/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.gateway.common.audit.AssertionMessages
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.message.Message
 *  com.l7tech.message.MessageRole
 *  com.l7tech.policy.assertion.AssertionStatus
 *  com.l7tech.policy.assertion.PolicyAssertionException
 *  com.l7tech.policy.assertion.credential.LoginCredentials
 *  com.l7tech.policy.assertion.credential.wss.EncryptedUsernameTokenAssertion
 *  com.l7tech.policy.assertion.credential.wss.WssBasic
 *  com.l7tech.security.token.EncryptedElement
 *  com.l7tech.security.token.EncryptedKey
 *  com.l7tech.security.token.SecurityToken
 *  com.l7tech.security.token.SigningSecurityToken
 *  com.l7tech.security.token.UsernameToken
 *  com.l7tech.security.token.XmlSecurityToken
 *  com.l7tech.security.xml.SecurityTokenResolver
 *  com.l7tech.security.xml.processor.ProcessorResult
 *  com.l7tech.util.CausedIOException
 *  com.l7tech.util.Config
 *  org.springframework.context.ApplicationContext
 */
package com.l7tech.server.policy.assertion.credential.wss;

import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.message.Message;
import com.l7tech.message.MessageRole;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.policy.assertion.credential.wss.EncryptedUsernameTokenAssertion;
import com.l7tech.policy.assertion.credential.wss.WssBasic;
import com.l7tech.security.token.EncryptedElement;
import com.l7tech.security.token.EncryptedKey;
import com.l7tech.security.token.SecurityToken;
import com.l7tech.security.token.SigningSecurityToken;
import com.l7tech.security.token.UsernameToken;
import com.l7tech.security.token.XmlSecurityToken;
import com.l7tech.security.xml.SecurityTokenResolver;
import com.l7tech.security.xml.processor.ProcessorResult;
import com.l7tech.server.message.AuthenticationContext;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.AbstractMessageTargetableServerAssertion;
import com.l7tech.server.util.WSSecurityProcessorUtils;
import com.l7tech.util.CausedIOException;
import com.l7tech.util.Config;
import java.io.IOException;
import java.util.HashSet;
import java.util.Set;
import org.springframework.context.ApplicationContext;
import org.xml.sax.SAXException;

public class ServerEncryptedUsernameTokenAssertion
extends AbstractMessageTargetableServerAssertion<EncryptedUsernameTokenAssertion> {
    private final EncryptedUsernameTokenAssertion d;
    private final Config e;
    private final SecurityTokenResolver f;
    private final Set<String> g;
    private static final String[] h;

    public ServerEncryptedUsernameTokenAssertion(EncryptedUsernameTokenAssertion encryptedUsernameTokenAssertion, ApplicationContext applicationContext) {
        super(encryptedUsernameTokenAssertion);
        this.d = encryptedUsernameTokenAssertion;
        String[] stringArray = h;
        this.e = (Config)applicationContext.getBean(stringArray[5], Config.class);
        this.f = (SecurityTokenResolver)applicationContext.getBean(stringArray[6], SecurityTokenResolver.class);
        this.g = encryptedUsernameTokenAssertion.getXEncAlgorithmList() == null ? null : new HashSet(encryptedUsernameTokenAssertion.getXEncAlgorithmList());
    }

    @Override
    public AssertionStatus checkRequest(PolicyEnforcementContext policyEnforcementContext) throws IOException, PolicyAssertionException {
        try {
            if (!this.d.getRecipientContext().localRecipient()) {
                this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_BASIC_FOR_ANOTHER_RECIPIENT);
                return AssertionStatus.NONE;
            }
        }
        catch (IOException iOException) {
            throw ServerEncryptedUsernameTokenAssertion.a(iOException);
        }
        return super.checkRequest(policyEnforcementContext);
    }

