From 781049fbd6d4a69c9d2314f4ed3036e68f598fc2 Mon Sep 17 00:00:00 2001
From: WizardXiao <89761062+WizardXiao@users.noreply.github.com>
Date: Fri, 13 May 2022 10:12:35 +0800
Subject: [PATCH] DM/Openapi: improve password input mechanism source (#5369)

ref pingcap/tiflow#4986
---
 dm/dm/config/source_config.go                |   4 +
 dm/dm/config/source_converter.go             |  12 +-
 dm/dm/master/openapi_controller.go           |   6 +
 dm/dm/master/openapi_controller_test.go      |  36 +++-
 dm/dm/master/openapi_view_test.go            |  38 +++-
 dm/dm/master/server.go                       |   4 +-
 dm/openapi/gen.server.go                     | 196 +++++++++----------
 dm/openapi/gen.types.go                      |   2 +-
 dm/openapi/spec/dm.yaml                      |   3 +-
 dm/tests/openapi/client/openapi_source_check |  16 ++
 dm/tests/openapi/run.sh                      |   3 +
 11 files changed, 208 insertions(+), 112 deletions(-)

diff --git a/dm/dm/config/source_config.go b/dm/dm/config/source_config.go
index d45cb69fe33..4cfb5bc6049 100644
--- a/dm/dm/config/source_config.go
+++ b/dm/dm/config/source_config.go
@@ -53,6 +53,10 @@ var getAllServerIDFunc = utils.GetAllServerID
 //go:embed source.yaml
 var SampleSourceConfig string
 
+// ObfuscatedPasswordForFeedback is the source encryption password that returns to the foreground.
+// PM's requirement, we always return obfuscated password to users.
+var ObfuscatedPasswordForFeedback string = "******"
+
 // PurgeConfig is the configuration for Purger.
 type PurgeConfig struct {
 	Interval    int64 `yaml:"interval" toml:"interval" json:"interval"`             // check whether need to purge at this @Interval (seconds)
diff --git a/dm/dm/config/source_converter.go b/dm/dm/config/source_converter.go
index 7e6eaaaeff6..b39ec997aa2 100644
--- a/dm/dm/config/source_converter.go
+++ b/dm/dm/config/source_converter.go
@@ -23,7 +23,7 @@ func SourceCfgToOpenAPISource(cfg *SourceConfig) openapi.Source {
 		Enable:     cfg.Enable,
 		EnableGtid: cfg.EnableGTID,
 		Host:       cfg.From.Host,
-		Password:   "******", // PM's requirement, we always return obfuscated password to user
+		Password:   &ObfuscatedPasswordForFeedback, // PM's requirement, we always return obfuscated password to users
 		Port:       cfg.From.Port,
 		SourceName: cfg.SourceID,
 		User:       cfg.From.User,
@@ -55,10 +55,12 @@ func SourceCfgToOpenAPISource(cfg *SourceConfig) openapi.Source {
 func OpenAPISourceToSourceCfg(source openapi.Source) *SourceConfig {
 	cfg := NewSourceConfig()
 	from := DBConfig{
-		Host:     source.Host,
-		Port:     source.Port,
-		User:     source.User,
-		Password: source.Password,
+		Host: source.Host,
+		Port: source.Port,
+		User: source.User,
+	}
+	if source.Password != nil {
+		from.Password = *source.Password
 	}
 	if source.Security != nil {
 		from.Security = &Security{
diff --git a/dm/dm/master/openapi_controller.go b/dm/dm/master/openapi_controller.go
index 4b43c6b5a0c..831ac1d7a36 100644
--- a/dm/dm/master/openapi_controller.go
+++ b/dm/dm/master/openapi_controller.go
@@ -137,6 +137,12 @@ func (s *Server) updateSource(ctx context.Context, sourceName string, req openap
 		return nil, terror.ErrSchedulerSourceCfgNotExist.Generate(sourceName)
 	}
 	newCfg := config.OpenAPISourceToSourceCfg(req.Source)
+
+	// update's request will be no password when user doesn't input password and wants to use old password.
+	if req.Source.Password == nil {
+		newCfg.From.Password = oldCfg.From.Password
+	}
+
 	if err := checkAndAdjustSourceConfigFunc(ctx, newCfg); err != nil {
 		return nil, err
 	}
diff --git a/dm/dm/master/openapi_controller_test.go b/dm/dm/master/openapi_controller_test.go
index 336960c98bc..cfb314027fc 100644
