+
-## PostgreSQL Schema Scripts
+## Database Tables
-### Table: `mobile_app`
+
+### Mobile Applications
Contains information related to various mobile apps.
+#### Schema
+
+```sql
+CREATE TABLE mus_mobile_app (
+ id INTEGER PRIMARY KEY,
+ name VARCHAR(255) NOT NULL,
+ display_name VARCHAR(255) NOT NULL,
+ sign_private_key VARCHAR(255) NOT NULL,
+ sign_public_key VARCHAR(255) NOT NULL
+);
+```
+
+#### Columns
+
+| Column | Type | Description |
+|--------------------|----------------|--------------------------------------------------------------------------------------------------------------------------------------------------|
+| `id` | `INTEGER` | Primary key for the table, automatically incremented value. |
+| `name` | `VARCHAR(255)` | Name of the application, a machine readable value, such as `wlt-demo-app`. |
+| `display_name` | `VARCHAR(255)` | Display name of the application, a human readable value, such as `Wultra Demo App`. |
+| `sign_private_key` | `VARCHAR(255)` | Base64-encoded private key associated with the application. It is used for signing the data on the server side. |
+| `sign_public_key` | `VARCHAR(255)` | Base64-encoded public key associated with the application. It is used by the client applications when verifying data signed on the server side. |
+
+
+
+### Mobile App Domains
+
+Contains information related to pinned domains.
+
+#### Schema
+
+```sql
+CREATE TABLE mus_mobile_domain (
+ id INTEGER PRIMARY KEY,
+ app_id INTEGER NOT NULL,
+ domain VARCHAR(255) NOT NULL
+);
+```
+
+#### Columns
+
+| Column | Type | Description |
+|--------------------|----------------|-------------------------------------------------------------|
+| `id` | `INTEGER` | Primary key for the table, automatically incremented value. |
+| `app_id` | `INTEGER` | Reference to related mobile app entity. |
+| `domain` | `VARCHAR(255)` | Host name of the domain, such as `mobile.wultra.com`. |
+
+
+
+### SSL Certificate
+
+Table with TLS/SSL certificate and fingerprints that should be pinned in the mobile app.
+
+#### Schema
+
+```sql
+CREATE TABLE mus_certificate (
+ id INTEGER PRIMARY KEY,
+ pem TEXT NOT NULL,
+ fingerprint VARCHAR(255) NOT NULL,
+ expires INTEGER NOT NULL,
+ mobile_domain_id INTEGER NOT NULL
+);
+```
+
+#### Columns
+
+| Column | Type | Description |
+|--------------------|----------------|---------------------------------------------------------------------------|
+| `id` | `INTEGER` | Primary key for the table, automatically incremented value. |
+| `pem` | `TEXT` | Original certificate value in PEM format. |
+| `fingerprint` | `VARCHAR(255)` | Value of the certificate fingerprint. |
+| `expires` | `INTEGER` | Unix timestamp (seconds since Jan 1, 1970) of the certificate expiration. |
+| `mobile_domain_id` | `INTEGER` | Reference to related application domain in the `mus_mobile_domain` table. |
+
+
+
+### Administrative User
+
+Table with users for basic HTTP authentication.
+
+#### Schema
+
+```sql
+CREATE TABLE mus_user (
+ id INTEGER PRIMARY KEY,
+ username VARCHAR(255) NOT NULL UNIQUE,
+ password VARCHAR(255) NOT NULL,
+ enabled BOOLEAN NOT NULL
+);
+```
+
+#### Columns
+
+| Column | Type | Description |
+|--------------------|----------------|----------------------------------------------------------------------------------|
+| `id` | `INTEGER` | Primary key for the table, automatically incremented value. |
+| `username` | `VARCHAR(255)` | Username of the user. |
+| `password` | `VARCHAR(255)` | Password of the user (`bcrypt` by default, or `{SHA-256}` prefix for `SHA-256`). |
+| `enabled` | `BOOLEAN` | Indication if the user is enabled or not. |
+
+
+
+### Administrative User Authorities
+
+Table with users authorities.
+
+#### Schema
+
+```sql
+CREATE TABLE mus_user_authority (
+ id INTEGER PRIMARY KEY,
+ user_id INTEGER NOT NULL UNIQUE,
+ authority VARCHAR(255) NOT NULL
+);
+```
+
+#### Columns
+
+| Column | Type | Description |
+|-------------|----------------|----------------------------------------------------------------------|
+| `id` | `INTEGER` | Primary key for the table, automatically incremented value. |
+| `user_id` | `INTEGER` | Foreign key column referencing users in `mus_user` table. |
+| `authority` | `VARCHAR(255)` | Name of authority for the user prefixed with `ROLE_` (`ROLE_ADMIN`). |
+
+
+
+
+### Mobile Application Version
+
+Table to force or suggest update of mobile application version.
+
+#### Schema
+
```sql
-create table mobile_app
+create table mus_mobile_app_version
(
- id int primary key,
- name varchar(255) null,
- display_name varchar(255) null,
- sign_private_key varchar(255) null,
- sign_public_key varchar(255) null
+ id integer not null primary key,
+ app_id integer not null,
+ platform varchar(10) not null,
+ major_os_version integer,
+ suggested_version varchar(24),
+ required_version varchar(24),
+ message_key varchar(255)
);
```
-| Column | Type | Description |
-|---|---|---|
-| `id` | `INT` | Primary key for the table, automatically incremented value. |
-| `name` | `VARCHAR(255)` | Name of the application, a machine readable value, such as `wlt-demo-app`. |
-| `display_name` | `VARCHAR(255)` | Display name of the application, a human readable value, such as `Wultra Demo App`. |
-| `sign_private_key` | `VARCHAR(255)` | Base64-encoded private key associated with the application. It is used for signing the data on the server side. |
-| `sign_public_key` | `VARCHAR(255)` | Base64-encoded public key associated with the application. It is used by the client applications when verifying data signed on the server side. |
+#### Columns
+
+| Column | Type | Description |
+|---------------------|----------------|------------------------------------------------------------------------------------------------------------------------|
+| `id` | `INTEGER` | Primary key for the table, automatically incremented value. |
+| `app_id` | `INTEGER` | Reference to related mobile app entity. |
+| `platform` | `VARCHAR(10)` | `ANDROID`, `IOS` |
+| `major_os_version` | `INTEGER` | For iOS e.g. 12.4.2 it is 12. For Android, it is API level e.g. 29. When `null`, the rule is applied for all versions. |
+| `suggested_version` | `VARCHAR(24)` | If the application version is lower, update is suggested. |
+| `required_version` | `VARCHAR(24)` | If the application version is lower, update is required. |
+| `message_key` | `VARCHAR(255)` | Together with language identifies row in `mus_localized_text` |
+
-### Table: `mobile_ssl_pinning`
-Table with TLS/SSL certificate fingerprints that should be pinned in the mobile app.
+
+### Localized Text
+
+Table with localized texts.
+
+#### Schema
```sql
-create table mobile_ssl_pinning
+create table mus_localized_text
(
- id int primary key,
- name varchar(255) not null,
- fingerprint varchar(255) not null,
- expires int null,
- app_id int not null
+ message_key varchar(255) not null,
+ language varchar(2) not null,
+ text text not null,
+ primary key (message_key, language)
);
```
-| Column | Type | Description |
-|---|---|---|
-| `id` | `INT` | Primary key for the table, automatically incremented value. |
-| `name` | `VARCHAR(255)` | Domain name, such as `mobile.wultra.com`. |
-| `fingerprint` | `VARCHAR(255)` | Value of the certificate fingerprint. |
-| `expires` | `INT` | Unix timestamp (seconds since Jan 1, 1970) of the certificate expiration. |
-| `app_id` | `INT` | Reference to related application in the `mobile_app` table. |
+#### Columns
+
+| Column | Type | Description |
+|---------------|----------------|--------------------------------------------------------------------------|
+| `message_key` | `VARCHAR(255)` | Primary composite key for the table. |
+| `language` | `VARCHAR(2)` | Primary composite key for the table. ISO 639-1 two-letter language code. |
+| `text` | `TEXT` | Localized text. |
+
+
+
+## Sequences
+
+
+### Mobile App Sequence
+
+Sequence responsible for mobile app autoincrements.
+
+#### Schema
+
+```sql
+CREATE SEQUENCE IF NOT EXISTS mus_mobile_app_seq INCREMENT BY 1 START WITH 1 CACHE 20;
+```
+
+
+
+### Mobile App Domain Sequence
+
+Sequence responsible for mobile domain autoincrements.
+
+#### Schema
+
+```sql
+CREATE SEQUENCE IF NOT EXISTS mus_mobile_domain_seq INCREMENT BY 1 START WITH 1 CACHE 20;
+```
+
+
+
+### SSL Certificate Sequence
+
+Sequence responsible for SSL certificates and fingerprints autoincrements.
+
+#### Schema
+
+```sql
+CREATE SEQUENCE IF NOT EXISTS mus_certificates_seq INCREMENT BY 1 START WITH 1 CACHE 20;
+```
+
+
+
+### Mobile Application Version Sequence
+
+Sequence responsible for mobile application version autoincrements.
+
+#### Schema
+
+```sql
+CREATE SEQUENCE IF NOT EXISTS mus_mobile_app_version_seq INCREMENT BY 1 START WITH 1 CACHE 20;
+```
+
+
+
+## Foreign Indexes
+
+The tables are relatively small and as a result, do not require indexes. To marginally improve the lookup performance, you can create the following foreign indexes.
+
+
+### Foreign Index for SSL Fingerprint Lookup
+
+Foreign index for mapping the fingerprint to domain.
+
+#### Schema
+```sql
+ALTER TABLE mus_mobile_fingerprint
+ ADD CONSTRAINT mobile_ssl_pinning_app_fk FOREIGN KEY (mobile_domain_id)
+ REFERENCES mus_mobile_domain ON UPDATE CASCADE ON DELETE CASCADE;
+```
+
-### Sequence `hibernate_sequence`
+
+### Foreign Index for Domain Lookup
-Sequence responsible for identifier autoincrement.