    @Override
    protected AssertionStatus doCheckRequest(PolicyEnforcementContext policyEnforcementContext, Message message, String string, AuthenticationContext authenticationContext) throws IOException, PolicyAssertionException {
        XmlSecurityToken[] xmlSecurityTokenArray;
        ProcessorResult processorResult;
        block34: {
            block35: {
                block33: {
                    try {
                        if (!message.isSoap()) {
                            this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_BASIC_NOT_SOAP, string);
                            return AssertionStatus.NOT_APPLICABLE;
                        }
                    }
                    catch (IOException iOException) {
                        throw ServerEncryptedUsernameTokenAssertion.a(iOException);
                    }
                    try {
                        block32: {
                            try {
                                if (!this.isRequest() || this.e.getBooleanProperty(h[2], true)) break block32;
                            }
                            catch (SAXException sAXException) {
                                throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                            }
                            processorResult = message.getSecurityKnob().getProcessorResult();
                            message.getSecurityKnob().setNeedsSignatureConfirmations(true);
                            break block33;
                        }
                        processorResult = WSSecurityProcessorUtils.getWssResults(message, string, this.f, this.getAudit());
                        try {
                            if (message.getRelated(MessageRole.REQUEST) != null) {
                                message.getRelated(MessageRole.REQUEST).getSecurityKnob().setNeedsSignatureConfirmations(true);
                            }
                        }
                        catch (SAXException sAXException) {
                            throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                        }
                    }
                    catch (SAXException sAXException) {
                        String[] stringArray = h;
                        throw new CausedIOException(stringArray[3], (Throwable)sAXException);
                    }
                }
                try {
                    try {
                        if (processorResult != null) break block34;
                        this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_BASIC_NO_CREDENTIALS, string);
                        if (!this.isRequest()) break block35;
                    }
                    catch (SAXException sAXException) {
                        throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                    }
                    policyEnforcementContext.setAuthenticationMissing();
                    policyEnforcementContext.setRequestPolicyViolated();
                }
                catch (SAXException sAXException) {
                    throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                }
            }
            return AssertionStatus.AUTH_REQUIRED;
        }
        for (XmlSecurityToken xmlSecurityToken : xmlSecurityTokenArray = processorResult.getXmlSecurityTokens()) {
            LoginCredentials loginCredentials;
            UsernameToken usernameToken;
            block36: {
                if (!(xmlSecurityToken instanceof UsernameToken)) continue;
                usernameToken = (UsernameToken)xmlSecurityToken;
                try {
                    if (!this.a(processorResult, usernameToken)) {
                        this.logger.fine(h[0]);
                        continue;
                    }
                }
                catch (SAXException sAXException) {
                    throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                }
                loginCredentials = processorResult.getSigningTokens(usernameToken.asElement());
                try {
                    try {
                        if (loginCredentials != null && ((SigningSecurityToken[])loginCredentials).length >= 1) break block36;
                    }
                    catch (SAXException sAXException) {
                        throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                    }
                    this.logger.fine(h[4]);
                    continue;
                }
                catch (SAXException sAXException) {
                    throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                }
            }
            EncryptedKey encryptedKey = null;
            for (SigningSecurityToken signingSecurityToken : loginCredentials) {
                try {
                    if (!(signingSecurityToken instanceof EncryptedKey)) {
                        this.logger.fine(h[1]);
                        continue;
                    }
                }
                catch (SAXException sAXException) {
                    throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
                }
                encryptedKey = (EncryptedKey)signingSecurityToken;
            }
            try {
                if (encryptedKey == null) {
                    this.logger.fine(h[7]);
                    continue;
                }
            }
            catch (SAXException sAXException) {
                throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
            }
            LoginCredentials loginCredentials2 = LoginCredentials.makeLoginCredentials((SecurityToken)usernameToken, WssBasic.class, (SecurityToken[])new SecurityToken[]{encryptedKey});
            authenticationContext.addCredentials(loginCredentials2);
            return AssertionStatus.NONE;
        }
        try {
            this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_BASIC_CANNOT_FIND_ENC_CREDENTIALS, string);
            if (this.isRequest()) {
                policyEnforcementContext.setRequestPolicyViolated();
            }
        }
        catch (SAXException sAXException) {
            throw ServerEncryptedUsernameTokenAssertion.a(sAXException);
        }
        return AssertionStatus.AUTH_REQUIRED;
    }