--- a/dm/dm/master/openapi_controller_test.go
+++ b/dm/dm/master/openapi_controller_test.go
@@ -50,7 +50,7 @@ func (s *OpenAPIControllerSuite) SetupSuite() {
 		Enable:     true,
 		EnableGtid: false,
 		Host:       dbCfg.Host,
-		Password:   dbCfg.Password,
+		Password:   &dbCfg.Password,
 		Port:       dbCfg.Port,
 		User:       dbCfg.User,
 	}
@@ -221,6 +221,40 @@ func (s *OpenAPIControllerSuite) TestSourceController() {
 		s.Nil(err)
 		s.Len(sourceList, 0)
 	}
+
+	// create and update no password source
+	{
+		// no password will use "" as password
+		source := *s.testSource
+		source.Password = nil
+		createReq := openapi.CreateSourceRequest{Source: source}
+		resp, err := server.createSource(ctx, createReq)
+		s.NoError(err)
+		s.EqualValues(source, *resp)
+		config := server.scheduler.GetSourceCfgByID(source.SourceName)
+		s.NotNil(config)
+		s.Equal("", config.From.Password)
+
+		// update to have password
+		updateReq := openapi.UpdateSourceRequest{Source: *s.testSource}
+		sourceAfterUpdated, err := server.updateSource(ctx, source.SourceName, updateReq)
+		s.NoError(err)
+		s.EqualValues(s.testSource, sourceAfterUpdated)
+
+		// update without password will use old password
+		source = *s.testSource
+		source.Password = nil
+		updateReq = openapi.UpdateSourceRequest{Source: source}
+		sourceAfterUpdated, err = server.updateSource(ctx, source.SourceName, updateReq)
+		s.NoError(err)
+		s.Equal(source, *sourceAfterUpdated)
+		// password is old
+		config = server.scheduler.GetSourceCfgByID(source.SourceName)
+		s.NotNil(config)
+		s.Equal(*s.testSource.Password, config.From.Password)
+
+		s.Nil(server.deleteSource(ctx, s.testSource.SourceName, false))
+	}
 }
 
 func (s *OpenAPIControllerSuite) TestTaskController() {
diff --git a/dm/dm/master/openapi_view_test.go b/dm/dm/master/openapi_view_test.go
index 13f57349e08..0225616d43a 100644
--- a/dm/dm/master/openapi_view_test.go
+++ b/dm/dm/master/openapi_view_test.go
@@ -372,7 +372,7 @@ func (s *OpenAPIViewSuite) TestTaskTemplatesAPI() {
 		SourceName: source1Name,
 		EnableGtid: false,
 		Host:       dbCfg.Host,
-		Password:   dbCfg.Password,
+		Password:   &dbCfg.Password,
 		Port:       dbCfg.Port,
 		User:       dbCfg.User,
 	}
@@ -471,7 +471,7 @@ func (s *OpenAPIViewSuite) TestSourceAPI() {
 		Enable:     true,
 		EnableGtid: false,
 		Host:       dbCfg.Host,
-		Password:   dbCfg.Password,
+		Password:   &dbCfg.Password,
 		Port:       dbCfg.Port,
 		User:       dbCfg.User,
 		Purge:      &openapi.Purge{Interval: &purgeInterVal},
@@ -702,6 +702,38 @@ func (s *OpenAPIViewSuite) TestSourceAPI() {
 	s.NoError(result.UnmarshalBodyToObject(&resultListSource2))
 	s.Len(resultListSource2.Data, 0)
 	s.Equal(0, resultListSource2.Total)
+
+	// create with no password
+	sourceNoPassword := source1
+	sourceNoPassword.Password = nil
+	createReqNoPassword := openapi.CreateSourceRequest{Source: sourceNoPassword}
+	result = testutil.NewRequest().Post(baseURL).WithJsonBody(createReqNoPassword).GoWithHTTPHandler(s.T(), s1.openapiHandles)
+	s.Equal(http.StatusCreated, result.Code())
+	s.NoError(result.UnmarshalBodyToObject(&resultSource))
+	s.Nil(resultSource.Password)
+
+	// update to have password
+	sourceHasPassword := source1
+	updateReqHasPassword := openapi.UpdateSourceRequest{Source: sourceHasPassword}
+	result = testutil.NewRequest().Put(source1URL).WithJsonBody(updateReqHasPassword).GoWithHTTPHandler(s.T(), s1.openapiHandles)
+	s.Equal(http.StatusOK, result.Code())
+	s.NoError(result.UnmarshalBodyToObject(&source1FromHTTP))
+	s.Equal(source1FromHTTP.Password, sourceHasPassword.Password)
+
+	// update with no password, will use old password
+	updateReqNoPassword := openapi.UpdateSourceRequest{Source: sourceNoPassword}
