/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.gateway.common.audit.SystemMessages
 *  com.l7tech.identity.AuthenticationException
 *  com.l7tech.identity.BadCredentialsException
 *  com.l7tech.identity.IdentityProviderConfig
 *  com.l7tech.identity.InvalidIdProviderCfgException
 *  com.l7tech.identity.ValidationException
 *  com.l7tech.identity.cert.ClientCertManager$VetoSave
 *  com.l7tech.identity.ldap.BindOnlyLdapIdentityProviderConfig
 *  com.l7tech.identity.ldap.BindOnlyLdapUser
 *  com.l7tech.identity.ldap.LdapUrlBasedIdentityProviderConfig
 *  com.l7tech.objectmodel.EntityHeader
 *  com.l7tech.objectmodel.EntityHeaderSet
 *  com.l7tech.objectmodel.EntityType
 *  com.l7tech.objectmodel.FindException
 *  com.l7tech.objectmodel.IdentityHeader
 *  com.l7tech.policy.assertion.credential.CredentialFormat
 *  com.l7tech.policy.assertion.credential.LoginCredentials
 *  com.l7tech.policy.assertion.credential.http.HttpBasic
 *  com.l7tech.security.token.SecurityToken
 *  com.l7tech.security.token.http.HttpBasicToken
 *  com.l7tech.util.ExceptionUtils
 *  com.l7tech.util.HexUtils
 *  org.jetbrains.annotations.Nullable
 *  org.springframework.beans.BeansException
 *  org.springframework.context.ApplicationContext
 *  org.springframework.context.ApplicationContextAware
 */
package com.l7tech.server.identity.ldap;

import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.gateway.common.audit.SystemMessages;
import com.l7tech.identity.AuthenticationException;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.IdentityProviderConfig;
import com.l7tech.identity.InvalidIdProviderCfgException;
import com.l7tech.identity.ValidationException;
import com.l7tech.identity.cert.ClientCertManager;
import com.l7tech.identity.ldap.BindOnlyLdapIdentityProviderConfig;
import com.l7tech.identity.ldap.BindOnlyLdapUser;
import com.l7tech.identity.ldap.LdapUrlBasedIdentityProviderConfig;
import com.l7tech.objectmodel.EntityHeader;
import com.l7tech.objectmodel.EntityHeaderSet;
import com.l7tech.objectmodel.EntityType;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.IdentityHeader;
import com.l7tech.policy.assertion.credential.CredentialFormat;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.policy.assertion.credential.http.HttpBasic;
import com.l7tech.security.token.SecurityToken;
import com.l7tech.security.token.http.HttpBasicToken;
import com.l7tech.server.Lifecycle;
import com.l7tech.server.LifecycleException;
import com.l7tech.server.ServerConfig;
import com.l7tech.server.audit.Auditor;
import com.l7tech.server.identity.AuthenticationResult;
import com.l7tech.server.identity.ConfigurableIdentityProvider;
import com.l7tech.server.identity.ldap.BindOnlyLdapGroupManager;
import com.l7tech.server.identity.ldap.BindOnlyLdapIdentityProvider;
import com.l7tech.server.identity.ldap.BindOnlyLdapUserManager;
import com.l7tech.server.identity.ldap.LdapClassLoaderRequired;
import com.l7tech.server.identity.ldap.LdapUrlProviderImpl;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.HexUtils;
import java.math.BigInteger;
import java.security.cert.X509Certificate;
import java.util.Arrays;
import java.util.EnumSet;
import java.util.logging.Logger;
import javax.security.auth.x500.X500Principal;
import org.jetbrains.annotations.Nullable;
import org.springframework.beans.BeansException;
import org.springframework.context.ApplicationContext;
import org.springframework.context.ApplicationContextAware;

@LdapClassLoaderRequired
public class BindOnlyLdapIdentityProviderImpl
implements BindOnlyLdapIdentityProvider,
ApplicationContextAware,
ConfigurableIdentityProvider,
Lifecycle {
    private static final Logger a;
    private Auditor b;
    private BindOnlyLdapIdentityProviderConfig c;
    private ServerConfig d;
    private BindOnlyLdapUserManager e;
    private BindOnlyLdapGroupManager f;
    private LdapUrlProviderImpl g;
    private static final String[] h;

    public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
        this.b = new Auditor(this, applicationContext, a);
    }

    @Override
    public AuthenticationResult authenticate(LoginCredentials loginCredentials) throws AuthenticationException {
        return this.authenticate(loginCredentials, false);
    }

