpepT>AI{PSU7fnN>)>t~7fQ&GHC`tQ-N(*xQE
zqyU<;Ky>OH)xY)#F)a3EGn1i*<6q9MdZgZNs(!{r<i!=kdD*o(>K<)LuyKpgxls$Z
zd&g^ZY`sG*$)iBmf4J#Ev5N1}qcIj%Qd1ADnwkyj0E!>$4Jh{CF;M;jVgzWyxi<4)
zxS{wZhkWDmNq>0lhrL7j{`()|1-}$!%}clKXh|<exE6ywdY1=o>~>cFap8E(DN?&m
zknfDy6thG2!}X^d)TA4thgDU?d!c=KHA9`!(7FC5Mwe@`*C4lyXc4`VG5QRxd~-!P
zqxpg!2MD_8D*~R#cEBpO_-}w1#mc2cEyF!xp=jbnweME&m8xCPjNc7{R9&K|*$U&3
z$>v#GN<rZ6Sb?g63uk>(Q6+_IH=dAdGH`c;N-wg7rLkS8^X@-M-ffHAqMapXn&Enn
zy@V%>kU7=9*}np*6Ouzz<8!9Z1wg}d>=w+{#57SiwSJ({ht<f<6_%GFEAdj!m^B30
zgF~#Oo<Cr=4o;S4y{qec1U-D0W!hm2UPYgv<K;+2&U2>-49uNI5Q%-e^87WR#3o4T
z{hd4@l6Q1`R)1Q=9qbWKtDpE3l4D8kMYnEcG{gqv=;bNKodhE~eV}wR9bC*YS+H6v
zII-mzy(vQcWJ@7YnVpF;w}NFv0^4bt#I!4pdG-^@lxHdUtBM**YpuJ6l6<FHW!pUA
z<TqY+?-#!>Cl<U1@&^T1Bq>=@iZi{~8(Y3jSCmSC;^25#Mye#z4{!r6+5C}s<eB8k
z>wfqpZm0>2>B<^xH^5V&vkJQr?tQv)(yvR>^r?hm5jPf2_(S<Jsk&uvWLyv!E6nS)
zIV{B1(hH(A)h}G?KCW}EASH$*4<1S|-SEAxUa3G?e4OZ$jO5-A@%(HY=s=|AMWe%d
z=vreh6GM=k%C%Lv*mOt1)Uc~WF$%U`uX^xXQrBNji2(NC7k$la>Mz<wCdRdX37+&1
zB2bobn#s4MIW_`#6&yvdXd{35Q_|$8iZ;0Z6PC%7NaOasNLpc<Fx-rhjfUWyPU7A8
z(_cA(Rn6>!4d++Chx_PIyQF2(B>99lxx`LPOz4Y7sA2e-+$8pAok+WN?9{J;)f*c_
zy@hJ(rFDs8r?$G(_5KFlWPo)SKAD_o`&KDY*6FU_d;EHVu!jG}^{o5zIvrXMF4ofz
zd$Bi~;5t8wh&E4|b(uTS6D!helF=A2j4|_{;Gpr^d=neBF`|+Y>kHyW+@qO#mS%wp
zp78F&LzmDAhuoqSVLN)uZd4!fy4%{~XA_ykb4n8>q1g}vX8fu>J&QwAi~K~VrCuUc
z?kXpicZ}2Q<2genI+Bz?d+r6Eyb@Q>+AC@FbOy_8@L?J6<ZZ$M5P80h=6&$x|5{8s
zHubd-_{%gb>L1F*&&ChERlq%m*2`SGE|{vX?6^feEVyi5ZANLG`atn=CK-eW;&l9M
zUK@;=3stiKpw`v!9bl7DhuJ|H=Z$BO<cu%SVMjph`_9&In^b!Nr9Jfx*X^VV#ApX&
zxxio^+X6T5VcA{!0dm9nf_U`58Cm+voNr65tF4Ff*RY~hb;VxeEIB^olq)Nh_pY3Q
zp`HAYFKwZ;7L5%{zy5Puba*Yr{g-PGenw|Sn(g}BX=S|iBeSVo$F<?hgAR@lL>X|>
zQWGWB(<oo?m!h>kOn~UnZ&QgUjM_fHx_t7bsna6}%7)=?@ip@RXV%a!;Z%C#Wsb`(
zB0=}AIP>_8>%ALEW=u|TMczxTh$N}6Y1WkW!Q{(UOr1Z((weYSy(x(0{c^K$i&8R*
zvcCe+v=guf>yLeO(Bwx1fi>8a(cuj8N%(A$2K-eG#6?GEyLR(quWyy8J`FDnfJNr5
z*)5jGYAXdR!ovfeubVx=>WugdJ!a1>lO&C&{b%9xg<@ANebIfp-)zEK)6>6d)roUz