+	result = testutil.NewRequest().Put(source1URL).WithJsonBody(updateReqNoPassword).GoWithHTTPHandler(s.T(), s1.openapiHandles)
+	s.Equal(http.StatusOK, result.Code())
+	s.NoError(result.UnmarshalBodyToObject(&source1FromHTTP))
+	s.Nil(source1FromHTTP.Password)
+	// password is old
+	conf := s1.scheduler.GetSourceCfgByID(source1FromHTTP.SourceName)
+	s.NotNil(conf)
+	s.Equal(*sourceHasPassword.Password, conf.From.Password)
+
+	// delete source with --force
+	result = testutil.NewRequest().Delete(fmt.Sprintf("%s/%s?force=true", baseURL, source1.SourceName)).GoWithHTTPHandler(s.T(), s1.openapiHandles)
+	s.Equal(http.StatusNoContent, result.Code())
 }
 
 func (s *OpenAPIViewSuite) testImportTaskTemplate(task *openapi.Task, s1 *Server) {
@@ -774,7 +806,7 @@ func (s *OpenAPIViewSuite) TestTaskAPI() {
 		SourceName: source1Name,
 		EnableGtid: false,
 		Host:       dbCfg.Host,
-		Password:   dbCfg.Password,
+		Password:   &dbCfg.Password,
 		Port:       dbCfg.Port,
 		User:       dbCfg.User,
 	}
diff --git a/dm/dm/master/server.go b/dm/dm/master/server.go
index c8c87d186ff..45db6b790f6 100644
--- a/dm/dm/master/server.go
+++ b/dm/dm/master/server.go
@@ -2316,7 +2316,7 @@ func (s *Server) GetCfg(ctx context.Context, req *pb.GetCfgRequest) (*pb.GetCfgR
 		// For the get-config command, we want to filter out fields that are not easily readable by humans,
 		// such as SSLXXBytes field in `Security` struct
 		taskCfg := config.SubTaskConfigsToTaskConfig(subCfgList...)
-		taskCfg.TargetDB.Password = "******"
+		taskCfg.TargetDB.Password = config.ObfuscatedPasswordForFeedback
 		if taskCfg.TargetDB.Security != nil {
 			taskCfg.TargetDB.Security.ClearSSLBytesData()
 		}
@@ -2420,7 +2420,7 @@ func (s *Server) GetCfg(ctx context.Context, req *pb.GetCfgRequest) (*pb.GetCfgR
 
 			return resp2, nil
 		}
-		sourceCfg.From.Password = "******"
+		sourceCfg.From.Password = config.ObfuscatedPasswordForFeedback
 		if sourceCfg.From.Security != nil {
 			sourceCfg.From.Security.ClearSSLBytesData()
 		}
diff --git a/dm/openapi/gen.server.go b/dm/openapi/gen.server.go
index 849b393b386..dd4cc1725fe 100644
--- a/dm/openapi/gen.server.go
+++ b/dm/openapi/gen.server.go
@@ -1249,107 +1249,107 @@ func RegisterHandlersWithOptions(router *gin.Engine, si ServerInterface, options
 // Base64 encoded, gzipped, json marshaled Swagger object
 var swaggerSpec = []string{
 	"H4sIAAAAAAAC/+w9XXPbOJJ/Bae7h5kpyZJsx0l8tQ9J7Mn6zvko21NzW1M5BSJBCWsSYADQHm3K/30L",
-	"HyRBEiAp23KssfdhxxFBoNHf3Wg0vw8CmqSUICL44PD7gAdLlED155sYMfEBErhA7IKmNKaLlfw9ZTRF",
+	"HyRBEiAp23KssfdhxxFBoNHo7240vw8CmqSUICL44PD7gAdLlED155sYMfEBErhA7IKmNKaLlfw9ZTRF",
 	"TGCkRi0pF/K/6E+YpDEaHA6muy93JjuTnelgOBCrVP7EBcNkMbgZDlLKqsNfT17vFeMwEWiB2ODmZjhg",
 	"6FuGGQoHh3/oRczLX4rRdP5PFAg567s44wKxD1D+fxNGGIbq1xDxgOFUYEoGh+pXxDmgERBLBIKMMUQE",
 	"SNQkgNAQDYaubR2+2j1w7g3G+Ao116EkxgQBLqDIzGqYm2XsFQTLUDHrnNIYQSKnjREMkQN+zO2Z1B7M",
-	"0B6TEpigKtn0NI6N1Wih3sw3W0A31EhuIY6fhaBktFmiOW0mrHH/xVA0OBz857hk0rHh0LGTPW+GgwWD",
-	"ESSw9zzv9Xh7Co2KYoZZjDWPY4ES3jWfZkJ7OoMRyBhU/04ZTZBYooz3BvJz8Yo98TVll7eG83f1sh/O",
-	"Gz8p9as/TM7mNCPhjNOMBWiWM3J1TTUE6CFADinkTuOsuWyy4t/i0aRtQQEX/qXkw85F1FjXCk1x1FP0",
-	"F0eJ+iqkLkQ55ZOSK8Qkz0J+eYa+ZUhzUZW2AvLLLpaSEyhGgvxyFlAS4cUswrEDafohkA8BJmAFkxhE",
-	"lCVQgKUQKT8cj0Ma8J0Uk0UA052AJuN/LccCh/MxF3Aeo7FcZKTnyRiU847kdKMoi+MdJ9q6ds5TSjj6",
-	"S27d5hi1HQekTt5gCAp0rjjIyxqawbowpCex1JaP50fdTG9W9EN8T6zswpxr0SPMJWHOUAxX1rI1PRjI",
-	"P4CggAuaAgiYHA6YGT+sQWlhqVDs3fr8I0zQqRztZPijLEnPlR/SBK/0T8IsSUFGcBMmuWyMBApnihHV",
-	"b5p3B4eDkGbzGJW0I1kyl77ccIC4wAkUaCaogPGM0eu+b0aYYL5E4Wy+Emjtl9ZYSEPm2BUm4mB/0Omh",
-	"Vt4fNhHV2EodTDeWXMx2TNbjNchEJ7Opp7M5JjFdzBYCh07+YAKTBXh/cXKUG/Ms5YIhmAD9asXYoddw",
-	"GgW7uyMUTF6NplP0ejTfhcFosru/C4PpdDKZ7B1ORy9f7b8eDAcki2O5r5rLWprICohuq1+AKPVZafXb",
