/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.common.io.CertUtils
 *  com.l7tech.gateway.common.audit.Audit
 *  com.l7tech.identity.BadCredentialsException
 *  com.l7tech.identity.InvalidClientCertificateException
 *  com.l7tech.identity.MissingCredentialsException
 *  com.l7tech.identity.User
 *  com.l7tech.identity.cert.ClientCertManager
 *  com.l7tech.objectmodel.FindException
 *  com.l7tech.objectmodel.ObjectModelException
 *  com.l7tech.policy.assertion.credential.CredentialFormat
 *  com.l7tech.policy.assertion.credential.LoginCredentials
 *  com.l7tech.security.types.CertificateValidationResult
 *  com.l7tech.security.types.CertificateValidationType
 *  com.l7tech.util.ExceptionUtils
 *  com.l7tech.xml.saml.SamlAssertion
 */
package com.l7tech.server.identity.cert;

import com.l7tech.common.io.CertUtils;
import com.l7tech.gateway.common.audit.Audit;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.InvalidClientCertificateException;
import com.l7tech.identity.MissingCredentialsException;
import com.l7tech.identity.User;
import com.l7tech.identity.cert.ClientCertManager;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.ObjectModelException;
import com.l7tech.policy.assertion.credential.CredentialFormat;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.security.types.CertificateValidationResult;
import com.l7tech.security.types.CertificateValidationType;
import com.l7tech.server.identity.AuthenticationResult;
import com.l7tech.server.security.cert.CertValidationProcessor;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.xml.saml.SamlAssertion;
import java.security.GeneralSecurityException;
import java.security.cert.X509Certificate;
import java.text.MessageFormat;
import java.util.logging.Level;
import java.util.logging.Logger;

public class CertificateAuthenticator {
    private static final Logger a;
    private final ClientCertManager b;
    private final CertValidationProcessor c;
    private static final String[] d;

    public CertificateAuthenticator(ClientCertManager clientCertManager, CertValidationProcessor certValidationProcessor) {
        this.b = clientCertManager;
        this.c = certValidationProcessor;
    }

