/* * Decompiled with CFR 0.152. * * Could not load the following classes: * com.ca.apim.gateway.extension.sharedstate.Configuration * com.ca.apim.gateway.extension.sharedstate.Configuration$Param * com.ca.apim.gateway.extension.sharedstate.SharedKeyValueStore * com.ca.apim.gateway.extension.sharedstate.SharedKeyValueStoreProvider * com.github.benmanes.caffeine.cache.Cache * com.github.benmanes.caffeine.cache.Caffeine * com.l7tech.common.io.CertUtils * com.l7tech.gateway.common.security.keystore.SsgKeyEntry * com.l7tech.identity.IdentityProvider * com.l7tech.identity.User * com.l7tech.objectmodel.FindException * com.l7tech.objectmodel.Goid * com.l7tech.server.DefaultKey * com.l7tech.server.ServerConfig * com.l7tech.server.event.EntityInvalidationEvent * com.l7tech.server.extension.registry.sharedstate.SharedKeyValueStoreProviderRegistry * com.l7tech.server.identity.IdentityProviderFactory * com.l7tech.server.oauth2.OAuth2Issuer * com.l7tech.server.oauth2.OAuth2IssuerEvent * com.l7tech.server.oauth2.OAuth2IssuerListener * com.l7tech.server.oauth2.OAuth2Signer * com.l7tech.server.oauth2.OAuth2Verifier * com.l7tech.server.security.keystore.KeystoreFile * com.l7tech.server.util.ApplicationEventProxy * com.l7tech.util.ExceptionUtils * com.l7tech.util.SyspropUtil * org.apache.commons.lang3.StringUtils * org.jose4j.jwk.JsonWebKey * org.jose4j.jwk.JsonWebKey$Factory * org.jose4j.jwk.JsonWebKey$OutputControlLevel * org.jose4j.jwk.JsonWebKeySet * org.jose4j.jwk.PublicJsonWebKey * org.jose4j.lang.JoseException * org.springframework.context.ApplicationEvent */ package com.l7tech.server.oauth2; import com.ca.apim.gateway.extension.sharedstate.Configuration; import com.ca.apim.gateway.extension.sharedstate.SharedKeyValueStore; import com.ca.apim.gateway.extension.sharedstate.SharedKeyValueStoreProvider; import com.github.benmanes.caffeine.cache.Cache; import com.github.benmanes.caffeine.cache.Caffeine; import com.l7tech.common.io.CertUtils; import com.l7tech.gateway.common.security.keystore.SsgKeyEntry; import com.l7tech.identity.IdentityProvider; import com.l7tech.identity.User; import com.l7tech.objectmodel.FindException; import com.l7tech.objectmodel.Goid; import com.l7tech.server.DefaultKey; import com.l7tech.server.ServerConfig; import com.l7tech.server.event.EntityInvalidationEvent; import com.l7tech.server.extension.registry.sharedstate.SharedKeyValueStoreProviderRegistry; import com.l7tech.server.identity.IdentityProviderFactory; import com.l7tech.server.oauth2.OAuth2Issuer; import com.l7tech.server.oauth2.OAuth2IssuerEvent; import com.l7tech.server.oauth2.OAuth2IssuerListener; import com.l7tech.server.oauth2.OAuth2Signer; import com.l7tech.server.oauth2.OAuth2Verifier; import com.l7tech.server.oauth2.SSGOAuth2Signer; import com.l7tech.server.oauth2.SSGOAuth2Verifier; import com.l7tech.server.security.keystore.KeystoreFile; import com.l7tech.server.util.ApplicationEventProxy; import com.l7tech.util.ExceptionUtils; import com.l7tech.util.SyspropUtil; import java.io.IOException; import java.io.Serializable; import java.security.Key; import java.security.KeyStoreException; import java.security.cert.CertificateEncodingException; import java.security.cert.X509Certificate; import java.text.MessageFormat; import java.util.ArrayList; import java.util.Collections; import java.util.List; import java.util.Objects; import java.util.concurrent.TimeUnit; import java.util.logging.Level; import java.util.logging.Logger; import