zvaJvl2=CU@A_Etm4FC*4CzJ(|wH0o#)aOZG|A`Af+D<qqescrO?@YqY*!HjK-+;U8
zKReQ3y+YL6LF?86RT6Ls_q7<QBEo{IEq<h@u=_K@6>lr`uT23!L48%%`eU&eNhZ6s
z{vOGE29^2kX9Un39J90%@T6U9Vw7$@Wj^#h@ObJv$4^;^iKVbt$Zu0&<T?E>JB5tv
ziKZhcwzqzsz2E<XJlTrPlv*EKfMCj#JU=h(DF5s#@BQG~PN7ls9yS=Bc6@TF2d+f}
z8~~`eMML}V_!&Gj^yrSB;urHodo{aHRUU}G5vCw4Iy@~Xq`-9-yFhf=%tXX-uQ2)3
zh_?Zb=hy2G5mya&R&jivfBd*y|8s*@WhvU-cl$=pyX<Z&rz$?l=VAf+WGC&*)T)mS
zYh6Sl45$y?ffDU-w_NpkTh;pySxTd;gK`rAN{4=-9j%2R+ZdCdNVmwugx{iY_PtAu
zpZ)RpDZzi_1*glsy!|nf`e|~Z&NCOg&-3pKI2OFSFKk)CsLnmiC~19y2ZZxeiMge;
zQ;#jFu$lb2^M+SoFn2;_?QpP>t^&zKz)uFqH3ucOpVemQs&3s<?#0tEjfcW2Wy%r@
zr18*R@{S+ESjyNzI*_N8T^hE_?#`PHneq8!TUG?KJz`~T2yQ2u*#>v42&*BP$oEF7
zH(%SoOAi8mIT65}qEu$^)b`<>LQt}5Hy{c(Mn&O=KLq<jZ?jy-;6T1t`gIVbz4gJ6
zt~G6WbC^^^CSOVWYu}M<fLx>4YkDcU|Hc;(jc;wWf?r@^Ev)<iXgL>qZ2<}zH{AOf
z1@_IoppUX1NEU=cu20R*CZ21Do+Vo14sYGZh?;iNKf`}yRMR@K;-mOy<1(8`_=y7D
zQ<AFVP1i%mkX#k?KWW}+V);QjI!R84=WHt&A&4997fw59%?pTp^r8Ef%3!%HL<77b
zQzv>@lNRZcdFUhSLaC>k#r?#~Jam7xsd<v2atZaSb1^x9z0i`wMR?r1JX~>Emc#vD
zPVK+DTFZ(doZC#NfT~u{2A=mw>?nV`K#TUk7WT~*`yRb-eM-Ggonj@ZS^$rsR?h?!
zzvX>RssEyy`uG{MxI|**_~E<0jYsm3@Uw_jJ>E`bYu38IG^f+C6{E1CvoLdeW)^DJ
zokQ0uc>H&;A6;8vqcKNirHrB83zfl4S`^fi3{Y#C?-k9rEgH}ioLjRFoD1AyKCl{1
z)A(*@>n*3La6Mnnj(MVQsA~s}5IJ$A3?eT-tJwde!f&{<KPN1L>A<)SF8uEEZ-<ev
z@rjmSXad~1yu^8bRE7E`jT%Dc)6&I@8Je-1JS8LxXHpekkyhdA;k&ummV#=^`eL)D
zXsgV?%;SP&g_eCPm+0}n@;kc(&rvy9b)sL}{U@yMk+}_Io%&~9A8#dKOzNK$t~ND@
z011txz?_`x<Uog6YnQ#$y{xaizi&UcN^yayEfF=TPVdbCs(qRTgmGp|lq~&~Nr}D-
zoo=Elt{LnjWE)46%|uaT+MjHKDJekDXXZ6F=HBAL)C-g8h+p~-*P0Fo$vltt4Y`<C
z#^K|s`u5Zh(N{AJh6lyHe8K&hPDhdH2wl{D@;ie}U&}d$H7$pp<Yb81nzo7~^^?)c
z3K*#p|LZMl$?-$r?0SmDQ822IyE+N<N{w~iHdm$nb@`_>T5H+fcyaahdb0X`{yZhB
ziKuNK3~8kaLV&Z%P)W?pLIrV@TPPe0qJ+iD6&98avGJ^9h$X?DB-<Dx=XsE7!t9u!
zKH`UOnlBR|uQGvo5lu4{8orHdBp3w6Ddek>FuUh-(TAfa(YJ%33jl&D7cl;qDi!uX
zHe3G&Kxn?k`AzxHx7SK{E@2i$<X?{&zn&K*ezRuO_4W#W{i>=P7GPelhnc)q3*Uu?