    /*
     * Enabled aggressive block sorting
     * Enabled unnecessary exception pruning
     * Enabled aggressive exception aggregation
     */
    public AuthenticationResult authenticateX509Credentials(LoginCredentials loginCredentials, X509Certificate x509Certificate, User user, CertificateValidationType certificateValidationType, Audit audit, boolean bl2) throws BadCredentialsException, MissingCredentialsException, InvalidClientCertificateException {
        String string;
        X509Certificate x509Certificate2;
        block20: {
            block18: {
                Object object;
                block19: {
                    CredentialFormat credentialFormat = loginCredentials.getFormat();
                    x509Certificate2 = null;
                    object = loginCredentials.getPayload();
                    if (credentialFormat.isClientCert()) {
                        x509Certificate2 = (X509Certificate)object;
                    } else {
                        try {
                            if (credentialFormat != CredentialFormat.SAML) break block18;
                            if (!(object instanceof SamlAssertion)) break block19;
                        }
                        catch (GeneralSecurityException generalSecurityException) {
                            throw CertificateAuthenticator.a(generalSecurityException);
                        }
                        string = (SamlAssertion)object;
                        x509Certificate2 = string.getSubjectCertificate();
                    }
                    break block18;
                }
                String[] stringArray = d;
                throw new BadCredentialsException(stringArray[5] + object.getClass().getName());
            }
            if (x509Certificate2 == null) {
                String[] stringArray = d;
                string = stringArray[12];
                a.severe(string);
                throw new MissingCredentialsException(string);
            }
            string = user.getLogin();
            try {
                if (string != null && string.trim().length() >= 1) break block20;
            }
            catch (GeneralSecurityException generalSecurityException) {
                throw CertificateAuthenticator.a(generalSecurityException);
            }
            string = user.getId();
        }
        if (x509Certificate == null) {
            String[] stringArray = d;
            String string2 = stringArray[0] + string;
            a.warning(string2);
            throw new InvalidClientCertificateException(string2);
        }
        String[] stringArray = d;
        a.fine(stringArray[2] + x509Certificate2.getSerialNumber().toString());
        if (!CertUtils.certsAreEqual((X509Certificate)x509Certificate2, (X509Certificate)x509Certificate)) {
            String string3 = CertUtils.getCertIdentifyingInformation((X509Certificate)x509Certificate);
            String string4 = CertUtils.getCertIdentifyingInformation((X509Certificate)x509Certificate2);
            String string5 = string;
            stringArray = d;
            String string6 = stringArray[4] + string5 + stringArray[10] + string4 + stringArray[3] + string3 + "]";
            a.warning(string6);
            throw new InvalidClientCertificateException(string6);
        }
        try {
            CertificateValidationResult certificateValidationResult = this.c.check(new X509Certificate[]{x509Certificate2}, null, certificateValidationType, CertValidationProcessor.Facility.IDENTITY, audit);
            try {
                if (certificateValidationResult != CertificateValidationResult.OK) {
                    throw new InvalidClientCertificateException(stringArray[8] + CertUtils.getCertIdentifyingInformation((X509Certificate)x509Certificate2) + stringArray[1]);
                }
            }
            catch (GeneralSecurityException generalSecurityException) {
                throw CertificateAuthenticator.a(generalSecurityException);
            }
        }
        catch (GeneralSecurityException generalSecurityException) {
            stringArray = d;
            throw new InvalidClientCertificateException(stringArray[9] + CertUtils.getCertIdentifyingInformation((X509Certificate)x509Certificate2) + stringArray[13] + ExceptionUtils.getMessage((Throwable)generalSecurityException), (Throwable)generalSecurityException);
        }
        try {
            a.finest(MessageFormat.format(d[6], string));
            if (!bl2) return new AuthenticationResult(user, loginCredentials.getSecurityTokens(), x509Certificate2, false);
            try {
                this.b.forbidCertReset(user);
                return new AuthenticationResult(user, loginCredentials.getSecurityTokens(), x509Certificate2, this.b.isCertPossiblyStale(x509Certificate2));
            }
            catch (ObjectModelException objectModelException) {
                stringArray = d;
                a.log(Level.WARNING, stringArray[11], objectModelException);
                return null;
            }
        }
        catch (GeneralSecurityException generalSecurityException) {
            throw CertificateAuthenticator.a(generalSecurityException);
        }
    }