org.apache.commons.lang3.StringUtils; import org.jose4j.jwk.JsonWebKey; import org.jose4j.jwk.JsonWebKeySet; import org.jose4j.jwk.PublicJsonWebKey; import org.jose4j.lang.JoseException; import org.springframework.context.ApplicationEvent; public class SSGOAuth2Issuer implements OAuth2Issuer { private static final Logger a; private static final String b; public static final String JWKS_USAGE; public static final String DEFAULT_KEY_STORE_ID; public static final String ISSUER_KEY_NAME; public static final String ISSUER_NAME; public static final String DEFAULT_JWT_SIGNATURE_ALGORITHM; public static final String JWT_SIGNATURE_ALGORITHM; public static final String USER_CLAIM_PROVIDER_ID; public static final String USER_CLAIM_ID; public static final String USER_SUBJECT_DN; public static final String USER_CLAIM_EMAIL; public static final String USER_CLAIM_LOGIN; public static final String USER_CLAIM_FIRST_NAME; public static final String USER_CLAIM_LAST_NAME; public static final String CLAIM_JWT_ID; public static final String CLAIM_SESSION_ID; public static final String CLAIM_JWT_EXP_TIME; public static final String CLAIM_AUTH_TIME; private static final String c = "|"; private final ServerConfig d; private final DefaultKey e; private final IdentityProviderFactory f; private final OAuth2Signer g; private final OAuth2Verifier h; private final List i; private final List j = new ArrayList(); private final SharedKeyValueStore k; private final Cache l; private SsgKeyEntry m; private String n; private String o; private static final int p = 100; private static final String q; private static final int r = 120; private static final String s; private static final String[] t; public SSGOAuth2Issuer(ServerConfig serverConfig, DefaultKey defaultKey, IdentityProviderFactory identityProviderFactory, ApplicationEventProxy applicationEventProxy, SharedKeyValueStoreProviderRegistry sharedKeyValueStoreProviderRegistry) { this.d = serverConfig; this.e = defaultKey; this.f = identityProviderFactory; this.k = this.a(sharedKeyValueStoreProviderRegistry); this.i = new ArrayList(); this.g = new SSGOAuth2Signer(this); this.h = new SSGOAuth2Verifier(this); String[] stringArray = t; this.l = Caffeine.newBuilder().maximumSize((long)SyspropUtil.getInteger((String)stringArray[19], (int)100).intValue()).expireAfterWrite((long)SyspropUtil.getInteger((String)stringArray[22], (int)120).intValue(), TimeUnit.SECONDS).build(); this.e(); defaultKey.addKeyInfoListener(this::a); applicationEventProxy.addApplicationListener(this::a); } public String getJwks() { return new JsonWebKeySet(this.j).toJson(JsonWebKey.OutputControlLevel.PUBLIC_ONLY); } public String getName() { return t[35]; } public String getIss() { String string; try { string = ISSUER_NAME != null ? ISSUER_NAME : this.o; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } String string2 = string; return t[9] + string2; } public OAuth2Signer getSigner() { return this.g; } public OAuth2Verifier getVerifier() { return this.h; } public User getUser(String string, String string2, String string4) { block4: { String string5; try { string5 = StringUtils.isBlank((CharSequence)string2) ? string4 : string2; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } String string6 = string5; try { if (!StringUtils.isNotBlank((CharSequence)string6) || !StringUtils.isNotBlank((CharSequence)string)) break block4; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } String string7 = string + c + string2 + c + string4; return (User)this.l.get((Object)string7, string3 -> this.a(string, string6)); } return null; } private User a(String string, String string2) { try { String[] stringArray = t; a.log(Level.FINE, MessageFormat.format(stringArray[3], string, string2)); IdentityProvider identityProvider = this.f.getProvider(Goid.parseGoid((String)string)); if (identityProvider != null) { return identityProvider.getUserManager().findByLogin(string2); } } catch (FindException findException) { a.log(Level.WARNING, MessageFormat.format(t[15], string, string2, ExceptionUtils.getMessage((Throwable)findException))); } return null; } public boolean isTokenRevoked(String string) { boolean bl; block5: { block4: { try { try { if (this.k == null || !this.k.containsKey((Serializable)((Object)string))) break block4; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } bl = true; break block5; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } } bl = false; } return bl; } public void addListener(OAuth2IssuerListener oAuth2IssuerListener) { this.i.add(oAuth2IssuerListener); } SsgKeyEntry a() { return this.m; } String b() { return this.n; } List c() { return Collections.unmodifiableList(this.j); } void a(String string, long l) { try { if (this.k != null) { this.k.put((Serializable)((Object)string), (Serializable)((Object)string), l, TimeUnit.MILLISECONDS); } } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } } int d() { return 10; } private String a(SsgKeyEntry ssgKeyEntry) { String string = ssgKeyEntry.getSubjectDN(); int n = string.indexOf(t[10]); if (n >= 0) { String string2; int n2 = string.indexOf(44, n += 3); try { string2 = n2 != -1 ? string.substring(n, n2).trim() : string.substring(n).trim(); } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } return string2; } return string; } private String b(SsgKeyEntry ssgKeyEntry) { return ssgKeyEntry.getCertificate().getSerialNumber().toString(); } private void a(String string) { this.e(); } private void a(ApplicationEvent applicationEvent) { EntityInvalidationEvent entityInvalidationEvent; if (applicationEvent instanceof EntityInvalidationEvent && (entityInvalidationEvent = (EntityInvalidationEvent)applicationEvent).getEntityClass().isAssignableFrom(KeystoreFile.class)) { try { this.e(); } catch (Exception exception) { a.log(Level.WARNING, t[30], ExceptionUtils.getMessageWithCause((Throwable)exception)); } } } private synchronized void e() { block6: { block7: { SsgKeyEntry ssgKeyEntry = this.f(); JsonWebKey jsonWebKey = this.c(ssgKeyEntry); try { try { try { if (jsonWebKey == null || Objects.equals(this.n, jsonWebKey.getKeyId())) break block6; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } this.m = ssgKeyEntry; this.n = jsonWebKey.getKeyId(); this.o = this.a(ssgKeyEntry); if (!this.j.stream().noneMatch(jsonWebKey2 -> jsonWebKey2.getKeyId().equals(jsonWebKey.getKeyId()))) break block7; } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } this.j.add(jsonWebKey); } catch (RuntimeException runtimeException) { throw SSGOAuth2Issuer.a(runtimeException); } } a.log(Level.INFO, t[4]); this.i.forEach(oAuth2IssuerListener -> oAuth2IssuerListener.notify(OAuth2IssuerEvent.JWKS_REFRESHED)); } } private SsgKeyEntry f() { try { return this.g(); } catch (FindException | IOException | KeyStoreException throwable) { a.log(Level.WARNING, t[1], ExceptionUtils.getMessageWithCause((Throwable)throwable)); return this.h(); } } private SsgKeyEntry g() throws FindException, IOException, KeyStoreException { if (ISSUER_KEY_NAME != null) { String[] stringArray = new String[]{t[34], ISSUER_KEY_NAME}; int n = ISSUER_KEY_NAME.indexOf(58); try { if (n != -1) { stringArray[0] = ISSUER_KEY_NAME.substring(0, n); stringArray[1] = ISSUER_KEY_NAME.substring(n + 1); } } catch (FindException findException) { throw SSGOAuth2Issuer.a((Exception)((Object)findException)); } return this.e.lookupKeyByKeyAlias(stringArray[1], Goid.parseGoid((String)stringArray[0])); } return this.e.getLatestServerSslInfo(); } private SsgKeyEntry h() { try { return this.e.getLatestServerSslInfo(); } catch (IOException iOException) { throw new RuntimeException(iOException); } } private JsonWebKey c(SsgKeyEntry ssgKeyEntry) { try { JsonWebKey jsonWebKey = JsonWebKey.Factory.newJwk((Key)ssgKeyEntry.getPublic()); jsonWebKey.setKeyId(this.b(ssgKeyEntry)); String[] stringArray = t; jsonWebKey.setUse(stringArray[29]); if (jsonWebKey instanceof PublicJsonWebKey) { PublicJsonWebKey publicJsonWebKey = (PublicJsonWebKey)jsonWebKey; publicJsonWebKey.setCertificateChain(ssgKeyEntry.getCertificateChain()); publicJsonWebKey.setX509CertificateSha1Thumbprint(CertUtils.getThumbprintSHA1((X509Certificate)ssgKeyEntry.getCertificate(), (String)CertUtils.FINGERPRINT_BASE64URL)); } return jsonWebKey; } catch (CertificateEncodingException | JoseException throwable) { a.log(Level.WARNING, t[17], new Object[]{ssgKeyEntry.getAlias(), ExceptionUtils.getMessage((Throwable)throwable)}); return null; } } private SharedKeyValueStore a(SharedKeyValueStoreProviderRegistry sharedKeyValueStoreProviderRegistry) { SharedKeyValueStoreProvider sharedKeyValueStoreProvider = sharedKeyValueStoreProviderRegistry.getExtension(); if (sharedKeyValueStoreProvider == null) { String[] stringArray = t; sharedKeyValueStoreProvider = (SharedKeyValueStoreProvider)sharedKeyValueStoreProviderRegistry.getExtension(stringArray[32]); } return sharedKeyValueStoreProvider.getKeyValueStore(t[13], new Configuration().set(Configuration.Param.PERSISTED.name(), Boolean.FALSE.toString())); } /* * Unable to fully structure code */ static { block10: { block9: { var5 = new String[36]; var3_1 = 0; var2_2 = "\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0003NpYN^&\u0016*\\EXX:QlACY\u0011=E?@NN\u0016'\u0016'PR\u0014R5C?P\u0016G\u0001)\u001f`\u0015M]]8\u0016.THWX:QlAD\u001cE\u0015@YHt_?\u0015YYW&S?]NX\u001f,VDQ\u001f8\u00018PHT\u001f'S>CNN\u001f;W9AC\u000e\u001f=E?@NN\u001f>A8fB[_1D\u0007PR\u0002\\O\tF^^[1U8qE\u0005YD[X:\b]_HA'\fc\u001a\u0003ve\u0001\u0005ex\t\u0000f\bYJOE\u001aW!P\u0018FX[\u000b;W9AC\u000e\u000b&S:Z@YU\u0000Y'PEO.VDQ\u001f8\u00018PHT\u001f'S>CNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f:W!P.VDQ\u001f8\u00018PHT\u001f'S>CNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f>A8fB[_\u0015Z+ZYUE<[\u0003__U\tT^HY\u000bB%XN\nEYSG=R)GbX\u0003PSL\u0003FB[\u0003FB[9pYN^&\u0016>PMNT'^%[L\u001cE\u0015@YHx\u0016/T^OTiM|H\u0003FBX\u0005YD_P8\u0005ex\t\u0000f"; var4_3 = "\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0001d\u0006|\u0005\u001b\f\u0003NpYN^&\u0016*\\EXX:QlACY\u0011=E?@NN\u0016'\u0016'PR\u0014R5C?P\u0016G\u0001)\u001f`\u0015M]]8\u0016.THWX:QlAD\u001cE\u0015@YHt_?\u0015YYW&S?]NX\u001f,VDQ\u001f8\u00018PHT\u001f'S>CNN\u001f;W9AC\u000e\u001f=E?@NN\u001f>A8fB[_1D\u0007PR\u0002\\O\tF^^[1U8qE\u0005YD[X:\b]_HA'\fc\u001a\u0003ve\u0001\u0005ex\t\u0000f\bYJOE\u001aW!P\u0018FX[\u000b;W9AC\u000e\u000b&S:Z@YU\u0000Y'PEO.VDQ\u001f8\u00018PHT\u001f'S>CNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f:W!P.VDQ\u001f8\u00018PHT\u001f'S>CNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f!E)Gh]RCNN\u001f;W9AC\u000e\u001f=E?