    /*
     * Enabled aggressive block sorting
     * Enabled unnecessary exception pruning
     * Enabled aggressive exception aggregation
     */
    @Override
    public AuthenticationResult authenticate(LoginCredentials loginCredentials, boolean bl2) throws AuthenticationException {
        CredentialFormat credentialFormat = loginCredentials.getFormat();
        try {
            if (credentialFormat == CredentialFormat.CLEARTEXT) {
                try {
                    return this.e.authenticatePasswordCredentials(loginCredentials);
                }
                catch (BindOnlyLdapUserManager.BadUsernamePatternException badUsernamePatternException) {
                    String[] stringArray = new String[1];
                    String[] stringArray2 = h;
                    stringArray[0] = stringArray2[3];
                    this.b.logAndAudit((AuditDetailMessage)SystemMessages.EXCEPTION_INFO_WITH_MORE_INFO, stringArray);
                    throw new BadCredentialsException(stringArray2[8]);
                }
            }
        }
        catch (AuthenticationException authenticationException) {
            throw BindOnlyLdapIdentityProviderImpl.a((Exception)((Object)authenticationException));
        }
        String string = h[2] + String.valueOf(loginCredentials.getFormat());
        this.b.logAndAudit((AuditDetailMessage)SystemMessages.EXCEPTION_WARNING_WITH_MORE_INFO, string);
        throw new AuthenticationException(string);
    }

    @Override
    public BindOnlyLdapUser findUserByCredential(LoginCredentials loginCredentials) throws FindException {
        return null;
    }

    @Override
    public X509Certificate findCertByIssuerAndSerial(X500Principal x500Principal, BigInteger bigInteger) throws FindException {
        return null;
    }

    @Override
    public X509Certificate findCertBySki(String string) throws FindException {
        return null;
    }

    @Override
    public X509Certificate findCertByThumbprintSHA1(String string) throws FindException {
        return null;
    }

    @Override
    public X509Certificate findCertBySubjectDn(X500Principal x500Principal) throws FindException {
        return null;
    }

    @Override
    public void setIdentityProviderConfig(IdentityProviderConfig identityProviderConfig) throws InvalidIdProviderCfgException {
        this.c = (BindOnlyLdapIdentityProviderConfig)identityProviderConfig;
        this.e.configure(this);
        this.g = new LdapUrlProviderImpl((LdapUrlBasedIdentityProviderConfig)this.c, this.d);
    }

    public IdentityProviderConfig getConfig() {
        return this.c;
    }

    public BindOnlyLdapUserManager getUserManager() {
        return this.e;
    }

    public BindOnlyLdapGroupManager getGroupManager() {
        return this.f;
    }

    /*
     * WARNING - Removed back jump from a try to a catch block - possible behaviour change.
     * Unable to fully structure code
     * Enabled aggressive block sorting
     * Enabled unnecessary exception pruning
     * Enabled aggressive exception aggregation
     */
    public EntityHeaderSet<IdentityHeader> search(EntityType[] var1_1, String var2_2) throws FindException {
        var3_3 = EnumSet.noneOf(EntityType.class);
        var3_3.addAll(Arrays.asList(var1_1));
        var4_4 = new EntityHeaderSet();
        if (var2_2 == null) ** GOTO lbl13
        var5_5 = var2_2.trim().replace("*", "");
        try {
            if (var5_5.length() <= 0) ** GOTO lbl13
            ** GOTO lbl16
        }
        catch (BindOnlyLdapUserManager.BadUsernamePatternException v0) {
            try {
                throw BindOnlyLdapIdentityProviderImpl.a(v0);
lbl13:
                // 3 sources

                return var4_4;
lbl16:
                // 2 sources

                if (!var3_3.contains(EntityType.USER)) ** GOTO lbl13
            }
            catch (FindException v1) {
                throw BindOnlyLdapIdentityProviderImpl.a((Exception)v1);
            }
            {
                try {}
                catch (BindOnlyLdapUserManager.BadUsernamePatternException var6_6) {
                    var7_7 = BindOnlyLdapIdentityProviderImpl.h;
                    throw new FindException(var7_7[0] + ExceptionUtils.getMessage((Throwable)var6_6));
                }
            }
        }
        this.e.makeDn(var5_5);
        var4_4.add((EntityHeader)new IdentityHeader(this.c.getGoid(), var5_5, EntityType.USER, var5_5, BindOnlyLdapIdentityProviderImpl.h[4] + var5_5 + "\"", var5_5, null));
        return var4_4;
    }