z!(ixQCe$J1P!O%JQXd8%;eDllRkY!RjS-3|RRnoqe%GM{;9BIN<f}Kgq&Zf>G}yHU
zDD&@-E!QPPp>dMeJ%uJskgnV`TBa{0DNEsQ(_8D|pg;ir|JAj_gD7E+?tcZ&f52Zx
z`~r?s1s&YkjY8AJC3|<F#?pRODdj8JuzbiIVYt)*=V<lCL=OGsJG)@5qV&e^7<ZSe
zz(Zlm^NF1)u>4qUI(Jxw%BOHpoUWzzD)#xq|L~u}7)JAd1mnEZdIMp3iMHJH#%+;(
zv7h2~MEf0SRu+@sCaGNd9*VB(dlQQ@D7!q!@$zS-?HmTu0Fq^PdE1K$G_!O;y{P43
z)xt`o3z>v6OV)e<0ta=PjI!kHStf3e$o?#gKf+S(!UJ3<`s*`12ZaYQ-1Ergu+ohw
z8S_=Z|MZw^xGW-giHv$F4c}dn0fQcb#$xJ0U*@X$c5&lDxH})TAk5E9o;5ahvyj1D
z9&r%v{L3-yYpr%Zs@4dV_aFClQrtWH?%|Bo`&mn88@(9pA)oPJe-W;YuvVNK(cN2e
zzb;Gfnr{>D2HMS9@_b1yc^O+mB68UVx_rk%$r^$q{H4gpBAKjxV|{G7B7dJ4`omsQ
zsG6Uda5-I(LXC$+EcM5md#tK4nCo{kb4KM4B_Z}Leqoy8lga#%BJ^JD>{L&ZJFcBW
z(aoqJL0GC<({uyu?Jk?d>zT-{2m0&ZUiNY5hmNjar^X#tCZ6J6MAx_+eX^zuhc3>t
z&x<5KEu`fSAin*OHU;*0o(X#ceq~Ot=p51<tq-GM)bH9!;IJS|ChBSW)ZIJh?#O|t
z;JAvXer=aKVs6p$0DyI9hP1{jl8+A6jTBwPkGhQi5BXQJ6e_{rarG?>W&b=HSOQuo
zqq>cVhYS?o#ABrX0h<#qvmRn#tRk{fhC>Oo*;^!_sp9m%ELKR5$ho^%J#m+aj7O4w
z3L}#2cfublI<6yIx~5KGW@0Re#4L4_@sPTT)<=J>2H&dVaIM)D=J5zhW}&1E|G*qH
zCsY=9pI7I&jyvg+oU4fvI|2EJyWGgmp7Ur^L{+GW#B^LJ)vK2oo9$_|$oiWn$)PyD
zvMDq|qoyxY4|oxq)AV%SkAfd$^GK@?iA9rcIr%cPL!;SA(|s*0>`FCMZCV@~Qdx4^
zR!QfU_ld*XTqPmEnI8trszu&uvukXItPI!_hm`<(n*an~Stl|a2svg$EyPTKDRGRh
z+VACC1vM;6sC+r+zV*2H)=o}j5XOMJGyd%0>tQJzAf9XJ`D6gee;7J6pK{Rv$cp9>
zM~Ol$`B7OL6eL5=VtLOo?(81tah3p@xne2Ct*pD_yeX^};2Vpzi8E08Wz?qebf^_8
z&C(B}@@JIgsOM&(k?emEd;TUSf*oLl6uw~QRb^ikTS@W<@KeTQiBk%lX8D0KHLIip
zX!~X*Y8#qb+DNPYvy??TTEng=%k(rtq{KZFhGVnOPqm9!H;sgW$R9)HD%Jj^K{)7t
zKoD&xvE5)oKNz_6Ee*MUuZvWHn|~5KBe;jsAnDUfyaxP>0qLX`hrG$s#b40oOcO7J
zyx3L{7xb^%0V#_v%yy!`4nOd2*=^ZIY9d<8HhM}!iLHE1{sxR&Z4E;`4xkWv9@aJX
z;la`cigG1<4AwKD)2q8Zo<B^Qn8=wX*HPHCjjTZV8sATBTH=*>IrkM@8#R_O!!*hm
zc|Nrbk?3s*3*+sb9a=Ly$IX}Bvj38T@3qCy7bVWQZL`gi;)P~k9j7+aLyf)F$?c$c
zp^(tPF;Mx#G509>1zumAmixz5w={iZK><NJ&eizBm3e}wCUty<uVK&59B=g!NI;!8
zCI*0#t?Y?l8op($Pl@~b{4_Pmb)HfTXf(lQ`hzqBNFRC<S^5hi?eE=u{D@l^{{_;s
zCC~5M0zC&r##_W>`D(o?dt2+PiF8ir3A+pxby?v$-YQ#N9SuAf!M-$ug~wriUJSqR
z4L#qO!K<MlG6ptl1}<qWx=paqHOjAzz}EDn9f|7BY``1Izq;twMvXiJ(v3}`Hz;^B
zuv*&+i~ls7ysEZqINtu1vWtpOgLr%4c3*GYh<)c>C?p!xa2UN^sq5P6hX!cF-+C4)
zh3X}L=!1QWRaR*6^uN1ZtBOTj3fI?|pIna7)EP49NFWjOq8>dIu3=s=Ha#{rS*Q|A
zAY`Kb!rhMDul2!Qo47njZx>t(f$mM;f0e7QvKVXdmFO4%7`ZMweQAKRP<nXyOq#>b
zA^S|O3U@g}4XLVbNL49~FcOD~^&$nxecOioz6R0_L1`Q$Jt;}sEb+`2IFZ_NtEo0n
zw45IdJR=zAd365!h6U-<DcWEj0szpnCyUc|%-Z^ugtE=MqhjAvi6Z{-aub0h>XahC
z?MTSe{31IDJ~yTBtyz+y*M&Q24Yd!-*WMdPjR)7y%y*IOKkQX|nwy~G!-G+$0F^;9
zlk_^V!p!yYhwyBFh(RXZz6LKKhoquIU2rbeC$Re06>~2mYf-s3!gZVx_0W4<vC2Uk
zA15Htjp*wEyNc87OI<UheG6|CCH*~C)`LR!L&>L3ic%>z4pb;Hl4f$h+d3;AOp2W6
zs`)b>+zs6gfpZoQe%|GG|6uC3Zwns)>Eb}h<%`l*iGB&jrQmbyb%-D(DU1MBbbep{