@NN\u001f>A8fB[_\u0015Z+ZYUE<[\u0003__U\tT^HY\u000bB%XN\nEYSG=R)GbX\u0003PSL\u0003FB[\u0003FB[9pYN^&\u0016>PMNT'^%[L\u001cE\u0015@YHx\u0016/T^OTiM|H\u0003FBX\u0005YD_P8\u0005ex\t\u0000f".length(); var1_4 = 32; var0_5 = -1; lbl7: // 2 sources while (true) { v0 = 119; v1 = ++var0_5; v2 = var2_2.substring(v1, v1 + var1_4); v3 = -1; break block9; break; } lbl13: // 1 sources while (true) { var5[var3_1++] = SSGOAuth2Issuer.a(v0, SSGOAuth2Issuer.b(v2)); if ((var0_5 += var1_4) < var4_3) { var1_4 = var2_2.charAt(var0_5); ** continue; } var2_2 = "A_HE B8A_HE B8A_HE B8A_HE B8A_HG\n\u0002\u001c\u001fO\u007f\u0013}\u0005\u0007J"; var4_3 = "A_HE B8A_HE B8A_HE B8A_HE B8A_HG\n\u0002\u001c\u001fO\u007f\u0013}\u0005\u0007J".length(); var1_4 = 32; var0_5 = -1; lbl22: // 2 sources while (true) { v0 = 51; v4 = ++var0_5; v2 = var2_2.substring(v4, v4 + var1_4); v3 = 0; break block9; break; } break; } lbl28: // 1 sources while (true) { var5[var3_1++] = SSGOAuth2Issuer.a(v0, SSGOAuth2Issuer.b(v2)); if ((var0_5 += var1_4) < var4_3) { var1_4 = var2_2.charAt(var0_5); ** continue; } break block10; break; } } switch (v3) { default: { ** continue; } ** case 0: lbl39: // 1 sources ** continue; } } SSGOAuth2Issuer.t = var5; SSGOAuth2Issuer.CLAIM_JWT_EXP_TIME = SSGOAuth2Issuer.t[27]; SSGOAuth2Issuer.DEFAULT_KEY_STORE_ID = SSGOAuth2Issuer.t[0]; SSGOAuth2Issuer.USER_CLAIM_ID = SSGOAuth2Issuer.t[6]; SSGOAuth2Issuer.JWKS_USAGE = SSGOAuth2Issuer.t[28]; SSGOAuth2Issuer.CLAIM_SESSION_ID = SSGOAuth2Issuer.t[31]; SSGOAuth2Issuer.s = SSGOAuth2Issuer.t[20]; SSGOAuth2Issuer.USER_CLAIM_FIRST_NAME = SSGOAuth2Issuer.t[21]; SSGOAuth2Issuer.USER_CLAIM_EMAIL = SSGOAuth2Issuer.t[2]; SSGOAuth2Issuer.DEFAULT_JWT_SIGNATURE_ALGORITHM = SSGOAuth2Issuer.t[11]; SSGOAuth2Issuer.q = SSGOAuth2Issuer.t[14]; SSGOAuth2Issuer.USER_CLAIM_LAST_NAME = SSGOAuth2Issuer.t[12]; SSGOAuth2Issuer.CLAIM_AUTH_TIME = SSGOAuth2Issuer.t[25]; SSGOAuth2Issuer.USER_SUBJECT_DN = SSGOAuth2Issuer.t[7]; SSGOAuth2Issuer.USER_CLAIM_PROVIDER_ID = SSGOAuth2Issuer.t[26]; SSGOAuth2Issuer.USER_CLAIM_LOGIN = SSGOAuth2Issuer.t[8]; SSGOAuth2Issuer.b = SSGOAuth2Issuer.t[16]; SSGOAuth2Issuer.CLAIM_JWT_ID = SSGOAuth2Issuer.t[24]; SSGOAuth2Issuer.a = Logger.getLogger(SSGOAuth2Issuer.class.getName()); var0_6 = SSGOAuth2Issuer.t; SSGOAuth2Issuer.ISSUER_KEY_NAME = SyspropUtil.getProperty((String)var0_6[5]); SSGOAuth2Issuer.ISSUER_NAME = SyspropUtil.getProperty((String)var0_6[18]); SSGOAuth2Issuer.JWT_SIGNATURE_ALGORITHM = SyspropUtil.getString((String)var0_6[23], (String)var0_6[33]); } private static Exception a(Exception exception) { return exception; } private static char[] b(String string) { char[] cArray = string.toCharArray(); if (cArray.length < 2) { cArray = cArray; cArray[0] = (char)(cArray[0] ^ 0x3B); } return cArray; } /* * Handled impossible loop by duplicating code * Enabled aggressive block sorting */ private static String a(int n, char[] cArray) { char[] cArray2; block11: { int n2; int n3; int n4; block10: { n4 = n; cArray2 = cArray; n3 = cArray.length; n2 = 0; if (!true) break block10; n3 = n3; if (n3 <= n2) break block11; } do { n4 = n4; cArray2 = cArray2; int n5 = n2; cArray2[n5] = (char)(cArray2[n5] ^ (n4 ^ (switch (n2 % 7) { case 0 -> 66; case 1 -> 92; case 2 -> 75; case 3 -> 70; case 4 -> 35; case 5 -> 65; default -> 59; }))); ++n2; n3 = n3; } while (n3 > n2); } return new String(cArray2).intern(); } }