+Foreign index to map the domain to mobile app.
+#### Schema
```sql
-create sequence hibernate_sequence minvalue 1 maxvalue 9999999999999 cache 20;
+ALTER TABLE mus_mobile_domain
+ ADD CONSTRAINT mus_mobile_domain_fk FOREIGN KEY (app_id)
+ REFERENCES mus_mobile_app ON UPDATE CASCADE ON DELETE CASCADE;
```
+
-### Foreign Indexes
+
+### Foreign Index for User Authority Lookup
-The tables are relatively small and as a result, do not require indexes. To marginally improve the lookup performance, you can create the following foreign index.
+Foreign index to map the user authority to the user.
+#### Schema
```sql
-ALTER TABLE mobile_ssl_pinning
- ADD CONSTRAINT mobile_ssl_pinning_app_fk
- FOREIGN KEY (app_id) REFERENCES mobile_app
- ON UPDATE CASCADE ON DELETE CASCADE;
+ALTER TABLE mus_user_authority
+ ADD CONSTRAINT mus_user_fk FOREIGN KEY (app_id)
+ REFERENCES mus_user ON UPDATE CASCADE ON DELETE CASCADE;
```
+
diff --git a/docs/Deployment.md b/docs/Deployment.md
index a4326616..5c358374 100644
--- a/docs/Deployment.md
+++ b/docs/Deployment.md
@@ -1,20 +1,63 @@
# Deployment
-You can easily deploy the application WAR to any application container, such as Apache Tomcat or JBoss Wildfly.
+You can easily deploy the application WAR to any application container, such as Apache Tomcat or JBoss Wildfly, run it as a standalone Spring Boot application, or via Docker.
## Configuration Properties
-Use the following properties to define database connectivity:
+Use properties or environment variables to define database connectivity properties.
+
+### Minimal Configuration
+
+To configure the JDBC connectivity, use the following properties or environment variables:
```
-spring.datasource.url=${JDBC_DATABASE_URL}
-spring.datasource.username=${JDBC_DATABASE_USERNAME}
-spring.datasource.password=${JDBC_DATABASE_PASSWORD}
-spring.datasource.driverClassName=org.postgresql.Driver
+spring.datasource.url=${MOBILE_UTILITY_SERVER_DATASOURCE_URL:jdbc:postgresql://host.docker.internal:5432/powerauth}
+spring.datasource.username=${MOBILE_UTILITY_SERVER_DATASOURCE_USERNAME:powerauth}
+spring.datasource.password=${MOBILE_UTILITY_SERVER_DATASOURCE_PASSWORD:}
```
-Alternatively, you can use the JNDI name to configure the database connection:
+### Additional Configuration Options
+You can customize other frequent database properties using the following properties or environment variables:
+
+```
+spring.datasource.driverClassName=${MOBILE_UTILITY_SERVER_DATASOURCE_DRIVER:org.postgresql.Driver}
+spring.jpa.properties.hibernate.connection.CharSet=${MOBILE_UTILITY_SERVER_JPA_CHARSET:}
+spring.jpa.properties.hibernate.connection.characterEncoding=${MOBILE_UTILITY_SERVER_JPA_CHARACTER_ENCODING:utf8}
+spring.jpa.properties.hibernate.connection.useUnicode=${MOBILE_UTILITY_SERVER_JPA_USE_UNICODE:true}
+spring.jpa.database-platform=${MOBILE_UTILITY_SERVER_JPA_DATABASE_PLATFORM:org.hibernate.dialect.PostgreSQLDialect}
+spring.datasource.jndi-name=${MOBILE_UTILITY_SERVER_DATASOURCE_JNDI_NAME:false}
+spring.jpa.hibernate.ddl-auto=${MOBILE_UTILITY_SERVER_JPA_DDL_AUTO:none}
```
-spring.datasource.jndi-name=${JNDI_NAME}
+
+The application also supports any Spring Boot configuration properties.
+
+## Running in Docker
+
+You can easily deploy the development version of application to your Docker container by running the following commands:
+
+```sh
+git clone https://github.com/wultra/mobile-utility-server.git
+cd mobile-utility-server
+docker build -f Dockerfile . -t mobile-utility-server
+docker run --env-file deploy/env.list.tmp -d -it -p 8080:8000 --name=mobile-utility-server mobile-utility-server
```
+
+The Docker image automatically builds the current source codes and creates the database schema using Liquibase. All you need to do to run it successfully is to set the required database properties via environment variables.
+
+## Running the Spring Boot Application
+
+You can also build and run standard Spring Boot application:
+
+```sh
+git clone https://github.com/wultra/mobile-utility-server.git
+cd mobile-utility-server
+mvn spring-boot:run
+```
+
+To pass custom application properties, use:
+
+```sh
+mvn spring-boot:run \
+ -Dspring-boot.run.arguments=--spring.config.location=classpath:application.properties,deploy/conf/application.properties
+```
\ No newline at end of file
diff --git a/docs/Migration-Instructions.md b/docs/Migration-Instructions.md
new file mode 100644
index 00000000..202e4120
--- /dev/null
+++ b/docs/Migration-Instructions.md
@@ -0,0 +1,5 @@
+# Migration Instructions
+
+This page contains Mobile Utility Server migration instructions.
+
+- [Mobile Utility Server 1.5.0](./Mobile-Utility-Server-1.5.0.md)
diff --git a/docs/Mobile-Utility-Server-1.5.0.md b/docs/Mobile-Utility-Server-1.5.0.md
new file mode 100644
index 00000000..3ab0cc56
--- /dev/null
+++ b/docs/Mobile-Utility-Server-1.5.0.md
@@ -0,0 +1,95 @@
+# Migration from 1.1.x to 1.5.0
+
+This guide provides step-by-step instructions for migrating from PowerAuth Mobile Utility Server version 1.1.x to version 1.5.0.
+
+
+## Prerequisites
+
+1. **SQL Scripts & Liquibase Tool**: Ensure you have the necessary SQL scripts and the Liquibase tool available.
+ Depending on your database type, the scripts can be found at:
+
+ - Oracle: `${repo_root}/docs/sql/oracle`
+ - PostgreSQL: `${repo_root}/docs/sql/postgresql`
+
+2. **Docker DB Update Script**: Before running the script `docker-db-update.sh`, ensure that you have set up the
+ required environment variables. For a list of the required environment variables or additional details, refer to the
+ associated documentation [Deployment.md](Deployment.md).
+
+
+## Migration Steps
+
+1. **Stop the Application**: Ensure that the PowerAuth Mobile Utility Server application is not running. Shut it down if
+ it's currently active.
+
+2. **Backup the Database**: Before making any changes, it's crucial to **back up your database**. This step ensures you have
+ a fallback in case of any unforeseen issues.
+
+ > **IMPORTANT**: Ensure that you've backed up your entire database before proceeding
+
+3. **Run Liquibase update**: Execute [liquibase](https://www.liquibase.com/download) scripts located in `docs\db\changelog\db.changelog-master`
+- For convenience, you can use supplied Dockerfiles and apply the database changes by execute the `docker-db-update.sh` script.
+- If direct update via Liquibase is not possible `liquibase update` command can generate required SQL script.
+
+ Please take a look at a list of necessary environmental variables listed
+ here [env.list.tmp](../deploy/env.list.tmp).
+
+4. **Execute Migration Script**: After applying the Liquibase changes, run the `1.5.0-migration.sql` script located in the sql directory.
+
+5. **Start the PowerAuth MUS Application**: Once all the database changes are successfully applied, restart the
+ PowerAuth Mobile Utility Server application.
+
+6. **Import Certificates**: Certificates are not possible to migrate automatically.
+It is needed to [Importing Certificate in PEM Format](Configuration.md#importing-certificate-in-pem-format) via API. See [Creating First Admin User](Configuration.md#creating-first-admin-user).
+
+7. **Test Certificate Pinning**: Test that the functionality certificate pinning is working.
+
+8. **Execute Cleanup Script**: When you are sure that the application is working, run the `1.5.0-cleanup.sql` script located in the sql directory.
+
+
+## Database Changes - detailed description of changes above
+
+The steps detailed above have taken care of migrating the database structure. The following is an overview of the major
+changes:
+
+
+### Data Migration between Tables
+
+The migration involves transferring data from old tables to new ones. Post data transfer, the old tables are discarded.
+
+```sql
+-- Migrate data
+-- TABLES
+
+-- For table mobile_app
+INSERT INTO mus_mobile_app SELECT * FROM mobile_app;
+
+-- There is no migration for table certificate
+```
+
+
+### Removal of Deprecated Tables and Sequences
+
+After the data migration is successfully completed, the old tables and their associated sequences, which are no longer
+in use, have been removed.
+
+```sql
+-- Drop old tables
+DROP TABLE mobile_ssl_pinning CASCADE;
+DROP TABLE mobile_app CASCADE;
+
+-- Drop old sequences
+DROP SEQUENCE mobile_ssl_pinning_seq CASCADE;
+DROP SEQUENCE mobile_app_seq CASCADE;
+```
+
+
+### Conclusion
+
+Upon successfully executing the provided SQL commands and scripts, the migration process is complete.
+Ensure to verify and test the updated database to confirm the successful migration from version 1.1.0 to 1.5.0.
+
+
+## API
+
+There is a new context path `/admin` for administrative purposes.
+It is authenticated, but it should be exposed only in trusted networks.
diff --git a/docs/Public-REST-API.md b/docs/Public-REST-API.md
new file mode 100644
index 00000000..ff4a6016
--- /dev/null
+++ b/docs/Public-REST-API.md
@@ -0,0 +1,176 @@
+# Public RESTful API
+
+Mobile Utility Server publishes comprehensive RESTful API with all endpoints required by a mobile app:
+
+- [Get App Public Key](#get-app-public-key)
+- [Get App Fingerprints](#get-app-fingerprints)
+
+## Swagger Documentation
+
+Application publishes a Swagger UI documentation at the `/swagger-ui.html` path with up-to-date information about published endpoints.