zxn8ptPU|M}s?X6}@9;LPj?4{WWm%e?g-jt@@9{NJ0d{)b^^I_gFLSBl2avb?kNbL>
zoJG4-Et2+1!#u~dF>4E4K@n;hc*-u;q$e4gKOxPrcFR~26|BNKG%W6shQ40}H^&aY
zY4jQp&_j^~Fo3_60~WXCUPysO!b=u2`Uzi@5OI-hOkaJFYN)`%r-+n;2=`jkh2<Ft
zJGB;L(Ly-FGc;%N$!@19H3%{0kL5>TWL%U%$$EPLh?A;Wu_r6(msg)zxO&MsOe`_}
z2Csc1k!A3+T)+MmA)B#aMN<TH^2vlZnaG0Paq9ZE;g4SyDnwgP!nRE+fzTcJt5x3n
z*uu|v;0F$$s0NJ?lFA8AhXDR2adTAglWsu}2Nf$7T~DO7E!Uhvw*!IcndpaA<{ZSC
zJwlSW5rqHw9bhGqz<VqqzJNvglU2(jQL9-51*@;cQ{e4~9VT8&Xfa^2qfXiTT8YwS
zwX5eYU#(DS7y|euM`SGz#0|v58cA0EVi88WFCd?`c&BEk(O})btiZPn%i#>=IbG!p
zDdymz%1y`chGx9yli({){(L)WNlZ`VTL1d{A%?@ni5%a2Fu+NQ{FF0-_SkK0f8%kW
z1nQd2oY_MZZ^BIJrKCZolNGha*k;$4GY|Q9u3yZ~_he-yCEh(VbE-g0)|d%jUEBHO
zLAcpY8oH79|6Arg(NAg8#Y|a7en~qf&gy_wjO;T5Q-{(q0%Q(10rLk%y+)kQzLgV3
zL7wVc=Nf@SF3G(YHy_pGq6sff2^u&6H^WcLG1Zp^vUz*9Ty|*)o}L(ytpf!q>$^tR
zcG`-AA?EfYNiJt18uWd@SR3yl4xap?B>oayIUp9dR{|oJ=b;z-iU;K?-6Zr{i-i$R
zBYS@fMizV{Dad%eD~JA`q63NsF;{mnq?po|dYBwjdw%pS#l9MN#w4wvXNXhFTng3%
zK>*M*^={a0=+@ZmRMWb?%Zz8$sV{48r?=HguBoyah#WyZo<wb$NS8@&d_Ra#QTa5G
zNuOTLuRo+I6*U5XC!1qL@JU;&{ObC=fxXJdfY+@JYVQ{+#qzJ9G{P@wJH$0f>%NFA
zEhiNqj?ILu>S9eI4xnAhNJg0)7LLPCLP-Ba=Z~(slD}oUF&f6R_uVY#d1U~tfsPev
zTwg%4tidc<q@hU=0qD53js$UW<r@oof^iYoe>Hh}#v%m76Ae0zYh=R(GGX&4mOT}x
zT59XL<TQycu)42#;A6p<V9$h#IUM?q2C4$GW{yU_7l{Y*_}@-uQ0w7C$}_s{#I_-q
za|hyl8=)G|qGA!Y&FA5rDbd`Qgj+JG*Jj}X6O-pWuOl!=JwT3x%kQCFT^bMAMT0{J
z9gGQJ!N$+&`j~q)#Sp4>*;IQ_Y=7OMBQ1E|lG65OAwz~Pux_xKW84Q`SwAB-C>s!7
zScc5NZd}C`jL4MJYx}g2O^>1Tg!E>dI?ol#;(2R`LmA1m+x9sK*|Ptks+ZN;>Cy=a
zS-`@Tcy=u1jn>rIYFOEZAATIFoTmsy6&f26!wdBc%}zA2o@aBl)VUSjFb#BcOe5hQ
zM?ErCYyXo_^;ovW4vg{y$3pXJAL?HkTNvuV@^HrJPg|BgqKT3DIU|H?wnJF(s|xPJ
zrU^4l$2vQCUQ#a6U?#L=2e&2am!7{DM!+#%e<)P&g5SgjTu5RQPc|Gpv`*<qNwDwt
zo;LrIssxA8^pJ$=*VHy2dBd>2%^KRceb}%09Ax0CDx#(Ls0}(2GJbO5bMI_IjO$|Q
zD-Q}9()L8_XK5DY1*4)w&7*PjV8|78WHJn6O+(Uk@{kBcAzlE`yjE>sjV}=}QFNAe
z@BWytnGcn*>^O)TRv$lqz=~P&j&bF=C)`nOldEX^`E3o|D-nj5z5?-|ppogu8-g(`
z*|+&8X;cQ4)9a-DB+rV-G1tV$wi#GOhq6pUuA)KbIjH&8^J&+=j^QWI0ZEhm-8JH_
zr_!MG#%Mf6gl9isZjS>HunqIctNlwLAx-0x|CTC`WGqS?hz2VUdX5tknhAkCN>0I0
zilRgA81lASH|q^0>SoU06JTuk&4K*EHHDT8?+>5YPnJn)xb%CcRj1*C+I?hl2H;;}
zs#YJuCJf+r^=7*ZSyP08P~lr}(9a5Te|{La2Re~`1n707PYsf?!8%CB*qg$+7{_HN
z+G?GZsajg0k!dnNV>SzaqZ75!q)a-(mtpw&%j$~D$B!jiNw1^~$aOJXy%#zS+^`G3
z={hv7qI2#FFz?O2;Jv^9Hx46f%j}e}+SAg((zpO?R{#Kq*Z<ZEHr=mwM`>Z`1w5Un
zX_{Y50X5vj6vRwr0f2FRByn}E;ORY@rTf;5YKyeTbM{~sq~3NF?MzD6Fzwe4zy+#j
z&4nbFV7ek-KZf<Hpw~Hl5px4VO(=KgyKVny9kdK~WY-4Vix>>$8R)cY9;4B%x}rV8
zB{&3JDSGQN93rx~uv6nEkE!KTMCuPrKmZhNm|Ad~l&nLAb;Im+BpPhtqIGaMinvx<
zt2iisyxiK^W@=3|w^=Hg;<rJSD!CV6oCX)6G$Ub^vvJMDHkqr8nU`s@7`yh&ZSvCz
z>DHjqpsB(6xgjOPgX08@`+VI^*4c0;GfS$w9tuL?jYmkn&pHLEwL4Xm_IRf`-FMjJ
zfMF0u<M%yK{0WKFvYx*q-&$px!x>q?uzKFp0<oiun%eVBCZ==Z8<?tO95sd#{LIU!