-	"wdSGf47JzkT+b7c/LCE23k4Es1jyys5YP9BLVGGTYISYoUBQtgLXS8SQAk3TJaYLgLlUDJKfekCwCe1w",
-	"zBhlv2Ox/IA4d/o6kmWUvQFIjm2wkfp1Fki3p/GuegYC7RLVpWloXk34wvdmYoDqsg3lREMbHpckvUfC",
-	"eLQnJKJ+ByDQg2YusTDPAJZkK7RG5lMbUtP0c/nrYVN9nxZQ7XvTAYkku3+HIRSwd+RQjbYdAY5SYMrS",
-	"9lCaUlLk6u2b0Px7/5swocyGN6F9n3uEvnSmNg+2dhjuFXDjg2wYfOnD3SPOCxd/wyB/wAumXFi2QILf",
-	"I/CViR9iJ/fLOdm8nPMhoL+QBvhcsCwQGUP+XWgAZ4EKPGb8W1wNat6dHb+5OAYXb96eHoOvYvoV/PQV",
-	"h18BJuKn6fRn8PHTBfj42+kpePPbxafZycd3Z8cfjj9eDD+fnXx4c/YP8L/H/9Bv/AzGv1z8xx9G76Nw",
-	"hkmI/vwC3p3+dn5xfHZ8BH4Z/wyOP74/+Xj8txNC6NFbcHT865vfTi/Au7+/OTs/vvhbJqJXyXwfvPt0",
-	"evrm4jj/t3SrXGkJs7VmpBbOnYkS5ew6hqvfpz0i0+L1fC4Lq05S1ZJ3956e3ptMJndOT59SGHaHXTGF",
-	"oTvsaomC/H5GggQ07rIlFOVWreeFx9/EB6MLhjh3PtRxSn+YalhrBET2fNbS1a04AHehvJaFvStf+NLl",
-	"vXjo1e7BtBMbhuu7WOmT8sBRe8IqWKLgcsYQV2FJneNShkZqBDAj7GiofIg5SCHnKNwBblG/SxJlWIWx",
-	"Y6d1TdwZ9Oo4BQGlQ7xBbxRnfFmJ4HSwVZ31d4YF4ipW0/uSC6hEttxBSjERgMtfoABHH0AAiZZkLACM",
-	"ZGTAUBGXytfy9FvjSIZ/i2cBJQIRx974txisaAauIRHWDiu0c1ga8DWYlqYmtwbS3AzB12DX/2jP/egO",
-	"9uW/nQZmRYLmZn9LQ5jjnKYCJ5gLHAC+hCyUaJQaQFpvcI3FUmfcDWkoiVcg4yiUETYB0ASqgAZBxjjA",
-	"xDvn0dEpSCrBaUGaevLRopOLcR1nNZs4Nb27WfqcMVeQX2YkArn/LAUpjXGwApWMczP2/zPFzPh1uTxN",
-	"6sKkBukMgsA6P1MsZ8fPuQnx5EEsMyf/ZFfa8SvW3TuYNJa+WCKQD5YSlCKGaYgDGMcrYFRe1EzJ6G2F",
-	"Q2AmB1cwztAhUEtIhuIooCTkt4OeoQRiMuMpDFBlB9MXdfg/YIKTLAERQwiEmF8C9ZaC4f3b2yx/4+OJ",
-	"e81jP2DeritPV1kzRQGOVgZ4ns2t7FxEGWiAvQNOIkCoAPpNLHlCnblLVSUAJQhc4zgGc6QU0A44V5Ca",
-	"s51DsAvRy4P9vf1R9PJ1NJpO0avRPES7eTpUOpqv9Fam3QnAmqQ3ceySd0XWd0qIm/hQFk0fTeVC2RRx",
-	"lXme6YelR2jZsOc88lblkW98XNIdrdhqu8olpnqiDD2qU9RwmB+EajHRhqVE6k81rE6HYPr65eufXcJe",
-	"WdfDfC6euwOztTOXGwSNuLwKQgJ0/wAEUATLWZbOkqIiqgrE9VJ6KEwqcTUWZKl2pgrqWOGXT8ydenU9",
-	"/iz3vTPm2VxN6XIT3aUXORI1V1amO8sIkS93ac4qszqZyN6ui8I+pOdgu1TxuXJXi+OYppxpd1bpHnW8",
-	"MyyTZN1ZmFpi7BwFGcNi1VxGOdGmSobzuOrhafMWYRSHhWVb4jBERDvXCySKoMaeqDIJiBhN1BDle0XS",
-	"z2mqpVr4ipiYwTim1yicBaQJ9juaJJSAj0Yzn5+fAvkOjnAAdfKgQFYncjiPZwH0B17WxFpV5SNtbnPy",
-	"rJxY7sQ79a/WdHIfn48/GG9h/H8vJq/zqpDa1rpXvUQr/6LvyvUkVVKGr+TWLtGqKEmxFu9Yrx4ZVXHp",
-	"wEETQKd0mKDsPaNZ6kgbh3Gz1K2T0BFmXMxiGmgr43pFRqMoXG9aobPprqEZWX/CRrJEzT4s99zYSAG2",
-	"taATqUWVTk3V6N/dvl7FL4lgzBvpkcKSqChcawAZNqnXKyrevN60JsatLM1lr/WodLO1EymjuUwqKKWV",
-	"udY5LvPuBSGK4RV1WDP9e1HXV+Cq5va5JDEP8V3YBqYm0l346MwAQM6vKQu9MxYDqlPu7b84aMsouOeS",
-	"D6159vYmB67oNc0TCK2lq2pQ6ZoU8UfbS3aoIgXTsmCtZ0T5OPlOW32oVRnauwpUexnrFdl2HndCftm/",
-	"iOMC8suyhGM4yLjLtzN7kw8b+2OUip7VdTNHRtosabFjVXrzf7UooBafx6rW9fs8etSon+NjY9+3XuE8",
-	"ukpZuutRtC/EVcpPekPXjLrczpz9eQFMJ/uXXHMHVmYojXEAPSxdq8RsJsxMIbNxtOMV0NXOJgPuUIdr",
-	"lnDmTGYD4uQdGZG3FnUylNArNEuQPlLubUT0eyqlrLzYOeTKCQrpNTGhUP6zO2tf7qOXDNekwBmCnwua",
-	"tm52I4tWztebTleWpD2516oyXaOwq7cgxRSGPSGxDl6tQ7xawAr5ZS49TZ3fX/L8QWuXSj9XA43/2XNn",
-	"5ysSlDtTp8bunclHQMFmi6k6dxm6XFaGOI2vUDhTHicNLmeeo+FW3ZFfgHCixn3y6VcIOSrNPp36oURH",
-	"S85K7tp9wm7ieT2vY7NziQlMFhIrriXsU6TrJQ6WRYIHc5C/vFZc2sii9cx3OexOgIiYibRv4YA50JjN",
-	"0RKT0Eoh9Xm3CHgcmlI+a91RZYR/R7pOAF3ldxZ7wGXKs3vjwJKDhQxC22iuB9TIDhkCGRnls9ikbxXr",
-	"SuTbGR3aiLA3WaH6sF+Sq0oeJzHqcuDCkxWO2kLlYyuXMKvj/rvmxnwlR01JuzCVDE3l6VMTEY4l/lim",
-	"A2QYhli+BePPldFdev8tJqd08aua7EzO5TLLiCwhCdBM3yKd5cVmS0gWqLN2wfJztGMOeJZKT14dcamj",
-	"cH05NQxjkMbZApM+l0fxglCGZurQVDJDgf7aBVU1DKQMmeNVNcxJrSvEuE5mdCtGJKBBQ/XUJExGyvur",
-	"I8Hhyantc0FZXk3gPYAoJ/XWBPndCZsb+aU7ZqFkFmbKRxeO2Zb0WhJvCUmoc4VRjAOBQrUTFW5liT4A",
-	"TGOdWs0L8zXyLfmy1KxUMrPEWaUveeIartTBAKVSF0GBpFmzFksR56Z+YjAclMUU7sW0We8X9itvSL1g",
-	"xf63Cbs7a0VVzJrogthCkOuUlAJjxgA1Zti/2FYpMVNxWxPuWu5wDdzo0t0jKOBbGY/kCQQ3KXPITVVL",
-	"Tr0oi2O5ERIwlCCia2FhrOorS4aFcdzXcStB6NBWNWav799JlToDue2FQ5e6su0CKYGXE3MARX4CGaMr",
-	"FDd0vVFyyro6Qhf5c+5Xe/RfZUwFtSBM4j66zsBgaoqbFWEpFAIxVYuhbZIfGN/wEq7/P2I07YbqxkOB",
-	"X7M4Nvwuhdd38TU/F6IRkJxYyJfkIu64cEg45gKRwHF6pXQUEYzGIFdbmBg/TB1I6fIdyqTCjNTlo2I2",