    @Override
    public String getLastWorkingLdapUrl() {
        return this.g.getLastWorkingLdapUrl();
    }

    @Override
    public String markCurrentUrlFailureAndGetFirstAvailableOne(@Nullable String string) {
        return this.g.markCurrentUrlFailureAndGetFirstAvailableOne(string);
    }

    public String getAuthRealm() {
        return HexUtils.REALM;
    }

    public void test(boolean bl2, String string, char[] cArray) throws InvalidIdProviderCfgException {
        try {
            if (bl2) {
                return;
            }
        }
        catch (BadCredentialsException badCredentialsException) {
            throw BindOnlyLdapIdentityProviderImpl.a((Exception)((Object)badCredentialsException));
        }
        try {
            if (string == null) {
                throw new InvalidIdProviderCfgException(h[6]);
            }
        }
        catch (BadCredentialsException badCredentialsException) {
            throw BindOnlyLdapIdentityProviderImpl.a((Exception)((Object)badCredentialsException));
        }
        try {
            if (cArray == null) {
                throw new InvalidIdProviderCfgException(h[10]);
            }
        }
        catch (BadCredentialsException badCredentialsException) {
            throw BindOnlyLdapIdentityProviderImpl.a((Exception)((Object)badCredentialsException));
        }
        try {
            this.getUserManager().authenticatePasswordCredentials(LoginCredentials.makeLoginCredentials((SecurityToken)new HttpBasicToken(string, cArray), HttpBasic.class));
        }
        catch (BadCredentialsException badCredentialsException) {
            String[] stringArray = h;
            throw new InvalidIdProviderCfgException(stringArray[7] + ExceptionUtils.getMessage((Throwable)badCredentialsException), (Throwable)badCredentialsException);
        }
        catch (BindOnlyLdapUserManager.BadUsernamePatternException badUsernamePatternException) {
            throw new InvalidIdProviderCfgException(h[9] + ExceptionUtils.getMessage((Throwable)badUsernamePatternException));
        }
    }

    public void preSaveClientCert(BindOnlyLdapUser bindOnlyLdapUser, X509Certificate[] x509CertificateArray) throws ClientCertManager.VetoSave {
        throw new ClientCertManager.VetoSave(h[5]);
    }

    public void setUserManager(BindOnlyLdapUserManager bindOnlyLdapUserManager) {
        this.e = bindOnlyLdapUserManager;
    }

    public void setGroupManager(BindOnlyLdapGroupManager bindOnlyLdapGroupManager) {
        this.f = bindOnlyLdapGroupManager;
    }

    public void validate(BindOnlyLdapUser bindOnlyLdapUser) throws ValidationException {
        throw new ValidationException(h[1]);
    }

    public boolean hasClientCert(String string) throws AuthenticationException {
        return false;
    }