z_tjF$w#IPPyIe#E1kOKiy4~}FtCT11R{Uv4yz=7SZXK%*0eFHyYcFsE;Wz;@IM|HN
z)6s_>h2mH<$oR3!ri!A(#$G-~GYvxgFwXOAE-+;kflYhyhAB-${8d==ni{Y|1?9qR
zlO!tiPj|Czy;$LW431^jh=1kZ$@AfcUsUP-(6%SJzF3+2Qh2lYA`j?$83kl?Y0Sb=
ztud>H@UGl_0a@3vM7pcO<^~V<S8lhzqf*0W=nZtiO?_l9ue;>$dp-|#V`h4zIxQU9
z`ZdHS&E)p@%b2)MA4RSXzVSB=QrL7C_<19&(=jh5k#rw`M;Oa=3U1}6WS%}+J95E4
zFfBDlFq>FLDgnJC;=%ca&aA=ee&_Q)lVLAE2236KP%QCR1G>j?zqjgY;je2<%Yh}A
zEz;;XgiLXDcfjxbkY^OY&!hixDnTJ|$wwIVz9G=5+b$}!i34PCe*nHr4Uyrdf7#&G
zm87-fb2EtIo!oD5uq5PMF)kZ5S`jqWycuULUf0o-Ip$d?M0aP3LioIa(4k<Ulw4RV
zj5CH6C$oWNIwlp$n#9!7aCum7=Ku?)GkRszXARA>39pT>(Uq&1|H7u+t3s(j4IT;@
z_8Y-z@Bj};S_SXj*Dz&@xT$qL>Y9IHQKoO0H>@RHS&Pjskv#)Zdeiv7bg7@yy5mKg
zF|%PNmOxCV)309<cjPg}6>Jz}$LCiglq#U#E=^y%&Fj69(aJB(4RVY2mu2n&mND3X
zc!p1;BvSk)vQuGMX69I~LrT@+i?PJb5Gc;Fi1w|K+uKl=I_RA-ckKt)V&G@?Fm*Jh
z$RCxTR*U~l#*kCx2y8|I?HW@KSuIv5dw>$+j<u~Z8Q;)gzg^HC^Al<;1?bt2itda(
zleWHZSSZ4ABhVP&1DC}B38k|fZboXe)#=MjDs|MkJ>?zYalpP><kxZ=LcB*0)omPm
zJ9X>S%{eB)8++kxv}<<G01-9o*9}o=Q(49NGL?wcp6-?S><MK9<~}#PH+E3Ot#YLa
z;yu0+8DDLUiky`Q)hRD;>fMwwps-6;2a#@bP<zE!{Z=&aLRMC{sEAR)ncxd~zV+dU
zNUKI-q!Q&Y0JeT*!>Zy;ee3l!ZveRBf9NM#^Pxm(0h)-nvxH^e!ys9W*+AyNKL9R#
zknQV{Jp2#hU^cw_UTxz3Pk>1%`C$nBtUr^QjIX)~Ske`CckhZ{PV$Pp-qLpqUTEAz
z?()DoZHT?4MmI)M`dT!xr=);B*2Z%ZA->0H@Qw)W$^KXU;fvvJoi{S%h;(p?+`32)
zK(GoQ40f8hfi%ZHTTHckvB4r`oKfBTVMm^kLbTNLn(aZgSZ<wqgX7Ujv6O1f+jj%F
z2b3=HW?h<}yIc`ELqy@smp^@!t$@%-@B>KtMx%=tT>wkY66-EN-jMT{JYisap_5qE
zCjXT~DA>jFY|r-iQe9oM?`APzBN!UJ*$q)YC)Di0N7@|cOI)w5?PZjY`>JA|NQ#U4
z15#-|g#-&b<`b}nT~8FwjG3nlgF$DKLGD<w-;^P|icj&lDte1izWA15CqkA)0ijpt
z;9Tl+$iv8*Gm``+xIl*S%_V!+tpS!$nh4(D{(Ph#$D~e8$0~=accskD#p~cMYXW~L
z%cQzeYT_}Pz<ARXcgE>F(1%>|!m!ah2iN=+9K~EX@btr8m&@L;?ilx<4=}jfss9ez
z`_N0jMx@oe5?eWuTltu70vBJrw+k*@(I1uT?&Pj3149^$WIoAC6<P*(0jrCI3`98^
z1i=yzE<-7AIpshVR=5@;eP91CjvZWfMmyT>iAl#tHj`Aatu9{rk%9LZ<FO&LkBC=O
z@Y(~tSjtgk=30DzUvTxfJNgN>Dar!ej*r+D!kxPRrYrwm|DU~mv<drWL<QyZ=s-Wq
zaQ^|ud~gA~ByKFNSqrpbPbVv6_cnpxa$b>ZYI03r8>$C?>zDY_gHJ4L5*Z;LdeOA-
z7hyHx*AP%A@l~=*-GBQf<@42VmS!^NY#hqJX#LWxPDrDPoh2ya31aGHBnfzx&a!DI
zC5l?R>3^R7XyD3M(9iEdND)Qmz(mkF2dlUz|M+%%JGuQovZ)A|0!hMnAkaF55vYKx
z0?d<+_xPY|fCjd)Dg;^dAvzK2LBvTkX53Dqr^n3f*C6}&kP8@W3D6fVH~pWl>ts!O
z^L!PShxQ-B7=n*Ul9v{)Snf2c9-`OL5@;^#oyWbWk^8wYW2PlG-r<ENaT*||V~Uk#
zp!TXunr>~&NBhIBUIz{~*Iveq*(0bY+p#VJ>>-y=_<tfPx}{0t<2Jo1`+`QL9Ok4l
z4V3I^aZa2FiY$h-`hV(^m0^*Bg&=;M`90)}Z>PYgLWtO%K-p0Mj>r}O;OY@^{oQ6N
zIR^q(C__vANV@i)R5XPpymHKCsUB=|a6I+?OrHEqHCvqZLOtHW#C#DiU9MW_Vb9C7
z@`C^QZhNb`L7j6K$ILDI4~^C!dr}8q$l75icPQ?pG;1s$ELW_rDI;BJ+RWkv9m}1~