    public AuthenticationResult authenticateX509Credentials(LoginCredentials loginCredentials, User user, CertificateValidationType certificateValidationType, Audit audit) throws BadCredentialsException, MissingCredentialsException, InvalidClientCertificateException {
        X509Certificate x509Certificate;
        try {
            x509Certificate = (X509Certificate)this.b.getUserCert(user);
        }
        catch (FindException findException) {
            a.log(Level.SEVERE, d[7], findException);
            x509Certificate = null;
        }
        return this.authenticateX509Credentials(loginCredentials, x509Certificate, user, certificateValidationType, audit, true);
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[14];
                var3_1 = 0;
                var2_2 = "\u0002%)\u001ec_\u0004%,`\u001egY\u0015l,f\bhIP*%{]s^\u0015>j3\u0011jy\u001crEP:+e\u0014bL\u0004%%g]gC\u0014c%{]tH\u0006#)h\toB\u001el)a\u0018eF\u0019\"-)\u001bgD\u001c).\u0018\u001e/x\bc^\u0004l)l\u000fr\r\u0003)8`\u001cj\u000eP%9)<\u0011j$]tH\u00019/z\t&N\u0015>>`\u001boN\u00118/)\u0019iH\u0003\"m}]kL\u0004/\")\u0019gY\u0011.+z\u0018&N\u0015>>`\u001boN\u00118/)&\u001c\n+`\u0011cIP8%)\u001csY\u0018)$}\u0014eL\u0004)j|\u000ec_P!\u0019$z\bv]\u001f>>l\u0019&~1\u0001\u0006)<u^\u0015>>`\u0012h\r\u00045:lG&1\r?}\u0015cC\u0004%)h\tcIP99l\u000f&V@1j|\u000eoC\u0017l+)\u001ejD\u0015\">)\u001ec_\u0004%,`\u001egY\u0015-\n#g\u0019CU\u0013):}\u0014iCP)2j\u0018vY\u0019#$)\u0011iB\u001b%$n]`B\u0002l?z\u0018t\r\u0013)8}\r\u000f/{\toK\u0019/+}\u0018&v\r\u000f/{\toK\u0019/+}\u0018&v\u001dl?z\u0014hJP-jj\u0011oH\u001e8jj\u0018tY\u0019*#j\u001crHP\u0017(88h\u0013uL\u00138#f\u0013&H\u0002>%{]g_\u001f9$m]`B\u0002.#m>c_\u0004\u001e/z\u0018r";
                var4_3 = "\u0002%)\u001ec_\u0004%,`\u001egY\u0015l,f\bhIP*%{]s^\u0015>j3\u0011jy\u001crEP:+e\u0014bL\u0004%%g]gC\u0014c%{]tH\u0006#)h\toB\u001el)a\u0018eF\u0019\"-)\u001bgD\u001c).\u0018\u001e/x\bc^\u0004l)l\u000fr\r\u0003)8`\u001cj\u000eP%9)<\u0011j$]tH\u00019/z\t&N\u0015>>`\u001boN\u00118/)\u0019iH\u0003\"m}]kL\u0004/\")\u0019gY\u0011.+z\u0018&N\u0015>>`\u001boN\u00118/)&\u001c\n+`\u0011cIP8%)\u001csY\u0018)$}\u0014eL\u0004)j|\u000ec_P!\u0019$z\bv]\u001f>>l\u0019&~1\u0001\u0006)<u^\u0015>>`\u0012h\r\u00045:lG&1\r?}\u0015cC\u0004%)h\tcIP99l\u000f&V@1j|\u000eoC\u0017l+)\u001ejD\u0015\">)\u001ec_\u0004%,`\u001egY\u0015-\n#g\u0019CU\u0013):}\u0014iCP)2j\u0018vY\u0019#$)\u0011iB\u001b%$n]`B\u0002l?z\u0018t\r\u0013)8}\r\u000f/{\toK\u0019/+}\u0018&v\r\u000f/{\toK\u0019/+}\u0018&v\u001dl?z\u0014hJP-jj\u0011oH\u001e8jj\u0018tY\u0019*#j\u001crHP\u0017(88h\u0013uL\u00138#f\u0013&H\u0002>%{]g_\u001f9$m]`B\u0002.#m>c_\u0004\u001e/z\u0018r".length();
                var1_4 = 30;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 39;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = CertificateAuthenticator.a(v0, CertificateAuthenticator.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "Du\"R9\u0004^6g2T|\u0004_f`<T9\u0013\nb\u007fsD3\u0019^wy=\u0007=WIsb'N:\u001eIwd6\u000b|\u0015_b07H9\u0004\nx\u007f'\u0014K0%F0\u001eNwd:H2WLwy?B8M";
                    var4_3 = "Du\"R9\u0004^6g2T|\u0004_f`<T9\u0013\nb\u007fsD3\u0019^wy=\u0007=WIsb'N:\u001eIwd6\u000b|\u0015_b07H9\u0004\nx\u007f'\u0014K0%F0\u001eNwd:H2WLwy?B8M".length();
                    var1_4 = 59;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 125;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = CertificateAuthenticator.a(v0, CertificateAuthenticator.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        CertificateAuthenticator.d = var5;
        CertificateAuthenticator.a = Logger.getLogger(CertificateAuthenticator.class.getName());
    }

    private static GeneralSecurityException a(GeneralSecurityException generalSecurityException) {
        return generalSecurityException;
    }

    private static char[] a(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x57);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String a(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 107;
                    case 1 -> 109;
                    case 2 -> 46;
                    case 3 -> 90;
                    case 4 -> 33;
                    case 5 -> 10;
                    default -> 87;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}