-	"ADnPmOTVKm0yQV0okNN56kgEZTJ6DTFrqv2dcb7+zCjsxsx6wEwsGYJhtXpqv27JFML0CxJ/ASXG3XT6",
-	"sDjxzjw9cE6t3+ic2scBJyRg63GApYQ8DCAN22wORVAt1Jw267vsuaQLumSU4H8VS6k5APoTBZn6ScrD",
-	"twwSgdVS7uKsNO6JvvpGbo3D6h0Nt3dRioy6IdLAmdGYpY/UeWJs3hD5kY/luPgK/ZXmXmMJ80bfJdzZ",
-	"QrNeDeA6OLXFfCbDH2EUPlxrfMEve4cXpU/TTKzVot1yhcleFEx2D/ZGu6+Cl6PpFL0cwYMXe6ODYDJ/",
-	"tR++eB3tTQ6no5eT/en+7t5w8mL/5X64F1jDX+292B3tTvbC+e7+QRjuhYfT0fTlxNnioloPZbWsUA/K",
-	"wjTfmymtImjfmR7YTCK7JbXsI37Fy/SAMmIohtJ2tBe+StVZOC2BoXGXJ1e3ljfaI1t7nrrOrXrcXiTX",
-	"d9TbrbU4uSs7YcPhJUOeI82903NB01RlD8oKnl/NRRFnfOH0tf1FZ9qpF9TO79suPu8Z89esp3qoJsj5",
-	"16Ey5ON+B1e89ay+J1/aMbInfzIE1zgOA8jCPDFQDX7no1/umBVvHNz5suWiLDdoBmE9YBVOWFsPnSxz",
-	"4bMTwmOHS+65T2KEFHFdYmyyNPmOeY0s01tisOcCPotcQ0//piyO2LUFpWWaph2nT6DC4jaFDxuqCmiv",
-	"A/BSHSWplA/vUSa9QuyaYYHWOrUt3tLetjCrFH903+Ip1+0G3XfPLoI4Vi1e+GUzP9VSTuC8TFeo0+7u",
-	"TbkCKyd16q66UcmCAHHuAXe9urTmXMMmNlxA6atd99pQqr8a0os/cG+oWueVtqPSlnDDX1fRJHS5ovcO",
-	"j7msw0FuvQQ1tR68rRFV10HvLepAuio/am0K7/8ir7fR3kZv8t6o1I+Qyjg+ooEjYXf0AXxKEXnz+QQc",
-	"fXonVS6LB4eDrh5xI2k8R9qlxZSYlnE6voioYnEs1MYbC+SHMIeDA4lAdTqRIgJTPDgc7KmfpMYXSwXt",
-	"GKZ4fDUdm34E43x64y8VrYJOQrXWm88n1XY76pBSa1Y13+5kYjJ+eeEyTHWqWG7jn1zX7JZ+VGtPT3dj",
-	"H4X1mlnUikwRkWdJAtlqcCj3AIrGPiSigGfBEkAOKt1+BFxwqxPP4IsqifTtXiufOgKUGL6l4ere9t7s",
-	"G9TYtFkWzOW6N4+YDpnCWYUUO07E3wwb/KgPmHlfliy7JD0MYzq6MrWhZTjYv0cwGp2+HEtrc94iGFYD",
-	"19xwrUOY8Xf9h4oIb7T+i5H2Ax2U+hRFMSZIo+2jPm1KIYMJ0lT+o3H8ZYGXx+Sq/QEUy0FuCAYWDANb",
-	"jeujb1d+098n+UuDcfYdfvgjoyjVeK214+1FyNxh6ClhZQuvh5EwR8uwLZMwq43wWhJmCDP+brywtSTM",
-	"eI89JMwGzy9hFgxPW8KqTaFbCRkmOzlwTsl6j8QRDf7n/NNHjyhVwZJzFffWmuwW0gCo5UqoQhrUIDI+",
-	"ags4f7/4cNoLHDmwA5yl0AfkPnB0kNetesrGe13MLOUrv7+kbsIW9wIUT3/LEFtZTI3FclaMcDCxu3Tq",
-	"Zuj4OMAKMCQypluT6DKtkelKkNfXu0CoXMZfB4Yvm9W+jl6HDkmxL4zGeU16jQ/qQ0p+yGN8FaNxH/3t",
-	"5tWbcrYd/bHXd7in9wZPkRN59HZON3YDkIR5aSIEBF3bVHcRvKkDxt+tk4VuK3ekHhZM0aoTFjGdq/Yw",
-	"GcHfsuotZ7/Bqx509DJ43ltnTYURUX1piaY5JDDmphVLfs9eJXRMOYVLdag57qgztsDwaj4AsIunhn1s",
-	"yDbyysPYtE3akxZ9VnTA3XfyosE8FSBSH91o2pc2huhK42wNT3zZjN1zpfFvqolQCe7Nj2GNR6aHTBYL",
-	"3tW2jUP9mQmVBPe7PeZjFNvFol0xw6OzLRrJ90DUstFCC031Nx+eSbpJkhZu6F0pqkKy9YT1LO+39jTN",
-	"iev7OTfGnmyrZigbXkUZ0S0T80tX98NgayiOJ85eji/mbCt3GSW1ceYqWru08FbZK/TpslazX2p/N/hx",
-	"c5rigEqbx/V5yfqabI8QWzfF65Os3QDr+PvKbDbArTYC3JIDqrx1ji5e9SVn+7LH+Lv+o8zg9WAWVfP9",
-	"+Hhl2FLg61m+3HvP5Z31vxvl0uqN/O1iUl3/fHseLbqK9NFgRS+px2MNWy/OPMhZUO0zQFvCPva3iu1v",
-	"d9/dwxIMEh6ZDyj73asLM+yp5xqb5ax/FRcrZ4RCVVEAdX9/XSvQwV36iKdLM+VfQetkIMnzkF8+5Om3",
-	"uTc1X+mV8zZPrjXzZ30NVtFWq21Vh3zUl613WhuulZ62bOaGVW3jY3cOJlRIjk3zyMejaAuoSnbX1fR9",
-	"jvcvdJ+ezR3u29cFfuTRvuvLT1t0zl9896hK4bo6Gwf5N9l5h3k0H2/fJP1dH8Z37BtHmocxB5ikmdC9",
-	"go0u1X3T813p1pnll9d1z23KwBUOELhCjMONMpH7i/dbwEYXqkBKYZmY7qOmPTqNAKz3nG8gdacH5+V3",
-	"x/qZ1Px22APUs265ai8u591Jx1+UN/s2IevmTtePU+8+AB6pPq9Qdh3hGusmMx3K/UQNeiC61++ors8G",
-	"uxuCZ3v0s2kddHu2+K5a5K1Tw1fjjrWiY7tLnyMsLmDpGRT72vttdd2c/2Z1XYH3NpbbQ6bJk1PsTXvd",
-	"RnJvgVx5x/qZ6FtTmtaX7g39fTut/Vg5oq3YWsGArhABOFJd6gHP5nnYx4peRc/l1r5Iv4eZ2Bq+eIBc",
-	"6Y/QTrUgct/XGa+lqNpP/a6S6sfMAButor5bgnHy1BOMRXV1zwSjZbI853N5D768v2afdFClbyffGkX2",
-	"4MURzjMW3SXadCce+Ioefuk/o24k3T6hGvPLw5+JN7ll607G1VmdXV0BSWi60ZofGM2EuYuGKxeLby+V",
-	"vWvJiiqytyuJ6zckvN0J+hMRyufqtjb+dpe43ZmL1yx5K4rdnln6uQhva2XJWYl3z6Ik35vHaM2UxDxG",
-	"54JlgcjYs0w9Npka+jva+lCec0BvnLu/FbX96fuK5HGLxddNzjxLyLOETH9MsFRlvu0PllrF0J8lK9Iz",
-	"z6K49uJPRRDvP0VpJQXrcvjXqsXWErem2Wz3WgXsrHMpvmv9xDLfje95b+t9XEXkWyaf+90ssj5kuIXK",
-	"vmhpvu219Vt6iclcq9Dcsx530rRTeenP1D853VX9Ov/2qi6a+jWX+vgIu8opWm0+v6LZTkgTiIlqPT+Q",
-	"qDYTuHXBoKvbfUiD3i3uTU/78bcMB5cjpYFHuix1VHYFq+iYgcszU9veLFTXWCxHYWLBo5ZtQpN3gS3G",
-	"5T/cfLn5dwAAAP//QAvc1KO1AAA=",
+	"0B6TEpig6rHpaRwbq52FejPfbAHdUCO55XD8JAQloc0STWkzYY37L4aiweHgP8clkY4NhY6d5HkzHCwY",