+
+## Error Handling
+
+REST API returns errors in a unified format:
+
+```json
+{
+ "code": "${ERROR_CODE}",
+ "message": "${ERROR_MESSAGE}"
+}
+```
+
+| attribute | Description |
+|-----------|-----------------------------------------------------|
+| `code` | Unique code of an error, represents the error type. |
+| `message` | Description of an error with additional details. |
+
+## Published Resources
+
+### Get App Public Key
+
+Method to obtain the public key for a provided application ID. You should obtain this key manually and include it in your application. Do not download the key from the mobile application directly, since MITM attack is possible.
+
+#### Request `GET /app/init/public-key?appName=${name}`
+
+| Query Param | Description |
+|---------------|--------------------------|
+| `appName` | Name of the application. |
+
+#### Response
+
+Returns the public key in case of the success, or a standardized error output in the case of an error.
+
+##### 200 OK
+
+In the case of a success.
+
+```json
+{
+ "publicKey": "BCeNRoRsy2KjIk7J...cp0="
+}
+```
+
+| Response Attribute | Description |
+|--------------------|---------------------------------------------------|
+| `publicKey` | The signature public key for a given application. |
+
+##### 400 Bad Request
+
+In case of any generic error.
+
+```json
+{
+ "id": "${ERROR_ID}",
+ "code": "${ERROR_CODE}",
+ "message": "${ERROR_MESSAGE}"
+}
+```
+
+##### 404 Not Found
+
+In case application with given name is not found.
+
+```json
+{
+ "code": "PUBLIC_KEY_NOT_FOUND",
+ "message": "Public key for the provided app name was not found."
+}
+```
+
+### Get App Fingerprints
+
+Method to obtain the fingerprints of the certificates that are pinned in the app for a provided application ID.
+Optionally also verify whether the mobile application version is up-to-date or whether it should or must be updated.
+
+#### Request `GET /app/init?appName=${name}&appVersion=${appVersion}&osVersion=${osVersion}&platform=${platform}`
+
+| Header | Description |
+|---|---|
+| `X-Cert-Pinning-Challenge` | Random challenge that is included in the response signature calculation. It must be at least 16 bytes long. |
+
+| Query Param | Description |
+|--------------|----------------------------------------------------------------------------------------------------------------------------------------------|
+| `appName` | Name of the application. |
+| `appVersion` | Application version in SemVer 2.0 format but only MAJOR.MINOR.PATCH are taken into account. (Optional, but needed for version verification.) |
+| `osVersion` | Operation system version, e.g. '31' for Android or '14.5.1' for iOS. (Optional, but needed for version verification.) |
+| `platfrom` | Platform: `ANDROID`, `IOS` (Optional, but needed for version verification.) |
+
+#### Response
+
+Returns the list of fingerprints in case of the success together with optional result of version verification, or a standardized error output in the case of an error.
+
+##### 200 OK
+
+In the case of a successful call.
+
+```json
+{
+ "timestamp": 1604853448,
+ "fingerprints": [
+ {
+ "name": "test1.wultra.com",
+ "fingerprint": "/+zwSJh7....wo7s=",
+ "expires": 1627214400
+ },
+ {
+ "name": "test2.wultra.com",
+ "fingerprint": "fj8iVdqu....vCig=",
+ "expires": 1603108800
+ }
+ ],
+ "verifyVersionResult": {
+ "update": "NOT_REQUIRED"
+ }
+}
+```
+
+| Header | Description |
+|----------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `X-Cert-Pinning-Signature` | Base64 value of an encoded response signature. The signature contains the response challenge as well as full response data, and it must be validated on the client side before the client accepts the response. |
+
+| Response Attribute | Description |
+|-------------------------------|--------------------------------------------------------------------------------------------------------------|
+| `timestamp` | The current timestamp on the server side. |
+| `fingerprints` | Array with the TLS/SSL certificate signatures. |
+| `fingerprints.name` | Name of the domain, for example, `test1.wultra.com`. |
+| `fingerprints.fingerprint` | The value of the certificate/public key fingerprint. |
+| `fingerprints.expires` | Unix timestamp (seconds since Jan 01, 1970) of the pinned certificate expiration. |
+| `verifyVersionResult.update` | The update status of the mobile application version. Possible values: `NOT_REQUIRED`, `SUGGESTED`, `FORCED`. |
+| `verifyVersionResult.message` | Optional localized message, should be filled when the update status is `SUGGESTED` or `FORCED`. |
+
+##### 400 Bad Request
+
+In case of any generic error.
+
+```json
+{
+ "id": "${ERROR_ID}",
+ "code": "${ERROR_CODE}",
+ "message": "${ERROR_MESSAGE}"
+}
+```
+
+##### 403 Unauthorized
+
+Returned if the challenge was missing, or if provided challenge was insufficient.
+
+```json
+{
+ "id": "93121111-1111-1111-1111-1111e8645505",
+ "code": "INSUFFICIENT_CHALLENGE",
+ "message": "Request does not contain sufficiently strong challenge header, 16B is required at least."
+}
+```
+
+##### 404 Not Found
+
+In case application with given name is not found.
+
+```json
+{
+ "id": "717e1111-1111-1111-1111-1111c53fe0da",
+ "code": "PUBLIC_KEY_NOT_FOUND",
+ "message": "Public key for the provided app name was not found."
+}
+```
diff --git a/docs/REST-API.md b/docs/REST-API.md
deleted file mode 100644
index 0c12e582..00000000
--- a/docs/REST-API.md
+++ /dev/null
@@ -1,170 +0,0 @@
-# Mobile Utility Server API
-
-Mobile Utility Server publishes comprehensive RESTful API with all endpoints required by a mobile app:
-
-- [Get App Public Key](#get-app-public-key)
-- [Get App Fingerprints](#get-app-fingerprints)
-
-## Swagger Documentation
-
-Application publishes a Swagger UI documentation at the `/swagger-ui.html` path with up-to-date information about published endpoints.
-
-## Error Handling
-
-REST API returns errors in a unified format:
-
-```json
-{
- "id": "${ERROR_ID}",
- "code": "${ERROR_CODE}",
- "message": "${ERROR_MESSAGE}"
-}
-```
-
-| attribute | Description |
-|---|---|
-| `id` | Unique ID of an error, for correlation in logs. |
-| `code` | Unique code of an error, represents the error type. |
-| `message` | Description of an error with additional details. |
-
-## Published Resources
-
-### Get App Public Key
-
-Method to obtain the public key for a provided application ID. You should obtain this key manually and include it in your application. Do not download the key from the mobile application directly, since MITM attack is possible.
-
-#### Request `GET /app/init/public-key?appName=${name}`
-
-| Query Param | Description |
-|---|---|
-| `appName` | Name of the application. |
-
-#### Response
-
-Returns the public key in case of the success, or a standardized error output in the case of an error.
-
-##### 200 OK
-
-In the case of a success.
-
-```json
-{
- "publicKey": "BCeNRoRsy2KjIk7J...cp0="
-}
-```
-
-| Response Attribute | Description |
-|---|---|
-| `publicKey` | The signature public key for a given application. |
-
-##### 400 Bad Request
-
-In case of any generic error.
-
-```json
-{
- "id": "${ERROR_ID}",
- "code": "${ERROR_CODE}",
- "message": "${ERROR_MESSAGE}"
-}
-```
-
-##### 404 Not Found
-
-In case application with given name is not found.
-
-```json
-{
- "id": "717e1111-1111-1111-1111-1111c53fe0da",
- "code": "PUBLIC_KEY_NOT_FOUND",
- "message": "Public key for the provided app name was not found."
-}
-```
-
-### Get App Fingerprints
-
-Method to obtain the fingerprints of the certificates that are pinned in the app for a provided application ID.
-
-#### Request `GET /app/init?appName=${name}`
-
-| Header | Description |
-|---|---|
-| `X-Cert-Pinning-Challenge` | Random challenge that is included in the response signature calculation. It must be at least 16 bytes long. |
-
-| Query Param | Description |
-|---|---|
-| `appName` | Name of the application. |
-
-#### Response
-
-Returns the list of finterprints in case of the success, or a standardized error output in the case of an error.
-
-##### 200 OK
-
-In the case of a successful call.
-
-```json
-{
- "timestamp": 1604853448,
- "fingerprints": [
- {
- "name": "test1.wultra.com",
- "fingerprint": "/+zwSJh7....wo7s=",
- "expires": 1627214400
- },
- {
- "name": "test2.wultra.com",
- "fingerprint": "fj8iVdqu....vCig=",
- "expires": 1603108800
- }
- ]
-}
-```
-
-| Header | Description |
-|---|---|
-| `X-Cert-Pinning-Signature` | Base64 value of an encoded response signature. The signature contains the response challenge as well as full response data, and it must be validated on the client side before the client accepts the response. |
-
-| Response Attribute | Description |
-|---|---|
-| `timestamp` | The current timestamp on the server side. |
-| `fingerprints` | Array with the TLS/SSL certificate signatures. |
-| `fingerprints.name` | Name of the domain, for example, `test1.wultra.com`. |
-| `fingerprints.fingerprint` | The value of the certificate/public key fingerprint. |
-| `fingerprints.expires` | Unix timestamp (seconds since Jan 01, 1970) of the pinned certificate expiration. |
-
-##### 400 Bad Request
-
-In case of any generic error.
-
-```json
-{
- "id": "${ERROR_ID}",
- "code": "${ERROR_CODE}",
- "message": "${ERROR_MESSAGE}"
-}
-```
-
-##### 403 Unauthorized
-
-Returned if the challenge was missing, or if provided challenge was insufficient.
-
-```json
-{
- "id": "93121111-1111-1111-1111-1111e8645505",
- "code": "INSUFFICIENT_CHALLENGE",
- "message": "Request does not contain sufficiently strong challenge header, 16B is required at least."
-}
-```
-
-##### 404 Not Found
-
-In case application with given name is not found.
-
-```json
-{
- "id": "717e1111-1111-1111-1111-1111c53fe0da",
- "code": "PUBLIC_KEY_NOT_FOUND",
- "message": "Public key for the provided app name was not found."