    private boolean a(ProcessorResult processorResult, UsernameToken usernameToken) {
        for (EncryptedElement encryptedElement : processorResult.getElementsThatWereEncrypted()) {
            if (encryptedElement.asElement() != usernameToken.asElement() || this.g != null && !this.g.contains(encryptedElement.getAlgorithm())) continue;
            return true;
        }
        return false;
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[8];
                var3_1 = 0;
                var2_2 = "VRTL\u0011nKx\u0015oP\u0006uK~X_w\fl@q\u0015NK\u0002s\u0005hTI\u0003\rhQ?EHL\u0013bWsL\u001aF\rdWfENF\u0007AVRTL\u0011nKx\u0015oP\u0006uK~X_w\fl@q\u0015IJ\u0004iLqR\u001aW\fl@q\u0015NK\u0002s\u0005hTI\u0003\rhQ?TT\u0003&iFmLJW\u0006cnzL-hFI\r\u0013uJ|PIP\fu\u000bz[[A\u000fbazS_Q\u0011bAMPKV\u0006tQOGU@\u0006tVv[].MPKV\u0006tQ?Q_@\u000ffWzQ\u001aB\u0010'}Ry\u001aA\u0016s\u0005vF\u001aM\fs\u0005hPVONaJmX_G*VRTL\u0011nKx\u0015oP\u0006uK~X_w\fl@q\u0015NK\u0002s\u0005hTI\u0003\rhQ?FSD\rbA\flPHU\u0006ufp[\\J\u0004";
                var4_3 = "VRTL\u0011nKx\u0015oP\u0006uK~X_w\fl@q\u0015NK\u0002s\u0005hTI\u0003\rhQ?EHL\u0013bWsL\u001aF\rdWfENF\u0007AVRTL\u0011nKx\u0015oP\u0006uK~X_w\fl@q\u0015IJ\u0004iLqR\u001aW\fl@q\u0015NK\u0002s\u0005hTI\u0003\rhQ?TT\u0003&iFmLJW\u0006cnzL-hFI\r\u0013uJ|PIP\fu\u000bz[[A\u000fbazS_Q\u0011bAMPKV\u0006tQOGU@\u0006tVv[].MPKV\u0006tQ?Q_@\u000ffWzQ\u001aB\u0010'}Ry\u001aA\u0016s\u0005vF\u001aM\fs\u0005hPVONaJmX_G*VRTL\u0011nKx\u0015oP\u0006uK~X_w\fl@q\u0015NK\u0002s\u0005hTI\u0003\rhQ?FSD\rbA\flPHU\u0006ufp[\\J\u0004".length();
                var1_4 = 54;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 98;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerEncryptedUsernameTokenAssertion.c(v0, ServerEncryptedUsernameTokenAssertion.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "zFO@\u0007xGpwC^\u0010\u007falPCY\u0003tA=@DBZ\u0007x]n\u0003yF\u0010c]hNIa\u001azVg\u0003X]\u0014e\u0013~B_\u0015\u001b~G)PER\u001btW)AU\u0015\u0014\u007f\u0013LMOG\faGlGgP\f";
                    var4_3 = "zFO@\u0007xGpwC^\u0010\u007falPCY\u0003tA=@DBZ\u0007x]n\u0003yF\u0010c]hNIa\u001azVg\u0003X]\u0014e\u0013~B_\u0015\u001b~G)PER\u001btW)AU\u0015\u0014\u007f\u0013LMOG\faGlGgP\f".length();
                    var1_4 = 21;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 116;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerEncryptedUsernameTokenAssertion.c(v0, ServerEncryptedUsernameTokenAssertion.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        ServerEncryptedUsernameTokenAssertion.h = var5;
    }

    private static char[] a(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x47);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String c(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 125;
                    case 1 -> 87;
                    case 2 -> 88;
                    case 3 -> 65;
                    case 4 -> 1;
                    case 5 -> 101;
                    default -> 71;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}