/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.common.io.CertUtils
 *  com.l7tech.identity.AuthenticationException
 *  com.l7tech.identity.BadCredentialsException
 *  com.l7tech.identity.User
 *  com.l7tech.identity.cert.ClientCertManager
 *  com.l7tech.identity.fed.FederatedUser
 *  com.l7tech.objectmodel.FindException
 *  com.l7tech.policy.assertion.credential.LoginCredentials
 *  com.l7tech.security.cert.TrustedCert
 *  com.l7tech.security.cert.TrustedCert$TrustedFor
 *  com.l7tech.security.saml.SamlConstants
 *  com.l7tech.xml.saml.SamlAssertion
 */
package com.l7tech.server.identity.fed;

import com.l7tech.common.io.CertUtils;
import com.l7tech.identity.AuthenticationException;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.User;
import com.l7tech.identity.cert.ClientCertManager;
import com.l7tech.identity.fed.FederatedUser;
import com.l7tech.objectmodel.FindException;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.security.cert.TrustedCert;
import com.l7tech.security.saml.SamlConstants;
import com.l7tech.server.audit.Auditor;
import com.l7tech.server.identity.cert.TrustedCertServices;
import com.l7tech.server.identity.fed.FederatedIdentityProvider;
import com.l7tech.server.identity.fed.a;
import com.l7tech.server.identity.fed.c;
import com.l7tech.server.security.cert.CertValidationProcessor;
import com.l7tech.xml.saml.SamlAssertion;
import java.security.cert.X509Certificate;
import java.util.Collection;
import java.util.EnumSet;
import java.util.Set;
import java.util.logging.Level;
import java.util.logging.Logger;

class b
extends a {
    private static final Logger a;
    private static final String[] b;

    b(FederatedIdentityProvider federatedIdentityProvider, TrustedCertServices trustedCertServices, ClientCertManager clientCertManager, CertValidationProcessor certValidationProcessor, Auditor auditor, Set set) {
        super(federatedIdentityProvider, trustedCertServices, clientCertManager, certValidationProcessor, auditor, set);
    }

    /*
     * Exception decompiling
     */
    User a(LoginCredentials var1_1) throws AuthenticationException {
        /*
         * This method has failed to decompile.  When submitting a bug report, please provide this stack trace, and (if you hold appropriate legal rights) the relevant class file.
         * 
         * org.benf.cfr.reader.util.ConfusedCFRException: Started 2 blocks at once
         *     at org.benf.cfr.reader.bytecode.analysis.opgraph.Op04StructuredStatement.getStartingBlocks(Op04StructuredStatement.java:412)
         *     at org.benf.cfr.reader.bytecode.analysis.opgraph.Op04StructuredStatement.buildNestedBlocks(Op04StructuredStatement.java:487)
         *     at org.benf.cfr.reader.bytecode.analysis.opgraph.Op03SimpleStatement.createInitialStructuredBlock(Op03SimpleStatement.java:736)
         *     at org.benf.cfr.reader.bytecode.CodeAnalyser.getAnalysisInner(CodeAnalyser.java:850)
         *     at org.benf.cfr.reader.bytecode.CodeAnalyser.getAnalysisOrWrapFail(CodeAnalyser.java:278)
         *     at org.benf.cfr.reader.bytecode.CodeAnalyser.getAnalysis(CodeAnalyser.java:201)
         *     at org.benf.cfr.reader.entities.attributes.AttributeCode.analyse(AttributeCode.java:94)
         *     at org.benf.cfr.reader.entities.Method.analyse(Method.java:531)
         *     at org.benf.cfr.reader.entities.ClassFile.analyseMid(ClassFile.java:1055)
         *     at org.benf.cfr.reader.entities.ClassFile.analyseTop(ClassFile.java:942)
         *     at org.benf.cfr.reader.Driver.doJarVersionTypes(Driver.java:257)
         *     at org.benf.cfr.reader.Driver.doJar(Driver.java:139)
         *     at org.benf.cfr.reader.CfrDriverImpl.analyse(CfrDriverImpl.java:76)
         *     at org.benf.cfr.reader.Main.main(Main.java:54)
         */
        throw new IllegalStateException("Decompilation failed");
    }