+	"jCCBved5r8fbU2hUFDPMYqxpHAuU8K75NBHa0xmMQMag+nfKaILEEmW8N5Cfi1fsia8pu7w1nL+rl/1w",
+	"3viPUr/6w/hsTjMSzjjNWIBmOSFX11RDgB4C5JCC7zTOmssmK/4tHk3aFhRw4V9KPuxcRI11rdBkRz1F",
+	"f3aUqK9C6kKUkz8puUJM0izkl2foW4Y0FVXPVkB+2UVScgJFSJBfzgJKIryYRTh2IE0/BPIhwASsYBKD",
+	"iLIECrAUIuWH43FIA76TYrIIYLoT0GT8r+VY4HA+5gLOYzSWi4z0PBmDct6RnG4UZXG840Rb1855SglH",
+	"f8mt2xSjtuOA1EkbDEGBzhUFeUlDE1gXhvQkltjy0fyom+jNin6I74mUXZhzLXqEuTyYMxTDlbVsTQ4G",
+	"8g8gKOCCpgACJocDZsYPa1BaWCoEe7c8/wgTdCpHOwn+KEvSc2WHNMEr7ZMwS1KQEdyESS4bI4HCmSJE",
+	"9Zum3cHhIKTZPEbl2ZEsmUtbbjhAXOAECjQTVMB4xuh13zcjTDBfonA2Xwm09ktrLKQhc+wKE3GwP+i0",
+	"UCvvD5uIamylDqYbSy5iOybr0RpkopPY1NPZHJOYLmYLgUMnfTCByQK8vzg5ypV5lnLBEEyAfrWi7NBr",
+	"OI2C3d0RCiavRtMpej2a78JgNNnd34XBdDqZTPYOp6OXr/ZfD4YDksWx3FfNZC1VZAVEt9YvQJTyrNT6",
+	"7WBqxT/HZGci/7fbH5YQG2snglksaWVnrB/oJaqwSTBCzFAgKFuB6yViSIGmzyWmC4C5FAySnnpAsAnp",
+	"cMwYZb9jsfyAOHfaOpJklL4BSI5tkJH6dRZIs6fxrnoGAm0S1blpaF5N+ML3ZmKA6tIN5URDGx4XJ71H",
+	"wli0JySifgMg0INmLrYwzwCWx1ZIjcwnNqSk6Wfy192m+j4toNr3ph0Seez+HYZQwN6eQ9Xbdjg4SoAp",
+	"TdtDaEpOkau3b0LT7/1vwrgyG96Etn3uEfrSmNo82NpguFfAjQ2yYfClDXePOC9M/A2D/AEvmDJh2QIJ",
+	"fo/AVyZ+iJ3cL+Vk83LOh4D+Qirgc8GyQGQM+XehAZwFyvGY8W9x1al5d3b85uIYXLx5e3oMvorpV/DT",
+	"Vxx+BZiIn6bTn8HHTxfg42+np+DNbxefZicf350dfzj+eDH8fHby4c3ZP8D/Hv9Dv/EzGP9y8R9/GLmP",
+	"whkmIfrzC3h3+tv5xfHZ8RH4ZfwzOP74/uTj8d9OCKFHb8HR8a9vfju9AO/+/ubs/Pjib5mIXiXzffDu",
+	"0+npm4vj/N/SrHKFJczWmp5aOHcGSpSx6xiufp/28EyL1/O5LKw6j6oWvLv38PTeZDK5c3j6lMKw2+2K",
+	"KQzdbleLF+S3MxIkoDGXLaYot2o9Lyz+Jj4YXTDEufOh9lP6w1TDWsMhsuezlq5uxQG4C+W1KOxd6cIX",
+	"Lu9FQ692D6ad2DBU30VKn5QFjtoDVsESBZczhrhyS+oUlzI0UiOAGWF7Q+VDzEEKOUfhDnCz+l2CKMMq",
+	"jB07rUviTqdX+ykIKBnidXqjOOPLigenna3qrL8zLBBXvprel1xABbLlDlKKiQBc/gIFOPoAAkg0J2MB",
+	"YCQ9A4YKv1S+loffGikZ/i2eBZQIRBx7499isKIZuIZEWDusnJ1D04CvwbRUNbk2kOpmCL4Gu/5He+5H",
+	"d9Av/+1UMCsSNDf7WxrCHOc0FTjBXOAA8CVkoUSjlABSe4NrLJY64m6OhpJ4BTKOQulhEwCNowpoEGSM",
+	"A0y8cx4dnYKk4pwWR1MPPlrn5CJcR65mE1nTu6ulzxlzOfllRCKQ+89SkNIYBytQiTg3ff8/U8yMXZfz",
+	"06TOTGqQjiAIrOMzxXK2/5yrEE8cxFJz8k92pQ2/Yt29g0lj6YslAvlgyUEpYpiGOIBxvAJG5EXNkIze",
+	"VjgEZnJwBeMMHQK1hCQojgJKQn476BlKICYznsIAVXYwfVGH/wMmOMkSEDGEQIj5JVBvKRjev73N8jc+",
+	"mrjXOPYDxu264nSVNVMU4GhlgOfZ3IrORZSBBtg74CQChAqg38SSJlTOXYoqAShB4BrHMZgjJYB2wLmC",
+	"1OR2DsEuRC8P9vf2R9HL19FoOkWvRvMQ7ebhUGlovtJbmXYHAGuc3sSxi9/Vsb5TTNzEh9JoOjWVM2WT",
+	"xVXkeaYflhahpcOe48hbFUe+8VFJt7dii+0qlZjqidL1qE5Rw2GeCNVsohVLidSfalidDsH09cvXP7uY",
+	"vbKuh/hcNHcHYmsnLjcIGnF5FYQE6P4BCKAIlrMsnSVFRVQViOultFCYFOJqLMhSbUwVp2O5Xz42d8rV",
+	"9eiz3PfOmGdzNaXLTHSXXuRI1FRZme4sI0S+3CU5q8TqJCJ7u64T9iE9B9slis+VuVqkY5p8ps1ZJXtU",
+	"emdYBsm6ozC1wNg5CjKGxaq5jDKiTZUM53HVwtPqLcIoDgvNtsRhiIg2rhdIFE6NPVFlEhAxmqghyvaK",
+	"pJ3TFEs19xUxMYNxTK9ROAtIE+x3NEkoAR+NZD4/PwXyHRzhAOrgQYGsTuRwHs8C6He8rIm1qMpH2tTm",
+	"pFk5sdyJd+pfrenkPj4ffzDWwvj/Xkxe51Uhta11r3qJVv5F35XryVNJGb6SW7tEq6IkxVq8Y726Z1TF",
+	"pQMHTQCd3GGcsveMZqkjbBzGzVK3zoOOMONiFtNAaxnXK9IbReF60wodTXcNzcj6EzaCJWr2YbnnxkYK",
+	"sK0FnUgtqnRqokb/7rb1KnZJBGPeCI8UmkR54VoCSLdJvV4R8eb1pjYxZmWpLnutR6WZrY1I6c1lUkAp",
+	"qcy1zHGpdy8IUQyvqEOb6d+Lur4CVzWzz8WJuYvvwjYwNZHuwkdnBAByfk1Z6J2xGFCdcm//xUEfSzSP",
+	"MLjnlg+teff2JgcubzbNAwqtpaxqUGmqFP5I20u26yIZ1dJorTmjfJx8p61e1KoU7V0Vqq2O9YpuO9Of",
+	"kF/2L+q4gPyyLOkYDjLusvXM3uTDxv4YpaJntd3MEaE2S1ZZOP9XixRqMXyskl2/4aNHjfpZPzbKfesV",
+	"FqSrnqW7KEUbRFzF/aRJdM2oy/bMaZ4XwHTSfEkqd6BfhtIYB9BDx7VyzGbUzFQzG2s7XgFd8mzC4A6Z",
+	"uGYdZ05ZNiBO2pFueWtlJ0MJvUKzBOm8cm9Not9TcWVlys4hV5ZQSK+J8Yfyn92h+3IfvRi3xgVOP/xc",
+	"0LR1sxtZtJJkb1peWZL2pF6r1HSN6q7ejBRTGPaExMq+Wpm8mtcK+WXOPU1B35/z/J5rlxw/VwONEdpz",
+	"Z+crEpQ7U6lj987kI6Bgs9lUJV+GLruVIU7jKxTOlNlJg8uZJz/cKjvyWxBO1LjTn36BkKPS7NMpH0p0",
+	"tASu5K7daXbj1Ot5HZudS0xgspBYcS1hp5KulzhYFlEezEH+8lrOaSOU1jPo5dA7ASJiJtK+1QMmqzGb",