-}
-```
diff --git a/docs/Readme.md b/docs/Readme.md
index dfc9dca5..9b43e479 100644
--- a/docs/Readme.md
+++ b/docs/Readme.md
@@ -6,8 +6,9 @@
- [Overview](./Readme.md)
- [Deployment](./Deployment.md)
- [Database Structure](./Database-Structure.md)
+- [Migration Instructions](./Migration-Instructions.md)
- [Configuration](./Configuration.md)
-- [RESTful API](./REST-API.md)
+- [Public RESTful API](./Public-REST-API.md)
The Mobile Utility Server by [Wultra](https://wultra.com) is a utility server with various features required by the typical mobile apps.
diff --git a/docs/_Sidebar.md b/docs/_Sidebar.md
index 9e9c537c..d2611bac 100644
--- a/docs/_Sidebar.md
+++ b/docs/_Sidebar.md
@@ -4,6 +4,8 @@
[Database Structure](./Database-Structure.md)
+[Migration Instructions](./Migration-Instructions.md)
+
[Configuration](./Configuration.md)
-[RESTful API](./REST-API.md)
+[Public RESTful API](./Public-REST-API.md)
diff --git a/docs/db/changelog/changesets/mobile-utility-server/1.5.x/20230227-initial-import.xml b/docs/db/changelog/changesets/mobile-utility-server/1.5.x/20230227-initial-import.xml
new file mode 100644
index 00000000..c12b0d09
--- /dev/null
+++ b/docs/db/changelog/changesets/mobile-utility-server/1.5.x/20230227-initial-import.xml
@@ -0,0 +1,144 @@
+
+
+
+
+
+ * For iOS e.g. 12.4.2 it is 12. For Android, it is API level e.g. 29.
+ */
+ @Column(name = "major_os_version")
+ private Integer majorOsVersion;
+
+ @Column(name = "suggested_version")
+ private String suggestedVersion;
+
+ @Column(name = "required_version")
+ private String requiredVersion;
+
+ @Column(name = "message_key")
+ private String messageKey;
+
+ public enum Platform {
+ ANDROID,
+ IOS
+ }
+}
diff --git a/src/main/java/com/wultra/app/mobileutilityserver/database/model/MobileDomainEntity.java b/src/main/java/com/wultra/app/mobileutilityserver/database/model/MobileDomainEntity.java
new file mode 100644
index 00000000..a3a811f8
--- /dev/null
+++ b/src/main/java/com/wultra/app/mobileutilityserver/database/model/MobileDomainEntity.java
@@ -0,0 +1,104 @@
+/*
+ * Wultra Mobile Utility Server
+ * Copyright (C) 2023 Wultra s.r.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see Version: 0.24.0 Build Time: 2020-05-01T00:00:00 `s get reset. However, we also reset the\n// bottom margin to use `rem` units instead of `em`.\np {\n margin-top: 0;\n margin-bottom: $paragraph-margin-bottom;\n}\n\n// Abbreviations\n//\n// 1. Duplicate behavior to the data-* attribute for our tooltip plugin\n// 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n// 3. Add explicit cursor to indicate changed behavior.\n// 4. Remove the bottom border in Firefox 39-.\n// 5. Prevent the text-decoration to be skipped.\n\nabbr[title],\nabbr[data-original-title] { // 1\n text-decoration: underline; // 2\n text-decoration: underline dotted; // 2\n cursor: help; // 3\n border-bottom: 0; // 4\n text-decoration-skip-ink: none; // 5\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: $dt-font-weight;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0; // Undo browser default\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\nb,\nstrong {\n font-weight: $font-weight-bolder; // Add the correct font weight in Chrome, Edge, and Safari\n}\n\nsmall {\n @include font-size(80%); // Add the correct font size in all browsers\n}\n\n//\n// Prevent `sub` and `sup` elements from affecting the line height in\n// all browsers.\n//\n\nsub,\nsup {\n position: relative;\n @include font-size(75%);\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub { bottom: -.25em; }\nsup { top: -.5em; }\n\n\n//\n// Links\n//\n\na {\n color: $link-color;\n text-decoration: $link-decoration;\n background-color: transparent; // Remove the gray background on active links in IE 10.\n\n @include hover() {\n color: $link-hover-color;\n text-decoration: $link-hover-decoration;\n }\n}\n\n// And undo these styles for placeholder links/named anchors (without href).\n// It would be more straightforward to just use a[href] in previous block, but that\n// causes specificity issues in many other styles that are too complex to fix.\n// See https://github.com/twbs/bootstrap/issues/19402\n\na:not([href]) {\n color: inherit;\n text-decoration: none;\n\n @include hover() {\n color: inherit;\n text-decoration: none;\n }\n}\n\n\n//\n// Code\n//\n\npre,\ncode,\nkbd,\nsamp {\n font-family: $font-family-monospace;\n @include font-size(1em); // Correct the odd `em` font sizing in all browsers.\n}\n\npre {\n // Remove browser default top margin\n margin-top: 0;\n // Reset browser default of `1em` to use `rem`s\n margin-bottom: 1rem;\n // Don't allow content to break outside\n overflow: auto;\n}\n\n\n//\n// Figures\n//\n\nfigure {\n // Apply a consistent margin strategy (matches our type styles).\n margin: 0 0 1rem;\n}\n\n\n//\n// Images and content\n//\n\nimg {\n vertical-align: middle;\n border-style: none; // Remove the border on images inside links in IE 10-.\n}\n\nsvg {\n // Workaround for the SVG overflow bug in IE10/11 is still required.\n // See https://github.com/twbs/bootstrap/issues/26878\n overflow: hidden;\n vertical-align: middle;\n}\n\n\n//\n// Tables\n//\n\ntable {\n border-collapse: collapse; // Prevent double borders\n}\n\ncaption {\n padding-top: $table-cell-padding;\n padding-bottom: $table-cell-padding;\n color: $table-caption-color;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n // Matches default ` `s get reset. However, we also reset the\n// bottom margin to use `rem` units instead of `em`.\np {\n margin-top: 0;\n margin-bottom: $paragraph-margin-bottom;\n}\n\n// Abbreviations\n//\n// 1. Duplicate behavior to the data-* attribute for our tooltip plugin\n// 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n// 3. Add explicit cursor to indicate changed behavior.\n// 4. Remove the bottom border in Firefox 39-.\n// 5. Prevent the text-decoration to be skipped.\n\nabbr[title],\nabbr[data-original-title] { // 1\n text-decoration: underline; // 2\n text-decoration: underline dotted; // 2\n cursor: help; // 3\n border-bottom: 0; // 4\n text-decoration-skip-ink: none; // 5\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: $dt-font-weight;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0; // Undo browser default\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\nb,\nstrong {\n font-weight: $font-weight-bolder; // Add the correct font weight in Chrome, Edge, and Safari\n}\n\nsmall {\n @include font-size(80%); // Add the correct font size in all browsers\n}\n\n//\n// Prevent `sub` and `sup` elements from affecting the line height in\n// all browsers.\n//\n\nsub,\nsup {\n position: relative;\n @include font-size(75%);\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub { bottom: -.25em; }\nsup { top: -.5em; }\n\n\n//\n// Links\n//\n\na {\n color: $link-color;\n text-decoration: $link-decoration;\n background-color: transparent; // Remove the gray background on active links in IE 10.\n\n @include hover() {\n color: $link-hover-color;\n text-decoration: $link-hover-decoration;\n }\n}\n\n// And undo these styles for placeholder links/named anchors (without href).\n// It would be more straightforward to just use a[href] in previous block, but that\n// causes specificity issues in many other styles that are too complex to fix.\n// See https://github.com/twbs/bootstrap/issues/19402\n\na:not([href]) {\n color: inherit;\n text-decoration: none;\n\n @include hover() {\n color: inherit;\n text-decoration: none;\n }\n}\n\n\n//\n// Code\n//\n\npre,\ncode,\nkbd,\nsamp {\n font-family: $font-family-monospace;\n @include font-size(1em); // Correct the odd `em` font sizing in all browsers.\n}\n\npre {\n // Remove browser default top margin\n margin-top: 0;\n // Reset browser default of `1em` to use `rem`s\n margin-bottom: 1rem;\n // Don't allow content to break outside\n overflow: auto;\n}\n\n\n//\n// Figures\n//\n\nfigure {\n // Apply a consistent margin strategy (matches our type styles).\n margin: 0 0 1rem;\n}\n\n\n//\n// Images and content\n//\n\nimg {\n vertical-align: middle;\n border-style: none; // Remove the border on images inside links in IE 10-.\n}\n\nsvg {\n // Workaround for the SVG overflow bug in IE10/11 is still required.\n // See https://github.com/twbs/bootstrap/issues/26878\n overflow: hidden;\n vertical-align: middle;\n}\n\n\n//\n// Tables\n//\n\ntable {\n border-collapse: collapse; // Prevent double borders\n}\n\ncaption {\n padding-top: $table-cell-padding;\n padding-bottom: $table-cell-padding;\n color: $table-caption-color;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n // Matches default ` `s get reset. However, we also reset the\n// bottom margin to use `rem` units instead of `em`.\np {\n margin-top: 0;\n margin-bottom: $paragraph-margin-bottom;\n}\n\n// Abbreviations\n//\n// 1. Duplicate behavior to the data-* attribute for our tooltip plugin\n// 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n// 3. Add explicit cursor to indicate changed behavior.\n// 4. Remove the bottom border in Firefox 39-.\n// 5. Prevent the text-decoration to be skipped.\n\nabbr[title],\nabbr[data-original-title] { // 1\n text-decoration: underline; // 2\n text-decoration: underline dotted; // 2\n cursor: help; // 3\n border-bottom: 0; // 4\n text-decoration-skip-ink: none; // 5\n}\n\naddress {\n margin-bottom: 1rem;\n font-style: normal;\n line-height: inherit;\n}\n\nol,\nul,\ndl {\n margin-top: 0;\n margin-bottom: 1rem;\n}\n\nol ol,\nul ul,\nol ul,\nul ol {\n margin-bottom: 0;\n}\n\ndt {\n font-weight: $dt-font-weight;\n}\n\ndd {\n margin-bottom: .5rem;\n margin-left: 0; // Undo browser default\n}\n\nblockquote {\n margin: 0 0 1rem;\n}\n\nb,\nstrong {\n font-weight: $font-weight-bolder; // Add the correct font weight in Chrome, Edge, and Safari\n}\n\nsmall {\n @include font-size(80%); // Add the correct font size in all browsers\n}\n\n//\n// Prevent `sub` and `sup` elements from affecting the line height in\n// all browsers.