    private void a(X509Certificate x509Certificate, String string) throws AuthenticationException {
        try {
            Collection<TrustedCert> collection = this.trustedCertServices.getCertsBySubjectDnFiltered(string, true, EnumSet.of(TrustedCert.TrustedFor.SAML_ISSUER), this.certOidSet);
            for (TrustedCert trustedCert : collection) {
                if (!CertUtils.certsAreEqual((X509Certificate)x509Certificate, (X509Certificate)trustedCert.getCertificate())) continue;
                this.validateCertificate(x509Certificate, false);
                return;
            }
            String[] stringArray = b;
            throw new BadCredentialsException(stringArray[18] + string + stringArray[24]);
        }
        catch (FindException findException) {
            String[] stringArray = b;
            String string2 = stringArray[17];
            a.log(Level.SEVERE, stringArray[13], findException);
            throw new AuthenticationException(stringArray[13], (Throwable)findException);
        }
    }

    private void a(X509Certificate x509Certificate) throws AuthenticationException {
        try {
            String string = CertUtils.getSubjectDN((X509Certificate)x509Certificate);
            Collection<TrustedCert> collection = this.trustedCertServices.getCertsBySubjectDnFiltered(string, true, EnumSet.of(TrustedCert.TrustedFor.SAML_ATTESTING_ENTITY), this.certOidSet);
            for (TrustedCert trustedCert : collection) {
                if (!CertUtils.certsAreEqual((X509Certificate)x509Certificate, (X509Certificate)trustedCert.getCertificate())) continue;
                this.validateCertificate(x509Certificate, false);
                return;
            }
            String[] stringArray = b;
            throw new BadCredentialsException(stringArray[8] + string + stringArray[0]);
        }
        catch (FindException findException) {
            String[] stringArray = b;
            String string = stringArray[11];
            a.log(Level.SEVERE, stringArray[3], findException);
            throw new AuthenticationException(stringArray[3], (Throwable)findException);
        }
    }

    private User a(SamlAssertion samlAssertion, String string, X509Certificate x509Certificate) throws AuthenticationException {
        String string2 = samlAssertion.getNameIdentifierFormat();
        String string3 = samlAssertion.getNameIdentifierValue();
        try {
            FederatedUser federatedUser;
            block6: {
                block4: {
                    block5: {
                        federatedUser = this.getUserManager().findBySubjectDN(CertUtils.formatDN((String)string));
                        try {
                            if (federatedUser != null) break block4;
                            if (!this.certOidSet.isEmpty()) break block5;
                        }
                        catch (FindException findException) {
                            throw com.l7tech.server.identity.fed.b.b((Exception)((Object)findException));
                        }
                        return null;
                    }
                    federatedUser = this.a(string, string2, string3);
                    break block6;
                }
                this.checkCertificateMatch(federatedUser, x509Certificate);
            }
            return federatedUser;
        }
        catch (FindException findException) {
            throw new AuthenticationException(b[1]);
        }
    }