    @Override
    public void start() throws LifecycleException {
    }

    @Override
    public void stop() throws LifecycleException {
    }

    public void setServerConfig(ServerConfig serverConfig) {
        this.d = serverConfig;
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[11];
                var3_1 = 0;
                var2_2 = "xL`\u0016~BNYM!\u0017`B\u000fYG!\u0007fR\f\rWr\u0011`\u001dN+{Cm\u001dvF\u001aDMoT|H\u001a\rQt\u0004bH\u001cYGeTtH\u001c\r@h\u001av\n\u0001CNxT^c/}SlVu\u0011\u007fW\u001a\rVnTsR\u001aEGo\u0000{D\u000fYG!\u0001aN\u0000J\u0002t\u001aaR\u001e]Ms\u0000wCNNPd\u0010wI\u001aDCmTf^\u001eH\u0002n\u001a2t\u0007@Rm\u00112k*lr!\u0004`H\u0018DFd\u0006(\u0007OxQd\u0006|F\u0003H\u0002b\u001b|S\u000fDLrTqO\u000f_Cb\u0000wU\u001d\rFh\u0007sK\u0002BUd\u00102E\u0017\rAt\u0006`B\u0000Y\u0002R\u001d\u007fW\u0002H\u0002M0SwNXQd\u0006|F\u0003H\u0002q\u0015fS\u000b_L\u0013yGl\u0004~F\u001aH\u0002t\u0007wU\u0000LOdT01kG`\u0000gU\u000b\rLn\u00002T\u001b]Rn\u0006fB\n\rDn\u00062E\u0007CF,\u001b|K\u0017\rnE5B\u0007\u001e_Mw\u001dvB\u001cIl\u0002u\u0011aSNXQd\u0006|F\u0003H\u0002l\u0001aSNOG!\u0004`H\u0018DFd\u00102N\u0000\rMs\u0010wUNYM!\u0000wT\u001a\rC!'{J\u001eAG!8Vf>\rRs\u001bdN\nHP/)yGr\u00002D\u001cHFd\u001afN\u000fAQ!\u0012sN\u0002HF!\u0000}\u0007\u000fXVi\u0011|S\u0007NCu\u0011(\u0007 NPd\u0010wI\u001aDCm\u00072C\u0007I\u0002o\u001bf\u0007\u000fXVi\u0011|S\u0007NCu\u0011";
                var4_3 = "xL`\u0016~BNYM!\u0017`B\u000fYG!\u0007fR\f\rWr\u0011`\u001dN+{Cm\u001dvF\u001aDMoT|H\u001a\rQt\u0004bH\u001cYGeTtH\u001c\r@h\u001av\n\u0001CNxT^c/}SlVu\u0011\u007fW\u001a\rVnTsR\u001aEGo\u0000{D\u000fYG!\u0001aN\u0000J\u0002t\u001aaR\u001e]Ms\u0000wCNNPd\u0010wI\u001aDCmTf^\u001eH\u0002n\u001a2t\u0007@Rm\u00112k*lr!\u0004`H\u0018DFd\u0006(\u0007OxQd\u0006|F\u0003H\u0002b\u001b|S\u000fDLrTqO\u000f_Cb\u0000wU\u001d\rFh\u0007sK\u0002BUd\u00102E\u0017\rAt\u0006`B\u0000Y\u0002R\u001d\u007fW\u0002H\u0002M0SwNXQd\u0006|F\u0003H\u0002q\u0015fS\u000b_L\u0013yGl\u0004~F\u001aH\u0002t\u0007wU\u0000LOdT01kG`\u0000gU\u000b\rLn\u00002T\u001b]Rn\u0006fB\n\rDn\u00062E\u0007CF,\u001b|K\u0017\rnE5B\u0007\u001e_Mw\u001dvB\u001cIl\u0002u\u0011aSNXQd\u0006|F\u0003H\u0002l\u0001aSNOG!\u0004`H\u0018DFd\u00102N\u0000\rMs\u0010wUNYM!\u0000wT\u001a\rC!'{J\u001eAG!8Vf>\rRs\u001bdN\nHP/)yGr\u00002D\u001cHFd\u001afN\u000fAQ!\u0012sN\u0002HF!\u0000}\u0007\u000fXVi\u0011|S\u0007NCu\u0011(\u0007 NPd\u0010wI\u001aDCm\u00072C\u0007I\u0002o\u001bf\u0007\u000fXVi\u0011|S\u0007NCu\u0011".length();
                var1_4 = 28;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 86;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = BindOnlyLdapIdentityProviderImpl.a(v0, BindOnlyLdapIdentityProviderImpl.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "\u0016(\u001do]+s')\u000bu\t!`.>N}\u001c!m')No\u0012h`79\u0006~\u0013<h!,\u001a~GhI\u0003m\u001a~\u000e<!2,\u001dh\n's&m\u0003n\u000e<! (Nk\u000f'w+)\u000b\u007f]!ob\"\u001c\u007f\u0018:!6\"No\u0018;ub,NH\u0014%q.(NW9\tQb=\u001ct\u000b!e'?@";
                    var4_3 = "\u0016(\u001do]+s')\u000bu\t!`.>N}\u001c!m')No\u0012h`79\u0006~\u0013<h!,\u001a~GhI\u0003m\u001a~\u000e<!2,\u001dh\n's&m\u0003n\u000e<! (Nk\u000f'w+)\u000b\u007f]!ob\"\u001c\u007f\u0018:!6\"No\u0018;ub,NH\u0014%q.(NW9\tQb=\u001ct\u000b!e'?@".length();
                    var1_4 = 41;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 57;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = BindOnlyLdapIdentityProviderImpl.a(v0, BindOnlyLdapIdentityProviderImpl.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        BindOnlyLdapIdentityProviderImpl.h = var5;
        BindOnlyLdapIdentityProviderImpl.a = Logger.getLogger(BindOnlyLdapIdentityProviderImpl.class.getName());
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    private static char[] a(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x38);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String a(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 123;
                    case 1 -> 116;
                    case 2 -> 87;
                    case 3 -> 34;
                    case 4 -> 68;
                    case 5 -> 113;
                    default -> 56;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}