\n//\n\nsub,\nsup {\n position: relative;\n @include font-size(75%);\n line-height: 0;\n vertical-align: baseline;\n}\n\nsub { bottom: -.25em; }\nsup { top: -.5em; }\n\n\n//\n// Links\n//\n\na {\n color: $link-color;\n text-decoration: $link-decoration;\n background-color: transparent; // Remove the gray background on active links in IE 10.\n\n @include hover() {\n color: $link-hover-color;\n text-decoration: $link-hover-decoration;\n }\n}\n\n// And undo these styles for placeholder links/named anchors (without href).\n// It would be more straightforward to just use a[href] in previous block, but that\n// causes specificity issues in many other styles that are too complex to fix.\n// See https://github.com/twbs/bootstrap/issues/19402\n\na:not([href]) {\n color: inherit;\n text-decoration: none;\n\n @include hover() {\n color: inherit;\n text-decoration: none;\n }\n}\n\n\n//\n// Code\n//\n\npre,\ncode,\nkbd,\nsamp {\n font-family: $font-family-monospace;\n @include font-size(1em); // Correct the odd `em` font sizing in all browsers.\n}\n\npre {\n // Remove browser default top margin\n margin-top: 0;\n // Reset browser default of `1em` to use `rem`s\n margin-bottom: 1rem;\n // Don't allow content to break outside\n overflow: auto;\n}\n\n\n//\n// Figures\n//\n\nfigure {\n // Apply a consistent margin strategy (matches our type styles).\n margin: 0 0 1rem;\n}\n\n\n//\n// Images and content\n//\n\nimg {\n vertical-align: middle;\n border-style: none; // Remove the border on images inside links in IE 10-.\n}\n\nsvg {\n // Workaround for the SVG overflow bug in IE10/11 is still required.\n // See https://github.com/twbs/bootstrap/issues/26878\n overflow: hidden;\n vertical-align: middle;\n}\n\n\n//\n// Tables\n//\n\ntable {\n border-collapse: collapse; // Prevent double borders\n}\n\ncaption {\n padding-top: $table-cell-padding;\n padding-bottom: $table-cell-padding;\n color: $table-caption-color;\n text-align: left;\n caption-side: bottom;\n}\n\nth {\n // Matches default `System Information
+ Available Interfaces
+
+
+ Contact Us
+
+
+ ` elements.\n\nbody {\n margin: 0; // 1\n font-family: $font-family-base;\n @include font-size($font-size-base);\n font-weight: $font-weight-base;\n line-height: $line-height-base;\n color: $body-color;\n text-align: left; // 3\n background-color: $body-bg; // 2\n}\n\n// Future-proof rule: in browsers that support :focus-visible, suppress the focus outline\n// on elements that programmatically receive focus but wouldn't normally show a visible\n// focus outline. In general, this would mean that the outline is only applied if the\n// interaction that led to the element receiving programmatic focus was a keyboard interaction,\n// or the browser has somehow determined that the user is primarily a keyboard user and/or\n// wants focus outlines to always be presented.\n//\n// See https://developer.mozilla.org/en-US/docs/Web/CSS/:focus-visible\n// and https://developer.paciellogroup.com/blog/2018/03/focus-visible-and-backwards-compatibility/\n[tabindex=\"-1\"]:focus:not(:focus-visible) {\n outline: 0 !important;\n}\n\n\n// Content grouping\n//\n// 1. Add the correct box sizing in Firefox.\n// 2. Show the overflow in Edge and IE.\n\nhr {\n box-sizing: content-box; // 1\n height: 0; // 1\n overflow: visible; // 2\n}\n\n\n//\n// Typography\n//\n\n// Remove top margins from headings\n//\n// By default, ` `-`
` all receive top and bottom margins. We nuke the top\n// margin for easier control within type scales as it avoids margin collapsing.\n// stylelint-disable-next-line selector-list-comma-newline-after\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: $headings-margin-bottom;\n}\n\n// Reset margins on paragraphs\n//\n// Similarly, the top margin on `
` alignment by inheriting from the ``, or the\n // closest parent with a set `text-align`.\n text-align: inherit;\n}\n\n\n//\n// Forms\n//\n\nlabel {\n // Allow labels to use `margin` for spacing.\n display: inline-block;\n margin-bottom: $label-margin-bottom;\n}\n\n// Remove the default `border-radius` that macOS Chrome adds.\n//\n// Details at https://github.com/twbs/bootstrap/issues/24093\nbutton {\n // stylelint-disable-next-line property-blacklist\n border-radius: 0;\n}\n\n// Work around a Firefox/IE bug where the transparent `button` background\n// results in a loss of the default `button` focus styles.\n//\n// Credit: https://github.com/suitcss/base/\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0; // Remove the margin in Firefox and Safari\n font-family: inherit;\n @include font-size(inherit);\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible; // Show the overflow in Edge\n}\n\nbutton,\nselect {\n text-transform: none; // Remove the inheritance of text transform in Firefox\n}\n\n// Remove the inheritance of word-wrap in Safari.\n//\n// Details at https://github.com/twbs/bootstrap/issues/24990\nselect {\n word-wrap: normal;\n}\n\n\n// 1. Prevent a WebKit bug where (2) destroys native `audio` and `video`\n// controls in Android 4.\n// 2. Correct the inability to style clickable types in iOS and Safari.\nbutton,\n[type=\"button\"], // 1\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button; // 2\n}\n\n// Opinionated: add \"hand\" cursor to non-disabled button elements.\n@if $enable-pointer-cursor-for-buttons {\n button,\n [type=\"button\"],\n [type=\"reset\"],\n [type=\"submit\"] {\n &:not(:disabled) {\n cursor: pointer;\n }\n }\n}\n\n// Remove inner border and padding from Firefox, but don't restore the outline like Normalize.\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box; // 1. Add the correct box sizing in IE 10-\n padding: 0; // 2. Remove the padding in IE 10-\n}\n\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n // Remove the default appearance of temporal inputs to avoid a Mobile Safari\n // bug where setting a custom line-height prevents text from being vertically\n // centered within the input.\n // See https://bugs.webkit.org/show_bug.cgi?id=139848\n // and https://github.com/twbs/bootstrap/issues/11266\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto; // Remove the default vertical scrollbar in IE.\n // Textareas should really only resize vertically so they don't break their (horizontal) containers.\n resize: vertical;\n}\n\nfieldset {\n // Browsers set a default `min-width: min-content;` on fieldsets,\n // unlike e.g. ` ` elements.\n\nbody {\n margin: 0; // 1\n font-family: $font-family-base;\n @include font-size($font-size-base);\n font-weight: $font-weight-base;\n line-height: $line-height-base;\n color: $body-color;\n text-align: left; // 3\n background-color: $body-bg; // 2\n}\n\n// Future-proof rule: in browsers that support :focus-visible, suppress the focus outline\n// on elements that programmatically receive focus but wouldn't normally show a visible\n// focus outline. In general, this would mean that the outline is only applied if the\n// interaction that led to the element receiving programmatic focus was a keyboard interaction,\n// or the browser has somehow determined that the user is primarily a keyboard user and/or\n// wants focus outlines to always be presented.\n//\n// See https://developer.mozilla.org/en-US/docs/Web/CSS/:focus-visible\n// and https://developer.paciellogroup.com/blog/2018/03/focus-visible-and-backwards-compatibility/\n[tabindex=\"-1\"]:focus:not(:focus-visible) {\n outline: 0 !important;\n}\n\n\n// Content grouping\n//\n// 1. Add the correct box sizing in Firefox.\n// 2. Show the overflow in Edge and IE.\n\nhr {\n box-sizing: content-box; // 1\n height: 0; // 1\n overflow: visible; // 2\n}\n\n\n//\n// Typography\n//\n\n// Remove top margins from headings\n//\n// By default, ` `-`
` all receive top and bottom margins. We nuke the top\n// margin for easier control within type scales as it avoids margin collapsing.\n// stylelint-disable-next-line selector-list-comma-newline-after\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: $headings-margin-bottom;\n}\n\n// Reset margins on paragraphs\n//\n// Similarly, the top margin on `