    private FederatedUser a(String string, String string2, String string3) throws BadCredentialsException {
        FederatedUser federatedUser;
        block13: {
            block14: {
                block15: {
                    block12: {
                        try {
                            if (string3 == null) {
                                throw new BadCredentialsException(b[5]);
                            }
                        }
                        catch (BadCredentialsException badCredentialsException) {
                            throw com.l7tech.server.identity.fed.b.b((Exception)((Object)badCredentialsException));
                        }
                        federatedUser = new FederatedUser(this.provider.getConfig().getGoid(), null);
                        try {
                            federatedUser.setSubjectDn(string);
                            if (!SamlConstants.NAMEIDENTIFIER_EMAIL.equals(string2)) break block12;
                            federatedUser.setEmail(string3);
                            break block13;
                        }
                        catch (BadCredentialsException badCredentialsException) {
                            throw com.l7tech.server.identity.fed.b.b((Exception)((Object)badCredentialsException));
                        }
                    }
                    try {
                        try {
                            if (!SamlConstants.NAMEIDENTIFIER_X509_SUBJECT.equals(string2)) break block14;
                            if (string != null) break block15;
                        }
                        catch (BadCredentialsException badCredentialsException) {
                            throw com.l7tech.server.identity.fed.b.b((Exception)((Object)badCredentialsException));
                        }
                        throw new BadCredentialsException(b[19] + SamlConstants.NAMEIDENTIFIER_X509_SUBJECT + b[23]);
                    }
                    catch (BadCredentialsException badCredentialsException) {
                        throw com.l7tech.server.identity.fed.b.b((Exception)((Object)badCredentialsException));
                    }
                }
                try {
                    if (!string3.equals(string)) {
                        throw new BadCredentialsException(b[10] + string3 + b[15] + string + "'");
                    }
                    break block13;
                }
                catch (BadCredentialsException badCredentialsException) {
                    throw com.l7tech.server.identity.fed.b.b((Exception)((Object)badCredentialsException));
                }
            }
            federatedUser.setLogin(string3);
        }
        return federatedUser;
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[27];
                var3_1 = 0;
                var2_2 = "UVlb0D9UMz!1L#\u001cEz&~D?UQp6~_?\u0000Lk':\u000b,\u0006\u001f^6*N>\u0001Vq%~n#\u0001Vk;~M\"\u0007\u001fk*7Xm3Z{',J9\u0010[?\u000b:N#\u0001Vk;~{?\u001aIv&;Y\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0$6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fv1-^(\u0007\u001f|',_$\u0013V|#*NmR@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010?!Wzb\u001f_9\u0010Lk+0Lm0Qk+*Rm6Zm67M$\u0016^k'~B>UMz3+B?\u0010[3b<^9UQp6~[?\u0010Lz,*N)#&J}(;H9Uq~/;\u000b\u0004\u0011Zq67M$\u0010M?+-\u000b?\u0010Nj+,N)>6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?ULj 4N.\u0001\u001f|',_$\u0013V|#*Nm\u0006Vx,;YD!Wv1~B)\u0010Qk+*Rm\u0005Mp47O(\u0007\u001fv1~E\"\u0001\u001f|-0M$\u0012Jm':\u000b9\u001a\u001fl7.[\"\u0007K?\u0011\u001ff\u0001U\\m':N#\u0001V~.-\u0011!Wzb=N?\u0001Vy+=J9\u0010\u001f8#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u0010;^r'\u0017O(\u001bKv$7N?U\u0018@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010\u0003R\u0005?46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0?R\u001fh#-\u000b,\u001b\u001fGlk\u001btUlj 4N.\u0001q~/;\u000b/\u0000K?&7Om\u001bPkb3J9\u0016W?!;Y9\u001cYv!?_(RL?\u0006\u0010\u000bj?&~R\u000e~j>\u0006Zm67D#U\\p,*J$\u001bZ{b+E>\u0000Oo-,_(\u0011\u001fL7<A(\u0016K0\u00011E+\u001cMr#*B\"\u001brz66D)46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u001f&~R\u000e~J>\u0006Zm67D#U\u001fh#-\u000b>\u001cXq':\u000b/\f\u001f8\u001a;^r'~b)\u0010Qk+8B(\u0007\u001fY-,F,\u0001\u001fv1~%6Pj.:Ej\u0001\u001fi',B+\f\u001fl7<A(\u0016K?!;Y9\u001cYv!?_(U\u0018#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u001fR\u001fh#-\u000b#\u001aK?17L#\u0010[? '\u000b,\u001bF?+-X8\u0010M1\u0016U]j6~_%\u0010\u001fi#2^(UVlb0^!\u0019dR\u0013?56B.\u001d\u001fv1~^#\u0007Z|-9E$\u000fZ{b1Ym\u001bPkb*Y8\u0006Kz&~M\"\u0007\u001fl+9E$\u001bX?\u0011\u001ff\u0001UKp);E>UYp0~_%\u001cL?\u0004;O(\u0007^k':\u000b\u0004\u0011Zq67_4Uom-(B)\u0010M";