zF8!n565`Yz-KePh_&D=YUZ+TO_D$6LHC@!It!}i`Rb$3WuQjBfkfQnf9O|)_+aNng
zQK56&5_$ZN<RT|r2(B3dH}W#8tQtovKw|8H6nvtC*_0}o?d*sYv(9j8uXq`a;s0|7
zgIGSq`%co9TIo3E3;q)U!HXD~{&{EWO1SN3&DQ;B7z05kl`0^0jioqDiZLGQIn=QR
zKmM9~+GLEx@^L8vF5(ab?P{nSq^~Oi{Cp?3uIVn-f_!^wVNmAizdGi+9xX9uh#EVG
zkt&PC!Bkc7@^NLS_0PSs&bVSZp`d}iYys<T=Bkl-C5$Hb0rRzC^k0~no8u_heLWC2
zG_s_W&wAxf8yNhi9F1U;zxLzA^tpiP<oXK^CRcwfyZ(iYcXqOhv=6zYK9`F)-jJCT
zfYHU`!(StZ7UhGmIzIpR+Y{n#FV87Bof!X$HI%pX9#D<zSH1}%_6fvt>~@UZ)Mqj!
z+M7Y3iB1%zt<y&msVY^D<$W-zr`2}|AfRUaDn0IC5wWN4uT=uaYu~&5lsKDl@7s21
z6U?H`EbSU9DzpJ;8+GW!f$LRAonTktfDmLJd{-HTdH<UKXuD){;g+{OCq8?H&|xwv
zN1Cf^(v0Wy{-uE5v?oD34Cz?gcM4SHbJ#u!rm`U!DeGM+YYePS5Vy+-_|mz|b^ie+
zWVa*1`YS=S(oXg}p#qJ2-(<tU70n;?qc~R*8>_F8LrKqQVnq6!*Hod8%)~G=JGkJJ
zQ5POKMc8Zic{Je99GFuUSb*(3c)zlkX)AA%t^ufM9>pVenmmAEu_^8T+2PL%kwiWU
zM)+5QDiBvw$rlHN!XbsmdmDC~>A83H7Vi3t&hP=i(P7M00#dLqfm*#QN~7fvx%;qm
z+zd2aF^uvFSuL*tcPcW-q-){V*LjTB0Jc|vM*xKYKFfFAS5NUi#|23buWLj?tP~_(
zu<zRNrDS%rXxA#taoiP4_&Ln3>HtL&UrK_O8%Nhr<gSiwRSSk2V0@%>jNJ^5<F&r{
zH;$OG75+B~pb|l2#HHoP;(ZLANHJ)QQDxS9T{h$Dbai#m!Jk(Zt{sidmE!c4Ld+wI
zdrRQt_G+t{a=xOIQK6Z$Cc#HR*i@@fYXH6hA!j}y5E!7++>o|=+*B}<b%Bu8r`+Q=
z+)y8ET20lSkyPC(5jRgV$DEE?m$u~6MptBp7MFa&jv2P2<Mh|gH-_89)n)KIUclra
zBAA8hl1My%3N?k?B@QD=bjmPjKdfAefMAw=SK{m-ytGp5n1o>$xNoMroA@R@+3oHx
zsx>#MBV!mvuOm}4-gDgrq#AkE2<Ed;0EVM892gM-w}>+ME6Tfy9U{8p7g@O@z<j%O
z!Dlqla)X?-aC1;eCzf$LC-v$qVq~KNabwbS5NIJv4zU|+UE6Hf(_xe}VLpXA|Iq`u
zSh9nlYQPe_l)`tT#Y!@QplLJs-449DeOtBG!qDBh;WOM80pVES&yUKX5PY|hSwQ@g
zwt9AO*CtmK+UQM?R(hL&e@c0lt1|BU3BS2|4vPO8c{JPdB>3bbb0B0O$Lc^u`A+cx
zjS32fAP6i3>+W!%5oXj>1!kUY!l7T)pb$#a@3b1zox?6YkB`JeKiIBFAl8UYDVHGB
z7bTJvupYRI@pfb;?n&9>Q*y)yfIBXVwc8tEUr>jS??lyvb1)fT4krWBn>7itsC7(a
ztWIvKVX1|~Rxh^SZP1o#BrNWZRE-JNx|=S+$mof+?SZt^rTSH*RBFQ=KS(_gI~Hr&
zo>gPC;3g+k3+Hr!88f7>%IY2Jp;y#OFCYia6)m%*)FnG0QK}B8lj`aY#s)!j?S}Zo
z#t@4iFT9__QDqIZ$*FTTCF0td>)$)wLhl#YXrf?B#^FhwIpOd02CScI^llj}lGIO`
z|5E`q6~zOt@PDjYc}XjNNm=oJ=>kIWo0NwgT7hzQVAOJq+p;nQC)W7a&IF{=*qw*z
zQhxzIz@A?#93b?H_35-&AJEPtUKpBkYE^LLa)xO+K%$nVx2+JndR&cF%+;>!?b`?O
zij7MSqf$N6eDFnwl7Q=Oc<^`xS)@Qe>n7^&kE}Rngb-4?mQ~v3x0VAqh({w~Z&wxF
zDzce=k(!>t`F0t>;JFvqjWzF~^OMOmCbJ^zxp1Q(x@<Ad3#n^A6H&@&6fDsj&>C2*
zZz`daL)en~a|f00&S~1G>JZM;_T^wV_!nt;B5Q}*U)q(w<GdAm1Kl*_4#!-*;pOGc
zusb-g`RhtLaD*bKDu$>s=|{JRen_hq1%Drt-L$@9Xw<tXUMNE?ft$t|IVXL*fxIF5
z=V&8)lY%_lgND50CvV;mKlf^$d<_M7=pMv~g&Dy9=caktVIH)5hNshSHRPfvGYQ?O
z5*lk)`e6u{Qs$v(J8MvgUsTslcXv~t%X(uLR|9r^hEM81i{-Bu%Vz-Gn|}#46PL^A
z!N)F4&9pqTLF3auQ23}{BxXA|gd>S`Mh{Z8GhJ7;3MApGhOFz;mb``;Co>F7?HV`3
zDqx!?IW29Nz}QMloxVN7lj}4b=#7;Sf_?nmc$iVk`O>8imr<N5L;DKK>)Jqu&N3<%