` alignment by inheriting from the ``, or the\n // closest parent with a set `text-align`.\n text-align: inherit;\n}\n\n\n//\n// Forms\n//\n\nlabel {\n // Allow labels to use `margin` for spacing.\n display: inline-block;\n margin-bottom: $label-margin-bottom;\n}\n\n// Remove the default `border-radius` that macOS Chrome adds.\n//\n// Details at https://github.com/twbs/bootstrap/issues/24093\nbutton {\n // stylelint-disable-next-line property-blacklist\n border-radius: 0;\n}\n\n// Work around a Firefox/IE bug where the transparent `button` background\n// results in a loss of the default `button` focus styles.\n//\n// Credit: https://github.com/suitcss/base/\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0; // Remove the margin in Firefox and Safari\n font-family: inherit;\n @include font-size(inherit);\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible; // Show the overflow in Edge\n}\n\nbutton,\nselect {\n text-transform: none; // Remove the inheritance of text transform in Firefox\n}\n\n// Remove the inheritance of word-wrap in Safari.\n//\n// Details at https://github.com/twbs/bootstrap/issues/24990\nselect {\n word-wrap: normal;\n}\n\n\n// 1. Prevent a WebKit bug where (2) destroys native `audio` and `video`\n// controls in Android 4.\n// 2. Correct the inability to style clickable types in iOS and Safari.\nbutton,\n[type=\"button\"], // 1\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button; // 2\n}\n\n// Opinionated: add \"hand\" cursor to non-disabled button elements.\n@if $enable-pointer-cursor-for-buttons {\n button,\n [type=\"button\"],\n [type=\"reset\"],\n [type=\"submit\"] {\n &:not(:disabled) {\n cursor: pointer;\n }\n }\n}\n\n// Remove inner border and padding from Firefox, but don't restore the outline like Normalize.\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box; // 1. Add the correct box sizing in IE 10-\n padding: 0; // 2. Remove the padding in IE 10-\n}\n\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n // Remove the default appearance of temporal inputs to avoid a Mobile Safari\n // bug where setting a custom line-height prevents text from being vertically\n // centered within the input.\n // See https://bugs.webkit.org/show_bug.cgi?id=139848\n // and https://github.com/twbs/bootstrap/issues/11266\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto; // Remove the default vertical scrollbar in IE.\n // Textareas should really only resize vertically so they don't break their (horizontal) containers.\n resize: vertical;\n}\n\nfieldset {\n // Browsers set a default `min-width: min-content;` on fieldsets,\n // unlike e.g. ` ` elements.\n\nbody {\n margin: 0; // 1\n font-family: $font-family-base;\n @include font-size($font-size-base);\n font-weight: $font-weight-base;\n line-height: $line-height-base;\n color: $body-color;\n text-align: left; // 3\n background-color: $body-bg; // 2\n}\n\n// Future-proof rule: in browsers that support :focus-visible, suppress the focus outline\n// on elements that programmatically receive focus but wouldn't normally show a visible\n// focus outline. In general, this would mean that the outline is only applied if the\n// interaction that led to the element receiving programmatic focus was a keyboard interaction,\n// or the browser has somehow determined that the user is primarily a keyboard user and/or\n// wants focus outlines to always be presented.\n//\n// See https://developer.mozilla.org/en-US/docs/Web/CSS/:focus-visible\n// and https://developer.paciellogroup.com/blog/2018/03/focus-visible-and-backwards-compatibility/\n[tabindex=\"-1\"]:focus:not(:focus-visible) {\n outline: 0 !important;\n}\n\n\n// Content grouping\n//\n// 1. Add the correct box sizing in Firefox.\n// 2. Show the overflow in Edge and IE.\n\nhr {\n box-sizing: content-box; // 1\n height: 0; // 1\n overflow: visible; // 2\n}\n\n\n//\n// Typography\n//\n\n// Remove top margins from headings\n//\n// By default, ` `-`
` all receive top and bottom margins. We nuke the top\n// margin for easier control within type scales as it avoids margin collapsing.\n// stylelint-disable-next-line selector-list-comma-newline-after\nh1, h2, h3, h4, h5, h6 {\n margin-top: 0;\n margin-bottom: $headings-margin-bottom;\n}\n\n// Reset margins on paragraphs\n//\n// Similarly, the top margin on `
` alignment by inheriting from the ``, or the\n // closest parent with a set `text-align`.\n text-align: inherit;\n}\n\n\n//\n// Forms\n//\n\nlabel {\n // Allow labels to use `margin` for spacing.\n display: inline-block;\n margin-bottom: $label-margin-bottom;\n}\n\n// Remove the default `border-radius` that macOS Chrome adds.\n//\n// Details at https://github.com/twbs/bootstrap/issues/24093\nbutton {\n // stylelint-disable-next-line property-blacklist\n border-radius: 0;\n}\n\n// Work around a Firefox/IE bug where the transparent `button` background\n// results in a loss of the default `button` focus styles.\n//\n// Credit: https://github.com/suitcss/base/\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\ninput,\nbutton,\nselect,\noptgroup,\ntextarea {\n margin: 0; // Remove the margin in Firefox and Safari\n font-family: inherit;\n @include font-size(inherit);\n line-height: inherit;\n}\n\nbutton,\ninput {\n overflow: visible; // Show the overflow in Edge\n}\n\nbutton,\nselect {\n text-transform: none; // Remove the inheritance of text transform in Firefox\n}\n\n// Remove the inheritance of word-wrap in Safari.\n//\n// Details at https://github.com/twbs/bootstrap/issues/24990\nselect {\n word-wrap: normal;\n}\n\n\n// 1. Prevent a WebKit bug where (2) destroys native `audio` and `video`\n// controls in Android 4.\n// 2. Correct the inability to style clickable types in iOS and Safari.\nbutton,\n[type=\"button\"], // 1\n[type=\"reset\"],\n[type=\"submit\"] {\n -webkit-appearance: button; // 2\n}\n\n// Opinionated: add \"hand\" cursor to non-disabled button elements.\n@if $enable-pointer-cursor-for-buttons {\n button,\n [type=\"button\"],\n [type=\"reset\"],\n [type=\"submit\"] {\n &:not(:disabled) {\n cursor: pointer;\n }\n }\n}\n\n// Remove inner border and padding from Firefox, but don't restore the outline like Normalize.\nbutton::-moz-focus-inner,\n[type=\"button\"]::-moz-focus-inner,\n[type=\"reset\"]::-moz-focus-inner,\n[type=\"submit\"]::-moz-focus-inner {\n padding: 0;\n border-style: none;\n}\n\ninput[type=\"radio\"],\ninput[type=\"checkbox\"] {\n box-sizing: border-box; // 1. Add the correct box sizing in IE 10-\n padding: 0; // 2. Remove the padding in IE 10-\n}\n\n\ninput[type=\"date\"],\ninput[type=\"time\"],\ninput[type=\"datetime-local\"],\ninput[type=\"month\"] {\n // Remove the default appearance of temporal inputs to avoid a Mobile Safari\n // bug where setting a custom line-height prevents text from being vertically\n // centered within the input.\n // See https://bugs.webkit.org/show_bug.cgi?id=139848\n // and https://github.com/twbs/bootstrap/issues/11266\n -webkit-appearance: listbox;\n}\n\ntextarea {\n overflow: auto; // Remove the default vertical scrollbar in IE.\n // Textareas should really only resize vertically so they don't break their (horizontal) containers.\n resize: vertical;\n}\n\nfieldset {\n // Browsers set a default `min-width: min-content;` on fieldsets,\n // unlike e.g. ` `s.\n// We previously tried the \"images are responsive by default\" approach in Bootstrap v2,\n// and abandoned it in Bootstrap v3 because it breaks lots of third-party widgets (including Google Maps)\n// which weren't expecting the images within themselves to be involuntarily resized.\n// See also https://github.com/twbs/bootstrap/issues/18178\n.img-fluid {\n @include img-fluid();\n}\n\n\n// Image thumbnails\n.img-thumbnail {\n padding: $thumbnail-padding;\n background-color: $thumbnail-bg;\n border: $thumbnail-border-width solid $thumbnail-border-color;\n @include border-radius($thumbnail-border-radius);\n @include box-shadow($thumbnail-box-shadow);\n\n // Keep them at most 100% wide\n @include img-fluid();\n}\n\n//\n// Figures\n//\n\n.figure {\n // Ensures the caption's text aligns with the image.\n display: inline-block;\n}\n\n.figure-img {\n margin-bottom: $spacer / 2;\n line-height: 1;\n}\n\n.figure-caption {\n @include font-size($figure-caption-font-size);\n color: $figure-caption-color;\n}\n","// Image Mixins\n// - Responsive image\n// - Retina image\n\n\n// Responsive image\n//\n// Keep images from scaling beyond the width of their parents.\n\n@mixin img-fluid() {\n // Part 1: Set a maximum relative to the parent\n max-width: 100%;\n // Part 2: Override the height to auto, otherwise images will be stretched\n // when setting a width and height attribute on the img element.\n height: auto;\n}\n\n\n// Retina image\n//\n// Short retina mixin for setting background-image and -size.\n\n@mixin img-retina($file-1x, $file-2x, $width-1x, $height-1x) {\n background-image: url($file-1x);\n\n // Autoprefixer takes care of adding -webkit-min-device-pixel-ratio and -o-min-device-pixel-ratio,\n // but doesn't convert dppx=>dpi.\n // There's no such thing as unprefixed min-device-pixel-ratio since it's nonstandard.\n // Compatibility info: https://caniuse.com/#feat=css-media-resolution\n @media only screen and (min-resolution: 192dpi), // IE9-11 don't support dppx\n only screen and (min-resolution: 2dppx) { // Standardized\n background-image: url($file-2x);\n background-size: $width-1x $height-1x;\n }\n @include deprecate(\"`img-retina()`\", \"v4.3.0\", \"v5\");\n}\n","// stylelint-disable property-blacklist\n// Single side border-radius\n\n@mixin border-radius($radius: $border-radius, $fallback-border-radius: false) {\n @if $enable-rounded {\n border-radius: $radius;\n }\n @else if $fallback-border-radius != false {\n border-radius: $fallback-border-radius;\n }\n}\n\n@mixin border-top-radius($radius) {\n @if $enable-rounded {\n border-top-left-radius: $radius;\n border-top-right-radius: $radius;\n }\n}\n\n@mixin border-right-radius($radius) {\n @if $enable-rounded {\n border-top-right-radius: $radius;\n border-bottom-right-radius: $radius;\n }\n}\n\n@mixin border-bottom-radius($radius) {\n @if $enable-rounded {\n border-bottom-right-radius: $radius;\n border-bottom-left-radius: $radius;\n }\n}\n\n@mixin border-left-radius($radius) {\n @if $enable-rounded {\n border-top-left-radius: $radius;\n border-bottom-left-radius: $radius;\n }\n}\n\n@mixin border-top-left-radius($radius) {\n @if $enable-rounded {\n border-top-left-radius: $radius;\n }\n}\n\n@mixin border-top-right-radius($radius) {\n @if $enable-rounded {\n border-top-right-radius: $radius;\n }\n}\n\n@mixin border-bottom-right-radius($radius) {\n @if $enable-rounded {\n border-bottom-right-radius: $radius;\n }\n}\n\n@mixin border-bottom-left-radius($radius) {\n @if $enable-rounded {\n border-bottom-left-radius: $radius;\n }\n}\n","// Inline code\ncode {\n @include font-size($code-font-size);\n color: $code-color;\n word-wrap: break-word;\n\n // Streamline the style when inside anchors to avoid broken underline and more\n a > & {\n color: inherit;\n }\n}\n\n// User input typically entered via keyboard\nkbd {\n padding: $kbd-padding-y $kbd-padding-x;\n @include font-size($kbd-font-size);\n color: $kbd-color;\n background-color: $kbd-bg;\n @include border-radius($border-radius-sm);\n @include box-shadow($kbd-box-shadow);\n\n kbd {\n padding: 0;\n @include font-size(100%);\n font-weight: $nested-kbd-font-weight;\n @include box-shadow(none);\n }\n}\n\n// Blocks of code\npre {\n display: block;\n @include font-size($code-font-size);\n color: $pre-color;\n\n // Account for some code outputs that place code tags in pre tags\n code {\n @include font-size(inherit);\n color: inherit;\n word-break: normal;\n }\n}\n\n// Enable scrollable blocks of code\n.pre-scrollable {\n max-height: $pre-scrollable-max-height;\n overflow-y: scroll;\n}\n","// Container widths\n//\n// Set the container width, and override it for fixed navbars in media queries.