                var4_3 = "UVlb0D9UMz!1L#\u001cEz&~D?UQp6~_?\u0000Lk':\u000b,\u0006\u001f^6*N>\u0001Vq%~n#\u0001Vk;~M\"\u0007\u001fk*7Xm3Z{',J9\u0010[?\u000b:N#\u0001Vk;~{?\u001aIv&;Y\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0$6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fv1-^(\u0007\u001f|',_$\u0013V|#*NmR@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010?!Wzb\u001f_9\u0010Lk+0Lm0Qk+*Rm6Zm67M$\u0016^k'~B>UMz3+B?\u0010[3b<^9UQp6~[?\u0010Lz,*N)#&J}(;H9Uq~/;\u000b\u0004\u0011Zq67M$\u0010M?+-\u000b?\u0010Nj+,N)>6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?ULj 4N.\u0001\u001f|',_$\u0013V|#*Nm\u0006Vx,;YD!Wv1~B)\u0010Qk+*Rm\u0005Mp47O(\u0007\u001fv1~E\"\u0001\u001f|-0M$\u0012Jm':\u000b9\u001a\u001fl7.[\"\u0007K?\u0011\u001ff\u0001U\\m':N#\u0001V~.-\u0011!Wzb=N?\u0001Vy+=J9\u0010\u001f8#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u0010;^r'\u0017O(\u001bKv$7N?U\u0018@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010\u0003R\u0005?46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0?R\u001fh#-\u000b,\u001b\u001fGlk\u001btUlj 4N.\u0001q~/;\u000b/\u0000K?&7Om\u001bPkb3J9\u0016W?!;Y9\u001cYv!?_(RL?\u0006\u0010\u000bj?&~R\u000e~j>\u0006Zm67D#U\\p,*J$\u001bZ{b+E>\u0000Oo-,_(\u0011\u001fL7<A(\u0016K0\u00011E+\u001cMr#*B\"\u001brz66D)46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u001f&~R\u000e~J>\u0006Zm67D#U\u001fh#-\u000b>\u001cXq':\u000b/\f\u001f8\u001a;^r'~b)\u0010Qk+8B(\u0007\u001fY-,F,\u0001\u001fv1~%6Pj.:Ej\u0001\u001fi',B+\f\u001fl7<A(\u0016K?!;Y9\u001cYv!?_(U\u0018#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u001fR\u001fh#-\u000b#\u001aK?17L#\u0010[? '\u000b,\u001bF?+-X8\u0010M1\u0016U]j6~_%\u0010\u001fi#2^(UVlb0^!\u0019dR\u0013?56B.\u001d\u001fv1~^#\u0007Z|-9E$\u000fZ{b1Ym\u001bPkb*Y8\u0006Kz&~M\"\u0007\u001fl+9E$\u001bX?\u0011\u001ff\u0001UKp);E>UYp0~_%\u001cL?\u0004;O(\u0007^k':\u000b\u0004\u0011Zq67_4Uom-(B)\u0010M".length();
                var1_4 = 90;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 17;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = com.l7tech.server.identity.fed.b.b(v0, com.l7tech.server.identity.fed.b.b(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "\u0004\\p,\\h\u001c$xO\u0014\u0015f\u0001w{R\u0012\\.>\u0014rH\f\u0018gH#=[\t\u0012mO\u0003oH\u0013\bl\u000b\u0014xO\u0014\\l\u0001#oD@\u001af\u001dwnH\u0002\u0016l\f#=^\u0005\u000e}\u00061t^\u0001\blO$tZ\u000e\u0019{";
                    var4_3 = "\u0004\\p,\\h\u001c$xO\u0014\u0015f\u0001w{R\u0012\\.>\u0014rH\f\u0018gH#=[\t\u0012mO\u0003oH\u0013\bl\u000b\u0014xO\u0014\\l\u0001#oD@\u001af\u001dwnH\u0002\u0016l\f#=^\u0005\u000e}\u00061t^\u0001\blO$tZ\u000e\u0019{".length();
                    var1_4 = 20;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 51;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = com.l7tech.server.identity.fed.b.b(v0, com.l7tech.server.identity.fed.b.b(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        com.l7tech.server.identity.fed.b.b = var5;
        com.l7tech.server.identity.fed.b.a = Logger.getLogger(c.class.getName());
    }

    private static Exception b(Exception exception) {
        return exception;
    }

    private static char[] b(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x5C);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String b(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 100;
                    case 1 -> 46;
                    case 2 -> 14;
                    case 3 -> 83;
                    case 4 -> 79;
                    case 5 -> 58;
                    default -> 92;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}