+	"oyUmoRVH6vNu4fU4JKV81rqjygj/jnSxALrKLy72gMvUaPfGgcUHC+mJtp25HlA7dsgQyMgon8U++la2",
+	"rri/nS6ijQh7k5VTH/aLdFWPx3kYdT5w4cnySW2m8pGVi5lVzv+uATJf3VGT0y5MOUNTePrERIRjiT+W",
+	"aS8ZhiGWb8H4c2V0l9x/i8kpXfyqJjuTc7nUMiJLSAI001dJZ3nF2RKSBeosYLDsHG2YA56l0nxXeS6V",
+	"D9c3VMMwBmmcLTDpc4MULwhlaKYyp5IYCvTXbqmqYSBlyORY1TDnaV0hxnVEo1swIgENGqqpkzAZKeuv",
+	"jgSHJae2zwVleUmBNwtRTuotDPKbEzY18ku3z0LJLMyUjS4csy3ptTy8JSShDhhGMQ4ECtVOlLuVJToL",
+	"mMY6vppX52vkW/xliVkpZGaJs1Rf0sQ1XKnsAKVSFkGBpFqzFksR56aIYjAclBUV7sW0Wu/n6ytrSL1g",
+	"Ofy38bU7C0aVz5roqtiCkesnKRnGjAFqzLB/xa0SYqbstsbctQDiGrjR9btHUMC30h/Jowbuo8whN6Ut",
+	"+elFWRzLjZCAoQQRXRALY1VkWRIsjOO+hlsJQoe0qhF7ff/OU6kTkFtfOGSpK+QukGJ4OTEHUORpyBhd",
+	"obgh642QU9rV4brIn3O72iP/KmMqqAVhEveRdQYGU1jcLAtLoRCIqYIMrZP8wPiGl3D9/xGjaTdUN54T",
+	"+DWLY0Pvknl9t1/z5BCNgKTEgr8kFXHHrUPCMReIBI4UlpJRRDAag1xsYWLsMJWV0jU8lEmBGakbSMVs",
+	"AHKeMUmr1bPJBHWhQE7nKSYRlEnvNcSsKfZ3xvn6MyOwGzPrATOxZAiG1RKq/bomUwjTL0j8BZQYc9Np",
+	"w+LEO/P0wDm1fqNzah8FnJCArUcBlhDyEIBUbLM5FEG1WnPaLPKy55Im6JJRgv9VLKXmAOhPFGTqJ8kP",
+	"3zJIBFZLuSu00rgn+uobuTUOqxc13NZFyTLqmkgDZ0ZiljZSZ9rYvCHyvI9luPiq/ZXkXmMJ80bfJdzR",
+	"QrNeDeA6OLXFfCrD72EUNlyrf8Eve7sXpU3TDKzVvN1yhcleFEx2D/ZGu6+Cl6PpFL0cwYMXe6ODYDJ/",
+	"tR++eB3tTQ6no5eT/en+7t5w8mL/5X64F1jDX+292B3tTvbC+e7+QRjuhYfT0fTlxNnnoloUZfWtUA/K",
+	"6jTfmymtImjfGR7YTCC7JbTsO/yKlekBZcRQDKXuaK9+laKzMFoCc8ZdllxdW95oi2zteeoyt2pxe5Fc",
+	"31Fvs9ai5K7ohA2H9xjyGGlunZ4LmqYqelCW8fxqbos4/Qunre2vPNNGvaB2fN828XlPn7+mPdVDNUFO",
+	"vw6RIR/3S1zx1oR9T7q0fWRP/GQIrnEcBpCFeWCg6vzOR7/cMSreSNz5ouWirDloOmE9YBVOWFuTTpa6",
+	"8OkJ4dHDJfXc52GEFHFdZ2yiNPmOee1YprfEYM8FfBq5hp7+nVkcvmsLSsswTTtOH1WZxWbKKm5T7bCh",
+	"UgBn8r/AiffUUZJK/vCmMukVYtcMC7RW1rZ4S1vbwqxS/NF9ladctxt032W7COJY9Xnhl834VEs5gfNG",
+	"XSFOu1s45QKsnNQpu+pKJQsCxLkH3PWK05pzDZvYcAGl73fda1ep/mJIL/7ADaJq7VfaUqUt7oa/rqJ5",
+	"0OWK3os85sYOB7n2EtTUevC2blRdid5b1IF0VX7UehXe/21eb7e9jV7nvVGhHyGFcXxEA0fA7ugD+JQi",
+	"8ubzCTj69E6KXBYPDgddjeJGUnmOtEmLKTF947R/EVFF4liojTcWyJMwh4MDiUCVnUgRgSkeHA721E9S",
+	"4oulgnYMUzy+mo5NU4JxPr2xl4p+QSehWuvN55Nqzx2VpNSSVc23O5mYiF9evQxTHSqW2/gn14W7pR3V",
+	"2tjT3d1HYb2mFrUgU4fIsySBbDU4lHsARXcfElHAs2AJIAeVlj8CLrjVjmfwRdVB+navhU8dAYoN39Jw",
+	"dW97bzYPamzaLAvmct2bR3wOmcJZ5Sh2nIi/GTboUSeYeV+SLFslPQxhOloztaFlONi/RzAa7b4cS2t1",
+	"3sIYVhfXXHGtczDj7/oP5RHeaPkXI20HOk7qUxTFmCCNto8625RCBhOkT/mPRvrLAi/3yVUPBCiWg1wR",
+	"DCwYBrYY16lvV3zT3yz5S4Nw9h12+CM7UarxWuvJ2+sgc4OhJ4eVfbwehsMcfcO2jMOsXsJrcZg5mPF3",
+	"Y4WtxWHGeuzBYTZ4fg6zYHjaHFbtDN16kGGykwPn5Kz3SBzR4H/OP330sFIVLDlXcXmtSW4hDYBaroQq",
+	"pEENImOjtoDz94sPp73AkQM7wFkKnSD3gaOdvG7RU3bf6yJmyV/5JSZ1Hba4F6Bo+luG2MoiaiyWs2KE",
+	"g4jdpVM3Q8cXAlaAIZEx3Z9El2mNTGuCvL7eBULlRv46MHzZrPR1NDx0cIp9azTOa9JrdFAfUtJD7uMr",
+	"H437zt/uYL0pY9vRJHt9g3t6b/AUMZFHr+d0dzcASZiXJkJA0LV96q4Db8qA8Xcrs9Ct5Y7Uw4IoWmXC",
+	"IqZz1SMmI/hbVr3q7Fd41URHL4XnvWrWFBgR1ZeWaJpDAmNu+rHkl+1VQMeUU7hEh5rjjjJjCxSvpgMA",
+	"u2hq2EeHbCOtPIxO26Q+aZFnRRvcfSctGsxTASL15Y2mfmkjiK4wztbQxJfN6D1XGP+mGgiV4N78GNJ4",
+	"ZHLIRLHgXXXbONTfmlBBcL/ZY75IsV0k2uUzPDrdopF8D4dadltoOVP94YfnI93kkRZm6F1PVLlk6zHr",
+	"Wd507WmqE9dHdG6MPtlWyVB2vYoyovsm5peu7ofA1hAcT5y8HJ/N2VbqMkJq48RV9HNpoa2yYejTJa1m",
+	"09T+ZvDjpjRFAZVej+vTkvVJ2R4utu6M1ydYuwHS8feV2ayDW+0GuCUJqrx1ji5e9QVn+5LH+Lv+o4zg",
+	"9SAWVfP9+Ghl2FLg61m+3HvP5Z31vxul0uqN/O0iUl3/fHsaLbqK9JFgRS+px6MNWy/OPEguqPYtoC0h",
+	"H/uDxfYHvO9uYQkGCY/MV5T95tWFGfbUY43Ncta/iomVE0IhqiiAusm/rhXooC6d4umSTPmn0DoJSNI8",
+	"5JcPmf0296bmK71y3ubJtWb+rK/CKtpqta3q4I/6svVOa8O1wtOWztywqG188c5BhArJsekY+XgEbQFV",
+	"Se66mr5Pev9C9+nZXHLfvi7wI1P7rs8/bVGev/j4UfWE6+JsHOQfZucd6tF8wX2T5+/6Or5j3zjSNIw5",
+	"wCTNhG4YbGSpbp6e70q3ziw/v64bb1MGrnCAwBViHG6UiNyfvd8CMrpQBVIKy8R0HzU90mkEYL3xfAOp",
+	"Oz0oL7871k+l5rfDHqCedctFe3E5704y/qK82bcJXjd3un6cePcB8EjleeVk12GusW4y0yHcT9SgBzr3",
+	"+h3V9clgd0PwbI98Nq2Dbk8W31WLvHVq+GrUsZZ3bHfpc7jFBSw9nWJfe7+trpvz36yuC/DeynJ7jmny",