\n\n@if $enable-grid-classes {\n // Single container class with breakpoint max-widths\n .container {\n @include make-container();\n @include make-container-max-widths();\n }\n\n // 100% wide container at all breakpoints\n .container-fluid {\n @include make-container();\n }\n\n // Responsive containers that are 100% wide until a breakpoint\n @each $breakpoint, $container-max-width in $container-max-widths {\n .container-#{$breakpoint} {\n @extend .container-fluid;\n }\n\n @include media-breakpoint-up($breakpoint, $grid-breakpoints) {\n %responsive-container-#{$breakpoint} {\n max-width: $container-max-width;\n }\n\n @each $name, $width in $grid-breakpoints {\n @if ($container-max-width > $width or $breakpoint == $name) {\n .container#{breakpoint-infix($name, $grid-breakpoints)} {\n @extend %responsive-container-#{$breakpoint};\n }\n }\n }\n }\n }\n}\n\n\n// Row\n//\n// Rows contain your columns.\n\n@if $enable-grid-classes {\n .row {\n @include make-row();\n }\n\n // Remove the negative margin from default .row, then the horizontal padding\n // from all immediate children columns (to prevent runaway style inheritance).\n .no-gutters {\n margin-right: 0;\n margin-left: 0;\n\n > .col,\n > [class*=\"col-\"] {\n padding-right: 0;\n padding-left: 0;\n }\n }\n}\n\n// Columns\n//\n// Common styles for small and large grid columns\n\n@if $enable-grid-classes {\n @include make-grid-columns();\n}\n","/// Grid system\n//\n// Generate semantic grid columns with these mixins.\n\n@mixin make-container($gutter: $grid-gutter-width) {\n width: 100%;\n padding-right: $gutter / 2;\n padding-left: $gutter / 2;\n margin-right: auto;\n margin-left: auto;\n}\n\n\n// For each breakpoint, define the maximum width of the container in a media query\n@mixin make-container-max-widths($max-widths: $container-max-widths, $breakpoints: $grid-breakpoints) {\n @each $breakpoint, $container-max-width in $max-widths {\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n max-width: $container-max-width;\n }\n }\n}\n\n@mixin make-row($gutter: $grid-gutter-width) {\n display: flex;\n flex-wrap: wrap;\n margin-right: -$gutter / 2;\n margin-left: -$gutter / 2;\n}\n\n@mixin make-col-ready($gutter: $grid-gutter-width) {\n position: relative;\n // Prevent columns from becoming too narrow when at smaller grid tiers by\n // always setting `width: 100%;`. This works because we use `flex` values\n // later on to override this initial width.\n width: 100%;\n padding-right: $gutter / 2;\n padding-left: $gutter / 2;\n}\n\n@mixin make-col($size, $columns: $grid-columns) {\n flex: 0 0 percentage($size / $columns);\n // Add a `max-width` to ensure content within each column does not blow out\n // the width of the column. Applies to IE10+ and Firefox. Chrome and Safari\n // do not appear to require this.\n max-width: percentage($size / $columns);\n}\n\n@mixin make-col-auto() {\n flex: 0 0 auto;\n width: auto;\n max-width: 100%; // Reset earlier grid tiers\n}\n\n@mixin make-col-offset($size, $columns: $grid-columns) {\n $num: $size / $columns;\n margin-left: if($num == 0, 0, percentage($num));\n}\n\n// Row columns\n//\n// Specify on a parent element(e.g., .row) to force immediate children into NN\n// numberof columns. Supports wrapping to new lines, but does not do a Masonry\n// style grid.\n@mixin row-cols($count) {\n & > * {\n flex: 0 0 100% / $count;\n max-width: 100% / $count;\n }\n}\n","// Breakpoint viewport sizes and media queries.\n//\n// Breakpoints are defined as a map of (name: minimum width), order from small to large:\n//\n// (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px)\n//\n// The map defined in the `$grid-breakpoints` global variable is used as the `$breakpoints` argument by default.\n\n// Name of the next breakpoint, or null for the last breakpoint.\n//\n// >> breakpoint-next(sm)\n// md\n// >> breakpoint-next(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// md\n// >> breakpoint-next(sm, $breakpoint-names: (xs sm md lg xl))\n// md\n@function breakpoint-next($name, $breakpoints: $grid-breakpoints, $breakpoint-names: map-keys($breakpoints)) {\n $n: index($breakpoint-names, $name);\n @return if($n != null and $n < length($breakpoint-names), nth($breakpoint-names, $n + 1), null);\n}\n\n// Minimum breakpoint width. Null for the smallest (first) breakpoint.\n//\n// >> breakpoint-min(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 576px\n@function breakpoint-min($name, $breakpoints: $grid-breakpoints) {\n $min: map-get($breakpoints, $name);\n @return if($min != 0, $min, null);\n}\n\n// Maximum breakpoint width. Null for the largest (last) breakpoint.\n// The maximum value is calculated as the minimum of the next one less 0.02px\n// to work around the limitations of `min-` and `max-` prefixes and viewports with fractional widths.\n// See https://www.w3.org/TR/mediaqueries-4/#mq-min-max\n// Uses 0.02px rather than 0.01px to work around a current rounding bug in Safari.\n// See https://bugs.webkit.org/show_bug.cgi?id=178261\n//\n// >> breakpoint-max(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// 767.98px\n@function breakpoint-max($name, $breakpoints: $grid-breakpoints) {\n $next: breakpoint-next($name, $breakpoints);\n @return if($next, breakpoint-min($next, $breakpoints) - .02, null);\n}\n\n// Returns a blank string if smallest breakpoint, otherwise returns the name with a dash in front.\n// Useful for making responsive utilities.\n//\n// >> breakpoint-infix(xs, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"\" (Returns a blank string)\n// >> breakpoint-infix(sm, (xs: 0, sm: 576px, md: 768px, lg: 992px, xl: 1200px))\n// \"-sm\"\n@function breakpoint-infix($name, $breakpoints: $grid-breakpoints) {\n @return if(breakpoint-min($name, $breakpoints) == null, \"\", \"-#{$name}\");\n}\n\n// Media of at least the minimum breakpoint width. No query for the smallest breakpoint.\n// Makes the @content apply to the given breakpoint and wider.\n@mixin media-breakpoint-up($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n @if $min {\n @media (min-width: $min) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media of at most the maximum breakpoint width. No query for the largest breakpoint.\n// Makes the @content apply to the given breakpoint and narrower.\n@mixin media-breakpoint-down($name, $breakpoints: $grid-breakpoints) {\n $max: breakpoint-max($name, $breakpoints);\n @if $max {\n @media (max-width: $max) {\n @content;\n }\n } @else {\n @content;\n }\n}\n\n// Media that spans multiple breakpoint widths.\n// Makes the @content apply between the min and max breakpoints\n@mixin media-breakpoint-between($lower, $upper, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($lower, $breakpoints);\n $max: breakpoint-max($upper, $breakpoints);\n\n @if $min != null and $max != null {\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else if $max == null {\n @include media-breakpoint-up($lower, $breakpoints) {\n @content;\n }\n } @else if $min == null {\n @include media-breakpoint-down($upper, $breakpoints) {\n @content;\n }\n }\n}\n\n// Media between the breakpoint's minimum and maximum widths.\n// No minimum for the smallest breakpoint, and no maximum for the largest one.\n// Makes the @content apply only to the given breakpoint, not viewports any wider or narrower.\n@mixin media-breakpoint-only($name, $breakpoints: $grid-breakpoints) {\n $min: breakpoint-min($name, $breakpoints);\n $max: breakpoint-max($name, $breakpoints);\n\n @if $min != null and $max != null {\n @media (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else if $max == null {\n @include media-breakpoint-up($name, $breakpoints) {\n @content;\n }\n } @else if $min == null {\n @include media-breakpoint-down($name, $breakpoints) {\n @content;\n }\n }\n}\n","// Framework grid generation\n//\n// Used only by Bootstrap to generate the correct number of grid classes given\n// any value of `$grid-columns`.