zOPdK;2T1q=w+^64u6{W69EF6pQRxZTK}dk&C5;jbG*+_|5u3!(Fz|xDla$a;fT|Qn
z3%bHAP91voUs35l;#Cg>vQV0D+>}kP39My6>;{PEo7`olx0R0=sw^Z#O@YD-d73*7
zh38;9F^&k1W~jrQptLhz^qv+udNWN9NRDab*aloo1H1}wG|~aqB;&O*k8eF`sQF(y
zQ4oy=*JuDrN7w&F=%=X%c=WHa1PFwVGax*Wu9ZT&s11KTNaqWo0JwqJqv*rw868B@
zTQ3q(HeCBa_wEhI_PGw2KKm{buzhio>Ar0Lv<sh`WQuxNTmhJ_Z5eT8Wmr`1#4QFt
zw57d~M><UszwpLU0f$jk^!GPe76?mzBC1foeDtVN0}0$;wgHq`kqd;N3|<P}|Iqrw
zOS^k03y0+imY!}%Uh$hq9g}ZBN&1Bjg-N+776-CWwJlimL4CEYMT71e!AZ{zxNX8{
zHYuXU3~DPJ=F?m+m93D12HqW6Rfug^6RxHXw$+r=0it5@qWebkK%4_4woQ0(nM_|O
zj{bmLXj>CX_zZbaXJ87|j+n0ex^twitIyg-i8B;sef{{?(XZZ4w4K4f+Bm0T1)c)p
zMgQIEQ=lmse8d$T^z0%$o3Ln<GWw$xIBCT;=Lzxh3ef;on?(ZQvLoY~(kNR$)Ck+#
z?qgcWf`BRL49Wu9P=#Qjg@}L#HR$l>PlhVx9xo+X=R?c?VFa<cYd4o_RVGb2p2mkp
zv^AKhSFYdH)_K4gUBFw~qnzYE-Q*}7CJ_^+l<l@@JM^nmdkyR&k2+2HzWY02i0V=7
zlgYSX-SqixxNT7DjR{n<U`CMUpGK<W!k~alU>jmVMP^ehj@(I`YlmekZTy_TAAq60
zNL0p4#jm;3z;QnB)U7^_G1W`7?5Spk1j)Itu$b|a{dv_vt3!-YX`vmyF-Zh5&jYOA
zF|zKtI>H!B&+&q)#J|Fdp!;Y@@pfdRfy*OzJR9<I;(2!)Hy2Q<!7o8ZJ(0m{MbTJp
zYZB|HR%vy|Qkm*>h~(@IsTTtDK@W1{=#Ycx|9fl63nL~1yM)#fiOwK(wr@^HbDq;u
z$7@Mlv_c{Q5y_nEdo82RHkY)Mnlt}cQQB-EpBg+x^zY756g|N)Q``9KzQ>*B1>+#n
zZ-Lh?IT`>o!JCmwX7!ow+CebiGvoZzByRlse)Xf>#p_3Cisc(+O+`&a_R98{z{B#=
zL}6|nG}-S43{+vZc?h)5+&hyM;CzR8$n#eENbJDZ%sMMPGFrO+^9==^-rW{eLHD6F
z-EWZJt(Z``j<|laKj%-QIPvujeTxQYLGd<-4>I>3p<7{R@bEZNskge~C}~Pbp@xQD
z;{&`SN9);T#+KT_7#wj08cdzdjm+DD+=ywK_|GT0DcWbLc+&Nku#^U*x=W?2T#CEb
z+BaDwzA6Pz_0Q)-5r65BOZ#@$q~;pYpt7q}sp=dDz<*_SAdj9T$fm`=X?s_wzpTVg
zQ|c_%GR^-GQoJw#`Q-8d{|;LvE$T@;a0=>JU3<IRhx|2^VeB|d`KALJ;y6un!>vzR
zLBA&1i>QAnPt^3`wCu&cR;hh|R1+yNX9pqNZ~Z(B^wZLp(AzRv6j34w+D|d3S#}d{
zLkJ)I6a);-97@HV1NO?U<N$V;3y`Zur4!}ynhU@@T?s6;Aj0;Asba7+x%SvhqIMI0
zK7=Z9znNUV3zg6)^2C|mHj8%hi0l6M$B+^)XLC1>M~z37OZY&k{xQU@%LIBz@-4{=
zGj4QnHonOfh)5?ZZ-n*)#2>Dq?gA5dDVi6s6b4!n_Yu=*7mhm;h{(W9!pzz`0OR=b
zjKB&>!G@x+NtIbf%}c*41dNRzKJ6#id2pT}q0UNjZS-C*5R}6p_(P~HGbnaSPTLhy
z5oM}HeyQBWjECNT;&X<5sc#GNTE3t(JKq((z#Fu8CJnOyETZpsi1Jthu5H?4)sI98
z&+fYBb{YT}{gK3!D~a+a?duH4ZPWyxXl4olYN*97Ad<KUw!)VUkh#3-XV$R}y*~%x
zS=8_gz+O5=it2&~#&s0N#cm9uy^d}aX@K5r+R4%0J6;`&(IKu%LY%{oB37w4*q4AB
zGjw%$qiZZE-0$rO%zUf#K>wMRDrS)WnItRVMUl5F)UXhCoI&XAu!vvhcPv+md5}zu
zMA?mfT(J$@MYfH9Tu>+%i3+*K&U4v~MH@l~uXc@Bfc&5W_p?zO_=P^9PB~5vTs%l!
z$RaQ*@JS@=GvkL*SI<FMC#d8Dq#!I2O)dg-K=%UrL=bKVm5TvcDy~Mg|F}l5H(FW3
yrKSHv@VXP9p|1h3*)FCF0@B5%__>7yFEOOAAq(;VRu{`f_f7cJ&hd_PZU6vsl|ncG

literal 0
HcmV?d00001

diff --git a/apps/desktop/src/locales/en/messages.json b/apps/desktop/src/locales/en/messages.json