+	"5AR7U1+3Hbm3QK68Y/186FtTmtb33Bvy+3ZS+7FSRFuxtYIBXSECcKS61AOezXO3jxW9ip7LrX2efg81",
+	"sTV08QCx0h8hnWpO5L6vM15LUbX/9LtKqh8zAWy0ivpuAcbJUw8wFtXVPQOMlsry5OfyHnx5f80+4aBK",
+	"306+NYLswYsjnDkW3SXadCce+Ioefuk/o24k3T6hGvPLw+fEm9SydZlxlauzqysgCU03WvMDo5kwd9Fw",
+	"5WLx7bmydy1ZUUX2diVx/YaEt8ugPxGmfK5ua6Nvd4nbnal4zZK3otjtmaSfi/C2lpeclXj3zEryvXmM",
+	"1gxJzGN0LlgWiIw989Rj46mhv6OtD+U5BfTGuftbUdsfvq9wHrdIfN3gzDOHPHPI9Mc4S1Xi235nqZUN",
+	"/VGyIjzzzIprL/5UGPH+Q5RWULDOh3+tWmzNcWuqzXarVcDOOpfiu9ZPLPLd+J73tt7HVYd8y+Bzv5tF",
+	"1ocMt1DYFy3Nt722fksvMZlrFZp61qNOmnYKL/2Z+icnu6pf599e0UVTv+RSHx9hV/mJVpvPr2i2E9IE",
+	"YqJazw8kqs0Eblkw6Op2H9Kgd4t709N+/C3DweVISeCRLksdlV3BKjJm4LLM1LY3C9U1FstRmFjwqGWb",
+	"0ORdYItx+Q83X27+HQAA//9o+0ohqLUAAA==",
 }
 
 // GetSwagger returns the content of the embedded swagger specification file
diff --git a/dm/openapi/gen.types.go b/dm/openapi/gen.types.go
index 2ae5fc92214..5a3bd34fcc7 100644
--- a/dm/openapi/gen.types.go
+++ b/dm/openapi/gen.types.go
@@ -356,7 +356,7 @@ type Source struct {
 	Host string `json:"host"`
 
 	// source password
-	Password string `json:"password"`
+	Password *string `json:"password"`
 
 	// source port
 	Port int `json:"port"`
diff --git a/dm/openapi/spec/dm.yaml b/dm/openapi/spec/dm.yaml
index 0b3dc5ddcae..0f88624b28e 100644
--- a/dm/openapi/spec/dm.yaml
+++ b/dm/openapi/spec/dm.yaml
@@ -1376,7 +1376,7 @@ components:
           type: string
           example: "123456"
           description: "source password"
-          nullable: false
+          nullable: true
         enable_gtid:
           type: boolean
           example: false
@@ -1410,7 +1410,6 @@ components:
         - "host"
         - "port"
         - "user"
-        - "password"
         - "enable_gtid"
         - "enable"
     ShardingGroup:
diff --git a/dm/tests/openapi/client/openapi_source_check b/dm/tests/openapi/client/openapi_source_check
index fc81248785f..df47f3cad8e 100755
--- a/dm/tests/openapi/client/openapi_source_check
+++ b/dm/tests/openapi/client/openapi_source_check
@@ -53,6 +53,21 @@ def create_source2_success():
     print("create_source1_success resp=", resp.json())
     assert resp.status_code == 201
 
+def update_source1_without_password_success():
+    req = {
+        "source": {
+            "case_sensitive": False,
+            "enable": True,
+            "enable_gtid": False,
+            "host": "127.0.0.1",
+            "port": 3306,
+            "source_name": SOURCE1_NAME,
+            "user": "root",
+        }
+    }
+    resp = requests.put(url=API_ENDPOINT + "/" + SOURCE1_NAME, json=req)
+    print("update_source1_without_password_success resp=", resp.json())
+    assert resp.status_code == 200
 
 def list_source_success(source_count):
     resp = requests.get(url=API_ENDPOINT)
@@ -220,6 +235,7 @@ if __name__ == "__main__":
         "create_source_failed": create_source_failed,
         "create_source1_success": create_source1_success,
         "create_source2_success": create_source2_success,
+        "update_source1_without_password_success": update_source1_without_password_success,
         "list_source_success": list_source_success,
         "list_source_with_redirect": list_source_with_redirect,
         "list_source_with_status_success": list_source_with_status_success,
diff --git a/dm/tests/openapi/run.sh b/dm/tests/openapi/run.sh
index 8dece3028bf..f2e95d1caaf 100644
--- a/dm/tests/openapi/run.sh
+++ b/dm/tests/openapi/run.sh
@@ -65,6 +65,9 @@ function test_source() {
 	# recreate source will failed
 	openapi_source_check "create_source_failed"
 
+	# update source1 without password success
+	openapi_source_check "update_source1_without_password_success"
+
 	# get source list success
 	openapi_source_check "list_source_success" 1