\n\n@mixin make-grid-columns($columns: $grid-columns, $gutter: $grid-gutter-width, $breakpoints: $grid-breakpoints) {\n // Common properties for all breakpoints\n %grid-column {\n position: relative;\n width: 100%;\n padding-right: $gutter / 2;\n padding-left: $gutter / 2;\n }\n\n @each $breakpoint in map-keys($breakpoints) {\n $infix: breakpoint-infix($breakpoint, $breakpoints);\n\n // Allow columns to stretch full width below their breakpoints\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @extend %grid-column;\n }\n }\n .col#{$infix},\n .col#{$infix}-auto {\n @extend %grid-column;\n }\n\n @include media-breakpoint-up($breakpoint, $breakpoints) {\n // Provide basic `.col-{bp}` classes for equal-width flexbox columns\n .col#{$infix} {\n flex-basis: 0;\n flex-grow: 1;\n max-width: 100%;\n }\n\n @for $i from 1 through $grid-row-columns {\n .row-cols#{$infix}-#{$i} {\n @include row-cols($i);\n }\n }\n\n .col#{$infix}-auto {\n @include make-col-auto();\n }\n\n @for $i from 1 through $columns {\n .col#{$infix}-#{$i} {\n @include make-col($i, $columns);\n }\n }\n\n .order#{$infix}-first { order: -1; }\n\n .order#{$infix}-last { order: $columns + 1; }\n\n @for $i from 0 through $columns {\n .order#{$infix}-#{$i} { order: $i; }\n }\n\n // `$columns - 1` because offsetting by the width of an entire row isn't possible\n @for $i from 0 through ($columns - 1) {\n @if not ($infix == \"\" and $i == 0) { // Avoid emitting useless .offset-0\n .offset#{$infix}-#{$i} {\n @include make-col-offset($i, $columns);\n }\n }\n }\n }\n }\n}\n","//\n// Basic Bootstrap table\n//\n\n.table {\n width: 100%;\n margin-bottom: $spacer;\n color: $table-color;\n background-color: $table-bg; // Reset for nesting within parents with `background-color`.\n\n th,\n td {\n padding: $table-cell-padding;\n vertical-align: top;\n border-top: $table-border-width solid $table-border-color;\n }\n\n thead th {\n vertical-align: bottom;\n border-bottom: (2 * $table-border-width) solid $table-border-color;\n }\n\n tbody + tbody {\n border-top: (2 * $table-border-width) solid $table-border-color;\n }\n}\n\n\n//\n// Condensed table w/ half padding\n//\n\n.table-sm {\n th,\n td {\n padding: $table-cell-padding-sm;\n }\n}\n\n\n// Border versions\n//\n// Add or remove borders all around the table and between all the columns.\n\n.table-bordered {\n border: $table-border-width solid $table-border-color;\n\n th,\n td {\n border: $table-border-width solid $table-border-color;\n }\n\n thead {\n th,\n td {\n border-bottom-width: 2 * $table-border-width;\n }\n }\n}\n\n.table-borderless {\n th,\n td,\n thead th,\n tbody + tbody {\n border: 0;\n }\n}\n\n// Zebra-striping\n//\n// Default zebra-stripe styles (alternating gray and transparent backgrounds)\n\n.table-striped {\n tbody tr:nth-of-type(#{$table-striped-order}) {\n background-color: $table-accent-bg;\n }\n}\n\n\n// Hover effect\n//\n// Placed here since it has to come after the potential zebra striping\n\n.table-hover {\n tbody tr {\n @include hover() {\n color: $table-hover-color;\n background-color: $table-hover-bg;\n }\n }\n}\n\n\n// Table backgrounds\n//\n// Exact selectors below required to override `.table-striped` and prevent\n// inheritance to nested tables.\n\n@each $color, $value in $theme-colors {\n @include table-row-variant($color, theme-color-level($color, $table-bg-level), theme-color-level($color, $table-border-level));\n}\n\n@include table-row-variant(active, $table-active-bg);\n\n\n// Dark styles\n//\n// Same table markup, but inverted color scheme: dark background and light text.\n\n// stylelint-disable-next-line no-duplicate-selectors\n.table {\n .thead-dark {\n th {\n color: $table-dark-color;\n background-color: $table-dark-bg;\n border-color: $table-dark-border-color;\n }\n }\n\n .thead-light {\n th {\n color: $table-head-color;\n background-color: $table-head-bg;\n border-color: $table-border-color;\n }\n }\n}\n\n.table-dark {\n color: $table-dark-color;\n background-color: $table-dark-bg;\n\n th,\n td,\n thead th {\n border-color: $table-dark-border-color;\n }\n\n &.table-bordered {\n border: 0;\n }\n\n &.table-striped {\n tbody tr:nth-of-type(#{$table-striped-order}) {\n background-color: $table-dark-accent-bg;\n }\n }\n\n &.table-hover {\n tbody tr {\n @include hover() {\n color: $table-dark-hover-color;\n background-color: $table-dark-hover-bg;\n }\n }\n }\n}\n\n\n// Responsive tables\n//\n// Generate series of `.table-responsive-*` classes for configuring the screen\n// size of where your table will overflow.\n\n.table-responsive {\n @each $breakpoint in map-keys($grid-breakpoints) {\n $next: breakpoint-next($breakpoint, $grid-breakpoints);\n $infix: breakpoint-infix($next, $grid-breakpoints);\n\n &#{$infix} {\n @include media-breakpoint-down($breakpoint) {\n display: block;\n width: 100%;\n overflow-x: auto;\n -webkit-overflow-scrolling: touch;\n\n // Prevent double border on horizontal scroll due to use of `display: block;`\n > .table-bordered {\n border: 0;\n }\n }\n }\n }\n}\n","// Tables\n\n@mixin table-row-variant($state, $background, $border: null) {\n // Exact selectors below required to override `.table-striped` and prevent\n // inheritance to nested tables.\n .table-#{$state} {\n &,\n > th,\n > td {\n background-color: $background;\n }\n\n @if $border != null {\n th,\n td,\n thead th,\n tbody + tbody {\n border-color: $border;\n }\n }\n }\n\n // Hover states for `.table-hover`\n // Note: this is not available for cells or rows within `thead` or `tfoot`.\n .table-hover {\n $hover-background: darken($background, 5%);\n\n .table-#{$state} {\n @include hover() {\n background-color: $hover-background;\n\n > td,\n > th {\n background-color: $hover-background;\n }\n }\n }\n }\n}\n","// Bootstrap functions\n//\n// Utility mixins and functions for evaluating source code across our variables, maps, and mixins.\n\n// Ascending\n// Used to evaluate Sass maps like our grid breakpoints.\n@mixin _assert-ascending($map, $map-name) {\n $prev-key: null;\n $prev-num: null;\n @each $key, $num in $map {\n @if $prev-num == null or unit($num) == \"%\" or unit($prev-num) == \"%\" {\n // Do nothing\n } @else if not comparable($prev-num, $num) {\n @warn \"Potentially invalid value for #{$map-name}: This map must be in ascending order, but key '#{$key}' has value #{$num} whose unit makes it incomparable to #{$prev-num}, the value of the previous key '#{$prev-key}' !\";\n } @else if $prev-num >= $num {\n @warn \"Invalid value for #{$map-name}: This map must be in ascending order, but key '#{$key}' has value #{$num} which isn't greater than #{$prev-num}, the value of the previous key '#{$prev-key}' !\";\n }\n $prev-key: $key;\n $prev-num: $num;\n }\n}\n\n// Starts at zero\n// Used to ensure the min-width of the lowest breakpoint starts at 0.\n@mixin _assert-starts-at-zero($map, $map-name: \"$grid-breakpoints\") {\n $values: map-values($map);\n $first-value: nth($values, 1);\n @if $first-value != 0 {\n @warn \"First breakpoint in #{$map-name} must start at 0, but starts at #{$first-value}.\";\n }\n}\n\n// Replace `$search` with `$replace` in `$string`\n// Used on our SVG icon backgrounds for custom forms.\n//\n// @author Hugo Giraudel\n// @param {String} $string - Initial string\n// @param {String} $search - Substring to replace\n// @param {String} $replace ('') - New value\n// @return {String} - Updated string\n@function str-replace($string, $search, $replace: \"\") {\n $index: str-index($string, $search);\n\n @if $index {\n @return str-slice($string, 1, $index - 1) + $replace + str-replace(str-slice($string, $index + str-length($search)), $search, $replace);\n }\n\n @return $string;\n}\n\n// See https://codepen.io/kevinweber/pen/dXWoRw\n@function escape-svg($string) {\n @if str-index($string, \"data:image/svg+xml\") {\n @each $char, $encoded in $escaped-characters {\n $string: str-replace($string, $char, $encoded);\n }\n }\n\n @return $string;\n}\n\n// Color contrast\n@function color-yiq($color, $dark: $yiq-text-dark, $light: $yiq-text-light) {\n $r: red($color);\n $g: green($color);\n $b: blue($color);\n\n $yiq: (($r * 299) + ($g * 587) + ($b * 114)) / 1000;\n\n @if ($yiq >= $yiq-contrasted-threshold) {\n @return $dark;\n } @else {\n @return $light;\n }\n}\n\n// Retrieve color Sass maps\n@function color($key: \"blue\") {\n @return map-get($colors, $key);\n}\n\n@function theme-color($key: \"primary\") {\n @return map-get($theme-colors, $key);\n}\n\n@function gray($key: \"100\") {\n @return map-get($grays, $key);\n}\n\n// Request a theme color level\n@function theme-color-level($color-name: \"primary\", $level: 0) {\n $color: theme-color($color-name);\n $color-base: if($level > 0, $black, $white);\n $level: abs($level);\n\n @return mix($color-base, $color, $level * $theme-color-interval);\n}\n\n// Return valid calc\n@function add($value1, $value2, $return-calc: true) {\n @if $value1 == null {\n @return $value2;\n }\n\n @if $value2 == null {\n @return $value1;\n }\n\n @if type-of($value1) == number and type-of($value2) == number and comparable($value1, $value2) {\n @return $value1 + $value2;\n }\n\n @return if($return-calc == true, calc(#{$value1} + #{$value2}), $value1 + unquote(\" + \") + $value2);\n}\n\n@function subtract($value1, $value2, $return-calc: true) {\n @if $value1 == null and $value2 == null {\n @return null;\n }\n\n @if $value1 == null {\n @return -$value2;\n }\n\n @if $value2 == null {\n @return $value1;\n }\n\n @if type-of($value1) == number and type-of($value2) == number and comparable($value1, $value2) {\n @return $value1 - $value2;\n }\n\n @return if($return-calc == true, calc(#{$value1} - #{$value2}), $value1 + unquote(\" - \") + $value2);\n}\n","// stylelint-disable selector-no-qualifying-type\n\n//\n// Textual form controls\n//\n\n.form-control {\n display: block;\n width: 100%;\n height: $input-height;\n padding: $input-padding-y $input-padding-x;\n font-family: $input-font-family;\n @include font-size($input-font-size);\n font-weight: $input-font-weight;\n line-height: $input-line-height;\n color: $input-color;\n background-color: $input-bg;\n background-clip: padding-box;\n border: $input-border-width solid $input-border-color;\n\n // Note: This has no effect on