index 2319bc3e41d..d86d1773c92 100644
--- a/apps/desktop/src/locales/en/messages.json
+++ b/apps/desktop/src/locales/en/messages.json
@@ -2525,6 +2525,15 @@
       }
     }
   },
+  "launchDuoAndFollowStepsToFinishLoggingIn": {
+    "message": "Launch Duo and follow the steps to finish logging in."
+  },
+  "duoRequiredByOrgForAccount": {
+    "message": "Duo two-step login is required for your account."
+  },
+  "launchDuo": {
+    "message": "Launch Duo in Browser"
+  },
   "importFormatError": {
     "message": "Data is not formatted correctly. Please check your import file and try again."
   },
diff --git a/apps/desktop/src/main.ts b/apps/desktop/src/main.ts
index 6d4b2db19d0..d98bd88e0e4 100644
--- a/apps/desktop/src/main.ts
+++ b/apps/desktop/src/main.ts
@@ -277,15 +277,24 @@ export class Main {
         const url = new URL(s);
         const code = url.searchParams.get("code");
         const receivedState = url.searchParams.get("state");
+        let message = "";
 
-        if (code == null || receivedState == null) {
+        if (code === null) {
           return;
         }
 
-        const message =
-          s.indexOf("bitwarden://import-callback-lp") === 0
-            ? "importCallbackLastPass"
-            : "ssoCallback";
+        if (s.indexOf("bitwarden://duo-callback") === 0) {
+          message = "duoCallback";
+        } else if (receivedState === null) {
+          return;
+        }
+
+        if (s.indexOf("bitwarden://import-callback-lp") === 0) {
+          message = "importCallbackLastPass";
+        } else if (s.indexOf("bitwarden://sso-callback") === 0) {
+          message = "ssoCallback";
+        }
+
         this.messagingService.send(message, { code: code, state: receivedState });
       });
   }
diff --git a/apps/web/src/locales/en/messages.json b/apps/web/src/locales/en/messages.json
index b965a176ab0..f9bbd0031bf 100644
--- a/apps/web/src/locales/en/messages.json
+++ b/apps/web/src/locales/en/messages.json
@@ -5928,13 +5928,13 @@
     }
   },
   "launchDuoAndFollowStepsToFinishLoggingIn": {
-    "message": "Launch DUO and follow the steps to finish logging in."
+    "message": "Launch Duo and follow the steps to finish logging in."
   },
   "duoRequiredByOrgForAccount": {
-    "message": "DUO two-step login is required for your account."
+    "message": "Duo two-step login is required for your account."
   },
   "launchDuo": {
-    "message": "Launch DUO"
+    "message": "Launch Duo"
   },
   "turnOn": {
     "message": "Turn on"